Socket
The Socket for Open Source program offers a free Team plan to open source maintainers to protect their projects from supply chain attacks.