Hacker News Reader

How are you going to distribute that message? Over NPM? No one is going to read that.

At best the community can stand up and fork which means they have to move ownership to some rando

Well first by communicating with NPM which could take an extraordinary action to break builds in the case where this is the least bad actions or by doing something logical and providing developers or company contacts to register to receive warnings ideally based on parsing actual dep versions and transmitting a message directly to the designated contact for a project.

Reply on news.ycombinator.com