github: npm install-time security and GAT bypass2fa deprecation

· Sujith Quintelier · July 9, 2026, 6:53 a.m.
npm Version Updates Software Security github
Summary
This blog post briefly announces the general availability of npm v12, highlighting the new install-time security defaults and the deprecation of GAT bypass2fa. It references GitHub as the source of this update.
Read full post on quintelier.dev →
AUTHOR
Sponsored
Zulip logo Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →