How do I report that a package should be deprecated?

[timjrobinson]

There's a package "trello" https://www.npmjs.com/package/trello that hasn't been updated in 4 years, has many security vulnerabilities that were reported years ago and the author isn't maintaining or responding to them. There is another package Trello.js (https://www.npmjs.com/package/trello.js) that is up to date and has no vulnerabilities and is actively maintained.

I think the first trello should be marked as deprecated and users told to use trello.js so they don't expose themselves to security issues. But there doesn't appear to be any way to report this on the npm site.

[timjrobinson]

There is no way to contact NPM support through the form, they just say "please contact the package maintainer"