funny how npm is the exact same model as maven, gopkg, cpan, pip, mix, cargo, and a million others.

but only npm started with a desire to monetize it (well, npm and docker hub) and in its desire for control didn't implement (or allowed the community to implement) basic higiene.