npm v12 makes dependency install scripts opt-in by default
npm v12 disables dependency lifecycle scripts, Git dependencies and remote-URL dependencies by default unless projects explicitly allow them; sensitive npm account and package changes can no longer use bypass-2FA granular access tokens.