Totally different motivations and goals, but also, the JS stuff was hilarious too. And more importantly, like with left-pad, if your software delivery pipeline is that fragile for mission-critical systems, you got what you deserved. Better learn your lesson from downtime now than leak a bunch of user data because the developer of is-uppercase.js lost a thumb drive with their github keys and somebody pushed a backdoor in a package update.