generated: '2026-10-06'
method: probed
generator: harvest-packages.py
source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ; github.com/bushelpowered
ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (bushelpowered.com,
  security/bushel-domain-security.yml) or its accepted GitHub org (bushelpowered).'
packages:
- name: oncall-client-go
  registry: github
  url: https://github.com/bushelpowered/oncall-client-go
  language: Go
  official: true
  version: null
  published: '2021-05-20'
  source_repo: https://github.com/bushelpowered/oncall-client-go
  evidence: repository in github.com/bushelpowered, whose profile names the provider's domain
- name: bushel
  registry: npm
  url: https://www.npmjs.com/package/bushel
  language: JavaScript
  official: false
  version: 0.0.1
  published: '2017-05-08'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'
- name: bushel
  registry: pypi
  url: https://pypi.org/project/bushel/
  language: Python
  official: false
  version: 0.0.0a
  published: '2018-11-14'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'
- name: bushel
  registry: crates
  url: https://crates.io/crates/bushel
  language: Rust
  official: false
  version: 0.3.5
  published: '2026-09-08'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'