TX_642497· Engineering
npm v12 disables install scripts by default, requires allowScripts
npm v12 stops running preinstall, install, and postinstall scripts unless a package explicitly lists them in an allowScripts block. The open‑source npm‑script‑lens tool audits those scripts and surfaces their behavior for security review.