It should not be put on both, or it will create dependency resolution issues where if two packages depend on it from different registries, bundlers can't remove the duplicate. As much as I love JSR.