I don't understand why. It's his code to break if he wants. But I guess when you use a social media service to host your code these are expected and normal results.
> I don't understand why
If he can break his code because he is the owner then shouldn't the same reasoning apply for Github suspending the account?. It is their website and their rules. Keep in mind Github owns npm and the author has published a malicious package to npm which has 20 millions of downloads so I'm not surprised.
This is a library, not standalone software. Breaking it means breaking the code of every software which uses that library.
> No warranty means he isn't liable for any behavior of the software at all.
Somebody should tell all those computer virus authors, all they had to do was not include a warranty, and they're untouchable!
The users of this software pull it, explicitly, voluntarily. The author says it doesn't serve any particular purpose, and in using it you understand that. the software itself did nothing malicious, it just stopped working. It's not the same thing as slapping a license on a computer virus and forcibly foisting it onto an unwitting victim. It's not naive legalese loophole workaround thinking. When you choose to use the software you agree to abide by the license, which includes no promise of utility whatsoever.
No, those other programs importing it is what breaks them. They do that themselves. Or does he have push access to all their repositories?
As another commenter said[0], this is malicious code and THAT is against the ToS of npm[1].
[0] https://news.ycombinator.com/item?id=29865977 [1] https://docs.npmjs.com/policies/open-source-terms#:~:text=Co...