[detaro]

> Seems like npm might want to review the policy that allows stuff like that to happen.

That's one of the things the post mentions as what they are doing.