---
title: "Node Weekly Issue 628: June 11, 2026"
url: https://daily.dev/posts/node-weekly-issue-628-june-11-2026-g6wf3gib6
source_url: https://nodeweekly.com/issues/628
type: article
source: "Node Weekly"
published: 2026-06-11T12:18:34.068Z
updated: 2026-06-11T12:18:56.236Z
tags: ["security", "javascript", "nodejs", "npm"]
reading_time: 3
upvotes: 6
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Node Weekly Issue 628: June 11, 2026

**[Node Weekly](https://daily.dev/sources/ndwkly)** · 3 min read · 6 upvotes · 0 comments

## Summary

Node Weekly issue 628 covers major npm v12 security changes: install scripts (preinstall, install, postinstall) will no longer run by default, and git/remote URL resolution will be disabled unless explicitly allowed. npm 11.16.0 is available now to preview what v12 will block. Other highlights include upcoming Node.js security releases for v22/24/26 (HIGH severity), Drizzle ORM being blocked from publishing due to npm's 100MB metadata limit, and several library releases including Commander.js 15.0 (now ESM-only), Cucumber.js 13.0 (parallel runtime rebuilt on worker threads), and Kanel 4.0 (TypeScript types from Postgres).

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://nodeweekly.com/issues/628>

## Similar posts on daily.dev

- [Node Weekly Issue 618: April 2, 2026](https://daily.dev/posts/node-weekly-issue-618-april-2-2026-7bwxqpeg8) · Node Weekly · 4 upvotes · 0 comments
- [Node Weekly Issue 619: April 9, 2026](https://daily.dev/posts/node-weekly-issue-619-april-9-2026-yxwkczqid) · Node Weekly · 0 upvotes · 0 comments
- [Node Weekly Issue 624: May 14, 2026](https://daily.dev/posts/node-weekly-issue-624-may-14-2026-gtg587gyk) · Node Weekly · 9 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#javascript](https://daily.dev/tags/javascript), [#nodejs](https://daily.dev/tags/nodejs), [#npm](https://daily.dev/tags/npm)

[View this post on daily.dev](https://daily.dev/posts/node-weekly-issue-628-june-11-2026-g6wf3gib6)