Account-Recovery - 1

github: npm extends recovery-code security holds to all accounts

npm now applies a 72-hour security hold to any account after a successful recovery-code sign-in. The hold was previously limited to high-impact accounts.