TIL that NPM is a subsidiary of GitHub, making this indeed Microsoft's responsibility.