ghostpkg 0.1.0__py3-none-any.whl

ghostpkg/data.py

@@ -0,0 +1,399 @@
+"""Popular package names, used only for typo-distance comparison.
+
+Generated from the top-pypi-packages dataset (hugovk.github.io).
+Regenerate with: python tools/refresh_data.py
+"""
+
+# 2000 most-downloaded PyPI projects
+TOP_PYPI = frozenset([
+    'a2a-sdk', 'a2wsgi', 'absl-py', 'accelerate', 'adal', 'addict', 'adlfs', 'aenum', 'affine',
+    'ag-ui-protocol', 'agate', 'agent-client-protocol', 'aio-pika', 'aioboto3', 'aiobotocore',
+    'aiocache', 'aiodns', 'aiofile', 'aiofiles', 'aiohappyeyeballs', 'aiohttp', 'aiohttp-cors',
+    'aiohttp-retry', 'aioitertools', 'aiokafka', 'aiolimiter', 'aiomysql', 'aioquic',
+    'aioresponses', 'aiormq', 'aiosignal', 'aiosmtplib', 'aiosqlite', 'alabaster', 'alembic',
+    'alibabacloud-credentials', 'alibabacloud-tea-openapi', 'aliyun-semantic-conventions',
+    'aliyun-trace', 'allure-pytest', 'allure-python-commons', 'altair', 'altgraph',
+    'amazon-ion', 'amplitude-analytics', 'amqp', 'aniso8601', 'annotated-doc',
+    'annotated-types', 'ansible', 'ansible-compat', 'ansible-core', 'ansicolors', 'anthropic',
+    'antlr4-python3-runtime', 'anyio', 'anytree', 'apache-airflow', 'apache-airflow-core',
+    'apache-airflow-providers-amazon', 'apache-airflow-providers-cncf-kubernetes',
+    'apache-airflow-providers-common-compat', 'apache-airflow-providers-common-io',
+    'apache-airflow-providers-common-sql', 'apache-airflow-providers-databricks',
+    'apache-airflow-providers-fab', 'apache-airflow-providers-ftp',
+    'apache-airflow-providers-google', 'apache-airflow-providers-http',
+    'apache-airflow-providers-imap', 'apache-airflow-providers-mysql',
+    'apache-airflow-providers-slack', 'apache-airflow-providers-smtp',
+    'apache-airflow-providers-snowflake', 'apache-airflow-providers-sqlite',
+    'apache-airflow-providers-ssh', 'apache-airflow-task-sdk', 'apache-tvm-ffi', 'apispec',
+    'appdirs', 'applicationinsights', 'appnope', 'apprise', 'apscheduler', 'arabic-reshaper',
+    'argcomplete', 'argon2-cffi', 'argon2-cffi-bindings', 'argparse', 'arro3-core', 'arrow',
+    'arxiv', 'asgi-lifespan', 'asgiref', 'asn1crypto', 'ast-serialize', 'asteval', 'astor',
+    'astroid', 'astronomer-cosmos', 'asttokens', 'astunparse', 'async-lru', 'async-timeout',
+    'asyncer', 'asyncio', 'asyncpg', 'asyncssh', 'asynctest', 'atlassian-python-api',
+    'atpublic', 'attrs', 'audioop-lts', 'audioread', 'auth0-python', 'authlib', 'autobahn',
+    'autoflake', 'automat', 'autopep8', 'av', 'avro', 'avro-python3', 'aws-cdk-asset-awscli-v1',
+    'aws-cdk-asset-node-proxy-agent-v6', 'aws-cdk-cloud-assembly-schema', 'aws-cdk-lib',
+    'aws-lambda-powertools', 'aws-msk-iam-sasl-signer-python', 'aws-requests-auth',
+    'aws-sam-translator', 'aws-xray-sdk', 'awscli', 'awscrt', 'awswrangler', 'azure-ai-agents',
+    'azure-ai-documentintelligence', 'azure-ai-projects', 'azure-appconfiguration',
+    'azure-batch', 'azure-cli', 'azure-cli-core', 'azure-common', 'azure-core',
+    'azure-core-tracing-opentelemetry', 'azure-cosmos', 'azure-data-tables',
+    'azure-datalake-store', 'azure-eventgrid', 'azure-eventhub', 'azure-functions',
+    'azure-identity', 'azure-keyvault', 'azure-keyvault-certificates', 'azure-keyvault-keys',
+    'azure-keyvault-secrets', 'azure-kusto-data', 'azure-kusto-ingest', 'azure-mgmt-advisor',
+    'azure-mgmt-applicationinsights', 'azure-mgmt-authorization', 'azure-mgmt-batch',
+    'azure-mgmt-batchai', 'azure-mgmt-billing', 'azure-mgmt-cdn',
+    'azure-mgmt-cognitiveservices', 'azure-mgmt-compute', 'azure-mgmt-containerinstance',
+    'azure-mgmt-containerregistry', 'azure-mgmt-containerservice', 'azure-mgmt-core',
+    'azure-mgmt-cosmosdb', 'azure-mgmt-datafactory', 'azure-mgmt-datalake-nspkg',
+    'azure-mgmt-datalake-store', 'azure-mgmt-datamigration', 'azure-mgmt-eventgrid',
+    'azure-mgmt-eventhub', 'azure-mgmt-iotcentral', 'azure-mgmt-iothub',
+    'azure-mgmt-iothubprovisioningservices', 'azure-mgmt-keyvault', 'azure-mgmt-loganalytics',
+    'azure-mgmt-managementgroups', 'azure-mgmt-maps', 'azure-mgmt-marketplaceordering',
+    'azure-mgmt-media', 'azure-mgmt-monitor', 'azure-mgmt-msi', 'azure-mgmt-network',
+    'azure-mgmt-nspkg', 'azure-mgmt-policyinsights', 'azure-mgmt-rdbms',
+    'azure-mgmt-recoveryservices', 'azure-mgmt-recoveryservicesbackup', 'azure-mgmt-redis',
+    'azure-mgmt-resource', 'azure-mgmt-search', 'azure-mgmt-servicebus',
+    'azure-mgmt-servicefabric', 'azure-mgmt-signalr', 'azure-mgmt-sql', 'azure-mgmt-storage',
+    'azure-mgmt-trafficmanager', 'azure-mgmt-web', 'azure-monitor-opentelemetry',
+    'azure-monitor-opentelemetry-exporter', 'azure-monitor-query', 'azure-nspkg',
+    'azure-search-documents', 'azure-servicebus', 'azure-storage-blob', 'azure-storage-common',
+    'azure-storage-file-datalake', 'azure-storage-file-share', 'azure-storage-queue',
+    'azure-synapse-artifacts', 'azure-synapse-spark', 'babel', 'backcall', 'backoff',
+    'backports-asyncio-runner', 'backports-strenum', 'backports-tarfile', 'backports-zoneinfo',
+    'backports-zstd', 'backrefs', 'bandit', 'banks', 'basedpyright', 'bashlex',
+    'bazel-runfiles', 'bcrypt', 'beartype', 'beautifulsoup4', 'bedrock-agentcore', 'behave',
+    'bidict', 'billiard', 'binaryornot', 'biopython', 'bitarray', 'bitsandbytes', 'black',
+    'blake3', 'bleach', 'blessed', 'blinker', 'blis', 'blobfile', 'bluetooth-data-tools',
+    'bokeh', 'boltons', 'boolean-py', 'boostedblob', 'boto', 'boto3', 'boto3-stubs', 'botocore',
+    'botocore-stubs', 'bottle', 'bottleneck', 'bracex', 'braintrust', 'brotli',
+    'browser-harness', 'browser-use', 'browser-use-sdk', 'bs4', 'bubus', 'build',
+    'burner-redis', 'bytecode', 'c7n-org', 'cachebox', 'cachecontrol', 'cached-property',
+    'cachelib', 'cachetools', 'cadwyn', 'caio', 'cairocffi', 'cairosvg', 'cassandra-driver',
+    'catalogue', 'catboost', 'cattrs', 'cbor2', 'cchardet', 'cdp-use', 'cel-python', 'celery',
+    'celery-redbeat', 'cerberus', 'certifi', 'cffi', 'cfgv', 'cfn-lint', 'channels', 'chardet',
+    'charset-normalizer', 'checkdigit', 'checkov', 'chevron', 'chromadb', 'circuitbreaker',
+    'ciso8601', 'ckzg', 'clarabel', 'claude-agent-sdk', 'cleo', 'click', 'click-default-group',
+    'click-didyoumean', 'click-option-group', 'click-plugins', 'click-repl',
+    'clickhouse-connect', 'clickhouse-driver', 'cligj', 'cloud-sql-python-connector',
+    'cloudevents', 'cloudflare', 'cloudpathlib', 'cloudpickle', 'cmake', 'cmdstanpy', 'cobble',
+    'codeowners', 'codespell', 'cohere', 'colorama', 'colorclass', 'coloredlogs', 'colorful',
+    'colorlog', 'comm', 'compressed-rtf', 'compressed-tensors', 'confection', 'configargparse',
+    'configobj', 'configparser', 'confluent-kafka', 'connexion', 'constantly', 'construct',
+    'constructs', 'contextlib2', 'contourpy', 'cookiecutter', 'coolname', 'courlan', 'coverage',
+    'cramjam', 'crashtest', 'crc32c', 'crcmod', 'crewai', 'crewai-tools', 'cron-descriptor',
+    'croniter', 'cronsim', 'cryptography', 'cssselect', 'cssselect2', 'cssutils', 'ctranslate2',
+    'cuda-bindings', 'cuda-core', 'cuda-pathfinder', 'cuda-python', 'cuda-toolkit', 'curl-cffi',
+    'curlify', 'cvxpy', 'cycler', 'cyclonedx-python-lib', 'cyclopts', 'cymem', 'cython',
+    'cytoolz', 'dacite', 'daff', 'daft', 'dagster', 'dagster-aws', 'dagster-graphql',
+    'dagster-pipes', 'dagster-postgres', 'dagster-shared', 'dagster-webserver', 'daphne',
+    'dash', 'dask', 'dask-expr', 'databricks-agents', 'databricks-cli', 'databricks-connect',
+    'databricks-labs-blueprint', 'databricks-labs-dqx', 'databricks-labs-lsql',
+    'databricks-sdk', 'databricks-sql-connector', 'databricks-sqlalchemy', 'dataclasses',
+    'dataclasses-json', 'datadog', 'datadog-api-client', 'datamodel-code-generator',
+    'dataproperty', 'datasets', 'datasketch', 'dateparser', 'datetime', 'daytona',
+    'daytona-analytics-api-client', 'daytona-analytics-api-client-async', 'daytona-api-client',
+    'daytona-api-client-async', 'daytona-toolbox-api-client',
+    'daytona-toolbox-api-client-async', 'db-dtypes', 'dbt-adapters', 'dbt-bigquery',
+    'dbt-common', 'dbt-core', 'dbt-databricks', 'dbt-extractor', 'dbt-postgres', 'dbt-protos',
+    'dbt-semantic-interfaces', 'dbt-snowflake', 'dbt-spark', 'ddgs', 'ddtrace', 'debugpy',
+    'decorator', 'deepagents', 'deepdiff', 'deepmerge', 'defusedxml', 'delta-spark',
+    'deltalake', 'dep-logic', 'dependency-groups', 'dependency-injector', 'deprecated',
+    'deprecation', 'deptry', 'detect-installer', 'detect-secrets', 'diagrams', 'dictdiffer',
+    'diff-cover', 'diffusers', 'dill', 'dirhash', 'dirtyjson', 'discord-py', 'diskcache',
+    'disposable-email-domains', 'distlib', 'distributed', 'distro', 'dj-database-url', 'django',
+    'django-celery-beat', 'django-cors-headers', 'django-debug-toolbar', 'django-environ',
+    'django-extensions', 'django-filter', 'django-ipware', 'django-phonenumber-field',
+    'django-redis', 'django-storages', 'django-stubs', 'django-stubs-ext',
+    'django-timezone-field', 'djangorestframework', 'djangorestframework-simplejwt',
+    'djangorestframework-stubs', 'dlt', 'dnspython', 'docker', 'docker-pycreds',
+    'dockerfile-parse', 'docling', 'docling-core', 'docopt', 'docstring-parser', 'docutils',
+    'dotenv', 'dpath', 'drf-spectacular', 'dspy', 'duckdb', 'dulwich', 'dunamai', 'durationpy',
+    'dynaconf', 'e2b', 'easygui', 'ebcdic', 'ecdsa', 'edge-tts', 'editables', 'editorconfig',
+    'einops', 'elastic-transport', 'elasticsearch', 'elasticsearch-dsl', 'elementpath',
+    'elevenlabs', 'email-validator', 'emoji', 'entrypoints', 'enum-compat', 'enum34', 'envier',
+    'environs', 'et-xmlfile', 'eth-abi', 'eth-account', 'eth-hash', 'eth-keyfile', 'eth-keys',
+    'eth-rlp', 'eth-typing', 'eth-utils', 'etils', 'eval-type-backport', 'eventlet', 'events',
+    'exa-py', 'exceptiongroup', 'exchange-calendars', 'execnet', 'executing', 'expiringdict',
+    'expression', 'extract-msg', 'fabric', 'face', 'facebook-business', 'factory-boy',
+    'faiss-cpu', 'fake-useragent', 'faker', 'fakeredis', 'fastapi', 'fastapi-cli',
+    'fastapi-cloud-cli', 'fastapi-mcp', 'fastapi-sso', 'fastar', 'fastavro', 'fastcore',
+    'fastembed', 'fasteners', 'faster-whisper', 'fastf1', 'fastjsonschema', 'fastmcp',
+    'fastmcp-slim', 'fastparquet', 'fastspec', 'fasttransport', 'fastuuid', 'feedparser',
+    'feedparser-sgmllib', 'fetch-use', 'ffmpeg-python', 'filelock', 'filetype', 'findpython',
+    'fiona', 'fire', 'firebase-admin', 'firecrawl-anydoc', 'firecrawl-py', 'flake8', 'flask',
+    'flask-appbuilder', 'flask-babel', 'flask-caching', 'flask-cors', 'flask-jwt-extended',
+    'flask-limiter', 'flask-login', 'flask-session', 'flask-sqlalchemy', 'flask-wtf',
+    'flatbuffers', 'flexcache', 'flexparser', 'flit', 'flit-core', 'flower', 'fonttools',
+    'fpdf2', 'fqdn', 'freezegun', 'frozendict', 'frozenlist', 'fsspec', 'ftfy', 'func-timeout',
+    'functions-framework', 'funcy', 'furl', 'future', 'fuzzywuzzy', 'gast', 'gcloud-aio-auth',
+    'gcloud-aio-bigquery', 'gcloud-aio-storage', 'gcsfs', 'genai-prices', 'genson',
+    'geographiclib', 'geoip2', 'geomet', 'geopandas', 'geopy', 'gepa', 'gevent',
+    'geventhttpclient', 'gguf', 'ghapi', 'ghp-import', 'gitdb', 'github3-py', 'gitpython',
+    'giturlparse', 'glom', 'google', 'google-adk', 'google-ads', 'google-ai-generativelanguage',
+    'google-analytics-admin', 'google-analytics-data', 'google-api-core',
+    'google-api-python-client', 'google-auth', 'google-auth-httplib2', 'google-auth-oauthlib',
+    'google-cloud-aiplatform', 'google-cloud-alloydb', 'google-cloud-appengine-logging',
+    'google-cloud-audit-log', 'google-cloud-automl', 'google-cloud-batch',
+    'google-cloud-bigquery', 'google-cloud-bigquery-datatransfer',
+    'google-cloud-bigquery-storage', 'google-cloud-bigtable', 'google-cloud-build',
+    'google-cloud-compute', 'google-cloud-container', 'google-cloud-core',
+    'google-cloud-datacatalog', 'google-cloud-dataflow-client', 'google-cloud-dataform',
+    'google-cloud-dataplex', 'google-cloud-dataproc', 'google-cloud-dataproc-metastore',
+    'google-cloud-datastore', 'google-cloud-discoveryengine', 'google-cloud-dlp',
+    'google-cloud-firestore', 'google-cloud-iam', 'google-cloud-kms', 'google-cloud-language',
+    'google-cloud-logging', 'google-cloud-managedkafka', 'google-cloud-memcache',
+    'google-cloud-monitoring', 'google-cloud-orchestration-airflow', 'google-cloud-os-login',
+    'google-cloud-pubsub', 'google-cloud-redis', 'google-cloud-resource-manager',
+    'google-cloud-run', 'google-cloud-secret-manager', 'google-cloud-spanner',
+    'google-cloud-speech', 'google-cloud-storage', 'google-cloud-storage-control',
+    'google-cloud-storage-transfer', 'google-cloud-tasks', 'google-cloud-texttospeech',
+    'google-cloud-trace', 'google-cloud-translate', 'google-cloud-videointelligence',
+    'google-cloud-vision', 'google-cloud-workflows', 'google-crc32c', 'google-genai',
+    'google-generativeai', 'google-pasta', 'google-re2', 'google-resumable-media',
+    'googleapis-common-protos', 'gprof2dot', 'gql', 'gradio', 'gradio-client', 'granian',
+    'graphene', 'graphql-core', 'graphql-relay', 'graphviz', 'great-expectations', 'greenback',
+    'greenlet', 'gremlinpython', 'griffe', 'griffecli', 'griffelib', 'grimp', 'groq',
+    'grpc-google-iam-v1', 'grpc-interceptor', 'grpcio', 'grpcio-gcp', 'grpcio-health-checking',
+    'grpcio-reflection', 'grpcio-status', 'grpcio-tools', 'grpclib', 'gspread', 'gunicorn',
+    'gymnasium', 'h11', 'h2', 'h3', 'h5py', 'habluetooth', 'harbor', 'harbor-rewardkit',
+    'hatch', 'hatch-fancy-pypi-readme', 'hatch-vcs', 'hatchling', 'hexbytes', 'hf-xet',
+    'highspy', 'hiredis', 'holidays', 'hpack', 'html2text', 'html5lib', 'htmldate', 'httpcore',
+    'httpcore2', 'httplib2', 'httptools', 'httpx', 'httpx-sse', 'httpx-ws', 'httpx2',
+    'httpx2-jsfetch', 'huey', 'huggingface-hub', 'humanfriendly', 'humanize', 'hvac',
+    'hydra-core', 'hypercorn', 'hyperframe', 'hyperlink', 'hypothesis', 'icalendar', 'icdiff',
+    'id', 'identify', 'idna', 'ifaddr', 'ijson', 'imagehash', 'imageio', 'imageio-ffmpeg',
+    'imagesize', 'imbalanced-learn', 'immutabledict', 'import-linter', 'importlib-metadata',
+    'importlib-resources', 'impyla', 'incremental', 'inflate64', 'inflect', 'inflection',
+    'influxdb-client', 'iniconfig', 'inputimeout', 'inquirerpy', 'inspect-ai', 'installer',
+    'instructor', 'intervaltree', 'invoke', 'ipdb', 'ipykernel', 'ipython', 'ipython-genutils',
+    'ipython-pygments-lexers', 'ipywidgets', 'iso8601', 'isodate', 'isoduration', 'isort',
+    'itsdangerous', 'jaraco-classes', 'jaraco-context', 'jaraco-functools', 'jax', 'jaxlib',
+    'jaydebeapi', 'jedi', 'jeepney', 'jellyfish', 'jinja2', 'jinja2-humanize-extension',
+    'jinxed', 'jira', 'jiter', 'jmespath', 'joblib', 'joserfc', 'jpype1', 'jq', 'jsbeautifier',
+    'jsii', 'json-repair', 'json-rpc', 'json5', 'jsonconversion', 'jsondiff', 'jsonlines',
+    'jsonpatch', 'jsonpath-ng', 'jsonpath-python', 'jsonpickle', 'jsonpointer', 'jsonref',
+    'jsonschema', 'jsonschema-path', 'jsonschema-rs', 'jsonschema-specifications', 'junit-xml',
+    'junitparser', 'jupyter', 'jupyter-builder', 'jupyter-client', 'jupyter-console',
+    'jupyter-core', 'jupyter-events', 'jupyter-lsp', 'jupyter-server',
+    'jupyter-server-terminals', 'jupyterlab', 'jupyterlab-pygments', 'jupyterlab-server',
+    'jupyterlab-widgets', 'justext', 'jwcrypto', 'kafka-python', 'kaitaistruct', 'kaleido',
+    'keras', 'kestra', 'keyring', 'keyrings-google-artifactregistry-auth', 'kfp', 'kgb',
+    'kiwisolver', 'knack', 'kombu', 'korean-lunar-calendar', 'kubernetes', 'kubernetes-asyncio',
+    'lance-namespace', 'lance-namespace-urllib3-client', 'lancedb', 'langchain',
+    'langchain-anthropic', 'langchain-aws', 'langchain-classic', 'langchain-community',
+    'langchain-core', 'langchain-google-community', 'langchain-google-genai',
+    'langchain-google-vertexai', 'langchain-mcp-adapters', 'langchain-openai',
+    'langchain-protocol', 'langchain-text-splitters', 'langcodes', 'langdetect', 'langfuse',
+    'langgraph', 'langgraph-api', 'langgraph-checkpoint', 'langgraph-checkpoint-postgres',
+    'langgraph-prebuilt', 'langgraph-sdk', 'langsmith', 'lark', 'launchdarkly-eventsource',
+    'launchdarkly-server-sdk', 'lazy-loader', 'lazy-object-proxy', 'ldap3', 'leather',
+    'levenshtein', 'libclang', 'libcst', 'librosa', 'librt', 'libtmux', 'license-expression',
+    'lightgbm', 'lightning', 'lightning-utilities', 'limits', 'line-bot-sdk', 'linkify-it-py',
+    'litellm', 'litellm-enterprise', 'litellm-proxy-extras', 'livekit-agents',
+    'livekit-protocol', 'llama-cloud', 'llama-cloud-services', 'llama-index',
+    'llama-index-core', 'llama-index-embeddings-openai',
+    'llama-index-indices-managed-llama-cloud', 'llama-index-instrumentation',
+    'llama-index-llms-openai', 'llama-index-readers-llama-parse', 'llama-index-workflows',
+    'llama-parse', 'llguidance', 'llvmlite', 'lmnr', 'lmnr-claude-code-proxy', 'locket',
+    'lockfile', 'locust', 'logfire', 'logfire-api', 'loguru', 'looker-sdk', 'lru-dict', 'lupa',
+    'lxml', 'lxml-html-clean', 'lz4', 'magika', 'makefun', 'mako', 'mammoth', 'mando', 'mangum',
+    'markdown', 'markdown-it-py', 'markdown2', 'markdownify', 'markitdown', 'marko',
+    'markupsafe', 'marshmallow', 'marshmallow-dataclass', 'marshmallow-enum',
+    'marshmallow-oneofschema', 'marshmallow-sqlalchemy', 'mashumaro', 'matplotlib',
+    'matplotlib-inline', 'maturin', 'maxminddb', 'mbstrdecoder', 'mccabe', 'mcp', 'mcp-types',
+    'mdit-py-plugins', 'mdurl', 'memory-profiler', 'memray', 'mergedeep', 'meson',
+    'meson-python', 'methodtools', 'metricflow', 'microsoft-kiota-abstractions',
+    'microsoft-kiota-authentication-azure', 'microsoft-kiota-http',
+    'microsoft-kiota-serialization-form', 'microsoft-kiota-serialization-json',
+    'microsoft-kiota-serialization-multipart', 'microsoft-kiota-serialization-text',
+    'mini-swe-agent', 'minio', 'mistral-common', 'mistral-vibe', 'mistralai', 'mistune',
+    'mitmproxy', 'mitmproxy-rs', 'mixpanel', 'mkdocs', 'mkdocs-autorefs', 'mkdocs-get-deps',
+    'mkdocs-material', 'mkdocs-material-extensions', 'mkdocstrings', 'mkdocstrings-python',
+    'ml-dtypes', 'mlflow', 'mlflow-skinny', 'mlflow-tracing', 'mmh3', 'mock', 'modal',
+    'modelscope', 'mongomock', 'monotonic', 'more-itertools', 'moto', 'motor', 'moviepy',
+    'mpmath', 'msal', 'msal-extensions', 'msgpack', 'msgraph-core', 'msgraph-sdk', 'msgspec',
+    'msoffcrypto-tool', 'msrest', 'msrestazure', 'multidict', 'multiprocess', 'multitasking',
+    'multivolumefile', 'murmurhash', 'mutagen', 'mypy', 'mypy-boto3-cloudformation',
+    'mypy-boto3-dynamodb', 'mypy-boto3-ec2', 'mypy-boto3-glue', 'mypy-boto3-lambda',
+    'mypy-boto3-rds', 'mypy-boto3-s3', 'mypy-boto3-secretsmanager', 'mypy-boto3-sqs',
+    'mypy-boto3-sts', 'mypy-extensions', 'mypy-protobuf', 'mysql-connector-python',
+    'mysqlclient', 'myst-parser', 'namex', 'nanoid', 'narwhals', 'natsort', 'nbclient',
+    'nbconvert', 'nbformat', 'ndg-httpsclient', 'nemo-relay', 'neo4j', 'nest-asyncio',
+    'nest-asyncio2', 'netaddr', 'networkx', 'nexus-rpc', 'nh3', 'ninja', 'nltk', 'nodeenv',
+    'nodejs-wheel-binaries', 'nose', 'notebook', 'notebook-shim', 'nox', 'num2words', 'numba',
+    'numcodecs', 'numexpr', 'numpy', 'numpy-financial', 'nvidia-cublas', 'nvidia-cublas-cu12',
+    'nvidia-cuda-cupti', 'nvidia-cuda-cupti-cu12', 'nvidia-cuda-nvrtc',
+    'nvidia-cuda-nvrtc-cu12', 'nvidia-cuda-runtime', 'nvidia-cuda-runtime-cu12',
+    'nvidia-cudnn-cu12', 'nvidia-cudnn-cu13', 'nvidia-cufft', 'nvidia-cufft-cu12',
+    'nvidia-cufile', 'nvidia-cufile-cu12', 'nvidia-curand', 'nvidia-curand-cu12',
+    'nvidia-cusolver', 'nvidia-cusolver-cu12', 'nvidia-cusparse', 'nvidia-cusparse-cu12',
+    'nvidia-cusparselt-cu12', 'nvidia-cusparselt-cu13', 'nvidia-cutlass-dsl',
+    'nvidia-cutlass-dsl-libs-base', 'nvidia-ml-py', 'nvidia-nccl-cu12', 'nvidia-nccl-cu13',
+    'nvidia-nvjitlink', 'nvidia-nvjitlink-cu12', 'nvidia-nvshmem-cu12', 'nvidia-nvshmem-cu13',
+    'nvidia-nvtx', 'nvidia-nvtx-cu12', 'oauth2client', 'oauthlib', 'obstore', 'oci',
+    'office365-rest-python-client', 'oldest-supported-numpy', 'olefile', 'oletools', 'ollama',
+    'omegaconf', 'onnx', 'onnxruntime', 'openai', 'openai-agents', 'openai-harmony',
+    'openapi-pydantic', 'openapi-schema-validator', 'openapi-spec-validator', 'opencensus',
+    'opencensus-context', 'opencensus-ext-azure', 'opencv-contrib-python', 'opencv-python',
+    'opencv-python-headless', 'openhands-sdk', 'openhands-tools',
+    'openinference-instrumentation', 'openinference-semantic-conventions',
+    'openlineage-integration-common', 'openlineage-python', 'openlineage-sql', 'openpyxl',
+    'opensearch-protobufs', 'opensearch-py', 'opentelemetry-api', 'opentelemetry-distro',
+    'opentelemetry-exporter-gcp-logging', 'opentelemetry-exporter-gcp-monitoring',
+    'opentelemetry-exporter-gcp-trace', 'opentelemetry-exporter-otlp',
+    'opentelemetry-exporter-otlp-proto-common', 'opentelemetry-exporter-otlp-proto-grpc',
+    'opentelemetry-exporter-otlp-proto-http', 'opentelemetry-exporter-prometheus',
+    'opentelemetry-instrumentation', 'opentelemetry-instrumentation-aiohttp-client',
+    'opentelemetry-instrumentation-asgi', 'opentelemetry-instrumentation-asyncio',
+    'opentelemetry-instrumentation-asyncpg', 'opentelemetry-instrumentation-boto3sqs',
+    'opentelemetry-instrumentation-botocore', 'opentelemetry-instrumentation-celery',
+    'opentelemetry-instrumentation-dbapi', 'opentelemetry-instrumentation-django',
+    'opentelemetry-instrumentation-fastapi', 'opentelemetry-instrumentation-flask',
+    'opentelemetry-instrumentation-google-genai', 'opentelemetry-instrumentation-grpc',
+    'opentelemetry-instrumentation-httpx', 'opentelemetry-instrumentation-kafka-python',
+    'opentelemetry-instrumentation-logging', 'opentelemetry-instrumentation-psycopg',
+    'opentelemetry-instrumentation-psycopg2', 'opentelemetry-instrumentation-pymongo',
+    'opentelemetry-instrumentation-redis', 'opentelemetry-instrumentation-requests',
+    'opentelemetry-instrumentation-sqlalchemy', 'opentelemetry-instrumentation-sqlite3',
+    'opentelemetry-instrumentation-starlette', 'opentelemetry-instrumentation-system-metrics',
+    'opentelemetry-instrumentation-threading', 'opentelemetry-instrumentation-urllib',
+    'opentelemetry-instrumentation-urllib3', 'opentelemetry-instrumentation-wsgi',
+    'opentelemetry-propagator-aws-xray', 'opentelemetry-proto',
+    'opentelemetry-resource-detector-azure', 'opentelemetry-resourcedetector-gcp',
+    'opentelemetry-sdk', 'opentelemetry-sdk-extension-aws',
+    'opentelemetry-semantic-conventions', 'opentelemetry-semantic-conventions-ai',
+    'opentelemetry-util-genai', 'opentelemetry-util-http', 'opt-einsum', 'optree', 'optuna',
+    'oracledb', 'orbax-checkpoint', 'ordered-set', 'orderedmultidict', 'orderly-set', 'orjson',
+    'ormsgpack', 'ortools', 'oscrypto', 'osqp', 'oss2', 'outcome', 'overrides',
+    'packageurl-python', 'packaging', 'paginate', 'paho-mqtt', 'pamqp', 'pandas', 'pandas-gbq',
+    'pandas-stubs', 'pandera', 'pandocfilters', 'papermill', 'parameterized', 'paramiko',
+    'parse', 'parse-type', 'parsedatetime', 'parsimonious', 'parso', 'partd',
+    'partial-json-parser', 'parver', 'passlib', 'pastel', 'patchelf', 'pathable', 'pathlib',
+    'pathlib-abc', 'pathos', 'pathspec', 'pathvalidate', 'patsy', 'pbr', 'pbs-installer',
+    'pcodedmp', 'pdbr', 'pdf2image', 'pdfminer-six', 'pdfplumber', 'pdm', 'peewee', 'pefile',
+    'peft', 'pendulum', 'pep517', 'pex', 'pexpect', 'pfzy', 'pg8000', 'pglast', 'pgpy',
+    'pgvector', 'phonenumbers', 'pi-heif', 'pickleshare', 'pika', 'pikepdf', 'pillow',
+    'pillow-heif', 'pinecone', 'pinotdb', 'pint', 'pip', 'pip-api', 'pip-audit',
+    'pip-requirements-parser', 'pip-tools', 'pipdeptree', 'pipenv', 'pipx', 'pkgconfig',
+    'pkginfo', 'pkgutil-resolve-name', 'platformdirs', 'playwright', 'plotly', 'pluggy',
+    'plumbum', 'ply', 'poethepoet', 'poetry', 'poetry-core', 'poetry-plugin-export', 'polars',
+    'polars-runtime-32', 'polib', 'polyfactory', 'pooch', 'port-for', 'portalocker',
+    'postgrest', 'posthog', 'pox', 'ppft', 'pprintpp', 'prance', 'pre-commit', 'prefect',
+    'prefect-aws', 'prek', 'preshed', 'presidio-analyzer', 'prettytable', 'primp', 'priority',
+    'prison', 'probableparsing', 'proglog', 'progressbar2', 'prometheus-client',
+    'prometheus-fastapi-instrumentator', 'prompt-toolkit', 'propcache', 'prophet', 'protego',
+    'proto-plus', 'protobuf', 'protobuf3-to-dict', 'psutil', 'psycopg', 'psycopg-binary',
+    'psycopg-pool', 'psycopg2', 'psycopg2-binary', 'ptyprocess', 'publication', 'publicsuffix2',
+    'pulp', 'pulumi', 'pulumi-aws', 'pure-eval', 'pure-sasl', 'puremagic', 'py', 'py-cpuinfo',
+    'py-key-value-aio', 'py-key-value-shared', 'py-partiql-parser', 'py-serializable', 'py-spy',
+    'py-vapid', 'py4j', 'py7zr', 'pyahocorasick', 'pyaml', 'pyarrow', 'pyarrow-hotfix',
+    'pyasn1', 'pyasn1-modules', 'pyathena', 'pybase64', 'pybcj', 'pybind11', 'pybreaker',
+    'pycares', 'pycarlo', 'pyclipper', 'pycodestyle', 'pycomposefile', 'pycountry', 'pycparser',
+    'pycrypto', 'pycryptodome', 'pycryptodomex', 'pydantic', 'pydantic-ai', 'pydantic-ai-slim',
+    'pydantic-core', 'pydantic-evals', 'pydantic-extra-types', 'pydantic-graph',
+    'pydantic-settings', 'pydash', 'pydata-google-auth', 'pydeck', 'pydeequ', 'pydocket',
+    'pydot', 'pydub', 'pydyf', 'pyee', 'pyelftools', 'pyfiglet', 'pyflakes', 'pygit2',
+    'pygithub', 'pygments', 'pygtrie', 'pyhanko', 'pyhanko-certvalidator', 'pyhcl', 'pyhive',
+    'pyhumps', 'pyiceberg', 'pyiceberg-core', 'pyinstaller', 'pyinstaller-hooks-contrib',
+    'pyinstrument', 'pyjwt', 'pylatexenc', 'pylint', 'pylsqpack', 'pyluach',
+    'pymdown-extensions', 'pymilvus', 'pymongo', 'pympler', 'pymssql', 'pymsteams', 'pymupdf',
+    'pymupdf-layout', 'pymupdf4llm', 'pymysql', 'pynacl', 'pynndescent', 'pyodbc', 'pyogrio',
+    'pyopengl', 'pyopenssl', 'pyotp', 'pypandoc', 'pyparsing', 'pypdf', 'pypdf2', 'pypdfium2',
+    'pyperclip', 'pyphen', 'pypika', 'pypng', 'pyppmd', 'pyproj', 'pyproject-api',
+    'pyproject-hooks', 'pyproject-metadata', 'pyrate-limiter', 'pyreadline3', 'pyrefly',
+    'pyrfc3339', 'pyright', 'pyroaring', 'pyroscope-io', 'pyrsistent', 'pyserial', 'pysftp',
+    'pysocks', 'pyspark', 'pyspnego', 'pytablewriter', 'pytesseract', 'pytest',
+    'pytest-aiohttp', 'pytest-asyncio', 'pytest-base-url', 'pytest-benchmark', 'pytest-cov',
+    'pytest-custom-exit-code', 'pytest-django', 'pytest-env', 'pytest-forked',
+    'pytest-homeassistant-custom-component', 'pytest-html', 'pytest-httpx', 'pytest-icdiff',
+    'pytest-json-ctrf', 'pytest-json-report', 'pytest-metadata', 'pytest-mock', 'pytest-order',
+    'pytest-playwright', 'pytest-postgresql', 'pytest-randomly', 'pytest-repeat',
+    'pytest-rerunfailures', 'pytest-runner', 'pytest-socket', 'pytest-split', 'pytest-sugar',
+    'pytest-timeout', 'pytest-unordered', 'pytest-xdist', 'python-bidi', 'python-box',
+    'python-calamine', 'python-crfsuite', 'python-crontab', 'python-daemon', 'python-dateutil',
+    'python-decouple', 'python-discovery', 'python-docx', 'python-dotenv', 'python-engineio',
+    'python-frontmatter', 'python-gitlab', 'python-gnupg', 'python-hcl2', 'python-http-client',
+    'python-jenkins', 'python-jose', 'python-json-logger', 'python-keycloak',
+    'python-levenshtein', 'python-magic', 'python-multipart', 'python-on-whales', 'python-pptx',
+    'python-slugify', 'python-snappy', 'python-socketio', 'python-socks', 'python-stdnum',
+    'python-tds', 'python-telegram-bot', 'python-ulid', 'python-utils', 'python3-openid',
+    'python3-saml', 'pytimeparse', 'pytokens', 'pytorch-lightning', 'pytz', 'pytzdata',
+    'pyvespa', 'pywavelets', 'pywebpush', 'pywin32', 'pywin32-ctypes', 'pyxlsb', 'pyyaml',
+    'pyyaml-env-tag', 'pyyaml-ft', 'pyzipper', 'pyzmq', 'pyzstd', 'qdrant-client', 'qrcode',
+    'quack-kernels', 'questionary', 'radon', 'rank-bm25', 'rapidfuzz', 'rasterio', 'ratelimit',
+    'ray', 'rdflib', 'reactivex', 'readchar', 'readme-renderer', 'realtime', 'redis',
+    'redshift-connector', 'referencing', 'regex', 'reportlab', 'requests', 'requests-aws4auth',
+    'requests-cache', 'requests-file', 'requests-mock', 'requests-ntlm', 'requests-oauthlib',
+    'requests-toolbelt', 'requirements-parser', 'resend', 'resolvelib', 'responses', 'respx',
+    'restrictedpython', 'restructuredtext-lint', 'retry', 'retrying', 'rfc3339-validator',
+    'rfc3986', 'rfc3986-validator', 'rfc3987-syntax', 'rich', 'rich-argparse', 'rich-click',
+    'rich-rst', 'rich-toolkit', 'rignore', 'rlp', 'roman-numerals', 'rouge-score', 'rpds-py',
+    'rq', 'rsa', 'rtfde', 'rtree', 'ruamel-yaml', 'ruamel-yaml-clib', 'ruff', 'rustworkx',
+    's3fs', 's3transfer', 'safehttpx', 'safetensors', 'sagemaker', 'sagemaker-core',
+    'sagemaker-studio', 'scantree', 'schedule', 'schema', 'schemathesis', 'scikit-build-core',
+    'scikit-image', 'scikit-learn', 'scipy', 'scp', 'scramp', 'screeninfo', 'scs', 'seaborn',
+    'secretstorage', 'segment-analytics-python', 'selectolax', 'selenium', 'semantic-version',
+    'semgrep', 'semver', 'send2trash', 'sendgrid', 'sentence-transformers', 'sentencepiece',
+    'sentinels', 'sentry-sdk', 'service-identity', 'setproctitle', 'setuptools',
+    'setuptools-rust', 'setuptools-scm', 'sglang', 'sgmllib3k', 'sh', 'shap', 'shapely',
+    'shellingham', 'shortuuid', 'simple-gcp-object-downloader', 'simple-salesforce',
+    'simple-websocket', 'simpleeval', 'simplejson', 'singer-sdk', 'six', 'skops', 'slack-bolt',
+    'slack-sdk', 'slackclient', 'slicer', 'slowapi', 'smart-open', 'smbprotocol',
+    'smdebug-rulesconfig', 'smmap', 'sniffio', 'snowballstemmer', 'snowflake-connector-python',
+    'snowflake-core', 'snowflake-snowpark-python', 'snowflake-sqlalchemy', 'snowplow-tracker',
+    'social-auth-app-django', 'social-auth-core', 'socksio', 'sortedcontainers', 'sounddevice',
+    'soundfile', 'soupsieve', 'soxr', 'spacy', 'spacy-legacy', 'spacy-loggers', 'sparklines',
+    'speechrecognition', 'sphinx', 'sphinx-autodoc-typehints', 'sphinx-copybutton',
+    'sphinx-design', 'sphinx-rtd-theme', 'sphinxcontrib-applehelp', 'sphinxcontrib-devhelp',
+    'sphinxcontrib-htmlhelp', 'sphinxcontrib-jquery', 'sphinxcontrib-jsmath',
+    'sphinxcontrib-mermaid', 'sphinxcontrib-qthelp', 'sphinxcontrib-serializinghtml',
+    'sql-metadata', 'sqlalchemy', 'sqlalchemy-bigquery', 'sqlalchemy-spanner',
+    'sqlalchemy-utils', 'sqlfluff', 'sqlglot', 'sqlite-vec', 'sqlmodel', 'sqlparams',
+    'sqlparse', 'srsly', 'sse-starlette', 'sseclient-py', 'sshtunnel', 'stack-data', 'stamina',
+    'stanio', 'starkbank-ecdsa', 'starlette', 'statsd', 'statsmodels', 'std-uritemplate',
+    'stevedore', 'storage3', 'strands-agents', 'strawberry-graphql', 'streamlit', 'strenum',
+    'strictyaml', 'stringcase', 'stripe', 'striprtf', 'structlog', 'subprocess-tee', 'supabase',
+    'supabase-auth', 'supabase-functions', 'supervisor', 'svcs', 'svglib', 'svix', 'swebench',
+    'swesmith', 'swifter', 'sympy', 'synchronicity', 'syrupy', 'tableauserverclient',
+    'tabledata', 'tabulate', 'tavily-python', 'tblib', 'temporalio', 'tenacity', 'tensorboard',
+    'tensorboard-data-server', 'tensorflow', 'tensorflow-estimator',
+    'tensorflow-io-gcs-filesystem', 'teradatasql', 'termcolor', 'terminado', 'terminaltables',
+    'testcontainers', 'text-unidecode', 'texttable', 'textual', 'textual-speedups', 'thefuzz',
+    'thinc', 'threadpoolctl', 'thrift', 'thrift-sasl', 'tifffile', 'tiktoken', 'time-machine',
+    'timezonefinder', 'timm', 'tinycss2', 'tinyhtml5', 'tld', 'tldextract', 'tokenize-rt',
+    'tokenizers', 'tom-swe', 'toml', 'tomli', 'tomli-w', 'tomlkit', 'toolz', 'toons',
+    'toposort', 'torch', 'torchaudio', 'torchmetrics', 'torchvision', 'tornado', 'tox',
+    'tox-uv', 'tqdm', 'trafilatura', 'traitlets', 'transformers', 'tree-sitter',
+    'tree-sitter-bash', 'tree-sitter-c', 'tree-sitter-c-sharp', 'tree-sitter-embedded-template',
+    'tree-sitter-go', 'tree-sitter-java', 'tree-sitter-javascript', 'tree-sitter-language-pack',
+    'tree-sitter-languages', 'tree-sitter-php', 'tree-sitter-python', 'tree-sitter-ruby',
+    'tree-sitter-rust', 'tree-sitter-typescript', 'tree-sitter-yaml', 'trimesh', 'trino',
+    'trio', 'trio-websocket', 'triton', 'tritonclient', 'trove-classifiers', 'truststore',
+    'twilio', 'twine', 'twisted', 'txaio', 'ty', 'typedload', 'typeguard', 'typepy', 'typer',
+    'typer-slim', 'types-aioboto3', 'types-aiobotocore', 'types-aiobotocore-s3',
+    'types-aiofiles', 'types-awscrt', 'types-boto3', 'types-boto3-s3', 'types-cachetools',
+    'types-certifi', 'types-cffi', 'types-croniter', 'types-deprecated', 'types-docutils',
+    'types-html5lib', 'types-jsonschema', 'types-markdown', 'types-openpyxl', 'types-paramiko',
+    'types-protobuf', 'types-psutil', 'types-psycopg2', 'types-pymysql', 'types-pyopenssl',
+    'types-python-dateutil', 'types-python-slugify', 'types-pytz', 'types-pyyaml',
+    'types-redis', 'types-requests', 'types-retry', 'types-s3transfer', 'types-setuptools',
+    'types-tabulate', 'types-toml', 'types-tqdm', 'types-urllib3', 'types-webencodings',
+    'typing-extensions', 'typing-inspect', 'typing-inspection', 'tyro', 'tzdata', 'tzlocal',
+    'ua-parser', 'ua-parser-builtins', 'uamqp', 'uc-micro-py', 'ujson', 'ultralytics',
+    'ultralytics-thop', 'umap-learn', 'uncalled-for', 'unearth', 'unicodecsv', 'unidecode',
+    'unidiff', 'unittest-xml-reporting', 'universal-pathlib', 'unstructured-client',
+    'uri-template', 'uritemplate', 'uritools', 'url-normalize', 'urllib3', 'urwid', 'usaddress',
+    'user-agents', 'userpath', 'uuid-utils', 'uuid6', 'uuid7', 'uv', 'uv-build',
+    'uv-dynamic-versioning', 'uvicorn', 'uvicorn-worker', 'uvloop', 'validators', 'vcrpy',
+    'vcs-versioning', 'vine', 'virtualenv', 'voluptuous', 'vulture', 'w3lib', 'waitress',
+    'wandb', 'wasabi', 'watchdog', 'watchfiles', 'watchtower', 'wcmatch', 'wcwidth', 'weasel',
+    'weasyprint', 'weaviate-client', 'web3', 'webauthn', 'webcolors', 'webdriver-manager',
+    'webencodings', 'webob', 'websocket-client', 'websockets', 'werkzeug', 'wheel', 'whenever',
+    'whitenoise', 'widgetsnbextension', 'wikipedia-api', 'wirerope', 'workos', 'wrapt',
+    'wsproto', 'wtforms', 'xarray', 'xattr', 'xgboost', 'xgrammar', 'xlrd', 'xlsxwriter',
+    'xlwt', 'xmlschema', 'xmlsec', 'xmltodict', 'xxhash', 'xyzservices', 'yamllint',
+    'yandexcloud', 'yapf', 'yarl', 'ydb', 'yfinance', 'youtube-transcript-api', 'yt-dlp',
+    'z3-solver', 'zarr', 'zeep', 'zipp', 'zope-event', 'zope-interface', 'zopfli', 'zstandard',
+    'zstd', 'zxcvbn',
+])

ghostpkg/registries.py

@@ -0,0 +1,130 @@
+"""Registry clients. Standard library only -- ghostpkg has no dependencies.
+
+A supply-chain security tool that pulls in a dependency tree is a poor joke,
+so this module deliberately uses urllib rather than requests.
+"""
+
+from __future__ import annotations
+
+import json
+import urllib.error
+import urllib.parse
+import urllib.request
+from dataclasses import dataclass
+from datetime import datetime, timezone
+
+USER_AGENT = "ghostpkg/0.1 (+https://github.com/m1rwana12/ghostpkg)"
+TIMEOUT = 15
+
+
+class RegistryError(RuntimeError):
+    """The registry could not be reached or returned something unusable."""
+
+
+@dataclass(frozen=True)
+class PackageFacts:
+    """What a registry tells us about a name. `exists=False` means 404."""
+
+    name: str
+    ecosystem: str
+    exists: bool
+    age_days: int | None = None
+    release_count: int = 0
+    has_repo_url: bool = False
+    latest_version: str | None = None
+    summary: str | None = None
+
+
+def _get_json(url: str) -> dict | None:
+    """Fetch and decode JSON. Returns None on a clean 404."""
+    request = urllib.request.Request(url, headers={"User-Agent": USER_AGENT})
+    try:
+        with urllib.request.urlopen(request, timeout=TIMEOUT) as response:
+            return json.loads(response.read().decode("utf-8"))
+    except urllib.error.HTTPError as exc:
+        if exc.code == 404:
+            return None
+        raise RegistryError(f"{url} returned HTTP {exc.code}") from exc
+    except urllib.error.URLError as exc:
+        raise RegistryError(f"could not reach {url}: {exc.reason}") from exc
+    except json.JSONDecodeError as exc:
+        raise RegistryError(f"{url} returned malformed JSON") from exc
+
+
+def _age_in_days(iso_timestamp: str) -> int | None:
+    try:
+        moment = datetime.fromisoformat(iso_timestamp.replace("Z", "+00:00"))
+    except ValueError:
+        return None
+    return (datetime.now(timezone.utc) - moment).days
+
+
+def fetch_pypi(name: str) -> PackageFacts:
+    quoted = urllib.parse.quote(name, safe="")
+    payload = _get_json(f"https://pypi.org/pypi/{quoted}/json")
+    if payload is None:
+        return PackageFacts(name=name, ecosystem="pypi", exists=False)
+
+    info = payload.get("info") or {}
+    releases = payload.get("releases") or {}
+
+    uploads = sorted(
+        file["upload_time_iso_8601"]
+        for files in releases.values()
+        for file in files
+        if file.get("upload_time_iso_8601")
+    )
+    age = _age_in_days(uploads[0]) if uploads else None
+
+    project_urls = info.get("project_urls") or {}
+    home_page = info.get("home_page") or ""
+
+    return PackageFacts(
+        name=name,
+        ecosystem="pypi",
+        exists=True,
+        age_days=age,
+        release_count=sum(1 for files in releases.values() if files),
+        has_repo_url=bool(project_urls) or bool(home_page),
+        latest_version=info.get("version"),
+        summary=info.get("summary") or None,
+    )
+
+
+def fetch_npm(name: str) -> PackageFacts:
+    quoted = urllib.parse.quote(name, safe="@/")
+    payload = _get_json(f"https://registry.npmjs.org/{quoted}")
+    if payload is None:
+        return PackageFacts(name=name, ecosystem="npm", exists=False)
+
+    time_map = payload.get("time") or {}
+    created = time_map.get("created")
+    age = _age_in_days(created) if created else None
+
+    versions = payload.get("versions") or {}
+    repository = payload.get("repository") or {}
+    homepage = payload.get("homepage") or ""
+
+    return PackageFacts(
+        name=name,
+        ecosystem="npm",
+        exists=True,
+        age_days=age,
+        release_count=len(versions),
+        has_repo_url=bool(repository.get("url")) or bool(homepage),
+        latest_version=(payload.get("dist-tags") or {}).get("latest"),
+        summary=payload.get("description") or None,
+    )
+
+
+FETCHERS = {"pypi": fetch_pypi, "npm": fetch_npm}
+
+
+def fetch(name: str, ecosystem: str) -> PackageFacts:
+    try:
+        fetcher = FETCHERS[ecosystem]
+    except KeyError:
+        raise ValueError(
+            f"unknown ecosystem {ecosystem!r}; expected one of {sorted(FETCHERS)}"
+        ) from None
+    return fetcher(name)