GitLab's Dependency Firewall moves package policy in front of the build

GitLab has put Dependency Firewall into early access, a policy layer that blocks malicious, vulnerable or non-compliant packages before they reach a build. It shifts dependency checks from after install to before it, which is where credential-stealing packages do their damage.