Bytesafe (https://bytesafe.dev). Pure Dependency Firewall, not a package host, with usage based pricing.