Ask HN: Should we talk about NPM Inc?

NPM registry holds almost all JavaScript packages distributed on the web and is also bundled with all official Node.js distributions. On surface it seems like a very good service but NPM is not truly open source and is not governed by an open government model.

NPM Inc has direct control of npm CLI which has led to a lot of frustration. npm CLI is not maintained properly and there are many bugs that the company refuses to fix, even when patches are submitted! This is all because, unlike Node.js itself they have the full control over this software and don't let the community make decisions for its future. All this frustration has led to birth of Yarn but Node.js is still being packaged with npm CLI which is a client for a FOR PROFIT company registry.

I remember when everyone was very concerned that Joyent having too much control over how Node.js is being developed and maintained. But for some reason the same logic does not apply to NPM Inc. Why is that?