>Leaving this to third parties feels like a better option to me, personally. Seems too late to me. At this point the module/package was already added into the

>Leaving this to third parties feels like a better option to me, personally. Seems too late to me. At this point the module/package was already added into the ecosystem, it could potentially be some time (months?) before it is flagged by third party and removed.