Lance R. Vick claims to control the npm package version of this project

[fdenzer]

Source: https://mastodon.social/@lrvick/108274265429826806

Text:

I just noticed "foreach" on npm is controlled by a single maintainer. I also noticed they let their personal email domain expire, so I bought it before someone else did. I now control "foreach" on NPM, and the 36826 projects that depend on it.

Anyone still reading this? Comments? He might exaggerate: the npm package has 120 direct dependents.

[ljharb]

I’m pretty confident he doesn’t control it.

[rradar]

Who is control? Looks like abandondware to me anyway... :put_litter_in_its_place:

[ljharb]

The package creator seems to still be in control, unless there's actual evidence available to the contrary.

[manuelstofer]

I am in control of my NPM account. Since this is a very old repo it still mentioned a very old email address in the package.json file. This domain indeed expired but was not in use for my npm account for a long while. I just updated it: https://github.com/manuelstofer/foreach/commit/644640c4c84abc415140b00c3629084e982f2182