3 ms·

I'm still sad the lesson learned from this was "don't allow people to unpublish packages" and not "you should vendor your dependencies".