https://www.infoq.com InfoQ Package Managers News feed https://www.infoq.com/news/2026/08/npm-12-released/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Package+Managers-news <img src="https://res.infoq.com/news/2026/08/npm-12-released/en/headerimage/generatedHeaderImage-1786639332006.jpg"/><p>npm 12 introduces significant security-related changes, making certain installation behaviors opt-in. Notably, script allowances are now off by default, which requires explicit approval for running scripts, including implicit builds. The update also restricts non-registry sources and addresses community concerns about security risks from automatic script execution.</p> <i>By Daniel Curtis</i> Package Managers Node.js JavaScript TypeScript Web Development Development news Fri, 14 Aug 2026 06:39:00 GMT https://www.infoq.com/news/2026/08/npm-12-released/?utm_campaign=infoq_content&utm_source=infoq&utm_medium=feed&utm_term=Package+Managers-news Daniel Curtis 2026-08-14T06:39:00Z /news/2026/08/npm-12-released/en