Ask HN: Securing Pip and NPM package use?

Does anyone use a scanning utility to check packages for security issues? Like proxying the request through a utility that will provide some scanning before returning it.