This is what I'm seeing as well. Seems like the only mistake the author made was forgetting to include the MIT license, which is not as nefarious as scrubbing it.
But there is a distinction between redistributing a work and merely referencing it. It doesn't look like this repository actually copies anything from the other, and just listing the other one as a dependency doesn't require including the license.
