I don't care either way; they're a private company. I love FOSS, but that does mean it's out there and you can't "take it back." I think the more interesting q

I don't care either way; they're a private company. I love FOSS, but that does mean it's out there and you can't "take it back." I think the more interesting question is: should NPM be liable for breakage? Should they have to pay for harm caused when this sort of thing happens? If people are paying for NPM's services, probably yes.