agent-guards - npm Package Compare versions

Comparing version 0.3.0 to 0.4.0

data/popular-npm.json

+{"ecosystem":"npm","generated":"2026-07-31","source":"https://cdn.jsdelivr.net/npm/npm-high-impact/lib/top-download.js — the npm download ranking published by npm-high-impact (github.com/wooorm/npm-high-impact)","selection":"the first 3000 names of that ranking, in order, with nothing dropped","ranking_length":15916,"verification":{"method":"60 names spread evenly across the list, re-measured at api.npmjs.org/downloads/point/last-week on 2026-07-31","measured":60,"unreachable":0,"lowest_weekly_in_sample":9542658,"median_weekly_in_sample":38867534},"limits":"A snapshot. A package that became popular after the date above is not here, so a squat aimed at it is not caught by the local name check, and the package itself may be reported as resembling something else.","names":["semver","minimatch","debug","ansi-styles","brace-expansion","strip-ansi","ansi-regex","ms","supports-color","chalk","commander","lru-cache","string-width","wrap-ansi","tslib","picomatch","emoji-regex","glob","type-fest","color-name","eslint-visitor-keys","color-convert","ajv","minipass","source-map","balanced-match","readable-stream","which","glob-parent","escape-string-regexp","has-flag","find-up","locate-path","json-schema-traverse","p-limit","yallist","safe-buffer","uuid","p-locate","undici-types","ignore","iconv-lite","signal-exit","esbuild","is-fullwidth-code-point","js-yaml","entities","globals","postcss","isexe","isarray","path-key","string_decoder","argparse","ws","mime-db","resolve","agent-base","@esbuild/linux-x64","yargs-parser","mime-types","acorn","estraverse","cross-spawn","react-is","picocolors","fs-extra","hasown","nanoid","yargs","resolve-from","shebang-command","pretty-format","json5","https-proxy-agent","path-to-regexp","path-exists","punycode","js-tokens","cliui","shebang-regex","@babel/types","chokidar","strip-json-comments","inherits","webidl-conversions","get-stream","eslint-scope","cookie","@babel/parser","qs","is-number","whatwg-url","@types/estree","tr46","convert-source-map","is-glob","braces","fast-deep-equal","form-data","lodash","@babel/helper-validator-identifier","electron-to-chromium","fill-range","function-bind","readdirp","escalade","graceful-fs","negotiator","is-stream","camelcase","@babel/runtime","yocto-queue","to-regex-range","node-fetch","micromatch","node-releases","get-intrinsic","universalify","path-scurry","jsesc","browserslist","es-errors","statuses","@radix-ui/react-primitive","magic-string","rimraf","is-extglob","@jridgewell/trace-mapping","@jridgewell/resolve-uri","http-errors","onetime","has-symbols","es-define-property","gopd","util-deprecate","object-assign","jiti","yaml","dotenv","@babel/generator","@babel/template","imurmurhash","postcss-selector-parser","fast-glob","update-browserslist-db","@types/node","@babel/compat-data","eventemitter3","callsites","http-proxy-agent","detect-libc","espree","execa","@babel/core","@babel/helpers","concat-map","source-map-js","tinyglobby","call-bind-apply-helpers","flat-cache","fdir","pify","@jest/types","normalize-path","is-core-module","eslint","minimist","estree-walker","file-entry-cache","object-inspect","buffer","uri-js","import-fresh","@babel/helper-module-transforms","optionator","flatted","math-intrinsics","safer-buffer","y18n","@babel/helper-module-imports","mkdirp","dunder-proto","path-parse","fastq","levn","@babel/helper-compilation-targets","@babel/helper-string-parser","keyv","get-proto","csstype","npm-run-path","fast-json-stable-stringify","reusify","@babel/helper-plugin-utils","kind-of","mime","caniuse-lite","lines-and-columns","fast-levenshtein","supports-preserve-symlinks-flag","make-dir","slash","prelude-ls","typescript","strip-bom","parent-module","esutils","ci-info","@smithy/util-utf8","type-check","mimic-fn","@babel/helper-validator-option","@types/json-schema","@rolldown/pluginutils","side-channel-list","json-buffer","raw-body","has-tostringtag","wrappy","diff","jackspeak","baseline-browser-mapping","deep-is","foreground-child","@eslint/js","anymatch","natural-compare","esquery","@eslint-community/regexpp","es-set-tostringtag","acorn-jsx","parse5","finalhandler","parse-json","depd","axios","run-parallel","source-map-support","esrecurse","call-bound","content-disposition","human-signals","ts-api-utils","ansi-escapes","jest-util","send","@opentelemetry/core","type-is","encodeurl","once","cosmiconfig","lodash.merge","json-stable-stringify-without-jsonify","open","prettier","@eslint/eslintrc","is-arrayish","@jridgewell/sourcemap-codec","gensync","word-wrap","express","arg","jsonfile","schema-utils","@smithy/is-array-buffer","@typescript-eslint/types","chownr","delayed-stream","@smithy/util-buffer-from","asynckit","tapable","enhanced-resolve","aria-query","indent-string","bytes","binary-extensions","ini","@radix-ui/react-context","doctrine","queue-microtask","accepts","merge2","get-caller-file","@humanwhocodes/retry","@jridgewell/gen-mapping","@typescript-eslint/typescript-estree","jest-worker","proxy-from-env","clsx","side-channel-map","@typescript-eslint/visitor-keys","fresh","restore-cursor","on-finished","is-plain-obj","ipaddr.js","pathe","@jest/schemas","base64-js","@smithy/types","require-directory","tough-cookie","is-binary-path","body-parser","postcss-value-parser","media-typer","setprototypeof","side-channel-weakmap","@typescript-eslint/tsconfig-utils","@isaacs/cliui","@rollup/rollup-linux-x64-gnu","is-wsl","retry","@aws-sdk/types","@types/react-dom","combined-stream","es-object-atoms","@eslint/core","whatwg-mimetype","domutils","@rollup/rollup-linux-x64-musl","core-util-is","@typescript-eslint/scope-manager","esprima","loose-envify","cookie-signature","follow-redirects","cli-cursor","strip-final-newline","@typescript-eslint/project-service","eastasianwidth","json-parse-even-better-errors","sprintf-js","path-type","content-type","es-module-lexer","@nodelib/fs.scandir","write-file-atomic","@eslint/plugin-kit","ieee754","prop-types","require-from-string","dom-serializer","call-bind","@eslint/config-array","has-property-descriptors","@nodelib/fs.stat","merge-descriptors","slice-ansi","rxjs","p-map","toidentifier","globby","domhandler","async","@babel/helper-globals","pirates","@opentelemetry/semantic-conventions","@typescript-eslint/utils","date-fns","is-docker","tar","which-typed-array","ajv-formats","@opentelemetry/api-logs","@opentelemetry/resources","side-channel","cjs-module-lexer","range-parser","@humanfs/node","define-data-property","node-addon-api","pako","lilconfig","fast-uri","ip-address","fs.realpath","@img/sharp-libvips-linuxmusl-x64","cssesc","@opentelemetry/instrumentation","domelementtype","hosted-git-info","@eslint/object-schema","etag","@eslint/config-helpers","package-json-from-dist","@humanfs/core","htmlparser2","jest-message-util","for-each","pkg-dir","unpipe","buffer-from","es-abstract","is-unicode-supported","@types/yargs","is-callable","fast-xml-parser","istanbul-lib-instrument","escape-html","is-regex","dom-accessibility-api","css-tree","error-ex","ee-first","@types/unist","log-symbols","path-is-absolute","end-of-stream","@vitest/utils","object.assign","object-keys","tinyexec","scheduler","p-try","process-nextick-args","vary","@babel/traverse","@pkgjs/parseargs","@types/babel__generator","kleur","zod","merge-stream","available-typed-arrays","mute-stream","is-typed-array","safe-regex-test","tsconfig-paths","minizlib","tar-stream","@floating-ui/core","jose","deepmerge","get-tsconfig","set-function-length","@vitest/spy","css-select","@types/babel__core","forwarded","react","@typescript-eslint/parser","ajv-keywords","define-properties","is-generator-function","regexp.prototype.flags","acorn-walk","pump","data-uri-to-buffer","object-hash","jsdom","nopt","@babel/plugin-syntax-jsx","@floating-ui/dom","tiny-invariant","strip-indent","d3-array","chai","@babel/code-frame","@typescript-eslint/eslint-plugin","proxy-addr","parseurl","@floating-ui/utils","ora","html-encoding-sniffer","pnpm","whatwg-encoding","events","@typescript-eslint/type-utils","env-paths","internal-slot","string.prototype.trimend","extend","resolve-pkg-maps","istanbul-lib-coverage","react-dom","is-number-object","@radix-ui/primitive","is-plain-object","string.prototype.trimstart","@babel/plugin-syntax-typescript","jest-diff","define-lazy-prop","globalthis","which-boxed-primitive","@vitest/expect","sax","@floating-ui/react-dom","@vitest/pretty-format","internmap","@radix-ui/react-compose-refs","is-symbol","@eslint-community/eslint-utils","bl","serve-static","get-symbol-description","is-shared-array-buffer","functions-have-names","array-buffer-byte-length","socks-proxy-agent","extend-shallow","@radix-ui/react-use-layout-effect","function.prototype.name","is-bigint","is-string","protobufjs","tmp","is-date-object","lightningcss-linux-x64-musl","proc-log","long","@opentelemetry/sdk-trace-base","nth-check","d3-path","@types/babel__template","jest-regex-util","@radix-ui/react-use-controllable-state","jest-mock","socks","lightningcss","assertion-error","es-to-primitive","tinyrainbow","possible-typed-array-names","figures","xml-name-validator","any-promise","d3-shape","terser","std-env","is-array-buffer","safe-array-concat","@aws-sdk/token-providers","data-urls","d3-interpolate","@radix-ui/react-dismissable-layer","set-function-name","css-what","typed-array-length","typed-array-byte-offset","thenify","mz","react-remove-scroll","@radix-ui/react-id","is-weakset","is-boolean-object","@alloc/quick-lru","html-escaper","has-bigints","@aws-sdk/credential-provider-node","lightningcss-linux-x64-gnu","@radix-ui/react-presence","w3c-xmlserializer","istanbul-reports","@babel/helper-annotate-as-pure","typed-array-buffer","@nodelib/fs.walk","sharp","arraybuffer.prototype.slice","d3-format","has-proto","d3-timer","lodash.isplainobject","@aws-sdk/util-endpoints","@radix-ui/react-use-callback-ref","d3-time-format","is-weakref","autoprefixer","istanbul-lib-report","postcss-load-config","strnum","core-js","@vitest/snapshot","@aws-sdk/credential-provider-env","define-property","@sinonjs/fake-timers","@aws-sdk/credential-provider-web-identity","clone","normalize-package-data","d3-color","d3-time","colorette","is-negative-zero","unbox-primitive","data-view-byte-length","data-view-buffer","regenerator-runtime","is-set","saxes","decimal.js","@aws-sdk/core","@radix-ui/react-portal","d3-scale","dequal","which-collection","cli-width","@radix-ui/react-use-escape-keydown","@swc/helpers","data-view-byte-offset","@aws-sdk/util-user-agent-node","is-map","is-path-inside","xtend","is-finalizationregistry","import-in-the-middle","xmlbuilder","@sinclair/typebox","is-async-function","tsx","d3-ease","jwa","@aws-sdk/middleware-user-agent","@types/express-serve-static-core","thenify-all","@jridgewell/remapping","@vitest/runner","decamelize","clean-stack","abbrev","@aws-sdk/middleware-logger","type-detect","@radix-ui/react-collection","@radix-ui/react-focus-scope","loader-utils","mimic-response","string.prototype.trim","fraction.js","ast-types","which-builtin-type","array-includes","@bcoe/v8-coverage","expect","@types/d3-shape","@smithy/protocol-http","cli-spinners","@types/d3-time","@types/d3-color","@radix-ui/react-focus-guards","sucrase","typed-array-byte-length","@radix-ui/react-popper","aria-hidden","escodegen","@types/d3-array","bn.js","split2","http-cache-semantics","utils-merge","buffer-crc32","boolbase","@smithy/fetch-http-handler","@types/d3-path","@ungap/structured-clone","@radix-ui/react-direction","react-remove-scroll-bar","@types/send","mdn-data","cors","@types/express","is-weakmap","reflect.getprototypeof","jest-haste-map","eslint-config-prettier","postcss-import","neo-async","array-union","ssri","@types/d3-interpolate","@aws-sdk/middleware-host-header","@radix-ui/react-visually-hidden","@babel/helper-replace-supers","@radix-ui/react-arrow","stop-iteration-iterator","@aws-sdk/credential-provider-process","istanbul-lib-source-maps","dedent","is-data-view","@smithy/signature-v4","redent","@aws-sdk/credential-provider-http","is-promise","object.values","@istanbuljs/schema","@sindresorhus/is","own-keys","@jest/fake-timers","safe-push-apply","cssstyle","destroy","@jest/transform","react-transition-group","@babel/helper-member-expression-to-functions","ts-interface-checker","dom-helpers","@opentelemetry/api","@img/sharp-linux-x64","isobject","array.prototype.flatmap","@types/ws","es-shim-unscopables","vitest","array.prototype.flat","@babel/plugin-syntax-import-attributes","gcp-metadata","@emnapi/runtime","@types/chai","@types/prop-types","@types/d3-ease","@babel/helper-create-class-features-plugin","@radix-ui/react-roving-focus","@jest/environment","jest-matcher-utils","symbol-tree","detect-node-es","test-exclude","dlv","@vitest/mocker","@smithy/property-provider","xmlchars","webpack-sources","@smithy/util-middleware","shell-quote","smart-buffer","set-proto","graphemer","@aws-sdk/region-config-resolver","@aws-sdk/util-user-agent-browser","gaxios","is-extendable","@radix-ui/react-dialog","vite","get-nonce","is-potential-custom-element-name","@types/d3-timer","@smithy/querystring-builder","inflight","@radix-ui/react-use-size","leven","@tailwindcss/oxide-linux-x64-musl","@aws-sdk/middleware-recursion-detection","read-cache","@types/ms","@aws-sdk/xml-builder","google-auth-library","why-is-node-running","aggregate-error","setimmediate","read-pkg","@smithy/smithy-client","react-hook-form","methods","@sinonjs/commons","object.entries","babel-jest","@types/serve-static","is-interactive","event-target-shim","jest-get-type","postcss-js","@rollup/pluginutils","tldts-core","class-variance-authority","@napi-rs/wasm-runtime","@openai/codex","@jest/console","@radix-ui/react-use-previous","pure-rand","object.fromentries","babel-plugin-istanbul","dir-glob","siginfo","jest-validate","@smithy/middleware-endpoint","babel-plugin-polyfill-corejs3","@types/istanbul-lib-coverage","babel-plugin-jest-hoist","async-function","array-flatten","didyoumean","tinybench","get-east-asian-width","@smithy/shared-ini-file-loader","dayjs","recharts","@jest/test-result","@radix-ui/rect","@octokit/types","@babel/plugin-transform-react-jsx-source","@tootallnate/once","@protobufjs/utf8","@protobufjs/codegen","rollup","@radix-ui/number","@smithy/core","@types/qs","jest-environment-node","@protobufjs/inquire","@babel/plugin-transform-modules-commonjs","ansi-colors","jest-resolve","@smithy/util-base64","cssom","@smithy/credential-provider-imds","ecdsa-sig-formatter","eslint-import-resolver-node","camelcase-css","immer","victory-vendor","@smithy/middleware-serde","@tailwindcss/node","@types/yargs-parser","@radix-ui/react-label","@babel/helper-optimise-call-expression","process","@aws-sdk/nested-clients","@smithy/url-parser","fast-equals","@noble/hashes","jest-snapshot","@tailwindcss/oxide","@smithy/middleware-stack","cli-truncate","eslint-plugin-import","@testing-library/dom","webpack","@csstools/css-tokenizer","@smithy/util-retry","serialize-javascript","@smithy/service-error-classification","@types/react","@radix-ui/react-dropdown-menu","jest-docblock","sisteransi","@aws-sdk/credential-provider-ini","postcss-nested","@smithy/querystring-parser","lie","@smithy/util-stream","@colors/colors","requires-port","string-length","web-streams-polyfill","@radix-ui/react-tooltip","@smithy/node-config-provider","@octokit/openapi-types","diff-sequences","unist-util-visit","@smithy/util-uri-escape","@types/istanbul-reports","tar-fs","expect-type","is-buffer","@testing-library/jest-dom","@types/deep-eql","terser-webpack-plugin","unist-util-visit-parents","@tanstack/query-core","file-type","watchpack","@radix-ui/react-separator","synckit","babel-preset-jest","@smithy/middleware-retry","@smithy/util-hex-encoding","@radix-ui/react-menu","eslint-plugin-react","prompts","@types/body-parser","find-cache-dir","unist-util-is","make-fetch-happen","chardet","jest-watcher","core-js-compat","jws","stack-utils","is-obj","@types/range-parser","@radix-ui/react-select","jest-runtime","@smithy/util-endpoints","inquirer","rfdc","unist-util-stringify-position","import-local","@radix-ui/react-collapsible","through2","@smithy/util-defaults-mode-node","@radix-ui/react-popover","regjsparser","node-gyp","string.prototype.matchall","unplugin","micromark-util-symbol","color","decimal.js-light","nwsapi","abort-controller","spdx-expression-parse","@radix-ui/react-tabs","@protobufjs/eventemitter","jest","@tanstack/react-query","jsonwebtoken","@jest/reporters","@protobufjs/fetch","tailwindcss","unique-filename","make-error","color-string","@hookform/resolvers","glob-to-regexp","bluebird","@adobe/css-tools","@tailwindcss/oxide-linux-x64-gnu","ts-node","@smithy/hash-node","is-descriptor","@inquirer/type","psl","typescript-eslint","wordwrap","jest-cli","@csstools/css-calc","resolve-cwd","@types/json5","@csstools/css-parser-algorithms","@jest/globals","@protobufjs/aspromise","@img/sharp-linuxmusl-x64","@radix-ui/react-progress","@jest/expect-utils","fflate","get-package-type","@types/hast","jest-leak-detector","@types/istanbul-lib-report","@babel/plugin-transform-classes","@types/mdast","pathval","safe-stable-stringify","node-int64","@radix-ui/react-toggle","@babel/helper-define-polyfill-provider","loupe","char-regex","@babel/plugin-transform-block-scoping","jest-runner","eslint-module-utils","decompress-response","uglify-js","@smithy/util-defaults-mode-browser","@radix-ui/react-avatar","jest-circus","micromark-util-character","google-logging-utils","regexpu-core","lz-string","min-indent","@babel/plugin-syntax-numeric-separator","@babel/plugin-syntax-optional-catch-binding","fb-watchman","bser","@babel/plugin-transform-spread","deep-eql","@babel/plugin-syntax-top-level-await","@babel/plugin-syntax-nullish-coalescing-operator","zod-to-json-schema","progress","@smithy/util-body-length-browser","@babel/plugin-transform-parameters","@jest/source-map","immediate","@aws-sdk/client-sso","@babel/plugin-syntax-object-rest-spread","normalize-url","@smithy/config-resolver","@babel/plugin-syntax-logical-assignment-operators","@protobufjs/pool","jest-changed-files","@babel/plugin-syntax-json-strings","@csstools/color-helpers","@types/lodash","webpack-virtual-modules","jest-resolve-dependencies","through","util","micromark-util-types","cacache","@types/stack-utils","@emnapi/wasi-threads","axobject-query","@pkgr/core","@radix-ui/react-scroll-area","arrify","@babel/plugin-transform-computed-properties","array.prototype.findlastindex","@opentelemetry/sdk-metrics","@babel/plugin-transform-for-of","@emnapi/core","@babel/plugin-transform-async-to-generator","@babel/plugin-syntax-class-properties","defaults","jsx-ast-utils","yauzl","jsonc-parser","detect-newline","@aws-crypto/sha256-js","@types/http-errors","require-in-the-middle","@webassemblyjs/helper-wasm-bytecode","@types/babel__traverse","@babel/plugin-transform-literals","@npmcli/fs","@protobufjs/path","check-error","pg-types","v8-to-istanbul","babel-plugin-polyfill-corejs2","@babel/plugin-transform-regenerator","@testing-library/react","@types/debug","url-parse","@aws-sdk/credential-provider-sso","eventsource-parser","bignumber.js","emittery","es-iterator-helpers","wcwidth","character-entities","@babel/plugin-syntax-async-generators","co","express-rate-limit","@babel/plugin-syntax-optional-chaining","css.escape","@babel/plugin-transform-destructuring","@types/eslint","@webassemblyjs/leb128","character-entities-legacy","@csstools/css-color-parser","@webassemblyjs/ast","querystringify","vfile-message","node-domexception","@protobufjs/base64","pkg-types","minipass-collect","tmpl","lodash.once","confbox","@vitejs/plugin-react","dompurify","@babel/plugin-transform-template-literals","regenerate-unicode-properties","@webassemblyjs/wasm-opt","@radix-ui/react-radio-group","tinyspy","vfile","exponential-backoff","walker","@types/aria-query","listr2","@smithy/util-config-provider","@webassemblyjs/helper-wasm-section","object.groupby","spdx-license-ids","ufo","@webassemblyjs/floating-point-hex-parser","@smithy/middleware-content-length","graphql","loader-runner","babel-plugin-polyfill-regenerator","@babel/plugin-transform-function-name","@types/jest","@babel/plugin-transform-sticky-regex","quick-lru","yn","@grpc/proto-loader","unicode-match-property-value-ecmascript","@babel/plugin-transform-arrow-functions","immutable","@babel/plugin-transform-shorthand-properties","@radix-ui/react-alert-dialog","micromark","on-headers","lodash.isstring","router","postgres-date","p-retry","array.prototype.tosorted","@inquirer/core","@types/uuid","@grpc/grpc-js","minipass-flush","spdx-exceptions","@webassemblyjs/utf8","unicorn-magic","@humanwhocodes/module-importer","@inquirer/figures","@smithy/util-body-length-node","mdast-util-to-string","@babel/helper-remap-async-to-generator","jszip","text-table","eslint-plugin-react-refresh","log-update","stylis","@webassemblyjs/wast-printer","babel-preset-current-node-syntax","@webassemblyjs/helper-api-error","eslint-plugin-prettier","string.prototype.repeat","@webassemblyjs/wasm-gen","@types/pg","lodash.camelcase","@jridgewell/source-map","@babel/helper-wrap-function","micromark-factory-space","@webassemblyjs/ieee754","@babel/plugin-transform-block-scoped-functions","formdata-polyfill","@babel/plugin-transform-member-expression-literals","@babel/plugin-syntax-import-meta","unique-slug","@babel/plugin-syntax-private-property-in-object","set-blocking","fast-diff","concat-stream","lodash.includes","jest-config","minimalistic-assert","@babel/plugin-syntax-import-assertions","lodash.isinteger","deep-extend","@webassemblyjs/wasm-edit","read-pkg-up","@babel/plugin-transform-named-capturing-groups-regex","he","err-code","asap","bowser","property-information","cmdk","iterator.prototype","lodash.isboolean","b4a","@babel/plugin-transform-private-methods","@istanbuljs/load-nyc-config","@babel/plugin-transform-unicode-regex","@babel/plugin-transform-nullish-coalescing-operator","cac","@babel/plugin-transform-optional-chaining","set-cookie-parser","@webassemblyjs/wasm-parser","@babel/plugin-syntax-class-static-block","@babel/helper-create-regexp-features-plugin","is-inside-container","run-async","dot-prop","@webassemblyjs/helper-buffer","@babel/plugin-transform-dotall-regex","meow","makeerror","is-generator-fn","randombytes","@babel/helper-skip-transparent-expression-wrappers","process-warning","array.prototype.findlast","v8-compile-cache-lib","lower-case","@tsconfig/node12","encoding","@radix-ui/react-hover-card","lodash.debounce","minipass-sized","fetch-blob","jest-each","@ampproject/remapping","archiver-utils","micromark-util-sanitize-uri","@babel/plugin-transform-object-super","@types/mime","@babel/plugin-transform-duplicate-keys","tunnel-agent","@radix-ui/react-context-menu","@radix-ui/react-navigation-menu","run-applescript","@babel/plugin-transform-modules-systemjs","pend","@swc/counter","p-timeout","validate-npm-package-license","resolve.exports","unified","chrome-trace-event","@modelcontextprotocol/sdk","@tsconfig/node14","@babel/plugin-transform-class-properties","default-browser-id","consola","tree-kill","minipass-pipeline","@babel/plugin-transform-typescript","@babel/plugin-transform-reserved-words","handlebars","rc","pg-protocol","@tsconfig/node10","@babel/plugin-transform-property-literals","napi-postinstall","lodash-es","commondir","minipass-fetch","pngjs","@tsconfig/node16","collect-v8-coverage","path-browserify","bare-events","no-case","xml2js","bundle-name","lodash.memoize","fast-xml-builder","use-sync-external-store","got","space-separated-tokens","is-alphabetical","spdx-correct","is-decimal","which-module","embla-carousel","lodash.isnumber","json-stringify-safe","micromark-util-chunked","playwright-core","@babel/plugin-transform-private-property-in-object","@rtsao/scc","@jridgewell/set-array","wsl-utils","unicode-canonical-property-names-ecmascript","micromark-util-normalize-identifier","compression","@smithy/invalid-dependency","@babel/plugin-transform-exponentiation-operator","react-refresh","zustand","@aws-sdk/credential-provider-login","@babel/preset-typescript","dotenv-expand","streamx","@radix-ui/react-menubar","@aws-sdk/middleware-sdk-s3","unrs-resolver","@xtuc/long","@xtuc/ieee754","node-gyp-build","fast-fifo","ccount","is-arguments","fs-constants","jest-pnp-resolver","@inquirer/confirm","@webassemblyjs/helper-numbers","@swc/core","micromark-util-classify-character","@babel/plugin-transform-unicode-escapes","@swc/core-linux-x64-gnu","zwitch","compressible","@emotion/memoize","mdast-util-to-markdown","embla-carousel-reactive-utils","@opentelemetry/otlp-exporter-base","@aws-crypto/sha256-browser","parse-entities","@babel/plugin-transform-numeric-separator","memfs","@babel/plugin-transform-new-target","require-main-filename","mdast-util-to-hast","embla-carousel-react","hono","parse5-htmlparser2-tree-adapter","moment","micromark-factory-label","unicode-property-aliases-ecmascript","regjsgen","@babel/plugin-transform-async-generator-functions","mdast-util-from-markdown","@humanwhocodes/object-schema","default-browser","unicode-match-property-ecmascript","@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining","playwright","module-details-from-path","acorn-import-attributes","eslint-plugin-jsx-a11y","micromark-util-subtokenize","@jest/expect","fast-safe-stringify","micromark-factory-title","normalize-range","@hono/node-server","html-entities","cheerio","@smithy/node-http-handler","remark-parse","@swc/types","eventsource","pino","lowercase-keys","micromark-core-commonmark","node-forge","@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression","damerau-levenshtein","tinypool","prettier-linter-helpers","micromark-util-html-tag-name","astral-regex","mrmime","micromark-util-combine-extensions","@types/retry","ast-types-flow","p-cancelable","ejs","@testing-library/user-event","react-resizable-panels","micromark-util-encode","trough","language-tags","@smithy/abort-controller","micromark-util-resolve-all","bail","fs-minipass","style-to-object","@types/parse-json","pg-connection-string","input-otp","@babel/plugin-transform-json-strings","comma-separated-tokens","cross-fetch","fd-slicer","postgres-interval","@img/sharp-libvips-linux-x64","longest-streak","big.js","crc-32","micromark-util-decode-string","map-obj","json-schema","@octokit/request","validate-npm-package-name","json-bigint","@smithy/util-waiter","micromark-factory-whitespace","is-alphanumerical","micromark-util-decode-numeric-character-reference","reselect","sonic-boom","performance-now","promise-retry","p-finally","@opentelemetry/otlp-transformer","@babel/plugin-transform-object-rest-spread","@opentelemetry/sdk-logs","@humanwhocodes/config-array","jsbn","micromark-factory-destination","pino-abstract-transport","styled-jsx","@types/semver","@xmldom/xmldom","@jest/test-sequencer","devlop","interpret","mdast-util-phrasing","@babel/plugin-proposal-private-property-in-object","@types/tough-cookie","redux","svgo","decode-named-character-reference","character-reference-invalid","duplexify","tweetnacl","typedarray","client-only","recast","@opentelemetry/context-async-hooks","widest-line","hoist-non-react-statics","@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly","language-subtag-registry","inline-style-parser","@babel/plugin-transform-logical-assignment-operators","@jest/core","gtoken","@babel/plugin-transform-unicode-sets-regex","mimic-function","@smithy/eventstream-serde-node","luxon","supports-hyperlinks","is-windows","is-hexadecimal","@types/eslint-scope","is-typedarray","@radix-ui/react-aspect-ratio","hast-util-whitespace","@oxc-project/types","pino-std-serializers","@humanfs/types","@babel/plugin-transform-unicode-property-regex","@smithy/eventstream-serde-config-resolver","eslint-import-resolver-typescript","memoize-one","@tailwindcss/vite","character-entities-html4","@inquirer/ansi","global-prefix","dot-case","pg-int8","pluralize","@octokit/request-error","string-argv","@next/env","motion-utils","@octokit/endpoint","stringify-entities","pg","@types/graceful-fs","image-size","@radix-ui/react-toast","unist-util-position","camel-case","@babel/plugin-transform-typeof-symbol","husky","exit","@unrs/resolver-binding-linux-x64-gnu","cacheable-request","motion-dom","flat","@octokit/core","cheerio-select","@aws-sdk/client-s3","@aws-sdk/util-locate-window","rrweb-cssom","ansis","@babel/plugin-transform-modules-amd","@graphql-tools/utils","@smithy/eventstream-codec","@babel/plugin-transform-modules-umd","reflect-metadata","@babel/highlight","sirv","component-emitter","regenerate","@babel/plugin-transform-react-jsx","trim-lines","@babel/plugin-syntax-unicode-sets-regex","remark-rehype","domexception","@aws-crypto/util","pg-pool","obug","enquirer","simple-swizzle","npm-package-arg","universal-user-agent","@unrs/resolver-binding-linux-x64-musl","@aws-sdk/middleware-flexible-checksums","@babel/preset-env","faye-websocket","promise","lodash.uniq","global-modules","@babel/preset-modules","nan","@octokit/graphql","proxy-agent","@emotion/unitless","rechoir","abab","@inquirer/external-editor","responselike","@aws-sdk/middleware-bucket-endpoint","param-case","@octokit/auth-token","@protobufjs/float","@smithy/eventstream-serde-universal","create-require","json-schema-typed","thread-stream","pretty-bytes","@asamuzakjp/css-color","@hapi/hoek","next-themes","environment","@types/resolve","ua-parser-js","bare-stream","asn1","lodash.defaults","@smithy/uuid","crc32-stream","at-least-node","jake","invariant","csso","@babel/plugin-bugfix-safari-class-field-initializer-scope","bare-fs","cookie-es","filelist","@babel/plugin-transform-optional-catch-binding","@aws-sdk/util-arn-parser","fsevents","css-loader","totalist","is-bun-module","hermes-estree","pascal-case","crypto-random-string","hermes-parser","zip-stream","react-redux","@octokit/plugin-paginate-rest","acorn-globals","@emotion/hash","pg-cloudflare","babel-plugin-macros","pac-proxy-agent","@babel/plugin-transform-class-static-block","ret","before-after-hook","undici","extsprintf","deep-equal","postcss-modules-scope","pac-resolver","zod-validation-error","http-parser-js","cli-boxes","@aws-sdk/middleware-ssec","degenerator","archiver","basic-ftp","linkify-it","@emotion/is-prop-valid","emojis-list","@babel/plugin-transform-export-namespace-from","classnames","bare-path","cli-table3","@polka/url","extract-zip","parse-ms","websocket-driver","shallow-clone","busboy","@types/connect","estree-util-is-identifier-name","real-require","tailwind-merge","streamsearch","markdown-table","secure-json-parse","@next/swc-linux-x64-gnu","@types/jsonwebtoken","stream-shift","micromark-extension-gfm-table","mitt","object-is","http-proxy-middleware","webpack-dev-middleware","@smithy/md5-js","load-json-file","events-universal","magicast","mdast-util-gfm-table","postcss-modules-local-by-default","denque","@parcel/watcher","yoctocolors-cjs","globrex","icss-utils","get-uri","mdast-util-gfm-task-list-item","os-tmpdir","@babel/plugin-transform-regexp-modifiers","hash.js","@aws-sdk/middleware-expect-continue","babel-loader","decode-uri-component","style-to-js","compress-commons","mdast-util-mdx-jsx","@babel/plugin-transform-runtime","@radix-ui/react-slot","postcss-modules-values","http2-wrapper","file-uri-to-path","boxen","@inquirer/prompts","defu","uc.micro","unique-string","js-cookie","@types/use-sync-external-store","detect-node","@js-sdsl/ordered-map","@octokit/plugin-rest-endpoint-methods","tailwindcss-animate","react-router","@babel/plugin-transform-dynamic-import","dateformat","duplexer","micromark-extension-gfm-footnote","http-proxy","clone-deep","npm-normalize-package-bin","remark-stringify","is-accessor-descriptor","pretty-ms","colors","stack-trace","mdast-util-gfm","@types/normalize-package-data","react-day-picker","encoding-sniffer","@smithy/hash-blob-browser","web-vitals","@types/yauzl","parse5-parser-stream","tsconfck","mdurl","mkdirp-classic","@szmarczak/http-timer","atomic-sleep","@inquirer/select","micromark-extension-gfm-tagfilter","buffer-equal-constant-time","aws4","micromark-extension-gfm-strikethrough","@sentry/core","p-queue","@babel/preset-react","websocket-extensions","@inquirer/input","verror","node-abi","@babel/plugin-transform-react-jsx-development","@aws-sdk/middleware-location-constraint","mdast-util-gfm-strikethrough","micromark-extension-gfm-task-list-item","validator","mdast-util-mdxjs-esm","postcss-modules-extract-imports","mlly","underscore","@opentelemetry/instrumentation-http","is-data-descriptor","@jest/pattern","prismjs","big-integer","http-signature","async-retry","lazystream","url","@types/geojson","@babel/plugin-transform-react-pure-annotations","@jest/diff-sequences","micromark-extension-gfm","stackframe","serialize-error","@babel/plugin-bugfix-firefox-class-in-computed-class-key","fastest-levenshtein","whatwg-fetch","readdir-glob","axe-core","bindings","@inquirer/expand","strtok3","xml","@smithy/chunked-blob-reader-native","detect-indent","mdast-util-gfm-autolink-literal","sass","acorn-import-phases","@smithy/hash-stream-node","simple-get","change-case","@vue/shared","assert-plus","cacheable-lookup","defer-to-connect","form-data-encoder","@opentelemetry/instrumentation-mongodb","are-we-there-yet","react-fast-compare","openai","ts-jest","@inquirer/editor","error-stack-parser","@inquirer/number","@opentelemetry/instrumentation-graphql","markdown-it","@opentelemetry/instrumentation-pg","micromark-extension-gfm-autolink-literal","rolldown","winston","strip-literal","@cspotcode/source-map-support","common-tags","yoctocolors","@babel/helper-split-export-declaration","has-value","vite-node","@opentelemetry/instrumentation-mongoose","@emotion/serialize","@types/node-fetch","node-exports-info","@opentelemetry/instrumentation-mysql","hastscript","agentkeepalive","formidable","@popperjs/core","@opentelemetry/sdk-trace-node","aproba","jsprim","typedarray-to-buffer","fecha","ts-dedent","clean-css","lodash.sortby","@emotion/sheet","@opentelemetry/instrumentation-generic-pool","generator-function","@hapi/topo","@types/trusted-types","simple-concat","@emotion/cache","repeat-string","@smithy/chunked-blob-reader","highlight.js","d3-dispatch","lint-staged","@inquirer/rawlist","bidi-js","@opentelemetry/instrumentation-hapi","remark-gfm","@opentelemetry/instrumentation-connect","delegates","ansi-align","snake-case","token-types","hash-base","fork-ts-checker-webpack-plugin","mdast-util-gfm-footnote","react-router-dom","logform","isstream","has-values","fs-monkey","@emotion/utils","@opentelemetry/instrumentation-fs","@radix-ui/react-toggle-group","@emotion/weak-memoize","caseless","@babel/plugin-transform-explicit-resource-management","style-loader","@opentelemetry/instrumentation-lru-memoizer","@tailwindcss/postcss","aws-sign2","hast-util-parse-selector","@vitest/coverage-v8","sshpk","teeny-request","socket.io-parser","upath","redux-thunk","winston-transport","bs-logger","mdast-util-mdx-expression","triple-beam","h3","cluster-key-slot","joi","@inquirer/password","@nolyfill/is-core-module","@opentelemetry/instrumentation-knex","tabbable","is-regexp","dashdash","json-parse-better-errors","@ai-sdk/provider-utils","@csstools/css-syntax-patches-for-csstree","getpass","@opentelemetry/exporter-trace-otlp-http","@aws/lambda-invoke-store","@inquirer/search","preact","@types/pg-pool","base64-arraybuffer","@vue/compiler-core","react-markdown","is-node-process","@opentelemetry/instrumentation-ioredis","jsonparse","external-editor","superagent","perfect-debounce","@anthropic-ai/sdk","@noble/curves","temp-dir","gauge","@opentelemetry/instrumentation-amqplib","stable-hash","tsutils","webpack-merge","symbol-observable","@cloudflare/kv-asset-handler","mdast-util-find-and-replace","@opentelemetry/instrumentation-tedious","node-abort-controller","@types/minimatch","jest-environment-jsdom","@ai-sdk/provider","strict-event-emitter","@aws-crypto/supports-web-crypto","@cloudflare/workerd-linux-64","miniflare","humanize-ms","builtin-modules","@aws-crypto/crc32","@types/mysql","citty","@types/triple-beam","@opentelemetry/instrumentation-mysql2","eslint-config-next","idb","@esbuild/linux-arm64","@parcel/watcher-linux-x64-glibc","@vue/compiler-dom","@sentry-internal/replay-canvas","d3-selection","registry-auth-token","debounce","one-time","@aws-sdk/signature-v4-multi-region","@supabase/realtime-js","is-ci","@smithy/eventstream-serde-browser","camelcase-keys","tagged-tag","ioredis","postgres-bytea","lodash.isequal","d3-drag","gzip-size","is-reference","@babel/plugin-syntax-decorators","eslint-utils","query-string","color-support","retry-request","punycode.js","@opentelemetry/redis-common","@supabase/auth-js","@types/cors","@supabase/storage-js","table","is-lambda","@fastify/busboy","dezalgo","npmlog","@babel/plugin-syntax-dynamic-import","enabled","@types/d3-scale","resolve-alpn","@emotion/babel-plugin","@types/http-proxy","@supabase/supabase-js","@mswjs/interceptors","unenv","d3-transition","kuler","@supabase/postgrest-js","pidtree","@reduxjs/toolkit","jquery","mri","vitefu","@opentelemetry/instrumentation-koa","@formatjs/intl-localematcher","get-port","@rolldown/binding-linux-x64-gnu","wide-align","fn.name","@isaacs/balanced-match","loglevel","create-jest","@jest/get-type","marked","ohash","jsonpointer","@sentry-internal/feedback","global-dirs","@supabase/functions-js","vite-tsconfig-paths","to-fast-properties","is-installed-globally","@types/http-cache-semantics","@babel/plugin-transform-react-display-name","@babel/helper-simple-access","@babel/plugin-syntax-flow","obuf","eslint-plugin-react-hooks","duplexer2","@azure/abort-controller","outvariant","stream-browserify","@emotion/react","d3-zoom","engine.io-parser","lodash.isarguments","ts-morph","fast-check","napi-build-utils","lodash.castarray","for-in","selfsigned","ast-v8-to-istanbul","cross-env","postcss-loader","text-hex","prebuild-install","connect-history-api-fallback","asn1.js","@tybys/wasm-util","envinfo","stdin-discarder","registry-url","@asamuzakjp/nwsapi","youch","@types/react-transition-group","to-buffer","smol-toml","proto3-json-serializer","expand-template","lodash.get","netmask","forever-agent","proto-list","json-schema-to-ts","libphonenumber-js","webpack-dev-server","redis-errors","html-void-elements","html-minifier-terser","postcss-discard-duplicates","postgres-array","d3-geo","robust-predicates","@vue/compiler-sfc","joycon","rou3","youch-core","@types/aws-lambda","config-chain","lodash.clonedeep","launch-editor","wildcard","clone-response","stringify-object","@babel/plugin-proposal-decorators","@opentelemetry/instrumentation-express","browserify-zlib","raf","urlpattern-polyfill","remove-trailing-separator","node-gyp-build-optional-packages","destr","arr-diff","@emotion/use-insertion-effect-with-fallbacks","msgpackr","redis-parser","@ts-morph/common","postcss-minify-selectors","@types/glob","postcss-discard-empty","filesize","vscode-uri","fast-copy","postcss-merge-rules","get-stdin","@opentelemetry/instrumentation-dataloader","filter-obj","map-cache","terminal-link","@opentelemetry/instrumentation-undici","cookiejar","void-elements","@graphql-tools/merge","moment-timezone","dns-packet","cssnano","import-meta-resolve","@puppeteer/browsers","core-js-pure","github-from-package","has","@graphql-tools/schema","sass-loader","postcss-merge-longhand","@sentry/react","postcss-minify-params","postcss-convert-values","@angular-devkit/core","strict-uri-encode","@babel/helper-function-name","ecc-jsbn","@sentry-internal/browser-utils","blake3-wasm","traverse","@jsonjoy.com/util","@sentry-internal/replay","trim-newlines","select-hose","@types/tedious","@yarnpkg/lockfile","@radix-ui/react-slider","postcss-svgo","@types/jsdom","@azure/msal-common","import-lazy","assert","set-value","bare-url","spdy-transport","mini-css-extract-plugin","html-url-attributes","postcss-calc","cssnano-preset-default","@babel/plugin-transform-flow-strip-types","postcss-normalize-whitespace","stylehacks","@tootallnate/quickjs-emscripten","batch","is-what","colord","es6-promise","ansi-html-community","opener","console-control-strings","@vue/compiler-ssr","@tanstack/history","@vitejs/plugin-react-swc","postcss-normalize-url","telecom-mas-agent","@faker-js/faker","node-fetch-native","has-unicode","@dnd-kit/core","@types/mdx","tunnel","@babel/plugin-transform-duplicate-named-capturing-groups-regex","url-join","@dnd-kit/utilities","postcss-normalize-timing-functions","@opentelemetry/exporter-logs-otlp-http","@aws-sdk/client-sts","crypto-js","relateurl","w3c-keyname","devtools-protocol","spdy","lucide-react","bcrypt-pbkdf","sha.js","postcss-unique-selectors","@sentry/cli","postcss-normalize-display-values","@csstools/selector-specificity","eventemitter2","@cloudflare/unenv-preset","@aws-sdk/util-format-url","@types/cookie","@babel/helper-environment-visitor","copy-anything","vfile-location","postcss-reduce-transforms","postcss-discard-overridden","xdg-basedir","xmlbuilder2","@isaacs/fs-minipass","@google-cloud/paginator","type","jspdf","css-declaration-sorter","fast-content-type-parse","uint8array-extras","postcss-colormin","srvx","pdfjs-dist","@formatjs/ecma402-abstract","nice-try","html-webpack-plugin","effect","giget","serve-index","upper-case","@opentelemetry/otlp-grpc-exporter-base","postcss-ordered-values","shallowequal","package-manager-detector","postcss-reduce-initial","postcss-discard-comments","homedir-polyfill","postcss-minify-gradients","@standard-schema/spec","rw","functional-red-black-tree","concurrently","headers-polyfill","untildify","@svgr/babel-plugin-transform-react-native-svg","@opentelemetry/instrumentation-redis","jwt-decode","parse-passwd","@opentelemetry/propagator-jaeger","warning","postcss-normalize-charset","@types/d3-zoom","@svgr/babel-plugin-svg-dynamic-title","expand-tilde","@babel/plugin-proposal-class-properties","postcss-minify-font-values","multicast-dns","stream-events","sockjs","hpack.js","@svgr/plugin-jsx","nodemailer","react-docgen","@tanstack/router-core","postcss-normalize-unicode","postcss-normalize-positions","@rollup/plugin-node-resolve","@svgr/babel-plugin-svg-em-dimensions","@formatjs/fast-memoize","adm-zip","code-block-writer","postcss-normalize-string","queue","@svgr/hast-util-to-babel-ast","upper-case-first","d3-hierarchy","@mdx-js/react","rc9","pretty-error","wbuf","lodash.truncate","thunky","atob","postcss-normalize-repeat-style","renderkid","lodash.flatten","throat","@formatjs/icu-skeleton-parser","has-ansi","@npmcli/agent","@date-fns/tz","@tanstack/router-plugin","array-unique","@svgr/babel-preset","@formatjs/icu-messageformat-parser","caniuse-api","empathic","safe-regex","tempy","seroval","querystring","intl-messageformat","@opentelemetry/propagator-b3","@tanstack/react-virtual","@svgr/babel-plugin-remove-jsx-empty-expression","msgpackr-extract","@jsonjoy.com/json-pack","help-me","tldts","@types/statuses","request","@babel/plugin-transform-react-jsx-self","@parcel/watcher-linux-x64-musl","@svgr/babel-plugin-replace-jsx-attribute-value","ignore-walk","@tanstack/router-generator","md5","@types/long","@esbuild/darwin-arm64","eslint-plugin-jest","bplist-parser","@jest/snapshot-utils","@tanstack/router-utils","conventional-commits-parser","@svgr/core","delaunator","get-value","stubs","arr-union","@types/d3-transition","@angular-devkit/schematics","@types/d3-selection","isomorphic-ws","c12","@babel/plugin-syntax-bigint","@paralleldrive/cuid2","del","har-validator","@types/request","@azure/msal-node","@dnd-kit/accessibility","charenc","@jsonjoy.com/base64","@graphql-typed-document-node/core","d3-quadtree","@types/mdurl","@tanstack/virtual-file-routes","@types/keyv","throttleit","nypm","@dnd-kit/sortable","supertest","dependency-graph","@svgr/babel-plugin-add-jsx-attribute","oauth-sign","ramda","chromium-bidi","elliptic","ripemd160","@octokit/rest","@svgr/babel-plugin-remove-jsx-attribute","@shikijs/types","configstore","@types/connect-history-api-fallback","@types/d3-time-format","arch","@types/doctrine","shimmer","utila","expand-brackets","engine.io","stackback","sort-keys","npm-install-checks","@tanstack/store","@types/responselike","@types/html-minifier-terser","@sentry/opentelemetry","@opentelemetry/instrumentation-kafkajs","npm-bundled","node-emoji","npm-pick-manifest","bonjour-service","prr","@shikijs/engine-oniguruma","node-pty","append-field","json-stable-stringify","web-namespaces","promise-inflight","layout-base","split-on-first","@esbuild/win32-x64","@types/d3-drag","@asamuzakjp/dom-selector","@types/sockjs","mocha","connect","@jsonjoy.com/buffers","@npmcli/promise-spawn","@types/js-yaml","d3-force","resolve-dir","@rollup/plugin-commonjs","proper-lockfile","@rushstack/eslint-patch","@types/markdown-it","@babel/plugin-proposal-object-rest-spread","local-pkg","d3-delaunay","pinkie","@ioredis/commands","create-hash","use-sidecar","react-docgen-typescript","hast-util-from-parse5","@discoveryjs/json-ext","klona","@inquirer/checkbox","@npmcli/git","socket.io","npm-packlist","@types/serve-index","is-module","seroval-plugins","conventional-changelog-angular","find-root","@types/minimist","har-schema","cssnano-utils","is-retry-allowed","@msgpackr-extract/msgpackr-extract-linux-x64","@sentry/node-core","des.js","@bufbuild/protobuf","mustache","lodash.escaperegexp","handle-thing","q","@types/fs-extra","jsonify","@babel/helper-hoist-variables","url-template","errno","regexpp","@aws-sdk/s3-request-presigner","assign-symbols","exit-x","@opentelemetry/exporter-metrics-otlp-http","path-case","csv-parse","limiter","crypt","extglob","fbjs","text-decoder","@vercel/oidc","@aws-crypto/crc32c","cron-parser","i18next","pinkie-promise","@socket.io/component-emitter","sourcemap-codec","@esbuild/darwin-x64","@opentelemetry/exporter-trace-otlp-grpc","svg-parser","@borewit/text-codec","@types/d3-delaunay","base64id","basic-auth","slugify","hmac-drbg","minimist-options","vscode-languageserver-types","qrcode","http-deceiver","lighthouse-logger","@apidevtools/json-schema-ref-parser","quansync","socket.io-adapter","@types/bonjour","@mapbox/node-pre-gyp","@types/d3-format","@tanstack/start-client-core","@tanstack/start-storage-context","@tanstack/start-server-core","brorand","@tanstack/start-plugin-core","sentence-case","@tanstack/react-start-server","@tanstack/react-start-client","object.pick","d3-dsv","@types/d3-scale-chromatic","js-base64","@sideway/formula","xml-js","es-get-iterator","nullthrows","walk-up-path","ts-loader","lodash.throttle","katex","constant-case","@dabh/diagnostics","@tanstack/start-fn-stubs","get-own-enumerable-property-symbols","use-callback-ref","@azure/msal-browser","@tanstack/table-core","graphql-tag","string.prototype.includes","@tanstack/react-table","tsconfig-paths-webpack-plugin","es6-symbol","socket.io-client","@azure/core-client","is-url","@types/hoist-non-react-statics","workerpool","needle","formdata-node","@types/sinonjs__fake-timers","es5-ext","use-isomorphic-layout-effect","@types/validator","es6-error","bson","dom-converter","hast-util-to-parse5","source-map-resolve","isbinaryfile","header-case","capital-case","css-line-break","npm-registry-fetch","strip-eof","split","@types/superagent","on-exit-leak-free","engine.io-client","googleapis-common","d3-polygon","package-json","d3-axis","@types/d3-hierarchy","react-style-singleton","@types/caseless","@trysound/sax","@shikijs/langs","postcss-safe-parser","pkce-challenge","is-path-cwd","next-tick","unzipper","compare-versions","google-gax","semver-compare","minimalistic-crypto-utils","@sindresorhus/merge-streams","chrome-launcher","html2canvas","@types/pako","@actions/http-client","@napi-rs/canvas","nodemon","ignore-by-default","decamelize-keys","@mui/types","deprecation","@emotion/styled","prosemirror-transform","regenerator-transform","crelt","@tanstack/react-start","d","compare-func","@sentry/cli-linux-x64","lodash.difference","@types/d3-force","dataloader","union-value","@svgr/babel-plugin-transform-svg-component","motion","confusing-browser-globals","@opentelemetry/exporter-trace-otlp-proto","jwks-rsa","@shikijs/themes","hast-util-raw","d3-chord","simple-update-notifier","@types/cookiejar","@babel/plugin-proposal-optional-chaining","@isaacs/brace-expansion","@types/node-forge","lodash.union","is-relative","standard-as-callback","touch","path-is-inside","webpack-cli","vue","portfinder","@opentelemetry/exporter-metrics-otlp-proto","source-map-url","tree-dump","d3","html-tags","JSONStream","thingies","file-loader","@graphql-codegen/plugin-helpers","tinycolor2","split-string","@sentry/node","lodash.isfunction","copy-webpack-plugin","unc-path-regex","is-unc-path","resize-observer-polyfill","cipher-base","@jsonjoy.com/json-pointer","is-absolute","@rollup/plugin-replace","@types/cacheable-request","tsscmp","hookable","@azure/core-tracing","is-property","@types/luxon","pbkdf2","findup-sync","camelize","es6-iterator","@lukeed/csprng","@npmcli/run-script","call-me-maybe","unbzip2-stream","hard-rejection","vscode-languageserver-textdocument","generate-function","@ai-sdk/gateway","pumpify","lru-memoizer","puppeteer-core","address","@shikijs/core","chart.js","pkg-up","@opentelemetry/exporter-metrics-otlp-grpc","comment-json","@types/d3","yup","shiki","unist-util-remove-position","@prisma/get-platform","ext","hyperdyperid","metro-source-map","array-ify","lodash.snakecase","@google-cloud/storage","git-raw-commits","array-back","metro-runtime","@sentry/types","import-from","plist","browserify-aes","to-object-path","rehype-raw","lodash.mergewith","npm","@npmcli/node-gyp","get-func-name","undefsafe","stream-buffers","fault","@sentry/babel-plugin-component-annotate","prosemirror-commands","escape-goat","hast-util-is-element","@rolldown/binding-linux-x64-musl","d3-brush","@vue/reactivity","metro-symbolicate","unset-value","@esbuild/linux-loong64","d3-contour","title-case","builtins","adler-32","ob1","@babel/plugin-proposal-nullish-coalescing-operator","@types/d3-geo","is-nan","@prisma/debug","css-color-keywords","esbuild-register","pstree.remy","typical","@tanstack/react-start-rsc","@turf/helpers","crypto-browserify","oxc-parser","storybook","jsonpath-plus","toposort","polished","event-emitter","prosemirror-view","webpack-bundle-analyzer","dset","ip-regex","morgan","@types/supertest","@jsonjoy.com/codegen","mixin-deep","compute-scroll-into-view","object-visit","@svgr/plugin-svgo","@types/d3-axis","pseudomap","@aws-sdk/client-cognito-identity","repeat-element","@tiptap/pm","d3-random","@tiptap/extension-paragraph","@types/estree-jsx","@cloudflare/vite-plugin","constants-browserify","cfb","ssf","acorn-import-assertions","@jest/create-cache-key-function","os-homedir","async-limiter","html-parse-stringify","@types/d3-random","@types/d3-fetch","prosemirror-state","@types/d3-brush","swr","mysql2","svg-pathdata","@npmcli/installed-package-contents","@types/d3-dsv","@types/shimmer","@opentelemetry/exporter-prometheus","@expo/json-file","@types/d3-dispatch","metro-transform-worker","metro-cache-key","helmet","metro","@esbuild/linux-ppc64","@jsdevtools/ono","@clack/core","@base44/vite-plugin","copy-descriptor","global-directory","css-to-react-native","@flmngr/flmngr-react","@whatwg-node/node-fetch","@tiptap/extension-italic","ajv-draft-04","arr-flatten","tiny-warning","browserify-sign","@esbuild/freebsd-x64","fragment-cache","metro-transform-plugins","common-path-prefix","xmlhttprequest-ssl","miller-rabin","browserify-rsa","@vue/runtime-core","deepmerge-ts","prepend-http","esniff","@vue/runtime-dom","urix","notifications-node-client","copy-to-clipboard","mnemonist","@types/methods","valibot","path-root","@shikijs/engine-javascript","prosemirror-model","@remix-run/router","@floating-ui/react","https-browserify","@esbuild/sunos-x64","use","resolve-url","stream-http","yargs-unparser","d3-fetch","@azure/core-rest-pipeline","metro-cache","cache-base","papaparse","codepage","ai","react-dropzone","graphql-ws","parse-asn1","prosemirror-tables","v8-compile-cache","xlsx","fstream","@storybook/react","@tiptap/extension-strike","diffie-hellman","@open-draft/logger","quick-format-unescaped","source-map-loader","canvg","@actions/core","@nestjs/core","hasha","buffers","class-utils","snapdragon","file-selector","bottleneck","path-root-regex","@aws-crypto/sha1-browser","collection-visit","fbjs-css-vars","@esbuild/win32-arm64","marky","frac","@vue/server-renderer","shelljs","wmf","pascalcase","github-slugger","jsdoc-type-pratt-parser","@nestjs/common","create-hmac","regex-not","@tiptap/extension-heading","@kwsites/file-exists","puppeteer","parse-filepath","redis","posix-character-classes","domain-browser","nanomatch","@lovable.dev/vite-tanstack-config","metro-config","p-defer","@tiptap/extension-bold","pgpass","quickselect","@types/phoenix","@google-cloud/promisify","auto-bind","fuse.js","@mui/system","@leichtgewicht/ip-codec","word","static-extend","@types/d3-polygon","regex","@tiptap/extension-bubble-menu","conventional-changelog-conventionalcommits","@babel/eslint-parser","@babel/runtime-corejs3","base","format","fast-redact","@tiptap/extension-bullet-list","known-css-properties","@sideway/pinpoint","@esbuild/linux-ia32","@types/prettier","snapdragon-node","@graphql-codegen/visitor-plugin-common","is-network-error","@tiptap/extension-blockquote","@esbuild/linux-riscv64","@esbuild/netbsd-x64","public-encrypt","to-regex","@google/genai","@tiptap/extension-ordered-list","object-copy","@sentry/utils","multer","@slack/types","source-list-map","yaml-ast-parser","map-visit","@azure/core-util","metro-file-map","@tiptap/extension-code-block","object.getownpropertydescriptors","@graphql-tools/batch-execute","@speed-highlight/core","@vitest/ui","@webpack-cli/serve","@esbuild/openbsd-x64","@esbuild/android-arm64","pvutils","@esbuild/freebsd-arm64","@babel/plugin-proposal-numeric-separator","chainsaw","stable","@types/d3-chord","snapdragon-util","latest-version","@tiptap/extension-list-item","harmony-reflect","swagger-ui-dist","attr-accept","is-npm","@babel/helper-builder-binary-assignment-operator-visitor","array-timsort","lodash.flattendeep","vm-browserify","@swc/core-linux-x64-musl","@pnpm/network.ca-file","selderee","@storybook/addon-docs","@esbuild/android-x64","@esbuild/linux-mips64el","chevrotain","oniguruma-to-es","browser-stdout","bcryptjs","@microsoft/tsdoc","case-sensitive-paths-webpack-plugin","simple-git","find-up-simple","@firebase/util","@kurkle/color","@webpack-cli/info","hookified","querystring-es3","console-browserify","regex-recursion","@tiptap/extension-link","tty-browserify","@esbuild/android-arm","index-to-position","dargs","os-browserify","sinon","less","react-i18next","fast-wrap-ansi","@pnpm/config.env-replace","stackblur-canvas","@babel/plugin-proposal-private-methods","binary","class-transformer","@whatwg-node/fetch","property-expr","@babel/register","typed-query-selector","metro-babel-transformer","md5.js","memory-fs","builtin-status-codes","@fast-csv/format","hyphenate-style-name","fast-querystring","@volar/language-core","ip","@redis/client","is-builtin-module","astring","@esbuild/linux-arm","@babel/plugin-syntax-export-namespace-from","is-lower-case","@esbuild/linux-s390x","pvtsutils","@rollup/plugin-babel","@types/d3-contour","rettime","@opentelemetry/instrumentation-nestjs-core","asn1js","linkifyjs","browser-process-hrtime","@types/whatwg-url","jsep","@aws-sdk/credential-providers","@selderee/plugin-htmlparser2","regex-parser","@npmcli/package-json","number-is-nan","default-gateway","infer-owner","timers-browserify","is-upper-case","comment-parser","fast-csv","@storybook/theming","styled-components","@graphql-tools/load","html-to-text","@oxc-parser/binding-linux-x64-gnu","react-lifecycles-compat","swap-case","@tokenizer/token","adjust-sourcemap-loader","msw","stylelint","isomorphic-fetch","@actions/io","vscode-languageserver-protocol","postcss-media-query-parser","aws-sdk","lodash.groupby","@mui/styled-engine","@react-native/dev-middleware","parseley","code-point-at","async-mutex","@esbuild/aix-ppc64","jest-serializer","resolve-url-loader","@slack/web-api","babel-plugin-syntax-hermes-parser","@graphql-tools/optimize","@tiptap/extension-code","identity-obj-proxy","@tiptap/extension-document","crossws","buffer-xor","filenamify","@azure/core-paging","natural-compare-lite","jest-junit","for-own","brotli","@graphql-tools/relay-operation-optimizer","parse-node-version","generic-pool","semver-diff","@webpack-cli/configtest","@csstools/media-query-list-parser","matcher","better-opn","date-fns-tz","@tiptap/extension-gapcursor","from2","@braintree/sanitize-url","randexp","array-uniq","yarn","@expo/plist","@tufjs/models","@mui/core-downloads-tracker","@chevrotain/types","@tiptap/starter-kit","@esbuild/win32-ia32","base-x","@mui/utils","lodash.isnil","class-validator","sqlstring","object-treeify","cachedir","react-error-boundary","@vue/devtools-api","react-devtools-core","lowlight","vscode-languageserver","uid","lodash.startcase","@slack/logger","http-status-codes","fast-decode-uri-component","metro-minify-terser","jmespath","@mui/private-theming","pino-pretty","@svgr/webpack","@radix-ui/react-toolbar","@jsep-plugin/assignment","@commitlint/types","postgres","@keyv/serialize","fast-sha256","tuf-js","earcut","@sinonjs/samsam","openid-client","create-ecdh","@types/sizzle","cookie-parser","update-notifier","pixelmatch","react-icons","iterare","toggle-selection","@tiptap/extension-underline","@iconify/types","@graphql-tools/graphql-tag-pluck","svg-tags","pacote","lodash.kebabcase","@azure/logger","@ardatan/relay-compiler","temp","@mui/material","rope-sequence","moo","browserify-cipher","@prisma/config","editorconfig","nx","chalk-template","util.promisify","p-event","w3c-hr-time","spark-md5"]}

data/popular-pypi.json

+{"ecosystem":"pypi","generated":"2026-07-31","source":"https://hugovk.dev/top-pypi-packages/top-pypi-packages.min.json — built from PyPI's own download table (dataset last_update 2026-07-01 06:34:06, via ClickHouse)","selection":"the first 3000 projects of that table, in order, normalised to PEP 503 form and deduplicated","ranking_length":15000,"verification":{"method":"none: pypi.org publishes no per-package downloads API to re-measure against, so the counts are the linked dataset's and are not independently checked here","lowest_downloads_in_selection":2378111},"limits":"A snapshot. A project that became popular after the date above is not here, so a squat aimed at it is not caught by the local name check, and the project itself may be reported as resembling something else.","names":["boto3","packaging","urllib3","certifi","idna","requests","typing-extensions","charset-normalizer","botocore","setuptools","cryptography","aiobotocore","pygments","pluggy","python-dateutil","six","pyyaml","numpy","cffi","pydantic","pytest","click","pycparser","iniconfig","grpcio-status","pydantic-core","anyio","s3transfer","attrs","protobuf","h11","fsspec","annotated-types","pandas","s3fs","markupsafe","httpx","httpcore","platformdirs","typing-inspection","jinja2","python-dotenv","pip","filelock","pathspec","pyjwt","litellm","aiohttp","rich","jmespath","markdown-it-py","yarl","tqdm","propcache","rpds-py","multidict","google-auth","jsonschema","starlette","mdurl","pytz","wheel","pyasn1","aiohappyeyeballs","frozenlist","importlib-metadata","zipp","uvicorn","virtualenv","aiosignal","opentelemetry-sdk","sglang","fastapi","trove-classifiers","referencing","googleapis-common-protos","tzdata","jsonschema-specifications","pillow","opentelemetry-semantic-conventions","google-api-core","annotated-doc","wrapt","pyasn1-modules","greenlet","grpcio","sniffio","typer","colorama","tenacity","websockets","opentelemetry-api","scipy","shellingham","pyarrow","hatchling","beautifulsoup4","pyparsing","sqlalchemy","huggingface-hub","soupsieve","regex","tomli","opentelemetry-exporter-otlp-proto-http","pydantic-settings","opentelemetry-proto","psutil","lxml","distro","requests-oauthlib","python-multipart","openai","textual","more-itertools","jiter","distlib","cachetools","tomlkit","exceptiongroup","watchfiles","langchain","oauthlib","opentelemetry-instrumentation","awscli","proto-plus","openpyxl","opentelemetry-exporter-otlp-proto-common","et-xmlfile","opentelemetry-exporter-otlp-proto-grpc","wcwidth","editables","dnspython","requests-toolbelt","rsa","coverage","grpcio-tools","python-discovery","pyopenssl","google-genai","multiprocess","gitpython","sse-starlette","mypy-extensions","networkx","mcp","pytest-json-ctrf","msgpack","smmap","ruff","sortedcontainers","werkzeug","decorator","psycopg2-binary","keyring","google-cloud-storage","fonttools","redis","gitdb","matplotlib","docstring-parser","hf-xet","jaraco-classes","websocket-client","jeepney","secretstorage","pynacl","prompt-toolkit","pytest-asyncio","jaraco-functools","docutils","tabulate","kiwisolver","jaraco-context","pydantic-ai-slim","azure-identity","azure-core","scikit-learn","isodate","contourpy","tiktoken","ptyprocess","defusedxml","email-validator","pytest-cov","tokenizers","httptools","dill","pexpect","joblib","docker","itsdangerous","google-cloud-core","uvloop","flask","orjson","chardet","bcrypt","weaviate-client","alembic","browser-use","httpx-sse","msal","tzlocal","ydb","nodeenv","opentelemetry-instrumentation-requests","cycler","ruamel-yaml","deprecated","google-api-python-client","google-resumable-media","async-timeout","toml","threadpoolctl","mako","opentelemetry-util-http","ipython","google-crc32c","blinker","snowflake-connector-python","jsonpointer","opentelemetry-exporter-otlp","rapidfuzz","xxhash","sympy","poetry-core","uritemplate","pyproject-hooks","identify","google-auth-httplib2","pre-commit","cfgv","google-cloud-bigquery","mypy","zstandard","hpack","prometheus-client","langchain-core","httplib2","asn1crypto","google-auth-oauthlib","transformers","h2","hyperframe","uv","traitlets","google-cloud-secret-manager","google-cloud-batch","build","anthropic","jedi","executing","aiofiles","parso","fastjsonschema","backoff","jsonpatch","paramiko","black","mpmath","authlib","sentry-sdk","matplotlib-inline","google-cloud-kms","asttokens","google-cloud-compute","google-cloud-aiplatform","google-analytics-admin","cloudpickle","sqlparse","msal-extensions","pytest-xdist","joserfc","gcsfs","pydantic-graph","asgiref","stack-data","pure-eval","azure-storage-blob","webencodings","execnet","babel","kubernetes","datasets","gunicorn","grpc-google-iam-v1","types-requests","narwhals","marshmallow","databricks-sdk","termcolor","cython","google-cloud-dlp","tornado","python-json-logger","cachecontrol","tree-sitter","xmltodict","setuptools-scm","google-cloud-texttospeech","opentelemetry-instrumentation-threading","pandas-stubs","google-cloud-speech","librt","pymongo","google-cloud-pubsub","isort","databricks-sql-connector","markdown","dbt-adapters","cfn-lint","watchdog","py4j","asyncpg","tinycss2","aioitertools","pyperclip","pypdf","debugpy","mdit-py-plugins","pytest-mock","nest-asyncio","structlog","dbt-core","dulwich","importlib-resources","pyzmq","jsonschema-path","xlsxwriter","vcs-versioning","python-docx","langsmith","linkify-it-py","flatbuffers","pkginfo","installer","snowflake-snowpark-python","cyclopts","lz4","uc-micro-py","pathable","llama-parse","fastmcp","llama-cloud-services","google-cloud-tasks","pymupdf","slack-sdk","pytokens","beartype","fastuuid","psycopg","jsonref","pycryptodome","lmnr","typedload","google-cloud-logging","google-cloud-monitoring","mccabe","torch","rich-toolkit","durationpy","jupyter-core","typing-inspect","pymysql","griffelib","poetry","sphinx","opentelemetry-exporter-prometheus","ruamel-yaml-clib","safetensors","types-toml","brotli","rich-rst","psycopg-binary","crashtest","pycodestyle","jupyter-client","google-cloud-bigtable","pygithub","cbor2","semver","py-key-value-aio","opentelemetry-instrumentation-fastapi","google-cloud-vision","tomli-w","onnxruntime","pytest-timeout","msrest","cleo","text-unidecode","python-slugify","poetry-plugin-export","ipython-pygments-lexers","backports-zstd","wsproto","awswrangler","pyee","ghapi","invoke","playwright","grpcio-health-checking","deprecation","google-cloud-videointelligence","google-cloud-workflows","xlrd","google-cloud-language","sqlalchemy-bigquery","google-cloud-run","rfc3339-validator","opentelemetry-instrumentation-asgi","nbformat","arrow","deepdiff","ipykernel","google-cloud-redis","google-cloud-dataform","dbt-common","croniter","mistune","google-cloud-os-login","argcomplete","snowflake-sqlalchemy","backports-tarfile","bleach","loguru","graphql-core","faker","lark","comm","google-cloud-bigquery-datatransfer","uncalled-for","google-cloud-dataproc-metastore","cattrs","google-cloud-orchestration-airflow","types-certifi","types-pyyaml","pendulum","grpclib","google-cloud-memcache","shapely","types-protobuf","requests-file","argon2-cffi","uuid-utils","google-cloud-automl","argon2-cffi-bindings","aiosqlite","libcst","sqlglot","dataclasses-json","future","smart-open","jsonpath-ng","triton","modal","nltk","langchain-openai","synchronicity","zope-interface","typeguard","responses","google-cloud-dataflow-client","numba","setproctitle","pysocks","datadog","py","aiofile","azure-common","google-cloud-resource-manager","nbconvert","pbs-installer","reportlab","pyflakes","nbclient","colorlog","humanize","caio","openapi-pydantic","scramp","plotly","portalocker","langgraph","markdownify","pylint","llvmlite","fastmcp-slim","fastcore","pdfminer-six","ast-serialize","mmh3","simplejson","jupyterlab-pygments","polars","unidiff","pycryptodomex","ray","pandocfilters","flake8","pyarrow-hotfix","findpython","ecdsa","pytest-rerunfailures","pypdfium2","click-plugins","selenium","kombu","jupyter-server","prettytable","notebook","confluent-kafka","tree-sitter-languages","opensearch-py","azure-keyvault-secrets","celery","truststore","orderly-set","flask-cors","toolz","pywin32","pydantic-extra-types","redshift-connector","elasticsearch","gevent","trio","langgraph-prebuilt","fastapi-cli","types-python-dateutil","absl-py","astroid","python-pptx","json5","langgraph-sdk","django","vine","amqp","outcome","webcolors","billiard","graphviz","rich-click","types-awscrt","google-ads","opencv-python","inflection","botocore-stubs","altair","pymssql","mistralai","click-didyoumean","pinotdb","langgraph-checkpoint","click-repl","ijson","nvidia-nccl-cu12","async-lru","humanfriendly","langchain-protocol","antlr4-python3-runtime","swebench","aws-sam-translator","duckdb","psycopg2","jupyterlab","cuda-bindings","isoduration","fakeredis","google-cloud-spanner","nh3","pyspark","google-cloud-appengine-logging","types-s3transfer","ormsgpack","langchain-community","freezegun","fqdn","send2trash","xgboost","openapi-spec-validator","uri-template","polars-runtime-32","google-cloud-translate","semantic-version","cuda-pathfinder","mysql-connector-python","langchain-text-splitters","python-jose","rfc3986-validator","posthog","cssselect2","requests-aws4auth","widgetsnbextension","pdfplumber","overrides","google-cloud-container","opentelemetry-instrumentation-httpx","opentelemetry-instrumentation-urllib3","gcloud-aio-auth","gcloud-aio-storage","jupyterlab-widgets","ipywidgets","jupyter-events","opentelemetry-instrumentation-dbapi","tableauserverclient","dateparser","pg8000","omegaconf","opentelemetry-instrumentation-wsgi","google-cloud-datacatalog","opentelemetry-instrumentation-psycopg2","fastavro","terminado","opentelemetry-instrumentation-django","adal","rfc3986","jupyter-server-terminals","google-cloud-storage-transfer","google-cloud-audit-log","moto","boto3-stubs","filetype","apache-airflow-providers-common-sql","lazy-object-proxy","python-telegram-bot","msgspec","ply","peewee","cohere","pyodbc","gspread","h5py","db-dtypes","opentelemetry-instrumentation-urllib","google-cloud-bigquery-storage","opentelemetry-instrumentation-flask","aenum","mlflow-skinny","azure-monitor-opentelemetry-exporter","hypothesis","imageio","opentelemetry-instrumentation-logging","flit-core","zeep","pyrsistent","limits","opencv-python-headless","pyotp","diskcache","azure-mgmt-core","ordered-set","llama-index-indices-managed-llama-cloud","trio-websocket","thrift","seaborn","jupyterlab-server","aioboto3","nvidia-cublas","mashumaro","nvidia-cudnn-cu13","readme-renderer","nvidia-nccl-cu13","fastapi-cloud-cli","nvidia-cusparselt-cu13","mlflow","types-pytz","graphql-relay","astor","nvidia-cuda-nvrtc","graphene","rfc3987-syntax","ddtrace","apscheduler","bracex","azure-storage-queue","statsmodels","torchvision","pyright","appdirs","nvidia-nvshmem-cu13","elastic-transport","llama-index-llms-openai","cuda-toolkit","youtube-transcript-api","nvidia-cusparse","nvidia-cuda-runtime","nvidia-cufft","nvidia-nvjitlink","nvidia-cusolver","semgrep","pyiceberg","nvidia-curand","databricks-sqlalchemy","coloredlogs","retry","yamllint","ujson","azure-storage-file-datalake","nvidia-cuda-cupti","pycountry","stripe","wcmatch","jupyter-lsp","notebook-shim","uv-build","tree-sitter-c-sharp","oauth2client","nvidia-nvtx","ml-dtypes","nvidia-cufile","snowballstemmer","delta-spark","json-repair","passlib","tldextract","html5lib","phonenumbers","entrypoints","bytecode","tox","retrying","google-cloud-firestore","twine","langchain-google-vertexai","patsy","events","mypy-boto3-s3","hyperlink","mergedeep","universal-pathlib","keyrings-google-artifactregistry-auth","stevedore","strands-agents","zope-event","curl-cffi","types-setuptools","cramjam","envier","crc32c","tree-sitter-javascript","lockfile","opentelemetry-distro","id","pytest-metadata","pyroaring","validators","temporalio","flask-sqlalchemy","httpcore2","pandas-gbq","eval-type-backport","sentencepiece","weasyprint","pytimeparse","pyphen","httpx2","ninja","agate","zopfli","aiohttp-retry","lupa","scikit-image","ty","unidecode","pybreaker","license-expression","boolean-py","griffe","parsedatetime","openai-agents","imagesize","simple-salesforce","realtime","rignore","tblib","asyncio","msrestazure","dbt-protos","google-pasta","pgvector","bidict","nvidia-cublas-cu12","sentence-transformers","sphinxcontrib-serializinghtml","mock","google-cloud-alloydb","llama-cloud","types-cachetools","hvac","time-machine","fastar","nvidia-cuda-nvrtc-cu12","nvidia-cudnn-cu12","sqlalchemy-utils","holidays","alabaster","djangorestframework","cyclonedx-python-lib","tree-sitter-java","click-option-group","tree-sitter-c","av","deltalake","tree-sitter-rust","tree-sitter-go","python-http-client","python-socketio","python-engineio","pbr","pypdf2","apache-airflow-providers-fab","openapi-schema-validator","google-cloud-dataplex","python-magic","inflect","nexus-rpc","py-cpuinfo","sendgrid","hiredis","clickhouse-connect","pydyf","azure-batch","groq","lazy-loader","nest-asyncio2","pybind11","packageurl-python","simple-websocket","userpath","flask-login","nvidia-cusparse-cu12","schema","testcontainers","requests-mock","nvidia-nvjitlink-cu12","nvidia-cufft-cu12","psycopg-pool","sphinxcontrib-qthelp","sphinxcontrib-htmlhelp","sphinxcontrib-applehelp","sphinxcontrib-devhelp","py-serializable","nvidia-cuda-cupti-cu12","nvidia-cusolver-cu12","kafka-python","great-expectations","streamlit","jpype1","nvidia-curand-cu12","prek","leather","strenum","oracledb","dask","sshtunnel","pydata-google-auth","binaryornot","jsonpath-python","bandit","dbt-semantic-interfaces","sphinxcontrib-jsmath","tree-sitter-php","agent-client-protocol","nvidia-cuda-runtime-cu12","dbt-extractor","accelerate","datadog-api-client","strictyaml","pymdown-extensions","url-normalize","tree-sitter-ruby","natsort","ua-parser","pyproj","gcloud-aio-bigquery","azure-cosmos","pytest-runner","watchtower","tensorboard","tifffile","tinyhtml5","pipenv","pytest-env","pydeck","flask-limiter","dacite","grpc-interceptor","pip-requirements-parser","nvidia-nvtx-cu12","texttable","google-cloud-dataproc","supabase","yfinance","pydub","einops","aws-requests-auth","factory-boy","opentelemetry-instrumentation-sqlalchemy","cron-descriptor","wandb","pybase64","jira","pycares","sparklines","swesmith","qdrant-client","requests-cache","qrcode","opentelemetry-semantic-conventions-ai","trino","hatch","storage3","types-urllib3","langfuse","typer-slim","postgrest","cloudpathlib","kubernetes-asyncio","opt-einsum","pymupdf4llm","fire","socksio","types-paramiko","pydantic-ai","aiodns","thinc","ollama","sounddevice","hydra-core","logfire-api","jwcrypto","pytest-html","pathvalidate","rich-argparse","daff","opentelemetry-instrumentation-redis","types-redis","azure-mgmt-resource","spacy","azure-servicebus","genai-prices","pytest-django","immutabledict","boltons","sagemaker","cssselect","ua-parser-builtins","pip-audit","opencensus","bitarray","aws-xray-sdk","pymupdf-layout","apache-airflow-providers-http","opencensus-context","py-spy","mysqlclient","levenshtein","azure-kusto-data","arxiv","gql","types-deprecated","types-cffi","bs4","catalogue","argparse","lightgbm","weasel","pip-api","olefile","cached-property","questionary","tensorflow","pydocket","pkgutil-resolve-name","apache-airflow-providers-databricks","opentelemetry-instrumentation-aiohttp-client","pyathena","giturlparse","preshed","python-frontmatter","langchain-anthropic","openlineage-python","google-adk","maxminddb","wikipedia-api","django-cors-headers","pyspnego","oscrypto","diff-cover","frozendict","python-daemon","azure-datalake-store","apache-airflow","parameterized","supabase-functions","supabase-auth","srsly","apache-airflow-providers-snowflake","tree-sitter-bash","flask-wtf","langchain-classic","aws-lambda-powertools","mlflow-tracing","murmurhash","pathlib-abc","soundfile","keras","gast","meson","snowplow-tracker","geopandas","google-cloud-build","sqlmodel","jax","pydot","face","checkov","protego","emoji","databricks-labs-blueprint","fastapi-mcp","pytzdata","wtforms","glom","blis","junitparser","onnx","cymem","apache-airflow-providers-common-compat","types-pyopenssl","twilio","multitasking","azure-mgmt-compute","nvidia-cusparselt-cu12","claude-agent-sdk","pytesseract","xarray","configargparse","python-utils","azure-keyvault-keys","progressbar2","tensorboard-data-server","jsonpickle","py-partiql-parser","slowapi","resolvelib","pydantic-evals","pdf2image","wasabi","parse","confection","hatch-vcs","huey","python-gitlab","cmake","aiosmtplib","sqlalchemy-spanner","skops","spacy-legacy","geoip2","pathos","pyyaml-ft","pip-tools","spacy-loggers","cachelib","backports-asyncio-runner","bashlex","pywin32-ctypes","respx","fastf1","partd","yt-dlp","asyncssh","locket","meson-python","html2text","looker-sdk","pox","docopt","flit","azure-storage-file-share","ppft","cronsim","mkdocs-material","azure-monitor-opentelemetry","gremlinpython","smdebug-rulesconfig","awscrt","yandexcloud","azure-mgmt-storage","geographiclib","sh","inputimeout","geopy","opentelemetry-instrumentation-grpc","pyproject-api","uuid7","mkdocs","ipdb","restructuredtext-lint","jaydebeapi","nvidia-ml-py","types-markdown","django-filter","makefun","ghp-import","optuna","pyyaml-env-tag","uuid6","rdflib","aiohttp-cors","langchain-google-genai","logfire","google-ai-generativelanguage","incremental","pytest-split","pfzy","lxml-html-clean","shap","inquirerpy","firebase-admin","pyproject-metadata","python-gnupg","maturin","vcrpy","faiss-cpu","ldap3","opentelemetry-resourcedetector-gcp","apache-airflow-providers-google","service-identity","statsd","pyserial","azure-kusto-ingest","screeninfo","blake3","google-cloud-storage-control","memray","genson","google-generativeai","mammoth","oci","colorful","pywavelets","ansible-core","atlassian-python-api","types-tabulate","segment-analytics-python","tritonclient","mkdocs-get-deps","cobble","jupyter-console","griffecli","chevron","avro","types-aiofiles","fastparquet","flask-babel","docling","jupyter","aiomysql","pyelftools","apache-airflow-providers-cncf-kubernetes","flask-appbuilder","azure-mgmt-containerservice","fuzzywuzzy","pyogrio","instructor","llama-index-core","numexpr","asciinema","pytest-benchmark","apispec","sphinx-rtd-theme","jsonlines","kfp","datamodel-code-generator","pydeequ","jaxlib","feedparser","libtmux","supervisor","speechrecognition","python-snappy","cairosvg","types-croniter","mkdocs-material-extensions","sagemaker-studio","simpleeval","cadwyn","office365-rest-python-client","prometheus-fastapi-instrumentator","pika","grpcio-gcp","cwsandbox","mutagen","astronomer-cosmos","biopython","amazon-ion","requirements-parser","flask-session","burner-redis","pooch","nvidia-cufile-cu12","whitenoise","twisted","apache-airflow-providers-imap","microsoft-kiota-http","opensearch-protobufs","slicer","patchelf","paginate","fasteners","fabric","dunamai","microsoft-kiota-authentication-azure","apache-airflow-providers-sqlite","pickleshare","cairocffi","gradio","mypy-protobuf","databricks-cli","sseclient-py","django-extensions","requests-ntlm","astunparse","adlfs","opentelemetry-instrumentation-botocore","backcall","apache-airflow-providers-ssh","bubus","textual-speedups","readchar","cdp-use","imbalanced-learn","pytest-repeat","apache-airflow-providers-smtp","shortuuid","python-on-whales","std-uritemplate","microsoft-kiota-serialization-text","microsoft-kiota-serialization-json","libclang","azure-keyvault-certificates","apache-airflow-providers-ftp","mypy-boto3-rds","azure-mgmt-containerregistry","azure-core-tracing-opentelemetry","flask-jwt-extended","pyrfc3339","datetime","mypy-boto3-sqs","monotonic","microsoft-kiota-abstractions","aioresponses","automat","locust","azure-mgmt-cosmosdb","opentelemetry-resource-detector-azure","types-docutils","python-levenshtein","codeowners","msgraph-core","openhands-sdk","google-cloud-managedkafka","constantly","backrefs","pygtrie","pypika","fpdf2","blessed","apache-airflow-providers-mysql","flower","chromadb","ftfy","timm","langchain-aws","types-pymysql","prefect","tree-sitter-yaml","memory-profiler","slack-bolt","opentelemetry-propagator-aws-xray","azure-mgmt-msi","papermill","pytest-socket","iso8601","openhands-tools","azure-mgmt-containerinstance","junit-xml","gradio-client","azure-data-tables","yapf","azure-mgmt-datafactory","drf-spectacular","magika","sphinxcontrib-jquery","mini-swe-agent","django-storages","torchmetrics","neo4j","clickhouse-driver","marshmallow-sqlalchemy","aiolimiter","scp","htmldate","ratelimit","py-key-value-shared","oldest-supported-numpy","bottle","webdriver-manager","jellyfish","ansible","django-redis","nodejs-wheel-binaries","contextlib2","imageio-ffmpeg","tld","apprise","google-re2","minio","cachebox","netaddr","smbprotocol","pprintpp","pytest-json-report","thrift-sasl","a2wsgi","roman-numerals","crewai","w3lib","syrupy","blobfile","puremagic","tyro","xmlsec","mypy-boto3-dynamodb","geventhttpclient","ciso8601","launchdarkly-server-sdk","browser-use-sdk","toposort","lightning-utilities","mypy-boto3-ec2","scantree","dirhash","python-hcl2","azure-nspkg","wirerope","tree-sitter-language-pack","mypy-boto3-lambda","mkdocstrings-python","azure-eventhub","azure-mgmt-datalake-store","peft","a2a-sdk","langcodes","user-agents","methodtools","torchaudio","pdm","arro3-core","optree","msoffcrypto-tool","databricks-connect","primp","icalendar","h3","launchdarkly-eventsource","docker-pycreds","google-cloud-iam","detect-installer","fastembed","gymnasium","pysftp","markitdown","google-cloud-trace","pytorch-lightning","jsondiff","schedule","pytest-unordered","aiokafka","dpath","configparser","unearth","circuitbreaker","scikit-build-core","langchain-google-community","prison","crewai-tools","pyinstrument","dep-logic","lmnr-claude-code-proxy","django-stubs-ext","altgraph","uritools","dotenv","kaleido","pytest-httpx","ffmpeg-python","httpx-aiohttp","cloudevents","ctranslate2","sqlfluff","cloudflare","pillow-heif","llama-index-workflows","azure-synapse-artifacts","grpcio-reflection","pydash","opentelemetry-exporter-gcp-trace","soxr","python-bidi","pyinstaller","farama-notifications","types-html5lib","autopep8","azure-storage-common","langgraph-api","asgi-lifespan","python-decouple","avro-python3","thefuzz","teradatasql","pyinstaller-hooks-contrib","zarr","tree-sitter-embedded-template","ansicolors","bottleneck","oss2","langdetect","pyxlsb","azure-monitor-query","amplitude-analytics","dirtyjson","flask-caching","fake-useragent","azure-synapse-spark","trafilatura","impyla","appnope","aniso8601","connexion","polyfactory","opentelemetry-instrumentation-system-metrics","kgb","courlan","pyvespa","tom-swe","nose","curlify","cssutils","django-stubs","opencensus-ext-azure","resend","types-jsonschema","apache-airflow-providers-common-io","dask-expr","mypy-boto3-cloudformation","expiringdict","dash","types-python-slugify","types-boto3","grimp","azure-keyvault","asynctest","python-crontab","llama-index-readers-llama-parse","apache-airflow-providers-slack","pytest-base-url","pyhcl","pep517","greenback","xyzservices","cookiecutter","motor","icdiff","opentelemetry-instrumentation-celery","pyclipper","singer-sdk","sphinx-autodoc-typehints","sagemaker-core","import-linter","applicationinsights","django-debug-toolbar","uvicorn-worker","librosa","xlwt","namex","azure-mgmt-authorization","pytest-playwright","sphinx-design","dbt-snowflake","lance-namespace","cuda-python","elasticsearch-dsl","unstructured-client","lance-namespace-urllib3-client","nvidia-nvshmem-cu12","dagster-postgres","stringcase","python3-saml","tensorflow-estimator","audioop-lts","markdown2","django-timezone-field","pytest-icdiff","ultralytics","geomet","basedpyright","braintrust","dockerfile-parse","faster-whisper","types-aiobotocore","jsonconversion","cassandra-driver","azure-mgmt-keyvault","pipdeptree","elementpath","aws-cdk-asset-awscli-v1","docx2txt","waitress","elevenlabs","backports-strenum","microsoft-kiota-serialization-multipart","openlineage-sql","pikepdf","pdbr","parse-type","vulture","microsoft-kiota-serialization-form","azure-ai-projects","bokeh","aliyun-trace","aliyun-semantic-conventions","reactivex","types-aiobotocore-s3","justext","openlineage-integration-common","cligj","distributed","sentinels","enum34","azure-appconfiguration","alibabacloud-credentials","mongomock","python-ulid","apache-airflow-core","tree-sitter-python","mangum","deepmerge","backports-zoneinfo","qtpy","jsii","mixpanel","jupyter-builder","opentelemetry-instrumentation-asyncpg","dataclasses","pandera","constructs","coolname","uv-dynamic-versioning","azure-ai-documentintelligence","facebook-business","audioread","cerberus","llama-index","sgmllib3k","dictdiffer","cmdstanpy","python-jenkins","dbt-databricks","functions-framework","django-environ","mypy-boto3-secretsmanager","xmlschema","azure-mgmt-nspkg","paho-mqtt","bazel-runfiles","eventlet","func-timeout","pi-heif","pylatexenc","azure-mgmt-redis","azure-mgmt-datalake-nspkg","influxdb-client","slackclient","pytest-homeassistant-custom-component","pytest-custom-exit-code","dagster","pycrypto","rtree","databricks-agents","prophet","kaitaistruct","python-keycloak","rdkit","azure-mgmt-monitor","num2words","swifter","aiocache","starkbank-ecdsa","asana","pytest-randomly","edge-tts","dagster-pipes","unittest-xml-reporting","pinecone","allure-python-commons","djangorestframework-simplejwt","diagrams","msgraph-sdk","python3-openid","marshmallow-enum","pypng","deepeval","pyppmd","pyzstd","cytoolz","pyzipper","protobuf3-to-dict","strawberry-graphql","django-celery-beat","trimesh","myst-parser","mkdocstrings","opencv-contrib-python","etils","pytest-instafail","pure-sasl","py7zr","mypy-boto3-sts","aliyun-python-sdk-core","pyhanko","zstd","python-box","atpublic","enum-compat","dj-database-url","pyaml","qtconsole","pyhumps","azure-mgmt-web","py-evm","mkdocs-autorefs","publication","toons","jsbeautifier","pytest-forked","ibm-cloud-sdk-core","sphinx-copybutton","anytree","types-psutil","voluptuous","diffusers","pyshp","pyreadline3","pymsteams","llama-index-embeddings-openai","svix","line-bot-sdk","azure-mgmt-cognitiveservices","rq","rank-bm25","bedrock-agentcore","boto","hatch-fancy-pypi-readme","pybcj","addict","win32-setctime","lancedb","click-default-group","aws-cdk-lib","pytest-sugar","banks","ag-ui-protocol","opentelemetry-instrumentation-haystack","inflate64","asyncer","azure-mgmt-sql","schemathesis","colorclass","multivolumefile","dependency-groups","aiormq","cloud-sql-python-connector","types-webencodings","editorconfig","pyhive","tokenize-rt","stanio","gguf","svcs","dagster-shared","apache-airflow-providers-amazon","allure-pytest","deptry","ipython-genutils","python-arango","azure-mgmt-managementgroups","discord-py","llama-index-instrumentation","hypercorn","scapy","types-psycopg2","rustworkx","xai-sdk","mistral-common","langchain-mcp-adapters","pipx","configobj","google-cloud-discoveryengine","dependency-injector","azure-mgmt-rdbms","biotite","fiona","striprtf","dlt","firecrawl-py","opentelemetry-instrumentation-vertexai","brotlicffi","clr-loader","checkdigit","eth-account","pynndescent","azure-mgmt-servicebus","pythonnet","funcy","openinference-semantic-conventions","ndg-httpsclient","tavily-python","tox-uv","pyrate-limiter","knack","inspect-ai","azure-mgmt-loganalytics","azure-search-documents","azure-mgmt-network","compressed-tensors","auth0-python","unicodecsv","pastel","opentelemetry-instrumentation-lancedb","alibabacloud-tea-openapi","mypy-boto3-glue","pytest-recording","langgraph-checkpoint-postgres","azure-mgmt-eventhub","pgpy","crcmod","urwid","alibabacloud-adb20211201","publicsuffix2","opentelemetry-exporter-gcp-logging","dagster-webserver","azure-ai-agents","azure-mgmt-policyinsights","umap-learn","numcodecs","boostedblob","azure-mgmt-applicationinsights","pyexasol","marshmallow-oneofschema","whatthepatch","azure-mgmt-recoveryservices","json-rpc","autobahn","pulumi","bitsandbytes","azure-mgmt-recoveryservicesbackup","ultralytics-thop","dynaconf","azure-cli","apache-airflow-task-sdk","nox","selectolax","databricks-labs-dqx","pdm-backend","setuptools-rust","deepagents","opentelemetry-instrumentation-pinecone","clickclick","azure-mgmt-cdn","openinference-instrumentation","hjson","kazoo","pefile","c7n-org","opentelemetry-instrumentation-milvus","simple-gcp-object-downloader","pint","azure-mgmt-search","aws-cdk-asset-node-proxy-agent-v6","pkgconfig","azure-mgmt-batch","apache-tvm-ffi","janus","google-cloud-bigquery-biglake","eth-utils","scrapy","azure-cli-core","opentelemetry-instrumentation-bedrock","dagster-graphql","datasketch","opentelemetry-instrumentation-llamaindex","azure-mgmt-eventgrid","opentelemetry-instrumentation-cohere","moviepy","catboost","azure-mgmt-iothub","ip3country","aws-cdk-cloud-assembly-schema","hdfs","social-auth-core","korean-lunar-calendar","django-phonenumber-field","hexbytes","opentelemetry-instrumentation-ollama","pamqp","azure-mgmt-trafficmanager","eth-abi","opsgenie-sdk","opentelemetry-instrumentation-qdrant","ddgs","opentelemetry-instrumentation-replicate","opentelemetry-instrumentation-transformers","sql-metadata","python-crfsuite","opentelemetry-instrumentation-chromadb","jinja2-humanize-extension","async-generator","tree-sitter-typescript","opentelemetry-instrumentation-watsonx","sqlparams","priority","opentelemetry-instrumentation-weaviate","txaio","azure-mgmt-marketplaceordering","xgrammar","opentelemetry-instrumentation-alephalpha","polib","opentelemetry-instrumentation-mistralai","codewords-client","jq","opentelemetry-instrumentation-together","tensorflow-io-gcs-filesystem","ipaddress","certbot-dns-cloudflare","opentelemetry-instrumentation-marqo","opentelemetry-instrumentation-sagemaker","dbt-postgres","pulp","prance","parsimonious","azure-mgmt-advisor","opentelemetry-instrumentation-crewai","webob","eth-hash","safety","eth-typing","workos","opentelemetry-exporter-gcp-monitoring","google-analytics-data","pathlib","dspy","pyahocorasick","cchardet","pywinrm","openhands-ai","webauthn","rasterio","pinecone-plugin-interface","azure-mgmt-servicefabric","azure-mgmt-signalr","choreographer","apache-airflow-microsoft-fabric-plugin","funcsigs","partial-json-parser","statsig","httpx-ws","jinxed","commonmark","easygui","eth-rlp","airbyte-api","azure-mgmt-billing","prefect-aws","grep-ast","opentelemetry-instrumentation-mcp","types-retry","azure-mgmt-media","azure-mgmt-maps","azure-mgmt-iothubprovisioningservices","azure-mgmt-datamigration","pytest-aiohttp","pyiceberg-core","azure-mgmt-iotcentral","mypy-boto3-redshift-data","azure-mgmt-batchai","sqlalchemy-jsonfield","bitstring","z3-solver","browsergym-core","sphinx-autobuild","mypy-boto3-appflow","intervaltree","flexparser","safehttpx","pymilvus","flexcache","pyodps","ifaddr","configupdater","lightning","oletools","google-cloud-artifact-registry","construct","dbt-spark","orbax-checkpoint","channels","mitmproxy","exa-py","asteval","pypandoc","pcodedmp","pytest-order","loongsuite-util-genai","apache-beam","vertica-python","ebcdic","flask-migrate","pagerduty","detect-secrets","types-tqdm","types-six","whenever","parver","async-property","jupyter-kernel-gateway","github3-py","proglog","vllm","marko","orderedmultidict","gepa","python-stdnum","ortools","pympler","port-for","furl","opentelemetry-sdk-extension-aws","autoflake","aio-pika","marshmallow-dataclass","nanobind","nanoid","pyroscope-io","azure-functions","pex","apache-airflow-providers-standard","requests-kerberos","gensim","opentelemetry-instrumentation-sqlite3","openai-harmony","jaxtyping","hf-transfer","pygit2","roboflow","social-auth-app-django","presidio-analyzer","ddsketch","pycomposefile","imagehash","pyfiglet","django-model-utils","apache-airflow-providers-microsoft-fabric","evaluate","timezonefinder","openhands-aci","acme","google-cloud-datastore","tensorflow-serving-api","intelhex","dbt-bigquery","logbook","pywinpty","plumbum","yaspin","duckduckgo-search","onnxscript","djangorestframework-stubs","groovy","alibabacloud-tea-util","pyhanko-certvalidator","extract-msg","h5netcdf","eth-keys","codespell","opentelemetry-instrumentation-asyncio","numpy-financial","snowflake-core","ansible-compat","mbstrdecoder","turbopuffer","rlp","types-beautifulsoup4","pip-system-certs","pyrefly","python-socks","eth-keyfile","google","svglib","premailer","encutils","azure-mgmt-privatedns","opentelemetry-instrumentation-openai","javaproperties","azure-eventgrid","llguidance","pynamodb","opentelemetry-instrumentation-starlette","azure-ai-inference","unstructured","sphinxcontrib-mermaid","python-backoff","python-chess","ckzg","polyleven","opentelemetry-instrumentation-langchain","behave","azure-mgmt-apimanagement","terminaltables","arabic-reshaper","pypandoc-binary","pyhamcrest","pyscaffold","python-rapidjson","modelscope","py-rust-stemmers","pybase62","teradatasqlalchemy","tablib","fireworks-ai","uamqp","gprof2dot","poethepoet","asyncstdlib","pydocstyle","multipart","lru-dict","autoevals","pycurl","typepy","pyhocon","multipledispatch","jsonschema-rs","gssapi","daphne","hmsclient","habluetooth","granian","probableparsing","airbyte-cdk","strands-agents-tools","sqlalchemy-redshift","tensorboardx","pytest-dotenv","azure-devops","obstore","opentelemetry-instrumentation-kafka-python","dify-plugin","google-cloud","celery-redbeat","hishel","types-boto3-s3","usaddress","tf-keras","albumentations","compressed-rtf","django-ipware","dataclass-wizard","django-oauth-toolkit","zxcvbn","azure-mgmt-appcontainers","flax","legacy-cgi","azure-mgmt-security","types-aioboto3","subprocess-tee","opentelemetry-instrumentation-anthropic","azure-mgmt-hdinsight","azure-mgmt-appconfiguration","mando","magicattr","rx","rtfde","python-calamine","googletrans","docling-core","python-can","environs","pymupdfb","radon","microsoft-security-utilities-secret-masker","azure-cli-telemetry","django-appconf","pytest-postgresql","mpire","azure-mgmt-synapse","anyascii","freetype-py","iso3166","bc-detect-secrets","azure-mgmt-postgresqlflexibleservers","msgraphfs","pyfakefs","dparse","pymsgbox","alibabacloud-openapi-util","geoalchemy2","azure-mgmt-redhatopenshift","pubchempy","coolprop","tox-uv-bare","outlines-core","pydicom","standard-chunk","standard-aifc","quack-kernels","shtab","alibabacloud-oss-v2","robotframework","dm-tree","ibmcloudant","vertexai","aiomultiprocess","casefy","web3","databricks-labs-lsql","valkey","logistro","interegular","bitstruct","azure-keyvault-administration","azure-mgmt-netapp","openapi-core","pdfkit","typing","zenpy","presto-python-client","krb5","opentelemetry-instrumentation-pymongo","parsel","autograd","opentelemetry-instrumentation-boto3sqs","osqp","atomicwrites","redis-py-cluster","pytablewriter","azure-mgmt-sqlvirtualmachine","azure-synapse-accesscontrol","tensorflow-text","azure-mgmt-imagebuilder","comtypes","azure-mgmt-mysqlflexibleservers","opentelemetry-instrumentation-jinja2","spdx-tools","azure-mgmt-botservice","accessible-pygments","nats-py","inquirer","azure-mgmt-servicelinker","azure-synapse-managedprivateendpoints","azure-mgmt-servicefabricmanagedclusters","nvidia-cutlass-dsl","azure-mgmt-extendedlocation","sqlglotrs","convertdate","azure-graphrbac","pyqt6","kfp-pipeline-spec","python-ipware","types-openpyxl","textblob","onnx-ir","cross-web","yamale","django-allauth","multi-key-dict","pysbd","ffmpy","affine","stockfish","scrapbook","opentelemetry-instrumentation-aiokafka","astropy","py-deviceid","pytest-lazy-fixtures","fixedint","flashinfer-python","pypsrp","testfixtures","pathlib2","xmod","py-vapid","diff-match-patch","editor","querystring-parser","sphinx-argparse","django-simple-history","python-ldap","django-health-check","timeout-decorator","semchunk","tinytag","sqlite-vec","llama-index-readers-file","waybackpy","pyusb","dataproperty","cloudscraper","django-celery-results","folium","zict","runs","ansible-lint","shelved-cache","retryhttp","opentelemetry-propagator-b3","wbdata","channels-redis","openhands-agent-server","requests-futures","pyerfa","e2b","types-lxml","dagster-aws","tensorflowjs","tibs","opentelemetry-instrumentation-aws-lambda","nvidia-cutlass-dsl-libs-base","donfig","geojson","json-merge-patch","pylance","opentelemetry-instrumentation-psycopg","django-otp","torchcodec","towncrier","cvxpy","newrelic","appier","cftime","akeyless","pytest-subtests","django-csp","datafusion","lmdb","livekit-protocol","versioneer","pytube","dagster-cloud-cli","netcdf4","daytona","pyinotify","asgi-correlation-id","azure-keyvault-securitydomain","patch-ng","google-api","o365","flake8-bugbear","azure-mgmt-resource-deploymentstacks","tzfpy","winkerberos","lxml-stubs","appium-python-client","playwright-stealth","ydb-dbapi","types-simplejson","pyod","pillow-avif-plugin","pywebpush","azure-mgmt-resource-deployments","disposable-email-domains","aliyun-python-sdk-kms","sly","httpr","acryl-datahub","wadler-lindig","blosc2","gcovr","pydata-sphinx-theme","dagster-cloud","livekit-api","pyairtable","biotraj","flask-socketio","xhtml2pdf","aws-msk-iam-sasl-signer-python","flatten-dict","presidio-anonymizer","livekit","crcmod-plus","pynvml","pulumi-aws","azure-mgmt-resource-templatespecs","pyenchant","azure-mgmt-resource-deploymentscripts","pytest-testmon","pyopengl","base58","immutables","astropy-iers-data","policy-sentry","keras-applications","luigi","marisa-trie","openlineage-airflow","llama-index-cli","aiogram","apache-airflow-providers-microsoft-mssql","flaky","cuda-core","zizmor","cel-python","yandex-query-client","pycep-parser","cloudsplaining","livekit-agents","pytest-check","pyqt6-qt6","capstone","bc-python-hcl2","simple-term-menu","typed-ast","scrapy-playwright","apache-airflow-providers-sftp","tensorstore","onnxruntime-gpu","optax","opentelemetry-util-genai","safety-schemas","hubspot-api-client","sacrebleu","latex2sympy2-extended","pyluach","types-mock","minimal-snowplow-tracker","keyrings-alt","yq","latex2mathml","sagemaker-mlflow","ccxt","dbl-tempo","django-prometheus","pycocotools","influxdb","arq","pyqt6-sip","pylsqpack","tree-sitter-cpp","poetry-dynamic-versioning","gotrue","math-verify","structlog-sentry","eralchemy","sspilib","reductoai","opentelemetry-instrumentation-mysqlclient","blockbuster","gdown","aioquic","opentelemetry-instrumentation-tortoiseorm","opentelemetry-instrumentation-tornado","google-cloud-documentai","pytest-httpserver","puccinialin","bc-jsonpath-ng","opentelemetry-processor-baggage","typed-settings","daytona-api-client","pystache","llama-index-agent-openai","torch-c-dlpack-ext","python-iso639","daytona-api-client-async","docling-slim","boxsdk","apache-airflow-providers-docker","arviz","cx-oracle","pyunormalize","trl","pyarrow-stubs","simsimd","pyyaml-include","datefinder","exchange-calendars","conan","opik","langgraph-cli","daytona-toolbox-api-client-async","pylint-plugin-utils","suds-community","phonenumberslite","flask-restful","clang-format","pglast","daytona-toolbox-api-client","azure-ai-ml","chroma-hnswlib","httpx-retries","types-pillow","jdcal","pyhmmer","injector","haversine","python-xlib","fastapi-pagination","jupytext","multimethod","dagster-k8s","tabledata","pykwalify","lm-format-enforcer","mmcif","gspread-dataframe","about-time","growthbook","pytest-timeouts","sphinxcontrib-httpdomain","nbclassic","sphinxcontrib-spelling","regress","shellcheck-py","alive-progress","fast-langdetect","sphinx-autoapi","opentelemetry-instrumentation-pymysql","restrictedpython","recordlinkage","scipy-stubs","pycairo","salesforce-bulk","jwt","mistral-vibe","evergreen-py","webargs","flask-compress","cssbeautifier","pdpyras","tweepy","databricks-vectorsearch","mirakuru","tinydb","fs","psygnal","opentelemetry-instrumentation-pika","snowflake","django-taggit","jaconv","opentelemetry-instrumentation-google-generativeai","notion-client","statsig-python-core","pusher","editdistance","optype","gitignore-parser","apache-airflow-providers-apache-impala","argparse-addons","djangorestframework-csv","langchain-ollama","stamina","cupy-cuda12x","branca","opentelemetry-instrumentation-falcon","tach","easyocr","ibm-db","swagger-ui-bundle","click-spinner","cleanco","munch","leb128","azure-mgmt-subscription","tables","cdk-nag","mkdocs-macros-plugin","glfw","formulaic","djlint","sqlfluff-templater-dbt","pytest-codspeed","expandvars","icecream","albucore","types-pygments","jiwer","vercel-runtime","geocoder","django-axes","depyf","algoliasearch","datacompy","decli","dashscope","patchright","cucumber-expressions","pytimeparse2","pdfrw","opentelemetry-instrumentation-elasticsearch","python-tds","tensorflow-metadata","ratelim","language-data","check-jsonschema","pytest-memray","numpy-typing-compat","azure-communication-email","super-collections","pytest-github-actions-annotate-failures","jsonpath-rw","mypy-boto3-bedrock-runtime","mypy-boto3-ecr","anywidget","voyageai","celery-types","lark-parser","rstr","django-formtools","promise","livekit-plugins-silero","easydict","docling-parse","cucumber-tag-expressions","valkey-glide","azure-mgmt-containerregistrytasks","click-log","pydruid","snowflake-legacy","mypy-boto3-ssm","types-aiobotocore-ec2","panel","pyloudnorm","types-freezegun","mss","tabula-py","mitmproxy-rs","opentelemetry-instrumentation-pyramid","wordcloud","pyside6-essentials","yt-dlp-ejs","hijridate","clarabel","opentelemetry-instrumentation-confluent-kafka","mypy-boto3-athena","aws-encryption-sdk","nvidia-cudnn-frontend","python-oxmsg","opentelemetry-instrumentation-aio-pika","shiboken6","grpc-stubs","pytorch-metric-learning","scs","shrub-py","pymeeus","mypy-boto3-iam","odfpy","aws-psycopg2","chess","luqum","ua-parser-rs","interface-meta","rapidocr","hf-gradio","dbt-redshift","pytest-bdd","django-ratelimit","fpdf","pyobjc-core","pyquaternion","mypy-boto3-stepfunctions","s3path","quart","asynch","torchao","concurrent-log-handler","influxdb3-python","telethon","dotmap","deepgram-sdk","django-treebeard","textparser","hdbcli","django-structlog","databricks-feature-engineering","psmpy","aws-opentelemetry-distro","causallib","cem","pytest-ordering","databricks-langchain","rjsmin","opencv-contrib-python-headless","soda-core","prometheus-flask-exporter","mem0ai","language-tags","zc-lockfile","alibabacloud-gateway-spi","rouge-score","wagtail-factories","nulltype","yappi","dynamodb-json","google-cloud-vectorsearch","langgraph-runtime-inmem","commitizen","livekit-plugins-openai","opentelemetry-instrumentation-mysql","aiostream","xsdata","pyaes","rembg","docling-ibm-models","magic-filter","pydispatcher","types-aiobotocore-sqs","pyobjc-framework-cocoa","mypy-boto3-kinesis","hatch-requirements-txt","sqlalchemy-drill","flufl-lock","pystac","hijri-converter","django-crispy-forms","lit","pybuildkite","tantivy","parsy","davey","pkce","spython","opentelemetry-instrumentation-groq","dbutils","azure-mgmt-domainregistration","repoze-lru","fastexcel","schedula","inflector","formulas","crewai-core","crewai-cli","httpx-auth","mteb","opentelemetry-propagator-jaeger","kfp-server-api","sshfs","hdbscan","resampy","chispa","pmdarima","treescope","openmed","cfn-flip","avro-gen3","mdformat","kornia","click-aliases","simple-parsing","queuelib","flashinfer-cubin","plotnine","betterproto","nameparser","rarfile","pyqt5","category-encoders","pytz-deprecation-shim","mypy-boto3-ecs","azure-mgmt-dns","rcssmin","google-cloud-org-policy","comfyui-workflow-templates","tree-sitter-json","agno","alibabacloud-tea","mizani","line-profiler","opentelemetry-instrumentation-pymemcache","decord","pyreadstat","drf-yasg","google-cloud-os-config","iterative-telemetry","pastedeploy","dagster-dg-cli","sphinx-jinja","futures","pygeohash","pyqt5-sip","google-cloud-access-context-manager","aiohttp-jinja2","google-cloud-asset","google-cloud-pubsublite","django-ninja","awslambdaric","portpicker","django-js-asset","opentelemetry-instrumentation-aiopg","livekit-blingfire","tcolorpy","dagster-slack","graphframes","red-black-tree-mod","torchdata","json-log-formatter","pytest-factoryboy","rerun-sdk","aws-sam-cli","uuid","pip-licenses","jinja2-simple-tags","opentelemetry-instrumentation-cassandra","tink","cuda-tile","seleniumbase","opentelemetry-instrumentation-remoulade","llama-index-program-openai","k8","llama-index-multi-modal-llms-openai","fal-client","jproperties","braceexpand","openapi-python-client","azure-mgmt-resourcegraph","comfyui-workflow-templates-media-other","llama-index-question-gen-openai","traceloop-sdk","mediapipe","pyqt5-qt5","supafunc","ndindex","django-import-export","comfyui-frontend-package","xformers","pytest-durations","zeroconf","pulumi-command","comfyui-workflow-templates-media-image","libsass","pyscreeze","transitions","opentelemetry-propagator-ot-trace","kornia-rs","akshare","pytweening","highspy","json-logic","igraph","lark-oapi","wget","ecs-logging","moreorless","yacs","grandalf","google-api-python-client-stubs","pydantic-handlebars","pwdlib","pyautogui","comfyui-workflow-templates-core","pygetwindow","furo","ec2-metadata","browserforge","zope-deprecation","coincurve","pysmb","ml-collections","sqlalchemy2-stubs","pygame","urllib3-secure-extra","aws-secretsmanager-caching","pytest-retry","result","itemadapter","pyrect","comfyui-embedded-docs","venusian","comfyui-workflow-templates-media-video","pagefind","fasttext-wheel","opentelemetry-instrumentation-boto","azure-mgmt-reservations","googlemaps","reedsolo","pagefind-bin","cheroot","dash-bootstrap-components","apache-airflow-providers-airbyte","mypy-boto3-sns","signxml","django-anymail","hyperopt","array-record","model-hosting-container-standards","sarif-om","stringzilla","testing-common-database","browserbase","hupper","pyside6-addons","mouseinfo","prometheus-api-client","django-polymorphic","itemloaders","mitmproxy-linux","pyjson5","pyside6","uncertainties","pymemcache","docxtpl","open-clip-torch","testing-postgresql","kubernetes-stubs-elephant-fork","locust-cloud","pytest-random-order","langchain-litellm","edgegrid-python","jsonargparse","pysaml2","tbb","pycrdt","submitit","envs","sudachipy","dagster-dg-core","akeyless-cloud-id","opentelemetry-instrumentation-openai-agents","pymatting","requests-unixsocket","comfy-aimdo","types-boto3-sqs","langchain-experimental","django-two-factor-auth","apache-airflow-providers-postgres","flatten-json","fcache","openai-whisper","readerwriterlock","rlpycairo","css-inline","azure-monitor-ingestion","langgraph-checkpoint-sqlite","qh3","flask-httpauth","sgqlc","docker-image-py","ibis-framework","boa-str","hashids","types-boto3-dynamodb","netifaces","param","python-editor","alibabacloud-endpoint-util","pycognito","flake8-pyproject","harbor","types-ujson","adbc-driver-manager","soda-core-spark","dvc","pep8-naming","comfyui-workflow-templates-media-api","casbin","cloudinary","objsize","google-apitools","redisvl","ulid-py","kerberos","sphinx-basic-ng","piexif","opentelemetry-instrumentation-agno","roman-numerals-py","colored","django-linear-migrations","gherkin-official","yaml-config","django-compressor","apache-superset","usaddress-scourgify","openinference-instrumentation-langchain","databricks-api","pyobjc-framework-quartz","mujoco","hypothesis-jsonschema","dirty-equals","taskgroup","bluetooth-data-tools","python-vagrant","azure-cosmosdb-table","inject","langchain-tests","pulumi-tls","flask-talisman","soda-core-spark-df","opentelemetry-instrumentation-writer","update-checker","currency-symbols","browser-cookie3","semantic-kernel","flask-admin","harbor-rewardkit","apsw","dvc-studio-client","github-copilot-sdk","flashtext","types-colorama","mypy-boto3-apigateway","azure-cosmosdb-nspkg","translationstring","sudachidict-core","chdb","findspark","django-silk","aiohttp-socks","djangorestframework-api-key","gtts","pyannote-metrics","aiologic","pydantic-yaml","azure-storage-file","mail-parser","paddleocr","braintrust-core","standardwebhooks","types-pyasn1","mercantile","dbt-fabric","pyannote-database","starlette-context","segno","types-grpcio","kagglehub","types-boto3-ses","mypy-boto3-logs","mcp-proxy","pyexcel-io","textdistance","pywinauto","flake8-docstrings","apify-client","tcmlib","colorcet","alembic-postgresql-enum","python-pam","types-regex","dotty-dict","lml","types-boto3-ec2","mypy-boto3-ses","azure-cognitiveservices-speech","types-boto3-lambda","jschema-to-python","pyngrok","livekit-plugins-deepgram","pyramid","unsloth","rfc3987","djangorestframework-dataclasses","comfy-kitchen","django-deprecate-fields","types-boto3-rds","pygsheets","pymc","pytest-vcr","http-ece","snakeviz","swagger-plugin-for-sphinx","python-nvd3","types-httplib2","dogpile-cache","llama-index-legacy","darabonba-core","webdataset","commentjson","mongoengine","testrail-api","livekit-plugins-turn-detector","xls2xlsx","django-hijack","ezdxf","forbiddenfruit","sacremoses","nvidia-cublas-cu11","azureml-mlflow","plyvel","braintree","marimo","trailrunner"]}

engines/email.js

@@ -26,2 +26,78 @@ // Email Guard — email-specific helpers. Deterministic, no LLM. Built-in dns/net/fetch only.
 
+// A body is not always the text a reader sees. Mail routinely arrives base64 or quoted-printable
+// encoded, and multipart mail carries several parts with their own encodings. Scanning the raw block
+// meant scanning the encoding, not the message: a base64 `text/plain` body carrying the same
+// injection this engine catches in plain text scored zero, because the scanner was reading
+// "SWdub3JlIGFsbCBwcmV2aW91cyBpbnN0cnVjdGlvbnM=" and no rule matches that. Decoding is not a nicety
+// here; without it the engine does not do the job its name claims.
+function decodeTransfer(text, encoding) {
+  const enc = String(encoding || '').trim().toLowerCase();
+  const src = String(text || '');
+  try {
+    if (enc === 'base64') {
+      const clean = src.replace(/[^A-Za-z0-9+/=]/g, '');
+      if (!clean) return '';
+      return Buffer.from(clean, 'base64').toString('utf8');
+    }
+    if (enc === 'quoted-printable') {
+      return src
+        .replace(/=\r?\n/g, '')
+        .replace(/=([0-9A-Fa-f]{2})/g, (_, h) => String.fromCharCode(parseInt(h, 16)));
+    }
+  } catch { return src; }
+  return src;
+}
+
+// RFC 2047: `Subject: =?utf-8?B?…?=` renders as ordinary text in every mail client, so a brand
+// spoof or an instruction can hide in a header the same way it hides in a body.
+function decodeEncodedWords(text) {
+  return String(text || '').replace(
+    /=\?([^?]+)\?([BbQq])\?([^?]*)\?=/g,
+    (whole, charset, kind, data) => {
+      try {
+        if (/^b$/i.test(kind)) return Buffer.from(data, 'base64').toString('utf8');
+        return data.replace(/_/g, ' ').replace(/=([0-9A-Fa-f]{2})/g, (_, h) => String.fromCharCode(parseInt(h, 16)));
+      } catch { return whole; }
+    },
+  );
+}
+
+function contentTypeOf(headers) {
+  return String(headers['content-type'] || '');
+}
+
+function boundaryOf(headers) {
+  const m = contentTypeOf(headers).match(/boundary\s*=\s*"?([^";\r\n]+)"?/i);
+  return m ? m[1].trim() : null;
+}
+
+// Walk a multipart body into its decoded leaves. Depth-limited because a crafted message can nest
+// parts forever, and this runs inside a hook.
+function walkParts(body, headers, depth, out) {
+  if (depth > 6) return;
+  const boundary = boundaryOf(headers);
+  const ctype = contentTypeOf(headers).toLowerCase();
+
+  if (!boundary || !/^multipart\//.test(ctype.trim())) {
+    const decoded = decodeTransfer(body, headers['content-transfer-encoding']);
+    if (!decoded) return;
+    if (/text\/html/i.test(ctype)) out.html.push(decoded);
+    else out.text.push(decoded);
+    return;
+  }
+
+  const marker = `--${boundary}`;
+  const segments = String(body).split(marker);
+  for (const segment of segments) {
+    const chunk = segment.replace(/^\r?\n/, '');
+    if (!chunk.trim() || chunk.trim() === '--') continue;
+    const split = chunk.search(/\r?\n\r?\n/);
+    const partHeaders = parseHeaders(split >= 0 ? chunk.slice(0, split) : chunk);
+    const partBody = split >= 0 ? chunk.slice(split).replace(/^\r?\n\r?\n/, '') : '';
+    // A part with no headers of its own is the preamble between boundaries, not a part.
+    if (split < 0 && !contentTypeOf(partHeaders)) continue;
+    walkParts(partBody, partHeaders, depth + 1, out);
+  }
+}
+
 function parseEmail(input) {
@@ -33,3 +109,10 @@ let headers = {}, body = '', html = '', raw = '';
     headers = parseHeaders(idx >= 0 ? input.slice(0, idx) : input);
-    body = idx >= 0 ? input.slice(idx).trim() : '';
+    const rawBody = idx >= 0 ? input.slice(idx).replace(/^\r?\n\r?\n/, '') : '';
+    const parts = { text: [], html: [] };
+    walkParts(rawBody, headers, 0, parts);
+    body = parts.text.join('\n').trim();
+    html = parts.html.join('\n').trim();
+    // Keep the undecoded block too when nothing decoded to anything, so a malformed message is still
+    // scanned rather than silently becoming empty.
+    if (!body && !html) body = rawBody.trim();
   } else if (input && typeof input === 'object') {
@@ -50,3 +133,3 @@ const hsrc = input.headers || {};
   const to = parseAddress(headers.to);
-  const subject = headers.subject || '';
+  const subject = decodeEncodedWords(headers.subject || '');
   const combined = [subject, body, html].filter(Boolean).join('\n');
@@ -159,2 +242,2 @@ return { headers, from, replyTo, returnPath, to, subject, body, html, combined, raw };
 
-module.exports = { parseEmail, parseAddress, parseAuthResults, checkDomainAuth, isDisposable, senderRisk, deliverabilityScan, extractLinks, AUTH_TRUST_NOTE, DKIM_NOT_CHECKED };
+module.exports = { parseEmail, decodeTransfer, decodeEncodedWords, parseAddress, parseAuthResults, checkDomainAuth, isDisposable, senderRisk, deliverabilityScan, extractLinks, AUTH_TRUST_NOTE, DKIM_NOT_CHECKED };

engines/injection.js

@@ -69,2 +69,10 @@ // Prompt-injection and obfuscation scanning. Fully local, no network, no model.
     verdict,
+    // `verdict: allow` says no rule in this set matched. It does not say the text is safe, and the
+    // difference is the whole product: a paraphrase nobody has written a rule for scores zero here.
+    // `matched` states the same fact without a word that reads like a safety judgement. It is added
+    // rather than replacing `verdict`, because callers already branch on that field.
+    matched: findings.length > 0,
+    means: findings.length
+      ? 'One or more known patterns matched. See findings for which rule and why.'
+      : 'No rule in this ruleset matched. That is not a finding of safety: novel or paraphrased wording is not covered by these rules.',
     findings,
@@ -71,0 +79,0 @@ categories: [...new Set(findings.map((f) => f.category))],

engines/pkgname.js

@@ -317,7 +317,17 @@ // Package checks that need no network at all.
   const worstSeverity = findings.reduce((a, f) => Math.max(a, f.severity === 'critical' ? 2 : 1), 0);
-  const verdict = worstSeverity === 2 ? 'danger' : worstSeverity === 1 ? 'caution' : 'safe';
+  let verdict = worstSeverity === 2 ? 'danger' : worstSeverity === 1 ? 'caution' : 'safe';
 
-  // `stamp` downgrades a verdict when a check was skipped, and here four are skipped by design, so
-  // pass the checks for reporting but keep the verdict this engine actually reached. The honesty is
-  // carried by `local_only` and by the skipped list itself, both of which the caller must show.
+  // The four network checks above are skipped by design in this engine, so their absence must not
+  // move the verdict: that is what `local_only` and the skipped list are for. The comparison list is
+  // different. It is the ONLY thing this engine checks a name against, it ships inside the package,
+  // and when it fails to load there is no name check at all. Reporting "safe" then is a check that
+  // did not run being read as a pass, which is the worst bug this codebase can ship.
+  //
+  // This is not hypothetical. Published 0.3.0 omitted `data/` from its npm `files` list, so every
+  // install answered `safe` for `crossenv`, a real npm typosquat attack. The `files` entry is fixed
+  // and a tarball test now guards it; this is the second lock, so that a list which cannot load can
+  // never again read as a clean name.
+  const listMissing = !list.available;
+  if (listMissing && verdict === 'safe') verdict = 'unknown';
+
   const out = stamp({
@@ -330,5 +340,7 @@ ok: true,
     local_only: true,
-    summary: verdict === 'safe'
-      ? `Nothing in the name "${raw}" resembles a known popular package closely enough to flag. The registry, OSV and the package contents were not consulted, so this is not a statement that the package is safe.`
-      : findings.map((f) => f.message).join(' '),
+    summary: listMissing
+      ? `The bundled list of popular package names could not be loaded, so the name "${raw}" was not compared against anything. This is not a result: nothing was checked.`
+      : verdict === 'safe'
+        ? `Nothing in the name "${raw}" resembles a known popular package closely enough to flag. The registry, OSV and the package contents were not consulted, so this is not a statement that the package is safe.`
+        : findings.map((f) => f.message).join(' '),
     list_generated: list.available ? list.generated : null,
@@ -335,0 +347,0 @@ list_size: list.available ? list.size : 0,

engines/secrets.js

@@ -61,2 +61,5 @@ // Secret and PII detection, with redaction. Fully local, no network.
 
+// Addresses that are reserved by RFC and cannot resolve to a real mailbox.
+const RESERVED_DOMAIN = /@(?:[A-Za-z0-9.-]*\.)?(?:test|example|invalid|localhost)$|@(?:[A-Za-z0-9.-]*\.)?example\.(?:com|net|org)$/i;
+
 const PII_RULES = [
@@ -100,2 +103,7 @@ { id: 'email', type: 'Email', re: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g, severity: 'low', vg: 0 },
         if (r.luhn && !luhn(val)) { if (!r.re.global) break; continue; }
+        // RFC 2606 and 6761 set aside .test, .example, .invalid and .localhost (and example.com/net/org)
+        // precisely so documentation and tests have addresses that can never belong to anyone. Calling
+        // those personal data is noise, and noise is what gets a scanner switched off. This engine's
+        // own test fixtures tripped it.
+        if (r.id === 'email' && RESERVED_DOMAIN.test(val)) { if (!r.re.global) break; continue; }
         const start = vg === 0 ? m.index : m.index + m[0].indexOf(val);
@@ -102,0 +110,0 @@ spans.push({ start, end: start + val.length, type: r.type });

lib/verdict.js

@@ -16,3 +16,5 @@ // Verdict metadata, standardized.
 
-const ORDER = { allow: 0, clear: 0, ok: 0, caution: 1, review: 1, warn: 1, block: 2, danger: 2 };
+// `safe` and `unknown` are listed explicitly rather than defaulted: `safe` is a pass, and `unknown`
+// means a check could not run, which must sort with caution so it can never be mistaken for one.
+const ORDER = { allow: 0, clear: 0, ok: 0, safe: 0, unknown: 1, caution: 1, review: 1, warn: 1, block: 2, danger: 2 };
 
@@ -19,0 +21,0 @@ // A verdict may only ever move toward caution, never away from it.

package.json

 {
   "name": "agent-guards",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Deterministic local security engines for AI agents: prompt-injection and obfuscation scanning, secret detection and redaction, code scanning, package reputation, email analysis, payment screening, and an SSRF-safe fetch.",
@@ -15,2 +15,3 @@ "main": "index.js",
     "engines/",
+    "data/",
     "tools/",
@@ -17,0 +18,0 @@ "mcp/",

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

512734

28.2%

Number of package files

41

5.13%

Lines of code

7303

7.65%

No dependency changes