What is GitHub Package Firewall?

Most software products include third-party libraries and components, which together form a software supply chain. That creates a quiet risk: a seemingly minor component can be used to inject malicious code into the larger software that depends on it. The GitHub package firewall sits between an organization's computers and build systems (its endpoints) and package registries, the online stores that tools download libraries from. It checks package downloads against policies such as minimum package age and malware advisories, and blocks downloads that fail them. The maker describes it as protecting dependency installations in CI builds, AI agent sessions and local development.

Written from primary sources and reference pages, and checked against them by an independent AI fact-checker. Drafted with AI assistance.