“GitHub's NPM team has announced major security changes…” — CyberWire Daily at 6:40
“GitHub's NPM team has announced major security changes coming to NPM version 12, scheduled for release in July, aimed at reducing software supply chain attacks by shifting from implicit trust to explicit approval. The update will block three previously permitted behaviors by default, automatic execution of install…”
0:00
28:21