which forces people to pay to register a domain just to publish packages...
I don't see a reason you couldn't use exisiting org/username from Github as namespace, can they squat on it? Not unless they steal it, in which case, Github should be notified.
In that case just yank all versions on Ygg2/stuff, and the any change update from then on references Org/stuff.
* rust-lang/semver
* steveklabnik/sevmer
* dtolnay/semver
That everyone didn't need to do "yank everything, change all cargo.tomls" is a huge advantage of not being tied to this.
If you want a more complex solution, then you would need a more complex index of ownership for cargo. E.g. alias or transfer ownership. It could be as simple as displaying "This crate is deprecated use org/crate instead". Or as complex as what crate is no longer valid.
One needs to know what exactly are cargo namespace requirements?
> Yes. For example, the semver package has lived in these places:
Sure, and squatters squatted over many crate name extorting bribes to release them.