GitHub Launches npm Firewall to Block Malicious Packages Before Installation

GitHub announced a public preview of an install-time firewall for npm packages. The firewall inspects metadata requests and package downloads and can block packages according to organizational policies.