Because morons like you keep using packages like this. You should have checked things like that before including it in your project.
I think the issue is worse than that.
Someone like this person will sit back and expect somebody else to form/organise/fund such a foundation.
In the Open Source world, the answer to a question like (paraphrased) "why isn't this in the hands of a foundation?" is "Because you [the questioner] haven't done that yet".
If this person believes this product is important enough to warrant such a thing, then why haven't they done the hard yards of getting such a foundation formed?