A new enterprise security capability inspects package metadata and downloads before dependencies reach development environments.