Not sure about a service, but PMG enforces dependency cooldown and sandbox on package install. https://github.com/safedep/pmg