preinstall, install, and postinstall scripts will no longer run by default in the next major release of npm. We should be preparing for this now. The change is to prevent some really serious security issues that are being actively exploited right now.
So if you are a node author that uses one or more of these scripts, you should look for alternative approaches.
Our next npm major version, v12, introduces security-related default changes to npm install. All these changes are available behind warnings in npm today on 11.16.0 or newer, so you can prepare before the upgrade. v12 is estimated to release in July 2026.
