I can't remember the names of any of these companies, but I know there's a healthy ecosystem of "endpoint management" businesses that sell essentially this service (among other things, like endpoint security monitoring/EDR).

The downside is then that you're running an ultra-privileged agent on each developer machine, with no particular guarantee that said agent is more secure than any given piece of software despite having way more power.

Edit: Remembered one: you could use something like Kolide[1], which more or less wraps osquery[2] to enumerate applications and their versions, and push out warnings asking users to upgrade.

[1]: https://www.kolide.com/

[2]: https://www.osquery.io/