GitHub's npm gave away a package name while it was in use, causing rethink

When it comes to ownership then details count

Last December, GitHub recognized that it hadn't revisited the dispute policy for npm packages since acquiring NPM in March, 2020, and in February this year, it suspended transfers of abandoned packages until it could come up with a system that's fair, consistent, and enforceable.…

from The Register