Zero-config install-time supply-chain hardening for npm, pnpm, yarn, bun, cargo, mise, and uv.
Inspect and apply install-time cooldown (min-release-age / exclude-newer) for npm and uv.