Supply-Chain Guardrails for NPM, pnpm, and Yarn | Not Hacker News!