dependency loss + account squatting. what is worse?

should we reconsider our trust in github?

https://twitter.com/francesc/status/961249107020001280