
GitHub has announced that it’s introducing a new package firewall as a preview to block installation of suspicious npm packages during installation time.
“The firewall inspects both metadata requests and package downloads for signs of malicious activity, acting as an install-time policy gate,” GitHub said.
The feature, which currently supports only npm packages, is available in public preview…
Read the rest of the story at Read More
Source: The Hacker News
Leave a Comment