How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

npm v12 Ships With Install Scripts Off by Default, Begins Deprecating 2FA-Bypass Tokens

calendar_today July 8, 2026 person Sarah Gooding domain socket-dev

npm v12 is now generally available and tagged latest . The release turns on the install-time security defaults GitHub announced in June and starts winding down the most sensitive uses of 2FA-bypass granular access tokens (GATs). Both changes landed in today’s changelog .

open_in_new Read original post