TechThe Hacker Newsabout 2 hours ago
npm 12 Disables Install Scripts by Default
1 min read
GitHub released npm version 12 with install scripts disabled by default to reduce supply chain risk. Granular access tokens (GATs) designed to bypass two-factor authentication are deprecated. Users must run npm approve-scripts to review and approve trusted scripts. Changes take effect in early August 2026 and January 2027.
Level
Hype check
Tap to vote and see what everyone thinks.
