Pausing software updates by X days old is a hack at best for specific distribution platforms (npm), not a general security recommendation.