My colleague noticed yesterday that Cloudflare forked just-bash and published it as @cloudflare/shell. Now, this is completely in their rights to do. Just-bash is published under Apache 2.0 and everybody can do with the source as they please under the permissive license. That said, it is worth having a conversation as to whether you should fork an open-source project and when you should not.