Indeed it feels like this could be somewhat resolved by: - having npm contact the user - placing the package in a no-owner (and deprecated) state for a

Indeed it feels like this could be somewhat resolved by: - having npm contact the user - placing the package in a no-owner (and deprecated) state for a while From the instructions it seems that you can just contact npm and say "I emailed the owner 3 months ago, got no answer" and have it within a few hours. I'm also sad to see this process go because I used it at least once before.