Parenthetical is my point exactly. In practice, this would require them going to court themselves, which I don't expect them to do. There are also many legitim

Parenthetical is my point exactly. In practice, this would require them going to court themselves, which I don't expect them to do. There are also many legitimate and well intentioned possibilities that could lead copyrighted, unlicensed code onto NPM in which case they would have no right, regardless of their ToS, to redistributed it. I don't like the law, but it is what it is, and I wouldn't expect NPM to actually back up their new official policy if push came to shove, because as soon as they try to they lose safe harbor.