"GitHub announced that npm v12, arriving in July 2026, will disable automatic execution of installation scripts. Git and remote dependencies will require explicit approval to install. The move aims to mitigate supply chain attacks where malicious code is executed during package installation."