generated: '2026-10-07'
method: probed
generator: harvest-packages.py
source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ; github.com/castlery
ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (castlery.com,
  security/castlery-domain-security.yml) or its accepted GitHub org (castlery).'
packages:
- name: apifox-import
  registry: github
  url: https://github.com/castlery/apifox-import
  language: Go
  official: true
  version: null
  published: '2025-08-06'
  source_repo: https://github.com/castlery/apifox-import
  evidence: repository in github.com/castlery, whose profile names the provider's domain
- name: castlery
  registry: npm
  url: https://www.npmjs.com/package/castlery
  language: JavaScript
  official: false
  version: 0.0.0
  published: '2023-05-04'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'