dep-bouncerPedroLaRosa/claude-codeSupply-chain gate: vets npm/pnpm/yarn/bun installs against the registry before they run