npm v12 will introduce default security changes, disabling automatic script execution and restricting dependency resolution unless explicitly allowed, expected in July 2026.