Function command_timeout 

pub fn command_timeout(secs: u64) -> Duration

The Duration form of a stored command_timeout_secs, floored at one second.

devp config set refuses 0, but the registry is a JSON file anyone can edit, and a zero that gets in does not mean “no timeout” — it kills every package-manager command the instant it starts, which quietly turns every repository into “lockfile could not be verified” and prunes nothing. Every place that turns the setting into a Duration goes through here.