I wonder why your (entirely reasonable) comment got down-voted so much. This is exactly the risk why people prefer a distributed and decentralized internet over one where all open source is stored in one central Microsoft subsidiary (e.g. GitHub).
Anyone can already run their own, or install from remote git urls (not just github) as well. If the new organization undermines the community, the community can easily move.
NPM the company has had a significant number of missteps, and them getting better oversight and removing the need to be profitable will likely be better for everyone in the long run.
And no, you cannot cleanly separate between an ecosystem-defining tool and the company that controls how said tool will behave after the next automated update.
I do agree with the concerns of open source consolidation though. We need to find better ways of supporting open source projects instead of having them being bought by "large company".