Unfortunately there are a lot of unprofessional people in open source, and while I hate to stereotype, they are especially prevalent in the JavaScript community where it's typical to have hundreds to thousands of unknown dependencies in every project. What can be done? I don't know. (Before I'm labeled as entitled -- I spend a lot of time on open source, without the unprofessional behavior.)