Transfer of ownership can be done "unofficially" in many ways though, for instance adding a contributor to the organization which controls the package. Requirin

Transfer of ownership can be done "unofficially" in many ways though, for instance adding a contributor to the organization which controls the package. Requiring a major bump could be problematic in many cases (I'm thinking, @microsoft adding a member to their team would require a major for all their packages). And one can always sell their entire npm account, and no-one would notice.