Maybe everyone else is too young to remember left-pad, but in the wake of left-pad everyone learned that one of the primary selling points of dedicated dependency repositories is that they can refuse to support "unpublishing" a dependency, which is not a guarantee that Github (or any other popular forge) makes.

There's no such thing as refusing to unpublish, not if you want to avoid prison time.

Package contains child porn, what now?

> Maybe everyone else is too young to remember left-pad

It wasn't that long ago...