GitHub's package firewall puts a policy check between your runners and npm

GitHub has opened a package firewall in public preview for Enterprise Cloud customers. It sits between endpoints and upstream registries and checks npm metadata requests and downloads against enterprise policy before anything installs.