npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk

Summary

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install behaviors that used to run automatically before have been made opt-in - allowScripts defaults to off, meaning

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.