Wraps your package manager, preventing installation of malicious packages. - SocketDev/sfw-free
alternative to gulp