Lance R. Vick claims to control the npm package version of this project

[fdenzer]

Source: https://mastodon.social/@lrvick/108274265429826806

Text:

I just noticed "foreach" on npm is controlled by a single maintainer.
I also noticed they let their personal email domain expire, so I bought it before someone else did.
I now control "foreach" on NPM, and the 36826 projects that depend on it.

Anyone still reading this? Comments? He might exaggerate: the npm package has 120 direct dependents.

[ljharb]

I’m pretty confident he doesn’t control it.

[rradar]

Who is control? Looks like abandondware to me anyway... 🚮

[ljharb]

The package creator seems to still be in control, unless there's actual evidence available to the contrary.

[manuelstofer]

I am in control of my NPM account. Since this is a very old repo it still mentioned a very old email address in the package.json file. This domain indeed expired but was not in use for my npm account for a long while. I just updated it: 644640c