generated: '2026-09-28'
method: probed
generator: harvest-packages.py
source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io)
ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (bito.ai, security/bito-domain-security.yml)
  or its accepted GitHub org.'
packages:
- name: bito
  registry: npm
  url: https://www.npmjs.com/package/bito
  language: JavaScript
  official: true
  version: 1.0.0
  published: '2023-10-18'
  evidence: metadata names bito.ai
- name: bito
  registry: crates
  url: https://crates.io/crates/bito
  language: Rust
  official: false
  version: 2.0.0
  published: '2026-08-08'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'