generated: '2026-09-27' method: probed generator: harvest-packages.py source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (bauplanlabs.com, security/bauplan-domain-security.yml, security/bauplan-trust-center.yml) or its accepted GitHub org.' packages: - name: bauplan registry: pypi url: https://pypi.org/project/bauplan/ language: Python official: true version: 0.3.2 published: '2026-09-17' evidence: metadata names bauplanlabs.com - name: bauplan registry: npm url: https://www.npmjs.com/package/bauplan language: JavaScript official: false version: 0.1.1 published: '2016-01-09' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'