I agree. A good place to start might be requiring email verification to publish a package so that the registry is more likely to have valid email addresses for

I agree. A good place to start might be requiring email verification to publish a package so that the registry is more likely to have valid email addresses for maintainers.