generated: '2026-09-21'
method: probed
generator: harvest-packages.py
source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io)
ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (miniflux.app,
  security/miniflux-domain-security.yml) or its accepted GitHub org.'
packages:
- name: miniflux
  registry: pypi
  url: https://pypi.org/project/miniflux/
  language: Python
  official: true
  version: 1.1.6
  published: '2026-03-24'
  evidence: metadata names miniflux.app
- name: miniflux
  registry: npm
  url: https://www.npmjs.com/package/miniflux
  language: JavaScript
  official: false
  version: 0.2.0
  published: '2015-02-23'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'