Package Managers need global hooks

Package managers lack standardized global hook mechanisms to implement critical security controls like dependency verification and threat detection, forcing organizations to rely on fragile workarounds (shell wrappers, MITM proxies) or expensive third-party solutions. Implementing native global hooks across all package managers would enable consistent, infrastructure-agnostic security policies—such as dependency cooldowns and malware scanning—directly at the package management layer, reducing supply chain attack surface without vendor lock-in. This architectural shift has significant implications for IT security posture, developer productivity, and the democratization of security controls across organizations of all sizes.