Nexus, Artifactory, and many others.

Security minded organisations don't allow cowboy installs into projects, the systems are configured to use internal repos and only IT validated packages got uploaded into them.

Still it might be of value to single devs.

https://github.com/artifact-keeper

It's currently my favourite package gate keeper - after a few years of self-built jank