GitHub’s npm package firewall can block brand-new versions before they install

GitHub has announced a package firewall that checks npm packages against an enterprise’s policy before they install, Help Net Security reports. It blocks known malware, critical vulnerabilities and brand-new versions, and developers can turn it on by pointing npm at the firewall, so checks run before a package reaches a laptop, a build or a coding agent.