GitHub previews an npm firewall that cannot stop packages routed around it
GitHub's October 20th-dated changelog entry, published October 21st, details a free public preview for GitHub Enterprise Cloud customers. The firewall applies policy checks to npm traffic routed through it; general availability will use metered-usage billing.
By Ryan Merket · Published
Primary source: GitHub Changelog
Why it matters
Package Firewall gives enterprise administrators a point to govern npm installs before packages reach machines holding source code and credentials. npm-only support and future metered pricing constrain the initial offer.
GitHub opened its Package Firewall to GitHub Enterprise Cloud customers in a changelog entry dated October 20th and published October 21st. The firewall routes npm metadata requests and downloads through a policy layer before dependencies reach build hosts, developer workstations or coding agents. The preview is free; GitHub says it plans metered pricing when the service reaches general availability, without giving a date or numerical rates.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.