What are the solutions for managing vulnerabilities in packages (npm, docker, nuget, maven, etc)?

Question

npm

Probably many have heard about recent attacks through open source packages in NPM (for example , https://github.com/advisories/GHSA-97m3-w2cp-4xx6 ).
It is clear that in order to prevent such attacks, integrated dependency control solutions are needed in combination with a proprietary server that proxies package repositories. For example, Artifactory and Nexus can do such things in one form or another in their paid versions
. What other solutions are there for package quarantine? It is desirable that they cost some adequate money.

Answer 1

Any quarantine implies the presence of black or white lists.
And then the questions arise:

• Are there such lists?
  
• Who will finance them?
  
• Should they be trusted?