npm v12 Locks Down Install Scripts
GitHub says npm v12 will stop dependency install scripts from running by default, reducing a major supply-chain code-execution path. Teams should review npm warnings now and approve only package scripts they truly trust.