In my opinion, the package itself is bad. It suggests by its very existence that final is bad. It tempts to use dependencies in a way that was not intended by their developers.

As long as they aren't wasting upstream dev's time or publishing packages that depend on this to work

But exactly this will happen.

Looks interesting. What are the key differences to https://roadrunner.dev?