generated: '2026-10-18' method: probed generator: harvest-packages.py source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (llm.co, security/llm-domain-security.yml) or its accepted GitHub org.' packages: - name: llm registry: npm url: https://www.npmjs.com/package/llm language: JavaScript official: true version: 1.0.7 published: '2024-02-21' evidence: metadata names llm.co - name: llm registry: pypi url: https://pypi.org/project/llm/ language: Python official: false version: '0.36' published: '2026-09-22' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org' - name: llm registry: rubygems url: https://rubygems.org/gems/llm language: Ruby official: false version: 0.1.0 published: '2023-06-13' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org' - name: llm registry: nuget url: https://www.nuget.org/packages/llm language: C# official: false version: 0.0.5 published: null evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org' - name: llm registry: crates url: https://crates.io/crates/llm language: Rust official: false version: 1.3.8 published: '2026-04-19' evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'