generated: '2026-09-23'
method: probed
generator: harvest-packages.py
source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ; github.com/Sixt
ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (security/sixt-domain-security.yml,
  security/sixt-vulnerability-disclosure.yml, sixt.com) or its accepted GitHub org (Sixt).'
packages:
- name: tensorlake-go
  registry: github
  url: https://github.com/Sixt/tensorlake-go
  language: Go
  official: true
  version: null
  published: '2026-04-10'
  source_repo: https://github.com/Sixt/tensorlake-go
  evidence: repository in github.com/Sixt, whose profile names the provider's domain
- name: kafka-streams-go
  registry: github
  url: https://github.com/Sixt/kafka-streams-go
  language: ''
  official: true
  version: null
  published: '2024-01-08'
  source_repo: https://github.com/Sixt/kafka-streams-go
  evidence: repository in github.com/Sixt, whose profile names the provider's domain
- name: sixt
  registry: npm
  url: https://www.npmjs.com/package/sixt
  language: JavaScript
  official: false
  version: 0.0.1-security
  published: '2022-05-31'
  evidence: 'name match only: the metadata names neither the provider''s domain nor its GitHub org'