The two code libraries have been downloaded millions of times and have thousands of software projects depending on them.

Newer versions of open source projects like event-source-polyfill, es5-ext and styled-components simply display a message urging Russia-based users to take action against the war.

Almost by default, open-source developers get very little insight into who uses their projects. In part, that's the beauty of open source, but for ...