May 23, 2026
npm now gates package publishing behind 2FA and adds install controls. Here's what developers need to configure to protect their supply chain.