GitHub is ending automatic execution of npm install scripts to curb supply-chain attacks, starting with opt-in warnings in npm version 11.
