Edit: as lots of people said, I was on an older version of the file. I'm not sure how I did this, but I should have double-checked, especially since there was some base64 stuff in the URL.
So it was merged, then reverted almost immediately, and then reimplemented by the project maintainers in the manner they preferred (without a new dependency).
And, regardless of whether this particular PR Is reverted or not, whether there's anything to prevent her or any other board member from doing this again.
It does not seem like she did it as a Board member, she did it because she felt like she was still an Active Maintainer of that project. It seems like the project feels like even if she is still a Maintainer she still was wrong to merge without discussion.
Edit: as lots of people said, I was on an older version of the file. I'm not sure how I did this, but I should have double-checked, especially since there was some base64 stuff in the URL.