Sonatype has a manual review process as well before allowing new projects to deploy to Maven Central. [1][2] One step to mitigate things like this as well woul

Sonatype has a manual review process as well before allowing new projects to deploy to Maven Central. [1][2] One step to mitigate things like this as well would be to have some sort of "crowd-sourcing" command in the package manager program... like "npm flag coffe-script" or something like that to alert repository maintainers of possible issues. [1]: http://central.sonatype.org/pages/ossrh-guide.html http://central.sonatype.org/pages/ossrh-guide.html [2]: http://central.sonatype.org/articles/2014/Feb/27/why-the-wait/ http://central.sonatype.org/articles/2014/Feb/27/why-the-wai...