Someone"? Why don't public package managers like PyPI & npm require package owners to publish their real names and verify their identify, similar to WHOIS? If

Someone"? Why don't public package managers like PyPI & npm require package owners to publish their real names and verify their identify, similar to WHOIS? If you want a curated Python there’s Anaconda and ActiveState.