This why sites that don't allow package authors to "unpublish" have contact information so that data deletion can be handled on a case-by-case basis.