GitHub package firewall
GitHub has launched a new security feature called the package firewall, which allows repository owners to block the installation of malicious or vulnerable software packages from public registries. The tool integrates with existing dependency management workflows, offering customizable policies and real‑time alerts. GitHub says the firewall aims to reduce supply‑chain attacks and improve overall code safety for developers.