Extremely dick move on behalf of the developer. Why would you remove modules that other people are using in production?
Did you think a small team like NPM would go head to head with a company having full time lawyers? And for what?
Did you think a small team like NPM would go head to head with a company having full time lawyers? And for what?
Vendor your dependencies if you want to make sure your own project doesn't break.