Post #4261602

#NPM 12, released on 8 July 2026, ends arbitrary code execution from your dependencies at install time as a default. I consider it the most important thing to happen to the npm CLI in years. It does not make your dependencies trustworthy. It just stops them from running before you have decided whether they are. https://coderbyheart.com/npm-v12-stops-running-your-dependencies-code #NodeJS