SebastianVerified account

true, but not having those for a while won't destroy millions of dollars. That can be mitigated over time.

It will easily burn million of dollars over time. Because no more security updates, no more anything. However it’s something that we could work with - true.

Here's an interesting question, what would the fallout be if npm, inc just straight up went mental and blocked the registry? Would companies such as Microsoft who have deeper legal pockets have a case against them for disruption, or what would happen?

I don’t think you’re going to get an answer for if any large tech co would step up, but I can guarantee you that employees of those large tech cos would.

I hope they would do the right thing and move the registry to the Foundation.

Honest question: Would you trust the Foundation to manage the registry at this point? Who has the time and energy to do this who isn't already on the verge of burnout?

Foundation can hire staff. This should be something run by people. It’d be a great use of money to. “Contribute money to running the registry” - it’s more similar to how Wikipedia runs, and I always donate there.

Are you saying the npm staff aren't people? That statement is confusing to me. What would be the point of donating money? Where would that go? It's not going to be anywhere near significant enough to run the registry, even on donated hardware.