unrent 0.2.0__tar.gz

unrent-0.2.0/.gitignore

@@ -0,0 +1,8 @@
+.venv/
+__pycache__/
+*.pyc
+.pytest_cache/
+.ruff_cache/
+dist/
+build/
+*.egg-info/

unrent-0.2.0/CHANGELOG.md

@@ -0,0 +1,125 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow
+[Semantic Versioning](https://semver.org/). Weekly ranking refreshes are not listed;
+each release ships the rankings as of its date.
+
+## [0.2.0] - 2026-10-04
+
+First public release.
+
+### Added
+- Snapped models: model ids the code selects that the vendor has retired (`snapped`) or
+  will retire on an announced date (`snaps`), with the vendor's replacement, followed
+  while that one retires too. 204 retirements from OpenAI, Anthropic and Google in
+  `catalog/retirements.yaml`, checked weekly against their pages by
+  `scripts/retirements.py`, which opens a pull request. In the terminal view, the
+  Markdown report (`Models that stop working`), JSON and MCP (`models_retiring`).
+  `--why <model id>` and `--as-of YYYY-MM-DD`. A model menu, a price table, a check on
+  the user's choice, sample data and Bedrock or Vertex spellings are not counted as
+  selecting. A third eval side, `--side all`, scores it against hand-labelled truth
+  (`eval/corpus_models.yaml`, `eval/MODEL_TRUTH_RULES.md`): precision 0.939, recall 0.886.
+- A terminal view, the default when the output is a terminal: one row per service,
+  `cut` (an open source replacement exists), `held` (none yet) or `runs` (open source in
+  use, with its rank), with its strongest location and a count of the rest. Columns stack
+  on narrow terminals; colour follows `NO_COLOR` and `FORCE_COLOR`. A pipe or `-o` still
+  gets the Markdown report. `--format terminal|markdown|json|auto` and `-f`.
+- `--why SERVICE`: every location behind one service or open source component, and its
+  ranked alternatives or standing.
+- `unrent <path>` as short for `unrent scan <path>`, and a status line on stderr while
+  a terminal scan runs.
+- `unknown_candidates` in every scan (JSON, Markdown and MCP): API hosts and keys that
+  no catalog entry explains and that look like a hosted AI API, grouped by domain with
+  their key (`TYPESAFE_API_KEY` with `api.typesafe.ai`). A generated provider catalog
+  is one candidate. Never counted as a finding.
+- 139 hosted model providers from [models.dev](https://models.dev), in the generated
+  `catalog/services/models-dev.yaml`; a weekly job regenerates it, runs the golden
+  corpus and opens a pull request. `scripts/new_services.py` also ranks the
+  `unknown_candidates` of the eval corpus in the eval's job summary.
+- 15 hand-written closed services (357 in all): TypeSafe AI (Jev), GitHub Copilot API,
+  Ollama Cloud, Ask Sage, Hicap, Nous Research, Huawei ModelArts MaaS, SAP AI Core,
+  Oracle Code Assist, BytePlus InfoQuest, Sofya, Tencent Cloud WSA, Unbrowse, Tenki and
+  Volcengine Speech. New endpoints and keys for Moonshot (Kimi For Coding), Gitee AI (MoArk),
+  Tencent (TokenHub), watsonx, Cloudflare AI Gateway and OCI Generative AI.
+- An agent skill, `skills/unrent`, with `sweep.py` and `repo_facts.py`.
+- `unrent mcp`: an MCP server with `scan`, `alternatives`, `standing` and `catalog`
+  tools (install the `mcp` extra). It reads the latest rankings from the repository,
+  cached for six hours, and falls back to the shipped snapshot, saying why.
+  `UNRENT_OFFLINE=1` keeps it offline.
+- 19 closed services (182 in all): GitHub Models, SageMaker, Qianfan, SiliconFlow,
+  Hunyuan, Spark, Baichuan, StepFun, Novita, Clarifai, Aleph Alpha, Reka, GigaChat and
+  six managed vector databases.
+- Open source signatures for Java (Spring AI, LangChain4j), .NET, Go, LangChain and
+  LlamaIndex integration packages, env vars and more images; four new projects (89).
+- Pools: RAG split into applications and frameworks; new LLM evaluation and answer
+  engine pools. Model rows show parameter counts.
+- Package extras named after a package (`qdrant-client[fastembed]`), compose
+  `${VAR:-default}` images and `CREATE EXTENSION` statements.
+- The eval corpus labels open source components too (54 repositories), checked in CI.
+- 21 more closed services (203 in all), found by agents in anything-llm and
+  gpt-researcher: Gitee AI, PPIO, APIpie, CometAPI, Privatemode, Atlas Cloud, AI/ML API,
+  TensorBlock Forge, Avian, NetMind, ModelsLab, Chroma Cloud, the Nomic API, Okahu, and
+  the search APIs SearchApi.io, Serply, fastCRW, Keenable, AnySearch, Bocha and
+  GroundRoute. The Nomic API is not reported where the code asks for local inference.
+- `open_core` on open source projects whose repo keeps part of the code under another
+  licence (LiteLLM, Langfuse, Agenta, Onyx, Meilisearch, Weaviate), shown next to the
+  licence.
+- `env_template_only`: a key that appears only in `.env.example` or similar, with
+  nothing in the code behind it, is listed apart and not counted as a dependency.
+
+- `unrent scan <dir>`: finds closed AI services (about 160: LLM APIs, gateways,
+  embeddings, vector databases, RAG, OCR, observability, speech, image generation,
+  search, browser automation, sandboxes, agent memory) from packages, imports,
+  install commands, framework integrations, API hosts, model ids, environment
+  variables and Terraform resources.
+- Markdown and JSON reports, with file, line and masked text for every finding.
+- Open source alternatives per service, ranked weekly by GitHub star momentum and
+  Hugging Face trending (`scripts/refresh.py`).
+- `--exclude`, `.unrentignore`, `--skip-tests`, `--top`, `--output`.
+- `unrent catalog` and `unrent catalog --validate`.
+- Optional ripgrep acceleration with identical results.
+- Closed model ids with no SDK, key, host or package behind them are listed
+  separately ("closed models named in code") instead of counted as dependencies.
+- "Open source you already run": 88 open source AI components (vector databases,
+  inference servers, gateways, document parsers, observability, ...) are recognised
+  from packages, imports, SQL and container images (`image:`, Helm values, `FROM`),
+  and each is placed in its pool, overall and among projects of the same kind.
+- A golden corpus of hand-labelled repositories (`eval/`), run in CI.
+
+### Changed
+- Faster scans of large repos, with identical results on all 54 corpus repos: from 1,500
+  files on, worker processes read the files (one per core, falling back to one process
+  where they can't start), each Python file is parsed once and only its statements are
+  walked, and ripgrep gets larger batches outside Windows. dify (14,000 files) went
+  from 59 s to 14 s, LibreChat (5,500) from 14 s to 6 s, the whole corpus from 193 s
+  to 112 s.
+- The MCP instructions state the limits: only catalog services are detected, and each
+  pool's `ranked_by` says whether it is ranked by 90-day star gain or total stars.
+- `unrent/report.py` is now `unrent/render.py`.
+
+### Fixed
+- Odd files no longer end a scan: invalid YAML dates, deep JSON or TOML, a `.py` file
+  that overflows the parser, or a manifest of the wrong shape (`dependencies = 3`) gives
+  no facts, and the rest of the repo is still reported. A malformed `--catalog` is a
+  catalog error, not a traceback.
+- A TOML dependency is cited at its own line (`llama-index = "0.9.7"`), not at a
+  `keywords` entry higher up that names the same package.
+- ripgrep only reads the files the scan covers: a repo with gigabytes of ignored data
+  went from 99 s to about 1 s.
+- Notebooks: source lists joined correctly, non-Python kernels read with their own
+  comment syntax.
+- Old Mac (CR-only) files, symlinks, non-UTF-8 paths, saved unrent reports and OpenAPI
+  specs no longer produce wrong lines or findings.
+- A repo is never listed as a component of itself.
+- Descriptions containing commas were cut short in the catalog; the loader now rejects
+  them unquoted and names the file on any catalog error.
+- `-o` is checked before the scan and excluded from it; `--top` must be positive.
+- Evidence is ordered strongest first; code spans survive backticks.
+- LangChain.js `VoyageEmbeddings` and `VOYAGEAI_API_KEY` are Voyage AI.
+- A vendor prefix needs a model name after it: `github://` URIs and `/^snowflake/i`
+  regexes no longer name GitHub Models or Snowflake Cortex.
+- Open source signatures: `SEARX_URL` and `SearxSearch` (SearXNG), vLLM behind an
+  OpenAI-compatible base URL, a self-hosted Firecrawl URL, LangChain's `FAISS`.
+
+[0.2.0]: https://github.com/stringcutter/unrent/releases/tag/v0.2.0

unrent-0.2.0/LICENSE

@@ -0,0 +1,202 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+

unrent-0.2.0/PKG-INFO

@@ -0,0 +1,226 @@
+Metadata-Version: 2.5
+Name: unrent
+Version: 0.2.0
+Summary: Find the strings your AI code hangs by: closed AI services to swap for open source, and models their vendor retires.
+Project-URL: Homepage, https://github.com/stringcutter/unrent
+Project-URL: Source, https://github.com/stringcutter/unrent
+Project-URL: Issues, https://github.com/stringcutter/unrent/issues
+Project-URL: Changelog, https://github.com/stringcutter/unrent/blob/main/CHANGELOG.md
+Author: stringcutter
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: ai,alternatives,cli,dependency-scanner,llm,mcp,model-deprecation,open-source,openai,static-analysis,vendor-lock-in
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Classifier: Topic :: Software Development :: Quality Assurance
+Requires-Python: >=3.11
+Requires-Dist: pyyaml>=6.0
+Provides-Extra: mcp
+Requires-Dist: mcp<3,>=2.2; extra == 'mcp'
+Description-Content-Type: text/markdown
+
+# unrent
+
+*by [stringcutter](https://github.com/stringcutter)*
+
+Find the strings your AI code hangs by. Cut them before they snap.
+
+- **Closed AI services** the code calls, with file and line, and the open source that
+  replaces each one, ranked.
+- **Models that stop working**: model ids the code selects that their vendor has retired,
+  or will on an announced date, and the vendor's replacement.
+- **Open source AI** the code already runs, and where it ranks in its field.
+
+The CLI runs offline. No account. No upload. No telemetry.
+
+![unrent my-app: 3 strings attached, 3 can be cut, 1 will snap. Rows for OpenAI API, Pinecone and ElevenLabs marked cut with their open source replacements, gpt-4-turbo marked snaps with its retirement date and replacement, and faiss marked runs with its rank](https://github.com/stringcutter/unrent/raw/main/docs/terminal.svg)
+
+Real output. One row per string, with its strongest location and how many more there
+are:
+
+| | |
+|---|---|
+| `╎ cut` | A closed service with an open source replacement. The top of its ranking is on the row. |
+| `│ held` | A closed service with no open source replacement in the catalog yet. |
+| `┆ snapped` | A model id the code selects that its vendor has retired. Requests to it fail now. |
+| `┆ snaps` | The same, on the date shown. |
+| `│ runs` | Open source already in use, and where it ranks among its kind. |
+
+`--why` shows every line behind one row, and what replaces it:
+
+![unrent my-app --why gpt-4-turbo: main.py line 9 selects gpt-4-turbo, which retires on 2026-10-23; openai recommends gpt-5.6-sol, with the link to OpenAI's deprecations page](https://github.com/stringcutter/unrent/raw/main/docs/why.svg)
+
+In a pipe or a file the same scan is a Markdown report that pastes straight into an
+issue or PR.
+
+## Install
+
+```bash
+uv tool install unrent      # or: pipx install unrent
+unrent .
+```
+
+Or once, without installing:
+
+```bash
+uvx unrent .
+```
+
+Python 3.11+. One dependency: PyYAML (the MCP server adds `mcp`). Large repos are read
+on every core. With [ripgrep](https://github.com/BurntSushi/ripgrep) on PATH it is about
+twice as fast again: 6 s for 5,500 files, 14 s for 14,000 (13 s and 26 s without, on 4
+cores). Same results either way.
+
+## Use
+
+```bash
+unrent .                               # the terminal view; Markdown in a pipe or file
+unrent . --why openai                  # every location of one service, and what replaces it
+unrent . --why gpt-4-turbo             # every line that selects a retiring model
+unrent . --as-of 2026-12-01            # judge retirements as of another day
+unrent . -o report.md                  # the Markdown report
+unrent . --format json -o r.json       # everything, machine-readable
+unrent . --top 5                       # more alternatives per kind
+unrent . --skip-tests                  # ignore test, spec and fixture code
+unrent . --exclude "examples/"         # .gitignore syntax; or a .unrentignore file
+unrent catalog                         # what it knows
+```
+
+`unrent .` is short for `unrent scan .`. Colour follows `NO_COLOR` and `FORCE_COLOR`.
+
+On Windows PowerShell, write reports with `-o`, not `>`. The redirect re-encodes the
+file.
+
+## MCP
+
+unrent as tools for Claude Code, Cursor, Copilot, or any agent that speaks MCP. The agent
+gets the facts; you decide what to swap.
+
+```bash
+claude mcp add unrent -- uvx --from "unrent[mcp]" unrent mcp
+```
+
+Other clients:
+
+```json
+{
+  "mcpServers": {
+    "unrent": {
+      "command": "uvx",
+      "args": ["--from", "unrent[mcp]", "unrent", "mcp"]
+    }
+  }
+}
+```
+
+| Tool | |
+|---|---|
+| `scan` | Closed services, models that stop working, open source in use, alternatives. The report as JSON. |
+| `alternatives` | Best open source for a category or a closed service: `"pinecone"`, `"speech-to-text"`. |
+| `standing` | Where one project ranks, overall and among its kind: `"qdrant/qdrant"`. |
+| `catalog` | What unrent recognises, and the signatures it looks for. |
+
+Rankings come from this repo's `main`, refreshed weekly, not from the install. Cached
+for six hours. When the fetch fails it uses the shipped snapshot and says so.
+`UNRENT_OFFLINE=1` never fetches. Only rankings come in. Your code never goes out.
+
+For agents that use skills, `npx skills add stringcutter/unrent` adds a workflow on top:
+check what unrent can't see, sweep for services outside the catalog, and write the report.
+
+## What it detects
+
+**357 closed AI services** in 21 categories: LLM APIs, LLM gateways, embeddings, vector
+databases, RAG platforms, document parsing, guardrails, classification and scoring, LLM
+observability, model hosting, fine-tuning, speech-to-text, text-to-speech, voice agents,
+image generation, web search, web scraping, browser automation, code sandboxes, agent
+platforms, agent memory. 218 are written by hand; 139 hosted model providers come from
+[models.dev](https://models.dev) and are regenerated every week
+([`models-dev.yaml`](https://github.com/stringcutter/unrent/blob/main/catalog/services/models-dev.yaml)).
+
+**Models that stop working.** 204 model retirements announced by OpenAI, Anthropic and
+Google for their own APIs, with the date and the vendor's replacement, checked every
+week against their deprecation pages
+([`retirements.yaml`](https://github.com/stringcutter/unrent/blob/main/catalog/retirements.yaml))
+and shipped with each release.
+A model id counts when a line selects it: a default, a config value, a model passed to
+a call. The same id in a model menu, a price table or a check on what the user picked
+is only counted. Azure OpenAI, Bedrock and Vertex keep their own schedules and are not
+covered. On the golden corpus: precision 0.939, recall 0.886.
+
+**Services it does not know yet.** Every scan also lists `unknown_candidates`: API hosts
+and keys that no catalog entry explains and that look like a hosted AI API (a `/v1/...`
+path, an `api.` or `.ai` host, a matching `*_API_KEY`). They are candidates to check, not
+findings, and never counted.
+
+**89 open source projects**: vector databases, inference servers, gateways, RAG
+frameworks and applications, document parsers, observability, evals, speech, scraping,
+agent memory.
+
+Evidence it reads:
+
+| | |
+|---|---|
+| Packages | Python (requirements, pyproject, setup.py/cfg, Pipfile, conda, extras like `qdrant-client[fastembed]`), npm and pnpm catalogs, Go, Cargo, Maven, Gradle, NuGet, RubyGems, Composer, pub, SwiftPM |
+| Imports | Python (AST, notebooks), JavaScript/TypeScript (`import`, `require`, `import()`, `npm:`, `jsr:`) |
+| Install commands | `pip install`, `uv add`, `npm i`, … in Dockerfiles, shell, CI, notebook cells |
+| Container images | `image:` in compose and Kubernetes, `${VAR:-default}`, Helm values, Dockerfile `FROM` |
+| Code and config | API hosts, model ids, env vars, SDK symbols, `CREATE EXTENSION`, Terraform |
+
+Every package name in the catalog exists in its registry. Checked weekly.
+
+## What it ignores
+
+- **Local servers behind a compatible SDK.** `OpenAI(base_url="http://localhost:11434/v1")` is Ollama, not OpenAI.
+- **Lockfiles.** Your dependencies' dependencies aren't yours.
+- **Comments and docs.** Per-language comment syntax. `"/api/*"` in a string is not a comment.
+- **Ignored and vendored files.** `.gitignore` with or without git. Submodules scanned. `node_modules` not.
+- **Generic names.** `task="transcribe"` isn't Amazon. `import textract` isn't AWS. Your `perplexity.py` isn't Perplexity.
+- **Open-weight models.** `gpt-oss`, `deepseek-v3.2` and Ollama tags aren't closed.
+
+Also:
+
+- **Secrets are masked.** `OPENAI_API_KEY=****`.
+- **Test-only findings are marked.** `--skip-tests` drops them.
+- **Model names alone don't count.** A model id with no SDK, key, host or package behind it is listed apart, as *closed models named in code*.
+- **Vendor through vendor.** Azure via `openai`, Claude on Bedrock or Vertex via `anthropic`: the report names the one you actually call.
+- **Oversized files are listed, never skipped silently.**
+
+Every rule above has a test that fails without it.
+
+## Ranking
+
+Pools live in [`catalog/alternatives.yaml`](https://github.com/stringcutter/unrent/blob/main/catalog/alternatives.yaml). Re-ranked every Monday by a
+GitHub Action that merges itself.
+
+- **Projects:** GitHub stars gained in the last 90 days, from unrent's own weekly
+  snapshots. Until four weeks exist: total stars. The report says which.
+- **Models:** Hugging Face trending. Labs' own releases only, open licence, max two per lab.
+- **Open source only.** OSI licence for code. Apache, MIT, BSD or CC-BY for weights.
+  Restricted weights are out, whatever the code licence. Archived projects and a year
+  without a push are out. Open core is marked: LiteLLM's `enterprise/` or Langfuse's `ee/`
+  is not under the licence shown.
+- **No silent rot.** A renamed, archived or relicensed project blocks the auto-merge and
+  waits for a human. A pool that empties or halves is not published.
+
+The scanner reads the snapshot shipped with the release. New rankings come with new
+releases.
+
+## Contribute
+
+The catalog is YAML. New service: [`catalog/services/`](https://github.com/stringcutter/unrent/tree/main/catalog/services). New alternative: a pool in
+[`catalog/alternatives.yaml`](https://github.com/stringcutter/unrent/blob/main/catalog/alternatives.yaml). False positive or miss: open an issue with the
+line that fooled it. [CONTRIBUTING.md](https://github.com/stringcutter/unrent/blob/main/CONTRIBUTING.md).
+
+## Licence
+
+[Apache-2.0](https://github.com/stringcutter/unrent/blob/main/LICENSE). unrent is made by
+[stringcutter](https://github.com/stringcutter).