Quick npm and pip Security Hardening Tweaks for Supply Chain Attacks

After recent supply-chain attacks, a practical npm and pip hardening pass: disable install scripts, delay fresh packages, require hashed Python installs, and keep exceptions explicit.