CoreJS: State of the project? Looks like dead. Any official fork?

What a wild ride this has been.

Looking at the police report, I do wonder what the punishment would be in other countries. It seems the victims were laying drunk on the ground in dark clothing at top a hill (edit: hill not mentioned in police report, but seems logical given the headlight statement), causing the headlight beams to not illuminate them. On top of that, incoming traffic blinded the driver.

This is of course according to his testimony, but I can't imagine I (or anyone else) would have been able to avoid such a situation.

Edit with source:

Citing the actual circumstances of the accident, he emphasizes that he could not notice the pedestrians in a timely manner, as they were below the light level of the headlights of the vehicle(R.G. - lay, P.A. - tried to lift it), were dressed in dark clothes, street lighting was insufficient, he(Pushkarev D.V.)was blinded by the distant light of the oncoming car. Further, the author discloses the contents of the testimony of witnesses A.A., A.Y., A.M., I.K., A.S.,focuses on the behavior of victims at a pedestrian crossing, which contradicted the requirements of p.4.6 of the Rules of the Road of the Russian Federation. It notes that the victims were in a state of alcoholic intoxication, behaved inadequately. It points out that p.14.1 traffic rules of the Russian Federation provides for the duty of the driver to pass pedestrians crossing the roadway, and not lying on it. He insists that he would have noticed the victims and was able to prevent the attack if they were moving on the crossing upright.

https://kraevoy--alt.sudrf.ru/modules.php?name=sud_delo&srv_...

Transalted by Bing.

Some background: CoreJS is a widely used JavaScript library, apparently used for polyfilling by Babel. The author was previously know for asking for a job in npm install logs (https://github.com/zloirock/core-js/issues/548), and recently seems to have gone to jail for vehicular manslaughter, leaving the project without a maintainer.

Would you want all packages you're responsible for being taken over by whomever happens to be NPM's preferred forker in the event of your getting into legal troubles? I'd be strongly against that.

This should be handled the way any other fork happens: people create forks, other people audit them for stability and choose which to update their dependencies to. This isn't up to NPM to decide.

Not a great precedent, is rather have them forcefully depreciate the package, eventually, suggest a few alternatives in the error log, and let the user decide.

I haven't read the full coverage, but it does appear it occurred at a pedestrian crossing, and there doesn't appear to be any dispute that it was properly signposted.

Most countries require greater care at pedestrian crossings.