I really doubt that a project by the Apache Software Foundation scared anyone of anything.

It would have taken these package manager devs a few days of gratis and lawsuit free research on their laptops to save millions of end users years of pain.