We have started working on PACKAGE.broker, a private Composer mirror designed for security and compliance.