It's not a problem - other people have the right to do what they wish with their own projects.

Not cloning your dependency tree or maintaining a local fork precisely so other maintainers' nonsense can't hurt you is the problem.

Link still won't work...