GitHub’s npm package firewall can block brand-new versions before they install

GitHub's new npm package firewall blocks downloads based on malware advisories, vulnerabilities, attestations, install scripts, and package age.