For those of us who are pissed that this is going down but need the status to get on with our lives:
nj48 is a known friendly who has identified himself to us. We're going to clarify later today.
nj48 is a known friendly who has identified himself to us. We're going to clarify later today.
Relying on the notion of a "known friendly" to protect packages and namespace does not strike me as a sound practice.
As others may have mentioned, publishing packages really should be fire and forget. If something bad goes out, a replacement should be sent out. And for the life of me, I don't understand why they did not go with the <author/package> scheme.
Also, relevant conversation here in yesterday's thread: https://news.ycombinator.com/item?id=11340510