Coding agents and CI runners install dependencies all day without a person watching, and that makes them an easy target for poisoned packages. GitHub’s answer is a package firewall that sits between those machines and the public npm registry, now in public preview for GitHub Enterprise Cloud customers.

The firewall inspects both metadata requests and package downloads and acts as what GitHub calls “an install-time policy gate.” Endpoints point at the firewall instead of going straight to upstream registries, and every request is checked against rules an administrator sets for the enterprise.…