[rovr138]

and if they get pissed, they can also remove the package and break thousands of code bases essentially instantly.

[AgentME]

NPM hasn't allowed unpublishing packages for years.