you showed to everyone that nobody should mess with you.
Well, that’s actually more of NPM’s fault than his. When your build system is so fragile that it breaks on the whims of developer of a 10 line package called “left-pad”, you are doing it totally wrong. Other packaging systems like maven and composer don’t delete existing package versions though the developer has unpublished the package from the repo.
To top it, they added his left-pad package back to the npm repo though he expressly said that he wanted it removed, what circus is this? Its so trivial that the NPM could have reinvented it themselves. All in all, the real blow in this whole fiasco is dealt by NPM who has to answer lots of questions going forward.