<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>MATRIX · Package Firewall</title>
  <link>https://derekwang2002.github.io/ai-intelligence/en/projects/github-package-firewall/</link>
  <description>Material changes in AI models, agents, engineering and infrastructure, with primary sources and recommendations.</description>
  <language>en</language>
  <lastBuildDate>Mon, 02 Nov 2026 16:56:00 GMT</lastBuildDate>
  <atom:link href="https://derekwang2002.github.io/ai-intelligence/en/feeds/projects/github-package-firewall.xml" rel="self" type="application/rss+xml"/>
  <item>
    <title>GitHub opens Package Firewall for npm supply-chain controls</title>
    <link>https://derekwang2002.github.io/ai-intelligence/en/events/ev-20261021-02/</link>
    <guid isPermaLink="false">ev-20261021-02-published</guid>
    <pubDate>Wed, 21 Oct 2026 15:58:23 GMT</pubDate>
    <category>New</category>
    <category>TRIAL</category>
    <description>&lt;p&gt;GitHub opened Package Firewall as a free public preview for Enterprise Cloud, including data-residency deployments. It proxies npm metadata and downloads for Actions, coding agents and developer machines, then applies cooldown, advisory and attestation-downgrade policies. GitHub says GA use will be metered like Actions; other ecosystems are not yet covered.&lt;/p&gt;&lt;p&gt;&lt;strong&gt;Why read: &lt;/strong&gt;Package Firewall moves npm dependency policy into an organization proxy, directly changing supply-chain boundaries for agents and CI.&lt;/p&gt;&lt;p&gt;Recommendation: TRIAL&lt;/p&gt;&lt;p&gt;Sources: &lt;a href=&quot;https://github.blog/changelog/2026-10-20-github-package-firewall-in-public-preview/&quot;&gt;GitHub Package Firewall public preview&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
