July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...