GitHub Puts a Firewall Between npm and the Agents That Install Packages
GitHub's new package firewall, in free public preview for Enterprise Cloud customers, checks npm metadata and downloads against admin policy before coding agents or CI runners can install them.