GitHub’s new package firewall can stop coding agents installing risky dependencies

T2Covered by 1 source · first reported by UploadVR / Road to VR / MIXED at 23 Oct, 18:08 UTC

GitHub has introduced a package firewall that can block dependency installations before a coding agent or automated build downloads them. The public preview is available to Enterprise Cloud customers, including those using data residency. The service currently supports npm packages only. It is free…