generated: '2026-10-08' method: probed generator: harvest-packages.py source: registry metadata endpoints (registry.npmjs.org, pypi.org, rubygems.org, api.nuget.org, packagist.org, crates.io) ownership_rule: 'official: true only when the registry metadata (homepage, repository, author, URLs) names the provider''s domain (security/toneperfect-domain-security.yml, toneperfect.app) or its accepted GitHub org.' packages: - name: toneperfect registry: npm url: https://www.npmjs.com/package/toneperfect language: JavaScript official: true version: 0.1.0 published: '2026-10-07' evidence: metadata names toneperfect.app