[jaimex2]

Just make and use your own libraries in your own private repos that can't be switched out easily. Then just revoke access as needed.