https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
I'm not trying to be a troll... I'm genuinely curious, because I've used patch-package in the past. But if this package depends on postinstall, and postinstall stops working in npm 12 a month from now, users will have to do this manually.
It's quite possible I'm misreading this, since they do talk about --allow-scripts. But still.
https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453
I'm not trying to be a troll... I'm genuinely curious, because I've used patch-package in the past. But if this package depends on postinstall, and postinstall stops working in npm 12 a month from now, users will have to do this manually.
It's quite possible I'm misreading this, since they do talk about
--allow-scripts. But still.