In Azure DevOps Artifacts, is there a way to restrict the packages that are used in a feed from an upstream source?
For instance, we have a private feed with some custom built nuget packages. There are also some packages from nuget.org that we would still like to use, so we have that configured as an upstream source. However, we would only like to allow a subset of 'approved' nuget packages from nuget.org to maintain consistency over our code base. Is there a way to limit the upstream source to a list of 'approved' packages like this or is that not possible and all packages are allowed when using an upstream source?