Any package hosts that scan and include cooldowns by default that operate on a consumption model? The ones I have seen all charge a lot.

This one ? https://news.ycombinator.com/item?id=46909037

I use it, I don't cooldown, proper version pinning for me.

Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg

Socket.dev

Tell em Tom Zubiri sent ya (I don't get a commission, just good karma)

man, people are going to be sorely disappointed in what's free on the internet in a couple of years.

Agents and malware will eradicate all goodwill left.

Good by internet.

[flagged]