We could monitor NPM packages that we own/control. For instance stylelint-plugin-carbon-tokens. Another possibility is to move some of our starter components to a separate package and monitor the installs of those via npm.