diff --git a/.github/workflows/deploy-sophora-components.yml b/.github/workflows/deploy-sophora-components.yml
index a2a2b899..e07dbc44 100644
--- a/.github/workflows/deploy-sophora-components.yml
+++ b/.github/workflows/deploy-sophora-components.yml
@@ -25,6 +25,7 @@ jobs:
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
+      - run: npm install -g npm@12
       - name: Create .env file for production
         run: |
           touch .env
diff --git a/.github/workflows/deploy-storybook.yml b/.github/workflows/deploy-storybook.yml
index 3c2b7456..fd591080 100644
--- a/.github/workflows/deploy-storybook.yml
+++ b/.github/workflows/deploy-storybook.yml
@@ -19,6 +19,7 @@ jobs:
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
+      - run: npm install -g npm@12
       - name: Create .env file for production
         run: |
           touch .env
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 8cc7e556..cc140d87 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -22,6 +22,7 @@ jobs:
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.15.0
+      - run: npm install -g npm@12
       - run: npm ci --workspace=components --include=dev
       - run: npm run sync --workspace=components
       - run: npm ci --workspace=mock-sveltekit
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 651f4fdf..1929e527 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,6 +35,7 @@ jobs:
           node-version: 24
           registry-url: 'https://registry.npmjs.org/'
           package-manager-cache: false
+      - run: npm install -g npm@12
       - run: npm ci
       - run: npm audit signatures
       - name: Release
diff --git a/.github/workflows/test-storybook.yml b/.github/workflows/test-storybook.yml
index fee51dc4..4b7a2f14 100644
--- a/.github/workflows/test-storybook.yml
+++ b/.github/workflows/test-storybook.yml
@@ -23,6 +23,7 @@ jobs:
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24.15.0
+      - run: npm install -g npm@12
       - run: npm ci
       - run: npx playwright install --with-deps
       - run: npm run sync
diff --git a/.npmrc b/.npmrc
index 4fd02195..3cefa303 100644
--- a/.npmrc
+++ b/.npmrc
@@ -1 +1,2 @@
-engine-strict=true
\ No newline at end of file
+engine-strict=true
+strict-allow-scripts=true
diff --git a/components/package.json b/components/package.json
index 5a00b170..031ec6c0 100644
--- a/components/package.json
+++ b/components/package.json
@@ -5,6 +5,10 @@
 	"author": "SWR Data Lab",
 	"license": "UNLICENSED",
 	"type": "module",
+	"engines": {
+		"node": "24.x",
+		"npm": "12.x"
+	},
 	"keywords": [
 		"svelte"
 	],
diff --git a/mock-sophora/package.json b/mock-sophora/package.json
index 68d51cf9..a5e01654 100644
--- a/mock-sophora/package.json
+++ b/mock-sophora/package.json
@@ -3,6 +3,10 @@
   "version": "1.0.0",
   "description": "",
   "main": "index.js",
+  "engines": {
+    "node": "24.x",
+    "npm": "12.x"
+  },
   "scripts": {
     "build": "npx @11ty/eleventy",
     "start": "npx @11ty/eleventy --serve --quiet",
diff --git a/mock-sveltekit/package.json b/mock-sveltekit/package.json
index f6246c23..cb0c443b 100644
--- a/mock-sveltekit/package.json
+++ b/mock-sveltekit/package.json
@@ -3,6 +3,10 @@
 	"version": "0.0.1",
 	"private": true,
 	"type": "module",
+	"engines": {
+		"node": "24.x",
+		"npm": "12.x"
+	},
 	"scripts": {
 		"dev": "vite dev",
 		"start": "vite dev",
diff --git a/package.json b/package.json
index 98a52752..a147454b 100644
--- a/package.json
+++ b/package.json
@@ -6,6 +6,10 @@
 	"scripts": {},
 	"author": "",
 	"license": "UNLICENSED",
+	"engines": {
+		"node": "24.x",
+		"npm": "12.x"
+	},
 	"workspaces": [
 		"components",
 		"sophora-components",
@@ -16,5 +20,16 @@
 		"svelte-select": {
 			"svelte-floating-ui": "1.5.9"
 		}
+	},
+	"allowScripts": {
+		"@swc/core@1.15.41": false,
+		"svelte-preprocess@6.0.3": false,
+		"fsevents@2.3.3": false,
+		"fsevents@2.3.2": false,
+		"@parcel/watcher@2.5.6": false,
+		"esbuild@0.28.1": false,
+		"puppeteer@22.15.0": false,
+		"sharp@0.34.5": false,
+		"unrs-resolver@1.12.2": false
 	}
 }
diff --git a/sophora-components/package.json b/sophora-components/package.json
index ba23a175..7afaef5f 100644
--- a/sophora-components/package.json
+++ b/sophora-components/package.json
@@ -3,6 +3,10 @@
 	"private": true,
 	"version": "0.0.1",
 	"type": "module",
+	"engines": {
+		"node": "24.x",
+		"npm": "12.x"
+	},
 	"scripts": {
 		"dev": "vite",
 		"build": "vite build",