supply-chain
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
Medium
Summary
GitHub has released npm 12, significantly bolstering supply chain security by disabling install scripts and deprecating granular access tokens (GATs). These changes restrict automated script execution and limit the ability of GATs to bypass 2FA, reducing the risk of malicious code injection and unauthorized access.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data