Hacker News Reader

Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg

I use it, I don't cooldown, proper version pinning for me.

Socket.dev

Tell em Tom Zubiri sent ya (I don't get a commission, just good karma)

Bytesafe (https://bytesafe.dev). Pure Dependency Firewall, not a package host, with usage based pricing.

man, people are going to be sorely disappointed in what's free on the internet in a couple of years.

Agents and malware will eradicate all goodwill left.

Good by internet.