generated: '2026-10-18' method: probed generator: harvest-packages.py source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (hookbase.app, security/hookbase-domain-security.yml) or its accepted GitHub org.' packages: - name: hookbase registry: pypi url: https://pypi.org/project/hookbase/ language: Python official: true version: 3.2.0 published: '2026-10-12' evidence: metadata names hookbase.app - name: hookbase registry: npm url: https://www.npmjs.com/package/hookbase language: JavaScript official: false version: 0.1.11 published: '2025-09-14' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org' - name: hookbase registry: nuget url: https://www.nuget.org/packages/hookbase language: C# official: false version: 4.2.0 published: null evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'