- Adds a 72‑hour temporary security hold after a successful recovery‑code sign‑in for all npm accounts.
- Extends the previous high‑impact‑only protection to every user.
Official GitHub changelog summary with source attribution, release tags, and community reactions.
Track this GitHub release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Every summary should remain traceable to the original changelog or release source.
Turn this GitHub release note into a weekly digest for the tools you actually use.
Create digest