dependency

Harden package manager configs against supply chain attacks

Details