Comment by jonchurch_

npm v12 released last month also defaults into blocking them by default