Spike: Investigate supply chain attack mitigation

[DanielSass]

What needs to be done

Investigate potentially updating our build process to protect against recent supply chain attacks

Why it needs to be done

Security etc

Acceptance Criteria

• Review the example from ecr-viewer and see how easily we can implement a similar behavior

Technical Notes

• Basically: introducing a cooldown period for new dependencies and not allowing automatic scripts to run during package install unless explicitly allowed.

Additional context