The one that ends up looking worse from all of this is Github, followed by NPM. You shouldn't feel guilty about any of the things you did. You did nothing wrong.
> “How can this sort of event that makes our customers angry be prevented in the future?”, they asked themselves. Their answer was a new rule: any versions of a package that has dependents cannot be removed from the registry<p>> We tried to hang a pretty picture on a wall, but accidentally opened a small hole. This hole caused the entire building to collapse.<p>These two snippets say everything that needs to be said about the JavaScript ecosystem and mentality. I'll leave if for you to decide what that is.
Big thread at the time, a couple of months ago: <a href="https://news.ycombinator.com/item?id=38894445">https://news.ycombinator.com/item?id=38894445</a>
Is the NPM server code open (to viewing AND contributions)? I tried looking but couldn't find it anywhere. It would be very weird for something so essential to the OSS community to be closed off and untransparent like this, especially when it's intrinsically tied to the ecosystem of a programming language.