Any package hosts that scan and include cooldowns by default that operate on a consumption model? The ones I have seen all charge a lot.
Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg
Socket.dev
Tell em Tom Zubiri sent ya (I don't get a commission, just good karma)
man, people are going to be sorely disappointed in what's free on the internet in a couple of years.
Agents and malware will eradicate all goodwill left.
Good by internet.
[flagged]
This one ? https://news.ycombinator.com/item?id=46909037
I use it, I don't cooldown, proper version pinning for me.