No way to prevent this, says only CI platform (owned by the same company who owns the package manager) where this regularly happens.