GitHub pulls pin on NPM's auto-run scripts(theregister.com)

https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453