Package Maintainers Call for Improvements to GitHub's New NPM Security Plan