npm 12 Released: Install Scripts Off by Default as Registry Moves to Explicit Trust
InfoQ reports: npm 12 Released: Install Scripts Off by Default as Registry Moves to Explicit Trust. npm 12 introduces significant security-related changes,…
By Dillip Chowdary • Aug 14, 2026 • Source: InfoQ
What happened
InfoQ reports: npm 12 Released: Install Scripts Off by Default as Registry Moves to Explicit Trust. npm 12 introduces significant security-related changes, making certain installation behaviors opt-in. Notably, script allowances are now off by default, which requires explicit approval for running scripts, including implicit builds. The update also restricts non-registry sources and addresses community concerns about…
Advertisement
Tech Pulse Daily
Get tomorrow's pulse first
Join engineers who read Tech Pulse before stand-up. Free, weekday mornings.
The technical detail
Read the original coverage at InfoQ via the source link above for the complete details and primary quotes.
Market and competitive context
Cross-check release notes and official docs before changing production systems based on early reporting.
Advertisement
🔎 More interesting news
- Gemini 3.7 Flash is now available in GitHub Copilot
- 14,000 Trezor Customers Impacted by Data Breach at ShipMonk
- OpenAI introduces ‘Ultrafast,’ a new mode that makes GPT-5.6 Sol work at 14x the speed
- Writer says its new Palmyra X6 model cuts AI agent costs by 52% as token spending surges
- Today's full Tech Pulse briefing →