npm v12 is here. npm install now blocks lifecycle scripts, git, and remote-URL dependencies by default â a more secure baseline out of the box.
We're also starting to phase out npm 2FA-bypass tokens for account changes and direct publishing. Details đ