We have implemented a mitigation that disables npm audit requests by default during Functions and Sites builds.

This prevents npm installations from waiting on the currently degraded npm audit service and should restore normal dependency installation and build times.

We are currently observing degraded performance from the npm audit service due to an ongoing npmjs incident:

https://status.npmjs.org/incidents/l4f53bbr9200

As a result, users deploying Functions and Sites that use npm may experience significantly increased dependency installation and build times.

As a temporary workaround, npm users can disable audit checks using the --no-audit flag. Alternatively, switching to Bun or pnpm can avoid the affected npm audit service.

We are monitoring the situation and will provide updates as npmjs service performance recovers.