[stephenboyd]

That's actually the dependency that provides the trademark checking ability of OP's tool. And its first commit was two days ago, so it was probably also a response to the NPM kik-storm.