From df7d2edec91ac81c2a1ad44567eefc9a056e78c6 Mon Sep 17 00:00:00 2001 From: SalkCoding Date: Thu, 10 Sep 2026 20:17:03 +0900 Subject: [PATCH] feat: prepare 1.0.5.1 release --- .claude/launch.json | 11 - .claude/settings.json | 7 - .codex/config.toml | 2 + .cursorrules | 92 - .dockerignore | 16 + .github/copilot-instructions.md | 144 - .github/prompts/qa.prompt.md | 293 - .github/scripts/prepare-pages-site.sh | 1 + .github/scripts/prepare-wiki.py | 111 + .github/scripts/validate-release.py | 76 + .github/workflows/ci-cd.yml | 109 +- .github/workflows/wiki-sync.yml | 21 +- .gitignore | 27 +- .kimi/AGENTS.md | 92 - .release-please-manifest.json | 3 - CHANGELOG.md | 20 + CLAUDE.md | 92 - README.ja.md | 6 +- README.ko.md | 7 +- README.md | 47 +- THIRD_PARTY_LICENSES.md | 308 +- build.gradle | 234 +- deploy/README.md | 60 + .env.example => deploy/docker/.env.example | 0 .../docker/.env.prod.example | 10 +- Dockerfile => deploy/docker/Dockerfile | 0 deploy/docker/compose.prod.yml | 63 + .../docker/compose.yml | 11 +- .../observability/grafana/oswl-dashboard.json | 788 + docker-compose.prod.yml | 40 - docs/Embedded-AI.md | 174 - docs/Getting-Started.md | 153 - docs/Production-Deployment-Checklist.md | 215 - docs/README.md | 31 + docs/_Sidebar.md | 30 - docs/{ => en}/API-Reference.md | 11 +- docs/{ => en}/Administration.md | 74 +- docs/en/Analysis-Coverage.md | 15 + docs/{ => en}/Authorization-Layers.md | 0 docs/en/Backup-And-Restore.md | 69 + docs/en/Browser-Security-Alerts.md | 13 + docs/{ => en}/CLI-Integration.md | 22 +- docs/en/Container-Image-Inspection.md | 18 + docs/en/Custom-Scan-Rules.md | 19 + docs/{ => en}/Database-Schema.md | 10 +- docs/en/Embedded-AI.md | 103 + docs/en/Getting-Started.md | 122 + docs/{ => en}/Glossary.md | 0 docs/{ => en}/Home.md | 8 +- docs/en/Inline-Team-Access.md | 7 + docs/{ => en}/License-Analysis.md | 0 docs/en/Offline-CocoaPods-Specs.md | 17 + docs/en/Organization-Risk-Briefing.md | 9 + docs/en/Production-Deployment-Checklist.md | 235 + docs/{ => en}/Project-Access-Control.md | 0 docs/{ => en}/Quick-Import.md | 0 docs/{ => en}/Risk-Trend.md | 0 docs/{ => en}/Scan-Api-Security.md | 2 +- docs/{ => en}/Scan-History.md | 0 docs/{ => en}/Security-Center.md | 2 +- docs/{ => en}/User-Guide.md | 4 +- docs/{ => en}/Version-Diff.md | 0 docs/{ => en}/Whats-New-v1.0.4.md | 2 +- docs/en/Whats-New-v1.0.5.1.md | 24 + docs/en/_Sidebar.md | 35 + docs/ja/API-Reference.md | 11 +- docs/ja/Administration.md | 68 +- docs/ja/Backup-And-Restore.md | 69 + docs/ja/CLI-Integration.md | 22 +- docs/ja/Database-Schema.md | 10 +- docs/ja/Embedded-AI.md | 201 +- docs/ja/Getting-Started.md | 73 +- docs/ja/Home.md | 4 +- docs/ja/Production-Deployment-Checklist.md | 114 +- docs/ja/Scan-Api-Security.md | 2 +- docs/ja/Security-Center.md | 2 +- docs/ja/User-Guide.md | 4 +- docs/ja/Whats-New-v1.0.4.md | 8 +- docs/ja/Whats-New-v1.0.5.1.md | 24 + docs/ko/API-Reference.md | 15 +- docs/ko/Administration.md | 68 +- docs/ko/Backup-And-Restore.md | 69 + docs/ko/CLI-Integration.md | 22 +- docs/ko/Database-Schema.md | 14 +- docs/ko/Embedded-AI.md | 207 +- docs/ko/Getting-Started.md | 81 +- docs/ko/Glossary.md | 2 +- docs/ko/Home.md | 11 +- docs/ko/Production-Deployment-Checklist.md | 121 +- docs/ko/Quick-Import.md | 2 +- docs/ko/Scan-Api-Security.md | 2 +- docs/ko/Security-Center.md | 2 +- docs/ko/User-Guide.md | 4 +- docs/ko/Whats-New-v1.0.4.md | 2 +- docs/ko/Whats-New-v1.0.5.1.md | 24 + landing/i18n/en.json | 87 +- landing/i18n/ja.json | 91 +- landing/i18n/ko.json | 87 +- landing/index.html | 273 +- landing/landing-i18n.js | 67 +- release-please-config.json | 13 - scripts/README.md | 27 + scripts/{ => dev}/check-java.ps1 | 0 scripts/{ => dev}/check-java.sh | 0 scripts/dev/measure-agent-context.py | 58 + scripts/{ => dev}/oswl-bootRun.command | 6 +- scripts/oci/scan-image.py | 346 + scripts/oci/test_scan_image.py | 117 + scripts/ops/verify-restore.sh | 121 + scripts/oswl-vdb/oswl-vdb.sh | 2 +- scripts/vdb/build-cocoapods-specs.py | 52 + scripts/verification/cluster_assertions.py | 75 + scripts/verification/performance.gradle | 11 + .../verification/test_cluster_assertions.py | 36 + scripts/verification/test_push_worker.cjs | 14 + scripts/verification/verify-h2-cluster.py | 98 + scripts/verification/verify-multi-instance.sh | 194 + .../oswl/config/TmpObjectMapperConfig.java | 20 - .../oswl/controller/TestDataController.java | 12 +- .../demo/SupplyChainHeuristicsScratch.java | 6 +- .../local/CppManifestParserSanityCheck.java | 73 + .../local/CvssV4CalculatorSanityCheck.java | 65 + .../oswl/local/LockParserSanityCheck.java | 167 +- .../oswl/local/LogoResizeSanityCheck.java | 88 + .../oswl/auth/cli/AuditLogIntegrityCli.java | 43 + .../AdminAuditLogIntegrityController.java | 28 + .../auth/controller/AuthViewController.java | 2 +- .../auth/controller/OnboardingController.java | 40 + .../auth/controller/OtpVerifyController.java | 2 +- .../auth/controller/UserThemeController.java | 47 + .../AdminAuditLogIntegrityControllerSpec.java | 33 + .../spec/UserThemeControllerSpec.java | 45 + .../salkcoding/oswl/auth/dto/AuditLogDto.java | 4 + .../auth/dto/AuditLogIntegrityReport.java | 38 + .../oswl/auth/dto/CreateUserRequest.java | 2 + .../oswl/auth/dto/UserThemeRequest.java | 12 + .../salkcoding/oswl/auth/entity/AuditLog.java | 8 + .../oswl/auth/entity/OnboardingProgress.java | 39 + .../com/salkcoding/oswl/auth/entity/User.java | 6 + .../oswl/auth/enums/Permission.java | 11 +- .../oswl/auth/enums/UserThemeMode.java | 7 + .../auth/repository/AuditLogRepository.java | 15 + .../OnboardingProgressRepository.java | 7 + .../repository/RoleTemplateRepository.java | 3 + .../UserVcsConnectionRepository.java | 2 + .../oswl/auth/security/JdbcSessionConfig.java | 39 + .../security/OidcLoginSuccessHandler.java | 2 +- .../OswlSecurityHeadersProperties.java | 2 +- .../oswl/auth/security/OswlUserPrincipal.java | 22 + .../security/Saml2LoginSuccessHandler.java | 147 + .../oswl/auth/security/SecurityConfig.java | 50 +- .../TwoFaAuthenticationSuccessHandler.java | 4 +- .../auth/security/UserDetailsServiceImpl.java | 3 +- .../auth/service/AccountDeletionService.java | 5 +- .../service/AuditLogIntegrityService.java | 142 + .../oswl/auth/service/AuditLogService.java | 76 +- .../service/AuditLogSiemExportService.java | 2 + .../auth/service/LoginCompletionService.java | 19 + .../oswl/auth/service/OnboardingService.java | 64 + .../auth/service/RoleTemplateService.java | 56 +- .../auth/service/SecuritySettingService.java | 46 +- .../auth/service/UserManagementService.java | 2 + .../oswl/auth/service/UserThemeService.java | 39 + .../oswl/auth/web/SettingsTabAccess.java | 36 +- .../oswl/client/CocoaPodsSpecsClient.java | 173 + .../oswl/client/CpeMatchService.java | 17 + .../salkcoding/oswl/client/CpeNameMapper.java | 79 + .../salkcoding/oswl/client/DepsDevClient.java | 64 +- .../salkcoding/oswl/client/EpssClient.java | 20 +- .../oswl/client/GitHubAdvisoryClient.java | 331 + .../oswl/client/KevCatalogService.java | 20 +- .../com/salkcoding/oswl/client/NvdClient.java | 293 + .../com/salkcoding/oswl/client/OsvClient.java | 236 +- .../oswl/config/AirgappedClientConfig.java | 75 +- .../oswl/config/OswlStartupWarnings.java | 31 +- .../controller/AdminProjectController.java | 28 + .../controller/ConfigTransferController.java | 29 + .../controller/DiagnosticsController.java | 28 + .../oswl/controller/LocalDevController.java | 12 +- .../oswl/controller/MobileController.java | 38 + .../controller/ScanArchivingController.java | 36 + .../oswl/controller/SearchController.java | 23 + .../{ => ai}/AiSettingController.java | 17 +- .../{ => apikey}/AdminCliKeyController.java | 29 +- .../{ => apikey}/ApiKeyController.java | 14 +- .../AdminAuditExportController.java | 2 +- .../{ => ingest}/QuickImportController.java | 4 +- .../{ => ingest}/ScanController.java | 20 +- .../controller/{ => jira}/JiraController.java | 8 +- .../{ => license}/LicenseController.java | 8 +- .../LicensePolicyController.java | 4 +- .../{ => license}/OssNoticesController.java | 8 +- .../notification/WebPushController.java | 17 + .../notification/WebPushPageController.java | 9 + .../WebhookSettingController.java | 124 + .../org/ExecutiveSummaryController.java | 16 + .../{ => org}/OrgDashboardController.java | 4 +- .../oswl/controller/org/TeamController.java | 128 + .../controller/policy/PolicyController.java | 109 + .../ProjectContextController.java | 16 +- .../{ => project}/ProjectController.java | 8 +- .../reporting/ReportBrandingController.java | 37 + .../{ => reporting}/RiskTrendController.java | 6 +- .../{ => reporting}/SbomController.java | 14 +- .../{ => scan}/ComponentDetailController.java | 12 +- .../scan/CustomScanRuleController.java | 20 + .../{ => scan}/ScanHistoryController.java | 12 +- .../{ => scan}/VersionDiffController.java | 6 +- .../controller/scim/ScimGroupController.java | 106 + .../controller/scim/ScimUserController.java | 108 + .../SnapshotAdminController.java | 20 +- .../spec/AdminCliKeyControllerSpec.java | 3 + .../spec/AdminProjectControllerSpec.java | 29 + .../spec/ConfigTransferControllerSpec.java | 39 + .../spec/CustomScanRuleControllerSpec.java | 12 + .../spec/DiagnosticsControllerSpec.java | 34 + .../spec/ExecutiveSummaryControllerSpec.java | 7 + .../controller/spec/PolicyControllerSpec.java | 80 + .../spec/ProjectContextControllerSpec.java | 8 + .../spec/ProjectControllerSpec.java | 2 +- .../spec/QuickImportControllerSpec.java | 3 +- .../spec/ReportBrandingControllerSpec.java | 37 + .../spec/SavedViewControllerSpec.java | 60 + .../controller/spec/SbomControllerSpec.java | 2 +- .../spec/ScanArchivingControllerSpec.java | 62 + .../spec/ScimGroupControllerSpec.java | 79 + .../spec/ScimUserControllerSpec.java | 83 + .../controller/spec/SearchControllerSpec.java | 32 + .../spec/SecurityCenterControllerSpec.java | 51 + .../spec/SnapshotAdminControllerSpec.java | 16 +- .../controller/spec/TeamControllerSpec.java | 157 + .../spec/WebPushControllerSpec.java | 8 + .../spec/WebhookSettingControllerSpec.java | 71 + .../{ => vcs}/GitHubApiController.java | 8 +- .../{ => vcs}/VcsBranchController.java | 16 +- .../vulnerability/SavedViewController.java | 56 + .../SecurityCenterController.java | 89 +- .../domain/entity/{ => ai}/AiDailyUsage.java | 17 +- .../domain/entity/{ => ai}/AiPreferences.java | 2 +- .../domain/entity/{ => ai}/AiSetting.java | 2 +- .../domain/entity/{ => ai}/AiUsageEvent.java | 2 +- .../domain/entity/{ => apikey}/ApiKey.java | 15 +- .../entity/config/CacheInvalidation.java | 38 + .../domain/entity/{ => jira}/JiraSetting.java | 4 +- .../{ => license}/LicensePolicyEntry.java | 2 +- .../entity/notification/WebPushDelivery.java | 18 + .../notification/WebPushSubscription.java | 13 + .../entity/notification/WebhookDelivery.java | 66 + .../entity/notification/WebhookSetting.java | 81 + .../oswl/domain/entity/org/Organization.java | 39 + .../oswl/domain/entity/org/Team.java | 62 + .../oswl/domain/entity/org/TeamMember.java | 51 + .../oswl/domain/entity/policy/Policy.java | 118 + .../domain/entity/policy/PolicyException.java | 115 + .../domain/entity/{ => project}/Project.java | 52 +- .../entity/{ => project}/ProjectMember.java | 2 +- .../entity/{ => project}/ProjectVersion.java | 2 +- .../reporting/ReportBrandingSettings.java | 60 + .../entity/scan/CustomRuleConfiguration.java | 19 + .../entity/{ => scan}/DependencyPath.java | 2 +- .../domain/entity/scan/ImportCoordinator.java | 16 + .../oswl/domain/entity/scan/ImportJob.java | 27 + .../entity/{ => scan}/ScanComponent.java | 39 +- .../oswl/domain/entity/scan/ScanFinding.java | 70 + .../domain/entity/{ => scan}/ScanResult.java | 84 +- .../entity/{ => snapshot}/SnapshotEntry.java | 2 +- .../entity/{ => snapshot}/SnapshotMeta.java | 8 +- .../entity/system/DatabaseMutationLock.java | 13 + .../entity/{ => vulnerability}/Cve.java | 94 +- .../entity/{ => vulnerability}/CveAlert.java | 3 +- .../entity/{ => vulnerability}/Library.java | 81 +- .../entity/vulnerability/SavedView.java | 55 + .../oswl/domain/enums/ApiKeyScope.java | 11 + .../oswl/domain/enums/CveSource.java | 12 + .../oswl/domain/enums/MatchConfidence.java | 12 + .../domain/enums/PolicyExceptionStatus.java | 11 + .../enums/PolicyExceptionTargetType.java | 11 + .../oswl/domain/enums/PolicyScopeType.java | 11 + .../oswl/domain/enums/Reachability.java | 16 + .../oswl/domain/enums/ScanFindingType.java | 5 + .../oswl/domain/enums/ScimGroupMapping.java | 9 + .../oswl/domain/enums/TeamMemberRole.java | 15 + .../domain/enums/WebhookDeliveryStatus.java | 10 + .../oswl/domain/enums/WebhookEventType.java | 12 + .../oswl/domain/enums/WebhookProvider.java | 10 + .../oswl/dto/AdminProjectRefDto.java | 11 + .../salkcoding/oswl/dto/ComponentRowDto.java | 13 + .../java/com/salkcoding/oswl/dto/CveDto.java | 5 + .../oswl/dto/OrgProjectRiskDto.java | 6 + .../salkcoding/oswl/dto/OrgTeamRiskDto.java | 51 + .../oswl/dto/ProjectSummaryDto.java | 11 + .../oswl/dto/QuickImportJobStatus.java | 10 +- .../oswl/dto/ReportBrandingResponse.java | 11 + .../oswl/dto/ReportBrandingUpdateRequest.java | 20 + .../oswl/dto/SavedViewCreateRequest.java | 21 + .../com/salkcoding/oswl/dto/SavedViewDto.java | 19 + .../oswl/dto/ScanHistoryRowDto.java | 8 + .../dto/SecurityCenterRowFilterParams.java | 32 + .../dto/SnapshotImportFromPathRequest.java | 2 +- .../salkcoding/oswl/dto/TeamMemberDto.java | 25 + .../salkcoding/oswl/dto/TeamSummaryDto.java | 37 + .../oswl/dto/api/AiCacheSumsDto.java | 7 + .../oswl/dto/api/AiSettingUpdateRequest.java | 2 +- .../oswl/dto/api/AiUsageStatsResponse.java | 5 + .../oswl/dto/api/EmbeddedAiConfigRequest.java | 4 +- .../oswl/dto/api/WebPushAttempt.java | 2 + .../oswl/dto/api/WebPushStatus.java | 6 + .../dto/api/WebPushSubscriptionRequest.java | 4 + .../oswl/dto/api/WebhookDeliveryDto.java | 28 + .../oswl/dto/api/WebhookSettingResponse.java | 22 + .../dto/api/WebhookSettingUpdateRequest.java | 22 + .../oswl/dto/api/WebhookTestRequest.java | 14 + .../oswl/dto/config/ConfigBundle.java | 52 + .../oswl/dto/config/ConfigImportResult.java | 19 + .../diagnostics/DiagnosticCheckResult.java | 14 + .../salkcoding/oswl/dto/gate/GateRequest.java | 6 + .../oswl/dto/gate/GateResultDto.java | 12 +- .../oswl/dto/mobile/MobileAlertDto.java | 18 + .../dto/mobile/MobileProjectAlertsDto.java | 10 + .../oswl/dto/mobile/MobileWaiverDto.java | 17 + .../oswl/dto/policy/EffectivePolicyDto.java | 26 + .../salkcoding/oswl/dto/policy/PolicyDto.java | 30 + .../oswl/dto/policy/PolicyExceptionDto.java | 30 + .../dto/policy/PolicyExceptionRequest.java | 17 + .../oswl/dto/policy/PolicyGitOpsRequest.java | 11 + .../oswl/dto/policy/PolicyRequest.java | 22 + .../dto/policy/PolicyScopeOptionsDto.java | 12 + .../oswl/dto/scan/CustomRuleSet.java | 3 + .../oswl/dto/scan/CustomScanRule.java | 4 + .../oswl/dto/scan/ScanArchiveExportDto.java | 37 + .../oswl/dto/scan/ScanArchiveResult.java | 5 + .../oswl/dto/scan/ScanFindingCandidate.java | 19 + .../oswl/dto/scan/ScanFindingRowDto.java | 17 + .../salkcoding/oswl/dto/scan/ScanPayload.java | 14 + .../oswl/dto/scan/SourceAnalysisDetails.java | 19 + .../oswl/dto/scan/VersionDiffComponent.java | 18 + .../salkcoding/oswl/dto/scim/ScimEmail.java | 14 + .../salkcoding/oswl/dto/scim/ScimError.java | 18 + .../salkcoding/oswl/dto/scim/ScimGroup.java | 24 + .../oswl/dto/scim/ScimListResponse.java | 23 + .../salkcoding/oswl/dto/scim/ScimMember.java | 14 + .../salkcoding/oswl/dto/scim/ScimMeta.java | 18 + .../salkcoding/oswl/dto/scim/ScimName.java | 14 + .../oswl/dto/scim/ScimPatchOperation.java | 12 + .../oswl/dto/scim/ScimPatchRequest.java | 15 + .../salkcoding/oswl/dto/scim/ScimUser.java | 29 + .../oswl/dto/search/ComponentSearchHit.java | 11 + .../oswl/dto/search/CveSearchHit.java | 10 + .../oswl/dto/search/GlobalSearchResponse.java | 16 + .../oswl/dto/search/ProjectSearchHit.java | 8 + .../oswl/dto/search/SearchGroup.java | 21 + .../oswl/dto/snapshot/CocoaPodsSpec.java | 32 + .../exception/GlobalExceptionHandler.java | 12 +- .../health/AiProviderHealthIndicator.java | 40 + .../oswl/health/DbHealthIndicator.java | 41 + .../oswl/health/DiskSpaceHealthIndicator.java | 55 + .../EmbeddedSidecarHealthIndicator.java | 59 + .../SnapshotFreshnessHealthIndicator.java | 75 + .../oswl/logging/OswlFileEncoder.java | 81 + .../oswl/repository/CveRepository.java | 12 - .../DatabaseMutationLockRepository.java | 38 + .../repository/DependencyPathRepository.java | 12 - .../oswl/repository/LibraryRepository.java | 50 - .../oswl/repository/ProjectRepository.java | 29 - .../repository/ScanComponentRepository.java | 106 - .../oswl/repository/ScanResultRepository.java | 56 - .../{ => ai}/AiDailyUsageRepository.java | 19 +- .../{ => ai}/AiPreferencesRepository.java | 4 +- .../{ => ai}/AiSettingRepository.java | 4 +- .../{ => ai}/AiUsageEventRepository.java | 4 +- .../{ => apikey}/ApiKeyRepository.java | 4 +- .../config/CacheInvalidationRepository.java | 22 + .../{ => jira}/JiraSettingRepository.java | 4 +- .../LicensePolicyRepository.java | 4 +- .../WebPushDeliveryRepository.java | 12 + .../WebPushSubscriptionRepository.java | 10 + .../WebhookDeliveryRepository.java | 18 + .../WebhookSettingRepository.java | 12 + .../org/OrganizationRepository.java | 12 + .../repository/org/TeamMemberRepository.java | 36 + .../oswl/repository/org/TeamRepository.java | 19 + .../policy/PolicyExceptionRepository.java | 34 + .../repository/policy/PolicyRepository.java | 20 + .../ProjectMemberRepository.java | 4 +- .../repository/project/ProjectRepository.java | 83 + .../ProjectVersionRepository.java | 6 +- .../ReportBrandingSettingsRepository.java | 12 + .../CustomRuleConfigurationRepository.java | 4 + .../scan/DependencyPathRepository.java | 29 + .../scan/ImportCoordinatorRepository.java | 10 + .../repository/scan/ImportJobRepository.java | 36 + .../scan/ScanComponentRepository.java | 276 + .../scan/ScanFindingRepository.java | 41 + .../repository/scan/ScanResultRepository.java | 100 + .../SnapshotEntryRepository.java | 6 +- .../SnapshotMetaRepository.java | 4 +- .../CveAlertRepository.java | 16 +- .../vulnerability/CveRepository.java | 40 + .../LibraryCatalogRepository.java | 61 + .../vulnerability/LibraryRepository.java | 96 + .../vulnerability/SavedViewRepository.java | 11 + .../scheduler/CacheInvalidationPoller.java | 95 + .../ContinuousMonitoringScheduler.java | 11 +- .../oswl/scheduler/DeferExpiryScheduler.java | 56 +- .../ImportJobMaintenanceScheduler.java | 40 + .../PolicyExceptionExpiryScheduler.java | 94 + .../oswl/scheduler/SchedulerLockConfig.java | 29 + .../oswl/scheduler/TrashCleanupScheduler.java | 11 +- .../oswl/security/OutboundUrlValidator.java | 44 + .../oswl/service/GatePolicyService.java | 285 - .../oswl/service/MobileDashboardService.java | 88 + .../oswl/service/SearchService.java | 74 + .../oswl/service/SecurityCenterService.java | 338 - .../oswl/service/ai/AiAnalysisService.java | 35 +- .../oswl/service/ai/AiCallTrace.java | 4 +- .../service/ai/AiConnectionDiagnostics.java | 2 +- .../ai/AiEnrichmentContextBuilder.java | 6 +- .../oswl/service/ai/AiPreferencesService.java | 14 +- .../service/ai/AiPromptTemplateService.java | 16 +- .../service/ai/AiUsageLimiterService.java | 4 +- .../service/ai/AiUsageRecorderService.java | 44 +- .../oswl/service/ai/AiUsageStatsService.java | 29 +- .../oswl/service/ai/AnthropicClient.java | 14 +- .../ai/EmbeddedAiBootstrapService.java | 2 +- .../ai/EmbeddedAiProviderRegistrar.java | 4 +- .../oswl/service/ai/EmbeddedAiService.java | 118 +- .../oswl/service/ai/OpenAiClient.java | 12 +- .../service/{ => apikey}/ApiKeyService.java | 90 +- .../{ => apikey}/ApiKeyTokenSupport.java | 2 +- .../service/{ => apikey}/IssuedApiKey.java | 4 +- .../ProjectCliKeyPolicyService.java | 6 +- .../config/CacheInvalidationService.java | 74 + .../service/config/ConfigTransferService.java | 388 + .../container/BaseImageEcosystemMapper.java | 100 + .../service/container/DockerfileParser.java | 158 + .../oswl/service/cvss/CvssV3Calculator.java | 167 + .../oswl/service/cvss/CvssV3Vector.java | 78 + .../oswl/service/cvss/CvssV4Calculator.java | 409 + .../oswl/service/cvss/CvssV4Vector.java | 108 + .../oswl/service/cvss/CvssVectorVersion.java | 26 + .../cvss/EnvironmentalRequirementMapper.java | 61 + .../diagnostics/DiagnosticsService.java | 196 + .../oswl/service/gate/GatePolicyService.java | 452 + .../service/{ => gate}/PrGateService.java | 24 +- .../oswl/service/git/GitCloneExecutor.java | 7 +- .../oswl/service/iacscan/IacRule.java | 9 + .../oswl/service/iacscan/IacScanner.java | 161 + .../oswl/service/iacscan/IacTargetKind.java | 5 + .../{ => ingest}/CloneCleanupService.java | 2 +- .../ingest/CondaPypiMappingService.java | 72 + .../DependencyManifestParserService.java | 1276 +- .../DependencyManifestPatcher.java | 8 +- .../EnrichmentProgressContext.java | 10 +- .../EnrichmentProgressHolder.java | 32 +- .../oswl/service/ingest/ImportJobStore.java | 203 + .../{ => ingest}/ManifestArchiveService.java | 2 +- .../{ => ingest}/ManifestPatchInfo.java | 2 +- .../{ => ingest}/MavenBomVersionResolver.java | 66 +- .../{ => ingest}/QuickImportService.java | 226 +- .../{ => ingest}/SbomImportService.java | 16 +- .../ScanApiCredentialThrottleService.java | 2 +- .../{ => ingest}/ScanIngestService.java | 129 +- .../ingest/parser/CargoManifestParser.java | 105 + .../ingest/parser/CocoaPodsLockParser.java | 56 + .../ingest/parser/ComposerLockParser.java | 79 + .../ingest/parser/ConanLockParser.java | 80 + .../ingest/parser/CondaLockParser.java | 160 + .../ingest/parser/GoManifestParser.java | 67 + .../ingest/parser/ManifestDiscovery.java | 96 + .../service/ingest/parser/ManifestIndex.java | 5 + .../service/ingest/parser/MavenPomParser.java | 111 + .../ingest/parser/NativeManifestParser.java | 190 + .../ingest/parser/NpmManifestParser.java | 162 + .../ingest/parser/NugetManifestParser.java | 220 + .../ingest/parser/PythonManifestParser.java | 175 + .../service/ingest/parser/RubyLockParser.java | 54 + .../ingest/parser/UploadedLockFileParser.java | 75 + .../ingest/parser/VersionCatalogParser.java | 70 + .../oswl/service/{ => jira}/JiraService.java | 17 +- .../{ => license}/LicensePolicyService.java | 76 +- .../service/{ => license}/LicenseService.java | 14 +- .../manifest/ManifestCollectRules.java | 7 +- .../oswl/service/metrics/OswlMetrics.java | 118 + .../service/notification/WebPushService.java | 161 + .../notification/WebPushTransport.java | 60 + .../service/notification/WebPushWorker.java | 24 + .../service/notification/WebhookClient.java | 142 + .../notification/WebhookMessageBuilder.java | 135 + .../WebhookNotificationService.java | 189 + .../notification/WebhookSettingService.java | 135 + .../service/org/ExecutiveSummaryService.java | 30 + .../{ => org}/OrgDashboardService.java | 157 +- .../oswl/service/org/TeamBootstrapRunner.java | 27 + .../oswl/service/org/TeamService.java | 339 + .../oswl/service/policy/PolicyService.java | 661 + .../{ => project}/ProjectAccessService.java | 45 +- .../ProjectMemberBootstrapRunner.java | 6 +- .../service/{ => project}/ProjectService.java | 139 +- .../reachability/CallGraphAnalyzer.java | 462 + .../reachability/LibraryPackageMapper.java | 176 + .../reachability/ReachabilityService.java | 73 + .../reachability/SourceImportSyntax.java | 102 + .../SourceReachabilityService.java | 41 + .../reachability/SourceReachabilityStore.java | 35 + .../reachability/SourceReferenceAnalyzer.java | 200 + .../ComplianceReportService.java | 20 +- .../reporting/ReportBrandingService.java | 52 + .../{ => reporting}/RiskTrendService.java | 63 +- .../{ => reporting}/SarifExportService.java | 26 +- .../{ => reporting}/SbomExportService.java | 24 +- .../{ => scan}/ComponentDetailService.java | 107 +- .../service/scan/ScanArchivingService.java | 158 + .../service/{ => scan}/ScanFailureMarker.java | 14 +- .../{ => scan}/ScanHistoryService.java | 25 +- .../{ => scan}/ScanStatusEmitterRegistry.java | 2 +- .../oswl/service/scan/ScanSummaryReader.java | 48 + .../{ => scan}/ScanTimingRecorder.java | 2 +- .../{ => scan}/ScanVersionDiffAnalyzer.java | 50 +- .../{ => scan}/VersionDiffService.java | 10 +- .../service/scim/ScimProvisioningService.java | 511 + .../service/secretscan/CustomRuleScanner.java | 76 + .../secretscan/CustomScanRuleService.java | 83 + .../secretscan/SecretIacScanService.java | 90 + .../oswl/service/secretscan/SecretRule.java | 16 + .../service/secretscan/SecretScanner.java | 190 + .../secretscan/SourceFindingStore.java | 27 + .../AirgappedSnapshotService.java | 536 +- .../snapshot/SnapshotBundleStager.java | 106 + .../service/{ => vcs}/BitbucketService.java | 4 +- .../oswl/service/{ => vcs}/GitHubService.java | 4 +- .../oswl/service/{ => vcs}/GitLabService.java | 4 +- .../{ => vcs}/VcsAuthTokenService.java | 3 +- .../ContinuousMonitoringService.java | 64 +- .../vulnerability/SavedViewService.java | 67 + .../vulnerability/SecurityCenterService.java | 476 + .../SupplyChainHeuristicsService.java | 6 +- .../VulnerabilityEnrichmentService.java | 566 +- .../sources/AdvisoryFetchResult.java | 9 + .../sources/GitHubAdvisorySource.java | 29 + .../sources/NvdAdvisorySource.java | 40 + .../oswl/util/LogoImageNormalizer.java | 99 + .../salkcoding/oswl/util/VersionOrder.java | 2 +- .../oswl/vdb/ApkVersionComparator.java | 116 + .../salkcoding/oswl/vdb/DepsDevSource.java | 33 +- .../com/salkcoding/oswl/vdb/EpssSource.java | 2 +- .../oswl/vdb/GitHubAdvisorySource.java | 81 + .../com/salkcoding/oswl/vdb/HttpCache.java | 57 +- .../com/salkcoding/oswl/vdb/NvdSource.java | 96 + .../salkcoding/oswl/vdb/OsvBulkSource.java | 122 +- .../oswl/vdb/PreviousBundleReader.java | 4 +- .../oswl/vdb/SimpleVersionComparator.java | 9 +- .../salkcoding/oswl/vdb/VdbBuildOptions.java | 18 +- .../salkcoding/oswl/vdb/VdbBuilderCli.java | 27 +- .../salkcoding/oswl/vdb/VdbBundleWriter.java | 30 +- .../salkcoding/oswl/vdb/WantedComponent.java | 2 +- .../oswl/web/config/OpenApiConfig.java | 8 +- .../oswl/web/config/WebMvcConfig.java | 12 + .../filter/RequestContextLoggingFilter.java | 49 + .../interceptor/ApiKeyAuthInterceptor.java | 6 +- .../web/interceptor/ScimAuthInterceptor.java | 69 + .../META-INF/THIRD_PARTY_LICENSES.txt | 142 + .../licenses/conda-forge-bot-data-LICENSE.txt | 125 + src/main/resources/ai/prompts.properties | 10 +- src/main/resources/ai/prompts_ja.properties | 14 +- src/main/resources/ai/prompts_ko.properties | 8 +- src/main/resources/application-local.yaml | 19 +- src/main/resources/application-prod.yaml | 44 +- src/main/resources/application.yaml | 144 +- .../conda/grayskull-pypi-mapping.json | 71040 ++++++++++++++++ src/main/resources/cvss/cvss-v4-lookup.json | 272 + src/main/resources/db/ai_cache_hit_stats.sql | 4 + .../db/audit_log_integrity_hash_chain.sql | 8 + src/main/resources/db/cache_invalidation.sql | 8 + src/main/resources/db/ccpp_coverage.sql | 4 + src/main/resources/db/cve_sources.sql | 13 + .../resources/db/database_mutation_locks.sql | 3 + src/main/resources/db/durable_import_jobs.sql | 18 + src/main/resources/db/hot_path_indexes.sql | 25 + .../V10__spring_session_and_shedlock.sql | 43 + .../db/migration/V11__org_team_hierarchy.sql | 61 + .../db/migration/V12__hot_path_indexes.sql | 44 + .../resources/db/migration/V13__saml_scim.sql | 14 + .../db/migration/V14__webhook_settings.sql | 36 + .../db/migration/V15__cve_sources.sql | 17 + .../db/migration/V16__ccpp_coverage.sql | 7 + .../db/migration/V17__policy_as_code.sql | 62 + .../db/migration/V18__reachability.sql | 7 + .../V19__audit_log_integrity_hash_chain.sql | 10 + .../db/migration/V20__user_theme.sql | 2 + .../V21__secret_iac_scan_findings.sql | 17 + .../db/migration/V22__scan_archiving.sql | 16 + .../db/migration/V23__onboarding_progress.sql | 6 + .../db/migration/V24__saved_views.sql | 19 + .../V25__report_branding_settings.sql | 10 + .../db/migration/V26__ai_cache_hit_stats.sql | 3 + .../db/migration/V27__cache_invalidation.sql | 8 + .../V28__policy_gate_reachability_secrets.sql | 7 + .../migration/V29__reachability_evidence.sql | 6 + .../db/migration/V2__v104_features.sql | 2 +- .../V30__source_analysis_metadata.sql | 1 + .../db/migration/V31__durable_import_jobs.sql | 18 + .../V32__vulnerability_lookup_outcomes.sql | 2 + .../db/migration/V33__custom_scan_rules.sql | 5 + .../migration/V34__web_push_notifications.sql | 22 + .../V35__database_mutation_locks.sql | 3 + .../db/migration/V4__scan_ai_status.sql | 2 +- .../V5__library_version_meta_fetched_at.sql | 2 +- .../db/migration/V6__ai_context_hash.sql | 2 +- .../V7__snapshot_v2_and_license_raw.sql | 2 +- src/main/resources/db/onboarding_progress.sql | 6 + src/main/resources/db/org_team_hierarchy.sql | 52 + src/main/resources/db/policy_as_code.sql | 59 + .../db/policy_gate_reachability_secrets.sql | 5 + src/main/resources/db/project_members.sql | 2 +- src/main/resources/db/reachability.sql | 7 + .../resources/db/report_branding_settings.sql | 11 + src/main/resources/db/saml_scim.sql | 8 + src/main/resources/db/saved_views.sql | 15 + src/main/resources/db/scan_archiving.sql | 15 + .../resources/db/secret_iac_scan_findings.sql | 16 + .../resources/db/source_analysis_metadata.sql | 1 + .../db/spring_session_and_shedlock.sql | 36 + .../resources/db/supply_chain_heuristics.sql | 2 +- src/main/resources/db/user_theme.sql | 3 + src/main/resources/db/webhook_settings.sql | 35 + src/main/resources/logback-spring.xml | 40 + src/main/resources/messages.properties | 597 +- src/main/resources/messages_ja.properties | 615 +- src/main/resources/messages_ko.properties | 673 +- .../resources/secretscan/secret-rules.json | 68 + src/main/resources/static/css/globals.css | 70 +- src/main/resources/static/js/a11y.js | 122 + .../resources/static/js/onboarding-team.js | 37 + .../static/js/org-dashboard/org-dashboard.js | 153 +- src/main/resources/static/js/oswl-http.js | 35 + src/main/resources/static/js/oswl-theme.js | 26 + .../resources/static/js/projects/projects.js | 35 +- .../static/js/projects/quick-import.js | 262 +- .../static/js/risk-trend/risk-trend.js | 177 +- .../static/js/security-center/page.js | 450 + .../static/js/security-center/slideout.js | 36 + .../resources/static/js/settings/admin.js | 480 + src/main/resources/static/js/settings/ai.js | 700 + .../resources/static/js/settings/cache.js | 92 + src/main/resources/static/js/settings/cli.js | 86 + .../static/js/settings/config-transfer.js | 75 + .../static/js/settings/diagnostics.js | 128 + .../static/js/settings/license-policy.js | 178 + .../resources/static/js/settings/policy.js | 366 + .../resources/static/js/settings/reports.js | 85 + .../resources/static/js/settings/security.js | 147 + .../static/js/settings/settings-dirty.js | 84 + .../static/js/settings/settings-subtabs.js | 25 + src/main/resources/static/js/settings/vcs.js | 239 + .../resources/static/js/settings/webhooks.js | 145 + .../static/js/web-push-preferences.js | 67 + src/main/resources/static/oswl-push-sw.js | 16 + .../static/scripts/manifest-rules.json | 2 +- .../supply-chain/popular-packages.txt | 2 +- src/main/resources/templates/auth/login.html | 12 +- .../resources/templates/auth/onboarding.html | 262 + .../fragments/detail-content.html | 166 +- .../resources/templates/fragments/footer.html | 10 +- .../resources/templates/fragments/head.html | 18 +- .../templates/fragments/settings-subtabs.html | 30 + .../resources/templates/fragments/topbar.html | 311 +- .../license/components/context_bar.html | 10 +- .../resources/templates/mobile/index.html | 213 + .../templates/notification/preferences.html | 27 + .../templates/org-dashboard/index.html | 36 +- .../templates/org-dashboard/summary.html | 51 + .../templates/oss-notices/index.html | 29 +- .../templates/projects/cli-integration.html | 5 +- .../templates/projects/git-integration.html | 67 +- .../resources/templates/projects/index.html | 83 +- .../templates/projects/quick-import.html | 29 +- .../templates/reports/compliance-report.html | 33 +- .../risk-trend/components/risk-trend.html | 34 +- .../resources/templates/risk-trend/index.html | 10 +- .../templates/scan-history/index.html | 9 +- .../security-center/fragments/actions.html | 107 +- .../security-center/fragments/filters.html | 35 + .../security-center/fragments/findings.html | 50 + .../security-center/fragments/table.html | 417 +- .../templates/security-center/index.html | 443 +- .../templates/security-center/print.html | 4 +- .../resources/templates/settings/index.html | 67 +- .../templates/settings/tabs/admin.html | 649 +- .../resources/templates/settings/tabs/ai.html | 859 +- .../templates/settings/tabs/cache.html | 112 +- .../templates/settings/tabs/cli.html | 113 +- .../settings/tabs/config-transfer.html | 99 + .../templates/settings/tabs/diagnostics.html | 171 + .../settings/tabs/license-policy.html | 193 +- .../templates/settings/tabs/policy.html | 474 + .../templates/settings/tabs/reports.html | 132 + .../templates/settings/tabs/security.html | 182 +- .../templates/settings/tabs/vcs.html | 300 +- .../templates/settings/tabs/webhooks.html | 268 + .../templates/version-diff/index.html | 54 +- .../controller/OtpVerifyControllerTest.java | 3 + ...TwoFaAuthenticationSuccessHandlerTest.java | 5 + .../auth/service/RoleTemplateServiceTest.java | 2 + .../service/SecuritySettingServiceTest.java | 2 + .../oswl/auth/web/SettingsTabAccessTest.java | 4 +- .../oswl/client/NvdLookupOutcomeTest.java | 39 + .../salkcoding/oswl/client/OsvClientTest.java | 41 + .../oswl/client/OsvLookupOutcomeTest.java | 71 + .../controller/AdminCliKeyControllerTest.java | 13 +- .../AdminProjectControllerTest.java | 52 + .../controller/AiSettingControllerTest.java | 9 +- .../oswl/controller/ApiKeyControllerTest.java | 13 +- .../ComponentDetailControllerTest.java | 11 +- .../controller/LicenseControllerTest.java | 7 +- .../controller/ProjectControllerTest.java | 7 +- .../controller/QuickImportControllerTest.java | 3 +- .../controller/RiskTrendControllerTest.java | 5 +- .../oswl/controller/ScanControllerTest.java | 19 +- .../controller/ScanHistoryControllerTest.java | 9 +- .../SecurityCenterControllerTest.java | 9 +- .../controller/TestDataControllerTest.java | 8 +- .../controller/VcsBranchControllerTest.java | 15 +- .../controller/VersionDiffControllerTest.java | 5 +- .../{ => vcs}/GitHubApiControllerTest.java | 11 +- .../oswl/domain/entity/LibraryTest.java | 2 + .../exception/GlobalExceptionHandlerTest.java | 18 + .../repository/LibraryRepositoryTest.java | 3 +- .../LicensePolicyRepositoryTest.java | 3 +- .../repository/ProjectRepositoryTest.java | 3 +- .../repository/ScanResultRepositoryTest.java | 18 +- .../CacheInvalidationPollerTest.java | 105 + .../ImportJobMaintenanceSchedulerTest.java | 41 + .../scheduler/TrashCleanupSchedulerTest.java | 4 +- ...ncyManifestParserEcosystemMappingTest.java | 58 + ...sFrameworkGradleParseVerificationTest.java | 5 +- .../ExpressNpmLockVerificationTest.java | 14 +- .../MauiNuGetParseVerificationTest.java | 14 +- .../service/RailsGemfileVerificationTest.java | 14 +- .../oswl/service/SearchServiceTest.java | 150 + .../service/ai/AiAnalysisServiceTest.java | 8 +- .../ai/AiEnrichmentContextBuilderTest.java | 4 +- .../service/ai/AiPreferencesServiceTest.java | 17 +- .../ai/AiPromptTemplateServiceTest.java | 4 +- .../AiUsageLimiterServiceIntegrationTest.java | 4 +- .../service/ai/AiUsageLimiterServiceTest.java | 6 +- .../service/ai/AiUsageStatsServiceTest.java | 110 + .../oswl/service/ai/AnthropicClientTest.java | 6 +- .../service/ai/EmbeddedAiDownloadTest.java | 93 + ...mbeddedAiFreshInstallVerificationTest.java | 56 + .../ai/EmbeddedAiProviderRegistrarTest.java | 4 +- .../oswl/service/ai/OpenAiClientTest.java | 6 +- .../{ => apikey}/ApiKeyServiceTest.java | 22 +- .../ProjectCliKeyPolicyServiceTest.java | 9 +- .../config/ConfigTransferServiceTest.java | 218 + .../oswl/service/gate/GateCoverageTest.java | 95 + .../DependencyManifestPatcherTest.java | 3 +- .../EnrichmentProgressHolderTest.java | 3 +- .../service/ingest/ImportJobStoreTest.java | 135 + .../ingest/LibraryCatalogConcurrencyTest.java | 46 + .../ingest/ManifestParserBoundaryTest.java | 59 + .../MavenBomVersionResolverTest.java | 38 +- .../QuickImportServiceParserTest.java | 13 +- .../{ => ingest}/QuickImportServiceTest.java | 13 +- .../ScanApiCredentialThrottleServiceTest.java | 3 +- .../{ => ingest}/ScanIngestServiceTest.java | 98 +- .../LicensePolicyServiceTest.java | 10 +- .../{ => license}/LicenseServiceTest.java | 15 +- .../manifest/ManifestCollectParityTest.java | 18 +- .../oswl/service/metrics/OswlMetricsTest.java | 104 + .../notification/WebPushMigrationTest.java | 28 + .../notification/WebPushServiceTest.java | 131 + .../notification/WebPushTransportTest.java | 53 + .../OrgDashboardServiceQueryCountTest.java | 156 + .../ProjectAccessServiceTest.java | 11 +- .../project/ProjectServiceQueryCountTest.java | 148 + .../{ => project}/ProjectServiceTest.java | 98 +- .../SourceReferenceAnalyzerTest.java | 47 + .../{ => reporting}/RiskTrendServiceTest.java | 26 +- .../ComponentDetailServiceTest.java | 17 +- .../scan/ScanArchivingServiceTest.java | 162 + .../{ => scan}/ScanHistoryServiceTest.java | 15 +- .../ScanStatusEmitterRegistryTest.java | 3 +- .../service/scan/ScanSummaryReaderTest.java | 78 + .../scan/ScanVersionDiffProjectionTest.java | 57 + .../{ => scan}/VersionDiffServiceTest.java | 12 +- .../secretscan/CustomRulePublicationTest.java | 112 + .../secretscan/CustomScanRuleTest.java | 60 + .../snapshot/CocoaPodsSnapshotTest.java | 123 + .../SnapshotImportTransactionTest.java | 113 + .../snapshot/SnapshotStagingBoundaryTest.java | 41 + .../{ => vcs}/BitbucketServiceTest.java | 3 +- .../service/{ => vcs}/GitHubServiceTest.java | 3 +- .../service/{ => vcs}/GitLabServiceTest.java | 3 +- .../ContinuousMonitoringServiceTest.java | 46 + .../SecurityCenterServiceTest.java | 33 +- .../VulnerabilityEnrichmentServiceTest.java | 100 +- .../support/ExternalVerificationFixture.java | 40 + .../ExternalVerificationFixtureTest.java | 32 + .../ApiKeyAuthInterceptorTest.java | 8 +- src/test/resources/application.yaml | 3 + .../oswl/uitest/AuthExpiryUiTest.java | 87 + .../oswl/uitest/AxeAuditUiTest.java | 176 + .../oswl/uitest/DetectionCoverageUiTest.java | 100 + .../oswl/uitest/EmbeddedAiFailureUiTest.java | 27 + .../oswl/uitest/JdbcBudgetProbe.java | 104 + .../oswl/uitest/KeyboardFlowUiTest.java | 133 + .../oswl/uitest/LocalSmartHttpGitServer.java | 271 + .../oswl/uitest/OnboardingFailureUiTest.java | 43 + .../uitest/OrganizationWorkflowUiTest.java | 82 + .../oswl/uitest/PerformanceBudgetUiTest.java | 291 + .../oswl/uitest/QuickImportLoadUiTest.java | 175 + .../uitest/QuickImportQueueCapUiTest.java | 48 + .../QuickImportRealPipelineLoadUiTest.java | 459 + .../QuickImportSourceReachabilityUiTest.java | 170 + .../oswl/uitest/RequestLifecycleUiTest.java | 389 + .../oswl/uitest/ScaleMeasurementUiTest.java | 142 + .../oswl/uitest/SettingsFailureUiTest.java | 89 + .../oswl/uitest/SettingsModulesUiTest.java | 50 + .../salkcoding/oswl/uitest/SmokeUiTest.java | 73 + .../oswl/uitest/UiStateMatrixUiTest.java | 102 + .../salkcoding/oswl/uitest/UiTestBase.java | 130 + src/uiTest/resources/application-uitest.yaml | 32 + tailwind/tailwind.config.js | 1 + 823 files changed, 115394 insertions(+), 8819 deletions(-) delete mode 100644 .claude/launch.json delete mode 100644 .claude/settings.json create mode 100644 .codex/config.toml delete mode 100644 .cursorrules delete mode 100644 .github/copilot-instructions.md delete mode 100644 .github/prompts/qa.prompt.md create mode 100644 .github/scripts/prepare-wiki.py create mode 100644 .github/scripts/validate-release.py delete mode 100644 .kimi/AGENTS.md delete mode 100644 .release-please-manifest.json delete mode 100644 CLAUDE.md create mode 100644 deploy/README.md rename .env.example => deploy/docker/.env.example (100%) rename .env.prod.example => deploy/docker/.env.prod.example (71%) rename Dockerfile => deploy/docker/Dockerfile (100%) create mode 100644 deploy/docker/compose.prod.yml rename docker-compose.yml => deploy/docker/compose.yml (87%) create mode 100644 deploy/observability/grafana/oswl-dashboard.json delete mode 100644 docker-compose.prod.yml delete mode 100644 docs/Embedded-AI.md delete mode 100644 docs/Getting-Started.md delete mode 100644 docs/Production-Deployment-Checklist.md create mode 100644 docs/README.md delete mode 100644 docs/_Sidebar.md rename docs/{ => en}/API-Reference.md (97%) rename docs/{ => en}/Administration.md (79%) create mode 100644 docs/en/Analysis-Coverage.md rename docs/{ => en}/Authorization-Layers.md (100%) create mode 100644 docs/en/Backup-And-Restore.md create mode 100644 docs/en/Browser-Security-Alerts.md rename docs/{ => en}/CLI-Integration.md (75%) create mode 100644 docs/en/Container-Image-Inspection.md create mode 100644 docs/en/Custom-Scan-Rules.md rename docs/{ => en}/Database-Schema.md (79%) create mode 100644 docs/en/Embedded-AI.md create mode 100644 docs/en/Getting-Started.md rename docs/{ => en}/Glossary.md (100%) rename docs/{ => en}/Home.md (92%) create mode 100644 docs/en/Inline-Team-Access.md rename docs/{ => en}/License-Analysis.md (100%) create mode 100644 docs/en/Offline-CocoaPods-Specs.md create mode 100644 docs/en/Organization-Risk-Briefing.md create mode 100644 docs/en/Production-Deployment-Checklist.md rename docs/{ => en}/Project-Access-Control.md (100%) rename docs/{ => en}/Quick-Import.md (100%) rename docs/{ => en}/Risk-Trend.md (100%) rename docs/{ => en}/Scan-Api-Security.md (96%) rename docs/{ => en}/Scan-History.md (100%) rename docs/{ => en}/Security-Center.md (98%) rename docs/{ => en}/User-Guide.md (89%) rename docs/{ => en}/Version-Diff.md (100%) rename docs/{ => en}/Whats-New-v1.0.4.md (96%) create mode 100644 docs/en/Whats-New-v1.0.5.1.md create mode 100644 docs/en/_Sidebar.md create mode 100644 docs/ja/Backup-And-Restore.md create mode 100644 docs/ja/Whats-New-v1.0.5.1.md create mode 100644 docs/ko/Backup-And-Restore.md create mode 100644 docs/ko/Whats-New-v1.0.5.1.md delete mode 100644 release-please-config.json create mode 100644 scripts/README.md rename scripts/{ => dev}/check-java.ps1 (100%) rename scripts/{ => dev}/check-java.sh (100%) create mode 100644 scripts/dev/measure-agent-context.py rename scripts/{ => dev}/oswl-bootRun.command (66%) create mode 100644 scripts/oci/scan-image.py create mode 100644 scripts/oci/test_scan_image.py create mode 100644 scripts/ops/verify-restore.sh create mode 100644 scripts/vdb/build-cocoapods-specs.py create mode 100644 scripts/verification/cluster_assertions.py create mode 100644 scripts/verification/performance.gradle create mode 100644 scripts/verification/test_cluster_assertions.py create mode 100644 scripts/verification/test_push_worker.cjs create mode 100644 scripts/verification/verify-h2-cluster.py create mode 100644 scripts/verification/verify-multi-instance.sh delete mode 100644 src/local/java/com/salkcoding/oswl/config/TmpObjectMapperConfig.java create mode 100644 src/local/java/com/salkcoding/oswl/local/CppManifestParserSanityCheck.java create mode 100644 src/local/java/com/salkcoding/oswl/local/CvssV4CalculatorSanityCheck.java create mode 100644 src/local/java/com/salkcoding/oswl/local/LogoResizeSanityCheck.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/cli/AuditLogIntegrityCli.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/controller/AdminAuditLogIntegrityController.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/controller/OnboardingController.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/controller/UserThemeController.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/controller/spec/AdminAuditLogIntegrityControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/controller/spec/UserThemeControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/dto/AuditLogIntegrityReport.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/dto/UserThemeRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/entity/OnboardingProgress.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/enums/UserThemeMode.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/repository/OnboardingProgressRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/security/JdbcSessionConfig.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/security/Saml2LoginSuccessHandler.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/service/AuditLogIntegrityService.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/service/OnboardingService.java create mode 100644 src/main/java/com/salkcoding/oswl/auth/service/UserThemeService.java create mode 100644 src/main/java/com/salkcoding/oswl/client/CocoaPodsSpecsClient.java create mode 100644 src/main/java/com/salkcoding/oswl/client/CpeMatchService.java create mode 100644 src/main/java/com/salkcoding/oswl/client/CpeNameMapper.java create mode 100644 src/main/java/com/salkcoding/oswl/client/GitHubAdvisoryClient.java create mode 100644 src/main/java/com/salkcoding/oswl/client/NvdClient.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/AdminProjectController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/ConfigTransferController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/DiagnosticsController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/MobileController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/ScanArchivingController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/SearchController.java rename src/main/java/com/salkcoding/oswl/controller/{ => ai}/AiSettingController.java (98%) rename src/main/java/com/salkcoding/oswl/controller/{ => apikey}/AdminCliKeyController.java (79%) rename src/main/java/com/salkcoding/oswl/controller/{ => apikey}/ApiKeyController.java (89%) rename src/main/java/com/salkcoding/oswl/controller/{ => audit}/AdminAuditExportController.java (98%) rename src/main/java/com/salkcoding/oswl/controller/{ => ingest}/QuickImportController.java (98%) rename src/main/java/com/salkcoding/oswl/controller/{ => ingest}/ScanController.java (93%) rename src/main/java/com/salkcoding/oswl/controller/{ => jira}/JiraController.java (89%) rename src/main/java/com/salkcoding/oswl/controller/{ => license}/LicenseController.java (95%) rename src/main/java/com/salkcoding/oswl/controller/{ => license}/LicensePolicyController.java (92%) rename src/main/java/com/salkcoding/oswl/controller/{ => license}/OssNoticesController.java (85%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/notification/WebPushController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/notification/WebPushPageController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/notification/WebhookSettingController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/org/ExecutiveSummaryController.java rename src/main/java/com/salkcoding/oswl/controller/{ => org}/OrgDashboardController.java (90%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/org/TeamController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/policy/PolicyController.java rename src/main/java/com/salkcoding/oswl/controller/{ => project}/ProjectContextController.java (63%) rename src/main/java/com/salkcoding/oswl/controller/{ => project}/ProjectController.java (96%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/reporting/ReportBrandingController.java rename src/main/java/com/salkcoding/oswl/controller/{ => reporting}/RiskTrendController.java (86%) rename src/main/java/com/salkcoding/oswl/controller/{ => reporting}/SbomController.java (91%) rename src/main/java/com/salkcoding/oswl/controller/{ => scan}/ComponentDetailController.java (92%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/scan/CustomScanRuleController.java rename src/main/java/com/salkcoding/oswl/controller/{ => scan}/ScanHistoryController.java (87%) rename src/main/java/com/salkcoding/oswl/controller/{ => scan}/VersionDiffController.java (85%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/scim/ScimGroupController.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/scim/ScimUserController.java rename src/main/java/com/salkcoding/oswl/controller/{ => snapshot}/SnapshotAdminController.java (91%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/AdminProjectControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ConfigTransferControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/CustomScanRuleControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/DiagnosticsControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ExecutiveSummaryControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/PolicyControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ReportBrandingControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/SavedViewControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ScanArchivingControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ScimGroupControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/ScimUserControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/SearchControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/TeamControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/WebPushControllerSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/controller/spec/WebhookSettingControllerSpec.java rename src/main/java/com/salkcoding/oswl/controller/{ => vcs}/GitHubApiController.java (98%) rename src/main/java/com/salkcoding/oswl/controller/{ => vcs}/VcsBranchController.java (91%) create mode 100644 src/main/java/com/salkcoding/oswl/controller/vulnerability/SavedViewController.java rename src/main/java/com/salkcoding/oswl/controller/{ => vulnerability}/SecurityCenterController.java (62%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => ai}/AiDailyUsage.java (75%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => ai}/AiPreferences.java (99%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => ai}/AiSetting.java (98%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => ai}/AiUsageEvent.java (97%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => apikey}/ApiKey.java (78%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/config/CacheInvalidation.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => jira}/JiraSetting.java (95%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => license}/LicensePolicyEntry.java (97%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushDelivery.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushSubscription.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookDelivery.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookSetting.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/org/Organization.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/org/Team.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/org/TeamMember.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/policy/Policy.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/policy/PolicyException.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => project}/Project.java (71%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => project}/ProjectMember.java (95%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => project}/ProjectVersion.java (96%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/reporting/ReportBrandingSettings.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/scan/CustomRuleConfiguration.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => scan}/DependencyPath.java (98%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportCoordinator.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportJob.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => scan}/ScanComponent.java (79%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanFinding.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => scan}/ScanResult.java (61%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => snapshot}/SnapshotEntry.java (96%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => snapshot}/SnapshotMeta.java (88%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/system/DatabaseMutationLock.java rename src/main/java/com/salkcoding/oswl/domain/entity/{ => vulnerability}/Cve.java (58%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => vulnerability}/CveAlert.java (96%) rename src/main/java/com/salkcoding/oswl/domain/entity/{ => vulnerability}/Library.java (75%) create mode 100644 src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/SavedView.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/ApiKeyScope.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/CveSource.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/MatchConfidence.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionStatus.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionTargetType.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/PolicyScopeType.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/Reachability.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/ScanFindingType.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/ScimGroupMapping.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/TeamMemberRole.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/WebhookDeliveryStatus.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/WebhookEventType.java create mode 100644 src/main/java/com/salkcoding/oswl/domain/enums/WebhookProvider.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/AdminProjectRefDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/OrgTeamRiskDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/ReportBrandingResponse.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/ReportBrandingUpdateRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/SavedViewCreateRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/SavedViewDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/SecurityCenterRowFilterParams.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/TeamMemberDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/TeamSummaryDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/AiCacheSumsDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebPushAttempt.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebPushStatus.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebPushSubscriptionRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebhookDeliveryDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingResponse.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingUpdateRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/api/WebhookTestRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/config/ConfigBundle.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/config/ConfigImportResult.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/diagnostics/DiagnosticCheckResult.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/mobile/MobileAlertDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/mobile/MobileProjectAlertsDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/mobile/MobileWaiverDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/EffectivePolicyDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyGitOpsRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/policy/PolicyScopeOptionsDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/CustomRuleSet.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/CustomScanRule.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/ScanArchiveExportDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/ScanArchiveResult.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/ScanFindingCandidate.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/ScanFindingRowDto.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/SourceAnalysisDetails.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scan/VersionDiffComponent.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimEmail.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimError.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimGroup.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimListResponse.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimMember.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimMeta.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimName.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimPatchOperation.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimPatchRequest.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/scim/ScimUser.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/search/ComponentSearchHit.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/search/CveSearchHit.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/search/GlobalSearchResponse.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/search/ProjectSearchHit.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/search/SearchGroup.java create mode 100644 src/main/java/com/salkcoding/oswl/dto/snapshot/CocoaPodsSpec.java create mode 100644 src/main/java/com/salkcoding/oswl/health/AiProviderHealthIndicator.java create mode 100644 src/main/java/com/salkcoding/oswl/health/DbHealthIndicator.java create mode 100644 src/main/java/com/salkcoding/oswl/health/DiskSpaceHealthIndicator.java create mode 100644 src/main/java/com/salkcoding/oswl/health/EmbeddedSidecarHealthIndicator.java create mode 100644 src/main/java/com/salkcoding/oswl/health/SnapshotFreshnessHealthIndicator.java create mode 100644 src/main/java/com/salkcoding/oswl/logging/OswlFileEncoder.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/CveRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/DatabaseMutationLockRepository.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/DependencyPathRepository.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/LibraryRepository.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/ProjectRepository.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/ScanComponentRepository.java delete mode 100644 src/main/java/com/salkcoding/oswl/repository/ScanResultRepository.java rename src/main/java/com/salkcoding/oswl/repository/{ => ai}/AiDailyUsageRepository.java (73%) rename src/main/java/com/salkcoding/oswl/repository/{ => ai}/AiPreferencesRepository.java (59%) rename src/main/java/com/salkcoding/oswl/repository/{ => ai}/AiSettingRepository.java (90%) rename src/main/java/com/salkcoding/oswl/repository/{ => ai}/AiUsageEventRepository.java (86%) rename src/main/java/com/salkcoding/oswl/repository/{ => apikey}/ApiKeyRepository.java (85%) create mode 100644 src/main/java/com/salkcoding/oswl/repository/config/CacheInvalidationRepository.java rename src/main/java/com/salkcoding/oswl/repository/{ => jira}/JiraSettingRepository.java (73%) rename src/main/java/com/salkcoding/oswl/repository/{ => license}/LicensePolicyRepository.java (67%) create mode 100644 src/main/java/com/salkcoding/oswl/repository/notification/WebPushDeliveryRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/notification/WebPushSubscriptionRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/notification/WebhookDeliveryRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/notification/WebhookSettingRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/org/OrganizationRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/org/TeamMemberRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/org/TeamRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/policy/PolicyExceptionRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/policy/PolicyRepository.java rename src/main/java/com/salkcoding/oswl/repository/{ => project}/ProjectMemberRepository.java (92%) create mode 100644 src/main/java/com/salkcoding/oswl/repository/project/ProjectRepository.java rename src/main/java/com/salkcoding/oswl/repository/{ => project}/ProjectVersionRepository.java (85%) create mode 100644 src/main/java/com/salkcoding/oswl/repository/reporting/ReportBrandingSettingsRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/CustomRuleConfigurationRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/DependencyPathRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/ImportCoordinatorRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/ImportJobRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/ScanComponentRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/ScanFindingRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/scan/ScanResultRepository.java rename src/main/java/com/salkcoding/oswl/repository/{ => snapshot}/SnapshotEntryRepository.java (85%) rename src/main/java/com/salkcoding/oswl/repository/{ => snapshot}/SnapshotMetaRepository.java (57%) rename src/main/java/com/salkcoding/oswl/repository/{ => vulnerability}/CveAlertRepository.java (69%) create mode 100644 src/main/java/com/salkcoding/oswl/repository/vulnerability/CveRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/vulnerability/LibraryCatalogRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/vulnerability/LibraryRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/repository/vulnerability/SavedViewRepository.java create mode 100644 src/main/java/com/salkcoding/oswl/scheduler/CacheInvalidationPoller.java create mode 100644 src/main/java/com/salkcoding/oswl/scheduler/ImportJobMaintenanceScheduler.java create mode 100644 src/main/java/com/salkcoding/oswl/scheduler/PolicyExceptionExpiryScheduler.java create mode 100644 src/main/java/com/salkcoding/oswl/scheduler/SchedulerLockConfig.java delete mode 100644 src/main/java/com/salkcoding/oswl/service/GatePolicyService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/MobileDashboardService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/SearchService.java delete mode 100644 src/main/java/com/salkcoding/oswl/service/SecurityCenterService.java rename src/main/java/com/salkcoding/oswl/service/{ => apikey}/ApiKeyService.java (58%) rename src/main/java/com/salkcoding/oswl/service/{ => apikey}/ApiKeyTokenSupport.java (94%) rename src/main/java/com/salkcoding/oswl/service/{ => apikey}/IssuedApiKey.java (60%) rename src/main/java/com/salkcoding/oswl/service/{ => apikey}/ProjectCliKeyPolicyService.java (93%) create mode 100644 src/main/java/com/salkcoding/oswl/service/config/CacheInvalidationService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/config/ConfigTransferService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/container/BaseImageEcosystemMapper.java create mode 100644 src/main/java/com/salkcoding/oswl/service/container/DockerfileParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Calculator.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Vector.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Calculator.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Vector.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/CvssVectorVersion.java create mode 100644 src/main/java/com/salkcoding/oswl/service/cvss/EnvironmentalRequirementMapper.java create mode 100644 src/main/java/com/salkcoding/oswl/service/diagnostics/DiagnosticsService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/gate/GatePolicyService.java rename src/main/java/com/salkcoding/oswl/service/{ => gate}/PrGateService.java (81%) create mode 100644 src/main/java/com/salkcoding/oswl/service/iacscan/IacRule.java create mode 100644 src/main/java/com/salkcoding/oswl/service/iacscan/IacScanner.java create mode 100644 src/main/java/com/salkcoding/oswl/service/iacscan/IacTargetKind.java rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/CloneCleanupService.java (99%) create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/CondaPypiMappingService.java rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/DependencyManifestParserService.java (51%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/DependencyManifestPatcher.java (97%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/EnrichmentProgressContext.java (92%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/EnrichmentProgressHolder.java (86%) create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/ImportJobStore.java rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/ManifestArchiveService.java (99%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/ManifestPatchInfo.java (89%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/MavenBomVersionResolver.java (89%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/QuickImportService.java (84%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/SbomImportService.java (93%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/ScanApiCredentialThrottleService.java (99%) rename src/main/java/com/salkcoding/oswl/service/{ => ingest}/ScanIngestService.java (66%) create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/CargoManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/CocoaPodsLockParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/ComposerLockParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/ConanLockParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/CondaLockParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/GoManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestDiscovery.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestIndex.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/MavenPomParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/NativeManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/NpmManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/NugetManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/PythonManifestParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/RubyLockParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/UploadedLockFileParser.java create mode 100644 src/main/java/com/salkcoding/oswl/service/ingest/parser/VersionCatalogParser.java rename src/main/java/com/salkcoding/oswl/service/{ => jira}/JiraService.java (94%) rename src/main/java/com/salkcoding/oswl/service/{ => license}/LicensePolicyService.java (84%) rename src/main/java/com/salkcoding/oswl/service/{ => license}/LicenseService.java (98%) create mode 100644 src/main/java/com/salkcoding/oswl/service/metrics/OswlMetrics.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebPushService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebPushTransport.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebPushWorker.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebhookClient.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebhookMessageBuilder.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebhookNotificationService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/notification/WebhookSettingService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/org/ExecutiveSummaryService.java rename src/main/java/com/salkcoding/oswl/service/{ => org}/OrgDashboardService.java (67%) create mode 100644 src/main/java/com/salkcoding/oswl/service/org/TeamBootstrapRunner.java create mode 100644 src/main/java/com/salkcoding/oswl/service/org/TeamService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/policy/PolicyService.java rename src/main/java/com/salkcoding/oswl/service/{ => project}/ProjectAccessService.java (69%) rename src/main/java/com/salkcoding/oswl/service/{ => project}/ProjectMemberBootstrapRunner.java (88%) rename src/main/java/com/salkcoding/oswl/service/{ => project}/ProjectService.java (77%) create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/CallGraphAnalyzer.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/LibraryPackageMapper.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/ReachabilityService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/SourceImportSyntax.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityStore.java create mode 100644 src/main/java/com/salkcoding/oswl/service/reachability/SourceReferenceAnalyzer.java rename src/main/java/com/salkcoding/oswl/service/{ => reporting}/ComplianceReportService.java (92%) create mode 100644 src/main/java/com/salkcoding/oswl/service/reporting/ReportBrandingService.java rename src/main/java/com/salkcoding/oswl/service/{ => reporting}/RiskTrendService.java (80%) rename src/main/java/com/salkcoding/oswl/service/{ => reporting}/SarifExportService.java (91%) rename src/main/java/com/salkcoding/oswl/service/{ => reporting}/SbomExportService.java (96%) rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ComponentDetailService.java (85%) create mode 100644 src/main/java/com/salkcoding/oswl/service/scan/ScanArchivingService.java rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ScanFailureMarker.java (70%) rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ScanHistoryService.java (80%) rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ScanStatusEmitterRegistry.java (98%) create mode 100644 src/main/java/com/salkcoding/oswl/service/scan/ScanSummaryReader.java rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ScanTimingRecorder.java (98%) rename src/main/java/com/salkcoding/oswl/service/{ => scan}/ScanVersionDiffAnalyzer.java (74%) rename src/main/java/com/salkcoding/oswl/service/{ => scan}/VersionDiffService.java (95%) create mode 100644 src/main/java/com/salkcoding/oswl/service/scim/ScimProvisioningService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/CustomRuleScanner.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/CustomScanRuleService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/SecretIacScanService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/SecretRule.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/SecretScanner.java create mode 100644 src/main/java/com/salkcoding/oswl/service/secretscan/SourceFindingStore.java rename src/main/java/com/salkcoding/oswl/service/{ => snapshot}/AirgappedSnapshotService.java (65%) create mode 100644 src/main/java/com/salkcoding/oswl/service/snapshot/SnapshotBundleStager.java rename src/main/java/com/salkcoding/oswl/service/{ => vcs}/BitbucketService.java (99%) rename src/main/java/com/salkcoding/oswl/service/{ => vcs}/GitHubService.java (99%) rename src/main/java/com/salkcoding/oswl/service/{ => vcs}/GitLabService.java (99%) rename src/main/java/com/salkcoding/oswl/service/{ => vcs}/VcsAuthTokenService.java (96%) rename src/main/java/com/salkcoding/oswl/service/{ => vulnerability}/ContinuousMonitoringService.java (81%) create mode 100644 src/main/java/com/salkcoding/oswl/service/vulnerability/SavedViewService.java create mode 100644 src/main/java/com/salkcoding/oswl/service/vulnerability/SecurityCenterService.java rename src/main/java/com/salkcoding/oswl/service/{ => vulnerability}/SupplyChainHeuristicsService.java (98%) rename src/main/java/com/salkcoding/oswl/service/{ => vulnerability}/VulnerabilityEnrichmentService.java (70%) create mode 100644 src/main/java/com/salkcoding/oswl/service/vulnerability/sources/AdvisoryFetchResult.java create mode 100644 src/main/java/com/salkcoding/oswl/service/vulnerability/sources/GitHubAdvisorySource.java create mode 100644 src/main/java/com/salkcoding/oswl/service/vulnerability/sources/NvdAdvisorySource.java create mode 100644 src/main/java/com/salkcoding/oswl/util/LogoImageNormalizer.java create mode 100644 src/main/java/com/salkcoding/oswl/vdb/ApkVersionComparator.java create mode 100644 src/main/java/com/salkcoding/oswl/vdb/GitHubAdvisorySource.java create mode 100644 src/main/java/com/salkcoding/oswl/vdb/NvdSource.java create mode 100644 src/main/java/com/salkcoding/oswl/web/filter/RequestContextLoggingFilter.java create mode 100644 src/main/java/com/salkcoding/oswl/web/interceptor/ScimAuthInterceptor.java create mode 100644 src/main/resources/META-INF/licenses/conda-forge-bot-data-LICENSE.txt create mode 100644 src/main/resources/conda/grayskull-pypi-mapping.json create mode 100644 src/main/resources/cvss/cvss-v4-lookup.json create mode 100644 src/main/resources/db/ai_cache_hit_stats.sql create mode 100644 src/main/resources/db/audit_log_integrity_hash_chain.sql create mode 100644 src/main/resources/db/cache_invalidation.sql create mode 100644 src/main/resources/db/ccpp_coverage.sql create mode 100644 src/main/resources/db/cve_sources.sql create mode 100644 src/main/resources/db/database_mutation_locks.sql create mode 100644 src/main/resources/db/durable_import_jobs.sql create mode 100644 src/main/resources/db/hot_path_indexes.sql create mode 100644 src/main/resources/db/migration/V10__spring_session_and_shedlock.sql create mode 100644 src/main/resources/db/migration/V11__org_team_hierarchy.sql create mode 100644 src/main/resources/db/migration/V12__hot_path_indexes.sql create mode 100644 src/main/resources/db/migration/V13__saml_scim.sql create mode 100644 src/main/resources/db/migration/V14__webhook_settings.sql create mode 100644 src/main/resources/db/migration/V15__cve_sources.sql create mode 100644 src/main/resources/db/migration/V16__ccpp_coverage.sql create mode 100644 src/main/resources/db/migration/V17__policy_as_code.sql create mode 100644 src/main/resources/db/migration/V18__reachability.sql create mode 100644 src/main/resources/db/migration/V19__audit_log_integrity_hash_chain.sql create mode 100644 src/main/resources/db/migration/V20__user_theme.sql create mode 100644 src/main/resources/db/migration/V21__secret_iac_scan_findings.sql create mode 100644 src/main/resources/db/migration/V22__scan_archiving.sql create mode 100644 src/main/resources/db/migration/V23__onboarding_progress.sql create mode 100644 src/main/resources/db/migration/V24__saved_views.sql create mode 100644 src/main/resources/db/migration/V25__report_branding_settings.sql create mode 100644 src/main/resources/db/migration/V26__ai_cache_hit_stats.sql create mode 100644 src/main/resources/db/migration/V27__cache_invalidation.sql create mode 100644 src/main/resources/db/migration/V28__policy_gate_reachability_secrets.sql create mode 100644 src/main/resources/db/migration/V29__reachability_evidence.sql create mode 100644 src/main/resources/db/migration/V30__source_analysis_metadata.sql create mode 100644 src/main/resources/db/migration/V31__durable_import_jobs.sql create mode 100644 src/main/resources/db/migration/V32__vulnerability_lookup_outcomes.sql create mode 100644 src/main/resources/db/migration/V33__custom_scan_rules.sql create mode 100644 src/main/resources/db/migration/V34__web_push_notifications.sql create mode 100644 src/main/resources/db/migration/V35__database_mutation_locks.sql create mode 100644 src/main/resources/db/onboarding_progress.sql create mode 100644 src/main/resources/db/org_team_hierarchy.sql create mode 100644 src/main/resources/db/policy_as_code.sql create mode 100644 src/main/resources/db/policy_gate_reachability_secrets.sql create mode 100644 src/main/resources/db/reachability.sql create mode 100644 src/main/resources/db/report_branding_settings.sql create mode 100644 src/main/resources/db/saml_scim.sql create mode 100644 src/main/resources/db/saved_views.sql create mode 100644 src/main/resources/db/scan_archiving.sql create mode 100644 src/main/resources/db/secret_iac_scan_findings.sql create mode 100644 src/main/resources/db/source_analysis_metadata.sql create mode 100644 src/main/resources/db/spring_session_and_shedlock.sql create mode 100644 src/main/resources/db/user_theme.sql create mode 100644 src/main/resources/db/webhook_settings.sql create mode 100644 src/main/resources/logback-spring.xml create mode 100644 src/main/resources/secretscan/secret-rules.json create mode 100644 src/main/resources/static/js/a11y.js create mode 100644 src/main/resources/static/js/onboarding-team.js create mode 100644 src/main/resources/static/js/oswl-http.js create mode 100644 src/main/resources/static/js/oswl-theme.js create mode 100644 src/main/resources/static/js/security-center/page.js create mode 100644 src/main/resources/static/js/security-center/slideout.js create mode 100644 src/main/resources/static/js/settings/admin.js create mode 100644 src/main/resources/static/js/settings/ai.js create mode 100644 src/main/resources/static/js/settings/cache.js create mode 100644 src/main/resources/static/js/settings/cli.js create mode 100644 src/main/resources/static/js/settings/config-transfer.js create mode 100644 src/main/resources/static/js/settings/diagnostics.js create mode 100644 src/main/resources/static/js/settings/license-policy.js create mode 100644 src/main/resources/static/js/settings/policy.js create mode 100644 src/main/resources/static/js/settings/reports.js create mode 100644 src/main/resources/static/js/settings/security.js create mode 100644 src/main/resources/static/js/settings/settings-dirty.js create mode 100644 src/main/resources/static/js/settings/settings-subtabs.js create mode 100644 src/main/resources/static/js/settings/vcs.js create mode 100644 src/main/resources/static/js/settings/webhooks.js create mode 100644 src/main/resources/static/js/web-push-preferences.js create mode 100644 src/main/resources/static/oswl-push-sw.js create mode 100644 src/main/resources/templates/auth/onboarding.html create mode 100644 src/main/resources/templates/fragments/settings-subtabs.html create mode 100644 src/main/resources/templates/mobile/index.html create mode 100644 src/main/resources/templates/notification/preferences.html create mode 100644 src/main/resources/templates/org-dashboard/summary.html create mode 100644 src/main/resources/templates/security-center/fragments/findings.html create mode 100644 src/main/resources/templates/settings/tabs/config-transfer.html create mode 100644 src/main/resources/templates/settings/tabs/diagnostics.html create mode 100644 src/main/resources/templates/settings/tabs/policy.html create mode 100644 src/main/resources/templates/settings/tabs/reports.html create mode 100644 src/main/resources/templates/settings/tabs/webhooks.html create mode 100644 src/test/java/com/salkcoding/oswl/client/NvdLookupOutcomeTest.java create mode 100644 src/test/java/com/salkcoding/oswl/client/OsvLookupOutcomeTest.java create mode 100644 src/test/java/com/salkcoding/oswl/controller/AdminProjectControllerTest.java rename src/test/java/com/salkcoding/oswl/controller/{ => vcs}/GitHubApiControllerTest.java (98%) create mode 100644 src/test/java/com/salkcoding/oswl/scheduler/CacheInvalidationPollerTest.java create mode 100644 src/test/java/com/salkcoding/oswl/scheduler/ImportJobMaintenanceSchedulerTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/DependencyManifestParserEcosystemMappingTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/SearchServiceTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/ai/AiUsageStatsServiceTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/ai/EmbeddedAiDownloadTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/ai/EmbeddedAiFreshInstallVerificationTest.java rename src/test/java/com/salkcoding/oswl/service/{ => apikey}/ApiKeyServiceTest.java (82%) rename src/test/java/com/salkcoding/oswl/service/{ => apikey}/ProjectCliKeyPolicyServiceTest.java (88%) create mode 100644 src/test/java/com/salkcoding/oswl/service/config/ConfigTransferServiceTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/gate/GateCoverageTest.java rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/DependencyManifestPatcherTest.java (97%) rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/EnrichmentProgressHolderTest.java (94%) create mode 100644 src/test/java/com/salkcoding/oswl/service/ingest/ImportJobStoreTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/ingest/LibraryCatalogConcurrencyTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/ingest/ManifestParserBoundaryTest.java rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/MavenBomVersionResolverTest.java (78%) rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/QuickImportServiceParserTest.java (97%) rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/QuickImportServiceTest.java (94%) rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/ScanApiCredentialThrottleServiceTest.java (94%) rename src/test/java/com/salkcoding/oswl/service/{ => ingest}/ScanIngestServiceTest.java (66%) rename src/test/java/com/salkcoding/oswl/service/{ => license}/LicensePolicyServiceTest.java (96%) rename src/test/java/com/salkcoding/oswl/service/{ => license}/LicenseServiceTest.java (97%) create mode 100644 src/test/java/com/salkcoding/oswl/service/metrics/OswlMetricsTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/notification/WebPushMigrationTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/notification/WebPushServiceTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/notification/WebPushTransportTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/org/OrgDashboardServiceQueryCountTest.java rename src/test/java/com/salkcoding/oswl/service/{ => project}/ProjectAccessServiceTest.java (89%) create mode 100644 src/test/java/com/salkcoding/oswl/service/project/ProjectServiceQueryCountTest.java rename src/test/java/com/salkcoding/oswl/service/{ => project}/ProjectServiceTest.java (83%) create mode 100644 src/test/java/com/salkcoding/oswl/service/reachability/SourceReferenceAnalyzerTest.java rename src/test/java/com/salkcoding/oswl/service/{ => reporting}/RiskTrendServiceTest.java (84%) rename src/test/java/com/salkcoding/oswl/service/{ => scan}/ComponentDetailServiceTest.java (98%) create mode 100644 src/test/java/com/salkcoding/oswl/service/scan/ScanArchivingServiceTest.java rename src/test/java/com/salkcoding/oswl/service/{ => scan}/ScanHistoryServiceTest.java (90%) rename src/test/java/com/salkcoding/oswl/service/{ => scan}/ScanStatusEmitterRegistryTest.java (96%) create mode 100644 src/test/java/com/salkcoding/oswl/service/scan/ScanSummaryReaderTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/scan/ScanVersionDiffProjectionTest.java rename src/test/java/com/salkcoding/oswl/service/{ => scan}/VersionDiffServiceTest.java (93%) create mode 100644 src/test/java/com/salkcoding/oswl/service/secretscan/CustomRulePublicationTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/secretscan/CustomScanRuleTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/snapshot/CocoaPodsSnapshotTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/snapshot/SnapshotImportTransactionTest.java create mode 100644 src/test/java/com/salkcoding/oswl/service/snapshot/SnapshotStagingBoundaryTest.java rename src/test/java/com/salkcoding/oswl/service/{ => vcs}/BitbucketServiceTest.java (96%) rename src/test/java/com/salkcoding/oswl/service/{ => vcs}/GitHubServiceTest.java (95%) rename src/test/java/com/salkcoding/oswl/service/{ => vcs}/GitLabServiceTest.java (94%) create mode 100644 src/test/java/com/salkcoding/oswl/service/vulnerability/ContinuousMonitoringServiceTest.java rename src/test/java/com/salkcoding/oswl/service/{ => vulnerability}/SecurityCenterServiceTest.java (92%) rename src/test/java/com/salkcoding/oswl/service/{ => vulnerability}/VulnerabilityEnrichmentServiceTest.java (90%) create mode 100644 src/test/java/com/salkcoding/oswl/support/ExternalVerificationFixture.java create mode 100644 src/test/java/com/salkcoding/oswl/support/ExternalVerificationFixtureTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/AuthExpiryUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/AxeAuditUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/DetectionCoverageUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/EmbeddedAiFailureUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/JdbcBudgetProbe.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/KeyboardFlowUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/LocalSmartHttpGitServer.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/OnboardingFailureUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/OrganizationWorkflowUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/PerformanceBudgetUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/QuickImportLoadUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/QuickImportQueueCapUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/QuickImportRealPipelineLoadUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/QuickImportSourceReachabilityUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/RequestLifecycleUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/ScaleMeasurementUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/SettingsFailureUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/SettingsModulesUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/SmokeUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/UiStateMatrixUiTest.java create mode 100644 src/uiTest/java/com/salkcoding/oswl/uitest/UiTestBase.java create mode 100644 src/uiTest/resources/application-uitest.yaml diff --git a/.claude/launch.json b/.claude/launch.json deleted file mode 100644 index e72e8eff..00000000 --- a/.claude/launch.json +++ /dev/null @@ -1,11 +0,0 @@ -{ - "version": "0.0.1", - "configurations": [ - { - "name": "oswl", - "runtimeExecutable": "cmd", - "runtimeArgs": ["/c", "E:\\Programming\\Visual Studio Code\\Oswl\\gradlew.bat", "bootRun"], - "port": 8080 - } - ] -} diff --git a/.claude/settings.json b/.claude/settings.json deleted file mode 100644 index c161cd84..00000000 --- a/.claude/settings.json +++ /dev/null @@ -1,7 +0,0 @@ -{ - "includeCoAuthoredBy": false, - "enabledPlugins": { - "frontend-design@claude-plugins-official": true, - "claude-md-management@claude-plugins-official": true - } -} diff --git a/.codex/config.toml b/.codex/config.toml new file mode 100644 index 00000000..0e5c6736 --- /dev/null +++ b/.codex/config.toml @@ -0,0 +1,2 @@ +[mcp_servers.figma] +url = "http://127.0.0.1:3845/mcp" diff --git a/.cursorrules b/.cursorrules deleted file mode 100644 index 12ffa548..00000000 --- a/.cursorrules +++ /dev/null @@ -1,92 +0,0 @@ -# OsWL — Project Guidelines - -OsWL is an in-house SCA (Software Composition Analysis) platform for tracking and managing CVE security vulnerabilities and license risks in OSS components. - ---- - -## Test Account -- Email: test@test.com | Password: 1q2w3e4r | Name: test -- OTP: `000000` (bypass in dev) | Test issuance OTP: `123456` - ---- - -## Tech Stack -- **Backend:** Spring Boot 4.0.5 (Java 25) — WebMVC, Data JPA, Security, Mail, Validation, AspectJ -- **View:** Thymeleaf + thymeleaf-extras-springsecurity6 -- **Frontend:** Vanilla HTML/CSS/JS · Tailwind CSS 3.4 (precompiled standalone CLI, **NO CDN**) · Chart.js · HTMX · Alpine.js -- **DB:** PostgreSQL (prod) / H2 file-mode (local profile, PostgreSQL-compatible) -- **Auth:** Spring Security + Email OTP (2FA) + Trusted Device + Single-Session Enforcement -- **API Docs:** springdoc-openapi — OpenAPI annotations live in `controller/spec/*Spec.java` interfaces only -- **Local SMTP:** GreenMail embedded (port 3025) — OTP code printed as `*** OTP CODE: NNNNNN ***` in server logs -- **Build:** Gradle Wrapper (`./gradlew`) - ---- - -## Project Structure (Key Packages) - - src/main/java/com/salkcoding/oswl/ - ├── aop/ # Cross-cutting concerns (audit logging) - ├── auth/ # Auth module — config, controller, dto, entity, enums, repo, security, service, web - ├── client/ # External API clients (OSV, deps.dev, GitHub…) - ├── controller/ # Business controllers - │ └── spec/ # Controller spec interfaces (all springdoc annotations here) - ├── domain/entity/ # JPA entities - ├── domain/enums/ - ├── dto/ exception/ repository/ scheduler/ service/ web/ - resources/ - ├── application.yaml / application-local.yaml / application-prod.yaml - ├── static/{css,js,img,icon,graphic,scripts}/ - └── templates/{auth, projects, security-center, component-detail, license, - risk-trend, scan-history, settings, error, fragments}/ - ---- - -## Architecture & Code Style - -**Backend** -- **Layered:** Controller → Service → Repository. Keep controllers thin. -- **Controller Spec:** All OpenAPI annotations go in `controller/spec/*ControllerSpec.java` interfaces. Implementations contain business logic only. -- **DI:** Lombok `@RequiredArgsConstructor` constructor injection only. `@Autowired` is forbidden. -- **Authorization:** Method-level `@PreAuthorize("hasPermission(null, 'PROJECT_VIEW') or hasRole('SYSTEM_ADMIN')")`. -- **Audit Logging:** Use `AuditLogService.log…()` for user actions and system events. -- **Profile Gating:** Local-only beans use `@Profile("local")` (e.g. `TestDataController`, `LocalSmtpConfig`). -- **JPA Cascade:** Project → ProjectVersion / ScanResult / ScanComponent / DependencyPath; Library → Cve (cascade ALL). - -**Frontend** -- **Vanilla first.** Add HTMX (partial updates) or Alpine.js (local state) only when needed. -- **Tailwind CSS:** `/css/tailwind.css` (Gradle build output) only — CDN is forbidden. -- **HTMX pattern:** Return fragment-only response when `HX-Request: true` header is present. -- **Assets:** JS in `static/js/`, organized by page subdirectory. - ---- - -## DB & Environments -- **Local DB:** H2 file (`./oswl-db.mv.db`). Console: `http://localhost:8080/h2-console` (JDBC `jdbc:h2:file:./oswl-db`, user `sa`). -- **DB Reset:** Stop server → delete `oswl-db.*` files → restart → lands on Setup screen. -- **Test Data Seed:** `GET /data/test` (auth required, local only) — wipes and re-seeds all data. -- **Encryption Key (`OSWL_ENCRYPTION_KEY`):** Dummy key hardcoded for local; production requires 32-byte key via `openssl rand -base64 32`. - ---- - -## Build & Run - - ./gradlew bootRun # Local run (profile=local, port 8080) - ./gradlew build # Full build (includes Tailwind) - ./gradlew test # JUnit tests - ./gradlew buildTailwindCss # Tailwind rebuild only - ---- - -## Conventions -- **DB naming:** snake_case tables/columns; entity PK is `Long id`. -- **DTOs:** `record` or Lombok `@Value` in `dto/` package. -- **Dependencies:** Add to `build.gradle` (backend) or use CDN/webjars (frontend). -- **Error pages:** `error/{401,403,404,500,503}.html` — use `_owl-error.html` fragment (shared owl illustration). -- **Log tone:** Business events → INFO/WARN/ERROR; details → `log.debug`. - -## Test Code Policy - -- Do NOT modify, create, or delete any test files (e.g., *Test.java, *.test.ts, *.spec.ts) unless I explicitly ask you to. -- When fixing bugs or refactoring production code, leave all existing test files exactly as they are. -- If a test needs to be updated as a direct result of your change, ask me first before touching it. -- Never auto-generate test stubs or test scaffolding without being explicitly instructed to do so. \ No newline at end of file diff --git a/.dockerignore b/.dockerignore index e7b64ee6..a653daa3 100644 --- a/.dockerignore +++ b/.dockerignore @@ -10,3 +10,19 @@ tmp .mvn .vscode .DS_Store +.env +.env.* +**/.env +**/.env.* +*.db +**/*.db +.venv +**/__pycache__ +bin +embedded-ai +.agents +.codex +.mcp.json +docs +landing +ROADMAP*.md diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md deleted file mode 100644 index cef5450d..00000000 --- a/.github/copilot-instructions.md +++ /dev/null @@ -1,144 +0,0 @@ -# OsWL — Project Guidelines - -OsWL는 OSS 컴포넌트의 보안 취약점(CVE)과 라이선스 리스크를 추적·관리하는 사내 SCA(Software Composition Analysis) 플랫폼입니다. - -# Test account rule -테스트 계정은 무조건 -이메일: test@test.com -비밀번호: 1q2w3e4r -로 진행하며 이름은 test로 통일한다. -OTP는 개발용이라 000000으로 통과 가능하며, 테스트용으로 발급할 때는 123456을 사용한다. - -## Tech Stack - -- **Backend:** Spring Boot 4.0.5 (Java 25) — WebMVC, Data JPA, Security, Mail, Validation, AspectJ -- **View:** Thymeleaf + `thymeleaf-extras-springsecurity6` -- **Frontend:** Vanilla HTML/CSS/JS, Tailwind CSS 3.4 (precompiled standalone CLI), Chart.js, HTMX·Alpine.js (필요 시) -- **DB:** PostgreSQL (prod) / H2 file-mode (`local` profile, PostgreSQL 호환) -- **Auth:** Spring Security + Email OTP(2FA) + Trusted Device + Single-Session Enforcement -- **API Docs:** `springdoc-openapi` (Controller 스펙은 `controller/spec/*Spec.java` 인터페이스로 분리) -- **Local SMTP:** GreenMail 임베디드 (포트 3025, OTP 코드는 서버 로그에 `*** OTP CODE: NNNNNN ***` 로 출력) -- **Build:** Gradle Wrapper (`./gradlew`) - -## Project Structure - -```text -OsWL/ -├── src/main/ -│ ├── java/com/salkcoding/oswl/ -│ │ ├── OswlApplication.java -│ │ ├── aop/ # 공통 관점 (감사 로깅 등) -│ │ ├── auth/ # 인증·인가 모듈 (자체 패키지로 분리) -│ │ │ ├── config/ # SecurityConfig, LocalSmtpConfig 등 -│ │ │ ├── controller/ # /login, /setup, /api/admin/*, /api/settings/{security,vcs,cache} -│ │ │ ├── dto/ entity/ enums/ repository/ security/ service/ web/ -│ │ ├── client/ # 외부 API 클라이언트 (OSV, deps.dev, GitHub …) -│ │ ├── controller/ # 비즈니스 컨트롤러 (Project, SecurityCenter, License, RiskTrend …) -│ │ │ └── spec/ # 컨트롤러 스펙 인터페이스 (springdoc 어노테이션 집중) -│ │ ├── domain/entity/ # JPA 엔티티 (Project, ScanResult, Library, Cve …) -│ │ ├── domain/enums/ # ImportSource, LicenseStatus, Severity … -│ │ ├── dto/ exception/ repository/ scheduler/ service/ web/ -│ └── resources/ -│ ├── application.yaml # 공통 + profile 스위치 -│ ├── application-local.yaml # H2 file (./oswl-db), devtools, 자세한 로깅 -│ ├── application-prod.yaml # PostgreSQL -│ ├── static/{css,js,img,icon,graphic,scripts}/ -│ └── templates/ -│ ├── auth/{login,otp-verify,setup}.html -│ ├── projects/{index,quick-import,cli-integration,git-integration}.html -│ ├── security-center/{index,fragments/} -│ ├── component-detail/{index,fragments/} -│ ├── license/ risk-trend/ scan-history/ version-diff/ glossary/ -│ ├── settings/{index, tabs/{admin,security,ai,vcs,cli,cache}.html} -│ ├── error/{401,403,404,500,503,_owl-error}.html -│ └── fragments/{head,topbar,risk-graph,tags}.html -├── tailwind/{input.css, tailwind.config.js} # Tailwind 빌드 입력 -├── build.gradle / settings.gradle / gradlew -└── README.md -``` - -## 핵심 도메인 (참고용) - -- **Repository / Project / ProjectVersion** — 리포지토리(연결된 VCS) 단위로 `Project`를 생성하고, 브랜치/버전별로 `ProjectVersion`을 관리합니다. -- **Scan / ScanResult / ScanComponent / DependencyPath / DependencyGraph** — 각 스캔(수집·분석) 결과와 컴포넌트·의존성 경로, 그래프를 나타냅니다. -- **SBOM / BillOfMaterials** — 스캔 결과나 외부 연동으로부터 생성되는 SBOM(Software Bill Of Materials)을 저장·조회합니다 -- **Library / Artifact** — 공유 라이브러리(예: `group:artifact@version`)와 메타데이터를 중심으로 관리합니다. -- **Vulnerability (CVE/OSV/OSV-like)** — 취약점 엔티티(심각도, 설명, 출처, 패치 정보) 및 연관 라이브러리 매핑. -- **License / LicensePolicy / PolicyViolation** — 라이선스 정보와 정책, 정책 위반 기록 및 정책 기반 알림/차단 로직. -- **Finding / Evidence / Enrichment** — 스캔·분석에서 도출된 소결과(발견사항), 증거자료, 외부 데이터 보강(Enrichment). -- **AiSetting / ApiKey / CacheSetting / Webhook** — AI 설정, 프로젝트 CLI 키, 라이브러리 보강 캐시(`cache_settings`), 웹훅 등록·관리. -- **Auth entities:** User / Role / RoleTemplate / AuditLog / SecuritySetting / VcsConnection / TrustedDevice / OtpChallenge - -설계 원칙: 도메인은 공유 가능한 `Library` 중심, 스캔 결과는 불변(이력)으로 저장, 정책·알림은 별도 엔티티로 분리하여 재사용성을 높입니다. - -## 주요 URL 맵 (요약) - -아래는 주요 엔드포인트의 요약(REST/HTTP 기반). 세부 스펙은 `controller/spec/*Spec.java` 인터페이스에 명세합니다. - -- **Auth / Account**: `GET/POST /login`, `GET/POST /login/otp-verify`, `POST /login/otp-resend`, `GET/POST /setup`, `POST /api/auth` (토큰/CLI 인증) -- **Projects / Repositories**: `GET /projects`, `GET /projects/list`, `POST /projects` (수동 생성), `GET/PUT/DELETE /projects/{id}`, `POST /projects/{id}/restore`, `DELETE /projects/{id}/permanent`, `DELETE /projects/trash/all|selected`, `POST /projects/trash/restore-selected` -- **Project Versions / Branches**: `GET /projects/{id}/versions`, `POST /projects/{id}/versions`, `GET /projects/{projectId}/versions/{versionId}` -- **Quick Import / VCS Connections**: `GET /projects/quick-import`, `GET /api/quick-import/connections`, `POST /api/quick-import/start`, `GET /api/quick-import/job/{jobId}`, `POST /api/import/webhook` (VCS push hook) -- **VCS Providers (GitHub/GitLab/Bitbucket)**: `POST/DELETE /api/github/connect|disconnect|accounts/{login}`, `GET /api/github/{status,accounts,repos,branches,branch-updated-at}`, 유사한 경로로 GitLab/Bitbucket 지원 -- **Scans / Scan Jobs**: `POST /api/scan` (새 스캔 시작), `GET /api/scan/{scanId}/status`, `GET /api/scan/{scanId}/result`, `GET /projects/{id}/scan-history`, `DELETE /projects/{id}/scan-history/{scanId}`, `POST /api/scan/schedule` (예약 스캔), `GET /api/scan/jobs` -- **Security Center / Findings**: `GET /projects/{id}/security-center`, `PATCH /projects/{id}/security-center/bulk-status`, `GET /projects/{id}/findings`, `PATCH /projects/{id}/findings/{findingId}` -- **Component Detail / SBOM / Dependency Graph**: `GET /projects/{id}/components/{compId}` (HX-Request fragment), `GET /projects/{id}/sbom/{sbomId}`, `GET /projects/{id}/dependency-graph` -- **License / Policy**: `GET /projects/{id}/license`, `GET/PUT /api/policies/license`, `POST /api/policies/evaluate`, `GET /api/policies/violations` -- **Risk Trend / Analytics**: `GET /projects/{id}/risk-trend` (최대 `oswl.risk-trend.limit` 스캔), `GET /api/analytics/risk`, `GET /api/metrics` (애플리케이션 지표) -- **Version Diff / History**: `GET /projects/{id}/version-diff`, `GET /projects/{id}/history` -- **Glossary / Docs**: `GET /glossary`, `GET /docs/**` -- **Settings / Admin**: `GET /settings` (탭: admin/security/ai/vcs/cli/cache), `GET/PUT /api/settings/security`, `POST /api/settings/security/mail/test`, `GET/PUT /api/settings/ai`, `PUT /api/settings/ai/deactivate`, `PUT /api/settings/ai/activate/{provider}`, `GET/POST /api/settings/vcs`, `DELETE /api/settings/vcs/{id}`, `GET/PUT /api/settings/cache`, `POST /api/settings/cache/clear` -- **Admin Users / Role Templates / Audit**: `GET/POST /api/admin/users`, `PUT /api/admin/users/{id}/{roles|display-name|activate|deactivate}`, `DELETE /api/admin/users/{id}`, `GET/POST /api/admin/role-templates`, `GET /api/admin/role-templates/permissions`, `PUT/DELETE /api/admin/role-templates/{id}`, `GET /api/admin/audit-logs`, `GET /api/admin/audit-logs/export.csv` -- **AI / Enrichment / External Data**: `POST /api/ai/assist`, `GET/PUT /api/settings/ai`, `POST /api/external/enrich/{libraryId}` -- **Webhooks & Integrations**: `POST/GET/DELETE /api/webhooks`, `POST /api/webhooks/test`, `POST /api/external/push` (integration callbacks) -- **CLI Keys / API Keys**: `GET/POST /api/projects/{id}/api-keys`, `DELETE /api/projects/{id}/api-keys/{keyId}`, `GET/POST /api/admin/cli-keys`, `PATCH /api/admin/cli-keys/{keyId}/toggle` -- **CLI Public API / Scan API**: `POST /api/auth` (CLI token), `GET /api/scan/ping`, `POST /api/scan`, `GET /api/scan/{scanId}/status`, `GET /api/scan/{scanId}/result` -- **SBOM / Exports**: `GET /api/projects/{id}/exports/sbom`, `GET /api/projects/{id}/exports/findings.csv`, `POST /api/projects/{id}/exports/start` -- **Health / Observability**: `GET /actuator/health`, `GET /actuator/metrics`, `GET /actuator/prometheus` (optional) -- **Test Data (local only)**: `GET /data/test`, `GET /data/test-api-key` (local-profile only) - -참고: 컨트롤러 스펙은 `controller/spec/*Spec.java`에 집중시킵니다. - -## Code Style & Architecture - -**Backend** -- **Layered:** `Controller` → `Service` → `Repository`. Controller는 가능한 얇게. -- **Controller Spec 분리:** OpenAPI 어노테이션은 `controller/spec/*ControllerSpec.java` 인터페이스에 모은다. 구현체는 비즈니스 로직만 깔끔히. -- **DI:** Lombok `@RequiredArgsConstructor` 기반 생성자 주입. `@Autowired` 금지. -- **Authorization:** 메서드 레벨 `@PreAuthorize("hasPermission(null, 'PROJECT_VIEW') or hasRole('SYSTEM_ADMIN')")` 패턴. -- **Audit Logging:** 사용자 액션·시스템 이벤트는 `AuditLogService.log…()` 호출로 기록 (Setup, Security Setting 변경 등). -- **Profile gating:** 로컬 전용 빈은 `@Profile("local")` (예: `TestDataController`, `LocalSmtpConfig`). -- **JPA cascade:** Project → ProjectVersion/ScanResult/ScanComponent/DependencyPath, Library → Cve 가 cascade ALL. - -**Frontend** -- **Vanilla First.** 필요할 때만 HTMX(부분 갱신), Alpine.js(소규모 상태) 추가. 서버 사이드 렌더링은 Thymeleaf로. -- **Tailwind CSS:** **CDN 금지**. `/css/tailwind.css` (Gradle 빌드 산출물) 만 사용. 새 클래스를 쓰면 빌드 시 자동 포함. -- **HTMX 패턴:** `Component Detail`처럼 `HX-Request: true` 헤더 시 fragment만 반환하는 컨트롤러 분기 활용. -- **Chart.js / D3.js**: Risk Trend 등 시각화에 사용 가능. CDN 또는 webjar. -- **자산 위치:** JS는 `static/js/`, 페이지별로 하위 폴더 분리 (`projects/`, `risk-trend/`). - -## DB / 환경 - -- **로컬 DB:** H2 file (`./oswl-db.mv.db`). 콘솔: `http://localhost:8080/h2-console` (JDBC URL `jdbc:h2:file:./oswl-db`, user `sa`). `local`은 `ddl-auto: update`. -- **운영 DB:** PostgreSQL, `ddl-auto: validate`. 업그레이드 시 `src/main/resources/db/*.sql` 수동 실행 (`schema_cleanup.sql` 등). 문서: `docs/Database-Schema.md`. -- **DB 초기화:** 서버 정지 후 `oswl-db.*` 파일 삭제 → 재기동 시 빈 상태에서 시작 (Setup 화면으로 진입). -- **테스트 데이터 시드:** 로컬에서 `GET /data/test` 호출 (인증 필요). 모든 기존 데이터를 지우고 풍부한 케이스로 재시드. -- **암호화 키 (`OSWL_ENCRYPTION_KEY`):** 로컬은 더미 키가 박혀 있고, 운영은 `openssl rand -base64 32` 로 생성한 32바이트 키 필수. -- **OTP 메일:** 로컬 프로파일은 GreenMail이 자동 기동되어 모든 메일 가로챔. **OTP 코드는 서버 로그의 `*** OTP CODE: NNNNNN ***` 라인에서 확인** (실제 메일 발송 X). - -## Build & Run - -```powershell -./gradlew bootRun # 로컬 기동 (기본 profile=local, 포트 8080) -./gradlew build # 풀 빌드 (Tailwind 포함) -./gradlew test # JUnit Platform 테스트 -./gradlew buildTailwindCss # Tailwind만 재빌드 -``` - -## Conventions - -- **DB 명명:** snake_case 테이블/컬럼, 엔티티 PK는 `Long id`. -- **DTO:** `dto/` 패키지에 record 또는 Lombok `@Value` 형태 권장. -- **의존성 추가:** 빌드 시 자동 다운로드 가능한 라이브러리는 `build.gradle` 추가, 프론트는 CDN 또는 webjars 우선. -- **에러 페이지:** `error/{401,403,404,500,503}.html` — 공통 부엉이 일러스트 (`_owl-error.html` fragment) 사용. -- **로그 톤:** 비즈니스 INFO/WARN/ERROR · 디테일은 `log.debug` (예: `client`, `VulnerabilityEnrichmentService`). diff --git a/.github/prompts/qa.prompt.md b/.github/prompts/qa.prompt.md deleted file mode 100644 index c3656dba..00000000 --- a/.github/prompts/qa.prompt.md +++ /dev/null @@ -1,293 +0,0 @@ ---- -agent: agent -description: OsWL 풀 BVT(Build Verification Test) 자동 실행 — DB 초기화부터 모든 기능 체크까지 브라우저 자동화로 검증. ---- - -# OsWL Full BVT — QA Runner - -사용자가 **"QA 진행"**, **"BVT 돌려"**, **"풀 테스트"** 또는 `/qa` 슬래시 커맨드로 이 프롬프트를 호출하면, 아래 절차를 **그대로** 자동 수행한다. 사용자에게 추가 확인을 묻지 않고 바로 시작한다. - -> 호출되는 도구: `run_in_terminal`, `open_browser_page`, `navigate_page`, `click_element`, `type_in_page`, `screenshot_page`, `get_terminal_output`, `read_page`, `run_playwright_code`. 필요 시 `tool_search`로 미리 로드한다. - ---- - -## 0. 사전 준비 (Setup) - -1. **서버 상태 확인** - - `Invoke-WebRequest http://localhost:8080/login -UseBasicParsing -TimeoutSec 3` 으로 핑 → 200/302면 **이미 켜진 상태**. - - 켜져 있으면 → **기존 서버 종료 필요**. 사용자에게 1회 확인 후 종료 (`Stop-Process` 로 `bootRun` 프로세스 kill, 또는 `gradlew --stop`). -2. **DB 완전 초기화** (워크스페이스 루트에서) - ```powershell - if (Test-Path "oswl-db.mv.db") { Remove-Item "oswl-db.mv.db" -Force } - if (Test-Path "oswl-db.trace.db") { Remove-Item "oswl-db.trace.db" -Force } - if (Test-Path "oswl-db.lock.db") { Remove-Item "oswl-db.lock.db" -Force } - ``` -3. **서버 기동** (async 모드, 시작 로그 대기) - ```powershell - ./gradlew bootRun - ``` - `Started OswlApplication` 로그가 보일 때까지 `get_terminal_output`으로 폴링 (최대 3분). -4. **브라우저 오픈**: `http://localhost:8080` → 자동으로 `/setup`로 리다이렉트 되어야 함 (DB 비어 있으니 최초 어드민 설정 화면). - -### QA 자격 증명 (테스트 전용 — 매 QA마다 동일) - -| 항목 | 값 | -|------|---| -| Email | `qa@oswl.local` | -| Password | `Qa!Test1234` | -| Display Name | `QA Tester` | - -### OTP 코드 추출 방법 -- 로컬 SMTP는 GreenMail. 메일은 발송되지 않고 **서버 로그에 `*** OTP CODE: NNNNNN ***` 형식으로 출력**됨. -- `get_terminal_output`(서버 터미널 ID)에서 가장 최근 OTP 라인을 정규식 `\*\*\* OTP CODE: (\d{6})` 로 파싱한다. - -### 테스트 데이터 시드 -- 로그인 후 `GET http://localhost:8080/data/test` 호출 → 모든 데이터 리셋 후 풍부한 테스트 셋 생성. **반드시 P-01 진입 직전에 1회 실행**. -- CLI 토큰이 필요하면 `GET /data/test-api-key` 로 발급받은 `oswl_xxx` 토큰을 그대로 사용. - -### 시드 후 추가 QA 계정 (권한·프로젝트 ACL 검증용, 비밀번호 모두 `Qa!Test1234`) -| Email | 역할 템플릿 | 용도 | -|-------|-------------|------| -| `viewer@oswl.local` | Viewer | 읽기 전용, `frontend-dashboard`·`ml-pipeline` 멤버 | -| `developer@oswl.local` | Developer | `backend-api` ADMIN + B/E 멤버, SC 상태 변경·CLI 권한 | -| `noproject@oswl.local` | Viewer | 프로젝트 멤버십 없음 → 빈 프로젝트 목록 | -| `disabled@oswl.local` | Viewer | 비활성 계정 (SA-03) | -| `custom@oswl.local` | QA Custom | SC 상태 변경 불가, `ml-pipeline`만 멤버 | - ---- - -## 1. 실행 규칙 - -- **순차 실행**: 각 케이스를 표 순서대로 진행. 케이스 사이에 페이지 이동 후 DOM 안정 대기. -- **결과 기록**: 케이스마다 `PASS / FAIL / SKIP(사유)` 표시. FAIL시 스크린샷 1장 + 콘솔/네트워크 에러 짧게 캡처. -- **스킵 허용 케이스 (외부 의존):** - - **P-03 Quick Import 실제 임포트** — GitHub PAT 필요, **모달 UI까지만** 검증하고 PAT 입력 단계는 SKIP(REASON: PAT 미주입). - - **QI-01~11 실제 클론·스캔** — PAT·VCS 연결이 없으면 아래 표의 **첫 1~2개 소형 레포만** 시도하거나 전부 SKIP(REASON: PAT 미주입). - -### Quick Import QA 레포 (에코시스템별 1개 — **소형·얕은 클론용**) - -> **절대 사용 금지** (클론 실패·Windows 경로 길이·수십 분 소요): -> `dotnet/maui`, `rails/rails`, `kubernetes/kubernetes`, `dotnet/runtime`, `microsoft/vscode` 등 대형 모노레포. - -| 에코시스템 | 매니페스트 | 레포 URL | 비고 | -|---|---|---|---| -| Maven | `pom.xml` | https://github.com/spring-projects/spring-petclinic | ~23 컴포넌트 | -| Gradle | `gradlew` | https://github.com/Netflix/dgs-framework | Gradle + lock | -| npm v2 | `package-lock.json` | https://github.com/expressjs/express | lock v2 | -| npm v3 | `package-lock.json` | https://github.com/koajs/koa | lock v3 | -| Python | `poetry.lock` | https://github.com/Textualize/rich | | -| Python | `requirements.txt` | https://github.com/pallets/flask | | -| Python | `Pipfile.lock` | https://github.com/pypa/pipenv | | -| Cargo | `Cargo.lock` | https://github.com/BurntSushi/ripgrep | | -| Go | `go.sum` | https://github.com/gin-gonic/gin | | -| NuGet | `.csproj` | https://github.com/ardalis/CleanArchitecture | **MAUI 대신** — 소형 샘플 (~3MB) | -| Ruby | `Gemfile.lock` | https://github.com/sinatra/sinatra | **rails 대신** — 소형 | - -- 한 번에 **전부** 돌리지 말 것. PAT QA 시 **에코시스템당 1개** 또는 **Maven + npm 1개**만 스모크로 충분. -- NuGet 검증은 `ardalis/CleanArchitecture` 또는 `jasontaylordev/CleanArchitecture`만 사용. `dotnet/maui`는 테스트 불가. - - **SS-03 메일 테스트** — GreenMail로 송신 자체는 가능. 응답 200만 확인. - - **AI-06 Test Connection** — 실제 API 키 없으니 버튼 활성/비활성 토글만 확인, 호출은 SKIP. -- **DB 검증**이 필요한 케이스(예: A-07 단일 세션)는 새 incognito context를 열어 동일 계정으로 로그인 후, 첫 세션 페이지 새로고침 시 `/login?displaced=true` 로 튕기는지 확인. -- 테스트 종료 후 **최종 리포트**를 마크다운 표로 출력. 합계: `PASS X / FAIL Y / SKIP Z (총 N)`. - ---- - -## 2. BVT 체크리스트 (총 ~95) - -### 🔐 인증 (Auth) -| # | 케이스 | 절차 / 확인 | -|---|--------|-----| -| A-00 | Setup 화면 | DB 빈 상태에서 `/` → `/setup` 리다이렉트, 폼 표시 | -| A-01 | 최초 어드민 생성 | QA 자격증명으로 폼 제출 → `/login?setup` | -| A-02 | 로그인 폼 | `/login` GET — 이메일/비밀번호 입력 필드 | -| A-03 | 로그인 실패 | 잘못된 비번 → 에러 메시지, 폼 재표시 | -| A-04 | 로그인 성공 (1차) | 올바른 자격증명 → `/login/otp-verify` 리다이렉트 | -| A-05 | OTP 페이지 | 6자리 입력 폼, 마스킹된 이메일(`qa@…local`), 만료 카운트다운 표시 | -| A-06 | OTP 타이머 확인 | 타이머가 정상작동하는지 시작 시, 그리고 재전송 이후도 5분으로 초기화 되는지 확인 | -| A-07 | OTP 실패 | 잘못된 코드 → 에러 메시지, 재입력 가능 | -| A-08 | OTP 재발송 | "Resend" 클릭 → 200, 새 OTP 로그 출력 | -| A-09 | OTP 성공 | 서버 로그에서 코드 추출 → 입력 → `/projects` | -| A-10 | 단일 세션 | 새 브라우저 컨텍스트로 동일 계정 로그인 → 첫 세션이 `/login?displaced=true&from=…` 로 튕기는지, 앰버 알림 표시 | -| A-11 | 로그아웃 | 우상단 메뉴 → Logout → `/login?logout` | - -### 📁 Projects (시드 후 진행) -| # | 케이스 | 확인 | -|---|--------|------| -| P-00 | 테스트 데이터 시드 | `/data/test` 호출 → redirect, Active 5개 (`backend-api`, `frontend-dashboard`, `ml-pipeline`, `new-service`, `payment-gateway`), Trash 1개 (`legacy-monolith`) | -| P-01 | 목록 렌더링 | Active/Trash 탭 표시. 카드: 이름/마지막 스캔/Security Risk(C/H/M/L/U)/License Risk(R/C/P/U) | -| P-02 | CLI Integration 모달 | "CLI Integration" 버튼 → 모달 오픈, install/auth/ping/scan 명령 표시, `--username/--password/--project` 인자 표시 | -| P-03 | Quick Import 모달 (UI) | "Quick Import" → 슬라이드아웃 진입, VCS 연결·URL 입력·진행 카드 UI (실제 클론은 QI-* 또는 SKIP) | -| QI-01 | Quick Import 스모크 (선택) | PAT 있을 때 위 표에서 **spring-petclinic 1건만** 임포트 → `DONE` 또는 `FAILED`까지 (5분 이내) | -| P-04 | 프로젝트 액션 메뉴 | 카드 우측 ⋯ 버튼 → Rename / Move to Trash / Delete | -| P-05 | Move to Trash | 한 프로젝트 → Trash → Active에서 사라지고 Trash 탭에 등장 | -| P-06 | Restore | Trash 탭에서 Restore → 다시 Active | -| P-07 | Permanent Delete | Trash → Permanently Delete → DB에서 완전 제거 (목록에서 사라짐) | -| P-08 | Bulk Restore | Trash에 여러 개 두고 다중 선택 → restore-selected | -| P-09 | Bulk Permanent Delete | trash/selected 다중 영구삭제 | -| P-10 | Trash 비우기 | trash/all → 모든 휴지통 비움 | -| P-11 | JSON list 엔드포인트 | `GET /projects/list` (Accept: json) → 200, 배열 응답 | - -### 🛡️ Security Center -| # | 케이스 | 확인 | -|---|--------|------| -| SC-01 | 페이지 로드 | `/projects/{id}/security-center` — 상단 요약(C/H/M/L/U), 컴포넌트 테이블 | -| SC-02 | 버전 드롭다운 | Topbar 버전 버튼 → 드롭다운, 5개↑ 시 스크롤, 선택 시 해당 scan 전환 | -| SC-03 | 검색 | 컴포넌트명 부분 일치 검색 (필터 미적용 상태에서도 동작) | -| SC-04 | 리스크 필터 | C/H/M/L/U 체크박스 토글 → 행 수 변동 | -| SC-05 | Status 필터 | Reviewed / Not Reviewed / Ignored 체크박스 | -| SC-06 | 컴포넌트 클릭 | 행 클릭 → `/components/{compId}` 이동 | -| SC-07 | Bulk Actions | 다중 체크 → 버튼 활성 → Mark Reviewed / Unreviewed / Ignore / Unignore (PATCH bulk-status) | -| SC-08 | Export PDF/CSV | 드롭다운 → 두 옵션 표시 (다운로드 트리거) | -| SC-09 | Defer (Exception) | Defer 버튼 → 모달: 사유/만료일/검토자/PR 설명 | -| SC-10 | Review 토글 | 단일 행 체크박스 → Reviewed 토글 | -| SC-11 | Version Diff 링크 | 버전 드롭다운 하단 "Version Diff..." 링크 동작 | - -### 📦 Component Detail -| # | 케이스 | 확인 | -|---|--------|------| -| CD-01 | 페이지 로드 | 라이브러리명/버전/생태계 표시 | -| CD-02 | CVE 목록 | CVE ID, 심각도, CVSS, 설명, 패치 버전 | -| CD-03 | 라이선스 정보 | 라이선스명/리스크/의무사항 | -| CD-04 | AI 요약 영역 | AI 미설정 시 "Configure AI" 안내 또는 영역 비활성 | -| CD-05 | 사용 프로젝트 수 | "N Projects" 라벨 | -| CD-06 | HTMX fragment | `curl -H "HX-Request: true"` → fragment HTML만 반환 | - -### 📄 License -| # | 케이스 | 확인 | -|---|--------|------| -| L-01 | 페이지 로드 | `/projects/{id}/license` — 라이선스 그룹별 카드, R/C/P/U 표시 | -| L-02 | 버전 선택 | scanId 쿼리로 다른 스캔 라이선스 조회 | -| L-03 | 의무사항 | 라이선스별 의무사항 카운트 | - -### 📈 Risk Trend -| # | 케이스 | 확인 | -|---|--------|------| -| RT-01 | 페이지 로드 | `/projects/{id}/risk-trend` — 최근 N개 스캔(`oswl.risk-trend.limit=10`) | -| RT-02 | Security 차트 | Chart.js 라인 차트 렌더 | -| RT-03 | License 차트 | 동일 | -| RT-04 | 델타 표시 | 직전 스캔 대비 증감 뱃지 | - -### 🔀 Version Diff -| # | 케이스 | 확인 | -|---|--------|------| -| VD-01 | From/To 선택 | `/projects/{id}/version-diff` 드롭다운 | -| VD-02 | 요약 카드 | Added / Removed / Updated / New Threats 카운트 | -| VD-03 | New Threats(추가) | 새 컴포넌트 + Risk 있음 → New Threat | -| VD-04 | New Threats(격상) | 기존 컴포넌트 Risk 격상 → New Threat | -| VD-05 | New Threats 탭 | 해당 컴포넌트만 표시 | -| VD-06 | Updated 탭 | 버전 변경 컴포넌트 | -| VD-07 | Added 탭 | 새 추가(Risk 없음) | -| VD-08 | Removed 탭 | 제거된 컴포넌트 | - -### 🕐 Scan History -| # | 케이스 | 확인 | -|---|--------|------| -| SH-01 | 목록 | 버전/날짜/상태(SUCCESS/FAILED/PENDING)/컴포넌트 수 | -| SH-02 | 개별 스캔 삭제 | DELETE → 204 | - -### 📖 Glossary -| # | 케이스 | 확인 | -|---|--------|------| -| G-01 | 페이지 로드 | `/glossary` 용어 목록 | - -### ⚙️ Settings — Administration -| # | 케이스 | 확인 | -|---|--------|------| -| SA-01 | 사용자 목록 | 이름/이메일/역할/상태/마지막 로그인 | -| SA-02 | Invite User | 모달 → 신규 사용자 생성 | -| SA-03 | Activate / Deactivate | 상태 토글 | -| SA-04 | Edit (display name / roles) | PUT 호출 성공 | -| SA-05 | Delete User | DELETE 후 목록에서 제거 | -| SA-06 | Permission Templates 탭 | 역할 템플릿/권한 목록 | -| SA-07 | Template CRUD | 생성/수정/삭제 | -| SA-08 | Audit Log 탭 | 시간/Actor/IP/Action/Target/Detail 컬럼 | -| SA-09 | Audit Log 필터 | Last 7/30/90/All, All Users, All Actions | -| SA-10 | Audit Log Export CSV | `/api/admin/audit-logs/export.csv` 다운로드 | - -### ⚙️ Settings — Security -| # | 케이스 | 확인 | -|---|--------|------| -| SS-01 | 탭 로드 | OTP/세션 정책/비밀번호 정책 표시 | -| SS-02 | 저장 | PUT → 200, Audit Log에 `SECURITY_SETTING.UPDATE` | -| SS-03 | Test Mail | "Test Mail" 클릭 → 200, GreenMail 로그에 메일 도착 | - -### ⚙️ Settings — AI -| # | 케이스 | 확인 | -|---|--------|------| -| AI-01 | 탭 로드 | 5옵션: Do not use / OpenAI / Anthropic / Google / Local | -| AI-02 | OpenAI 입력 | API Key / Endpoint(opt) / Model 드롭다운 | -| AI-03 | Anthropic 입력 | API Key / Model | -| AI-04 | Google 입력 | API Key / Model | -| AI-05 | Local/Ollama | Base URL / Model (API Key 없음) | -| AI-06 | Test Connection | 버튼 활성 토글 (실제 호출 SKIP) | -| AI-07 | Save (PUT /api/settings/ai) | 200 | -| AI-08 | Activate Provider | `PUT /api/settings/ai/activate/{provider}` | -| AI-09 | Deactivate | `PUT /api/settings/ai/deactivate` | - -### ⚙️ Settings — VCS -| # | 케이스 | 확인 | -|---|--------|------| -| VC-01 | 탭 로드 | 연결 목록 | -| VC-02 | 연결 추가 | POST 200 (잘못된 토큰은 PAT 검증 단계에서 실패 허용 — UI 흐름만) | -| VC-03 | 연결 삭제 | DELETE 204 | - -### ⚙️ Settings — CLI Keys -| # | 케이스 | 확인 | -|---|--------|------| -| CK-01 | 글로벌 키 목록 | 모든 프로젝트의 키 노출 | -| CK-02 | 키 발급 | POST → 응답 1회만 `oswl_xxx` 평문 표시 | -| CK-03 | 키 토글 | PATCH /toggle → 활성/비활성 변경 | - -### ⚙️ Settings — Cache (라이브러리 보강 캐시 — deps.dev + OSV) -| # | 케이스 | 확인 | -|---|--------|------| -| CC-01 | 탭 로드 | Custom TTL / Always Refresh / Permanent 옵션 | -| CC-02 | Custom TTL 입력 | 숫자 + hour(s)/day(s) 단위 | -| CC-03 | Save | `PUT /api/settings/cache` → 200 | -| CC-04 | Cache Clear | `POST /api/settings/cache/clear` → 200 | - -> `/api/settings/external` 및 `external_api_settings`는 제거됨. 캐시는 위 Cache 탭/API만 사용. - -### 🔌 CLI 공개 API (oswl_xxx 토큰 사용) -> `GET /data/test-api-key` 로 발급받은 토큰을 `Authorization: Bearer oswl_xxx` 헤더로 호출. - -| # | 케이스 | 확인 | -|---|--------|------| -| CLI-01 | Ping | `GET /api/scan/ping` → `{ status, projectId }` | -| CLI-02 | Scan 제출 | `POST /api/scan` (의존성 페이로드) → `{ scanId, version, status }` | -| CLI-03 | 스캔 상태 | `GET /api/scan/{scanId}/status` → `{ scanId, status, componentCount }` | -| CLI-04 | CLI 인증 | `POST /api/auth` (이메일/비번) → `{ token }` | - -### ❌ 에러 페이지 -| # | 케이스 | 확인 | -|---|--------|------| -| E-01 | 404 | 존재하지 않는 URL → 부엉이 일러스트 + "Go to Home" | -| E-02 | 403 | 비권한 사용자로 admin 페이지 접근 (또는 `/error/403`) | -| E-03 | 401 | 비로그인 상태 보호 페이지 접근 | -| E-04 | 500 | `/error/500` 직접 → 페이지 렌더 | -| E-05 | 503 | `/error/503` 직접 → 페이지 렌더 | - ---- - -## 3. 최종 리포트 형식 - -``` -## OsWL BVT Report — - -| Section | PASS | FAIL | SKIP | -|---------|------|------|------| -| Auth (A) | x/11 | … | … | -| Projects (P) | … | … | … | -| Security Center (SC) | … | … | … | -| ... 이하 동일 ... | - -### FAILURES -- **<케이스 ID>**: 한 줄 원인 요약. 스크린샷: <경로> - -### SKIPPED -- **<케이스 ID>**: 사유 - -**TOTAL: PASS X / FAIL Y / SKIP Z (총 N)** -``` - -리포트 출력 후 서버는 **켜진 상태로 유지** (다음 디버깅을 위해). 사용자가 종료를 요청하면 `gradlew --stop` 으로 정리. diff --git a/.github/scripts/prepare-pages-site.sh b/.github/scripts/prepare-pages-site.sh index 33e644c6..dc3c546e 100644 --- a/.github/scripts/prepare-pages-site.sh +++ b/.github/scripts/prepare-pages-site.sh @@ -39,6 +39,7 @@ test -f _site/index.html test -f _site/landing-i18n.js test -f _site/i18n/en.json test -f _site/i18n/ko.json +test -f _site/i18n/ja.json test -f _site/css/tailwind.css test -f _site/icon/icon-logo.svg test -f _site/graphic/symbol_w.svg diff --git a/.github/scripts/prepare-wiki.py b/.github/scripts/prepare-wiki.py new file mode 100644 index 00000000..7b0dadf2 --- /dev/null +++ b/.github/scripts/prepare-wiki.py @@ -0,0 +1,111 @@ +#!/usr/bin/env python3 +"""Prepare English Markdown for the Wiki without changing repository sources. + +Uses only the Python standard library. Run from any directory: + python .github/scripts/prepare-wiki.py owner/repo [--ref main] +""" + +import argparse +from pathlib import Path +import re +import subprocess +from urllib.parse import quote, unquote, urlsplit, urlunsplit + + +ROOT = Path(__file__).resolve().parents[2] +SOURCE = ROOT / 'docs/en' +OUTPUT = ROOT / 'build/wiki' +# Match code spans first so literal Markdown examples remain unchanged. +INLINE = re.compile( + r'(?P(?P`+).*?(?P=ticks))' + r'|(?P!?\[[^\n]*?\]\()(?P<[^>]+>|[^\s)]+)' +) +REFERENCE = re.compile(r'^(?P {0,3}\[[^]]+\]:\s*)(?P<[^>]+>|\S+)') +FENCE = re.compile(r'^ {0,3}(`{3,}|~{3,})') + + +def rewrite_url(url, source, repository, ref): + angled = url.startswith('<') and url.endswith('>') + value = url[1:-1] if angled else url + parts = urlsplit(value) + if parts.scheme or parts.netloc or not parts.path: + return url + base = ROOT if parts.path.startswith('/') else source.parent + target = (base / unquote(parts.path).lstrip('/')).resolve() + if not target.is_relative_to(ROOT): + raise ValueError(f'{source.name}: link escapes repository: {url}') + # Support the traditional extensionless Wiki links in a sidebar as well. + if not target.exists() and target.with_suffix('.md').is_file(): + target = target.with_suffix('.md') + if not target.exists(): + raise ValueError(f'{source.name}: missing link target: {url}') + if target.parent == SOURCE and target.suffix == '.md': + path = quote(target.stem) + else: + kind = 'tree' if target.is_dir() else 'blob' + relative = quote(target.relative_to(ROOT).as_posix(), safe='/') + path = f'https://github.com/{repository}/{kind}/{quote(ref, safe="")}/{relative}' + rewritten = urlunsplit(('', '', path, parts.query, parts.fragment)) + return f'<{rewritten}>' if angled else rewritten + + +def prepare(text, source, repository, ref): + fence = None + output = [] + + def replace(match): + if match.re is INLINE and match['code'] is not None: + return match[0] + return match['prefix'] + rewrite_url(match['url'], source, repository, ref) + + for line in text.splitlines(keepends=True): + marker = FENCE.match(line) + if fence: + if marker and marker[1][0] == fence[0] and len(marker[1]) >= len(fence) and not line[marker.end():].strip(): + fence = None + output.append(line) + continue + if marker: + fence = marker[1] + output.append(line) + continue + if line.startswith((' ', '\t')): + output.append(line) + continue + output.append(REFERENCE.sub(replace, line) if REFERENCE.match(line) else INLINE.sub(replace, line)) + return ''.join(output) + + +def main(): + parser = argparse.ArgumentParser(description=__doc__) + parser.add_argument('repository', help='GitHub owner/repository') + parser.add_argument('--ref', default='main', help='Repository ref used for non-Wiki links') + args = parser.parse_args() + if not re.fullmatch(r'[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+', args.repository): + parser.error('repository must be owner/repository') + # Exclude local-only documents retained outside version control. + tracked = subprocess.check_output(['git', 'ls-files', '--cached', '--others', '--exclude-standard', + 'docs/en/*.md'], cwd=ROOT, text=True).splitlines() + sources = sorted({ROOT / name for name in tracked if (ROOT / name).is_file()}) + names = {source.name for source in sources} + if not {'Home.md', '_Sidebar.md'} <= names or 'README.md' in names: + parser.error('English docs must include Home.md and _Sidebar.md, without a competing README.md') + # Resolve all links before writing any output, so a broken source fails publishing. + prepared = {source.name: prepare(source.read_text(encoding='utf-8'), source, args.repository, args.ref) + for source in sources} + if OUTPUT.is_symlink() or OUTPUT.resolve() != ROOT / 'build/wiki': + parser.error('Wiki output must be the repository build/wiki directory') + OUTPUT.mkdir(parents=True, exist_ok=True) + for existing in OUTPUT.iterdir(): + if existing.is_symlink() or not existing.is_file() or existing.suffix != '.md': + parser.error(f'unexpected file in Wiki output: {existing.name}') + for existing in OUTPUT.glob('*.md'): + if existing.name not in prepared: + existing.unlink() + for name, text in prepared.items(): + (OUTPUT / name).write_text(text, encoding='utf-8', newline='\n') + print(f'Prepared {len(prepared)} English Wiki pages in {OUTPUT}') + + +if __name__ == '__main__': + main() diff --git a/.github/scripts/validate-release.py b/.github/scripts/validate-release.py new file mode 100644 index 00000000..c0840a8a --- /dev/null +++ b/.github/scripts/validate-release.py @@ -0,0 +1,76 @@ +#!/usr/bin/env python3 +"""Validate release inputs without publishing or changing Git references.""" +import argparse +import json +from pathlib import Path +import re + +ROOT = Path(__file__).resolve().parents[2] + +def keys(value, prefix=''): + return {prefix + k for k, v in value.items() if not isinstance(v, dict)} | set().union( + *(keys(v, prefix + k + '.') for k, v in value.items() if isinstance(v, dict)), set()) + +def properties(path): + result = set() + for line in path.read_text(encoding='utf-8').splitlines(): + if '=' not in line or line.lstrip().startswith(('#', '!')): + continue + key = line.split('=', 1)[0].strip() + if key in result: + raise ValueError(f'{path.name}: duplicate key {key}') + result.add(key) + return result + +def main(): + parser = argparse.ArgumentParser(description=__doc__) + parser.add_argument('--tag') + parser.add_argument('--notes-output', type=Path) + args = parser.parse_args() + match = re.search(r"^version = '([0-9]+(?:\.[0-9]+){2,3})'$", (ROOT / 'build.gradle').read_text(encoding='utf-8'), re.M) + if not match: + parser.error('build.gradle must declare a three- or four-part numeric release version') + version = match.group(1) + if args.tag and args.tag != 'v' + version: + parser.error(f'tag {args.tag!r} does not match build version v{version}') + templates = ROOT / 'src/main/resources/templates' + for template in templates.rglob('*.html'): + for asset_version in re.findall(r"\(v='([^']+)'\)", template.read_text(encoding='utf-8')): + if asset_version != version: + parser.error(f'{template.relative_to(ROOT)}: asset cache version differs') + landing = (ROOT / 'landing/index.html').read_text(encoding='utf-8') + if f'data-i18n="hero.badge">OsWL {version}' not in landing: + parser.error('landing fallback release version differs') + sarif = (ROOT / 'src/main/java/com/salkcoding/oswl/service/reporting/SarifExportService.java').read_text(encoding='utf-8') + if f'driver.put("version", "{version}")' not in sarif: + parser.error('SARIF tool version does not match build.gradle') + changelog = (ROOT / 'CHANGELOG.md').read_text(encoding='utf-8') + match = re.search(r'^## \[' + re.escape(version) + r'\][^\n]*\n(.*?)(?=^## |\Z)', changelog, re.M | re.S) + if not match: + parser.error(f'CHANGELOG.md has no entry for {version}') + notes = match.group(1).strip() + # Release bodies are read on GitHub, not relative to the repository root. + notes = re.sub(r'\]\((docs/[^)]+)\)', lambda m: f'](https://github.com/SalkCoding/Oswl/blob/v{version}/{m.group(1)})', notes) + base_keys = None + ui_keys = None + for lang, suffix in [('en', ''), ('ko', '_ko'), ('ja', '_ja')]: + data = json.loads((ROOT / f'landing/i18n/{lang}.json').read_text(encoding='utf-8')) + current = keys(data) + if base_keys is not None and current != base_keys: + parser.error(f'landing {lang} translation keys differ') + base_keys = current + if data['hero']['badge'] != 'OsWL ' + version: + parser.error(f'landing {lang} release version differs') + current = properties(ROOT / f'src/main/resources/messages{suffix}.properties') + if ui_keys is not None and current != ui_keys: + parser.error(f'application {lang} translation keys differ') + ui_keys = current + if not (ROOT / f'docs/{lang}/Whats-New-v{version}.md').is_file(): + parser.error(f'missing {lang} release notes') + if args.notes_output: + args.notes_output.parent.mkdir(parents=True, exist_ok=True) + args.notes_output.write_text(notes + '\n', encoding='utf-8') + print(f'Release inputs validated: v{version}; English/Korean/Japanese keys match') + +if __name__ == '__main__': + main() diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index b65ffbb4..e7f2164f 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -1,8 +1,11 @@ name: CI/CD on: + pull_request: + branches: [main] push: branches: [main] + tags: ['v[0-9]*'] workflow_dispatch: concurrency: @@ -10,9 +13,7 @@ concurrency: cancel-in-progress: true permissions: - contents: write - pull-requests: write - issues: write + contents: read env: GRADLE_OPTS: -Dorg.gradle.daemon=false -Djava.net.preferIPv4Stack=true @@ -36,82 +37,76 @@ jobs: - name: Validate Gradle wrapper uses: gradle/actions/wrapper-validation@v6 + - name: Validate release version, notes, and translation keys + run: python3 .github/scripts/validate-release.py + - name: Build, test, and verify production JAR run: ./gradlew --no-daemon clean test bootJar verifyProdJar - - name: Verify THIRD_PARTY_LICENSES.md version sync (H3) - # Catches a build.gradle dependency bump whose THIRD_PARTY_LICENSES.md **Version:** - # lines were never re-synced (./gradlew syncThirdPartyLicenseVersions). This workflow - # is push-triggered on main only (no PR trigger configured), so this catches drift - # that already landed on main rather than blocking it pre-merge — still useful as a - # release-please gate: a broken doc sync fails the build before release-please runs. + - name: Check cluster result predicates without starting servers + run: | + python3 -m unittest discover -s scripts/verification -p test_cluster_assertions.py + bash -n scripts/verification/verify-multi-instance.sh + + - name: Verify THIRD_PARTY_LICENSES.md version sync run: | ./gradlew --no-daemon syncThirdPartyLicenseVersions git diff --exit-code THIRD_PARTY_LICENSES.md - release-please: - name: Version & Release - needs: build + ui: + name: Browser smoke and accessibility runs-on: ubuntu-latest - outputs: - release_created: ${{ steps.release.outputs.release_created }} - tag_name: ${{ steps.release.outputs.tag_name }} - version: ${{ steps.release.outputs.version }} steps: - - name: Checkout - uses: actions/checkout@v4 + - uses: actions/checkout@v4 + - uses: actions/setup-java@v4 with: - fetch-depth: 0 - - - name: Release Please - id: release - uses: googleapis/release-please-action@v4 + distribution: temurin + java-version: '25' + cache: gradle + - name: Run browser checks + run: ./gradlew --no-daemon uiTest --tests '*SmokeUiTest' --tests '*KeyboardFlowUiTest' --tests '*AxeAuditUiTest' --tests '*RequestLifecycleUiTest' --tests '*QuickImportSourceReachabilityUiTest' --tests '*SettingsModulesUiTest' --tests '*SettingsFailureUiTest' --tests '*UiStateMatrixUiTest' --tests '*OnboardingFailureUiTest' --tests '*DetectionCoverageUiTest' --tests '*EmbeddedAiFailureUiTest' --tests '*OrganizationWorkflowUiTest' --tests '*AuthExpiryUiTest' + - name: Upload browser reports + if: always() + uses: actions/upload-artifact@v4 with: - token: ${{ secrets.GITHUB_TOKEN }} - config-file: release-please-config.json - manifest-file: .release-please-manifest.json + name: ui-reports + path: build/reports/tests/uiTest publish: - name: Publish JAR - needs: [build, release-please] - if: needs.release-please.outputs.release_created == 'true' + name: Publish tagged release + needs: [build, ui] + if: startsWith(github.ref, 'refs/tags/v') runs-on: ubuntu-latest permissions: contents: write steps: - - name: Checkout release tag - uses: actions/checkout@v4 - with: - ref: ${{ needs.release-please.outputs.tag_name }} - - - name: Set up JDK 25 - uses: actions/setup-java@v4 + - uses: actions/checkout@v4 + - uses: actions/setup-java@v4 with: distribution: temurin java-version: '25' cache: gradle - + - name: Validate exact tag and prepare release notes + run: python3 .github/scripts/validate-release.py --tag "$GITHUB_REF_NAME" --notes-output build/release-notes.md - name: Build production JAR run: ./gradlew --no-daemon bootJar verifyProdJar - - - name: Resolve JAR path - id: jar - run: | - VERSION=$(./gradlew -q properties | awk '/^version:/ {print $2}') - JAR_PATH="build/libs/oswl-${VERSION}.jar" - if [ ! -f "$JAR_PATH" ]; then - echo "::error::JAR not found at ${JAR_PATH}" - ls -la build/libs/ || true - exit 1 - fi - echo "path=${JAR_PATH}" >> "$GITHUB_OUTPUT" - echo "version=${VERSION}" >> "$GITHUB_OUTPUT" - - - name: Upload JAR to GitHub Release + - name: Publish JAR and checksum env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} run: | - gh release upload "${{ needs.release-please.outputs.tag_name }}" \ - "${{ steps.jar.outputs.path }}" \ - --clobber - echo "Uploaded oswl-${{ steps.jar.outputs.version }}.jar to ${{ needs.release-please.outputs.tag_name }}" + set -euo pipefail + VERSION="${GITHUB_REF_NAME#v}" + JAR="build/libs/oswl-${VERSION}.jar" + test -f "$JAR" + (cd build/libs && sha256sum "oswl-${VERSION}.jar" > SHA256SUMS) + if gh release view "$GITHUB_REF_NAME" --json isDraft --jq '.isDraft' > build/release-is-draft; then + if [ "$(cat build/release-is-draft)" != "true" ]; then + echo "Release is already published; existing assets will not be overwritten." + exit 0 + fi + else + gh release create "$GITHUB_REF_NAME" --verify-tag --draft \ + --title "OsWL ${VERSION}" --notes-file build/release-notes.md + fi + gh release upload "$GITHUB_REF_NAME" "$JAR" build/libs/SHA256SUMS --clobber + gh release edit "$GITHUB_REF_NAME" --draft=false --latest diff --git a/.github/workflows/wiki-sync.yml b/.github/workflows/wiki-sync.yml index ba6dd822..5a49e7e2 100644 --- a/.github/workflows/wiki-sync.yml +++ b/.github/workflows/wiki-sync.yml @@ -4,10 +4,15 @@ on: push: branches: [main] paths: - - 'docs/**' - - '!docs/ko/**' + - 'docs/en/**' + - '.github/scripts/prepare-wiki.py' - '.github/workflows/wiki-sync.yml' workflow_dispatch: + inputs: + dry_run: + description: 'Preview the Wiki commit without publishing' + type: boolean + default: true concurrency: group: wiki-sync-${{ github.ref }} @@ -27,13 +32,17 @@ jobs: - name: Checkout uses: actions/checkout@v4 + - name: Prepare English Wiki pages + env: + WIKI_REPOSITORY: ${{ github.repository }} + run: python3 .github/scripts/prepare-wiki.py "$WIKI_REPOSITORY" + - name: Sync to GitHub Wiki uses: Andrew-Chen-Wang/github-wiki-action@v5.0.4 with: - path: docs/ + path: build/wiki/ strategy: clone - preprocess: true + preprocess: false + dry-run: ${{ github.event_name == 'workflow_dispatch' && inputs.dry_run }} disable-empty-commits: true commit-message: "wiki: sync from ${{ github.sha }}" - ignore: | - ko/** diff --git a/.gitignore b/.gitignore index b6c24e95..02981011 100644 --- a/.gitignore +++ b/.gitignore @@ -45,10 +45,19 @@ oswl-db.mv.db ### Tailwind compiled output (generated by buildTailwindCss) ### src/main/resources/static/css/tailwind.css +### Minified custom JS (generated by minifyJs; vendor/*.min.js stays tracked) ### +src/main/resources/static/js/**/*.min.js +!src/main/resources/static/js/vendor/** + ### GitHub Pages build output (generated by prepare-pages-site.sh) ### _site/ ### Etc ### +__pycache__/ +.env +.env.* +!.env.example +!.env.prod.example cookies.txt server.log *.log @@ -61,5 +70,21 @@ htmlReport .claude # Local-only planning/verification artifacts -/ROADMAP.md +/ROADMAP*.md /e6verify/ + +# Local agent guidance and development reports are not release inputs. +/AGENTS.md +/CLAUDE.md +/.cursorrules +/.agents/ +/docs/**/Architecture-Optimization.md +/docs/**/Developer-Onboarding.md +/docs/**/Performance-Verification.md +/docs/**/Roadmap-Final-Audit.md +/docs/**/Ui-Operations-Verification.md +/docs/**/Ui-Ux-Regression-Audit.md +/docs/**/Ui-States-Checklist.md +/docs/**/Local-Cluster-Rehearsal.md +/docs/**/performance-evidence/ +/docs/**/ui-operations-evidence/ diff --git a/.kimi/AGENTS.md b/.kimi/AGENTS.md deleted file mode 100644 index 52a5f653..00000000 --- a/.kimi/AGENTS.md +++ /dev/null @@ -1,92 +0,0 @@ -# OsWL — Project Guidelines - -OsWL is an in-house SCA (Software Composition Analysis) platform for tracking and managing CVE security vulnerabilities and license risks in OSS components. - ---- - -## Test Account -- Email: test@test.com | Password: 1q2w3e4r | Name: test -- OTP: `000000` (bypass in dev) | Test issuance OTP: `123456` - ---- - -## Tech Stack -- **Backend:** Spring Boot 4.0.5 (Java 25) — WebMVC, Data JPA, Security, Mail, Validation, AspectJ -- **View:** Thymeleaf + thymeleaf-extras-springsecurity6 -- **Frontend:** Vanilla HTML/CSS/JS · Tailwind CSS 3.4 (precompiled standalone CLI, **NO CDN**) · Chart.js · HTMX · Alpine.js -- **DB:** PostgreSQL (prod) / H2 file-mode (local profile, PostgreSQL-compatible) -- **Auth:** Spring Security + Email OTP (2FA) + Trusted Device + Single-Session Enforcement -- **API Docs:** springdoc-openapi — OpenAPI annotations live in `controller/spec/*Spec.java` interfaces only -- **Local SMTP:** GreenMail embedded (port 3025) — OTP code printed as `*** OTP CODE: NNNNNN ***` in server logs -- **Build:** Gradle Wrapper (`./gradlew`) - ---- - -## Project Structure (Key Packages) - - src/main/java/com/salkcoding/oswl/ - ├── aop/ # Cross-cutting concerns (audit logging) - ├── auth/ # Auth module — config, controller, dto, entity, enums, repo, security, service, web - ├── client/ # External API clients (OSV, deps.dev, GitHub…) - ├── controller/ # Business controllers - │ └── spec/ # Controller spec interfaces (all springdoc annotations here) - ├── domain/entity/ # JPA entities - ├── domain/enums/ - ├── dto/ exception/ repository/ scheduler/ service/ web/ - resources/ - ├── application.yaml / application-local.yaml / application-prod.yaml - ├── static/{css,js,img,icon,graphic,scripts}/ - └── templates/{auth, projects, security-center, component-detail, license, - risk-trend, scan-history, settings, error, fragments}/ - ---- - -## Architecture & Code Style - -**Backend** -- **Layered:** Controller → Service → Repository. Keep controllers thin. -- **Controller Spec:** All OpenAPI annotations go in `controller/spec/*ControllerSpec.java` interfaces. Implementations contain business logic only. -- **DI:** Lombok `@RequiredArgsConstructor` constructor injection only. `@Autowired` is forbidden. -- **Authorization:** Method-level `@PreAuthorize("hasPermission(null, 'PROJECT_VIEW') or hasRole('SYSTEM_ADMIN')")`. -- **Audit Logging:** Use `AuditLogService.log…()` for user actions and system events. -- **Profile Gating:** Local-only beans use `@Profile("local")` (e.g. `TestDataController`, `LocalSmtpConfig`). -- **JPA Cascade:** Project → ProjectVersion / ScanResult / ScanComponent / DependencyPath; Library → Cve (cascade ALL). - -**Frontend** -- **Vanilla first.** Add HTMX (partial updates) or Alpine.js (local state) only when needed. -- **Tailwind CSS:** `/css/tailwind.css` (Gradle build output) only — CDN is forbidden. -- **HTMX pattern:** Return fragment-only response when `HX-Request: true` header is present. -- **Assets:** JS in `static/js/`, organized by page subdirectory. - ---- - -## DB & Environments -- **Local DB:** H2 file (`./oswl-db.mv.db`). Console: `http://localhost:8080/h2-console` (JDBC `jdbc:h2:file:./oswl-db`, user `sa`). -- **DB Reset:** Stop server → delete `oswl-db.*` files → restart → lands on Setup screen. -- **Test Data Seed:** `GET /data/test` (auth required, local only) — wipes and re-seeds all data. -- **Encryption Key (`OSWL_ENCRYPTION_KEY`):** Dummy key hardcoded for local; production requires 32-byte key via `openssl rand -base64 32`. - ---- - -## Build & Run - - ./gradlew bootRun # Local run (profile=local, port 8080) - ./gradlew build # Full build (includes Tailwind) - ./gradlew test # JUnit tests - ./gradlew buildTailwindCss # Tailwind rebuild only - ---- - -## Conventions -- **DB naming:** snake_case tables/columns; entity PK is `Long id`. -- **DTOs:** `record` or Lombok `@Value` in `dto/` package. -- **Dependencies:** Add to `build.gradle` (backend) or use CDN/webjars (frontend). -- **Error pages:** `error/{401,403,404,500,503}.html` — use `_owl-error.html` fragment (shared owl illustration). -- **Log tone:** Business events → INFO/WARN/ERROR; details → `log.debug`. - -## Test Code Policy - -- Do NOT modify, create, or delete any test files (e.g., *Test.java, *.test.ts, *.spec.ts) unless explicitly asked to. -- When fixing bugs or refactoring production code, leave all existing test files exactly as they are. -- If a test needs to be updated as a direct result of a change, ask first before touching it. -- Never auto-generate test stubs or test scaffolding without being explicitly instructed to do so. diff --git a/.release-please-manifest.json b/.release-please-manifest.json deleted file mode 100644 index 0db4c771..00000000 --- a/.release-please-manifest.json +++ /dev/null @@ -1,3 +0,0 @@ -{ - ".": "1.0.3" -} diff --git a/CHANGELOG.md b/CHANGELOG.md index 77000498..518e128e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,25 @@ # Changelog +## [1.0.5.1] - 2026-09-08 + +### Improvements + +- Restore the original light appearance across login, search and settings. Clarify input validation, save results and unsaved changes in English, Korean and Japanese. +- Restore CLI API key deletion, correct trash visibility and restoration, and provide direct NVD links beside CVE identifiers. +- Select known OSV fixes for the installed numeric release interval; resolve inherited Maven properties and supported Gradle rich version constraints. Preserve and refresh available license metadata. +- Improve scan retry isolation, incomplete-analysis reporting, request cancellation and duplicate-action handling. +- Add opt-in browser security notifications, custom scan rules, organization risk briefings and scoped offline CocoaPods data. Add bounded OCI image inspection tooling. +- Improve diagnostic status reporting and disk-space readability. Clarify offline snapshot import, configuration transfer and scan archive exports, including empty exports. + +### Upgrading + +- Java 25 is required. Back up the database and persistent files before upgrading; follow the deployment and migration instructions. Migrated databases require the migrations through V35. +- Browser notifications require web push/VAPID configuration and browser permission. SMTP, VCS and AI connections must be configured for the relevant integrations. +- Existing scan records are not rewritten by a code upgrade. Rescan to apply parsing and enrichment corrections. +- A missing fix version does not prove that no patch exists. Complex ranges, ecosystem-specific ordering, incomplete source data and offline parity still require review. + +See [English](docs/en/Whats-New-v1.0.5.1.md), [한국어](docs/ko/Whats-New-v1.0.5.1.md) or [日本語](docs/ja/Whats-New-v1.0.5.1.md) for release guidance. + ## [1.0.3](https://github.com/SalkCoding/Oswl/releases/tag/v1.0.3) (2026-07-19) User-feedback release — applies the remaining findings from the 5-person usability test diff --git a/CLAUDE.md b/CLAUDE.md deleted file mode 100644 index 52a5f653..00000000 --- a/CLAUDE.md +++ /dev/null @@ -1,92 +0,0 @@ -# OsWL — Project Guidelines - -OsWL is an in-house SCA (Software Composition Analysis) platform for tracking and managing CVE security vulnerabilities and license risks in OSS components. - ---- - -## Test Account -- Email: test@test.com | Password: 1q2w3e4r | Name: test -- OTP: `000000` (bypass in dev) | Test issuance OTP: `123456` - ---- - -## Tech Stack -- **Backend:** Spring Boot 4.0.5 (Java 25) — WebMVC, Data JPA, Security, Mail, Validation, AspectJ -- **View:** Thymeleaf + thymeleaf-extras-springsecurity6 -- **Frontend:** Vanilla HTML/CSS/JS · Tailwind CSS 3.4 (precompiled standalone CLI, **NO CDN**) · Chart.js · HTMX · Alpine.js -- **DB:** PostgreSQL (prod) / H2 file-mode (local profile, PostgreSQL-compatible) -- **Auth:** Spring Security + Email OTP (2FA) + Trusted Device + Single-Session Enforcement -- **API Docs:** springdoc-openapi — OpenAPI annotations live in `controller/spec/*Spec.java` interfaces only -- **Local SMTP:** GreenMail embedded (port 3025) — OTP code printed as `*** OTP CODE: NNNNNN ***` in server logs -- **Build:** Gradle Wrapper (`./gradlew`) - ---- - -## Project Structure (Key Packages) - - src/main/java/com/salkcoding/oswl/ - ├── aop/ # Cross-cutting concerns (audit logging) - ├── auth/ # Auth module — config, controller, dto, entity, enums, repo, security, service, web - ├── client/ # External API clients (OSV, deps.dev, GitHub…) - ├── controller/ # Business controllers - │ └── spec/ # Controller spec interfaces (all springdoc annotations here) - ├── domain/entity/ # JPA entities - ├── domain/enums/ - ├── dto/ exception/ repository/ scheduler/ service/ web/ - resources/ - ├── application.yaml / application-local.yaml / application-prod.yaml - ├── static/{css,js,img,icon,graphic,scripts}/ - └── templates/{auth, projects, security-center, component-detail, license, - risk-trend, scan-history, settings, error, fragments}/ - ---- - -## Architecture & Code Style - -**Backend** -- **Layered:** Controller → Service → Repository. Keep controllers thin. -- **Controller Spec:** All OpenAPI annotations go in `controller/spec/*ControllerSpec.java` interfaces. Implementations contain business logic only. -- **DI:** Lombok `@RequiredArgsConstructor` constructor injection only. `@Autowired` is forbidden. -- **Authorization:** Method-level `@PreAuthorize("hasPermission(null, 'PROJECT_VIEW') or hasRole('SYSTEM_ADMIN')")`. -- **Audit Logging:** Use `AuditLogService.log…()` for user actions and system events. -- **Profile Gating:** Local-only beans use `@Profile("local")` (e.g. `TestDataController`, `LocalSmtpConfig`). -- **JPA Cascade:** Project → ProjectVersion / ScanResult / ScanComponent / DependencyPath; Library → Cve (cascade ALL). - -**Frontend** -- **Vanilla first.** Add HTMX (partial updates) or Alpine.js (local state) only when needed. -- **Tailwind CSS:** `/css/tailwind.css` (Gradle build output) only — CDN is forbidden. -- **HTMX pattern:** Return fragment-only response when `HX-Request: true` header is present. -- **Assets:** JS in `static/js/`, organized by page subdirectory. - ---- - -## DB & Environments -- **Local DB:** H2 file (`./oswl-db.mv.db`). Console: `http://localhost:8080/h2-console` (JDBC `jdbc:h2:file:./oswl-db`, user `sa`). -- **DB Reset:** Stop server → delete `oswl-db.*` files → restart → lands on Setup screen. -- **Test Data Seed:** `GET /data/test` (auth required, local only) — wipes and re-seeds all data. -- **Encryption Key (`OSWL_ENCRYPTION_KEY`):** Dummy key hardcoded for local; production requires 32-byte key via `openssl rand -base64 32`. - ---- - -## Build & Run - - ./gradlew bootRun # Local run (profile=local, port 8080) - ./gradlew build # Full build (includes Tailwind) - ./gradlew test # JUnit tests - ./gradlew buildTailwindCss # Tailwind rebuild only - ---- - -## Conventions -- **DB naming:** snake_case tables/columns; entity PK is `Long id`. -- **DTOs:** `record` or Lombok `@Value` in `dto/` package. -- **Dependencies:** Add to `build.gradle` (backend) or use CDN/webjars (frontend). -- **Error pages:** `error/{401,403,404,500,503}.html` — use `_owl-error.html` fragment (shared owl illustration). -- **Log tone:** Business events → INFO/WARN/ERROR; details → `log.debug`. - -## Test Code Policy - -- Do NOT modify, create, or delete any test files (e.g., *Test.java, *.test.ts, *.spec.ts) unless explicitly asked to. -- When fixing bugs or refactoring production code, leave all existing test files exactly as they are. -- If a test needs to be updated as a direct result of a change, ask first before touching it. -- Never auto-generate test stubs or test scaffolding without being explicitly instructed to do so. diff --git a/README.ja.md b/README.ja.md index c5155840..6d255ea4 100644 --- a/README.ja.md +++ b/README.ja.md @@ -1,5 +1,7 @@
+**OsWL 1.0.5.1** · [1.0.5.1 の変更点](docs/ja/Whats-New-v1.0.5.1.md) + # 🦉 OsWL **オープンソース・ソフトウェア・ウォッチリスト — SCA プラットフォーム** @@ -199,7 +201,9 @@ Library (プロジェクト間で共有 — group:artifact@version) ## ドキュメント -日本語ドキュメントは [`docs/ja/`](docs/ja/) フォルダで確認できます。英語ドキュメントは [`docs/`](docs/) フォルダ、韓国語ドキュメントは [`docs/ko/`](docs/ko/) フォルダ、および [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki)（`main` への push 時に `docs/` から自動同期）で提供されています。 +日本語ドキュメントは [`docs/ja/`](docs/ja/Home.md)、英語は [`docs/en/`](docs/en/Home.md)、韓国語は [`docs/ko/`](docs/ko/Home.md) にあります。[ドキュメント索引](docs/README.md)と [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki) は英語を既定の入口とし、Wiki は `main` への push 時に `docs/en/` から自動同期されます。 + +フォルダの役割: [`deploy/`](deploy/README.md) は Docker のビルド・実行設定と Grafana アセット、[`scripts/`](scripts/README.md) は開発・運用ツール、[`docs/`](docs/README.md) はガイド、[`landing/`](landing/index.html) は Pages の紹介サイトです。アプリと同梱設定は `src/`、GitHub 自動化は `.github/` にあります。 | ページ | 説明 | |---|---| diff --git a/README.ko.md b/README.ko.md index 5959aff1..ef5f5ef9 100644 --- a/README.ko.md +++ b/README.ko.md @@ -1,5 +1,7 @@
+**OsWL 1.0.5.1** · [1.0.5.1 변경 사항](docs/ko/Whats-New-v1.0.5.1.md) + # 🦉 OsWL **오픈소스 소프트웨어 감시 목록 — SCA 플랫폼** @@ -199,7 +201,10 @@ Library (프로젝트 간 공유 — group:artifact@version) ## 문서 -한국어 문서는 [`docs/ko/`](docs/ko/) 폴더에서 확인할 수 있습니다. 영문 문서는 [`docs/`](docs/), 일본어 문서는 [`docs/ja/`](docs/ja/)에서, 그리고 [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki) (`main` push 시 `docs/`에서 자동 동기화)에서도 제공됩니다. + +한국어 문서는 [`docs/ko/`](docs/ko/Home.md), 영어 문서는 [`docs/en/`](docs/en/Home.md), 일본어 문서는 [`docs/ja/`](docs/ja/Home.md)에 있습니다. [문서 인덱스](docs/README.md)와 [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki)는 영어를 기본으로 안내하며, Wiki는 `main` push 시 `docs/en/`에서 자동 동기화됩니다. + +폴더 역할: [`deploy/`](deploy/README.md)는 Docker 빌드·실행 설정과 Grafana 자산, [`scripts/`](scripts/README.md)는 개발·운영 도구, [`docs/`](docs/README.md)는 안내 문서, [`landing/`](landing/index.html)은 Pages 소개 사이트입니다. 앱 코드와 패키징되는 설정은 `src/`, GitHub 자동화는 `.github/`에 있습니다. | 페이지 | 설명 | |---|---| diff --git a/README.md b/README.md index 668463f8..e42b5f17 100644 --- a/README.md +++ b/README.md @@ -1,5 +1,7 @@
+**OsWL 1.0.5.1** · [What's new in 1.0.5.1](docs/en/Whats-New-v1.0.5.1.md) + # 🦉 OsWL **Open-source Software Watchlist — SCA Platform** @@ -199,30 +201,33 @@ Interactive Swagger UI is available in the **`local` profile** at `http://localh ## Documentation -Full documentation is available in the [`docs/`](docs/) folder and on the [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki) (auto-synced from `docs/` on push to `main`). Korean docs live in [`docs/ko/`](docs/ko/), Japanese docs in [`docs/ja/`](docs/ja/). + +English documentation lives in [`docs/en/`](docs/en/Home.md) and on the [GitHub Wiki](https://github.com/SalkCoding/Oswl/wiki), auto-synced from `docs/en/` on push to `main`. Choose a language through the [documentation index](docs/README.md): [English](docs/en/Home.md), [한국어](docs/ko/Home.md), [日本語](docs/ja/Home.md). + +Repository layout: [`deploy/`](deploy/README.md) contains Docker build/run configuration and Grafana assets; [`scripts/`](scripts/README.md) contains development and operations tools; [`docs/`](docs/README.md) contains guides; [`landing/`](landing/index.html) is the Pages site. Application code and packaged configuration stay in `src/`, while GitHub automation stays in `.github/`. | Page | Description | |---|---| -| [Home](docs/Home.md) | Platform overview and navigation guide | -| [What's New in v1.0.4](docs/Whats-New-v1.0.4.md) | Release highlights — SBOM/VEX/SARIF exports, CI/CD gate, continuous monitoring, org dashboard, supply-chain heuristics, air-gapped mode | -| [Getting Started](docs/Getting-Started.md) | Installation, setup wizard, first project | -| [User Guide](docs/User-Guide.md) | Day-to-day usage of the dashboard | -| [Quick Import](docs/Quick-Import.md) | Importing projects from GitHub / GitLab / Bitbucket | -| [CLI Integration](docs/CLI-Integration.md) | Submitting scans from build pipelines | -| [Embedded AI](docs/Embedded-AI.md) | Running CVE triage and license insights on a local LLM — no cloud account or API key | -| [Security Center](docs/Security-Center.md) | Managing vulnerabilities (CVEs) | -| [License Analysis](docs/License-Analysis.md) | License compliance and policy management | -| [Risk Trend](docs/Risk-Trend.md) | Interpreting historical risk charts | -| [Version Diff](docs/Version-Diff.md) | Comparing two scan results | -| [Scan History](docs/Scan-History.md) | Reviewing every scan submitted for a project, in order | -| [Administration](docs/Administration.md) | Users, roles, audit logs, security settings | -| [Authorization layers](docs/Authorization-Layers.md) | Role templates vs project membership | -| [Project access control](docs/Project-Access-Control.md) | Technical reference for how project-level permissions are resolved | -| [Production deployment](docs/Production-Deployment-Checklist.md) | Production checklist | -| [Database schema](docs/Database-Schema.md) | `ddl-auto` strategy and SQL migrations | -| [Scan API security](docs/Scan-Api-Security.md) | CLI scan auth and audit logging | -| [API Reference](docs/API-Reference.md) | REST API endpoint summary | -| [Glossary](docs/Glossary.md) | Terms and definitions | +| [Home](docs/en/Home.md) | Platform overview and navigation guide | +| [What's New in v1.0.4](docs/en/Whats-New-v1.0.4.md) | Release highlights — SBOM/VEX/SARIF exports, CI/CD gate, continuous monitoring, org dashboard, supply-chain heuristics, air-gapped mode | +| [Getting Started](docs/en/Getting-Started.md) | Installation, setup wizard, first project | +| [User Guide](docs/en/User-Guide.md) | Day-to-day usage of the dashboard | +| [Quick Import](docs/en/Quick-Import.md) | Importing projects from GitHub / GitLab / Bitbucket | +| [CLI Integration](docs/en/CLI-Integration.md) | Submitting scans from build pipelines | +| [Embedded AI](docs/en/Embedded-AI.md) | Running CVE triage and license insights on a local LLM — no cloud account or API key | +| [Security Center](docs/en/Security-Center.md) | Managing vulnerabilities (CVEs) | +| [License Analysis](docs/en/License-Analysis.md) | License compliance and policy management | +| [Risk Trend](docs/en/Risk-Trend.md) | Interpreting historical risk charts | +| [Version Diff](docs/en/Version-Diff.md) | Comparing two scan results | +| [Scan History](docs/en/Scan-History.md) | Reviewing every scan submitted for a project, in order | +| [Administration](docs/en/Administration.md) | Users, roles, audit logs, security settings | +| [Authorization layers](docs/en/Authorization-Layers.md) | Role templates vs project membership | +| [Project access control](docs/en/Project-Access-Control.md) | Technical reference for how project-level permissions are resolved | +| [Production deployment](docs/en/Production-Deployment-Checklist.md) | Production checklist | +| [Database schema](docs/en/Database-Schema.md) | `ddl-auto` strategy and SQL migrations | +| [Scan API security](docs/en/Scan-Api-Security.md) | CLI scan auth and audit logging | +| [API Reference](docs/en/API-Reference.md) | REST API endpoint summary | +| [Glossary](docs/en/Glossary.md) | Terms and definitions | --- diff --git a/THIRD_PARTY_LICENSES.md b/THIRD_PARTY_LICENSES.md index 8c5ac3da..c5d3b2e9 100644 --- a/THIRD_PARTY_LICENSES.md +++ b/THIRD_PARTY_LICENSES.md @@ -22,6 +22,7 @@ OsWL uses the following third-party libraries. This document lists each library, | [H2 Database](#h2-database) | EPL 2.0 / MPL 2.0 | | [PostgreSQL JDBC Driver](#postgresql-jdbc-driver) | BSD 2-Clause | | [Project Lombok](#project-lombok) | MIT | +| [Caffeine](#caffeine) | Apache 2.0 | | [Alpine.js](#alpinejs) | MIT | | [@alpinejs/collapse](#alpinejscollapse) | MIT | | [Chart.js](#chartjs) | MIT | @@ -32,11 +33,20 @@ OsWL uses the following third-party libraries. This document lists each library, | [Micrometer Prometheus Registry](#micrometer-prometheus-registry) | Apache 2.0 | | [Flyway](#flyway) | Apache 2.0 | | [Spring Security OAuth2 Client](#spring-security-oauth2-client) | Apache 2.0 | -| [Qwen3-1.7B (GGUF)](#qwen3-17b-gguf) | Apache 2.0 | -| [OSV (Open Source Vulnerabilities)](#osv-open-source-vulnerabilities) | CC-BY 4.0 / CC0 1.0 (varies) | +| [Spring Session JDBC](#spring-session-jdbc) | Apache 2.0 | +| [ShedLock](#shedlock) | Apache 2.0 | +| [Qwen3.5-2B (GGUF)](#qwen35-2b-gguf) | Apache 2.0 | +| [Gemma 4 E2B (GGUF)](#gemma-4-e2b-gguf) | Apache 2.0 | +| [llama.cpp](#llamacpp) | MIT | +| [OSV (Open Source Vulnerabilities)](#osv-open-source-vulnerabilities) | Source-specific, including CC-BY-SA 4.0 | +| [GitHub Advisory Database](#github-advisory-database) | CC-BY 4.0 | +| [NIST NVD](#nist-national-vulnerability-database-nvd) | NIST / CVE source terms; redistribution review pending | | [FIRST.org EPSS](#firstorg-epss-exploit-prediction-scoring-system) | Free access, attribution requested | | [CISA KEV](#cisa-kev-known-exploited-vulnerabilities-catalog) | CC0 1.0 | -| [deps.dev](#depsdev) | CC-BY 4.0 (generated data) / Apache 2.0 (client repo) | +| [deps.dev](#depsdev) | CC-BY 4.0 (generated data); upstream terms for aggregated data | +| [CocoaPods specifications](#cocoapods-specifications) | MIT for specifications; pod licenses separate | +| [Bundled Conda mapping](#bundled-conda-to-pypi-name-mapping) | Combined BSD-style / BSD 3-Clause / MIT notices | +| [CVSS v4.0 Lookup Table (cvss-v4-calculator)](#cvss-v40-lookup-table-cvss-v4-calculator) | BSD 2-Clause | --- @@ -231,6 +241,36 @@ Licensed under the Apache License, Version 2.0 (the "License"). --- +### Spring Session JDBC + +- **Version:** Managed by Spring Boot 4.1.0 +- **Website:** https://spring.io/projects/spring-session +- **License:** Apache License, Version 2.0 +- **Used for:** Cluster-wide HTTP session storage in PostgreSQL, so a multi-instance deployment behind a load balancer keeps users logged in across instances and survives a single instance restarting. + +``` +Copyright 2014-2024 the original author or authors. + +Licensed under the Apache License, Version 2.0 (the "License"). +``` + +--- + +### ShedLock + +- **Version:** 7.7.0 (shedlock-spring, shedlock-provider-jdbc-template) +- **Website:** https://github.com/lukas-krecan/ShedLock +- **License:** Apache License, Version 2.0 +- **Used for:** Cluster-wide lock ensuring each `@Scheduled` job (nightly monitoring, deferral expiry, trash cleanup) runs on exactly one instance even when OsWL is deployed with multiple instances. + +``` +Copyright 2009-2024 the original author(s) + +Licensed under the Apache License, Version 2.0 (the "License"). +``` + +--- + ### Jackson - **Version:** Managed by Spring Boot 4.1.0 @@ -381,9 +421,28 @@ all copies or substantial portions of the Software. --- -## Frontend Dependencies (CDN) +### Caffeine + +- **Version:** 3.2.4 +- **Website:** https://github.com/ben-manes/caffeine +- **License:** Apache License, Version 2.0 +- **Used for:** High-performance in-memory query cache for read-heavy configuration data (license policy, role templates, settings). + +``` +Copyright 2015 Ben Manes. All Rights Reserved. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + https://www.apache.org/licenses/LICENSE-2.0 +``` + +--- + +## Vendored Frontend Dependencies -These libraries are loaded at runtime from public CDNs and are not bundled inside the JAR artifact. +Gradle downloads pinned versions of these libraries into `src/main/resources/static/js/vendor/`. They are packaged in the JAR and served locally from `/js/vendor/`; application pages do not load them from a runtime CDN. ### Alpine.js @@ -485,50 +544,128 @@ all copies or substantial portions of the Software. --- -## Bundled AI Models +## Embedded AI Runtime and Models + +Runtime binaries and model weights are optional downloads, excluded from the source repository, +Docker build context and released JAR. The JAR includes this notice and the Apache 2.0 text. +Inference runs locally. Installation from upstream is a separate network operation. + +### Qwen3.5-2B (GGUF) + +- **Role:** Default CPU model; replaces the previous Qwen3-1.7B automatic download. +- **Publisher:** Alibaba Cloud / Qwen team. +- **Upstream:** https://huggingface.co/Qwen/Qwen3.5-2B +- **License:** Apache License, Version 2.0; full text below. +- **Quantization:** Unsloth AI GGUF Q4_K_M. OsWL does not fine-tune or modify the downloaded bytes. +- **Source revision:** `unsloth/Qwen3.5-2B-GGUF@f6d5376be1edb4d416d56da11e5397a961aca8ae` +- **File:** `model/Qwen/Qwen3.5-2B-Q4_K_M.gguf`, 1280835840 bytes. +- **SHA256:** `aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223` +- **Pinned download:** https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/resolve/f6d5376be1edb4d416d56da11e5397a961aca8ae/Qwen3.5-2B-Q4_K_M.gguf + +### Gemma 4 E2B (GGUF) -Unlike the libraries above, model weights are not source code and are not covered by a -uniform "open source" regime — each model below is listed with its actual license, which -may impose obligations beyond a copyright notice. +- **Role:** Optional CPU model, installed manually; replaces Gemma 3 1B in the refreshed local installation. +- **Publisher:** Google DeepMind. +- **Upstream:** https://huggingface.co/google/gemma-4-E2B-it +- **License:** Apache License, Version 2.0, as stated in the Gemma 4 model card and https://ai.google.dev/gemma/apache_2 . + This entry is specifically for Gemma 4, not the distinct terms of earlier Gemma releases. +- **Quantization:** Unsloth AI GGUF Q4_K_M. OsWL does not fine-tune or modify the downloaded bytes. +- **Source revision:** `unsloth/gemma-4-E2B-it-GGUF@0314792d7f1f7e229411f620751375812bb9faf2` +- **File:** `model/Gemma/gemma-4-E2B-it-Q4_K_M.gguf`, 3106738272 bytes. +- **SHA256:** `740185b21d22ceb83a11c3aa62ad5842ef32c70f6096d756bbee85a1e4ec34b8` +- **Pinned download:** https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/resolve/0314792d7f1f7e229411f620751375812bb9faf2/gemma-4-E2B-it-Q4_K_M.gguf -### Qwen3-1.7B (GGUF) +Apache 2.0 permits redistribution subject to its conditions, including supplying the license, +retaining applicable copyright/attribution notices and carrying forward any upstream NOTICE +content when provided. Preserve the quantization provenance above. Do not represent these weights +as OsWL-authored or imply endorsement by Qwen, Google or Unsloth. -- **Version:** Qwen3-1.7B, quantized to GGUF (Q4_K_M) -- **Publisher:** Alibaba Cloud (Qwen team) -- **Website:** https://github.com/QwenLM/Qwen3 -- **License:** Apache License, Version 2.0 — full text below under [Apache License 2.0 — Full Text](#apache-license-20--full-text) -- **Distribution:** Not bundled in the git repository or build artifacts. OsWL downloads the official `ggml-org/Qwen3-1.7B-GGUF` file `Qwen3-1.7B-Q4_K_M.gguf` directly from Hugging Face (over plain HTTPS, verifying its SHA256 against the value below) the first time a user clicks **Start** on Embedded AI with no model present, or in the background shortly after boot (see [Embedded AI](docs/Embedded-AI.md)), storing it at `embedded-ai/qwen3-1.7b-q4_k_m.gguf`. Nothing is downloaded in air-gapped mode — those hosts place the file themselves. Operators may point `OSWL_EMBEDDED_DEFAULT_MODEL_URL` at a self-hosted byte-identical mirror instead; Apache 2.0 permits that redistribution, no modifications are made to the model weights beyond the upstream GGUF quantization already noted above, and this notice plus the included license text and upstream attribution satisfy its requirements. Permissively licensed, so mirroring and auto-fetching it carries no obligation beyond this notice. -- **SHA256:** `d2387ca2dbfee2ffabce7120d3770dadca0b293052bc2f0e138fdc940d9bc7b5` — must always match `oswl.ai.embedded.default-model-sha256` (`EmbeddedAiService`'s default); if one changes without the other, downloads fail integrity verification. +The old GitHub `models-v1` asset is Qwen3-1.7B and is not the new default. +A new mirror must be a verified byte-identical copy of the relevant pinned file and accompany +the license and attribution notices. This change does not publish new model assets. +Custom/older weights retain their own licenses; these entries do not relicense them. + +### llama.cpp + +- **Publisher:** The ggml authors. +- **Source:** https://github.com/ggml-org/llama.cpp +- **License:** MIT. +- **Validated local runtime:** b10068, commit `571d0d540`; operators supply an OS/architecture-compatible build in `embedded-ai/llama/`. +- **Distribution:** Not bundled in the repository or JAR. If packaging runtime binaries separately, + preserve this full license and the licenses/notices of all included libraries (for example, + an OpenMP runtime); this MIT notice alone does not cover every binary in a vendor archive. ``` -Copyright Alibaba Cloud. Licensed under the Apache License, Version 2.0 (the "License"); -you may not use this file except in compliance with the License. You may obtain a copy -of the License at https://www.apache.org/licenses/LICENSE-2.0 +MIT License + +Copyright (c) 2023-2026 The ggml authors + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. ``` --- ## External Data Sources (Vulnerability / Threat Intelligence Feeds) -Unlike the libraries and models above, the entries below are **data, not code** — consumed live -by `OsvClient`/`DepsDevClient`/`EpssClient`/`KevCatalogService` when air-gapped mode is off, and -by the `oswl-vdb` builder CLI (E5, `com.salkcoding.oswl.vdb`) when constructing an offline -snapshot bundle for air-gapped instances. None of this data is bundled in the git repository or -build artifacts; it is fetched over HTTPS at scan time or at bundle-build time. +The notices below distinguish remotely acquired data from bundled reference resources. +Online clients and the `oswl-vdb` builder acquire data under the relevant provider's terms. +Conda name mappings and the CVSS lookup table are already included in build resources. +This notice does not grant rights in upstream material or establish that every existing +snapshot/export preserves the attribution required for redistribution. Preserve record-level +origin, license links, supplied copyright notices and modification history with redistributed +data. Review date: 2026-09-07; unresolved permissions are identified explicitly below. ### OSV (Open Source Vulnerabilities) - **Website:** https://osv.dev/ · bulk dumps: `https://storage.googleapis.com/osv-vulnerabilities//all.zip` -- **License:** Varies by upstream advisory source, documented per-ecosystem at - https://google.github.io/osv.dev/data/. For the ecosystems OsWL supports: **npm, Maven, - RubyGems, NuGet** entries originate from the **GitHub Advisory Database (CC-BY 4.0)**; **PyPI** - additionally draws from the PyPI Advisory Database and the Python Software Foundation Database - (both **CC-BY 4.0**); **Go** from the Go Vulnerability Database (**CC-BY 4.0**); **crates.io** - from the RustSec Advisory Database (**CC0 1.0**, public domain). +- **License:** Varies by original source, not merely by ecosystem. Consult the + [OSV source catalog](https://google.github.io/osv.dev/data/) and the source's own license. + GitHub Advisory Database, PyPA advisory data and Go `/data/` use CC-BY 4.0. + [RustSec](https://github.com/rustsec/advisory-db/blob/main/LICENSE.txt) defaults to CC0, + but imported GHSA records use CC-BY 4.0 with record-specific attribution. + [Ubuntu Security Notices](https://github.com/canonical/ubuntu-security-notices/blob/main/LICENSE) + use CC-BY-SA 4.0. No blanket redistribution clearance for Debian/Alpine-derived data + was established in this review. OSV access does not replace upstream permissions. - **Used for:** Live per-component vulnerability lookups (`OsvClient`) and, in `oswl-vdb build`, bulk re-indexing of the ecosystem `all.zip` dumps into `osv.jsonl` snapshot entries. -- **Attribution:** CC-BY 4.0 requires attribution to the original source; this notice plus OSV's - own `id`/`aliases` fields preserved verbatim in every re-indexed entry satisfy that. +- **Attribution:** Credit OSV and the original advisory publisher; retain supplied notices, + source and license links, and indicate transformations. IDs alone do not establish compliance. + Apply CC-BY-SA obligations to qualifying adaptations; do not relabel all data as OsWL's MIT code. + +### GitHub Advisory Database + +- **Source / license:** [GitHub Advisory Database — CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md). +- **Used for:** Direct `GitHubAdvisoryClient` queries as well as advisories surfaced through OSV. +- **Attribution:** GitHub Advisory Database and the contributors identified by the source; + preserve advisory URL, license and supplied attribution when sharing transformed records. + +### NIST National Vulnerability Database (NVD) + +- **Source:** https://nvd.nist.gov/ · API: https://nvd.nist.gov/developers/vulnerabilities +- **Used for:** CVE details and CPE-based advisory lookup (`NvdClient`). +- **Terms:** Consult [NIST copyright and licensing statements](https://www.nist.gov/open/copyright-fair-use-and-licensing-statements-srd-data-software-and-technical-series-publications) + and the applicable NVD/CVE source terms. A U.S. government publisher does not establish a + CC0 license for every incorporated third-party record or referenced publication. The NVD-specific + terms pages did not expose sufficient content during this review; blanket redistribution + permission for every incorporated field remains unverified. +- **Attribution / non-endorsement:** Data source: NIST NVD. This product uses data from the + NVD API but is not endorsed or certified by the NVD. ### FIRST.org EPSS (Exploit Prediction Scoring System) @@ -539,14 +676,17 @@ build artifacts; it is fetched over HTTPS at scan time or at bundle-build time. **not** shared per that FAQ, only the published per-CVE scores OsWL consumes. - **Used for:** Live per-CVE probability-of-exploitation scores (`EpssClient`) and, in `oswl-vdb build`, the full bulk CSV. -- **Attribution:** This notice + preserving FIRST.org as the named source satisfies the - attribution request. +- **Attribution:** FIRST.org EPSS; preserve score date and model version when supplied. + Public access and requested attribution do not establish unrestricted dataset redistribution. + No explicit SPDX data license or blanket commercial redistribution grant was verified in + the published FAQ/data pages; confirm terms before distributing a score database to others. ### CISA KEV (Known Exploited Vulnerabilities Catalog) - **Website:** https://www.cisa.gov/known-exploited-vulnerabilities-catalog -- **License:** **CC0 1.0** (public domain) — a work of the U.S. federal government, mirrored - under CC0 at https://github.com/cisagov/kev-data. +- **License:** **CC0 1.0**, expressly published in the + [CISA KEV data repository license](https://github.com/cisagov/kev-data/blob/develop/LICENSE). + Linked third-party material and CISA/DHS marks are not licensed by that dedication. - **Used for:** Live KEV-listed flagging (`KevCatalogService`) and, in `oswl-vdb build`, the full bulk JSON feed. @@ -554,30 +694,83 @@ build artifacts; it is fetched over HTTPS at scan time or at bundle-build time. - **Website:** https://deps.dev/ · API: https://docs.deps.dev/api/v3/ · source: https://github.com/google/deps.dev -- **License:** The deps.dev README states: *"deps.dev generates additional data, including - resolved dependencies, advisory statistics, associations between entities, etc. This generated - data is available under a **CC-BY 4.0** license."* This covers the derived fields OsWL consumes - (`licenses`, `advisoryKeys`, resolved version/dependency data). Advisory content itself - (GHSA title/CVSS surfaced via `GetAdvisory`) originates from OSV/GHSA and is independently - CC-BY 4.0 per the OSV entry above. The raw registry fields deps.dev merely aggregates (not - generates) have no independently stated license and inherit whatever terms the origin registry - applies. Access to the API itself is governed by the - [Google APIs Terms of Service](https://developers.google.com/terms), which explicitly permits - caching: *"Clients are expressly permitted to cache data served by the API."* The deps.dev - **client repository's own code** (not the data) is Apache 2.0. +- **License:** The [deps.dev README](https://github.com/google/deps.dev#readme) licenses generated + data, including resolved dependencies and advisory statistics, under **CC-BY 4.0**. + Aggregated registry/advisory content remains subject to its original terms: do not infer that + every `licenses` or `advisoryKeys` field and referenced record has been relicensed. + The README permits API caching; API use is also subject to the + [Google APIs Terms of Service](https://developers.google.com/terms). + The repository's code is Apache 2.0; this does not license the hosted backend or all its data. - **Used for:** Live per-version license/advisory-key lookups and Scorecard scores (`DepsDevClient`) and, in `oswl-vdb build`, targeted `GetVersion`/`GetAdvisory` calls against a - wanted-list (E6) — deps.dev has no bulk dump, so this is the only viable ingestion path (E5.2). -- **Attribution:** This notice + the OSV/GHSA attribution above satisfies CC-BY 4.0 for the - generated and advisory data. deps.dev-derived fields are used to power OsWL's own analysis - output, not redistributed as a standalone dataset. + wanted-list. The provider also documents a BigQuery dataset in its [FAQ](https://docs.deps.dev/faq/); + availability is not a grant to redistribute every underlying source. +- **Attribution:** deps.dev / Google and the original data publishers, source and license URLs, + and an indication of transformations. Existing offline snapshots require the same review as + other exported data. This notice alone does not certify their attribution completeness. + +### CocoaPods specifications + +- **Source / license:** [CocoaPods Specs](https://github.com/CocoaPods/Specs#readme) states that + the specifications are under the [CocoaPods MIT license](https://github.com/CocoaPods/CocoaPods/blob/master/LICENSE). +- **Used for:** Repository and package-license metadata (`CocoaPodsSpecsClient`). Retain the + applicable MIT copyright and permission notice when redistributing substantial specification + content. Each actual pod's source code retains its own license; a podspec is not permission + to redistribute the package under MIT. + +### Bundled Conda-to-PyPI name mapping + +- **Resource:** `src/main/resources/conda/grayskull-pypi-mapping.json`. +- **Origin:** `mappings/pypi/grayskull_pypi_mapping.json` from `regro/cf-graph-countyfair`, now + [conda-forge/conda-forge-bot-data](https://github.com/conda-forge/conda-forge-bot-data). + This is not the separate Grayskull program's Apache-licensed source. +- **License:** The upstream `License` contains a Columbia University BSD-style notice, + Tick-my-feedstocks and Rever BSD 3-Clause notices, and a Doctr MIT notice. Preserve the + [complete upstream text shipped with OsWL](src/main/resources/META-INF/licenses/conda-forge-bot-data-LICENSE.txt). + Do not replace the combined/custom text with an assumed single SPDX identifier. +- **Copyright:** © 2018 Board of Trustees of Columbia University in the city of New York; + © 2017 Peter M. Landwehr; © 2017 Anthony Scopatz; © 2016 Aaron Meurer, Gil Forsyth. +- **Provenance:** License text retrieved from commit + `fd0dfed0d43fbb084f683d2c00473a887b645d69` on 2026-09-07; this is the license revision, + **not a verified revision of the bundled mapping**. The mapping's original commit and any + additional upstream-data terms remain to be established before claiming complete provenance. + Existing mapping SHA-256: `345402a491deabb648ddbb60a5c6708e0d99c69a99d11e5d8cd64a1d495ea2bd`. + +### CVSS v4.0 Lookup Table (cvss-v4-calculator) + +- **Source:** https://github.com/FIRSTdotorg/cvss-v4-calculator (`cvss_lookup.js`, `max_composed.js`, + `max_severity.js`) · publisher: FIRST.org, Inc., Red Hat, and contributors +- **License:** BSD 2-Clause +- **Note:** Unlike the other entries in this section, this is not a live-queried feed — the + 270-entry MacroVector→score table and its supporting per-equivalence-class data are vendored + verbatim as `src/main/resources/cvss/cvss-v4-lookup.json`, converted from the source `.js` object + literals to JSON with no values changed. `service/cvss/CvssV4Calculator.java` reimplements the + surrounding scoring algorithm (MacroVector derivation, severity-distance interpolation) in Java + from the same reference source, since the algorithm itself is not data that can be vendored as a + file. +- **Used for:** CVSS v4.0 Base/Environmental scoring (`CvssV4Calculator`) when a CVE supplies a + `CVSS:4.0/...` vector. + +``` +Copyright (c) 2023 FIRST.ORG, Inc., Red Hat, and contributors + +Redistribution and use in source and binary forms, with or without +modification, are permitted provided that the following conditions are met: + +1. Redistributions of source code must retain the above copyright notice, this + list of conditions and the following disclaimer. + +2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. +``` --- ## Apache License 2.0 — Full Text The following libraries and models are licensed under the Apache License, Version 2.0: -Spring Boot, Spring Framework, Spring Security, Spring Data JPA, Thymeleaf, thymeleaf-extras-springsecurity6, springdoc-openapi, Jackson, GreenMail, Qwen3-1.7B. +Spring Boot, Spring Framework, Spring Security, Spring Data JPA, Thymeleaf, thymeleaf-extras-springsecurity6, springdoc-openapi, Jackson, GreenMail, Spring Session JDBC, ShedLock, Qwen3.5-2B, Gemma 4 E2B. ``` Apache License @@ -693,3 +886,14 @@ Spring Boot, Spring Framework, Spring Security, Spring Data JPA, Thymeleaf, thym END OF TERMS AND CONDITIONS ``` + +## Additional rule and browser notification libraries + +Versions are resolved in the generated OSS manifest and displayed on `/oss-notices`. + +- **RE2/J**: BSD 3-Clause. [Upstream license/project](https://github.com/google/re2j/blob/re2j-1.8/LICENSE). +- **web-push**: MIT. [Upstream license/project](https://github.com/web-push-libs/webpush-java). +- **Bouncy Castle**: MIT. [Upstream license/project](https://www.bouncycastle.org/licence.html). +- **jose4j**: Apache 2.0. [Upstream license/project](https://bitbucket.org/b_c/jose4j). + +RE2/J derives from the Go RE2 implementation, copyright 2009 The Go Authors. Bouncy Castle is copyright 2000–2026 The Legion of the Bouncy Castle Inc.; its license is interpreted as MIT by the publisher. The distributed dependency JARs retain their upstream notices. diff --git a/build.gradle b/build.gradle index 2c0e9ac3..bbe33bf9 100644 --- a/build.gradle +++ b/build.gradle @@ -8,9 +8,8 @@ plugins { } group = 'com.salkcoding' -// x-release-please-start-version -version = '1.0.4' -// x-release-please-end +// Release tags and the production JAR use this exact version, including hotfix revisions. +version = '1.0.5.1' java { toolchain { @@ -31,13 +30,42 @@ sourceSets { compileClasspath += sourceSets.local.output runtimeClasspath += sourceSets.local.output } + // Playwright-driven UI/accessibility tests against a live app instance. + // Deliberately separate from `test`: needs a browser download (hundreds of MB) and a real + // Spring Boot boot, so it must never run as part of the default `./gradlew test`/`check`. + uiTest { + java { + srcDir 'src/uiTest/java' + } + // resources default to src/uiTest/resources by convention — no extra srcDir needed. + compileClasspath += sourceSets.main.compileClasspath + sourceSets.main.output + sourceSets.local.output + runtimeClasspath += sourceSets.main.runtimeClasspath + sourceSets.main.output + sourceSets.local.output + } +} + +configurations { + uiTestImplementation.extendsFrom testImplementation + uiTestRuntimeOnly.extendsFrom testRuntimeOnly } repositories { mavenCentral() + // Spring Security SAML 7+ pulls OpenSAML 5.x from the Shibboleth repository. + maven { url 'https://build.shibboleth.net/maven/releases/' } } dependencies { + implementation 'com.google.re2j:re2j:1.8' + implementation('nl.martijndwars:web-push:5.1.2') { + exclude group: 'org.bouncycastle', module: 'bcprov-jdk15on' + exclude group: 'org.apache.httpcomponents', module: 'httpasyncclient' + exclude group: 'org.asynchttpclient', module: 'async-http-client' + } + implementation 'org.bouncycastle:bcprov-jdk18on' + implementation 'org.bitbucket.b_c:jose4j:0.9.6' + // Bytecode call-graph analysis + implementation 'org.ow2.asm:asm:9.7' + implementation 'org.springframework.boot:spring-boot-starter-data-jpa' implementation 'org.springframework.boot:spring-boot-starter-aspectj' implementation 'org.springframework.boot:spring-boot-starter-thymeleaf' @@ -45,6 +73,9 @@ dependencies { implementation 'org.springframework.boot:spring-boot-starter-validation' implementation 'org.springframework.boot:spring-boot-starter-security' implementation 'org.springframework.boot:spring-boot-starter-mail' + + // In-memory query cache for read-heavy configuration data + implementation 'com.github.ben-manes.caffeine:caffeine' implementation 'org.thymeleaf.extras:thymeleaf-extras-springsecurity6' implementation 'org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.3' @@ -54,13 +85,22 @@ dependencies { // CycloneDX SBOM export/import (spec 1.6) implementation 'org.cyclonedx:cyclonedx-core-java:13.0.0' implementation 'org.springframework.boot:spring-boot-starter-actuator' - // Prometheus scrape endpoint (/actuator/prometheus) — roadmap #13 ops foundation + // Prometheus scrape endpoint (/actuator/prometheus) implementation 'io.micrometer:micrometer-registry-prometheus' // OIDC SSO (Okta / Entra) — optional, activated only when a provider is configured implementation 'org.springframework.boot:spring-boot-starter-oauth2-client' - // Flyway DB migrations (prod-profile gated) — roadmap #13 + // SAML 2.0 SSO (Okta / Entra ID / AD FS) — optional, activated only when IdP metadata is configured + implementation 'org.springframework.security:spring-security-saml2-service-provider' + // Flyway DB migrations (prod-profile gated) implementation 'org.flywaydb:flyway-core' implementation 'org.flywaydb:flyway-database-postgresql' + // Horizontal scaling / HA: cluster-wide HTTP sessions so a multi-instance + // deployment behind a load balancer doesn't drop auth on failover. + implementation 'org.springframework.session:spring-session-jdbc' + // Cluster-wide dedup for @Scheduled jobs — without this, 2 instances would + // each run the nightly monitoring/defer-expiry/trash-cleanup jobs independently. + implementation 'net.javacrumbs.shedlock:shedlock-spring:7.7.0' + implementation 'net.javacrumbs.shedlock:shedlock-provider-jdbc-template:7.7.0' compileOnly 'org.projectlombok:lombok' developmentOnly 'org.springframework.boot:spring-boot-devtools' @@ -75,6 +115,14 @@ dependencies { testCompileOnly 'org.projectlombok:lombok' testRuntimeOnly 'org.junit.platform:junit-platform-launcher' testAnnotationProcessor 'org.projectlombok:lombok' + + // Headless-browser UI/accessibility verification. Java-native: no + // package.json/npm needed, same "standalone binary, self-managed" spirit as the Tailwind CLI + // and esbuild downloads below — Playwright's own CLI fetches its browser binaries on demand. + uiTestImplementation 'com.microsoft.playwright:playwright:1.52.0' + uiTestImplementation 'com.deque.html.axe-core:playwright:4.10.1' + uiTestCompileOnly 'org.projectlombok:lombok' + uiTestAnnotationProcessor 'org.projectlombok:lombok' } tasks.withType(JavaCompile).configureEach { @@ -99,7 +147,7 @@ tasks.named('bootRun') { dependsOn compileLocalJava doFirst { def os = org.gradle.internal.os.OperatingSystem.current() - def script = os.isWindows() ? file('scripts/check-java.ps1') : file('scripts/check-java.sh') + def script = os.isWindows() ? file('scripts/dev/check-java.ps1') : file('scripts/dev/check-java.sh') if (script.exists()) { def cmd = os.isWindows() ? ['powershell', '-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', script.absolutePath] @@ -135,15 +183,24 @@ tasks.named('bootJar') { tasks.register('verifyProdJar') { group = 'verification' description = 'Fails if local-only classes (e.g. TestDataController) are packaged in bootJar.' - dependsOn bootJar + dependsOn bootJar, compileLocalJava doLast { - def jarFile = tasks.named('bootJar').get().archiveFile.get().asFile - def forbidden = ['com/salkcoding/oswl/controller/TestDataController.class'] + def jarFile = providers.gradleProperty('verifyJar').isPresent() + ? file(providers.gradleProperty('verifyJar').get()) + : tasks.named('bootJar').get().archiveFile.get().asFile + def forbidden = new HashSet() + sourceSets.local.output.classesDirs.files.each { root -> + fileTree(root).matching { include '**/*.class' }.files.each { compiled -> + forbidden.add(root.toPath().relativize(compiled.toPath()).toString().replace('\\', '/')) + } + } + if (forbidden.isEmpty()) throw new GradleException('No compiled local classes to verify.') jarFile.withInputStream { input -> def zip = new ZipInputStream(input) def entry while ((entry = zip.nextEntry) != null) { - if (forbidden.any { entry.name == it }) { + def classPath = entry.name.replaceFirst('^BOOT-INF/classes/', '') + if (forbidden.contains(classPath)) { throw new GradleException("Production JAR must not contain ${entry.name}. Use src/local/java and bootRun classpath only.") } } @@ -160,6 +217,38 @@ tasks.named('test') { dependsOn compileLocalJava } +tasks.named('compileUiTestJava') { + dependsOn compileLocalJava +} + +// ───────────────────────────────────────────────────────────────────────────── +// Playwright + axe-core UI verification +// +// `./gradlew uiTest` boots the real app (@SpringBootTest RANDOM_PORT) and drives it with a +// headless Chromium via Playwright. Kept out of `test`/`check` on purpose — see sourceSets.uiTest +// above. In an offline/air-gapped build environment, pre-populate the browser cache and point +// PLAYWRIGHT_BROWSERS_PATH at it instead of relying on installPlaywrightBrowsers' download. +// ───────────────────────────────────────────────────────────────────────────── +tasks.register('installPlaywrightBrowsers', JavaExec) { + description = 'Downloads the Playwright Chromium browser binary into the local Playwright cache (cached; run once or after a Playwright version bump).' + group = 'verification' + classpath = configurations.uiTestRuntimeClasspath + mainClass = 'com.microsoft.playwright.CLI' + args = ['install', 'chromium'] +} + +tasks.register('uiTest', Test) { + description = 'Runs Playwright-driven UI and axe-core accessibility tests against a live app instance. Not part of test/check — run explicitly.' + group = 'verification' + dependsOn 'installPlaywrightBrowsers' + testClassesDirs = sourceSets.uiTest.output.classesDirs + classpath = sourceSets.uiTest.runtimeClasspath + useJUnitPlatform() + shouldRunAfter test + // Isolated URL rewrites let pipeline fixtures use their loopback Git server. + environment 'GIT_CONFIG_GLOBAL', layout.buildDirectory.file('uitest/git-config').get().asFile.absolutePath +} + jacoco { toolVersion = '0.8.15' } @@ -185,6 +274,7 @@ jacocoTestReport { '**/web/interceptor/**', '**/aop/**', '**/scheduler/**', + '**/logging/**', '**/domain/**', '**/spec/**', ]) @@ -252,7 +342,9 @@ tasks.register('buildTailwindCss', Exec) { inputs.file(inputCss) inputs.file(configJs) inputs.dir('src/main/resources/templates') - inputs.dir('src/main/resources/static/js') + // Sources only — the generated .min.js files (minifyJs) mirror them and would + // otherwise overlap with this task's input directory. + inputs.files(fileTree('src/main/resources/static/js') { exclude '**/*.min.js' }) outputs.file(outCss) doFirst { @@ -310,7 +402,107 @@ tasks.register('downloadVendorJs') { processResources.dependsOn 'downloadVendorJs' // ───────────────────────────────────────────────────────────────────────────── -// H2/H3: OSS notices / THIRD_PARTY_LICENSES.md version single-sourcing. +// Custom JS minification +// +// Minifies src/main/resources/static/js/**/*.js (vendor/ excluded — vendor files +// already ship minified from their CDNs) to .min.js next to each source. +// Templates reference the .min.js files; the unminified sources stay the editable +// originals. The generated .min.js files are gitignored (build output, same as +// tailwind.css). +// +// Uses the esbuild standalone binary (no Node.js required), downloaded from the +// npm registry to build/tools/ on first build — same pattern as the Tailwind CLI. +// ───────────────────────────────────────────────────────────────────────────── +ext { + esbuildVersion = '0.28.1' + esbuildToolDir = layout.buildDirectory.dir("tools/esbuild-${esbuildVersion}").get().asFile +} + +static def esbuildPackageName() { + def os = System.getProperty('os.name').toLowerCase() + def arch = System.getProperty('os.arch').toLowerCase() + def aarch = (arch == 'aarch64' || arch == 'arm64') + if (os.contains('win')) { + return aarch ? 'win32-arm64' : 'win32-x64' + } else if (os.contains('mac')) { + return aarch ? 'darwin-arm64' : 'darwin-x64' + } else { + return aarch ? 'linux-arm64' : 'linux-x64' + } +} + +static def esbuildBinaryFile(File toolDir) { + // The npm tgz extracts under package/; the binary is package/esbuild.exe on + // Windows and package/bin/esbuild elsewhere. + return System.getProperty('os.name').toLowerCase().contains('win') + ? new File(toolDir, 'unpacked/package/esbuild.exe') + : new File(toolDir, 'unpacked/package/bin/esbuild') +} + +tasks.register('downloadEsbuild') { + description = 'Downloads the esbuild standalone binary from the npm registry (cached).' + group = 'frontend' + def pkg = esbuildPackageName() + def tgz = new File(esbuildToolDir, "${pkg}.tgz") + def marker = esbuildBinaryFile(esbuildToolDir) + outputs.file(marker) + doLast { + if (!marker.exists()) { + esbuildToolDir.mkdirs() + def url = "https://registry.npmjs.org/@esbuild/${pkg}/-/${pkg}-${esbuildVersion}.tgz" + logger.lifecycle("[esbuild] downloading ${url}") + URI.create(url).toURL().withInputStream { i -> tgz.withOutputStream { o -> o << i } } + def unpacked = new File(esbuildToolDir, 'unpacked') + unpacked.mkdirs() + project.copy { + from(tarTree(resources.gzip(tgz))) + into(unpacked) + } + if (!System.getProperty('os.name').toLowerCase().contains('win')) { + marker.setExecutable(true, false) + } + logger.lifecycle("[esbuild] extracted to ${marker}") + } + } +} + +tasks.register('minifyJs') { + description = 'Minifies custom static JS (vendor excluded) to .min.js next to each source.' + group = 'frontend' + dependsOn 'downloadEsbuild' + + def jsDir = file('src/main/resources/static/js') + def sources = fileTree(jsDir) { + include '**/*.js' + exclude 'vendor/**' + exclude '**/*.min.js' + } + def minified = sources.files.collect { f -> new File(f.parent, f.name.replaceAll(/\.js$/, '.min.js')) } + + inputs.files(sources) + outputs.files(minified) + + doLast { + def bin = esbuildBinaryFile(esbuildToolDir) + sources.files.each { src -> + def out = new File(src.parent, src.name.replaceAll(/\.js$/, '.min.js')) + // ProcessBuilder rather than an Exec task so one task handles all files; + // project.exec was removed in Gradle 9. + def proc = new ProcessBuilder(bin.absolutePath, src.absolutePath, '--minify', + "--outfile=${out.absolutePath}".toString()) + .redirectErrorStream(true).start() + def output = proc.inputStream.text + if (proc.waitFor() != 0) { + throw new GradleException("esbuild failed for ${src}: ${output}") + } + } + } +} + +processResources.dependsOn 'minifyJs' + +// ───────────────────────────────────────────────────────────────────────────── +// OSS notices / THIRD_PARTY_LICENSES.md version single-sourcing. // This is version-SYNC automation, not dependency-DISCOVERY — a newly added // library must be added to both maps below, or it is simply not tracked. // ───────────────────────────────────────────────────────────────────────────── @@ -333,14 +525,23 @@ ext.trackedOssCoordinates = [ h2 : 'com.h2database:h2', postgresqlJdbc : 'org.postgresql:postgresql', lombok : 'org.projectlombok:lombok', + caffeine : 'com.github.ben-manes.caffeine:caffeine', cyclonedx : 'org.cyclonedx:cyclonedx-core-java', packageurl : 'com.github.package-url:packageurl-java', micrometer : 'io.micrometer:micrometer-registry-prometheus', flyway : 'org.flywaydb:flyway-core', springOauth2 : 'org.springframework.security:spring-security-oauth2-client', + springSaml2Provider : 'org.springframework.security:spring-security-saml2-service-provider', + springSessionJdbc : 'org.springframework.session:spring-session-jdbc', + shedlock : 'net.javacrumbs.shedlock:shedlock-spring', + re2j : 'com.google.re2j:re2j', + webPush : 'nl.martijndwars:web-push', + bouncyCastle : 'org.bouncycastle:bcprov-jdk18on', + jose4j : 'org.bitbucket.b_c:jose4j', ] tasks.register('generateOssManifest') { + inputs.file('build.gradle') description = 'Resolves runtime dependency versions and writes the single OSS version manifest ' + 'consumed by the /oss-notices page and the THIRD_PARTY_LICENSES.md sync task.' group = 'documentation' @@ -393,7 +594,7 @@ tasks.named('processResources') { // line, and whether that line is a literal version or a "Managed by X.Y.Z" phrase // (only the trailing version token is rewritten in the phrase case — see // syncThirdPartyLicenseVersions below). Sections not listed here (e.g. Qwen3-1.7B, which has -// its own G3 redistribution-notice lifecycle) are left completely untouched. +// its own redistribution-notice lifecycle) are left completely untouched. ext.thirdPartyVersionSections = [ 'Spring Boot / Spring Framework' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'Spring Security' : [key: 'springBootBomVersion', mode: 'bomPhrase'], @@ -406,6 +607,8 @@ ext.thirdPartyVersionSections = [ 'Micrometer Prometheus Registry' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'Flyway' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'Spring Security OAuth2 Client' : [key: 'springBootBomVersion', mode: 'bomPhrase'], + 'Spring Session JDBC' : [key: 'springBootBomVersion', mode: 'bomPhrase'], + 'ShedLock' : [key: 'shedlock', mode: 'literal'], 'Jackson' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'Logback Classic' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'SLF4J API' : [key: 'springBootBomVersion', mode: 'bomPhrase'], @@ -413,6 +616,7 @@ ext.thirdPartyVersionSections = [ 'H2 Database' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'PostgreSQL JDBC Driver' : [key: 'springBootBomVersion', mode: 'bomPhrase'], 'Project Lombok' : [key: 'springBootBomVersion', mode: 'bomPhrase'], + 'Caffeine' : [key: 'caffeine', mode: 'literal'], 'Alpine.js' : [key: 'alpine', mode: 'literal'], '@alpinejs/collapse' : [key: 'alpineCollapse', mode: 'literal'], 'Chart.js' : [key: 'chartjs', mode: 'literal'], @@ -422,7 +626,7 @@ ext.thirdPartyVersionSections = [ tasks.register('syncThirdPartyLicenseVersions') { description = 'Rewrites only the **Version:** lines in THIRD_PARTY_LICENSES.md from the OSS ' + - 'manifest (H2/H3) — no other prose (license text, distribution policy) is touched.' + 'manifest — no other prose (license text, distribution policy) is touched.' group = 'documentation' dependsOn 'generateOssManifest' doLast { @@ -482,7 +686,7 @@ tasks.register('syncThirdPartyLicenseVersions') { } tasks.register('vdbBuild', JavaExec) { - description = 'E5: runs the oswl-vdb CLI (build/verify/inspect offline vulnerability-DB bundles) — ' + + description = 'Runs the oswl-vdb CLI (build/verify/inspect offline vulnerability-DB bundles) — ' + 'see scripts/oswl-vdb/oswl-vdb.{sh,ps1} for thin wrapper scripts. ' + 'Example: ./gradlew vdbBuild --args="build --wanted wanted-list.jsonl --out bundle.zip"' group = 'application' diff --git a/deploy/README.md b/deploy/README.md new file mode 100644 index 00000000..706ed317 --- /dev/null +++ b/deploy/README.md @@ -0,0 +1,60 @@ +# Deployment files + +Run the commands below from the repository root. + +- [`docker/Dockerfile`](docker/Dockerfile) builds the application from source and packages its JAR in a JRE image. Its build context is the repository root. +- [`docker/compose.yml`](docker/compose.yml) runs the source-built application and PostgreSQL 18. The application profile defaults to `prod` in Compose; the supplied `.env.example` selects `local` explicitly. +- [`docker/compose.prod.yml`](docker/compose.prod.yml) is a separate, complete production configuration with PostgreSQL 15, loopback host-port publishing and log volumes. Use it by itself, not as an override layered over the other file. +- [`observability/grafana/oswl-dashboard.json`](observability/grafana/oswl-dashboard.json) is an importable dashboard, not a documentation page. + +## Build an image + +```sh +docker build -f deploy/docker/Dockerfile -t oswl:local . +``` + +The root `.dockerignore` controls the build context. Application profiles and database migrations stay under `src/main/resources/` because they are packaged in the JAR. + +## Run with Compose + +Keep actual `.env` and `.env.prod` files at the repository root. Only the templates moved. If you already have an environment file, keep it instead of copying over it. + +```sh +# First-time setup only: copy the template, then edit its values. +cp deploy/docker/.env.example .env +docker compose --env-file .env -f deploy/docker/compose.yml up -d --build +``` + +```sh +# First-time production setup only: copy the template, then fill every required value. +cp deploy/docker/.env.prod.example .env.prod +docker compose --env-file .env.prod -f deploy/docker/compose.prod.yml up -d --build +``` + +For production, the sample sets `SERVER_ADDRESS=0.0.0.0` inside the container while the host port remains bound to `127.0.0.1`. Prepare the database schema before startup: a new empty database can use `OSWL_FLYWAY_ENABLED=true` to run the supplied baseline and later migrations. Review existing schema/history before enabling Flyway on an existing installation. + +`--env-file` supplies Compose interpolation; each service also reads the same root file through its `env_file` setting. Shell variables can override interpolated values. Review the [production checklist](../docs/en/Production-Deployment-Checklist.md) before running an instance. + +## Existing installations + +Both files use `name: oswl` to retain the default project name of the original `Oswl` checkout instead of deriving `docker` from their new directory. Service names, database versions, volume keys, ports and profiles are unchanged. + +If your installation used another checkout directory name, `-p`, or `COMPOSE_PROJECT_NAME`, keep that original project name. Inspect `docker compose ls` and `docker volume ls` before switching commands; use `-p YOUR_EXISTING_PROJECT` with the new file path. A different project name can create new empty volumes instead of reconnecting the existing database. Do not remove existing volumes during this path migration. + +The two configurations retain different PostgreSQL major versions. Changing between them is not a database upgrade procedure. See [backup and restore](../docs/en/Backup-And-Restore.md). + +## Release and site publishing + +The [CI workflow](../.github/workflows/ci-cd.yml) publishes the production JAR to GitHub Releases. It does not publish a Docker image or deploy an application server. [Pages](../.github/workflows/pages.yml) publishes the landing site, and [Wiki sync](../.github/workflows/wiki-sync.yml) publishes English documentation. + +[English deployment guide](../docs/en/Production-Deployment-Checklist.md) | [한국어 배포 가이드](../docs/ko/Production-Deployment-Checklist.md) | [日本語デプロイガイド](../docs/ja/Production-Deployment-Checklist.md) + +## Release artifacts + +The release version is declared in `build.gradle`. OsWL uses exact numeric versions, including four-part hotfix versions such as `1.0.5.1`; release tags use the `v` prefix. + +Before tagging a reviewed commit, run `python .github/scripts/validate-release.py --tag v1.0.5.1`, the CI checks, and `./gradlew bootJar verifyProdJar`. The production artifact is `build/libs/oswl-1.0.5.1.jar`. The validator checks the changelog, SARIF version, translated release notes and landing/application translation keys. + +To publish the reviewed commit, create an annotated `v1.0.5.1` tag and push that tag to GitHub. The CI/CD workflow runs backend and browser checks for the tag, requires its version to match `build.gradle`, then creates a draft release, attaches the JAR and `SHA256SUMS`, and publishes it. A failed build or validation does not publish a release. Reruns can resume a draft; published assets are never overwritten automatically. Branch pushes and manual CI dispatches do not publish releases. + +Pages and Wiki remain separate workflows on `main`; publishing a binary release does not deploy a server or update those sites. See [release notes](../docs/en/Whats-New-v1.0.5.1.md) for upgrade requirements and data limitations. diff --git a/.env.example b/deploy/docker/.env.example similarity index 100% rename from .env.example rename to deploy/docker/.env.example diff --git a/.env.prod.example b/deploy/docker/.env.prod.example similarity index 71% rename from .env.prod.example rename to deploy/docker/.env.prod.example index 87e1c8e6..107fa5ef 100644 --- a/.env.prod.example +++ b/deploy/docker/.env.prod.example @@ -1,5 +1,5 @@ # Copy to .env.prod and fill real production secrets. Do NOT commit real secrets. -# See docs/Production-Deployment-Checklist.md +# See docs/en/Production-Deployment-Checklist.md # Postgres POSTGRES_DB=oswl @@ -17,11 +17,15 @@ OSWL_ENCRYPTION_KEY= # Optional: separate HMAC key for trusted-device cookie (recommended) # OSWL_TRUSTED_DEVICE_HMAC_KEY= +# Empty DB: enable Flyway to apply the supplied baseline and later migrations. +# Existing DB: review schema/history and back up before enabling. +OSWL_FLYWAY_ENABLED=false + # JVM profile SPRING_PROFILES_ACTIVE=prod -# Listen address inside the container (default 127.0.0.1; map host port in compose) -SERVER_ADDRESS=127.0.0.1 +# Listen on the container network; Compose separately publishes only host 127.0.0.1:8080. +SERVER_ADDRESS=0.0.0.0 # SMTP (use your production SMTP provider credentials) SMTP_HOST=smtp.example.com diff --git a/Dockerfile b/deploy/docker/Dockerfile similarity index 100% rename from Dockerfile rename to deploy/docker/Dockerfile diff --git a/deploy/docker/compose.prod.yml b/deploy/docker/compose.prod.yml new file mode 100644 index 00000000..c7ed474e --- /dev/null +++ b/deploy/docker/compose.prod.yml @@ -0,0 +1,63 @@ +# Preserve the original Oswl checkout project name; -p / COMPOSE_PROJECT_NAME can override it. +name: oswl +services: + db: + image: postgres:15 + restart: unless-stopped + env_file: + - ../../.env.prod + environment: + POSTGRES_DB: "${POSTGRES_DB}" + POSTGRES_USER: "${POSTGRES_USER}" + POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}" + volumes: + - db-data-prod:/var/lib/postgresql/data + # Cap container log growth (docker itself, not the app's own file log below). + logging: + driver: json-file + options: + max-size: "100m" + max-file: "10" + + app: + build: + context: ../.. + dockerfile: deploy/docker/Dockerfile + env_file: + - ../../.env.prod + environment: + DB_URL: "${DB_URL}" + DB_USERNAME: "${DB_USERNAME}" + DB_PASSWORD: "${DB_PASSWORD}" + OSWL_ENCRYPTION_KEY: "${OSWL_ENCRYPTION_KEY}" + SPRING_PROFILES_ACTIVE: "prod" + SERVER_ADDRESS: "${SERVER_ADDRESS:-127.0.0.1}" + JAVA_OPTS: "-Xms512m -Xmx1g" + SPRING_MAIL_HOST: "${SMTP_HOST}" + SPRING_MAIL_PORT: "${SMTP_PORT}" + SPRING_MAIL_USERNAME: "${SMTP_USER}" + SPRING_MAIL_PASSWORD: "${SMTP_PASS}" + SPRING_MAIL_PROPERTIES_MAIL_SMTP_AUTH: "true" + SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_ENABLE: "true" + # Rotating file log inside the container, mounted to a named volume below so + # it survives container recreation. OSWL_LOG_JSON opt-in via .env.prod (default false). + OSWL_LOG_DIR: "/var/log/oswl" + OSWL_LOG_JSON: "${OSWL_LOG_JSON:-false}" + volumes: + - oswl-logs-prod:/var/log/oswl + ports: + - "127.0.0.1:8080:8080" + depends_on: + - db + restart: unless-stopped + # Cap container stdout/stderr log growth (separate from the OSWL_LOG_DIR file + # log above — this is docker's own capture of the process's console output). + logging: + driver: json-file + options: + max-size: "100m" + max-file: "10" + +volumes: + db-data-prod: + oswl-logs-prod: diff --git a/docker-compose.yml b/deploy/docker/compose.yml similarity index 87% rename from docker-compose.yml rename to deploy/docker/compose.yml index 0c64dbc3..09dcf0c6 100644 --- a/docker-compose.yml +++ b/deploy/docker/compose.yml @@ -1,10 +1,11 @@ -version: '3.8' +# Preserve the original Oswl checkout project name; -p / COMPOSE_PROJECT_NAME can override it. +name: oswl services: db: image: postgres:18 restart: unless-stopped env_file: - - .env + - ../../.env environment: POSTGRES_DB: "${POSTGRES_DB:-oswl}" POSTGRES_USER: "${POSTGRES_USER:-oswl}" @@ -18,11 +19,13 @@ services: retries: 5 app: - build: . + build: + context: ../.. + dockerfile: deploy/docker/Dockerfile ports: - "8080:8080" env_file: - - .env + - ../../.env extra_hosts: - "host.docker.internal:host-gateway" environment: diff --git a/deploy/observability/grafana/oswl-dashboard.json b/deploy/observability/grafana/oswl-dashboard.json new file mode 100644 index 00000000..45f2e7d2 --- /dev/null +++ b/deploy/observability/grafana/oswl-dashboard.json @@ -0,0 +1,788 @@ +{ + "annotations": { + "list": [] + }, + "editable": true, + "fiscalYearStartMonth": 0, + "graphTooltip": 1, + "links": [], + "panels": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 10, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "linear", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "auto", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "none" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "s" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 0 + }, + "id": 1, + "options": { + "legend": { + "calcs": [ + "mean", + "max" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "desc" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "histogram_quantile(0.95, sum by (le) (rate(oswl_scan_duration_seconds_bucket[$__rate_interval])))", + "legendFormat": "p95", + "range": true, + "refId": "A" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum(rate(oswl_scan_duration_seconds_sum[$__rate_interval])) / sum(rate(oswl_scan_duration_seconds_count[$__rate_interval]))", + "legendFormat": "mean", + "range": true, + "refId": "B" + } + ], + "title": "Scan duration (p95 / mean)", + "type": "timeseries" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 10, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "stepAfter", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "never", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "none" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "none" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 0 + }, + "id": 2, + "options": { + "legend": { + "calcs": [ + "lastNotNull", + "max" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "none" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "oswl_quickimport_queue_depth", + "legendFormat": "queue depth", + "range": true, + "refId": "A" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "oswl_quickimport_running", + "legendFormat": "running imports", + "range": true, + "refId": "B" + } + ], + "title": "Quick Import queue depth / running imports", + "type": "timeseries" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 20, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "linear", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "never", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "normal" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "none" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 0, + "y": 8 + }, + "id": 3, + "options": { + "legend": { + "calcs": [ + "sum" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "desc" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum by (ecosystem) (increase(oswl_components_ingested_total[$__rate_interval]))", + "legendFormat": "{{ecosystem}}", + "range": true, + "refId": "A" + } + ], + "title": "Components ingested by ecosystem", + "type": "timeseries" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 10, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "linear", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "never", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "none" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "ops" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 8 + }, + "id": 4, + "options": { + "legend": { + "calcs": [ + "sum" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "desc" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum by (provider) (rate(oswl_ai_calls_total[$__rate_interval]))", + "legendFormat": "calls {{provider}}", + "range": true, + "refId": "A" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum by (provider, direction) (rate(oswl_ai_tokens_total[$__rate_interval]))", + "legendFormat": "tokens {{provider}} {{direction}}", + "range": true, + "refId": "B" + } + ], + "title": "AI calls / tokens", + "type": "timeseries" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "thresholds" + }, + "mappings": [], + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "currencyUSD" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 6, + "x": 0, + "y": 16 + }, + "id": 5, + "options": { + "colorMode": "value", + "graphMode": "area", + "justifyMode": "auto", + "orientation": "auto", + "percentChangeColorMode": "standard", + "reduceOptions": { + "calcs": [ + "lastNotNull" + ], + "fields": "", + "values": false + }, + "showPercentChange": false, + "textMode": "auto", + "wideLayout": true + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum(increase(oswl_ai_cost_usd_total[$__range]))", + "legendFormat": "estimated cost", + "range": true, + "refId": "A" + } + ], + "title": "AI estimated cost (dashboard range)", + "type": "stat" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "thresholds" + }, + "mappings": [], + "max": 1, + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "red", + "value": null + }, + { + "color": "yellow", + "value": 0.5 + }, + { + "color": "green", + "value": 0.9 + } + ] + }, + "unit": "percentunit" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 6, + "x": 6, + "y": 16 + }, + "id": 6, + "options": { + "minVizHeight": 75, + "minVizWidth": 75, + "orientation": "auto", + "showThresholdLabels": false, + "showThresholdMarkers": true, + "sizing": "auto" + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum(increase(oswl_gate_evaluations_total{outcome=\"pass\"}[$__range])) / sum(increase(oswl_gate_evaluations_total[$__range]))", + "legendFormat": "pass ratio", + "range": true, + "refId": "A" + } + ], + "title": "Gate pass ratio (dashboard range)", + "type": "gauge" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 10, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "linear", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "never", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "none" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + } + ] + }, + "unit": "ops" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 12, + "x": 12, + "y": 16 + }, + "id": 7, + "options": { + "legend": { + "calcs": [ + "sum" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "desc" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum by (outcome) (rate(oswl_gate_evaluations_total[$__rate_interval]))", + "legendFormat": "{{outcome}}", + "range": true, + "refId": "A" + } + ], + "title": "Gate evaluations (pass / fail)", + "type": "timeseries" + }, + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "fieldConfig": { + "defaults": { + "color": { + "mode": "palette-classic" + }, + "custom": { + "axisBorderShow": false, + "axisCenteredZero": false, + "axisColorMode": "text", + "axisLabel": "", + "axisPlacement": "auto", + "barAlignment": 0, + "barWidthFactor": 0.6, + "drawStyle": "line", + "fillOpacity": 10, + "gradientMode": "none", + "hideFrom": { + "legend": false, + "tooltip": false, + "viz": false + }, + "insertNulls": false, + "lineInterpolation": "linear", + "lineWidth": 1, + "pointSize": 5, + "scaleDistribution": { + "type": "linear" + }, + "showPoints": "never", + "spanNulls": false, + "stacking": { + "group": "A", + "mode": "none" + }, + "thresholdsStyle": { + "mode": "off" + } + }, + "mappings": [], + "max": 1, + "min": 0, + "thresholds": { + "mode": "absolute", + "steps": [ + { + "color": "green" + }, + { + "color": "red", + "value": 0.1 + } + ] + }, + "unit": "percentunit" + }, + "overrides": [] + }, + "gridPos": { + "h": 8, + "w": 24, + "x": 0, + "y": 24 + }, + "id": 8, + "options": { + "legend": { + "calcs": [ + "mean", + "max" + ], + "displayMode": "table", + "placement": "bottom", + "showLegend": true + }, + "tooltip": { + "hideZeros": false, + "mode": "multi", + "sort": "desc" + } + }, + "pluginVersion": "11.0.0", + "targets": [ + { + "datasource": { + "type": "prometheus", + "uid": "${DS_PROMETHEUS}" + }, + "editorMode": "code", + "expr": "sum by (source) (rate(oswl_external_api_calls_total{outcome=~\"failure|ratelimited\"}[$__rate_interval])) / sum by (source) (rate(oswl_external_api_calls_total[$__rate_interval]))", + "legendFormat": "{{source}} failure+ratelimited ratio", + "range": true, + "refId": "A" + } + ], + "title": "External API failure / rate-limit ratio by source", + "type": "timeseries" + } + ], + "refresh": "30s", + "schemaVersion": 39, + "tags": [ + "oswl" + ], + "templating": { + "list": [ + { + "current": {}, + "includeAll": false, + "label": "Prometheus datasource", + "multi": false, + "name": "DS_PROMETHEUS", + "options": [], + "query": "prometheus", + "refresh": 1, + "regex": "", + "type": "datasource" + } + ] + }, + "time": { + "from": "now-6h", + "to": "now" + }, + "timepicker": {}, + "timezone": "browser", + "title": "OsWL Business Metrics", + "uid": "oswl-business-metrics", + "version": 1, + "weekStart": "" +} diff --git a/docker-compose.prod.yml b/docker-compose.prod.yml deleted file mode 100644 index 369bf3d4..00000000 --- a/docker-compose.prod.yml +++ /dev/null @@ -1,40 +0,0 @@ -version: '3.8' -services: - db: - image: postgres:15 - restart: unless-stopped - env_file: - - .env.prod - environment: - POSTGRES_DB: "${POSTGRES_DB}" - POSTGRES_USER: "${POSTGRES_USER}" - POSTGRES_PASSWORD: "${POSTGRES_PASSWORD}" - volumes: - - db-data-prod:/var/lib/postgresql/data - - app: - build: . - env_file: - - .env.prod - environment: - DB_URL: "${DB_URL}" - DB_USERNAME: "${DB_USERNAME}" - DB_PASSWORD: "${DB_PASSWORD}" - OSWL_ENCRYPTION_KEY: "${OSWL_ENCRYPTION_KEY}" - SPRING_PROFILES_ACTIVE: "prod" - SERVER_ADDRESS: "${SERVER_ADDRESS:-127.0.0.1}" - JAVA_OPTS: "-Xms512m -Xmx1g" - SPRING_MAIL_HOST: "${SMTP_HOST}" - SPRING_MAIL_PORT: "${SMTP_PORT}" - SPRING_MAIL_USERNAME: "${SMTP_USER}" - SPRING_MAIL_PASSWORD: "${SMTP_PASS}" - SPRING_MAIL_PROPERTIES_MAIL_SMTP_AUTH: "true" - SPRING_MAIL_PROPERTIES_MAIL_SMTP_STARTTLS_ENABLE: "true" - ports: - - "127.0.0.1:8080:8080" - depends_on: - - db - restart: unless-stopped - -volumes: - db-data-prod: diff --git a/docs/Embedded-AI.md b/docs/Embedded-AI.md deleted file mode 100644 index bb43f0b8..00000000 --- a/docs/Embedded-AI.md +++ /dev/null @@ -1,174 +0,0 @@ -# Embedded AI - -Embedded AI lets OsWL run a local LLM out of the box — no cloud account, no API key, and **nothing leaves the machine**. It starts a bundled [llama.cpp](https://github.com/ggml-org/llama.cpp) `llama-server` as a sidecar process and exposes an **OpenAI-compatible** endpoint (`http://127.0.0.1:/v1`), which is registered as the **LOCAL** AI provider. CVE triage summaries and license insights then run entirely on this machine. - ---- - -## How It Works - -* OsWL launches `llama-server` from a **model directory** (default `./embedded-ai`) and waits until it answers `/health`. If no `.gguf` is present yet, OsWL starts downloading the default Qwen3 model in the background shortly after boot (one-time, ~1.2 GB) — so by the time you visit Settings and click **Start**, the model is often already there or partway through downloading, instead of the download starting only once you click. Set `oswl.ai.embedded.auto-download-on-boot=false` to go back to download-on-click-Start only. On an **air-gapped** machine (`oswl.airgapped.enabled=true`), this background download never runs — place a `.gguf` file there yourself beforehand instead (see [Requirements & Directory Layout](#requirements--directory-layout)). -* The server binds **localhost only** (`127.0.0.1`) — it is never reachable from other machines. -* On a successful start, OsWL saves the endpoint as the **LOCAL** provider and activates it (any other active provider is deactivated, as only one provider is active at a time). -* Stopping Embedded AI also deactivates the LOCAL provider so AI calls do not fail against a dead endpoint. -* The server launches with reasoning disabled (`--reasoning-budget` 0) and no web UI (`--no-webui`). By default it also tries to offload model layers to the GPU (`-ngl 999`) — if the GPU launch fails (no GPU build, not enough VRAM), OsWL automatically retries the same model CPU-only before giving up on it. -* Concurrent AI calls are served in parallel instead of queuing one by one: the server starts with `--parallel 4 --cont-batching`, flash attention (`-fa`) and prefix-cache reuse (`--cache-reuse 256`) by default, and OsWL itself runs its independent AI calls concurrently (up to `oswl.ai.enrichment.max-parallel-calls`, default `3`). -* Batch prompts sent to the LOCAL provider use a simplified JSON schema variant (`oswl.ai.enrichment.local-simple-schema`, default `true`) — a small local model follows a simple output schema much more reliably than the full one meant for larger cloud models. -* CVE and license summaries are cached by a hash of the input context, so unchanged components are not re-asked on the next scan. -* Posture, security-trend, license-trend, and version-diff insights are generated in a single combined call (`insights.combined`) instead of four separate calls, reducing fixed overhead. - -> Required permission: `SETTINGS_AI_MANAGE` or System Admin — same as the other AI settings. - ---- - -## Requirements & Directory Layout - -The model directory needs the server binary; a `.gguf` model is fetched automatically the -first time you click **Start** if none is present yet: - -``` -embedded-ai/ - llama-server(.exe) — llama.cpp server binary (you provide this) - qwen3-1.7b-q4_k_m.gguf — default model (Apache 2.0) — auto-downloaded on first Start -``` - -With the directory empty, OsWL downloads Qwen3-1.7B (~1.2 GB) straight into it — starting -automatically shortly after boot, or immediately on clicking **Start** if it hasn't finished -yet — verifies the SHA256 checksum, and only then launches the sidecar. The card shows live -download progress, and the whole thing runs from just `java -jar app.jar`, no separate -script or build step needed. This is safe because Qwen3 is Apache 2.0 licensed (see -[THIRD_PARTY_LICENSES.md](../THIRD_PARTY_LICENSES.md#qwen3-17b-gguf)) — bundling/fetching it -on the user's behalf carries no extra redistribution obligation. The model is downloaded from -the upstream [Hugging Face repository](https://huggingface.co/ggml-org/Qwen3-1.7B-GGUF) by -default; point `OSWL_EMBEDDED_DEFAULT_MODEL_URL` at a byte-identical self-hosted mirror if you -would rather not depend on a third-party host. - -Treat the default-model URL, SHA256, and size settings as a matched set: if you override the -URL, you must also update the SHA256 and size to match, or every download will fail checksum -verification. - -You can drop in any other `.gguf` model yourself — OsWL picks up every `.gguf` file placed -directly in this directory, not just the default Qwen3 one. Check the model's own license -before redistributing or sharing it further; only Qwen3 is bundled/auto-fetched by OsWL. - -| Item | Where OsWL looks | -|---|---| -| Server binary | `/llama-server(.exe)`, then `/bin/`, then the system `PATH` ([llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases)) — **not** auto-downloaded, place it yourself | -| Models | Every `.gguf` file directly inside the directory | - -Configuration defaults (a folder saved in the UI takes precedence over `dir`): - -| Config key | Env var | Default | Description | -|---|---|---|---| -| `oswl.ai.embedded.dir` | `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | Model directory (relative to the working directory) | -| `oswl.ai.embedded.port` | `OSWL_EMBEDDED_AI_PORT` | `11435` | localhost port for the sidecar | -| `oswl.ai.embedded.context-size` | `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | Context window passed to `llama-server -c` — the **total** context, divided across the parallel slots | -| `oswl.ai.embedded.gpu-layers` | `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | GPU layers to offload (`-ngl`): `-1` = as many as the build supports, `0` = CPU only, a positive number pins an explicit layer count. A failed GPU start auto-retries the same model CPU-only | -| `oswl.ai.embedded.threads` | `OSWL_EMBEDDED_AI_THREADS` | `0` | Thread count (`-t`); `0` = let llama.cpp auto-detect | -| `oswl.ai.embedded.parallel-slots` | `OSWL_EMBEDDED_AI_PARALLEL` | `4` | `>1` adds `--parallel N --cont-batching` so concurrent AI calls aren't serialized on the server. Each slot gets `context-size / N` — a warning is logged when that drops below 2048 | -| `oswl.ai.embedded.flash-attn` | `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | Flash attention (`-fa`) | -| `oswl.ai.embedded.cache-reuse` | `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | `--cache-reuse N` for prefix-cache reuse across calls; `<=0` disables | -| `oswl.ai.embedded.extra-args` | `OSWL_EMBEDDED_AI_EXTRA_ARGS` | (empty) | Extra llama-server CLI args, appended verbatim — server config only, never taken from request input | -| `oswl.ai.embedded.startup-timeout-seconds` | `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | How long each model candidate gets per launch attempt to become healthy | -| `oswl.ai.embedded.default-model-url` | `OSWL_EMBEDDED_DEFAULT_MODEL_URL` | Upstream Hugging Face `ggml-org/Qwen3-1.7B-GGUF` asset | Primary download source for the default Qwen3 model | -| `oswl.ai.embedded.default-model-sha256` | `OSWL_EMBEDDED_DEFAULT_MODEL_SHA256` | (see THIRD_PARTY_LICENSES.md) | Expected SHA256 — always change together with the URL | -| `oswl.ai.embedded.default-model-size-bytes` | `OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES` | `1282439264` | Expected size, used to pre-fill the download progress bar — part of the same matched set as URL/SHA256 | -| `oswl.ai.embedded.fallback-model-url` | `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | (empty) | Retried once if the primary URL fails; set this to the upstream URL when you override the primary with a self-hosted mirror | -| `oswl.ai.embedded.auto-download-on-boot` | `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | Prefetch the default model in the background on boot; never runs when `oswl.airgapped.enabled=true` | - ---- - -## Starting and Stopping - -Open **Settings → AI** and use the **Embedded AI (built-in local model)** card: - -1. Check the status line — **Running** / **Stopped**, plus a note when the binary is missing. -2. Click **Start**. If the directory has no model yet, a progress bar shows the Qwen3 - download (~1.2 GB — can take a few minutes depending on connection speed) before the - server launches; otherwise model loading alone can take up to a minute. -3. Once running, the card shows the **Active** model and the endpoint is live as the LOCAL provider. -4. Click **Stop** to shut the sidecar down. (This does not delete the downloaded model — - the next Start reuses it instantly.) - -The card also shows the folder in use, all detected `.gguf` files, and the last start error (if any) in red. - ---- - -## Switching Models - -You are not limited to the default model — any llama.cpp-compatible `.gguf` works: - -1. **Download** a quantized GGUF model (e.g. from [Hugging Face](https://huggingface.co/models?library=gguf)). -2. **Place** the `.gguf` file in the model folder shown on the card. -3. **Pick it** in the **Model** dropdown (the list is refreshed from the folder) and click **Save**. -4. Click **Start** — the selected model is tried first. The model choice applies on the next start; switching models while running is not possible (the dropdown is disabled). - -The **Auto (preference order)** option tries, in order: the model saved in the dropdown → `qwen3…` → the first remaining `.gguf` file (alphabetical). - -> For CPU-only inference, small quantized models in the **1B–4B parameter** range (Q4_K_M or similar) are recommended. Larger models need more RAM and may fail the start timeout on slow machines. The context window is `OSWL_EMBEDDED_AI_CONTEXT` (default `8192`) and is split across the parallel slots — with the default 4 slots each call gets 2048 tokens of context, so raise the context or lower `OSWL_EMBEDDED_AI_PARALLEL` if you need longer per-call contexts. - ---- - -## Changing the Model Folder - -Two ways to point OsWL at a different directory: - -| Method | Scope | -|---|---| -| **Folder** input + **Save** on the Embedded AI card | Persisted in the database (`ai_preferences.embedded_dir` / `embedded_model`); wins over the default | -| `OSWL_EMBEDDED_AI_DIR` env / `oswl.ai.embedded.dir` yaml | Default used when no folder is saved in the UI | - -Rules enforced by `PUT /api/settings/ai/embedded/config`: - -* The folder must **already exist** — otherwise the save is rejected (`400`, "Folder not found or not a directory"). -* Changing the folder **while the sidecar is running** stops it first (a running `llama-server` holds file locks on the old directory) and deactivates the LOCAL provider. Start it again from the new folder. -* Clearing the folder input (blank) removes the override and falls back to the configured default. - ---- - -## Automatic Fallback - -A single start click can try several models. Candidates are attempted in order — the requested/saved model first, then the built-in preference order, then any remaining `.gguf` — and each candidate gets up to **120 seconds** per launch attempt (`oswl.ai.embedded.startup-timeout-seconds`) to become healthy. With GPU offload enabled (the default), a candidate that fails its GPU launch is first retried CPU-only; a model that still crashes or times out is skipped in favor of the next one. - -When OsWL ends up running a model that is **not** the first choice, the card shows an amber **"Started with fallback model"** badge next to the model selector. This usually means the preferred model failed to load (too large, corrupted download) — the Active model line tells you what is actually running. - ---- - -## Status and Logs - -`GET /api/settings/ai/embedded` reports `running`, `external`, `binaryFound`, `activeModel`, `fallbackUsed`, `lastError`, `availableModels`, `modelsDir`, `baseUrl`, and (while a default-model download triggered by Start is in flight) `downloading`, `downloadedBytes`, `downloadTotalBytes`. - -`external` is `true` when something already answers `/health` on the configured port that OsWL did not start itself (a manually launched `llama-server`, or one orphaned by a previous OsWL process/crash). `running` stays `true` in this case — the endpoint is genuinely usable as the LOCAL provider — but clicking **Stop** cannot kill a process OsWL doesn't own; it leaves it running and the status keeps reporting `external: true`. - -`POST /api/settings/ai/embedded/start` returns immediately (`success: true`, `downloading: true`) when it kicks off the Qwen3 download instead of waiting for it — the settings page polls status for progress and the eventual `running`/`lastError` outcome. The download itself runs on the server independent of any browser session, so refreshing the page (or closing it) doesn't cancel it; reopening the page resumes showing progress. - -`llama-server` writes its own stdout/stderr to **`/llama-server.log`**. When a start fails, the last lines of that log are included in `lastError` and shown in red on the card — check the full file for details. - ---- - -## Troubleshooting - -| Symptom | Likely cause / fix | -|---|---| -| "llama-server binary not found" | Put `llama-server(.exe)` in the folder shown on the card (or its `bin/` subfolder, or on `PATH`) — this is never auto-downloaded | -| No model yet, and Start doesn't seem to do anything | Check for internet access — the default-model download needs it once. On an air-gapped machine, place a `.gguf` file directly inside the model folder yourself instead | -| "Model download failed" / checksum mismatch | Network interrupted mid-download or a corrupted transfer — the partial file is deleted automatically; click **Start** again to retry | -| `failed to open GGUF file` in the log | The folder in settings does not match where the model actually is — check the **Folder** field and that the file name matches the dropdown entry | -| "did not become healthy within 120s" | Slow machine or oversized model — try a smaller quantization (e.g. a Q4_K_M `.gguf` in the 1B–2B parameter range), or raise `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC`. A `(GPU)` failure is retried CPU-only automatically, so this only persists when the CPU retry fails too | -| `slotContext … is below 2048` warning in the log | Too many parallel slots for the context size — raise `OSWL_EMBEDDED_AI_CONTEXT` or lower `OSWL_EMBEDDED_AI_PARALLEL` | -| Port already in use | Another process (or a manually started `llama-server`) occupies the port — stop it or set `OSWL_EMBEDDED_AI_PORT`. A healthy server already listening on the port counts as "running" and is flagged `external` in the status response | -| Clicking **Stop** doesn't turn the card off | The running server is `external` (not started by this OsWL instance) — stop the process yourself (or restart the machine/container it runs in), OsWL cannot terminate it | -| "Folder not found or not a directory" on Save | Create the directory first; the save only accepts existing folders | - ---- - -## Security & Privacy - -* The sidecar binds to `127.0.0.1` only and requires **no API key** — nothing is exposed to the network. -* The llama.cpp **CORS warning** in `llama-server.log` is expected and harmless: the server only listens on localhost. -* No telemetry: prompts, code snippets, and CVE data sent to the model never leave the machine. - ---- - -## REST API summary - -See [API Reference — AI](API-Reference.md#ai). Interactive schemas: Swagger UI (`local` profile). diff --git a/docs/Getting-Started.md b/docs/Getting-Started.md deleted file mode 100644 index a83fef48..00000000 --- a/docs/Getting-Started.md +++ /dev/null @@ -1,153 +0,0 @@ -# Getting Started - -This guide walks you through installing OsWL, running the setup wizard, and completing your first project scan. - ---- - -## System Requirements - -| Component | Requirement | -|---|---| -| **JDK** | 25 or later | -| **Build tool** | Gradle Wrapper (bundled — `./gradlew`) | -| **Database** | H2 file-mode (local / dev) or PostgreSQL 15+ (production) | -| **OS** | Linux, macOS, or Windows | -| **Memory** | 512 MB minimum, 1 GB+ recommended | - -> No Node.js or npm is required — the Tailwind CSS standalone binary is downloaded automatically by Gradle on the first build. - ---- - -## Installation - -### 1. Clone the Repository - -```bash -git clone https://github.com/SalkCoding/Oswl.git -cd Oswl -``` - -### 2. Choose a Profile - -OsWL ships with two Spring profiles: - -| Profile | Database | Use case | -|---|---|---| -| `local` *(default)* | H2 file (`./oswl-db.mv.db`) | Development and evaluation | -| `prod` | PostgreSQL | Production deployment | - -### 3. Start the Application - -**Local (H2, zero config):** - -```bash -./gradlew bootRun -``` - -**Production (PostgreSQL):** - -```bash -export SPRING_PROFILES_ACTIVE=prod -export DB_URL=jdbc:postgresql://localhost:5432/oswl -export DB_USERNAME=oswl -export DB_PASSWORD=changeme -export OSWL_ENCRYPTION_KEY=$(openssl rand -base64 32) - -./gradlew bootRun -``` - -> **`OSWL_ENCRYPTION_KEY`** — protects stored secrets such as VCS tokens. In `local`, a development key may be generated automatically. In **`prod`**, you **must** set a stable value before startup; the application will not start without it. Losing the key makes previously stored VCS credentials unusable. - -The application starts on port **8080** by default. - ---- - -## Embedded AI Model (first run) - -OsWL can run its AI features fully on-premise through an embedded llama.cpp sidecar. On first boot, if no `.gguf` model exists in `embedded-ai/`, OsWL starts a background download of the default **Qwen3-1.7B** model (~1.2 GB): - -* Downloaded from the upstream Hugging Face repository (`ggml-org/Qwen3-1.7B-GGUF`), with SHA-256 integrity verification; point `OSWL_EMBEDDED_DEFAULT_MODEL_URL` at a self-hosted mirror to avoid depending on a third-party host. -* Download-only — it never starts the sidecar or changes the active AI provider on its own. Progress appears in **Settings → AI**; click **Start** there once the file is ready. -* Opt out with `OSWL_EMBEDDED_AUTO_DOWNLOAD=false`. In air-gapped mode the download is never attempted (see below). - -The `llama-server(.exe)` binary itself is the one manual step — download it from the [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) and place it in `embedded-ai/` (or on `PATH`). See [Embedded AI](Embedded-AI.md) for details. - ---- - -## Air-Gapped (Offline) Startup - -For hosts without outbound internet access: - -1. Set `OSWL_AIRGAPPED_ENABLED=true` before startup. Vulnerability / threat-intel lookups (OSV, deps.dev, EPSS, KEV) are then served from an imported offline snapshot — no outbound HTTP is attempted, and the embedded-model auto-download is skipped. -2. On an internet-connected machine, build a snapshot bundle: - - ```bash - scripts/oswl-vdb/oswl-vdb.sh build --wanted wanted-list.jsonl --out bundle.zip - ``` - - (Windows: `scripts/oswl-vdb/oswl-vdb.ps1`.) To target the bundle at your actual dependencies, first export a wanted-list from a connected OsWL instance: `GET /api/admin/snapshot/wanted-list`. -3. Transfer `bundle.zip` to the air-gapped host and import it as a System Admin via `POST /api/admin/snapshot/import` (multipart upload), or whitelist a directory with `OSWL_AIRGAPPED_IMPORT_DIR` and use `POST /api/admin/snapshot/import-from-path`. See [Administration — Offline snapshot bundles](Administration.md). -4. For embedded AI, place a `.gguf` model you obtained yourself into `embedded-ai/` before clicking **Start**. - ---- - -## Setup Wizard - -On the very first startup (empty database), OsWL redirects every request to `http://localhost:8080/setup`. - -The wizard collects: - -| Field | Description | -|---|---| -| **Admin Email** | Used as the login credential for the System Admin account | -| **Password** | Must meet the minimum length policy (default: 8 characters) | -| **Display Name** | Shown in the UI and audit log | - -After you submit, OsWL creates the admin account and redirects to the login page. - -> If you need to restart from a clean state in local mode, stop the server and delete `oswl-db.mv.db` (and `oswl-db.trace.db` if present), then restart. - ---- - -## First Login - -1. Navigate to `http://localhost:8080/login`. -2. Enter the email and password you created in the setup wizard. -3. If **Two-Factor Authentication** is enabled (admin-configurable), you will be prompted for a 6-digit OTP sent to your email. - * In `local` mode the OTP appears in the server log: `*** OTP CODE: NNNNNN ***` - * Development shortcut: `000000` is accepted when using the test profile. -4. On first login with a temporary password, OsWL forces an immediate password change. - ---- - -## Seeding Test Data (local only) - -After logging in, call: - -``` -GET http://localhost:8080/data/test -``` - -This endpoint (available **only** in the `local` profile): - -* Deletes all existing projects, scans, libraries, and CVEs. -* Re-populates the database with a rich realistic dataset: multiple projects across Maven and npm ecosystems, dozens of CVEs at various severities, mixed license statuses, and multiple historical scans for trend visualization. - -A test API key is also available at: - -``` -GET http://localhost:8080/data/test-api-key -``` - ---- - -## Access control (recommended reading) - -* [Authorization layers](Authorization-Layers.md) — role templates (Admin / Developer / Viewer) vs project membership -* [Production deployment checklist](Production-Deployment-Checklist.md) — before going live with `prod` - -## Next Steps - -* [Connect your first VCS repository](Quick-Import.md) -* [Submit a scan via the CLI](CLI-Integration.md) -* [Explore the Security Center](Security-Center.md) diff --git a/docs/Production-Deployment-Checklist.md b/docs/Production-Deployment-Checklist.md deleted file mode 100644 index 50c22c92..00000000 --- a/docs/Production-Deployment-Checklist.md +++ /dev/null @@ -1,215 +0,0 @@ -# Production deployment checklist - -Use this one-page list before exposing OsWL on the internet. **Do not run `prod` with `local` defaults** (H2, Swagger, `/data/**`, or committed encryption keys). - -## 1. Profile and build - -| Check | Action | -|-------|--------| -| Profile | Set `SPRING_PROFILES_ACTIVE=prod` | -| JAR | Build with `./gradlew bootJar verifyProdJar` — `TestDataController` must **not** appear in the JAR | -| Local-only code | `src/local/java` is for `bootRun` / dev only, not packaged in `bootJar` | - -## 2. Required environment variables - -| Variable | Purpose | -|----------|---------| -| `DB_URL` | JDBC URL (e.g. `jdbc:postgresql://db:5432/oswl`) | -| `DB_USERNAME` | Database user | -| `DB_PASSWORD` | Database password | -| `OSWL_ENCRYPTION_KEY` | Instance encryption key (generate with `openssl rand -base64 32`) | - -Copy `.env.prod.example` → `.env.prod` and fill every value. **No defaults** for DB or encryption in `application-prod.yaml`. - -On startup, missing variables and other config issues are printed in **one `OSWL STARTUP WARNINGS` block** in the log (after the application is ready). In **`prod`**, if `OSWL_ENCRYPTION_KEY` is missing, the application **fails to start** — set a stable key before go-live. (The `local` profile may use a temporary key for development only.) - -## 3. Network binding - -| Check | Action | -|-------|--------| -| Default bind | `SERVER_ADDRESS=127.0.0.1` (see `application-prod.yaml`) | -| Public access | Put **nginx / Caddy / Traefik** (or cloud LB) in front; terminate TLS there | -| Direct `0.0.0.0` | Only if you accept exposing the JVM HTTP stack; document the risk and firewall | - -`docker-compose.prod.yml` maps **`127.0.0.1:8080:8080`** so the container is not published on all interfaces by default. - -Set `server.forward-headers-strategy=framework` (default in `application.yaml`) when the proxy sends `X-Forwarded-Proto` for HSTS and secure cookies. - -## 4. Docker Compose (production) - -```bash -cp .env.prod.example .env.prod -# Edit DB_*, OSWL_ENCRYPTION_KEY, SMTP_* -docker compose -f docker-compose.prod.yml up -d --build -``` - -Verify logs: no missing-env banner, PostgreSQL connected, no H2 or Swagger URLs. - -## 5. Logging and observability - -| Check | Action | -|-------|--------| -| Log levels | `prod` profile: `com.salkcoding.oswl` at **INFO** only; no DEBUG on AI/clients | -| AI excerpts | `oswl.ai.debug.log-prompt-excerpt` / `log-response-excerpt` default **false** in prod | -| Actuator | **`health`, `info`, `prometheus`** exposed (v1.0.4); everything else disabled (`enabled-by-default: false`) | -| Metrics scrape | Point Prometheus at `/actuator/prometheus` — the scraper must present admin credentials | -| Actuator auth | Requires **SYSTEM_ADMIN** session (not public) | - -## 6. Security features enabled in prod - -- Springdoc / Swagger UI: **off** -- H2 console and `/data/**`: **not in prod JAR** (local profile + `src/local/java` only) -- Security headers + HSTS (behind HTTPS): see `application-prod.yaml` `oswl.security.headers` -- Trusted-device cookie: `Secure` in prod - -## 7. Optional secrets - -| Variable | Purpose | -|----------|---------| -| `OSWL_TRUSTED_DEVICE_HMAC_KEY` | Dedicated HMAC key for `OSWL_TD` cookie (recommended; separate from `OSWL_ENCRYPTION_KEY`) | -| `OSWL_OIDC_CLIENT_ID` / `OSWL_OIDC_CLIENT_SECRET` / `OSWL_OIDC_ISSUER_URI` | **v1.0.4** — OIDC single sign-on. Also uncomment the `spring.security.oauth2.client` block in `application-prod.yaml`; the login page shows the SSO button only when a provider is registered. | - -### v1.0.4 opt-in features - -All default to **off** — enable deliberately. - -| Variable | Default | Effect when enabled | -|---|---|---| -| `OSWL_FLYWAY_ENABLED` | `false` | Versioned migrations with `baseline-on-migrate`; generate a full baseline first | -| `OSWL_AIRGAPPED_ENABLED` | `false` | All vulnerability / threat-intel lookups served from an imported offline snapshot; no outbound HTTP — full offline procedure in §9 | -| `OSWL_GATE_*` | see [What's New](Whats-New-v1.0.4.md) | Default thresholds for `POST /api/scan/gate` | - -Continuous monitoring is the exception: `OSWL_MONITORING_ENABLED` defaults to **`true`** (nightly OSV re-query at 03:00, `OSWL_MONITORING_CRON`). It sends e-mail to project members, so confirm SMTP is configured before first launch — or set it to `false`. - -### Performance tunables (v1.0.4) - -Defaults are production-safe — override only when you have a reason. - -| Variable | Default | Purpose | -|----------|---------|---------| -| `OSWL_DEPSDEV_CONNECT_TIMEOUT_MS` / `OSWL_DEPSDEV_READ_TIMEOUT_MS` | `5000` / `10000` | deps.dev HTTP timeouts (previously a stalled call could hang a whole scan) | -| `OSWL_DEPSDEV_MAX_CONCURRENT` | `24` | Max simultaneous deps.dev requests; on HTTP 429 the client backs off and retries once | -| `OSWL_OSV_CONNECT_TIMEOUT_MS` / `OSWL_OSV_READ_TIMEOUT_MS` | `5000` / `30000` | OSV HTTP timeouts (read is generous — a 1,000-item batch query can legitimately take a while) | -| `OSWL_VERSION_META_TTL_SEC` | `86400` | TTL for deps.dev version metadata on cache-hit libraries | -| `OSWL_CLONE_SPARSE_ENABLED` | `true` | Quick Import clones are blobless + sparse-checked-out; git servers without partial-clone support fall back to a full shallow clone automatically | -| `OSWL_AI_STREAMING_ENABLED` | `true` | Stream free-form AI calls (posture/trend/version diff) over SSE for live previews; endpoints that reject streaming fall back automatically | -| `OSWL_AI_MAX_PARALLEL_CALLS` | `3` | Max concurrent AI enrichment calls; a local llama-server benefits from `--parallel` up to this same count | -| `OSWL_ANTHROPIC_PROMPT_CACHING_ENABLED` | `true` | Mark the Anthropic system prompt as an ephemeral cache breakpoint for repeat calls | - -### 7.1 Air-gapped / offline snapshot (v1.0.4) - -Set `OSWL_AIRGAPPED_ENABLED=true` so vulnerability/threat-intel lookups (OSV, deps.dev, EPSS, CISA KEV) are served from an imported offline snapshot instead of live external APIs. No outbound HTTP is attempted for enrichment. - -| Step | Action | -|------|--------| -| 1. Build bundle | On an internet-connected machine, run the `oswl-vdb` builder. Wrapper scripts: `scripts/oswl-vdb/oswl-vdb.sh` (Linux/macOS) or `scripts/oswl-vdb/oswl-vdb.ps1` (Windows). Both invoke `./gradlew vdbBuild --args="..."`. | -| 2. Target the bundle | Export the components this instance actually scans with `GET /api/admin/snapshot/wanted-list` (SYSTEM_ADMIN), then pass it to `build --wanted wanted-list.jsonl`. The builder fetches only those ecosystem/name/version tuples instead of a full upstream mirror. | -| 3. Import bundle | `POST /api/admin/snapshot/import?mode=replace|merge` (multipart `.zip`). For large bundles, use `POST /api/admin/snapshot/import-from-path` with `{"path":"bundle.zip","mode":"merge"}` after setting `OSWL_AIRGAPPED_IMPORT_DIR` to a whitelist directory. | -| 4. Place model (if using Embedded AI) | Air-gapped hosts disable auto-download. Place the `.gguf` file in `embedded-ai/` manually or host it on an internal mirror (see §8). | - -`oswl-vdb build` options (see `VdbBuilderCli`): -- `--sources osv,epss,kev,depsdev` (default all). -- `--mode delta --since previous.zip` writes only added/changed keys plus `"_deleted":true` markers. -- `--offline-sources ` builds without any network from a cache directory populated by an earlier online run (covers `osv`/`epss`/`kev` only; deps.dev has no bulk dump and is skipped). -- `verify ` and `inspect ` check checksums and metadata. - -Import semantics: -- `replace` (default) clears each source in the store and writes the bundle. -- `merge` upserts by `(source, entry_key)` and honors `"_deleted":true` lines as deletes. -- v2 bundles are SHA-256-checksummed per file in `meta.json`; a mismatch rejects the whole bundle and leaves the existing store untouched. - -Definition freshness (E7): `OSWL_AIRGAPPED_STALENESS_WARN_DAYS` (default `7`) and `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS` (default `30`) drive the admin UI badge, measured from the oldest per-source `sourceAsOf` date across imported snapshots. - -Snapshot uploads may need `OSWL_MULTIPART_MAX_FILE_SIZE` / `OSWL_MULTIPART_MAX_REQUEST_SIZE` (default `50MB` each) if your bundle is larger. - -## 8. Embedded AI model (optional, on-premise) - -Only relevant if you plan to use **Embedded AI** (Settings → AI → Local) instead of, or in -addition to, a cloud provider. - -| Check | Action | -|-------|--------| -| Server binary | Download `llama-server(.exe)` for your platform from the [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) and place it in `embedded-ai/` (or `bin/` under it, or anywhere on `PATH`) — this is the only manual step | -| Model | Nothing to do — clicking **Start** on a fresh install downloads the Apache-2.0-licensed Qwen3-1.7B model automatically (~1.2 GB, verifies SHA256, shows progress in the UI) | -| Air-gapped hosts | The auto-download needs outbound internet access once. Without it, place a `.gguf` file you've obtained yourself into `embedded-ai/` before clicking Start | -| Custom models | OsWL only bundles/auto-fetches Qwen3-1.7B. Any other `.gguf` you want (e.g. a different size or license) — check its own license, then place it in `embedded-ai/` yourself; see [Embedded AI](Embedded-AI.md) | -| Directory | Defaults to `./embedded-ai` relative to the working directory the JVM starts in — set `OSWL_EMBEDDED_AI_DIR` for a different path | - -No Gradle task or separate script is involved — the download runs inside the application -itself the first time Start is clicked, so a plain `java -jar app.jar` deployment works. - -### Embedded AI tuning (B1 / v1.0.4) - -All default to production-safe values. Override only when you have measured a reason. - -| Variable | Default | Purpose | -|----------|---------|---------| -| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | Total context size (`-c`). With `--parallel`, this is divided across slots; a slot context below 2048 is logged as a warning. | -| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | `-ngl`: `-1` offloads as many layers as the build supports (passed as `999`), `0` is CPU only, positive pins an explicit layer count | -| `OSWL_EMBEDDED_AI_THREADS` | `0` | `-t`: `0` lets llama.cpp auto-detect; positive values pin the thread count | -| `OSWL_EMBEDDED_AI_PARALLEL` | `4` | Enables `--parallel N --cont-batching` so concurrent AI calls are not serialized | -| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | Adds `-fa` (flash attention) | -| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | `--cache-reuse` token count; `<=0` disables | -| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | (empty) | Space-separated extra `llama-server` CLI args appended verbatim (admin config only, never request input) | -| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | Seconds to wait for `/health` before falling back to CPU-only or the next model candidate | -| `OSWL_EMBEDDED_DEFAULT_MODEL_URL` / `SHA256` / `SIZE_BYTES` | Upstream Hugging Face `ggml-org/Qwen3-1.7B-GGUF` | Matched set for the default Qwen3-1.7B download; override all three for a self-hosted mirror (a byte-identical re-host needs only the URL changed) | -| `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | Hugging Face | Retried once if the primary URL fails; set blank/equal to primary to disable | -| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | Prefetch the default model on boot (download-only, never starts the sidecar). **Ignored when `OSWL_AIRGAPPED_ENABLED=true`**. | - -## 9. Database schema (upgrades) - -OsWL uses **Hibernate `ddl-auto=validate`** in `prod` — the app does not auto-alter PostgreSQL on startup. - -| Profile | Schema management | -|---------|-------------------| -| `local` | `ddl-auto: update` — H2 schema follows JPA entities automatically | -| `prod` | `ddl-auto: validate` — run SQL scripts manually when upgrading | - -Manual scripts live in `src/main/resources/db/`: - -| File | When to run | -|------|-------------| -| `project_members.sql` | First deploy of project ACL (if table missing) | -| `instance_setup_lock.sql` | First deploy after setup-lock feature | -| `ai_enhancement.sql` | Legacy installs predating AI preference columns / `ai_daily_usage` | -| `schema_cleanup.sql` | **Once** when upgrading to the release that removes unused tables/columns (`ai_feedback`, `external_api_settings`, denormalized `projects.version`, etc.) | - -After running migrations, restart the app and confirm `validate` passes. - -### Flyway (v1.0.4, opt-in) - -Set `OSWL_FLYWAY_ENABLED=true` to manage the schema with Flyway instead of hand-run scripts. `baseline-on-migrate` is enabled, so an existing populated database is baselined rather than rejected — but generate a full baseline migration that matches your current schema **before** turning it on. Left at the default `false`, nothing changes. - -### v1.0.4 columns - -This release adds `libraries.malicious` and `libraries.typosquat_risk`, both `NOT NULL DEFAULT false`. The defaults let the column be added to a populated table, so no manual script is required — but on `prod` (`ddl-auto: validate`) you still add them yourself. It also adds three nullable `libraries` columns (`description`, `homepage`, `source_repo_url`) for the upstream project metadata shown on Component Detail — `validate` checks that every mapped column exists regardless of nullability, so these need the same manual treatment: - -```sql -ALTER TABLE libraries ADD COLUMN IF NOT EXISTS malicious boolean NOT NULL DEFAULT false; -ALTER TABLE libraries ADD COLUMN IF NOT EXISTS typosquat_risk boolean NOT NULL DEFAULT false; -ALTER TABLE libraries ADD COLUMN IF NOT EXISTS description text; -ALTER TABLE libraries ADD COLUMN IF NOT EXISTS homepage varchar(500); -ALTER TABLE libraries ADD COLUMN IF NOT EXISTS source_repo_url varchar(500); -ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); -``` - -(Flyway users: `V3__component_metadata.sql` covers the three new `libraries` columns; see [Database Schema](Database-Schema.md).) - -## 10. Post-deploy smoke test - -1. Open UI via HTTPS reverse proxy only. -2. Complete setup / login and 2FA if enabled. -3. Create a project and VCS connection; restart app — token still decrypts (confirms stable `OSWL_ENCRYPTION_KEY`). -4. `POST /api/scan` with project API key (see [Scan API security](Scan-Api-Security.md)). -5. Open a project you are a member of — confirm another user’s project ID returns forbidden (project membership). -6. Review audit log for failed auth attempts. - -## 11. Operations - -- Back up PostgreSQL and store `OSWL_ENCRYPTION_KEY` in a secrets manager (loss = unreadable VCS tokens). -- Rotate API keys and SMTP credentials on compromise. -- Keep `SPRING_PROFILES_ACTIVE` out of images that should never run as `local`. - ---- - -**Local development:** `SPRING_PROFILES_ACTIVE=local`, copy `.env.example` → `.env`, set `OSWL_ENCRYPTION_KEY`, run `./gradlew bootRun`. H2 file DB, H2 console, Swagger, and `GET /data/test` are available only in this profile. diff --git a/docs/README.md b/docs/README.md new file mode 100644 index 00000000..10927873 --- /dev/null +++ b/docs/README.md @@ -0,0 +1,31 @@ +# OsWL documentation + +**[English](en/Home.md)** | [한국어](ko/Home.md) | [日本語](ja/Home.md) + +English is the default documentation entry point. Start with the [English documentation home](en/Home.md), or choose a language above. + +- [Release notes for 1.0.5.1](en/Whats-New-v1.0.5.1.md) +- [Getting started](en/Getting-Started.md) +- [User guide](en/User-Guide.md) +- [Production deployment](en/Production-Deployment-Checklist.md) +- [Backup and restore](en/Backup-And-Restore.md) +- [API reference](en/API-Reference.md) + +- [Browser security alerts (English)](en/Browser-Security-Alerts.md) + +- [Container image inspection (English)](en/Container-Image-Inspection.md) + + +## Where files belong + +Document bodies live in `en/`, `ko/`, or `ja/` according to their actual language. Keep matching filenames for translations and prefer links to pages in the same language. Some developer references currently exist in only one language; link to that version with its language identified instead of creating empty translations. + +[Deployment files](../deploy/README.md) contain Docker build/run configuration and the Grafana dashboard. [Scripts](../scripts/README.md) contain executable tools. The [landing site](../landing/index.html) is published separately through GitHub Pages. + +## GitHub Wiki publishing + +The [English Wiki](https://github.com/SalkCoding/Oswl/wiki) is generated from `en/` on pushes to `main`. Edit the source documents here; the sync mirrors its generated input and removes pages no longer present in that input. + +The [preparation script](../.github/scripts/prepare-wiki.py) writes ignored output to `build/wiki/`. It converts links between English pages to Wiki links and links to other repository files to GitHub URLs. `Home.md` and `_Sidebar.md` retain their Wiki names. Korean and Japanese documents remain available through repository links from the Wiki. + +Run `python .github/scripts/prepare-wiki.py SalkCoding/Oswl` from the repository root to inspect the publishing output without publishing anything. The workflow's manual dispatch defaults to a dry run; publishing requires disabling its `dry_run` input. This does not change the landing site's Pages deployment. diff --git a/docs/_Sidebar.md b/docs/_Sidebar.md deleted file mode 100644 index 6ea4208b..00000000 --- a/docs/_Sidebar.md +++ /dev/null @@ -1,30 +0,0 @@ -**[Home](Home)** - -### Release -* [What's New in v1.0.4](Whats-New-v1.0.4) - -### Guides -* [Getting Started](Getting-Started) -* [User Guide](User-Guide) -* [Quick Import](Quick-Import) -* [CLI Integration](CLI-Integration) -* [Scan History](Scan-History) -* [Embedded AI](Embedded-AI) - -### Analysis -* [Security Center](Security-Center) -* [License Analysis](License-Analysis) -* [Risk Trend](Risk-Trend) -* [Version Diff](Version-Diff) - -### Administration -* [Administration](Administration) -* [Authorization layers](Authorization-Layers) -* [Project access control](Project-Access-Control) -* [Production deployment](Production-Deployment-Checklist) -* [Database schema](Database-Schema) -* [Scan API security](Scan-Api-Security) - -### Reference -* [API Reference](API-Reference) -* [Glossary](Glossary) diff --git a/docs/API-Reference.md b/docs/en/API-Reference.md similarity index 97% rename from docs/API-Reference.md rename to docs/en/API-Reference.md index d8ed1bd1..2ba43b76 100644 --- a/docs/API-Reference.md +++ b/docs/en/API-Reference.md @@ -84,7 +84,7 @@ The separate `aiStatus` field tracks background AI enrichment (`NOT_APPLICABLE`, | Method | Path | Description | |---|---|---| | `POST` | `/api/github/connect` | Connect a GitHub PAT | -| `DELETE` | `/api/github/disconnect` | Remove GitHub connection | +| `POST` | `/api/github/disconnect` | Remove GitHub connection | | `GET` | `/api/github/status` | Connection status | | `GET` | `/api/github/accounts` | List authenticated accounts | | `GET` | `/api/github/repos` | List accessible repositories | @@ -99,7 +99,6 @@ The separate `aiStatus` field tracks background AI enrichment (`NOT_APPLICABLE`, | Method | Path | Auth | Description | |---|---|---|---| -| `POST` | `/api/auth` | API key | Validate API key (legacy) | | `GET` | `/api/scan/ping` | API key | Connectivity and key validity check | | `GET` | `/api/scan/manifest-rules` | API key | Manifest file collection rules (same as `/scripts/manifest-rules.json`) | | `POST` | `/api/scan/parse` | API key | Parse a manifest zip archive (CLI step 1) | @@ -117,7 +116,7 @@ The separate `aiStatus` field tracks background AI enrichment (`NOT_APPLICABLE`, | `PATCH` | `/projects/{id}/security-center/bulk-status` | `SECURITY_CENTER_UPDATE_STATUS` | Bulk CVE status update | | `GET` | `/projects/{id}/security-center/export` | `SECURITY_CENTER_EXPORT` | Download the CVE list as CSV (`?scanId=`, `?format=csv`) | | `POST` | `/projects/{id}/security-center/batch-pr` | `SECURITY_CENTER_UPDATE_STATUS` | **v1.0.4** — Open one upgrade PR for all selected components | -| `GET` | `/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — Print-ready compliance report | +| `GET` | `/projects/{projectId}/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — Print-ready compliance report | ### SBOM / VEX / SARIF (v1.0.4) @@ -249,8 +248,8 @@ All endpoints require the `SYSTEM_ADMIN` role (or the `SETTINGS_SNAPSHOT_MANAGE` | Method | Path | Description | |---|---|---| -| `GET` | `/api/admin/cli-keys` | List global CLI keys | -| `POST` | `/api/admin/cli-keys` | Create global key | +| `GET` | `/api/admin/cli-keys` | List CLI keys across projects | +| `POST` | `/api/admin/cli-keys` | Issue a project-scoped key (`projectId` required) | | `PATCH` | `/api/admin/cli-keys/{keyId}/toggle` | Enable / disable key | --- @@ -279,7 +278,7 @@ All endpoints require the `SYSTEM_ADMIN` role (or the `SETTINGS_SNAPSHOT_MANAGE` | `GET` | `/api/settings/ai/usage` | `SETTINGS_AI_MANAGE` | AI usage stats — today's calls/tokens/estimated cost, daily cap, and the last 7 days, read from the daily aggregate table | | `GET` | `/api/settings/ai/usage/events` | `SETTINGS_AI_MANAGE` | Recent AI call events, newest first (`?page=`, `?size=`, default size `10`). Only the last **100** events are retained (FIFO), so at most 10 pages exist | | `GET` | `/api/settings/ai/embedded` | `SETTINGS_AI_MANAGE` | Embedded AI status (`running`, `external`, `binaryFound`, `activeModel`, `fallbackUsed`, `lastError`, `availableModels`, `modelsDir`, `baseUrl`, and while a default-model download is in flight: `downloading`, `downloadedBytes`, `downloadTotalBytes`) | -| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | Start the llama.cpp sidecar (optional model file name; auto-fallback across candidates, 400 with reason on failure). On a fresh install with no `.gguf` present, downloads the Apache-2.0 Qwen3-1.7B model in the background instead and returns immediately (`downloading: true`) — poll `GET .../embedded` for progress | +| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | Start the llama.cpp sidecar (optional model file name; auto-fallback across candidates, 400 with reason on failure). On a fresh install with no `.gguf` present, downloads the Apache-2.0 Qwen3.5-2B Q4_K_M model in the background instead and returns immediately (`downloading: true`) — poll `GET .../embedded` for progress | | `POST` | `/api/settings/ai/embedded/stop` | `SETTINGS_AI_MANAGE` | Stop the sidecar and deactivate the LOCAL provider | | `PUT` | `/api/settings/ai/embedded/config` | `SETTINGS_AI_MANAGE` | Save folder/model overrides `{ "dir", "model" }` (null keeps current, blank clears; 400 if dir missing) | diff --git a/docs/Administration.md b/docs/en/Administration.md similarity index 79% rename from docs/Administration.md rename to docs/en/Administration.md index d49659a7..3db4d788 100644 --- a/docs/Administration.md +++ b/docs/en/Administration.md @@ -1,5 +1,7 @@ # Administration +[What's new in 1.0.5.1](Whats-New-v1.0.5.1.md) + This page covers all admin-only features: user management, role templates, audit logs, security settings, and SMTP configuration. > All actions on this page require **System Admin** privileges unless noted otherwise. @@ -221,6 +223,24 @@ Requires `ORG_DASHBOARD_VIEW` (or `SYSTEM_ADMIN`). Once granted, the entry point All three are admin-gated. Prometheus scrape config lives in `application-prod.yaml` under `management`. +### Business metrics & Grafana + +In addition to the default JVM/HTTP meters, OsWL records these business metrics (all exposed via `/actuator/prometheus`; Prometheus names shown — dots become underscores): + +| Metric | Type | Tags | Description | +|---|---|---|---| +| `oswl_scan_duration_seconds` | Timer | `outcome` (`completed`\|`failed`) | End-to-end scan pipeline duration | +| `oswl_quickimport_queue_depth` | Gauge | — | Quick Import jobs waiting for a worker slot | +| `oswl_quickimport_running` | Gauge | — | Quick Import jobs currently running | +| `oswl_components_ingested_total` | Counter | `ecosystem` | Components persisted by scan ingest | +| `oswl_ai_calls_total` | Counter | `provider` | Recorded AI calls | +| `oswl_ai_tokens_total` | Counter | `provider`, `direction` (`in`\|`out`) | AI prompt/completion tokens | +| `oswl_ai_cost_usd_total` | Counter | `provider` | Estimated AI spend (USD) | +| `oswl_gate_evaluations_total` | Counter | `outcome` (`pass`\|`fail`) | Security-gate evaluations | +| `oswl_external_api_calls_total` | Counter | `source` (`depsdev`, `osv`, `epss`, `kev`, `github-advisory`, `nvd`), `outcome` (`success`\|`failure`\|`ratelimited`) | Outbound calls to external data sources | + +A ready-to-import Grafana dashboard covering these metrics ships at [`deploy/observability/grafana/oswl-dashboard.json`](../../deploy/observability/grafana/oswl-dashboard.json). Import it via **Dashboards → New → Import** — it prompts for a Prometheus datasource on import, so no JSON editing is needed. + --- ## Offline snapshot bundles (v1.0.4) @@ -296,7 +316,7 @@ Configure the LLM provider and enrichment behaviour for CVE/license summaries. Each provider's model field is a free-text combo box: the dropdown lists current models as suggestions, but any model ID your account has access to can be typed in directly. -The **Embedded AI (built-in local model)** card on the same tab runs a bundled llama.cpp `llama-server` sidecar (CPU-only, localhost-only, no API key) and registers it as the LOCAL provider. The default bundled model is **Qwen3 1.7B** (downloaded on first use); the card also offers a **model dropdown** for any `.gguf` you place in the folder, a **folder override** with Save (persisted; changing it while running stops the sidecar), and **automatic fallback** to the next available model when the first choice fails to start. See [Embedded AI](Embedded-AI.md). +Embedded AI runs a separately installed llama.cpp runtime with **Qwen3.5-2B Q4_K_M** as the default download. **Gemma 4 E2B** is optional and installed manually. The runtime belongs in `embedded-ai/llama/`, and models in `embedded-ai/model//`. Boot-time prefetch downloads only; it does not start the server or activate LOCAL. The default download uses a pinned Hugging Face revision with SHA-256 and size verification; no fallback mirror is configured by default. Air-gapped mode disables downloads. Use Settings to stop, select and save a model, then start again. See [Embedded AI](Embedded-AI.md) for current requirements and configuration. Only one provider is **active** at a time. The tab also exposes: @@ -310,9 +330,9 @@ Only one provider is **active** at a time. The tab also exposes: **Test Connection** does not spend any tokens: it lists the provider's available models (`GET {base}/models` for OpenAI/Gemini/Ollama, `GET /v1/models` for Anthropic) rather than sending a completion, so checking credentials and reachability is free and does not count against the daily call cap. If the configured model ID is not among the models the account can access, the test still succeeds but shows a warning so a typo or an unpulled local model surfaces immediately instead of on the next scan. -**API:** `GET|PUT /api/settings/ai`, `POST /api/settings/ai/test-connection`, `POST /api/settings/ai/golden-test`. -**Embedded AI:** `GET /api/settings/ai/embedded`, `POST .../embedded/start?model=`, `POST .../embedded/stop`, `PUT .../embedded/config` — see [API Reference — AI](API-Reference.md#ai). -**Per project:** `PATCH /api/projects/{id}/deployment-profile`. +**API:** `GET|PUT /api/settings/ai`, `POST /api/settings/ai/test-connection`, `POST /api/settings/ai/golden-test`.\ +**Embedded AI:** `GET /api/settings/ai/embedded`, `POST .../embedded/start?model=`, `POST .../embedded/stop`, `PUT .../embedded/config` — see [API Reference — AI](API-Reference.md#ai).\ +**Per project:** `PATCH /api/projects/{id}/deployment-profile`.\ **Component detail:** `POST .../cves/{cveDbId}/ai-summarize` to refresh a CVE AI summary (logged as `COMPONENT.CVE_AI_REGENERATE`). ### AI response caching (v1.0.4) @@ -355,3 +375,49 @@ Single control point for **library enrichment cache** (deps.dev + OSV). There is Changes are audited as `CACHE.UPDATE_TTL` and `CACHE.CLEAR`. + +--- + +## SAML 2.0 SSO and SCIM 2.0 Provisioning + +OsWL supports SAML 2.0 single sign-on for enterprises that use Okta, Entra ID, or on-premises AD FS. When a SAML IdP is configured, the **Sign in with SSO** option appears on `/login`. + +### SAML setup + +1. Generate an SP signing key pair (optional but recommended): + ```bash + openssl req -x509 -newkey rsa:2048 -keyout oswl-saml-sp.key -out oswl-saml-sp.crt -nodes -days 3650 -subj "/CN=oswl" + ``` +2. Uncomment the SAML block in `application-prod.yaml` and set the environment variables: + | Env var | Purpose | + |---|---| + | `OSWL_SAML_IDP_METADATA_URL` | IdP metadata URL (e.g. Okta/Entra app metadata) | + | `OSWL_SAML_IDP_CERTIFICATE` | Path to the IdP signing certificate file | + | `OSWL_SAML_SP_PRIVATE_KEY` | Path to the SP private key file | + | `OSWL_SAML_SP_CERTIFICATE` | Path to the SP certificate file | +3. Register the SP metadata with your IdP. The metadata endpoint is: + ``` + https:///saml2/service-provider-metadata/oswl + ``` +4. Ensure the IdP releases an email claim (NameID or `email`/`mail` attribute). + +> SAML logins skip the email OTP step because the IdP has already authenticated the user. If the email does not match an existing OsWL account, a disabled local account is created automatically so SCIM can activate and assign roles. + +### SCIM 2.0 provisioning + +SCIM keeps OsWL in sync with your identity provider's user lifecycle. + +| Resource | Endpoint | Notes | +|---|---|---| +| Users | `/scim/v2/Users` | GET/POST/PUT/PATCH/DELETE | +| Groups | `/scim/v2/Groups` | GET/POST/PUT/PATCH/DELETE | + +**Authentication:** every SCIM request must include `Authorization: Bearer `. Issue a dedicated SCIM token programmatically via `ApiKeyService#issueScimToken`. SCIM tokens are stored in the same `api_keys` table but have scope `SCIM`; they are rejected by the normal CLI scan API. + +**Group mapping:** configure `oswl.scim.group-mapping` (env: `OSWL_SCIM_GROUP_MAPPING`) to choose how SCIM groups are represented: +- `TEAM` (default) — each SCIM group becomes a Team; members become TeamMember rows. +- `ROLE_TEMPLATE` — each SCIM group becomes a RoleTemplate; members are assigned that role template. + +**User deactivation:** `DELETE /scim/v2/Users/{id}` sets `active=false` in OsWL. Users are never physically deleted via SCIM, preserving audit attribution. + +**Audit actions:** SCIM operations are recorded as `SCIM.USER_CREATE`, `SCIM.USER_UPDATE`, `SCIM.USER_DEACTIVATE`, `SCIM.GROUP_CREATE`, `SCIM.GROUP_UPDATE`, `SCIM.GROUP_DELETE`, `SCIM.GROUP_MEMBER_ADD`, `SCIM.GROUP_MEMBER_REMOVE`, `SCIM.AUTH_FAILURE`, and `SCIM_KEY.CREATE`. SAML login events are recorded as `SAML.LOGIN_SUCCESS` and `SAML.LOGIN_FAILURE`. diff --git a/docs/en/Analysis-Coverage.md b/docs/en/Analysis-Coverage.md new file mode 100644 index 00000000..021588c1 --- /dev/null +++ b/docs/en/Analysis-Coverage.md @@ -0,0 +1,15 @@ +# Analysis coverage + +Gate responses include `coverage`: total and unanalysed component counts, scan completion, availability of retained detail, and `complete`. An unfinished or archived scan, or any component without completed vulnerability lookup evidence, produces a `COVERAGE / INCOMPLETE_ANALYSIS` violation and exit code 1. Ignore/defer, reachability and newly introduced finding filters do not hide missing analysis. Quick Import stores a source-inspection pending marker in the fenced ingest transaction before asynchronous enrichment starts. It removes that marker after source work and successful finding persistence. Pending or failed scanners also make coverage incomplete, even if vulnerability enrichment already completed or secret gating is disabled. Interrupted imports retain this evidence; they must be retried instead of passing as a clean scan. + +Component rows and detail pages expose the latest lookup time and source outcomes: `RESOLVED`, `UNAVAILABLE`, `UNSUPPORTED`, or `NOT_CONFIGURED`. A successful empty response is resolved. OSV batch IDs are hydrated through the detail endpoint with per-call deduplication and a 256-request budget; after 30 seconds no new detail request starts. An in-flight request can last until its configured HTTP timeout. Unfetched details remain unavailable. A timeout, upstream error, malformed response, or incomplete pagination is unavailable. Any unavailable source keeps coverage incomplete, even when older CVEs or a fetched timestamp remain. Successful retry replaces the outcome. Legacy cached rows without outcome metadata retain their previous completion state until normal refresh. + +Coverage describes available analysis evidence, not a guarantee that every upstream database is current or that a package is safe. NVD and GitHub responses exceeding a single requested page currently fail coverage instead of silently accepting partial results. + +Offline exports preserve confirmed empty results and unresolved component markers separately. Imports retain severity, CVSS vectors/scores and match confidence. An unresolved marker wins over retained findings; missing entries do not count as completed queries. + +Same-version retries serialize ingestion per project. An active Quick Import source lease rejects an overlapping retry. Interrupted, failed, source-pending or AI-active results are retained under their old ID while the retry creates a new result; delayed workers therefore cannot overwrite the retry. Version lookup selects the latest attempt. Fully completed results without pending source or AI work retain the existing replacement behavior and clear previous findings. Expired canceled import workers retain their canceled job outcome while unfinished linked scans are marked failed. Java bytecode result writes finish before the scan publishes completion. + +OSV fixed-version hints are shown only for one unambiguous closed package range. Multiple or open-ended affected intervals require ecosystem-specific version comparison; their hint remains empty rather than recommending an older fix. + +Deployment adds the two nullable library columns in `V32__vulnerability_lookup_outcomes.sql`. Existing data is retained. PostgreSQL runtime validation still requires a dedicated test database; local integration verification uses H2. diff --git a/docs/Authorization-Layers.md b/docs/en/Authorization-Layers.md similarity index 100% rename from docs/Authorization-Layers.md rename to docs/en/Authorization-Layers.md diff --git a/docs/en/Backup-And-Restore.md b/docs/en/Backup-And-Restore.md new file mode 100644 index 00000000..59dde4b5 --- /dev/null +++ b/docs/en/Backup-And-Restore.md @@ -0,0 +1,69 @@ +# Backup and restore + +The most common real-world incident isn't losing PostgreSQL — it's losing `OSWL_ENCRYPTION_KEY` while the database backup is fine. Every VCS access token, AI provider API key, Jira API token, and SMTP mail password stored in the database is encrypted with that key. Lose the key and the database restores perfectly but every one of those secrets is permanently unreadable — every VCS connection, AI provider, and Jira integration has to be reconfigured from scratch. + +This page is the operator-facing counterpart to [Production deployment](Production-Deployment-Checklist.md) — read that first for how the app is deployed; this page is specifically about backing it up and proving a restore actually works. + +--- + +## What to back up + +| Item | Where | Why it matters | +|---|---|---| +| PostgreSQL database | `deploy/docker/compose.prod.yml` volume `db-data-prod`, or your managed PostgreSQL instance | All application data: projects, scans, findings, users, encrypted secrets. | +| `OSWL_ENCRYPTION_KEY` | Wherever you inject it (`.env.prod`, secrets manager) | Decrypts every VCS token / AI API key / Jira token / SMTP password in the database. **Without it, the database backup above is useless for anything requiring those secrets.** | +| Offline snapshot store | `OSWL_AIRGAPPED_IMPORT_DIR` (if air-gapped mode is used) | Re-importing after a restore is possible without this, but you lose your import history and have to re-fetch/re-verify bundles. | +| Embedded AI model directory | `OSWL_EMBEDDED_AI_DIR` (default `embedded-ai/`) | Re-downloadable (see [Embedded AI](Embedded-AI.md)) — back up only if you're air-gapped and can't re-fetch it. | +| Configuration files | `.env.prod`, `deploy/docker/compose.prod.yml`, any `application-prod.yaml` overrides | Without these, you know the *data* is fine but not how the instance was actually configured (SMTP host, HSTS settings, feature flags). | + +Everything else (`OSWL_LOG_DIR` file logs, Quick Import clone temp dirs) is disposable — do not back it up. + +--- + +## PostgreSQL backup + +```bash +# Schema + data, custom format (supports parallel restore, smaller than plain SQL) +pg_dump -Fc -h -U -d -f oswl-$(date +%Y%m%d).dump +``` + +**Recommended cadence:** nightly full dump, retained 30 days, plus PostgreSQL WAL archiving if you need point-in-time recovery between nightly dumps. Store dumps somewhere independent of the database host (object storage, a different availability zone) — a backup that lives next to the thing it backs up doesn't survive the incident that takes out the host. + +Back up `OSWL_ENCRYPTION_KEY` **in a separate secrets manager**, not alongside the `pg_dump` output — the whole point of encrypting these secrets at rest is defeated if the key sits next to the encrypted data in the same backup blob. + +--- + +## Restore procedure + +1. **Provision a fresh PostgreSQL instance** (or wipe the target) and restore the dump: + ```bash + pg_restore -h -U -d --clean --if-exists oswl-20260730.dump + ``` +2. **Inject the same `OSWL_ENCRYPTION_KEY`** the backed-up data was encrypted with — a different key (even a freshly generated valid-looking one) makes every stored secret undecryptable, indistinguishably from data corruption. +3. **Start the app** against the restored database (`SPRING_PROFILES_ACTIVE=prod`, `ddl-auto: validate` — the restored schema must already match the running version; apply any pending manual migration script from `src/main/resources/db/` *before* starting if you're restoring onto a newer app version than the backup was taken on). +4. **Run the verification script** below to confirm the restore is actually usable, not just "the process started." + +```bash +OSWL_VERIFY_EMAIL=you@example.com \ +OSWL_VERIFY_PASSWORD='...' \ +OSWL_VERIFY_PROJECT_ID=1 \ +./scripts/ops/verify-restore.sh https://your-instance.example.com +``` + +The script is interactive (it pauses for your email OTP code, same as any real login) and checks: + +| Check | What it proves | +|---|---| +| `GET /actuator/health` → 200 | The app started against the restored DB with the injected key. | +| Login + OTP | Auth and session infrastructure work against the restored `users` table. | +| `GET /api/settings/vcs` → 200 | **`OSWL_ENCRYPTION_KEY` is correct** — at least one stored VCS token decrypted without error. A wrong key surfaces here as a 500, not a subtle bug discovered weeks later. | +| `GET /projects/{id}/scan-history` → 200 | Scan history restored and queryable (needs `OSWL_VERIFY_PROJECT_ID` set to a project that exists in the restored data). | +| `GET /api/admin/audit-logs` → 200 | Audit log restored and queryable (needs a `SYSTEM_ADMIN` account). | + +Run this as an actual scheduled **rehearsal** (e.g. quarterly, into a scratch environment) — a restore procedure nobody has run since it was written is not a tested procedure. + +--- + +## Key rotation + +There is currently **no re-encryption batch job**. Rotating `OSWL_ENCRYPTION_KEY` today makes every existing encrypted value (VCS tokens, AI API keys, Jira tokens, SMTP passwords) undecryptable — the practical rotation procedure is: rotate the key, then re-enter every secret through its settings UI (VCS connections, AI provider keys, Jira integration, SMTP credentials) so they get re-encrypted under the new key. A proper rotation tool (decrypt-with-old-key → re-encrypt-with-new-key, in place, across all affected tables) is tracked separately as a backlog item — until it exists, treat `OSWL_ENCRYPTION_KEY` as effectively permanent once set, and protect it accordingly (secrets manager, not a `.env` file in a repo). diff --git a/docs/en/Browser-Security-Alerts.md b/docs/en/Browser-Security-Alerts.md new file mode 100644 index 00000000..dcd09a43 --- /dev/null +++ b/docs/en/Browser-Security-Alerts.md @@ -0,0 +1,13 @@ +# Browser security alerts + +The account menu opens **Browser notifications**. A user explicitly enables notifications and chooses new HIGH/CRITICAL vulnerabilities, failed gates, or both. The browser asks for permission only after that action. HTTPS (or localhost), Service Worker, Push API and Notification API support are required. This does not send invitation email or expose project names, CVEs, credentials or findings in notification text. + +Administrators supply `OSWL_WEB_PUSH_PUBLIC_KEY`, `OSWL_WEB_PUSH_PRIVATE_KEY` and `OSWL_WEB_PUSH_SUBJECT` (a contact `mailto:` or HTTPS URI). Use a P-256 VAPID key pair in unpadded base64url form: the public key is the 65-byte uncompressed point, the private key the 32-byte scalar. Keep the private key in the deployment secret store and retain the pair across restarts. Changing the pair requires affected browsers to unsubscribe and subscribe again. Keys are never returned by the API except for the public key. No keys means the feature is disabled; air-gapped mode also disables sending. + +Apply migrations V34 and V35 before enabling this on a migrated production database. Subscription endpoints and browser key material are encrypted with the existing application encryption key. Only the owner can update or remove a subscription. Registration requires Security Center access. Every queued delivery rechecks the current user's enabled/password-change state, project existence, membership and Security Center permission; administrators retain organization-wide access. + +Subscriptions last 30 days and can be renewed through the same form. Expired subscriptions and queued deliveries are cleaned up. Limits are 10 browsers per user and 1,000 per installation. A database row lock serializes subscription limits, event deduplication and delivery claims across workers. Events are deduplicated per subscription, retained for one day, and sent in batches of ten with at most three attempts separated by five minutes. Delivery uses a persisted queue and a shared scheduler lock when cluster locking is enabled. A crash after sending but before recording success can cause a duplicate notification; browser tags replace an existing notification for the same event. Delivery is not guaranteed when a browser is offline or the provider rejects a request. HTTP 404/410 expires the endpoint. Status/attempt metadata is audited without endpoint URLs or payloads. + +Outbound endpoints are restricted to supported Google, Mozilla and Apple push hosts, HTTPS and public network addresses; redirects are disabled. The service worker has no fetch handler and does not cache application pages. Notification clicks accept only a same-origin project Security Center path. Disable removes the server subscription before removing the browser subscription. + +Local verification covers persistence, encryption at rest, revoked access, ownership, deduplication, crash/retry limits, expired cleanup, actual VAPID/AES128GCM request construction, malicious notification navigation and browser permission denial. No live provider delivery or physical iOS/Android device was used. Provider credentials and an operator-owned subscribed device are required to verify those paths. diff --git a/docs/CLI-Integration.md b/docs/en/CLI-Integration.md similarity index 75% rename from docs/CLI-Integration.md rename to docs/en/CLI-Integration.md index ba0ba3b3..08066625 100644 --- a/docs/CLI-Integration.md +++ b/docs/en/CLI-Integration.md @@ -89,6 +89,8 @@ ScanIngestService → async CVE + license enrichment (OSV / deps.dev) --- +The manifest archive follows `/scripts/manifest-rules.json`. It can include build configuration, wrapper files, and `buildSrc` Java/Kotlin files as well as dependency manifests; review the collection rules before sending a repository’s files. + ## Prerequisites 1. A **project** registered in OsWL. @@ -108,12 +110,12 @@ ScanIngestService → async CVE + license enrichment (OSV / deps.dev) | `POST` | `/api/scan` | API key + user password | Submit scan for enrichment | | `GET` | `/api/scan/{scanId}/status` | Session | Poll scan status (UI) | | `POST` | `/api/scan/gate` | API key | **v1.0.4** — PR / CI security gate; returns a verdict with `exitCode` | -| `GET` | `/api/projects/{projectId}/sbom` | Session / key | **v1.0.4** — CycloneDX 1.6 SBOM | -| `GET` | `/api/projects/{projectId}/vex` | Session / key | **v1.0.4** — CycloneDX VEX | -| `GET` | `/api/projects/{projectId}/sarif` | Session / key | **v1.0.4** — SARIF 2.1.0 | +| `GET` | `/api/projects/{projectId}/sbom` | Session | **v1.0.4** — CycloneDX 1.6 SBOM | +| `GET` | `/api/projects/{projectId}/vex` | Session | **v1.0.4** — CycloneDX VEX | +| `GET` | `/api/projects/{projectId}/sarif` | Session | **v1.0.4** — SARIF 2.1.0 | | `POST` | `/api/sbom/import` | Session | **v1.0.4** — Import a third-party CycloneDX file | -> The CLI endpoints authenticate with the `Authorization: Bearer` header only — no session cookie or CSRF token is required. `POST /api/scan`, `POST /api/scan/parse`, and `GET /api/scan/ping` are exempt from the browser CSRF checks; every other route keeps normal CSRF protection. See [Scan API Security](Scan-Api-Security.md). +> CLI requests send a project API key in `Authorization: Bearer`; `POST /api/scan` additionally verifies the submitting user’s email, password, permission, and project access. `POST /api/scan`, `POST /api/scan/parse`, and `POST /api/scan/gate` do not require a browser session or CSRF token. `GET /api/scan/ping` verifies the key. See [Scan API Security](Scan-Api-Security.md). --- @@ -127,9 +129,9 @@ POST /api/projects/{projectId}/keys UI: project → **Settings (⚙)** → **CLI** → **Generate Key**. -### Admin global keys +### Administrator key management -**Settings → Admin → CLI Keys** — see [API Reference](API-Reference.md). +Administrators can list and revoke CLI keys across projects and issue a key for a specified `projectId`. Scan keys remain project-scoped; the separate SCIM token scope does not authorize scan submission. --- @@ -252,8 +254,14 @@ Server-side defaults (all overridable per request): | `failOnEpss` | `OSWL_GATE_FAIL_ON_EPSS` | `0.5` | | `failOnLicenseViolation` | `OSWL_GATE_FAIL_ON_LICENSE_VIOLATION` | `true` | | `onlyNew` | `OSWL_GATE_ONLY_NEW` | `true` | +| `onlyReachable` | `OSWL_GATE_ONLY_REACHABLE` | `false` | +| `failOnSecrets` | `OSWL_GATE_FAIL_ON_SECRETS` | `false` | + +`onlyNew` filters previously observed CVE and license findings using a baseline. It does not guarantee a passing gate: confirmed malware, secret findings when enabled, and other applicable rules can still fail it. `onlyReachable` filters CVE findings to components with a `REACHABLE` result from supported bytecode or source-reference analysis. `UNKNOWN` CVE findings are excluded when this option is enabled; absence of a reference is not proof that a vulnerability cannot be exploited. License and malware checks are independent of this filter. Review coverage before enabling it. A configured GitHub target can receive a Check Run and PR comment. + +A confirmed-malicious package (an OSV `MAL-` advisory) always blocks, regardless of every threshold above and regardless of `onlyNew`/`onlyReachable` — the only way to unblock one is an approved policy exception (waiver, **v1.0.5**, see `/api/policies/exceptions`). -`onlyNew` compares against the previous completed scan as a baseline, so pre-existing debt never blocks a merge. Supply a GitHub target in the request and the verdict is also posted as a Check Run and PR comment. +`failOnSecrets` (**v1.0.5**) blocks on any CRITICAL/HIGH-severity secret finding from the Quick Import clone scan (regex + entropy rules — AWS keys, GitHub/GitLab/Slack/npm tokens, embedded private key blocks, etc.). Like every other threshold above, it resolves through the request override, then the org/team/project policy hierarchy, then the instance default. --- diff --git a/docs/en/Container-Image-Inspection.md b/docs/en/Container-Image-Inspection.md new file mode 100644 index 00000000..66a7d555 --- /dev/null +++ b/docs/en/Container-Image-Inspection.md @@ -0,0 +1,18 @@ +# Container image inspection + +`python scripts/oci/scan-image.py` inspects an immutable OCI image without running it or requiring Docker. It verifies SHA-256 manifest, config and compressed layer contents, checks uncompressed `diff_id` values, and composes whiteouts before reading the final installed OS package database. It does not extract files into the host filesystem. Supported inventory databases are Alpine apk and Debian/Ubuntu dpkg; source package names and source versions are used for vulnerability matching. Language package inventories, RPM, Windows images and zstd layers are currently unsupported; missing/unsupported inventory fails explicitly. + +From the repository root, with Python 3.11 or later: + +```powershell +python scripts/oci/scan-image.py --image registry-1.docker.io/library/alpine@sha256:686d8c9dfa6f3ccfc8230bc3178d23f84eeaf7e457f36f271ab1acc53015037c --platform linux/amd64 --query-osv --output image-scan.json --report image-report.json +``` + +Outputs must be new paths. The scan JSON is the existing scan ingestion component payload; submit it using the deployment's authenticated scan workflow. The separate report records the selected digest, platform, installed package count and advisory query status. `--query-osv` queries exact package versions online and records advisory IDs and time. Without that flag, the report says `UNQUERIED`; package inventory alone does not mean a clean security result. Failed or truncated advisory responses fail the operation. Advisory IDs are point-in-time findings and can change as upstream records change. + +Offline OCI layouts use `--layout --digest sha256:` instead of `--image`. Supply the immutable digest explicitly. Private registries can use `--credentials-file ` containing `username` and `password`. Restrict access to that file. Credentials are sent only to the same registry authentication realm (or Docker Hub's designated authentication host), never to redirected blob/CDN hosts. Transport exceptions suppress URLs and credentials. Custom cross-host authentication realms require a separate reviewed integration and are rejected. + +Default budgets are 120 seconds, 512 MiB compressed content, 2 GiB expanded layer bytes, 256 layers, 250,000 entries per layer, 16 MiB per selected package DB and 50,000 packages. Unsupported compression, traversal, sparse selected entries, unresolved links, package DB removal and pending dpkg updates produce an incomplete-inspection error instead of an empty success. Temporary downloads are removed on normal success and failure; OS force termination can leave OS temporary files for the operator's normal temp retention policy. + + +The implementation follows the [OCI layer specification](https://github.com/opencontainers/image-spec/blob/main/layer.md) and [registry token authentication protocol](https://distribution.github.io/distribution/spec/auth/token/). Dockerfile analysis remains a separate heuristic path; it is not renamed as image inspection. diff --git a/docs/en/Custom-Scan-Rules.md b/docs/en/Custom-Scan-Rules.md new file mode 100644 index 00000000..d83fa74b --- /dev/null +++ b/docs/en/Custom-Scan-Rules.md @@ -0,0 +1,19 @@ +# Custom secret and IaC rules + +System administrators can read and publish the instance-wide rule set using `GET` and `PUT /api/settings/scan-rules`. Use the interactive API documentation or an authenticated, CSRF-protected request. Publication validates the whole set and uses its current `revision`; stale revisions receive HTTP 409. The initial empty set has revision -1. Publishing an empty list disables custom rules. Built-in rules remain active. + +Example rule set: + +```json +{"revision":-1,"rules":[{"id":"company-token","type":"SECRET","severity":"HIGH","description":"Company token detected","regex":"COMPANY_[A-Z0-9]{24}","fileSuffix":".env"}]} +``` + +`type` is `SECRET` or `IAC`. A suffix restricts matching to appropriate file names, for example `.tf`, `.yaml`, `Dockerfile` or `.env`. Rules inspect individual lines; IaC matches are text heuristics, not semantic infrastructure analysis. Descriptions are administrator-authored and must not contain secret values. + +Publication creates a new optimistic revision used by subsequent scans, with an audit event containing revision and rule count. Existing findings retain `custom-@` and their original description. Save the previous GET response if you need rollback: republish its rule list with the current revision. Each scan loads one coherent set from the database, so nodes do not depend on local cache invalidation. + +Limits: 32 rules, 256 regex characters, 2,048 compiled instructions, 400 description characters, 1 MB per file, 16 MB total input, 2,000 visited files, 8,192 characters per line, five seconds and 300 findings. Unsupported lookarounds/backreferences and empty matches are rejected. [RE2/J](https://github.com/google/re2j) provides linear-time matching; the pinned engine version is 1.8. Symlinks are not followed. A limit or unreadable selected input creates an explicit high-severity `custom-scan-incomplete@` IaC finding. Rule loading/compilation failure uses `custom-scan-incomplete` when the revision is unavailable. The gate treats these markers and built-in scanner failure markers as incomplete coverage regardless of only-new or secret-policy filters. Ordinary IaC findings are displayed for review; there is no separate IaC gate threshold. Such a scan must not be interpreted as clean coverage. + +Custom results contain location, rule id/version, severity and description. They contain neither matched text nor a secret fingerprint. Built-in scanning has its own existing fingerprint policy. + +Migration `V33__custom_scan_rules.sql` adds a small configuration table; it does not change source or finding retention. Local tests cover no-secret output, versioned results, invalid/expensive patterns, input limits and direct service authorization. PostgreSQL migration/runtime verification remains environment-dependent. diff --git a/docs/Database-Schema.md b/docs/en/Database-Schema.md similarity index 79% rename from docs/Database-Schema.md rename to docs/en/Database-Schema.md index d8443c1c..03a705c8 100644 --- a/docs/Database-Schema.md +++ b/docs/en/Database-Schema.md @@ -1,6 +1,6 @@ # Database schema and migrations -OsWL stores all application data in PostgreSQL (`prod`) or H2 file-mode (`local`). JPA entities under `domain/entity/` are the **source of truth** for the live schema. +OsWL stores all application data in PostgreSQL (`prod`) or H2 file-mode (`local`). JPA entities under `domain/entity/`, `auth/entity/` are the **source of truth** for the live schema. --- @@ -16,7 +16,9 @@ When upgrading a production database, apply SQL scripts from `src/main/resources ### Flyway (v1.0.4, opt-in) -`OSWL_FLYWAY_ENABLED=true` hands schema management to Flyway (`baseline-on-migrate` on, so an existing database is baselined rather than rejected). Generate a baseline matching your current schema before enabling it. The default is `false`, which keeps the `ddl-auto` behaviour above. +`OSWL_FLYWAY_ENABLED=true` enables the versioned migrations in `src/main/resources/db/migration/`; it defaults to `false`. The repository already provides `V1__baseline.sql` and subsequent migrations. On an empty PostgreSQL database, Flyway runs V1 and then the later versions before Hibernate validation. For an existing database without Flyway history, `baseline-on-migrate` records version 1 without executing V1, then runs V2 onward. Back up and compare the existing schema with these migrations before enabling it; manually applied changes can conflict with later migrations. Do not regenerate or edit a migration already applied to a shared database. If managing SQL manually, apply all required changes for the target version in order; the short list of legacy scripts below is not a complete fresh-install schema. + +The migration directory also covers the current schema beyond v1.0.4: organizations and teams (V11), SAML/SCIM (V13), webhooks (V14), CVE sources and C/C++ metadata (V15–V16), policy inheritance and exceptions (V17, V28), reachability and evidence (V18, V29–V30), audit integrity (V19), UI preferences and onboarding (V20, V23–V24), secret/IaC findings (V21), scan archiving (V22), report branding (V25), cache counters and invalidation (V26–V27), and durable import jobs (V31). Use the actual migration files as the complete ordered inventory. Some migrations are not idempotent; do not blindly rerun them. ### Columns added in v1.0.4 @@ -73,7 +75,7 @@ Run **once** when moving to a release that removed legacy schema: | `project_versions.imported_at`, `last_updated_at` | Unused timestamps | | `projects.updated_at`, `version`, `last_scanned_at` | Denormalized fields; UI reads latest `scan_results` instead | -See [Production deployment checklist](Production-Deployment-Checklist.md) §8. +See [Production deployment checklist](Production-Deployment-Checklist.md) §9. --- @@ -94,7 +96,7 @@ libraries (shared) airgapped_snapshot_entries ── airgapped_snapshot_meta (offline snapshot store) -users, role_templates, audit_logs, cache_settings, vcs_connections, … +users, role_templates, audit_logs, cache_settings, user_vcs_connections, … ``` - **Project card version / last scan** — derived from the latest `scan_results` row, not `projects.version`. diff --git a/docs/en/Embedded-AI.md b/docs/en/Embedded-AI.md new file mode 100644 index 00000000..95c9512f --- /dev/null +++ b/docs/en/Embedded-AI.md @@ -0,0 +1,103 @@ +# Embedded AI + +OsWL runs llama.cpp at `http://127.0.0.1:11435/v1`, registered as the LOCAL provider. Inference data stays on this server; model installation needs network access or offline file transfer. **Qwen3.5-2B Q4_K_M is the CPU default; Gemma 4 E2B Q4_K_M is optional.** Only one model runs at a time. The integration is text-only; no image/audio projector or GPU is required. + +## Requirements & Directory Layout + +| Model | Weight download | Whole-server planning minimum | Recommended | +|---|---:|---|---| +| Qwen3.5 2B Q4_K_M | 1.28 GB | 2 vCPU / 8 GB RAM | 4 vCPU / 8–16 GB RAM | +| Gemma 4 E2B Q4_K_M | 3.11 GB | 4 vCPU / 8 GB RAM | 4 vCPU / 16 GB RAM | + +These are **sizing estimates, not certified performance minima**: OsWL + PostgreSQL, small occasional scans, one AI generation, 4K–8K context. Large archives, concurrent scans and database growth require additional capacity. Weight size is not peak process memory. Reserve at least 6 GB disk for these two weights, plus runtime, DB, logs and older models. Application builds are outside this estimate. + +Qwen is the default because it has a smaller weight footprint for a shared CPU server, not because it always produces better answers. Validate English/Korean/Japanese quality on your own findings. Burstable vCPU counts do not guarantee sustained full-core capacity: check depleted CPU credits as well as warm-model performance. Continuous analysis may need sustained CPU capacity or a separate CPU worker, without requiring GPU hardware. + +Use a CPU runtime matching the server OS/architecture. Keep companion libraries from the same release together. Local validation uses llama.cpp **b10068 (571d0d540)**; this release or a compatible newer version must support both model architectures, `--chat-template-kwargs` and `-fa on`. + +```text +embedded-ai/ + llama/ + llama-server(.exe) + ... companion libraries ... + model/ + Qwen/Qwen3.5-2B-Q4_K_M.gguf + Gemma/gemma-4-E2B-it-Q4_K_M.gguf + llama-server.log +``` + +| Model | Bytes | SHA-256 | +|---|---:|---| +| Qwen3.5-2B Q4_K_M | 1280835840 | `aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223` | +| Gemma 4 E2B Q4_K_M | 3106738272 | `740185b21d22ceb83a11c3aa62ad5842ef32c70f6096d756bbee85a1e4ec34b8` | + +- [Qwen model card](https://huggingface.co/Qwen/Qwen3.5-2B) +- [Qwen GGUF, pinned revision](https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/tree/f6d5376be1edb4d416d56da11e5397a961aca8ae) +- [Gemma model card](https://huggingface.co/google/gemma-4-E2B-it) +- [Gemma GGUF, pinned revision](https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/tree/0314792d7f1f7e229411f620751375812bb9faf2) +- [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) +- [License notices](../../THIRD_PARTY_LICENSES.md#embedded-ai-runtime-and-models) + +The configured directory is the root, not a family folder. OsWL scans `model/` and one family subfolder. Legacy root-level GGUF and root/bin runtime locations remain supported. Use unique filenames: the managed tree wins over same-named legacy weights. Projectors (`mmproj*`), draft weights (`mtp-*`), importance matrices and files resolving outside the root are excluded. + +Existing models on other installations are not automatically deleted or replaced. Move retired files outside the discovered folders. If a saved model disappears, the UI returns to the installed default preference. + +Local smoke checks with the project's localized prompts produced English, Korean and Japanese answers from both models. Qwen also changed a supplied fix version and misreported counts in some samples. These checks establish runtime compatibility, not factual accuracy: verify AI recommendations against the original scan findings. The default is a resource choice, not a quality ranking. + +## Starting and Stopping + +1. Put the executable and libraries in `llama/`. +2. If no chat model exists, startup prefetch downloads **only Qwen3.5 2B** into `model/Qwen/`. Start also triggers download if necessary. Disable prefetch with `OSWL_EMBEDDED_AUTO_DOWNLOAD=false`. +3. Gemma is manual: download the pinned file above, verify both SHA-256 and byte count, then place it in `model/Gemma/`. +4. Open **Settings → AI → Provider → Embedded AI**. The dropdown lists installed files with model names and sizing guidance. +5. To switch: **Stop → select model → Save → Start**. Check Active; if a candidate fails, a fallback can start and the UI indicates this. +6. Under **Scope / Context**, choose English, Korean or Japanese and save. Embedded ownership and endpoint are preserved. Existing summaries only change after regeneration; language selection does not translate stored results. + +Existing AI-settings permissions apply. Start registers the actual model as LOCAL and deactivates another active provider. Stop deactivates LOCAL. Selecting another provider does not stop the embedded process; stop it separately to release memory. + +## Switching Models + +The default preference is Qwen3.5-2B Q4_K_M, then other Qwen3 weights, then Gemma 4 E2B, then remaining compatible GGUF files. Explicitly selected and valid saved models take priority. Stop before switching. Additional compatible chat models can be installed manually, subject to their own requirements and licenses. + +## Changing the Model Folder + +Save the root containing `llama/` and `model/`. A changed root stops the managed running server. Moving files while a server is running can fail due to file locks; stop first. On Linux, the executable also needs execute permission. + +## CPU defaults + +| Environment variable | Default | +|---|---| +| `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | +| `OSWL_EMBEDDED_AI_PORT` | `11435` | +| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `0` | +| `OSWL_EMBEDDED_AI_THREADS` | `1` | +| `OSWL_EMBEDDED_AI_PARALLEL` | `1` | +| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | +| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | +| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | +| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | +| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | empty | +| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | + +CPU-only is explicit (`-ngl 0`), as is one generation slot. Non-thinking uses `LLAMA_ARG_CHAT_TEMPLATE_KWARGS={"enable_thinking":false}` plus a zero reasoning budget; budget alone can leave new models with empty answers. Consider two threads on a 4-vCPU server only after checking web/scan latency. Threads are not a CPU quota; apply OS/container limits if required. + +The context is total capacity divided across slots. `OSWL_AI_MAX_PARALLEL_CALLS` remains 3 and limits tasks **within each scan**, not globally. With one server slot, requests may queue past the current 90-second non-streaming read timeout. Small hosts should set this to 1 and avoid overlapping scans. It is not a global admission queue. + +## Integrity, offline use and GitHub distribution + +The default URL is pinned to the upstream revision above. Old OsWL GitHub `models-v1` contains Qwen3 1.7B and must not be reused for the new default. This change does not publish or assume a new GitHub model asset. + +`OSWL_EMBEDDED_DEFAULT_MODEL_URL`, `OSWL_EMBEDDED_DEFAULT_MODEL_SHA256` and `OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES` must describe the same file. Both hash and size are checked before installing a partial download. `OSWL_EMBEDDED_FALLBACK_MODEL_URL` defaults to empty; configure only a verified byte-identical mirror. A mirror is installed under the default Qwen filename; different models belong under their real filenames. + +Air-gapped mode never downloads models: supply the matching runtime, verified weights and license notices offline. Docker does not bundle them: mount this root and supply a matching **Linux** runtime, with write access if downloads are enabled. Windows executables do not run inside Linux containers. + +`embedded-ai/` is excluded from Git and Docker context; weights/runtime are not in the published JAR. Qwen3.5 and Gemma 4 are Apache 2.0; llama.cpp is MIT. Preserve full licenses, attribution, upstream notices when supplied, and the Unsloth GGUF Q4_K_M quantization notice. Runtime redistribution also needs the notices of its companion libraries. + +## Troubleshooting + +- Missing runtime: check llama/, OS/architecture, libraries and execute permission. +- Empty answers: check compatible runtime and explicit non-thinking template parameters. +- Start failure: inspect llama-server.log for model support or RAM exhaustion. +- Wrong active model: stop, save the installed selection, start and check fallback status. +- Timeout under load: reduce concurrent scans/calls and inspect CPU credits. +- Download mismatch: check URL, size and SHA-256 as one set. diff --git a/docs/en/Getting-Started.md b/docs/en/Getting-Started.md new file mode 100644 index 00000000..4a395116 --- /dev/null +++ b/docs/en/Getting-Started.md @@ -0,0 +1,122 @@ +# Getting Started + +This guide walks you through installing OsWL, running the setup wizard, and completing your first project scan. + +--- + +## System Requirements + +| Component | Requirement | +|---|---| +| **JDK** | 25 | +| **Build tool** | Gradle Wrapper (bundled — `./gradlew`) | +| **Database** | H2 file-mode (local / dev) or PostgreSQL 15+ (production) | +| **OS** | Linux, macOS, or Windows | +| **Memory** | Depends on scan workload; embedded AI needs additional RAM | + +> No Node.js or npm is required — the Tailwind CSS standalone binary is downloaded automatically by Gradle on the first build. + +--- + +## Installation + +### 1. Clone the Repository + +```bash +git clone https://github.com/SalkCoding/Oswl.git +cd Oswl +``` + +### 2. Choose a Profile + +OsWL ships with two Spring profiles: + +| Profile | Database | Use case | +|---|---|---| +| `local` *(default)* | H2 file (`./oswl-db.mv.db`) | Development and evaluation | +| `prod` | PostgreSQL | Production deployment | + +### 3. Start the Application + +For local development, run `./gradlew bootRun` (PowerShell: `.\gradlew.bat bootRun`). The default `local` profile uses H2 and a fixed development encryption key. Use a separate, persistent key outside development; do not reuse the development key in production. + +For production, build the deployable artifact with `./gradlew bootJar verifyProdJar` and run the resulting JAR with the `prod` profile. Set `DB_URL`, `DB_USERNAME`, `DB_PASSWORD`, and a persistent `OSWL_ENCRYPTION_KEY` that decodes to 32 bytes. Generate the key once with `openssl rand -base64 32` and retain it across restarts and restores. Prepare the PostgreSQL schema before startup: `prod` validates the schema and does not create it automatically. + +See the [production checklist](Production-Deployment-Checklist.md) and [Docker commands](../../deploy/README.md) for deployment. A `.env` file alone is not loaded by `bootRun` or `java -jar`; export variables in the launching shell, supply Spring configuration, or use Compose with `--env-file`. + +The default application port is **8080**. Memory requirements depend on the workload; local AI needs additional memory for the model and context window. + +## Embedded AI Model (first run) + +The current default is **Qwen3.5-2B Q4_K_M** (1,280,835,840 bytes, about 1.28 GB), downloaded from a pinned revision of `unsloth/Qwen3.5-2B-GGUF` on Hugging Face. The file is stored under `embedded-ai/model/Qwen/` and verified against the configured SHA-256. The llama.cpp runtime is installed separately under `embedded-ai/llama/` or on `PATH`. + +When no model is available, `OSWL_EMBEDDED_AUTO_DOWNLOAD=true` permits background prefetch on startup. Prefetch does not start the sidecar or activate an AI provider. Start it from **Settings → AI** after installing the runtime. Set the variable to `false` to disable startup prefetch. Air-gapped mode disables automatic model downloads. See [Embedded AI](Embedded-AI.md) for model discovery, configuration and troubleshooting. + +## Air-Gapped (Offline) Startup + +Offline mode switches the supported vulnerability feeds to snapshot data; it is not a network firewall. Configure VCS, SMTP, webhooks and AI endpoints for your network separately. + +For hosts without outbound internet access: + +1. Set `OSWL_AIRGAPPED_ENABLED=true` before startup. Vulnerability / threat-intel lookups (OSV, deps.dev, EPSS, KEV) are then served from an imported offline snapshot — no outbound HTTP is attempted, and the embedded-model auto-download is skipped. +2. On an internet-connected machine, build a snapshot bundle: + + ```bash + scripts/oswl-vdb/oswl-vdb.sh build --wanted wanted-list.jsonl --out bundle.zip + ``` + + (Windows: `scripts/oswl-vdb/oswl-vdb.ps1`.) To target the bundle at your actual dependencies, first export a wanted-list from a connected OsWL instance: `GET /api/admin/snapshot/wanted-list`. +3. Transfer `bundle.zip` to the air-gapped host and import it as a System Admin via `POST /api/admin/snapshot/import` (multipart upload), or whitelist a directory with `OSWL_AIRGAPPED_IMPORT_DIR` and use `POST /api/admin/snapshot/import-from-path`. See [Administration — Offline snapshot bundles](Administration.md). +4. For embedded AI, place a `.gguf` model you obtained yourself into `embedded-ai/` before clicking **Start**. + +--- + +## Setup Wizard + +On the very first startup (empty database), OsWL redirects application-page requests to `http://localhost:8080/setup`. + +The wizard collects: + +| Field | Description | +|---|---| +| **Admin Email** | Used as the login credential for the System Admin account | +| **Password** | Must meet the minimum length policy (default: 8 characters) | +| **Display Name** | Shown in the UI and audit log | + +After you submit, OsWL creates the admin account and redirects to the login page. + +> If you need to restart from a clean state in local mode, stop the server and delete `oswl-db.mv.db` (and `oswl-db.trace.db` if present), then restart. + +--- + +## First Login + +1. Open `http://localhost:8080/login` and enter the account created in Setup. +2. If email two-factor authentication is required, enter the six-digit code sent for the current session. The code expires after three minutes, and resend has a 60-second cooldown. +3. With the default local GreenMail SMTP configuration, received codes are displayed in the server log as `*** OTP CODE: ... ***`. If external SMTP is configured, check the recipient mailbox instead. There is no fixed `000000` bypass. +4. Accounts marked for a password change must set a new password before continuing. + +## Seeding Test Data (local only) + +After completing Setup, `GET /data/test` deletes existing project, scan and library data and queues real Quick Import jobs for the public repositories in `DemoImportCatalog`. It redirects to Projects; imports run asynchronously and need network access. It does not create a fixed test account or a predetermined set of vulnerabilities. + +These development endpoints exist in the local source set under `local`/`test` profiles and are excluded from the production JAR. Under `local`, `/data/**` is permitted without authentication, so use this destructive reset endpoint only on an isolated development instance. + +`GET /data/test-api-key` issues a project-scoped key for the first available project. It returns 404 when no project exists; wait for the demo imports to create one. + +## UI/Accessibility Test Harness (developer-only) + +`./gradlew uiTest` runs the existing Playwright browser suite against a real application instance. The accessibility tests run axe-core on their selected pages; other tests cover interactions and request flows. The task downloads Chromium when needed and is separate from `test`/`check`. + +JUnit HTML reports are in `build/reports/tests/uiTest/`; axe reports are in `build/reports/axe/`. For offline execution, provision the browser binaries and build dependencies in advance and set `PLAYWRIGHT_BROWSERS_PATH` where required. Browser installation does not replace dependency provisioning. + +## Access control (recommended reading) + +* [Authorization layers](Authorization-Layers.md) — role templates (Admin / Developer / Viewer) vs project membership +* [Production deployment checklist](Production-Deployment-Checklist.md) — before going live with `prod` + +## Next Steps + +* [Connect your first VCS repository](Quick-Import.md) +* [Submit a scan via the CLI](CLI-Integration.md) +* [Explore the Security Center](Security-Center.md) diff --git a/docs/Glossary.md b/docs/en/Glossary.md similarity index 100% rename from docs/Glossary.md rename to docs/en/Glossary.md diff --git a/docs/Home.md b/docs/en/Home.md similarity index 92% rename from docs/Home.md rename to docs/en/Home.md index be8a06a9..011bddd5 100644 --- a/docs/Home.md +++ b/docs/en/Home.md @@ -1,13 +1,18 @@ # OsWL Documentation +[What's new in 1.0.5.1](Whats-New-v1.0.5.1.md) + Welcome to the **OsWL** (Open-source Software Watchlist) documentation hub. OsWL is an in-house **SCA (Software Composition Analysis)** platform that gives your team a single place to track CVE vulnerabilities and license compliance across all OSS dependencies — from a single microservice to an entire portfolio of products. --- +**English** | [한국어](../ko/Home.md) | [日本語](../ja/Home.md) + ## Navigation + | Page | What you'll find | |---|---| | [What's New in v1.0.4](Whats-New-v1.0.4.md) | SBOM / VEX / SARIF export, CI gate, continuous monitoring, org dashboard, air-gapped mode | @@ -25,12 +30,13 @@ OsWL is an in-house **SCA (Software Composition Analysis)** platform that gives | [Authorization layers](Authorization-Layers.md) | Role templates vs project membership (who can access what) | | [Project access control](Project-Access-Control.md) | Technical ACL reference for developers | | [Production deployment](Production-Deployment-Checklist.md) | Pre-launch checklist for `prod` profile | +| [Backup and restore](Backup-And-Restore.md) | Backup scope, restore procedure, verification | | [Database schema](Database-Schema.md) | `ddl-auto` strategy and `src/main/resources/db/` migrations | | [Scan API security](Scan-Api-Security.md) | How CLI scan submission is protected | | [API Reference](API-Reference.md) | Full REST endpoint catalogue | | [Glossary](Glossary.md) | Definitions of all OsWL terms | -> Korean documentation lives in [`docs/ko/`](ko/Home.md); Japanese documentation lives in [`docs/ja/`](ja/Home.md). +> Korean documentation lives in [`docs/ko/`](../ko/Home.md); Japanese documentation lives in [`docs/ja/`](../ja/Home.md). --- diff --git a/docs/en/Inline-Team-Access.md b/docs/en/Inline-Team-Access.md new file mode 100644 index 00000000..dc2b5458 --- /dev/null +++ b/docs/en/Inline-Team-Access.md @@ -0,0 +1,7 @@ +# Add a teammate during onboarding + +System administrators can create teammate access in the first onboarding step without leaving the wizard. Select a role template, enter name/email and a temporary password, then create the account. This reuses the existing user-management endpoint and audit path. It does not send an invitation email; share the temporary password through your organization's approved channel. The user must change it at first login. + +The form clears the password after success and updates the team-ready badge. Duplicate email, missing/deleted role and network failures leave a retryable form. Loading failure prevents submission; an empty role catalog directs the administrator to create a template in Settings. Non-administrators do not receive the form, and the existing API rejects their requests. + +Browser verification uses actual user creation and duplicate rejection, mandatory password-change state, and axe checks of the resulting success/error screen. Test accounts live only in the isolated H2 UI profile. diff --git a/docs/License-Analysis.md b/docs/en/License-Analysis.md similarity index 100% rename from docs/License-Analysis.md rename to docs/en/License-Analysis.md diff --git a/docs/en/Offline-CocoaPods-Specs.md b/docs/en/Offline-CocoaPods-Specs.md new file mode 100644 index 00000000..08a51b60 --- /dev/null +++ b/docs/en/Offline-CocoaPods-Specs.md @@ -0,0 +1,17 @@ +# Scoped offline CocoaPods Specs + +Air-gapped scans can resolve CocoaPods names to source repositories and license metadata from an imported `cocoapods-specs.jsonl` source. The existing Podfile.lock parser and vulnerability enrichment path consume this mapping. Missing or unsupported Specs remain unanalysed; importing Specs alone does not supply vulnerability data. + +Supply original podspec JSON files that your organization may use and a JSON manifest containing `{ "file": "FixturePod.podspec.json", "origin": "https://example.org/source/FixturePod.podspec.json" }` entries. Build a bundle with: + +```powershell +python scripts/vdb/build-cocoapods-specs.py manifest.json scoped-specs.zip +``` + +Import the ZIP through the existing offline snapshot settings. Use MERGE when adding mappings to an existing collection; REPLACE replaces the Specs source carried by the bundle. Other sources absent from the ZIP are unaffected. Import the corresponding OSV SwiftURL vulnerability records separately, using the repository name such as `github.com/Owner/Repo` and exact version. Explicit empty vulnerability records represent completed clean lookups; absent records remain unresolved. + +The bundle requires format version 2 and the normal SHA-256 file manifest. Each record contains name, version, HTTPS origin without credentials/query/fragment, SHA-256 of the original UTF-8 podspec, and the original podspec text. Identity must agree with its contents. Limits are 1,000 stored Specs and 64 KiB per original spec. Invalid checksums, identities, limits or legacy bundles are rejected transactionally. Export preserves original metadata and source dates rather than assigning fresh upstream dates. + +The builder never fetches or redistributes the upstream Specs index. Included regression fixtures are authored for this repository. A pod's declared license describes that pod and is not evidence of permission to redistribute the entire Specs index; operators supply metadata they are entitled to transfer. No third-party Specs dataset is shipped by this feature. + +Verification: scoped import/export and provenance preservation, tampering/legacy rejection, missing mapping, preserved unresolved/CVSS evidence, and Podfile → real ingest → offline enrichment of an owned vulnerable fixture. This does not certify current upstream advisory coverage. diff --git a/docs/en/Organization-Risk-Briefing.md b/docs/en/Organization-Risk-Briefing.md new file mode 100644 index 00000000..c0d082a1 --- /dev/null +++ b/docs/en/Organization-Risk-Briefing.md @@ -0,0 +1,9 @@ +# Organization risk briefing + +Open **Organization dashboard → Organization risk briefing** for a concise, printable summary of portfolio risks and follow-up actions. It uses each project's latest completed scan and lists up to five priority projects, critical/high findings, untriaged KEV findings and license-policy violations. The print button uses browser printing/PDF output. + +This is a decision-oriented view over the existing organization aggregates. It does not generate an AI opinion or infer that a reviewed/deferred item has been fixed. Counts represent finding occurrences rather than unique CVEs. Scan dates and analysis coverage must be checked before treating a result as current; the briefing states these limits explicitly. Projects without completed scans remain visible in the coverage denominator. + +Both controller and service require `ORG_DASHBOARD_VIEW` (system administrators also qualify). Links to individual projects still require normal project access. Access is audited as `ORG_SUMMARY.VIEW`. + +Chromium tests verify English/Korean/Japanese rendering, 390px layout, serious/critical axe violations, PDF rendering and denied access. These are browser tests, not physical-device certification. diff --git a/docs/en/Production-Deployment-Checklist.md b/docs/en/Production-Deployment-Checklist.md new file mode 100644 index 00000000..49098dc4 --- /dev/null +++ b/docs/en/Production-Deployment-Checklist.md @@ -0,0 +1,235 @@ +# Production deployment checklist + +Use this one-page list before exposing OsWL on the internet. **Do not run `prod` with `local` defaults** (H2, Swagger, `/data/**`, or committed encryption keys). + +## 1. Profile and build + +| Check | Action | +|-------|--------| +| Profile | Set `SPRING_PROFILES_ACTIVE=prod` | +| JAR | Build with `./gradlew bootJar verifyProdJar` — `TestDataController` must **not** appear in the JAR | +| Local-only code | `src/local/java` is for `bootRun` / dev only, not packaged in `bootJar` | + +## 2. Required environment variables + +| Variable | Purpose | +|----------|---------| +| `DB_URL` | JDBC URL (e.g. `jdbc:postgresql://db:5432/oswl`) | +| `DB_USERNAME` | Database user | +| `DB_PASSWORD` | Database password | +| `OSWL_ENCRYPTION_KEY` | Instance encryption key (generate with `openssl rand -base64 32`) | + +Copy `deploy/docker/.env.prod.example` → `.env.prod` and fill every value. **No defaults** for DB or encryption in `application-prod.yaml`. + +After startup, configuration warnings are grouped in the `OSWL STARTUP WARNINGS` log block. Some invalid settings, including a missing production encryption key or datasource configuration, can fail startup before this block appears. Keep a stable `OSWL_ENCRYPTION_KEY` in production. The `local` YAML supplies a stable development-only fallback; never use that key in production. + +## 3. Network binding + +For a JVM running directly on the host, `application-prod.yaml` defaults to `SERVER_ADDRESS=127.0.0.1`. A reverse proxy on the same host can connect to it. For **Docker Compose**, set `SERVER_ADDRESS=0.0.0.0` **inside the container** so Docker can forward traffic to the application. This does not publish every host interface: `deploy/docker/compose.prod.yml` separately binds the host port to **`127.0.0.1:8080:8080`**. The production sample uses this container setting. Existing `.env.prod` files must be checked when upgrading. + +Terminate TLS at your reverse proxy. With the supplied host-loopback port mapping, run the proxy on the Docker host; a proxy in another container should use the service address on a shared Docker network. Accept forwarded headers only from a trusted proxy. + +## 4. Docker Compose (production) + +Run from the repository root. Keep existing `.env.prod` values; copy the template only for a new installation. Both Compose files default to project name `oswl`. If the previous installation used another project name, keep it with `-p YOUR_EXISTING_PROJECT` or `COMPOSE_PROJECT_NAME` so it reconnects the existing volumes. See the [deployment file guide](../../deploy/README.md). + +```bash +cp deploy/docker/.env.prod.example .env.prod +# Edit DB_*, OSWL_ENCRYPTION_KEY, SMTP_* +docker compose --env-file .env.prod -f deploy/docker/compose.prod.yml up -d --build +``` + +Compose reads `.env.prod` through `--env-file`. A direct `java -jar` or `bootRun` launch does not automatically load this file: export the variables or configure them in the service manager. Prepare the database schema before first production startup (see §9). + +Verify logs: no missing-env banner, PostgreSQL connected, no H2 or Swagger URLs. + +`deploy/docker/compose.prod.yml` caps both the container's own stdout/stderr (docker `json-file` driver, 100MB × 10 files) and the app's own rotating file log (mounted to the `oswl-logs-prod` volume) — see §5 for the latter. + +## 5. Logging and observability + +| Check | Action | +|-------|--------| +| Log levels | `prod` profile: `com.salkcoding.oswl` at **INFO** only; no DEBUG on AI/clients | +| AI excerpts | `oswl.ai.debug.log-prompt-excerpt` / `log-response-excerpt` default **false** in prod | +| Actuator | **`health`, `info`, `prometheus`** exposed (v1.0.4); everything else disabled (`enabled-by-default: false`) | +| Metrics scrape | Point Prometheus at `/actuator/prometheus` — the scraper must present admin credentials | +| Actuator auth | Requires **SYSTEM_ADMIN** session (not public) | + +### Log rotation and request correlation + +`local`/`test` are console-only. In `prod`, `logback-spring.xml` additionally writes a rolling file log: + +| Variable | Default | Purpose | +|----------|---------|---------| +| `OSWL_LOG_DIR` | `./logs` (docker: `/var/log/oswl`, see §4) | Directory for `oswl.log`. Rotates at 100MB or daily, keeps 30 files, caps total at 5GB. | +| `OSWL_LOG_JSON` | `false` | `true` switches the file (not the console) to one JSON object per line — point a log shipper at it for SIEM ingestion. | + +Every request is stamped with a `requestId` (also returned as the `X-Request-Id` response header) and, once authenticated, `userId` — both appear in every log line for that request via MDC (`[req=...] [user=...]` in plain-text mode, top-level fields in JSON mode), so a support ticket referencing one request can be traced across the whole log without grepping by timestamp. + +## 6. Security features enabled in prod + +- Springdoc / Swagger UI: **off** +- H2 console and `/data/**`: **not in prod JAR** (local profile + `src/local/java` only) +- Security headers + HSTS (behind HTTPS): see `application-prod.yaml` `oswl.security.headers` +- Trusted-device cookie: `Secure` in prod + +## 7. Optional secrets + +| Variable | Purpose | +|----------|---------| +| `OSWL_TRUSTED_DEVICE_HMAC_KEY` | Dedicated HMAC key for `OSWL_TD` cookie (recommended; separate from `OSWL_ENCRYPTION_KEY`) | +| `OSWL_OIDC_CLIENT_ID` / `OSWL_OIDC_CLIENT_SECRET` / `OSWL_OIDC_ISSUER_URI` | **v1.0.4** — OIDC single sign-on. Also uncomment the `spring.security.oauth2.client` block in `application-prod.yaml`; the login page shows the SSO button only when a provider is registered. | + +### v1.0.4 opt-in features + +All default to **off** — enable deliberately. + +| Variable | Default | Effect when enabled | +|---|---|---| +| `OSWL_FLYWAY_ENABLED` | `false` | Run the supplied V1 baseline and later migrations; review existing schemas first | +| `OSWL_AIRGAPPED_ENABLED` | `false` | All vulnerability / threat-intel lookups served from an imported offline snapshot; no outbound HTTP — full offline procedure in §7.1 | +| `OSWL_GATE_*` | see [What's New](Whats-New-v1.0.4.md) | Default thresholds for `POST /api/scan/gate` | + +Continuous monitoring is the exception: `OSWL_MONITORING_ENABLED` defaults to **`true`** (nightly OSV re-query at 03:00, `OSWL_MONITORING_CRON`). It sends e-mail to project members, so confirm SMTP is configured before first launch — or set it to `false`. + +### Performance tunables (v1.0.4) + +Defaults are production-safe — override only when you have a reason. + +| Variable | Default | Purpose | +|----------|---------|---------| +| `OSWL_DEPSDEV_CONNECT_TIMEOUT_MS` / `OSWL_DEPSDEV_READ_TIMEOUT_MS` | `5000` / `10000` | deps.dev HTTP timeouts (previously a stalled call could hang a whole scan) | +| `OSWL_DEPSDEV_MAX_CONCURRENT` | `24` | Max simultaneous deps.dev requests; on HTTP 429 the client backs off and retries once | +| `OSWL_OSV_CONNECT_TIMEOUT_MS` / `OSWL_OSV_READ_TIMEOUT_MS` | `5000` / `30000` | OSV HTTP timeouts (read is generous — a 1,000-item batch query can legitimately take a while) | +| `OSWL_VERSION_META_TTL_SEC` | `86400` | TTL for deps.dev version metadata on cache-hit libraries | +| `OSWL_CLONE_SPARSE_ENABLED` | `true` | Quick Import clones are blobless + sparse-checked-out; git servers without partial-clone support fall back to a full shallow clone automatically | +| `OSWL_AI_STREAMING_ENABLED` | `true` | Stream free-form AI calls (posture/trend/version diff) over SSE for live previews; endpoints that reject streaming fall back automatically | +| `OSWL_AI_MAX_PARALLEL_CALLS` | `3` | Max concurrent AI enrichment calls; a local llama-server benefits from `--parallel` up to this same count | +| `OSWL_ANTHROPIC_PROMPT_CACHING_ENABLED` | `true` | Mark the Anthropic system prompt as an ephemeral cache breakpoint for repeat calls | + +### 7.1 Air-gapped / offline snapshot (v1.0.4) + +This mode redirects supported vulnerability and threat-intelligence feeds to the snapshot; it is not a network firewall. Configure VCS, SMTP, webhooks, and external AI providers separately for an isolated environment. + +Set `OSWL_AIRGAPPED_ENABLED=true` so vulnerability/threat-intel lookups (OSV, deps.dev, EPSS, CISA KEV) are served from an imported offline snapshot instead of live external APIs. No outbound HTTP is attempted for enrichment. + +| Step | Action | +|------|--------| +| 1. Build bundle | On an internet-connected machine, run the `oswl-vdb` builder. Wrapper scripts: `scripts/oswl-vdb/oswl-vdb.sh` (Linux/macOS) or `scripts/oswl-vdb/oswl-vdb.ps1` (Windows). Both invoke `./gradlew vdbBuild --args="..."`. | +| 2. Target the bundle | Export the components this instance actually scans with `GET /api/admin/snapshot/wanted-list` (SYSTEM_ADMIN), then pass it to `build --wanted wanted-list.jsonl`. The builder fetches only those ecosystem/name/version tuples instead of a full upstream mirror. | +| 3. Import bundle | `POST /api/admin/snapshot/import?mode=replace|merge` (multipart `.zip`). For large bundles, use `POST /api/admin/snapshot/import-from-path` with `{"path":"bundle.zip","mode":"merge"}` after setting `OSWL_AIRGAPPED_IMPORT_DIR` to a whitelist directory. | +| 4. Place model (if using Embedded AI) | Provision the runtime in `embedded-ai/llama/` and verified weights in `embedded-ai/model//` before starting the offline host. Downloads remain disabled even if an internal mirror is configured; see §8. | + +`oswl-vdb build` options (see `VdbBuilderCli`): +- `--sources osv,epss,kev,depsdev` (default all). +- `--mode delta --since previous.zip` writes only added/changed keys plus `"_deleted":true` markers. +- `--offline-sources ` builds without any network from a cache directory populated by an earlier online run (covers `osv`/`epss`/`kev` only; deps.dev has no bulk dump and is skipped). +- `verify ` and `inspect ` check checksums and metadata. + +Import semantics: +- `replace` (default) clears each source in the store and writes the bundle. +- `merge` upserts by `(source, entry_key)` and honors `"_deleted":true` lines as deletes. +- v2 bundles are SHA-256-checksummed per file in `meta.json`; a mismatch rejects the whole bundle and leaves the existing store untouched. + +Definition freshness: `OSWL_AIRGAPPED_STALENESS_WARN_DAYS` (default `7`) and `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS` (default `30`) drive the admin UI badge, measured from the oldest per-source `sourceAsOf` date across imported snapshots. + +Snapshot uploads may need `OSWL_MULTIPART_MAX_FILE_SIZE` / `OSWL_MULTIPART_MAX_REQUEST_SIZE` (default `50MB` each) if your bundle is larger. + +## 8. Embedded AI (optional, CPU-only) + +Default: **Qwen3.5-2B Q4_K_M**; optional: **Gemma 4 E2B Q4_K_M**. Plan 2 vCPU / 8 GB RAM minimum for occasional Qwen use, or 4 vCPU / 16 GB recommended for Gemma, including OsWL and PostgreSQL. These are estimates, not validated performance guarantees; CPU credits and scan concurrency matter. + +Place the matching runtime in `embedded-ai/llama/`, Qwen weights in `model/Qwen/`, and Gemma weights in `model/Gemma/`. Only Qwen auto-downloads. Default GPU layers = 0, threads = 1, parallel slots = 1, context = 8192. Use the pinned URL/hash/size together; the old `models-v1` asset is not the new model. Docker requires a mounted root and a Linux runtime. + +See [Embedded AI](Embedded-AI.md) for full requirements, directory layout, checksums, mirror/offline installation, CPU tuning, model/language selection and distribution notices. + +## 9. Database schema (upgrades) + +OsWL uses **Hibernate `ddl-auto=validate`** in `prod` — the app does not auto-alter PostgreSQL on startup. + +| Profile | Schema management | +|---------|-------------------| +| `local` | `ddl-auto: update` — H2 schema follows JPA entities automatically | +| `prod` | `ddl-auto: validate` — run SQL scripts manually when upgrading | + +Manual scripts live in `src/main/resources/db/`: + +| File | When to run | +|------|-------------| +| `project_members.sql` | First deploy of project ACL (if table missing) | +| `instance_setup_lock.sql` | First deploy after setup-lock feature | +| `ai_enhancement.sql` | Legacy installs predating AI preference columns / `ai_daily_usage` | +| `schema_cleanup.sql` | **Once** when upgrading to the release that removes unused tables/columns (`ai_feedback`, `external_api_settings`, denormalized `projects.version`, etc.) | + +After running migrations, restart the app and confirm `validate` passes. + +### Flyway (v1.0.4, opt-in) + +`OSWL_FLYWAY_ENABLED=true` enables the versioned migrations in `src/main/resources/db/migration/`; it defaults to `false`. The repository already provides `V1__baseline.sql` and subsequent migrations. On an empty PostgreSQL database, Flyway runs V1 and then the later versions before Hibernate validation. For an existing database without Flyway history, `baseline-on-migrate` records version 1 without executing V1, then runs V2 onward. Back up and compare the existing schema with these migrations before enabling it; manually applied changes can conflict with later migrations. Do not regenerate or edit a migration already applied to a shared database. If managing SQL manually, apply all required changes for the target version in order; the short list of legacy scripts below is not a complete fresh-install schema. + +### v1.0.4 columns + +This release adds `libraries.malicious` and `libraries.typosquat_risk`, both `NOT NULL DEFAULT false`. The defaults let the column be added to a populated table, so no manual script is required — but on `prod` (`ddl-auto: validate`) you still add them yourself. It also adds three nullable `libraries` columns (`description`, `homepage`, `source_repo_url`) for the upstream project metadata shown on Component Detail — `validate` checks that every mapped column exists regardless of nullability, so these need the same manual treatment: + +```sql +ALTER TABLE libraries ADD COLUMN IF NOT EXISTS malicious boolean NOT NULL DEFAULT false; +ALTER TABLE libraries ADD COLUMN IF NOT EXISTS typosquat_risk boolean NOT NULL DEFAULT false; +ALTER TABLE libraries ADD COLUMN IF NOT EXISTS description text; +ALTER TABLE libraries ADD COLUMN IF NOT EXISTS homepage varchar(500); +ALTER TABLE libraries ADD COLUMN IF NOT EXISTS source_repo_url varchar(500); +ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); +``` + +(Flyway users: `V3__component_metadata.sql` covers the three new `libraries` columns; see [Database Schema](Database-Schema.md).) + +### v1.0.5: Spring Session / ShedLock tables (opt-in) + +Only needed if you're moving to a **multi-instance** deployment (see §12). Adds `spring_session`, `spring_session_attributes`, and `shedlock`. Flyway users get this from `db/migration/V10__spring_session_and_shedlock.sql`; manual-script users run `db/spring_session_and_shedlock.sql`. A single-instance deployment can skip this entirely — nothing reads these tables until you set `OSWL_SESSION_STORE_TYPE=jdbc` and/or `OSWL_SCHEDULER_LOCK_ENABLED=true`. + +## 10. Post-deploy smoke test + +1. Open UI via HTTPS reverse proxy only. +2. Complete setup / login and 2FA if enabled. +3. Create a project and VCS connection; restart app — token still decrypts (confirms stable `OSWL_ENCRYPTION_KEY`). +4. `POST /api/scan` with project API key (see [Scan API security](Scan-Api-Security.md)). +5. Open a project you are a member of — confirm another user’s project ID returns forbidden (project membership). +6. Review audit log for failed auth attempts. + +## 11. Operations + +- Back up PostgreSQL and store `OSWL_ENCRYPTION_KEY` in a secrets manager (loss = unreadable VCS tokens) — see [Backup and restore](Backup-And-Restore.md) for the full procedure and a restore-rehearsal script. +- Rotate API keys and SMTP credentials on compromise. +- Keep `SPRING_PROFILES_ACTIVE` out of images that should never run as `local`. + +## 12. Multi-instance deployment (horizontal scaling / HA) + +By default OsWL runs as a **single instance** — an in-memory HTTP session and per-instance `@Scheduled` jobs. That's correct for a single container/process, but it does not survive a second instance behind a load balancer: a user's session would be pinned to whichever instance served their login, and the nightly monitoring / defer-expiry / trash-cleanup jobs would each run once *per instance* instead of once per cluster. This section is only relevant once you deploy **2+ instances against the same PostgreSQL database**. + +**1. Run the schema first.** Before starting any instance with these features on, make sure `spring_session`, `spring_session_attributes`, and `shedlock` exist (§9, "v1.0.5: Spring Session / ShedLock tables"). Rolling out the env vars below before the tables exist will crash every instance on the first request/job tick. + +**2. Environment variables:** + +| Variable | Purpose | +|----------|---------| +| `OSWL_SESSION_STORE_TYPE=jdbc` | Moves HTTP sessions from in-memory Tomcat storage to PostgreSQL (`spring_session`). Login state and single-session enforcement (`maximumSessions(1)`) then work across the whole cluster instead of per-instance. | +| `OSWL_SCHEDULER_LOCK_ENABLED=true` | Wraps the 3 scheduled jobs (`ContinuousMonitoringScheduler`, `DeferExpiryScheduler`, `TrashCleanupScheduler`) in a cluster-wide lock (ShedLock, backed by the `shedlock` table) so only one instance runs each job per cycle. | + +Set both together for a real multi-instance deployment — enabling only one leaves the other gap open. + +**3. Load balancer:** any standard L7 LB (nginx, ALB, etc.) works — **no sticky sessions required** once `OSWL_SESSION_STORE_TYPE=jdbc` is set, since session state is centralized in PostgreSQL rather than instance memory. + +**4. Scan-progress polling is the one exception.** `EnrichmentProgressHolder` and `ScanStatusEmitterRegistry` (the live progress shown during Quick Import / scan enrichment) are still in-memory per instance, not backed by the DB. Recommended: keep the load balancer's routing **sticky for the duration of an active scan** (e.g. cookie-based affinity scoped to the session), so progress-polling requests land back on the instance that's actually running the scan. The alternative — moving scan progress into the DB and switching the UI to pure polling — is a larger change tracked separately; sticky routing is the pragmatic default for now. + +**5. Rolling deploy order:** + 1. Apply any pending DB migration first (old app code must tolerate the new schema — additive-only migrations, which is what `db/migration` follows). + 2. Roll instances one at a time (not all at once), waiting for each new instance to pass its readiness check before moving to the next. + 3. Because sessions live in PostgreSQL (not instance memory) once `OSWL_SESSION_STORE_TYPE=jdbc` is set, a rolling restart no longer logs users out. + +**6. Verifying it worked:** + - Log in against instance A, then send a subsequent request that the LB routes to instance B — it should stay authenticated (not redirected to `/login`). + - Stop instance A — the session (and single-session enforcement) should keep working from instance B. + - Check scheduler logs across both instances after a nightly job fires — the job's log lines should appear on exactly one instance, not both. + +--- + +**Local development:** Run `./gradlew bootRun` (PowerShell: `.\gradlew.bat bootRun`) for the `local` profile and H2. The local YAML supplies a development-only encryption key; override it through the process environment if needed. `.env` is only loaded when the launcher explicitly reads it. diff --git a/docs/Project-Access-Control.md b/docs/en/Project-Access-Control.md similarity index 100% rename from docs/Project-Access-Control.md rename to docs/en/Project-Access-Control.md diff --git a/docs/Quick-Import.md b/docs/en/Quick-Import.md similarity index 100% rename from docs/Quick-Import.md rename to docs/en/Quick-Import.md diff --git a/docs/Risk-Trend.md b/docs/en/Risk-Trend.md similarity index 100% rename from docs/Risk-Trend.md rename to docs/en/Risk-Trend.md diff --git a/docs/Scan-Api-Security.md b/docs/en/Scan-Api-Security.md similarity index 96% rename from docs/Scan-Api-Security.md rename to docs/en/Scan-Api-Security.md index 83471ed0..9f76a703 100644 --- a/docs/Scan-Api-Security.md +++ b/docs/en/Scan-Api-Security.md @@ -30,7 +30,7 @@ All other routes keep normal CSRF protection for the UI. |------|------------------| | 1 | **Project API key** in `Authorization: Bearer …` | | 2 | **Submitter** email and password in the JSON body | -| 3 | Submitter has **`SCAN_SUBMIT`** (role template permission) and is in **`project_members`** for that project | +| 3 | Submitter has **`SCAN_SUBMIT`** and project access through direct project membership or a team grant. | See [Authorization layers](Authorization-Layers.md) for how role templates differ from project membership. diff --git a/docs/Scan-History.md b/docs/en/Scan-History.md similarity index 100% rename from docs/Scan-History.md rename to docs/en/Scan-History.md diff --git a/docs/Security-Center.md b/docs/en/Security-Center.md similarity index 98% rename from docs/Security-Center.md rename to docs/en/Security-Center.md index cb67892b..38f02b05 100644 --- a/docs/Security-Center.md +++ b/docs/en/Security-Center.md @@ -89,7 +89,7 @@ The **Export** dropdown in the action toolbar produces standards-based artifacts | SBOM (CycloneDX) | `GET /api/projects/{projectId}/sbom` | CycloneDX 1.6 JSON | | VEX | `GET /api/projects/{projectId}/vex` | CycloneDX VEX — carries your triage decisions | | SARIF | `GET /api/projects/{projectId}/sarif` | SARIF 2.1.0, uploadable to GitHub code scanning | -| Compliance report | `GET /security-center/compliance-report` | Print-ready HTML (use *Print → Save as PDF*) | +| Compliance report | `GET /projects/{projectId}/security-center/compliance-report` | Print-ready HTML (use *Print → Save as PDF*) | | CVE / license CSV | — | Current filtered view | Bulk actions also include **Create upgrade PR**, which opens one pull request bumping every selected component to its fix version. diff --git a/docs/User-Guide.md b/docs/en/User-Guide.md similarity index 89% rename from docs/User-Guide.md rename to docs/en/User-Guide.md index dd40c51d..5512abcd 100644 --- a/docs/User-Guide.md +++ b/docs/en/User-Guide.md @@ -1,5 +1,7 @@ # User Guide +[What's new in 1.0.5.1](Whats-New-v1.0.5.1.md) + This page covers the day-to-day use of the OsWL web dashboard. You only see projects you are a **member** of (unless you are a **system administrator**). What you can do inside a project depends on your **role template** (Admin / Developer / Viewer). See [Authorization layers](Authorization-Layers.md). @@ -96,7 +98,7 @@ Use **Administration → Offline Snapshot** to import a bundle, export the curre ## Embedded AI Model -OsWL's built-in local AI runs a llama.cpp sidecar and defaults to the **Qwen3 1.7B** GGUF model. On first boot, OsWL prefetches the default model in the background (configurable with `oswl.ai.embedded.auto-download-on-boot`; disabled in air-gapped mode) so that enabling embedded AI in Settings is faster. The default download uses OsWL's own GitHub Release asset with a fallback to the original Hugging Face repository, and every download is verified against a SHA-256 checksum. You can also place any compatible `.gguf` file in the configured embedded-AI directory. See [Embedded AI](Embedded-AI.md) for installation and troubleshooting. +Embedded AI runs a separately installed llama.cpp runtime with **Qwen3.5-2B Q4_K_M** as the default download. **Gemma 4 E2B** is optional and installed manually. The runtime belongs in `embedded-ai/llama/`, and models in `embedded-ai/model//`. Boot-time prefetch downloads only; it does not start the server or activate LOCAL. The default download uses a pinned Hugging Face revision with SHA-256 and size verification; no fallback mirror is configured by default. Air-gapped mode disables downloads. Use Settings to stop, select and save a model, then start again. See [Embedded AI](Embedded-AI.md) for current requirements and configuration. --- diff --git a/docs/Version-Diff.md b/docs/en/Version-Diff.md similarity index 100% rename from docs/Version-Diff.md rename to docs/en/Version-Diff.md diff --git a/docs/Whats-New-v1.0.4.md b/docs/en/Whats-New-v1.0.4.md similarity index 96% rename from docs/Whats-New-v1.0.4.md rename to docs/en/Whats-New-v1.0.4.md index 6200b94b..19c6be97 100644 --- a/docs/Whats-New-v1.0.4.md +++ b/docs/en/Whats-New-v1.0.4.md @@ -64,7 +64,7 @@ Upload a third-party CycloneDX file to scan components you don't build yourself ### Compliance report pack -`GET /security-center/compliance-report` renders a print-ready report: component inventory, licence obligations, NOTICE text, and open findings by severity. Use your browser's *Print → Save as PDF*. The preview no longer opens the print dialog automatically, so you can review it before exporting. +`GET /projects/{projectId}/security-center/compliance-report` renders a print-ready report: component inventory, licence obligations, NOTICE text, and open findings by severity. Use your browser's *Print → Save as PDF*. The preview no longer opens the print dialog automatically, so you can review it before exporting. --- diff --git a/docs/en/Whats-New-v1.0.5.1.md b/docs/en/Whats-New-v1.0.5.1.md new file mode 100644 index 00000000..30e43a78 --- /dev/null +++ b/docs/en/Whats-New-v1.0.5.1.md @@ -0,0 +1,24 @@ +# What's new in OsWL 1.0.5.1 + +OsWL 1.0.5.1 improves dependency metadata, scan reliability and the light interface. + +## Using this release + +- Login, search and settings use light mode. Settings show unsaved changes separately from errors. AI parameter errors appear beside the field, and a successful save remains visible beside Save. +- AI response diversity accepts 0–2 (default 0.15); maximum tokens accepts integers 256–8192 (default 1200). Empty values use defaults. Provider and analysis-task limits can override their use; Anthropic does not use the temperature setting. +- Deleted projects appear in Trash and can be restored while retained. CLI API keys can be deleted from Settings; deleted keys stop working. +- CVE identifiers have a direct NVD link. Fixed versions are selected from supported numeric release intervals. Maven parent properties and supported Gradle version constraints improve dependency resolution. +- Diagnostics distinguish failures, warnings and skipped checks and format disk capacity. Empty archive exports explain why there is no file; eligible exports download JSON. +- Cache “refresh on every scan” applies when a scan requests data, not as continuous background refresh. + +## Upgrade + +Use Java 25 and back up the database and persistent files first. Read the [deployment checklist](Production-Deployment-Checklist.md) and [backup instructions](Backup-And-Restore.md). On databases using migrations, apply the migrations through V35. Do not assume a JAR replacement has migrated your database. + +Download `oswl-1.0.5.1.jar` and `SHA256SUMS` from the matching GitHub Release. Follow [Getting started](Getting-Started.md) for configuration. Browser security alerts require web push/VAPID configuration and browser permission; external AI, SMTP and VCS integrations require their own configuration. + +## Accuracy and scope + +Existing saved scans are not rewritten by upgrading. Rescan to apply parser and enrichment fixes. Manifest declarations are not always the dependencies selected by a build; unresolved versions require investigation. Missing license or fix information is incomplete evidence, not a clean bill of health or proof that no patch exists. Complex version ranges, ecosystem-specific ordering and online/offline parity are not fully resolved in this release. + +See [Analysis coverage](Analysis-Coverage.md) for supported evidence and limitations. diff --git a/docs/en/_Sidebar.md b/docs/en/_Sidebar.md new file mode 100644 index 00000000..eb33fbe3 --- /dev/null +++ b/docs/en/_Sidebar.md @@ -0,0 +1,35 @@ +* [What's new in 1.0.5.1](Whats-New-v1.0.5.1.md) +**[Home](Home.md)** + +[English](Home.md) | [한국어](../ko/Home.md) | [日本語](../ja/Home.md) + +### Release +* [What's New in v1.0.4](Whats-New-v1.0.4.md) + +### Guides + +* [Getting Started](Getting-Started.md) +* [User Guide](User-Guide.md) +* [Quick Import](Quick-Import.md) +* [CLI Integration](CLI-Integration.md) +* [Scan History](Scan-History.md) +* [Embedded AI](Embedded-AI.md) + +### Analysis +* [Security Center](Security-Center.md) +* [License Analysis](License-Analysis.md) +* [Risk Trend](Risk-Trend.md) +* [Version Diff](Version-Diff.md) + +### Administration +* [Administration](Administration.md) +* [Authorization layers](Authorization-Layers.md) +* [Project access control](Project-Access-Control.md) +* [Production deployment](Production-Deployment-Checklist.md) +* [Backup and restore](Backup-And-Restore.md) +* [Database schema](Database-Schema.md) +* [Scan API security](Scan-Api-Security.md) + +### Reference +* [API Reference](API-Reference.md) +* [Glossary](Glossary.md) diff --git a/docs/ja/API-Reference.md b/docs/ja/API-Reference.md index 13764f5d..3786c9d4 100644 --- a/docs/ja/API-Reference.md +++ b/docs/ja/API-Reference.md @@ -84,7 +84,7 @@ Authorization: Bearer oswl_ | Method | Path | 説明 | |---|---|---| | `POST` | `/api/github/connect` | GitHub PAT の接続 | -| `DELETE` | `/api/github/disconnect` | GitHub 接続の削除 | +| `POST` | `/api/github/disconnect` | GitHub 接続の削除 | | `GET` | `/api/github/status` | 接続状態 | | `GET` | `/api/github/accounts` | 認証済みアカウントの一覧 | | `GET` | `/api/github/repos` | アクセス可能なリポジトリの一覧 | @@ -99,7 +99,6 @@ Authorization: Bearer oswl_ | Method | Path | 認証 | 説明 | |---|---|---|---| -| `POST` | `/api/auth` | API key | API キーの検証（レガシー） | | `GET` | `/api/scan/ping` | API key | 疎通確認とキーの有効性確認 | | `GET` | `/api/scan/manifest-rules` | API key | マニフェストファイルの収集ルール（`/scripts/manifest-rules.json` と同じ） | | `POST` | `/api/scan/parse` | API key | マニフェスト zip アーカイブの解析（CLI ステップ 1） | @@ -117,7 +116,7 @@ Authorization: Bearer oswl_ | `PATCH` | `/projects/{id}/security-center/bulk-status` | `SECURITY_CENTER_UPDATE_STATUS` | CVE 状態の一括更新 | | `GET` | `/projects/{id}/security-center/export` | `SECURITY_CENTER_EXPORT` | CVE 一覧を CSV としてダウンロード（`?scanId=`、`?format=csv`） | | `POST` | `/projects/{id}/security-center/batch-pr` | `SECURITY_CENTER_UPDATE_STATUS` | **v1.0.4** — 選択したすべてのコンポーネントに対して 1 件のアップグレード PR を作成 | -| `GET` | `/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — 印刷用のコンプライアンスレポート | +| `GET` | `/projects/{projectId}/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — 印刷用のコンプライアンスレポート | ### SBOM / VEX / SARIF（v1.0.4） @@ -249,8 +248,8 @@ Authorization: Bearer oswl_ | Method | Path | 説明 | |---|---|---| -| `GET` | `/api/admin/cli-keys` | グローバル CLI キーの一覧 | -| `POST` | `/api/admin/cli-keys` | グローバルキーの作成 | +| `GET` | `/api/admin/cli-keys` | 各プロジェクトの CLI キーを一覧表示 | +| `POST` | `/api/admin/cli-keys` | プロジェクト単位のキーを発行（`projectId` 必須） | | `PATCH` | `/api/admin/cli-keys/{keyId}/toggle` | キーの有効／無効切り替え | --- @@ -279,7 +278,7 @@ Authorization: Bearer oswl_ | `GET` | `/api/settings/ai/usage` | `SETTINGS_AI_MANAGE` | AI 使用統計 — 本日の呼び出し／トークン／推定コスト、日次上限、直近 7 日間（日次集計テーブルから取得） | | `GET` | `/api/settings/ai/usage/events` | `SETTINGS_AI_MANAGE` | 最近の AI 呼び出しイベント、新しい順（`?page=`、`?size=`、既定サイズ `10`）。直近**100 件**のみ保持（FIFO）のため、最大でも 10 ページ | | `GET` | `/api/settings/ai/embedded` | `SETTINGS_AI_MANAGE` | 内蔵 AI の状態（`running`、`external`、`binaryFound`、`activeModel`、`fallbackUsed`、`lastError`、`availableModels`、`modelsDir`、`baseUrl`。既定モデルのダウンロード中は `downloading`、`downloadedBytes`、`downloadTotalBytes` も） | -| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | llama.cpp サイドカーの起動（モデルファイル名は任意。候補間の自動フォールバック、失敗時は理由付きで 400）。新規インストールで `.gguf` がまだない場合、代わりに Apache-2.0 の Qwen3-1.7B モデルをバックグラウンドでダウンロードし即座に応答（`downloading: true`）— 進捗は `GET .../embedded` でポーリング | +| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | llama.cpp サイドカーの起動（モデルファイル名は任意。候補間の自動フォールバック、失敗時は理由付きで 400）。新規インストールで `.gguf` がまだない場合、代わりに Apache-2.0 の Qwen3.5-2B Q4_K_M モデルをバックグラウンドでダウンロードし即座に応答（`downloading: true`）— 進捗は `GET .../embedded` でポーリング | | `POST` | `/api/settings/ai/embedded/stop` | `SETTINGS_AI_MANAGE` | サイドカーの停止と LOCAL プロバイダーの無効化 | | `PUT` | `/api/settings/ai/embedded/config` | `SETTINGS_AI_MANAGE` | フォルダ／モデルの上書き設定 `{ "dir", "model" }` を保存（null は現状維持、空文字はクリア。dir が欠けている場合は 400） | diff --git a/docs/ja/Administration.md b/docs/ja/Administration.md index e44a7650..eaf21701 100644 --- a/docs/ja/Administration.md +++ b/docs/ja/Administration.md @@ -1,5 +1,7 @@ # 管理 +[1.0.5.1 の変更点](Whats-New-v1.0.5.1.md) + このページでは管理者専用の機能をすべて扱います: ユーザー管理、ロールテンプレート、監査ログ、セキュリティ設定、SMTP 設定。 > 特に断りのない限り、このページのすべての操作には**システム管理者**権限が必要です。 @@ -221,6 +223,24 @@ v1.0.4 のアクションコードはフィルター UI で **モニタリング 3 つとも管理者権限が必要です。Prometheus のスクレイプ設定は `application-prod.yaml` の `management` 配下にあります。 +### ビジネスメトリクス & Grafana + +デフォルトの JVM/HTTP メーターに加えて、OsWL は以下のビジネスメトリクスを記録します（すべて `/actuator/prometheus` で公開。Prometheus 名表記 — ドットはアンダースコアに変換されます）: + +| メトリクス | 型 | タグ | 説明 | +|---|---|---|---| +| `oswl_scan_duration_seconds` | Timer | `outcome` (`completed`\|`failed`) | スキャンパイプライン全体の所要時間 | +| `oswl_quickimport_queue_depth` | Gauge | — | ワーカースロット待ちの Quick Import ジョブ数 | +| `oswl_quickimport_running` | Gauge | — | 現在実行中の Quick Import ジョブ数 | +| `oswl_components_ingested_total` | Counter | `ecosystem` | スキャン取り込みで保存されたコンポーネント数 | +| `oswl_ai_calls_total` | Counter | `provider` | 記録された AI 呼び出し数 | +| `oswl_ai_tokens_total` | Counter | `provider`, `direction` (`in`\|`out`) | AI プロンプト/完了トークン数 | +| `oswl_ai_cost_usd_total` | Counter | `provider` | AI 推定コスト (USD) | +| `oswl_gate_evaluations_total` | Counter | `outcome` (`pass`\|`fail`) | セキュリティゲート評価数 | +| `oswl_external_api_calls_total` | Counter | `source` (`depsdev`, `osv`, `epss`, `kev`, `github-advisory`, `nvd`), `outcome` (`success`\|`failure`\|`ratelimited`) | 外部データソースへの呼び出し数 | + +これらのメトリクスを網羅する Grafana ダッシュボードが [`deploy/observability/grafana/oswl-dashboard.json`](../../deploy/observability/grafana/oswl-dashboard.json) に同梱されています。**Dashboards → New → Import** からインポートすると Prometheus データソースの選択を求められるため、JSON の編集は不要です。 + --- ## オフラインスナップショットバンドル（v1.0.4） @@ -296,7 +316,7 @@ CVE／ライセンス要約用の LLM プロバイダーとエンリッチメン 各プロバイダーのモデル欄は自由入力コンボボックスです: ドロップダウンには現行モデルが提案として表示されますが、アカウントがアクセス可能な任意のモデル ID を直接入力できます。 -同じタブの**内蔵 AI（組み込みローカルモデル）**カードは、バンドルされた llama.cpp の `llama-server` サイドカー（CPU 専用、localhost 専用、API キー不要）を実行し、LOCAL プロバイダーとして登録します。既定でバンドルされているモデルは**Qwen3 1.7B**（初回使用時にダウンロード）で、カードには**モデルのドロップダウン**（フォルダ内の任意の `.gguf`、または自動優先順位）、**保存**付きの**フォルダの上書き**（永続化され、実行中に変更するとサイドカーが停止）、最初の選択が起動に失敗した場合に次に利用可能なモデルへ切り替える**自動フォールバック**があります。[内蔵 AI](Embedded-AI.md)を参照してください。 +内蔵 AI は別途インストールした llama.cpp を使用し、既定のダウンロードモデルは **Qwen3.5-2B Q4_K_M** です。**Gemma 4 E2B** は任意で手動インストールします。実行ファイルは `embedded-ai/llama/`、モデルは `embedded-ai/model/<系列>/` に配置します。起動時の事前取得はダウンロードのみで、サーバーの起動や LOCAL の有効化は行いません。既定の取得先は Hugging Face の固定リビジョンで、SHA-256 とサイズを検証します。既定の代替ミラーはなく、エアギャップモードではダウンロードしません。モデルを変更する場合は設定で停止し、モデルを選択・保存してから再度開始します。最新の要件と設定は[内蔵 AI](Embedded-AI.md)を参照してください。 同時に**アクティブ**にできるプロバイダーは 1 つだけです。タブには次も表示されます: @@ -354,3 +374,49 @@ AI カードには本日の呼び出し件数、トークン合計、推定コ | **クリア** | `POST /api/settings/cache/clear?cacheKey=…` | クリア時刻以前に取得されたライブラリは、次回のスキャンで古いものとして扱われる | 変更は `CACHE.UPDATE_TTL` と `CACHE.CLEAR` として監査記録されます。 + +--- + +## SAML 2.0 SSO および SCIM 2.0 プロビジョニング + +OsWL は、Okta、Entra ID、オンプレミス AD FS を利用する企業向けに SAML 2.0 シングルサインオンをサポートしています。SAML IdP が設定されると、`/login` に **SSO でサインイン** オプションが表示されます。 + +### SAML セットアップ + +1. SP 署名鍵ペアを生成します（任意ですが推奨）: + ```bash + openssl req -x509 -newkey rsa:2048 -keyout oswl-saml-sp.key -out oswl-saml-sp.crt -nodes -days 3650 -subj "/CN=oswl" + ``` +2. `application-prod.yaml` の SAML ブロックのコメントを外し、環境変数を設定します: + | 環境変数 | 用途 | + |---|---| + | `OSWL_SAML_IDP_METADATA_URL` | IdP メタデータ URL（例: Okta/Entra アプリメタデータ） | + | `OSWL_SAML_IDP_CERTIFICATE` | IdP 署名証明書ファイルのパス | + | `OSWL_SAML_SP_PRIVATE_KEY` | SP 秘密鍵ファイルのパス | + | `OSWL_SAML_SP_CERTIFICATE` | SP 証明書ファイルのパス | +3. IdP に SP メタデータを登録します。メタデータエンドポイントは以下です: + ``` + https:///saml2/service-provider-metadata/oswl + ``` +4. IdP が email クレーム（NameID または `email`/`mail` 属性）を送信することを確認します。 + +> SAML ログインでは、IdP がすでにユーザーを認証しているため、メール OTP ステップをスキップします。既存の OsWL アカウントと一致しないメールアドレスは、SCIM が有効化してロールを割り当てられるよう、無効化されたローカルアカウントとして自動作成されます。 + +### SCIM 2.0 プロビジョニング + +SCIM を使用すると、IdP のユーザー ライフサイクルを OsWL と同期できます。 + +| リソース | エンドポイント | 備考 | +|---|---|---| +| Users | `/scim/v2/Users` | GET/POST/PUT/PATCH/DELETE | +| Groups | `/scim/v2/Groups` | GET/POST/PUT/PATCH/DELETE | + +**認証:** すべての SCIM リクエストに `Authorization: Bearer ` を含める必要があります。専用 SCIM トークンは `ApiKeyService#issueScimToken` でプログラム的に発行します。SCIM トークンは `api_keys` テーブルに保存されますが、スコープは `SCIM` であり、通常の CLI スキャン API では拒否されます。 + +**グループ マッピング:** `oswl.scim.group-mapping`（環境変数: `OSWL_SCIM_GROUP_MAPPING`）で SCIM グループの表現方法を選択します: +- `TEAM`（既定）— 各 SCIM グループは Team になり、メンバーは TeamMember 行になります。 +- `ROLE_TEMPLATE` — 各 SCIM グループは RoleTemplate になり、メンバーにはそのロール テンプレートが割り当てられます。 + +**ユーザー無効化:** `DELETE /scim/v2/Users/{id}` は OsWL 上で `active=false` に設定します。SCIM 経由ではユーザーを物理的に削除しないため、監査の帰属情報が保持されます。 + +**監査アクション:** SCIM 操作は `SCIM.USER_CREATE`、`SCIM.USER_UPDATE`、`SCIM.USER_DEACTIVATE`、`SCIM.GROUP_CREATE`、`SCIM.GROUP_UPDATE`、`SCIM.GROUP_DELETE`、`SCIM.GROUP_MEMBER_ADD`、`SCIM.GROUP_MEMBER_REMOVE`、`SCIM.AUTH_FAILURE`、`SCIM_KEY.CREATE` として記録されます。SAML ログイン イベントは `SAML.LOGIN_SUCCESS` および `SAML.LOGIN_FAILURE` として記録されます。 diff --git a/docs/ja/Backup-And-Restore.md b/docs/ja/Backup-And-Restore.md new file mode 100644 index 00000000..40145349 --- /dev/null +++ b/docs/ja/Backup-And-Restore.md @@ -0,0 +1,69 @@ +# バックアップと復旧 + +実務で最も多いインシデントは PostgreSQL の喪失ではなく、**DB バックアップは無事なのに `OSWL_ENCRYPTION_KEY` だけを紛失する**ケースです。DB に保存されているすべての VCS アクセストークン、AI プロバイダー API キー、Jira API トークン、SMTP メールパスワードはこのキーで暗号化されています。キーを失うと、DB は完璧に復元されても、その中のシークレットはすべて永久に復号できなくなります — すべての VCS 接続、AI プロバイダー、Jira 連携をゼロから再設定する必要が出てきます。 + +このページは [本番デプロイ](Production-Deployment-Checklist.md) の運用者向けの対になるページです — デプロイ方法はまずそちらを読んでください。このページはバックアップと、「復旧が実際に機能するか」の検証だけに焦点を当てています。 + +--- + +## バックアップ対象 + +| 項目 | 場所 | 重要な理由 | +|---|---|---| +| PostgreSQL データベース | `deploy/docker/compose.prod.yml` の `db-data-prod` ボリューム、またはマネージド PostgreSQL インスタンス | プロジェクト、スキャン、検出結果、ユーザー、暗号化されたシークレットなど、すべてのアプリケーションデータ。 | +| `OSWL_ENCRYPTION_KEY` | 注入方法による（`.env.prod`、シークレットマネージャーなど） | DB に保存されたすべての VCS トークン／AI API キー／Jira トークン／SMTP パスワードを復号します。**これがなければ、上記の DB バックアップはこれらのシークレットが必要な用途には使えません。** | +| オフラインスナップショットストア | `OSWL_AIRGAPPED_IMPORT_DIR`（閉域網モード使用時） | 復旧後の再インポートはこれがなくても可能ですが、インポート履歴が失われ、バンドルを再取得・再検証する必要があります。 | +| 内蔵 AI モデルディレクトリ | `OSWL_EMBEDDED_AI_DIR`（既定値 `embedded-ai/`） | 再ダウンロード可能（[内蔵 AI](Embedded-AI.md) を参照） — 閉域網で再ダウンロードできない場合のみバックアップしてください。 | +| 設定ファイル | `.env.prod`、`deploy/docker/compose.prod.yml`、`application-prod.yaml` のオーバーライド | これがないと、データは無事でもインスタンスが実際どう設定されていたか（SMTP ホスト、HSTS 設定、機能フラグなど）が分かりません。 | + +それ以外（`OSWL_LOG_DIR` のファイルログ、Quick Import のクローン一時ディレクトリ）は使い捨てなのでバックアップ不要です。 + +--- + +## PostgreSQL のバックアップ + +```bash +# スキーマ + データ、カスタムフォーマット（並列リストアに対応、plain SQL より小さい） +pg_dump -Fc -h -U -d -f oswl-$(date +%Y%m%d).dump +``` + +**推奨頻度:** 毎晩フルダンプ、30 日保持。ダンプの間の時点への復旧が必要なら PostgreSQL の WAL アーカイビングも併用してください。ダンプは DB ホストから独立した場所（オブジェクトストレージ、別のアベイラビリティゾーン）に保管してください — バックアップがバックアップ対象のすぐ隣にあると、その対象を巻き込むインシデントで一緒に失われます。 + +`OSWL_ENCRYPTION_KEY` は **`pg_dump` の出力とは別の**シークレットマネージャーにバックアップしてください — これらのシークレットを保存時に暗号化する意味自体が、同じバックアップの塊にキーと暗号文を一緒に置いてしまうと失われます。 + +--- + +## 復旧手順 + +1. **新しい PostgreSQL インスタンスを用意**（または対象をクリアし）、ダンプを復元します: + ```bash + pg_restore -h -U -d --clean --if-exists oswl-20260730.dump + ``` +2. **バックアップ時と同じ `OSWL_ENCRYPTION_KEY` を注入**します — 別のキー（一見有効に見える新規生成キーであっても）を使うと、保存されているすべてのシークレットが復号不能になり、データ破損と見分けがつかなくなります。 +3. **復元した DB に対してアプリを起動**します（`SPRING_PROFILES_ACTIVE=prod`、`ddl-auto: validate` — 復元したスキーマは実行バージョンとすでに一致している必要があります。バックアップ時点より新しいバージョンに復旧する場合は、起動前に `src/main/resources/db/` の未適用の手動マイグレーションスクリプトを適用してください）。 +4. **以下の検証スクリプトを実行**し、復旧が「プロセスが起動した」レベルを超えて実際に使えることを確認します。 + +```bash +OSWL_VERIFY_EMAIL=you@example.com \ +OSWL_VERIFY_PASSWORD='...' \ +OSWL_VERIFY_PROJECT_ID=1 \ +./scripts/ops/verify-restore.sh https://your-instance.example.com +``` + +このスクリプトは対話形式です（実際のログインと同様、メール OTP コードの入力を待ちます）。以下を確認します: + +| チェック | 何を証明するか | +|---|---| +| `GET /actuator/health` → 200 | 復元した DB と注入したキーでアプリが正常に起動した。 | +| ログイン + OTP | 復元した `users` テーブルに対して認証・セッション基盤が機能する。 | +| `GET /api/settings/vcs` → 200 | **`OSWL_ENCRYPTION_KEY` が正しい** — 保存されている VCS トークンの少なくとも 1 件がエラーなく復号できた。キーが間違っていればここで即座に 500 として表面化し、数週間後に気づく静かなバグにはなりません。 | +| `GET /projects/{id}/scan-history` → 200 | スキャン履歴が復元されクエリ可能（復元データに実在するプロジェクト ID を `OSWL_VERIFY_PROJECT_ID` に設定する必要あり）。 | +| `GET /api/admin/audit-logs` → 200 | 監査ログが復元されクエリ可能（`SYSTEM_ADMIN` アカウントが必要）。 | + +このスクリプトは実際に定期的な**リハーサル**として実行してください（例: 四半期ごとに検証用環境で） — 作成されてから一度も実行されていない復旧手順は、検証済みの手順とは言えません。 + +--- + +## キーローテーション + +現時点では**再暗号化バッチ処理はありません。** 今日 `OSWL_ENCRYPTION_KEY` をローテーションすると、既存の暗号化された値（VCS トークン、AI API キー、Jira トークン、SMTP パスワード）はすべて復号できなくなります — 実務的なローテーション手順は、キーをローテーションした後、各設定画面（VCS 接続、AI プロバイダーキー、Jira 連携、SMTP 認証情報）でシークレットを再入力し、新しいキーで再暗号化させることです。適切なローテーションツール（旧キーで復号 → 新キーで再暗号化、対象となるすべてのテーブルに対して in-place で実行）は別途バックログ項目として追跡しています — このツールができるまでは、`OSWL_ENCRYPTION_KEY` は一度設定したら事実上変更不可能な値として扱い、それに見合った保護をしてください（シークレットマネージャーに置き、リポジトリ内の `.env` ファイルには置かない）。 diff --git a/docs/ja/CLI-Integration.md b/docs/ja/CLI-Integration.md index 784cd834..f1017ac0 100644 --- a/docs/ja/CLI-Integration.md +++ b/docs/ja/CLI-Integration.md @@ -89,6 +89,8 @@ ScanIngestService → async CVE + license enrichment (OSV / deps.dev) --- +マニフェストアーカイブの収集範囲は `/scripts/manifest-rules.json` に従います。依存関係マニフェストのほか、ビルド設定、ラッパーファイル、`buildSrc` の Java/Kotlin ファイルも含まれるため、送信前に収集ルールを確認してください。 + ## 前提条件 1. OsWL に登録済みの**プロジェクト**。 @@ -108,12 +110,12 @@ ScanIngestService → async CVE + license enrichment (OSV / deps.dev) | `POST` | `/api/scan` | API key + ユーザーパスワード | エンリッチメント用のスキャン送信 | | `GET` | `/api/scan/{scanId}/status` | セッション | スキャン状態のポーリング（UI） | | `POST` | `/api/scan/gate` | API key | **v1.0.4** — PR / CI セキュリティゲート。`exitCode` を含む判定を返す | -| `GET` | `/api/projects/{projectId}/sbom` | セッション / キー | **v1.0.4** — CycloneDX 1.6 SBOM | -| `GET` | `/api/projects/{projectId}/vex` | セッション / キー | **v1.0.4** — CycloneDX VEX | -| `GET` | `/api/projects/{projectId}/sarif` | セッション / キー | **v1.0.4** — SARIF 2.1.0 | +| `GET` | `/api/projects/{projectId}/sbom` | セッション | **v1.0.4** — CycloneDX 1.6 SBOM | +| `GET` | `/api/projects/{projectId}/vex` | セッション | **v1.0.4** — CycloneDX VEX | +| `GET` | `/api/projects/{projectId}/sarif` | セッション | **v1.0.4** — SARIF 2.1.0 | | `POST` | `/api/sbom/import` | セッション | **v1.0.4** — サードパーティの CycloneDX ファイルをインポート | -> CLI エンドポイントは `Authorization: Bearer` ヘッダーのみで認証し、セッションクッキーや CSRF トークンは不要です。`POST /api/scan`、`POST /api/scan/parse`、`GET /api/scan/ping` はブラウザの CSRF 検査から除外されます。それ以外のルートは通常どおり CSRF 保護が維持されます。[スキャン API セキュリティ](Scan-Api-Security.md)を参照してください。 +> CLI リクエストは `Authorization: Bearer` にプロジェクト API キーを指定します。`POST /api/scan` は送信者のメールアドレス・パスワード・権限・プロジェクトへのアクセス権限も確認します。`POST /api/scan`、`POST /api/scan/parse`、`POST /api/scan/gate` にブラウザセッションや CSRF トークンは不要です。`GET /api/scan/ping` はキーを検証します。[スキャン API セキュリティ](Scan-Api-Security.md)を参照してください。 --- @@ -127,9 +129,9 @@ POST /api/projects/{projectId}/keys UI: プロジェクト → **設定 (⚙)** → **CLI** → **キーを生成**。 -### 管理者用グローバルキー +### 管理者によるキー管理 -**設定 → 管理者 → CLI キー** — [API リファレンス](API-Reference.md)を参照してください。 +管理者は各プロジェクトの CLI キーを一覧表示・失効させ、指定した `projectId` にキーを発行できます。スキャンキーの範囲はプロジェクト単位です。別の SCIM トークンではスキャンを送信できません。 --- @@ -252,8 +254,14 @@ exit "$(echo "$verdict" | jq -r .exitCode)" | `failOnEpss` | `OSWL_GATE_FAIL_ON_EPSS` | `0.5` | | `failOnLicenseViolation` | `OSWL_GATE_FAIL_ON_LICENSE_VIOLATION` | `true` | | `onlyNew` | `OSWL_GATE_ONLY_NEW` | `true` | +| `onlyReachable` | `OSWL_GATE_ONLY_REACHABLE` | `false` | +| `failOnSecrets` | `OSWL_GATE_FAIL_ON_SECRETS` | `false` | + +`onlyNew` はベースラインで確認済みの CVE・ライセンス問題を除外しますが、ゲートの通過を保証しません。悪意あるパッケージ、有効にしたシークレット検出など、ほかの適用ルールによって失敗する場合があります。`onlyReachable` は、対応するバイトコード解析またはソース参照解析で `REACHABLE` となったコンポーネントの CVE のみを評価します。有効時は `UNKNOWN` の CVE を除外しますが、参照を確認できないことは悪用不可能である証明にはなりません。ライセンスと悪意あるパッケージの検査はこのフィルターとは独立しています。解析範囲を確認してから有効にしてください。GitHub の対象を設定すると Check Run と PR コメントで結果を公開できます。 + +確定的に悪性と判定されたパッケージ(OSV `MAL-` アドバイザリ)は、上記のすべてのしきい値および `onlyNew`/`onlyReachable` に関係なく常にブロックされます — 解除する唯一の方法は承認済みのポリシー例外(waiver、**v1.0.5**、`/api/policies/exceptions` 参照)です。 -`onlyNew` は直前の完了スキャンをベースラインとして比較するため、既存の技術的負債がマージを妨げることはありません。リクエストに GitHub の対象を指定すると、判定結果は Check Run と PR コメントとしても投稿されます。 +`failOnSecrets`(**v1.0.5**)は、Quick Import クローンのスキャンで CRITICAL/HIGH severity のシークレット検出(正規表現 + エントロピー規則 — AWS キー、GitHub/GitLab/Slack/npm トークン、埋め込みプライベートキーブロックなど)が1件でもあればブロックします。上記の他のしきい値と同様に、リクエストのオーバーライド → 組織/チーム/プロジェクトのポリシー階層 → インスタンスの既定値の順で解決されます。 --- diff --git a/docs/ja/Database-Schema.md b/docs/ja/Database-Schema.md index 47c48d7c..36ee7502 100644 --- a/docs/ja/Database-Schema.md +++ b/docs/ja/Database-Schema.md @@ -1,6 +1,6 @@ # データベーススキーマとマイグレーション -OsWL はすべてのアプリケーションデータを PostgreSQL（`prod`）または H2 ファイルモード（`local`）に保存します。`domain/entity/` 配下の JPA エンティティが、実際のスキーマの**信頼できる情報源**です。 +OsWL はすべてのアプリケーションデータを PostgreSQL（`prod`）または H2 ファイルモード（`local`）に保存します。`domain/entity/`, `auth/entity/` 配下の JPA エンティティが、実際のスキーマの**信頼できる情報源**です。 --- @@ -16,7 +16,9 @@ OsWL はすべてのアプリケーションデータを PostgreSQL（`prod`） ### Flyway（v1.0.4、オプトイン） -`OSWL_FLYWAY_ENABLED=true` にすると、スキーマ管理が Flyway に委ねられます（`baseline-on-migrate` が有効なため、既存のデータベースは拒否されずベースライン処理されます）。有効化する前に、現在のスキーマに一致するベースラインを生成してください。既定値は `false` で、上記の `ddl-auto` の挙動が維持されます。 +`OSWL_FLYWAY_ENABLED=true` で `src/main/resources/db/migration/` のバージョン別マイグレーションを有効にします。既定値は `false` です。リポジトリには `V1__baseline.sql` と後続のマイグレーションが含まれています。空の PostgreSQL DB では V1 から順に実行し、その後 Hibernate がスキーマを検証します。Flyway 履歴のない既存 DB では、`baseline-on-migrate` が V1 を実行せずにバージョン 1 を記録し、V2 以降を実行します。有効化前にバックアップを取得し、既存スキーマとマイグレーションを比較してください。手動適用済みの変更と後続マイグレーションが競合する場合があります。共有 DB に適用済みのファイルを再生成・変更しないでください。SQL を手動管理する場合は、対象バージョンに必要な変更をすべて順番に適用します。以下の一部の旧スクリプトだけでは新規インストール用のスキーマを構成できません。 + +現在のスキーマには v1.0.4 以降の変更も含まれます。組織・チーム（V11）、SAML/SCIM（V13）、Webhook（V14）、CVE の出所と C/C++ メタデータ（V15–V16）、ポリシー継承・例外（V17、V28）、到達可能性と根拠（V18、V29–V30）、監査ログの整合性（V19）、UI 設定・オンボーディング（V20、V23–V24）、シークレット・IaC 検出（V21）、スキャンのアーカイブ（V22）、レポートのブランド設定（V25）、キャッシュ集計・無効化（V26–V27）、永続化されたインポートジョブ（V31）です。完全な適用順序は実際のマイグレーションファイルで確認してください。一部のマイグレーションは再実行できないため、無条件に繰り返さないでください。 ### v1.0.4 で追加されたカラム @@ -73,7 +75,7 @@ OsWL はすべてのアプリケーションデータを PostgreSQL（`prod`） | `project_versions.imported_at`、`last_updated_at` | 未使用のタイムスタンプ | | `projects.updated_at`、`version`、`last_scanned_at` | 非正規化されたフィールド。UI は代わりに最新の `scan_results` を読む | -[運用デプロイチェックリスト](Production-Deployment-Checklist.md) §8 を参照してください。 +[運用デプロイチェックリスト](Production-Deployment-Checklist.md) §9 を参照してください。 --- @@ -94,7 +96,7 @@ libraries (shared) airgapped_snapshot_entries ── airgapped_snapshot_meta (オフラインスナップショットストア) -users, role_templates, audit_logs, cache_settings, vcs_connections, … +users, role_templates, audit_logs, cache_settings, user_vcs_connections, … ``` - **プロジェクトカードのバージョン／最終スキャン** — `projects.version` ではなく、最新の `scan_results` 行から導出されます。 diff --git a/docs/ja/Embedded-AI.md b/docs/ja/Embedded-AI.md index cdfa3782..8e943806 100644 --- a/docs/ja/Embedded-AI.md +++ b/docs/ja/Embedded-AI.md @@ -1,166 +1,99 @@ -# 内蔵 AI (Embedded AI) +# 内蔵AI -内蔵 AI を使うと、OsWL はクラウドアカウントも API キーも不要で、そのままローカル LLM を実行できます。**何もマシンの外に出ません**。バンドルされた [llama.cpp](https://github.com/ggml-org/llama.cpp) の `llama-server` をサイドカープロセスとして起動し、**OpenAI 互換**のエンドポイント（`http://127.0.0.1:/v1`）を公開します。このエンドポイントは **LOCAL** AI プロバイダーとして登録され、CVE トリアージ要約やライセンスインサイトはすべて自分自身の CPU 上で実行されます。 +OsWLはllama.cppを `http://127.0.0.1:11435/v1` で実行し、LOCALに登録します。推論データはサーバー内で処理され、インストールにはネットワークまたはオフライン転送が必要です。**CPU既定はQwen3.5-2B Q4_K_M、選択肢はGemma 4 E2B Q4_K_Mです。** 一度に1モデルを実行します。テキスト専用でGPU・画像や音声のプロジェクターは不要です。 ---- +## 要件とフォルダー -## 動作方式 +| モデル | 重みダウンロード | サーバー全体の想定最小 | 推奨 | +|---|---:|---|---| +| Qwen3.5 2B Q4_K_M | 1.28 GB | 2 vCPU / RAM 8 GB | 4 vCPU / RAM 8～16 GB | +| Gemma 4 E2B Q4_K_M | 3.11 GB | 4 vCPU / RAM 8 GB | 4 vCPU / RAM 16 GB | -* OsWL は**モデルディレクトリ**（既定 `./embedded-ai`）から `llama-server` を起動し、`/health` に応答するまで待機します。`.gguf` がまだない場合、起動直後にバックグラウンドで既定の Qwen3 モデルのダウンロードが自動的に始まります（初回のみ、約 1.2 GB）— そのため設定画面で **開始** をクリックする頃には、すでにダウンロードが完了しているか進行中であることが多くなります。`oswl.ai.embedded.auto-download-on-boot=false` にすると、以前どおり開始をクリックしたときだけダウンロードする動作に戻ります。**閉域網（エアギャップ）**環境（`oswl.airgapped.enabled=true`）では、このバックグラウンドダウンロードは一切実行されないため、事前に `.gguf` ファイルを自分で配置してください（[要求事項とディレクトリ構成](#要求事項とディレクトリ構成)を参照）。 -* サーバーは**localhost のみ**（`127.0.0.1`）にバインドされ、他のマシンから到達することはありません。 -* 起動に成功すると、OsWL はそのエンドポイントを **LOCAL** プロバイダーとして保存し有効化します（同時にアクティブにできるプロバイダーは 1 つだけなので、他にアクティブなプロバイダーがあれば無効化されます）。 -* 内蔵 AI を停止すると LOCAL プロバイダーも無効化されるため、AI 呼び出しが停止済みエンドポイントに対して失敗することはありません。 -* サーバーは推論を無効化（`--reasoning-budget 0`）し、Web UI なし（`--no-webui`）で起動します。既定では GPU へのモデルレイヤーのオフロードも試みます（`-ngl 999`）— GPU での起動に失敗した場合（GPU 対応ビルドがない、VRAM 不足など）、OsWL は同じモデルを CPU のみで自動的に再試行してから、そのモデルをあきらめます。 -* 同時に来た AI 呼び出しは 1 件ずつキューイングされるのではなく並列に処理されます。サーバーは既定で `--parallel 4 --cont-batching`、フラッシュアテンション（`-fa`）、プレフィックスキャッシュの再利用（`--cache-reuse 256`）付きで起動し、OsWL 自身も独立した AI 呼び出しを並列に実行します（最大 `oswl.ai.enrichment.max-parallel-calls`、既定 `3`）。 -* LOCAL プロバイダーに送られるバッチプロンプトは、より単純化された JSON スキーマのバリアント（`oswl.ai.enrichment.local-simple-schema`、既定 `true`）を使用します — 小さなローカルモデルは、大規模なクラウドモデル向けの完全なスキーマよりも、単純な出力スキーマの方がはるかに確実に従います。 -* CVE とライセンスの要約は入力コンテキストのハッシュでキャッシュされるため、変更のないコンポーネントは次回のスキャンで再度問い合わせされません。 -* ポスチャー、セキュリティトレンド、ライセンストレンド、バージョン差分のインサイトは、4 回の個別呼び出しではなく単一の統合呼び出し（`insights.combined`）で生成され、固定オーバーヘッドを削減します。 +これは**性能保証ではなく容量見積もり**です。OsWLとPostgreSQLの同居、4K～8Kコンテキスト、小規模スキャンと生成を1件ずつ断続的に処理する条件です。大きなアーカイブ・同時スキャン・DB増加には追加容量が必要です。ファイルサイズは最大メモリではありません。重みに空きディスク6 GB以上を確保し、ランタイム・DB・ログ・旧モデルは別途計算します。ビルド要件は含みません。 -> 必要な権限: `SETTINGS_AI_MANAGE` またはシステム管理者 — 他の AI 設定と同じです。 +Qwenの既定採用はCPU共有サーバーに合う小さな重みが理由であり、常に高精度という意味ではありません。実際の英語・韓国語・日本語で検証してください。バーストvCPU数は持続性能を保証しません。クレジット枯渇時も確認し、連続分析は持続性能のあるCPUまたは別CPUワーカーを検討します。GPUは必須ではありません。 ---- +OS・アーキテクチャに合うCPUランタイムと同じ配布物のライブラリを使用します。ローカル検証基準はllama.cpp **b10068 (571d0d540)**です。両モデルと `--chat-template-kwargs`、`-fa on` をサポートする互換版が必要です。 -## 要求事項とディレクトリ構成 - -モデルディレクトリにはサーバーバイナリが必要です。`.gguf` モデルがまだ存在しない場合、初めて**開始**をクリックした際に自動で取得されます: - -``` +```text embedded-ai/ - llama-server(.exe) — llama.cpp サーバーバイナリ（自分で用意） - qwen3-1.7b-q4_k_m.gguf — 既定モデル（Apache 2.0）— 初回開始時に自動ダウンロード + llama/ + llama-server(.exe) + ... companion libraries ... + model/ + Qwen/Qwen3.5-2B-Q4_K_M.gguf + Gemma/gemma-4-E2B-it-Q4_K_M.gguf + llama-server.log ``` -ディレクトリが空の場合、Qwen3-1.7B（約 1.2 GB）がそのディレクトリに直接ダウンロードされます — -起動後に自動的に、またはまだ終わっていなければ **開始** をクリックした時点で — SHA256 チェック -サムが検証された後にサイドカーが起動します。カードにはダウンロードの進捗がリアルタイムで表示され、 -`java -jar app.jar` だけですべてが完結します — 別のスクリプトやビルド手順は不要です。Qwen3 は -Apache 2.0 ライセンスのため（[THIRD_PARTY_LICENSES.md](../../THIRD_PARTY_LICENSES.md#qwen3-17b-gguf) -参照）、これは安全です — ユーザーに代わって取得・同梱しても追加の再配布義務は発生しません。モデルは -既定で上流の [Hugging Face リポジトリ](https://huggingface.co/ggml-org/Qwen3-1.7B-GGUF)から -ダウンロードされます。サードパーティのホストに依存したくない場合は、 -`OSWL_EMBEDDED_DEFAULT_MODEL_URL` にバイト単位で同一の自己ホスティングミラーを指定してください。 - -既定モデルの URL、SHA256、サイズの各設定は 1 つの組として扱ってください。URL だけを変更して -SHA256 やサイズを合わせないと、すべてのダウンロードがチェックサム検証で失敗します。 - -他の `.gguf` モデルも自分で追加して使えます — OsWL は既定の Qwen3 だけでなく、このディレクトリに直接置かれたすべての `.gguf` ファイルを認識します。再配布・共有する前に、そのモデル自体のライセンスを必ず確認してください — OsWL が同梱・自動取得するのは Qwen3 のみです。 - -| 項目 | OsWL が探す場所 | -|---|---| -| サーバーバイナリ | `/llama-server(.exe)`、次に `/bin/`、次にシステムの `PATH`（[llama.cpp のリリース](https://github.com/ggml-org/llama.cpp/releases)）— **自動ダウンロードされないため**、自分で配置する必要あり | -| モデル | ディレクトリ直下にあるすべての `.gguf` ファイル | - -設定の既定値（UI で保存されたフォルダが `dir` より優先されます）: - -| 設定キー | 環境変数 | 既定値 | 説明 | -|---|---|---|---| -| `oswl.ai.embedded.dir` | `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | モデルディレクトリ（作業ディレクトリからの相対パス） | -| `oswl.ai.embedded.port` | `OSWL_EMBEDDED_AI_PORT` | `11435` | サイドカー用の localhost ポート | -| `oswl.ai.embedded.context-size` | `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | `llama-server -c` に渡すコンテキストウィンドウ — **総**コンテキストサイズで、並列スロット数に応じて分割されます | -| `oswl.ai.embedded.gpu-layers` | `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | オフロードする GPU レイヤー数（`-ngl`）: `-1` はビルドが対応する最大数、`0` は CPU のみ、正の数を指定すると明示的なレイヤー数になります。GPU での起動に失敗した場合は同じモデルを CPU のみで自動的に再試行します | -| `oswl.ai.embedded.threads` | `OSWL_EMBEDDED_AI_THREADS` | `0` | スレッド数（`-t`）；`0` は llama.cpp が自動検出 | -| `oswl.ai.embedded.parallel-slots` | `OSWL_EMBEDDED_AI_PARALLEL` | `4` | `>1` の場合 `--parallel N --cont-batching` が付与され、サーバー側で AI 呼び出しが直列化されなくなります。各スロットには `context-size / N` が割り当てられ、2048 未満になると警告ログが出力されます | -| `oswl.ai.embedded.flash-attn` | `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | フラッシュアテンション（`-fa`） | -| `oswl.ai.embedded.cache-reuse` | `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | 呼び出し間でのプレフィックスキャッシュ再利用のための `--cache-reuse N`；`<=0` で無効化 | -| `oswl.ai.embedded.extra-args` | `OSWL_EMBEDDED_AI_EXTRA_ARGS` | （空） | llama-server の CLI 追加引数をそのまま付加します — サーバー設定専用で、リクエスト入力からは決して取得されません | -| `oswl.ai.embedded.startup-timeout-seconds` | `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | 各モデル候補が healthy になるまで、起動試行ごとに許容される時間（秒） | -| `oswl.ai.embedded.default-model-url` | `OSWL_EMBEDDED_DEFAULT_MODEL_URL` | 上流の Hugging Face `ggml-org/Qwen3-1.7B-GGUF` アセット | 既定 Qwen3 モデルの一次ダウンロード元 | -| `oswl.ai.embedded.default-model-sha256` | `OSWL_EMBEDDED_DEFAULT_MODEL_SHA256` | （THIRD_PARTY_LICENSES.md 参照） | 期待される SHA256 — URL と必ず同時に変更 | -| `oswl.ai.embedded.default-model-size-bytes` | `OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES` | `1282439264` | 想定サイズ（バイト）。ダウンロード進捗バーの初期表示に使用され、URL/SHA256 と同じ組として扱います | -| `oswl.ai.embedded.fallback-model-url` | `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | （空） | 一次 URL 失敗時に 1 回だけ再試行。一次を自己ホスティングミラーに変更する場合は、この値に上流 URL を指定してください | -| `oswl.ai.embedded.auto-download-on-boot` | `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | 起動時にバックグラウンドで既定モデルを先読み；`oswl.airgapped.enabled=true` の場合は実行されない | - ---- - -## 開始と停止 - -**設定 → AI** を開き、**内蔵 AI（組み込みローカルモデル）**カードを使用します: - -1. ステータス行を確認 — **実行中** / **停止中**、バイナリが見つからない場合はその旨のメモが表示されます。 -2. **開始**をクリックします。ディレクトリにまだモデルがない場合、サーバー起動前に Qwen3 のダウンロード進捗バー（約 1.2 GB — 回線速度によっては数分かかる場合あり）が表示されます。モデルがすでにある場合でも、読み込みだけで最大 1 分ほどかかることがあります。 -3. 実行中になると、カードに**実行モデル（Active）**が表示され、そのエンドポイントが LOCAL プロバイダーとして稼働します。 -4. **停止**をクリックするとサイドカーがシャットダウンします（ダウンロード済みのモデルは削除されません — 次回の開始時に即座に再利用されます）。 +| Model | Bytes | SHA-256 | +|---|---:|---| +| Qwen3.5-2B Q4_K_M | 1280835840 | `aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223` | +| Gemma 4 E2B Q4_K_M | 3106738272 | `740185b21d22ceb83a11c3aa62ad5842ef32c70f6096d756bbee85a1e4ec34b8` | -カードには使用中のフォルダ、検出されたすべての `.gguf` ファイル、直近の起動エラー（あれば赤字で）も表示されます。 +- [Qwen model card](https://huggingface.co/Qwen/Qwen3.5-2B) +- [Qwen GGUF, pinned revision](https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/tree/f6d5376be1edb4d416d56da11e5397a961aca8ae) +- [Gemma model card](https://huggingface.co/google/gemma-4-E2B-it) +- [Gemma GGUF, pinned revision](https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/tree/0314792d7f1f7e229411f620751375812bb9faf2) +- [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) +- [License notices](../../THIRD_PARTY_LICENSES.md#embedded-ai-runtime-and-models) ---- +設定はファミリーフォルダーではなくルートを指定します。`model/` と直下のファミリーを探索します。旧ルートGGUFおよびルート/bin実行ファイルも認識し、同名はmodel側を優先します。`mmproj*`、`mtp-*`、`imatrix*` とルート外を指すファイルは除外します。 -## モデルの切り替え +ほかのインストールの旧モデルは自動削除・交換しません。不要なら探索対象外へ移動します。保存モデルが消えた場合はインストール済みの既定優先順位に戻ります。 -既定のモデルだけに限定されません — llama.cpp 互換の `.gguf` であれば何でも使えます: +プロジェクトの多言語プロンプトで両モデルの英語・韓国語・日本語の応答を確認しました。ただし一部のQwen応答では、入力した修正バージョンや件数が誤って生成されました。これは実行互換性の確認であり、正確性の保証ではありません。AIの推奨は元のスキャン結果と照合してください。既定モデルはリソース基準の選択であり、品質順位ではありません。 -1. 量子化された GGUF モデルを**ダウンロード**します（例: [Hugging Face](https://huggingface.co/models?library=gguf)）。 -2. `.gguf` ファイルをカードに表示されているモデルフォルダに**配置**します。 -3. **モデル**ドロップダウン（フォルダから再読み込みされる一覧）で**選択**し、**保存**をクリックします。 -4. **開始**をクリックすると、選択したモデルが最初に試行されます。モデルの選択は次回の開始時に反映され、実行中にモデルを切り替えることはできません（ドロップダウンは無効化されます）。 +## インストール・モデル・言語選択 -**自動（優先順位）** オプションは次の順で試行します: ドロップダウンに保存されたモデル → `qwen3…` → 残りの `.gguf` ファイルの中で最初のもの（アルファベット順）。 +1. 実行ファイルとライブラリを `llama/` に置きます。 +2. モデルがなければ起動時に **Qwen3.5 2Bのみ** `model/Qwen/` に事前取得します。開始ボタンも必要時に取得します。`OSWL_EMBEDDED_AUTO_DOWNLOAD=false` で事前取得を停止できます。 +3. Gemmaは上記固定リビジョンから手動取得し、SHA-256とバイト数を確認して `model/Gemma/` に置きます。 +4. **設定 → AI → プロバイダー → 内蔵AI**でモデル名と要件を確認します。 +5. **停止 → モデル選択 → 保存 → 開始**で変更します。開始失敗時は代替が実行される場合があるため、実行中モデルと代替表示を確認します。 +6. **分析範囲/コンテキスト**で英語・韓国語・日本語を選び保存します。内蔵識別とURLは維持されます。既存要約は再生成前には翻訳されません。 -> CPU 専用の推論では、**1B〜4B パラメータ**程度の小さな量子化モデル（Q4_K_M など）を推奨します。より大きなモデルはより多くの RAM を必要とし、遅いマシンでは起動タイムアウトに失敗することがあります。コンテキストウィンドウは `OSWL_EMBEDDED_AI_CONTEXT`（既定 `8192`）で、並列スロット数に応じて分割されます — 既定の 4 スロットでは呼び出しごとに 2048 トークンのコンテキストになるため、呼び出しごとに長いコンテキストが必要な場合はコンテキストを増やすか `OSWL_EMBEDDED_AI_PARALLEL` を下げてください。 +既存のAI設定管理権限を使います。開始は実際のモデルをLOCALに登録してほかのプロバイダーを無効にし、停止はLOCALも無効にします。ほかのプロバイダー選択だけではプロセスが止まらないため、メモリ解放には別途停止します。 ---- +既定優先順位はQwen3.5-2B Q4_K_M → ほかのQwen3 → Gemma 4 E2B → 残りの互換GGUFです。明示選択と有効な保存値を優先します。追加モデルは自身の要件とライセンスを確認してください。 -## モデルフォルダの変更 +フォルダー変更はllama/とmodel/を含むルートを保存します。変更時は管理中のサーバーが停止します。移動もロック回避のため停止後に行います。Linux実行ファイルには実行権限が必要です。 -OsWL に別のディレクトリを指定する方法は 2 つあります: +## CPU既定値 -| 方法 | 適用範囲 | +| Environment variable | Default | |---|---| -| 内蔵 AI カードの**フォルダ**入力欄 + **保存** | データベースに永続化されます（`ai_preferences.embedded_dir` / `embedded_model`）。既定値より優先されます | -| `OSWL_EMBEDDED_AI_DIR` 環境変数 / `oswl.ai.embedded.dir` の yaml 設定 | UI でフォルダが保存されていない場合に使われる既定値 | +| `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | +| `OSWL_EMBEDDED_AI_PORT` | `11435` | +| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `0` | +| `OSWL_EMBEDDED_AI_THREADS` | `1` | +| `OSWL_EMBEDDED_AI_PARALLEL` | `1` | +| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | +| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | +| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | +| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | +| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | empty | +| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | -`PUT /api/settings/ai/embedded/config` が適用するルール: +`-ngl 0` と生成スロット1を明示します。`LLAMA_ARG_CHAT_TEMPLATE_KWARGS={"enable_thinking":false}` とreasoning budget 0を併用します。予算0だけでは新モデルが空回答になる場合があります。4 vCPUで2スレッドを使う場合はWeb・スキャンの遅延を確認してください。スレッド数はCPU使用率上限ではなく、必要ならOS・コンテナ制限を使います。 -* フォルダは**すでに存在している**必要があります — そうでない場合、保存は拒否されます（`400`、"Folder not found or not a directory"）。 -* **サイドカーの実行中**にフォルダを変更すると、まずサイドカーが停止し（実行中の `llama-server` は旧ディレクトリのファイルロックを保持しているため）、LOCAL プロバイダーも無効化されます。新しいフォルダから再度開始してください。 -* フォルダ入力を空にすると、上書き設定が解除され、設定済みの既定値にフォールバックします。 +全体コンテキストはスロット間で分割します。`OSWL_AI_MAX_PARALLEL_CALLS` の既定3は**スキャン単位**です。1スロットでも待機が非ストリーミング読み取り制限90秒を超える場合があります。小型サーバーは1に設定し、スキャン重複を避けます。全体の受付制限ではありません。 ---- +## 整合性・閉域・GitHub配布 -## 自動フォールバック +既定URLは上記の固定リビジョンです。旧GitHub `models-v1` 資産はQwen3 1.7Bなので新モデルに再利用できません。この変更は新しいGitHubモデル資産を公開せず、存在も仮定しません。 -一度の開始クリックで複数のモデルが試行されることがあります。候補は順番に試されます — 要求／保存されたモデル → 内蔵の優先順位 → 残りの `.gguf` — 各候補には起動試行ごとに最大 **120 秒**（`oswl.ai.embedded.startup-timeout-seconds`）が与えられ、healthy になる必要があります。GPU オフロードが有効な場合（既定）、GPU での起動に失敗した候補はまず CPU のみで再試行されます。それでもクラッシュまたはタイムアウトするモデルはスキップされ、次の候補に進みます。 +`OSWL_EMBEDDED_DEFAULT_MODEL_URL`、`OSWL_EMBEDDED_DEFAULT_MODEL_SHA256`、`OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES` は同一ファイルの値にします。ハッシュとサイズを検証してからインストールします。`OSWL_EMBEDDED_FALLBACK_MODEL_URL` は既定で空で、同じバイト列のミラーのみ指定できます。ミラーも既定Qwen名で保存するため、別モデルは実際の名前で手動配置します。 -OsWL が最終的に**最初の選択ではない**モデルを実行することになった場合、カードのモデルセレクタの横にオレンジ色の **「フォールバックモデルで開始しました」** バッジが表示されます。これは通常、優先モデルの読み込みに失敗したことを意味します（大きすぎる、ダウンロードが壊れているなど）— **実行モデル**の行で実際に稼働しているモデルを確認できます。 +閉域では取得せず、対応ランタイム・検証済み重み・告知を転送します。Dockerにも含まれないためルートをマウントして **Linux用** ランタイムを用意します。自動取得には書き込み権限が必要です。Windows実行ファイルはLinuxコンテナで使えません。 ---- - -## 状態とログ - -`GET /api/settings/ai/embedded` は `running`、`external`、`binaryFound`、`activeModel`、`fallbackUsed`、`lastError`、`availableModels`、`modelsDir`、`baseUrl` を返し、開始によってトリガーされた既定モデルのダウンロードが進行中の間は `downloading`、`downloadedBytes`、`downloadTotalBytes` も返します。 - -`external` は、設定されたポートですでに何か（手動で起動された `llama-server`、または以前の OsWL プロセス・クラッシュにより取り残されたもの）が `/health` に応答しており、それを OsWL 自身が起動したのではない場合に `true` になります。この場合も `running` は `true` のままです — エンドポイント自体は LOCAL プロバイダーとして正常に使用できるためです — しかし**停止**をクリックしても OsWL が所有していないプロセスは終了できず、実行され続けたままステータスは `external: true` を報告し続けます。 - -`POST /api/settings/ai/embedded/start` は、Qwen3 のダウンロードを開始する際、完了を待たずに即座に応答します（`success: true`, `downloading: true`）— 設定ページは進捗と最終的な `running` / `lastError` の結果をポーリングで確認します。ダウンロード自体はブラウザセッションとは無関係にサーバー上で進行するため、ページを更新（または閉じて）もキャンセルされません。ページを再度開くと進捗表示が再開されます。 - -`llama-server` は自身の標準出力／標準エラー出力を **`/llama-server.log`** に書き込みます。起動に失敗した場合、そのログの最後の数行が `lastError` に含まれカード上に赤字で表示されます — 詳細はログファイル全体を確認してください。 - ---- +`embedded-ai/` はGit・Dockerビルドコンテキストから除外し、JARに重み・実行ファイルは入りません。Qwen3.5・Gemma 4はApache 2.0、llama.cppはMITです。ライセンス全文・出典・上流告知・Unsloth GGUF Q4_K_M量子化の事実を保存します。実行ファイル再配布では同梱ライブラリの告知も保ちます。 ## トラブルシューティング -| 症状 | 考えられる原因／対処法 | -|---|---| -| "llama-server binary not found" | カードに表示されているフォルダ（またはその `bin/` サブフォルダ、または `PATH`）に `llama-server(.exe)` を配置してください — これは自動ダウンロードされません | -| モデルがまだなく、開始をクリックしても何も起きないように見える | インターネット接続を確認してください — 既定モデルのダウンロードには一度だけそれが必要です。閉域網環境では、`.gguf` ファイルをモデルフォルダに直接自分で配置してください | -| "Model download failed" / チェックサム不一致 | ダウンロード中にネットワークが中断された、または転送が破損した — 不完全なファイルは自動的に削除されます。**開始**を再度クリックして再試行してください | -| ログに `failed to open GGUF file` | 設定上のフォルダが実際のモデルの場所と一致していません — **フォルダ**フィールドと、ファイル名がドロップダウンの項目と一致しているか確認してください | -| "did not become healthy within 120s" | マシンが遅い、またはモデルが大きすぎます — より小さい量子化（例: 1B〜2B パラメータ級の Q4_K_M `.gguf`）を試すか、`OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` を上げてください。`(GPU)` での失敗は自動的に CPU のみで再試行されるため、このメッセージが続く場合は CPU での再試行も失敗しています | -| ログに `slotContext … is below 2048` という警告 | コンテキストサイズに対して並列スロット数が多すぎます — `OSWL_EMBEDDED_AI_CONTEXT` を上げるか `OSWL_EMBEDDED_AI_PARALLEL` を下げてください | -| ポートがすでに使用中 | 別のプロセス（または手動で起動した `llama-server`）がポートを占有しています — それを停止するか `OSWL_EMBEDDED_AI_PORT` を設定してください。ポートですでに正常に待ち受けているサーバーは「実行中」とみなされ、ステータスレスポンスで `external` としてフラグが立ちます | -| **停止**をクリックしてもカードがオフにならない | 実行中のサーバーが `external`（この OsWL インスタンスが起動したものではない）です — プロセスを自分で停止するか、それが動作しているマシン／コンテナを再起動してください。OsWL はそれを終了できません | -| 保存時に "Folder not found or not a directory" | 先にディレクトリを作成してください。保存は既存のフォルダのみを受け付けます | - ---- - -## セキュリティとプライバシー - -* サイドカーは `127.0.0.1` のみにバインドされ、**API キーは不要**です — ネットワークには一切公開されません。 -* `llama-server.log` に出る llama.cpp の **CORS 警告**は想定内で無害です — サーバーは localhost でのみリッスンしています。 -* テレメトリなし: モデルに送られるプロンプト、コードスニペット、CVE データがマシンの外に出ることは一切ありません。 - ---- - -## REST API 概要 - -[API リファレンス — AI](API-Reference.md#ai)を参照してください。対話的なスキーマ: Swagger UI（`local` プロファイル）。 +- 実行ファイルなし: llama/、OS・アーキテクチャ・ライブラリ・権限を確認します。 +- 空回答: 互換版と明示的な非思考設定を確認します。 +- 開始失敗: llama-server.logでモデル対応・RAM不足を確認します。 +- 別モデル実行: 停止・選択・保存・開始後に代替表示を確認します。 +- タイムアウト: 同時スキャン・呼び出しとCPUクレジットを確認します。 +- 取得失敗: URL・サイズ・SHA-256を同時に確認します。 diff --git a/docs/ja/Getting-Started.md b/docs/ja/Getting-Started.md index 8131c0d4..92ee38ef 100644 --- a/docs/ja/Getting-Started.md +++ b/docs/ja/Getting-Started.md @@ -8,11 +8,11 @@ | コンポーネント | 要件 | |---|---| -| **JDK** | 25 以降 | +| **JDK** | 25 | | **ビルドツール** | Gradle Wrapper（同梱 — `./gradlew`） | | **データベース** | H2 ファイルモード（ローカル／開発用）または PostgreSQL 15 以降（本番用） | | **OS** | Linux、macOS、Windows | -| **メモリ** | 最小 512 MB、1 GB 以上を推奨 | +| **メモリ** | スキャンの処理量によって異なり、組み込み AI には追加メモリが必要 | > Node.js や npm は不要です — Tailwind CSS のスタンドアロンバイナリは初回ビルド時に Gradle が自動でダウンロードします。 @@ -38,44 +38,24 @@ OsWL には 2 つの Spring プロファイルが用意されています。 ### 3. アプリケーションを起動 -**ローカル（H2、設定不要）:** +ローカル開発では `./gradlew bootRun` を実行します（PowerShell: `.\gradlew.bat bootRun`）。既定の `local` プロファイルは H2 と固定の開発用暗号化キーを使用します。開発環境以外では別の永続キーを使用し、開発用キーを本番に流用しないでください。 -```bash -./gradlew bootRun -``` - -**本番（PostgreSQL）:** +本番では `./gradlew bootJar verifyProdJar` で配布用 JAR をビルドし、`prod` プロファイルで実行します。`DB_URL`、`DB_USERNAME`、`DB_PASSWORD` と、Base64 デコード後に 32 バイトとなる永続的な `OSWL_ENCRYPTION_KEY` を設定してください。キーは `openssl rand -base64 32` で一度生成し、再起動や復元でも維持します。`prod` はスキーマを自動作成せず検証するため、先に PostgreSQL のスキーマを準備します。 -```bash -export SPRING_PROFILES_ACTIVE=prod -export DB_URL=jdbc:postgresql://localhost:5432/oswl -export DB_USERNAME=oswl -export DB_PASSWORD=changeme -export OSWL_ENCRYPTION_KEY=$(openssl rand -base64 32) - -./gradlew bootRun -``` +手順は[本番デプロイチェックリスト](Production-Deployment-Checklist.md)と [Docker の実行案内](../../deploy/README.md)を参照してください。`bootRun` と `java -jar` は `.env` を自動では読み込みません。起動するシェルで環境変数を設定するか Spring の設定を使用し、Compose では `--env-file` を指定します。 -> **`OSWL_ENCRYPTION_KEY`** — VCS トークンなど保存された機密情報を保護する鍵です。`local` では開発用の鍵が自動生成されることがあります。**`prod`** では起動前に必ず固定値を設定してください。設定しないとアプリケーションは起動しません。鍵を紛失すると、それまでに保存された VCS 認証情報は使用できなくなります。 - -アプリケーションは既定でポート **8080** で起動します。 - ---- +既定のアプリケーションポートは **8080** です。必要なメモリは処理量によって異なり、ローカル AI にはモデルとコンテキスト用の追加メモリが必要です。 ## 組み込み AI モデル（初回起動） -OsWL は組み込みの llama.cpp サイドカーを通じて、AI 機能を完全にオンプレミスで実行できます。初回起動時に `embedded-ai/` に `.gguf` モデルが存在しない場合、OsWL は既定の **Qwen3-1.7B** モデル（約 1.2 GB）のバックグラウンドダウンロードを自動で開始します: +現在の既定モデルは **Qwen3.5-2B Q4_K_M** です（1,280,835,840 バイト、約 1.28 GB）。Hugging Face の `unsloth/Qwen3.5-2B-GGUF` にある固定リビジョンのファイルを取得し、`embedded-ai/model/Qwen/` に保存して設定済みの SHA-256 で検証します。llama.cpp の実行ファイルは別途インストールし、`embedded-ai/llama/` または `PATH` に配置してください。 -* 上流の Hugging Face リポジトリ（`ggml-org/Qwen3-1.7B-GGUF`）から取得し、SHA-256 で整合性を検証します。サードパーティのホストへの依存を避けたい場合は、`OSWL_EMBEDDED_DEFAULT_MODEL_URL` に自己ホスティングミラーを指定してください。 -* ダウンロードのみを行います — サイドカーの起動やアクティブな AI プロバイダーの変更は行いません。進行状況は **設定 → AI** に表示され、ファイルの準備ができたらそこで **開始** をクリックしてください。 -* `OSWL_EMBEDDED_AUTO_DOWNLOAD=false` で無効化できます。エアギャップモードではダウンロードは一切試行されません（後述）。 - -`llama-server(.exe)` バイナリ本体のみ手動での手順です — [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) からダウンロードし、`embedded-ai/`（または `PATH` 上）に配置してください。詳細は [組み込み AI](Embedded-AI.md) を参照してください。 - ---- +モデルがなく `OSWL_EMBEDDED_AUTO_DOWNLOAD=true` の場合、起動時にバックグラウンドで事前取得します。この処理はサイドカーの起動や AI プロバイダーの有効化を行いません。実行ファイルの導入後、**設定 → AI** から開始してください。起動時の事前取得を無効にするには値を `false` にします。閉域網モードではモデルの自動ダウンロードは無効です。モデルの検出、設定、問題の解決方法は[組み込み AI](Embedded-AI.md)を参照してください。 ## エアギャップ（オフライン）環境での起動 +閉域網モードは対応する脆弱性情報源をスナップショットに切り替える機能であり、ネットワークの遮断機能ではありません。VCS・SMTP・Webhook・AI の接続先は環境に応じて別途設定してください。 + 外部インターネットへのアウトバウンド接続がないホストの場合: 1. 起動前に `OSWL_AIRGAPPED_ENABLED=true` を設定します。脆弱性／脅威インテリの参照（OSV、deps.dev、EPSS、KEV）はインポート済みのオフラインスナップショットから提供され、アウトバウンド HTTP は一切試行されず、組み込みモデルの自動ダウンロードもスキップされます。 @@ -93,7 +73,7 @@ OsWL は組み込みの llama.cpp サイドカーを通じて、AI 機能を完 ## セットアップウィザード -初回起動時（データベースが空の状態）は、すべてのリクエストが `http://localhost:8080/setup` にリダイレクトされます。 +初回起動時（データベースが空の状態）は、通常のアプリケーションページへのリクエストが `http://localhost:8080/setup` にリダイレクトされます。 ウィザードで入力する項目: @@ -111,35 +91,24 @@ OsWL は組み込みの llama.cpp サイドカーを通じて、AI 機能を完 ## 初回ログイン -1. `http://localhost:8080/login` にアクセスします。 -2. セットアップウィザードで作成したメールアドレスとパスワードを入力します。 -3. **二要素認証（Two-Factor Authentication）** が有効な場合（管理者が設定可能）、メールで送信される 6 桁の OTP の入力を求められます。 - * `local` モードでは OTP がサーバーログに出力されます: `*** OTP CODE: NNNNNN ***` - * 開発用ショートカット: test プロファイル使用時は `000000` が受け付けられます。 -4. 仮パスワードでの初回ログイン時、OsWL はその場でのパスワード変更を強制します。 - ---- +1. `http://localhost:8080/login` でセットアップ時に作成したアカウントにログインします。 +2. メールによる二要素認証が必要な場合、現在のセッションに発行された 6 桁のコードを入力します。有効期限は 3 分で、再送には 60 秒の待機時間があります。 +3. 既定のローカル GreenMail SMTP 設定では、受信したコードがサーバーログに `*** OTP CODE: ... ***` と表示されます。外部 SMTP を設定した場合は受信者のメールボックスを確認してください。固定コード `000000` による認証の回避機能はありません。 +4. パスワード変更が必要と設定されたアカウントは、新しいパスワードを設定してから利用を続けます。 ## テストデータの投入（ローカル専用） -ログイン後、次の URL を呼び出します: - -``` -GET http://localhost:8080/data/test -``` +セットアップ完了後に `GET /data/test` を呼び出すと、既存のプロジェクト・スキャン・ライブラリのデータを削除し、`DemoImportCatalog` にある公開リポジトリの実際の Quick Import ジョブをキューに登録します。プロジェクト画面に移動した後も非同期処理が続き、ネットワーク接続が必要です。固定のテストアカウントや決められた脆弱性一覧は作成しません。 -このエンドポイントは `local` プロファイルでのみ利用可能で、次を行います: +これらの開発用エンドポイントは local ソースセットの `local`/`test` プロファイルで提供され、本番 JAR には含まれません。`local` では `/data/**` に認証なしでアクセスできるため、このデータ初期化機能は隔離された開発環境でのみ使用してください。 -* 既存のすべてのプロジェクト・スキャン・ライブラリ・CVE を削除します。 -* Maven・npm など複数エコシステムにまたがる複数プロジェクト、様々な深刻度の数十件の CVE、混在するライセンス状態、トレンド可視化用の複数の過去スキャンなど、リアルなデータセットでデータベースを再構築します。 +`GET /data/test-api-key` は最初のプロジェクトに紐づく API キーを発行します。プロジェクトがない場合は 404 を返すため、デモのインポートでプロジェクトが作成されるまで待ってください。 -テスト用の API キーも次で取得できます: +## UI/アクセシビリティ テストハーネス（開発者専用） -``` -GET http://localhost:8080/data/test-api-key -``` +`./gradlew uiTest` は実際のアプリケーションに対して既存の Playwright ブラウザテストを実行します。アクセシビリティテストは指定ページで axe-core を実行し、ほかのテストは画面操作やリクエストの流れを確認します。必要に応じて Chromium をダウンロードし、`test`/`check` とは別に実行します。 ---- +JUnit HTML レポートは `build/reports/tests/uiTest/`、axe レポートは `build/reports/axe/` に保存されます。閉域網ではブラウザとビルド依存関係を事前に用意し、必要に応じて `PLAYWRIGHT_BROWSERS_PATH` を設定してください。ブラウザの導入だけではビルド依存関係は揃いません。 ## アクセス制御（推奨読み物） diff --git a/docs/ja/Home.md b/docs/ja/Home.md index 60bb3d9d..9304fe88 100644 --- a/docs/ja/Home.md +++ b/docs/ja/Home.md @@ -1,5 +1,7 @@ # OsWL ドキュメント +[1.0.5.1 の変更点](Whats-New-v1.0.5.1.md) + **OsWL**（Open-source Software Watchlist）のドキュメントハブへようこそ。 OsWL は、単一のマイクロサービスから製品ポートフォリオ全体まで、すべての OSS 依存関係の CVE 脆弱性とライセンスコンプライアンスをチームが一箇所で追跡できる社内向け **SCA（ソフトウェア構成分析）** プラットフォームです。 @@ -30,7 +32,7 @@ OsWL は、単一のマイクロサービスから製品ポートフォリオ全 | [API リファレンス](API-Reference.md) | REST エンドポイントの全一覧 | | [用語集](Glossary.md) | OsWL のすべての用語の定義 | -製品 UI 自体は日本語に完全対応しています（上部バーの言語切り替え、または `?lang=ja`）。他言語のドキュメントは[英語](../Home.md)と[韓国語](../ko/Home.md)でも利用できます。 +製品 UI 自体は日本語に完全対応しています（上部バーの言語切り替え、または `?lang=ja`）。他言語のドキュメントは[英語](../en/Home.md)と[韓国語](../ko/Home.md)でも利用できます。 --- diff --git a/docs/ja/Production-Deployment-Checklist.md b/docs/ja/Production-Deployment-Checklist.md index 2f5ea61d..e156c608 100644 --- a/docs/ja/Production-Deployment-Checklist.md +++ b/docs/ja/Production-Deployment-Checklist.md @@ -19,32 +19,32 @@ OsWL をインターネットに公開する前に、この 1 ページのチェ | `DB_PASSWORD` | データベースパスワード | | `OSWL_ENCRYPTION_KEY` | インスタンス暗号化キー（`openssl rand -base64 32` で生成） | -`.env.prod.example` を `.env.prod` にコピーし、すべての値を埋めてください。`application-prod.yaml` には DB や暗号化の**既定値はありません**。 +`deploy/docker/.env.prod.example` を `.env.prod` にコピーし、すべての値を埋めてください。`application-prod.yaml` には DB や暗号化の**既定値はありません**。 -起動時、不足している変数やその他の設定問題は、（アプリケーションの準備が完了した後）ログ内の**1 つの `OSWL STARTUP WARNINGS` ブロック**にまとめて出力されます。**`prod`** で `OSWL_ENCRYPTION_KEY` が不足している場合、アプリケーションは**起動に失敗**します — 本番公開前に固定値を設定してください（`local` プロファイルは開発専用として一時的なキーを使うことがあります）。 +起動後の設定警告は `OSWL STARTUP WARNINGS` ログブロックにまとめて出力されます。本番用暗号化キーの不足や DB 設定の不備などにより、このブロックが表示される前に起動が失敗する場合があります。本番環境では固定の `OSWL_ENCRYPTION_KEY` を維持してください。`local` YAML の固定の代替キーは開発専用であり、本番では使用できません。 ## 3. ネットワークバインディング -| チェック | 対応 | -|-------|--------| -| 既定のバインド | `SERVER_ADDRESS=127.0.0.1`（`application-prod.yaml` 参照） | -| 公開アクセス | **nginx / Caddy / Traefik**（またはクラウド LB）を前段に置き、TLS はそこで終端させる | -| 直接 `0.0.0.0` | JVM の HTTP スタックを公開するリスクを受け入れる場合のみ。リスクとファイアウォールを文書化すること | - -`docker-compose.prod.yml` は既定で **`127.0.0.1:8080:8080`** にマッピングされているため、コンテナはすべてのインターフェースには公開されません。 +ホストで JVM を直接実行する場合、`application-prod.yaml` の既定値は `SERVER_ADDRESS=127.0.0.1` で、同じホストのリバースプロキシから接続できます。**Docker Compose ではコンテナ内を `SERVER_ADDRESS=0.0.0.0`** にして、Docker からアプリケーションへ転送できるようにします。ホスト側の公開範囲は別の設定です。`deploy/docker/compose.prod.yml` はホストの **`127.0.0.1:8080:8080`** にのみポートを割り当てます。本番用サンプルはこのコンテナ設定を使います。更新時は既存の `.env.prod` も確認してください。 -プロキシが HSTS とセキュアクッキーのために `X-Forwarded-Proto` を送信する場合は `server.forward-headers-strategy=framework`（`application.yaml` の既定値）を設定してください。 +リバースプロキシで TLS を終端してください。付属のホストループバックへのポート割り当てを使う場合、プロキシは Docker ホストで実行します。プロキシもコンテナで動かす場合は、共有 Docker ネットワーク上のサービスアドレスに接続します。転送ヘッダーは信頼できるプロキシからのものだけを受け入れてください。 ## 4. Docker Compose（本番） +リポジトリのルートで実行します。既存の `.env.prod` の値は保持し、新規インストール時だけテンプレートをコピーします。両 Compose ファイルの既定プロジェクト名は `oswl` です。既存環境が別の名前を使用していた場合は `-p YOUR_EXISTING_PROJECT` または `COMPOSE_PROJECT_NAME` で同じ名前を維持し、既存ボリュームに接続してください。[デプロイファイルの案内](../../deploy/README.md)を参照してください。 + ```bash -cp .env.prod.example .env.prod +cp deploy/docker/.env.prod.example .env.prod # DB_*, OSWL_ENCRYPTION_KEY, SMTP_* を編集 -docker compose -f docker-compose.prod.yml up -d --build +docker compose --env-file .env.prod -f deploy/docker/compose.prod.yml up -d --build ``` +Compose は `--env-file` で `.env.prod` を読み込みます。`java -jar` や `bootRun` で直接実行する場合、このファイルは自動で読み込まれません。環境変数を設定するかサービス管理ツールに登録してください。本番環境の初回起動前に DB スキーマを準備します（§9 参照）。 + ログを確認: 変数不足の警告がない、PostgreSQL に接続済み、H2 や Swagger の URL がない。 +`deploy/docker/compose.prod.yml` は、コンテナ自体の stdout/stderr（docker の `json-file` ドライバ、100MB × 10 ファイル）と、アプリ自身のローテーションファイルログ（`oswl-logs-prod` ボリュームにマウント）の両方に上限を設けています — 後者は §5 を参照。 + ## 5. ロギングと可観測性 | チェック | 対応 | @@ -55,6 +55,17 @@ docker compose -f docker-compose.prod.yml up -d --build | メトリクス収集 | Prometheus を `/actuator/prometheus` に向ける — スクレイパーは管理者資格情報を提示する必要あり | | Actuator 認証 | **SYSTEM_ADMIN** セッションが必要（公開ではない） | +### ログローテーションとリクエスト相関 + +`local`／`test` はコンソール出力のみです。`prod` では `logback-spring.xml` がローテーションするファイルログを追加で書き出します: + +| 変数 | 既定値 | 用途 | +|------|--------|------| +| `OSWL_LOG_DIR` | `./logs`（docker では `/var/log/oswl`、§4 参照） | `oswl.log` の保存先。100MB または日次でローテーションし、最大 30 ファイル保持、合計 5GB を上限とします。 | +| `OSWL_LOG_JSON` | `false` | `true` にすると、ファイル（コンソールではない）が 1 行 1 JSON オブジェクトの形式に切り替わります — ログシッパーをこれに向けて SIEM に取り込んでください。 | + +すべてのリクエストには `requestId` が付与され（レスポンスヘッダー `X-Request-Id` としても返されます）、認証済みであれば `userId` も付与されます — どちらも MDC 経由でそのリクエストのすべてのログ行に現れるため（プレーンテキストモードでは `[req=...] [user=...]`、JSON モードではトップレベルのフィールド）、あるリクエストを指すサポートチケットを、タイムスタンプで grep することなくログ全体から追跡できます。 + ## 6. 本番で有効なセキュリティ機能 - Springdoc / Swagger UI: **無効** @@ -75,7 +86,7 @@ docker compose -f docker-compose.prod.yml up -d --build | 変数 | 既定値 | 有効化した場合の効果 | |---|---|---| -| `OSWL_FLYWAY_ENABLED` | `false` | `baseline-on-migrate` によるバージョン管理されたマイグレーション。先に完全なベースラインを生成すること | +| `OSWL_FLYWAY_ENABLED` | `false` | 付属の V1 と後続マイグレーションを実行。既存スキーマは事前確認 | | `OSWL_AIRGAPPED_ENABLED` | `false` | すべての脆弱性／脅威インテリジェンス参照がインポート済みのオフラインスナップショットから提供される。外向きの HTTP なし | | `OSWL_GATE_*` | [v1.0.4 の新機能](Whats-New-v1.0.4.md)を参照 | `POST /api/scan/gate` の既定閾値 | @@ -98,6 +109,8 @@ docker compose -f docker-compose.prod.yml up -d --build ### 7.1 閉域網 / オフライン スナップショット (v1.0.4) +このモードは対応する脆弱性・脅威情報フィードをスナップショットに切り替える機能であり、ネットワークファイアウォールではありません。閉域環境では VCS、SMTP、Webhook、外部 AI プロバイダーも別途設定してください。 + `OSWL_AIRGAPPED_ENABLED=true` に設定すると、脆弱性・脅威インテリジェンスの参照（OSV、deps.dev、EPSS、CISA KEV）がライブ外部 API ではなく、インポート済みのオフライン スナップショットから提供されます。エンリッチメント用の外向き HTTP は試行されません。 | 手順 | 対応 | @@ -105,7 +118,7 @@ docker compose -f docker-compose.prod.yml up -d --build | 1. バンドルの作成 | インターネットに接続されたマシンで `oswl-vdb` ビルダーを実行します。ラッパー スクリプト: `scripts/oswl-vdb/oswl-vdb.sh`（Linux/macOS）または `scripts/oswl-vdb/oswl-vdb.ps1`（Windows）。いずれも `./gradlew vdbBuild --args="..."` を呼び出します。 | | 2. バンドルの対象選定 | 対象インスタンスが実際にスキャンしているコンポーネントを `GET /api/admin/snapshot/wanted-list`（SYSTEM_ADMIN）でエクスポートし、`build --wanted wanted-list.jsonl` に渡します。ビルダーは完全なアップストリーム ミラーではなく、実際に使用するコンポーネントのみを取得します。 | | 3. バンドルのインポート | `POST /api/admin/snapshot/import?mode=replace|merge`（multipart `.zip`）。大きなバンドルでは `OSWL_AIRGAPPED_IMPORT_DIR` ホワイトリスト ディレクトリを設定したうえで、`POST /api/admin/snapshot/import-from-path` に `{"path":"bundle.zip","mode":"merge"}` を送信します。 | -| 4. モデルの配置（内蔵 AI を使用する場合） | 閉域網ホストは自動ダウンロードを無効にします。`.gguf` ファイルを `embedded-ai/` に直接配置するか、内部ミラーを運用してください（§8 参照）。 | +| 4. モデルの配置（内蔵 AI を使う場合） | オフラインホストの起動前に `embedded-ai/llama/` に実行ファイル、`embedded-ai/model/<系列>/` に検証済みモデルを配置します。内部ミラーを設定してもエアギャップモードではダウンロードできません。§8 参照。 | `oswl-vdb build` オプション（`VdbBuilderCli` 参照）: - `--sources osv,epss,kev,depsdev`（既定値はすべて）。 @@ -118,41 +131,17 @@ docker compose -f docker-compose.prod.yml up -d --build - `merge` は `(source, entry_key)` 単位で upsert し、`"_deleted":true` 行は削除として扱います。 - v2 バンドルは `meta.json` に記録されたファイル単位の SHA-256 チェックサムを検証し、不一致の場合はバンドル全体を拒否し、既存ストアは変更しません。 -定義の鮮度（E7）: `OSWL_AIRGAPPED_STALENESS_WARN_DAYS`（既定値 `7`）と `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS`（既定値 `30`）は、インポートされたスナップショットのソース別 `sourceAsOf` 日付のうち最も古い値を基準に管理 UI バッジを決定します。 +定義の鮮度: `OSWL_AIRGAPPED_STALENESS_WARN_DAYS`（既定値 `7`）と `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS`（既定値 `30`）は、インポートされたスナップショットのソース別 `sourceAsOf` 日付のうち最も古い値を基準に管理 UI バッジを決定します。 バンドルが 50MB を超える場合は、`OSWL_MULTIPART_MAX_FILE_SIZE` / `OSWL_MULTIPART_MAX_REQUEST_SIZE`（既定値はそれぞれ `50MB`）を調整する必要があるかもしれません。 -## 8. 内蔵 AI モデル（任意、オンプレミス向け） - -クラウドプロバイダーの代わりに、またはそれに加えて**内蔵 AI**（設定 → AI → ローカル）を使う予定がある場合のみ関係します。 +## 8. 内蔵AI（任意、CPU専用） -| チェック | 対応 | -|-------|--------| -| サーバーバイナリ | [llama.cpp のリリース](https://github.com/ggml-org/llama.cpp/releases)からお使いのプラットフォーム用の `llama-server(.exe)` をダウンロードし、`embedded-ai/`（またはその配下の `bin/`、あるいは `PATH` 上の任意の場所）に配置してください — これが唯一の手動手順です | -| モデル | 何もする必要はありません — 新規インストールで**開始**をクリックすると、Apache-2.0 ライセンスの Qwen3-1.7B モデルが自動でダウンロードされます（約 1.2 GB、SHA256 を検証、UI に進捗表示） | -| 閉域網（エアギャップ）ホスト | 自動ダウンロードには一度だけ外向きのインターネットアクセスが必要です。それがない場合は、開始をクリックする前に自分で入手した `.gguf` ファイルを `embedded-ai/` に配置してください | -| カスタムモデル | OsWL が同梱・自動取得するのは Qwen3-1.7B のみです。それ以外の `.gguf`（サイズやライセンスが異なるもの）を使いたい場合は、そのモデル自体のライセンスを確認したうえで自分で `embedded-ai/` に配置してください。[内蔵 AI](Embedded-AI.md)を参照 | -| ディレクトリ | 既定では JVM が起動する作業ディレクトリからの相対パス `./embedded-ai` — 別のパスにするには `OSWL_EMBEDDED_AI_DIR` を設定 | +既定は **Qwen3.5-2B Q4_K_M**、選択肢は **Gemma 4 E2B Q4_K_M**です。OsWL・PostgreSQLの同居と断続的使用で、Qwen想定最小2 vCPU / RAM 8 GB、Gemma推奨4 vCPU / RAM 16 GBを目安にします。性能保証ではなく、CPUクレジットと同時スキャンの検証が必要です。 -Gradle タスクや別のスクリプトは関与しません — ダウンロードは開始が初めてクリックされたときにアプリケーション自体の中で実行されるため、単純な `java -jar app.jar` によるデプロイでも動作します。 +実行ファイルは `embedded-ai/llama/`、重みは `model/Qwen/` と `model/Gemma/` に配置します。自動取得はQwenのみです。GPUレイヤー0、スレッド1、生成スロット1、コンテキスト8192が既定です。固定URL・ハッシュ・サイズを組として維持します。旧 `models-v1` は新モデルではありません。DockerはルートのマウントとLinuxランタイムが必要です。 -### 内蔵 AI チューニング (B1 / v1.0.4) - -既定値は本番環境で安全です。測定された理由がある場合のみ上書きしてください。 - -| 変数 | 既定値 | 用途 | -|---|---|---| -| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | 総コンテキスト サイズ（`-c`）。`--parallel` 使用時はスロット間で分割され、スロット コンテキストが 2048 を下回ると警告ログが出力されます。 | -| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | `-ngl`: `-1` はビルドがサポートする限りオフロード（`999` を渡す）、`0` は CPU のみ、正の値は明示的なレイヤー数 | -| `OSWL_EMBEDDED_AI_THREADS` | `0` | `-t`: `0` は llama.cpp の自動検出、正の値はスレッド数を固定 | -| `OSWL_EMBEDDED_AI_PARALLEL` | `4` | `--parallel N --cont-batching` を有効化；1 より大きいと同時 AI 呼び出しが直列化されません | -| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | `-fa`（flash attention）を追加 | -| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | `--cache-reuse` トークン数；`0` 以下は無効化 | -| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | （空） | `llama-server` CLI 引数を空白区切りでそのまま追加（管理者専用設定、リクエスト入力ではない） | -| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | `/health` 応答を待つ秒数。時間内に失敗すると CPU のみでの再試行、または次のモデル候補に進みます。 | -| `OSWL_EMBEDDED_DEFAULT_MODEL_URL` / `SHA256` / `SIZE_BYTES` | 上流の Hugging Face `ggml-org/Qwen3-1.7B-GGUF` | 既定 Qwen3-1.7B ダウンロード用のマッチング セット；自己ホスティング ミラーを使用する場合は 3 つすべてを上書き（バイト単位で同一の再ホストなら URL のみ変更） | -| `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | Hugging Face | 既定 URL が失敗した場合に 1 回再試行；primary と同じか空にすると再試行を無効化 | -| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | 起動時に既定モデルをバックグラウンドでプリフェッチ（ダウンロードのみで、サイドカーは起動しません）。**`OSWL_AIRGAPPED_ENABLED=true` の場合は無視されます**。 | +詳細要件・構成・チェックサム・ミラー/閉域導入・CPU調整・モデルと言語選択・再配布告知は [内蔵AI](Embedded-AI.md) を参照してください。 ## 9. データベーススキーマ（アップグレード） @@ -176,7 +165,7 @@ OsWL は `prod` で **Hibernate `ddl-auto=validate`** を使用します — ア ### Flyway（v1.0.4、オプトイン） -`OSWL_FLYWAY_ENABLED=true` を設定すると、手動実行スクリプトの代わりに Flyway がスキーマを管理します。`baseline-on-migrate` が有効なため、データが入った既存の DB も拒否されずベースライン処理されます — ただし、有効化する**前に**、現在のスキーマと一致する完全なベースラインマイグレーションを生成してください。既定の `false` のままなら何も変わりません。 +`OSWL_FLYWAY_ENABLED=true` で `src/main/resources/db/migration/` のバージョン別マイグレーションを有効にします。既定値は `false` です。リポジトリには `V1__baseline.sql` と後続のマイグレーションが含まれています。空の PostgreSQL DB では V1 から順に実行し、その後 Hibernate がスキーマを検証します。Flyway 履歴のない既存 DB では、`baseline-on-migrate` が V1 を実行せずにバージョン 1 を記録し、V2 以降を実行します。有効化前にバックアップを取得し、既存スキーマとマイグレーションを比較してください。手動適用済みの変更と後続マイグレーションが競合する場合があります。共有 DB に適用済みのファイルを再生成・変更しないでください。SQL を手動管理する場合は、対象バージョンに必要な変更をすべて順番に適用します。以下の一部の旧スクリプトだけでは新規インストール用のスキーマを構成できません。 ### v1.0.4 のカラム @@ -193,6 +182,10 @@ ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); （Flyway ユーザー: 新しい 3 つの `libraries` カラムは `V3__component_metadata.sql` でカバーされています。[データベーススキーマ](Database-Schema.md)を参照。） +### v1.0.5: Spring Session / ShedLock テーブル（オプトイン） + +**マルチインスタンス**構成に移行する場合にのみ必要です（§12 参照）。`spring_session`、`spring_session_attributes`、`shedlock` を追加します。Flyway ユーザーは `db/migration/V10__spring_session_and_shedlock.sql` から、手動スクリプトのユーザーは `db/spring_session_and_shedlock.sql` を実行してください。シングルインスタンス構成であれば完全にスキップできます — `OSWL_SESSION_STORE_TYPE=jdbc` や `OSWL_SCHEDULER_LOCK_ENABLED=true` を設定するまで、これらのテーブルは誰にも参照されません。 + ## 10. デプロイ後のスモークテスト 1. HTTPS リバースプロキシ経由でのみ UI を開く。 @@ -204,10 +197,39 @@ ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); ## 11. 運用 -- PostgreSQL をバックアップし、`OSWL_ENCRYPTION_KEY` をシークレットマネージャーに保管する（紛失すると VCS トークンが読めなくなります）。 +- PostgreSQL をバックアップし、`OSWL_ENCRYPTION_KEY` をシークレットマネージャーに保管する（紛失すると VCS トークンが読めなくなります） — 手順全体と復旧リハーサル用スクリプトは [バックアップと復旧](Backup-And-Restore.md) を参照。 - 侵害があった場合は API キーと SMTP 認証情報をローテーションする。 - `local` として実行されるべきでないイメージから `SPRING_PROFILES_ACTIVE` を除外しておく。 +## 12. マルチインスタンス配備（水平スケーリング / HA） + +OsWL は既定では**シングルインスタンス**として動作します — インメモリの HTTP セッションと、インスタンスごとの `@Scheduled` ジョブです。コンテナ／プロセスが 1 つならこれで問題ありませんが、ロードバランサーの背後に 2 つ目のインスタンスを置くと崩れます。ユーザーのセッションはログインしたインスタンスに固定され、夜間モニタリング／猶予期限切れ／ごみ箱クリーンアップの各ジョブは、クラスタ全体で 1 回ではなく**インスタンスごと**に実行されてしまいます。この節は、同じ PostgreSQL データベースに対して **2 台以上のインスタンス**を配備する場合にのみ関係します。 + +**1. まずスキーマを適用してください。** 以下の機能を有効にしたインスタンスを起動する前に、`spring_session`、`spring_session_attributes`、`shedlock` が存在することを確認してください（§9「v1.0.5: Spring Session / ShedLock テーブル」）。テーブルが存在しない状態で以下の環境変数を先に展開すると、最初のリクエスト／ジョブ実行時に全インスタンスがクラッシュします。 + +**2. 環境変数:** + +| 変数 | 目的 | +|------|------| +| `OSWL_SESSION_STORE_TYPE=jdbc` | HTTP セッションを Tomcat のインメモリ保存から PostgreSQL（`spring_session`）へ移します。ログイン状態とシングルセッション強制（`maximumSessions(1)`）が、インスタンス単位ではなくクラスタ全体で機能するようになります。 | +| `OSWL_SCHEDULER_LOCK_ENABLED=true` | 3 つのスケジュールジョブ（`ContinuousMonitoringScheduler`、`DeferExpiryScheduler`、`TrashCleanupScheduler`）を、`shedlock` テーブルを利用したクラスタ全体のロック（ShedLock）で包み、サイクルごとに 1 インスタンスだけが実行するようにします。 | + +実際にマルチインスタンス配備する場合は両方を同時に設定してください — 片方だけ有効にすると、もう片方の穴がそのまま残ります。 + +**3. ロードバランサー:** nginx や ALB など一般的な L7 LB で構いません — `OSWL_SESSION_STORE_TYPE=jdbc` を設定すればセッション状態はインスタンスのメモリではなく PostgreSQL に一元化されるため、**スティッキーセッションは不要です。** + +**4. ただしスキャン進捗のポーリングだけは例外です。** Quick Import／スキャンのエンリッチメント中に表示されるライブ進捗（`EnrichmentProgressHolder`、`ScanStatusEmitterRegistry`）は、依然としてインスタンスごとのインメモリ状態であり、DB には保存されません。推奨策: ロードバランサーのルーティングを**アクティブなスキャンが実行されている間だけ**スティッキーにする（例: セッション基準のクッキーアフィニティ）ことで、進捗ポーリングのリクエストが実際にそのスキャンを実行しているインスタンスに戻るようにしてください。スキャン進捗を DB に移し UI を純粋なポーリング方式に切り替える代替案はより大きな変更になるため別途追跡しており、現時点ではスティッキールーティングが実用的な既定策です。 + +**5. ローリングデプロイの手順:** + 1. まず未適用の DB マイグレーションを適用します（旧バージョンのアプリコードが新しいスキーマに耐えられる必要があるため — `db/migration` はこの方針に従い追加のみの変更にしています）。 + 2. インスタンスは一斉にではなく 1 台ずつ入れ替え、新しいインスタンスの readiness チェックが通るのを待ってから次に進みます。 + 3. `OSWL_SESSION_STORE_TYPE=jdbc` を設定していれば、セッションはインスタンスのメモリではなく PostgreSQL にあるため、ローリング再起動でユーザーがログアウトされることはありません。 + +**6. 動作確認:** + - インスタンス A にログインした後、LB がインスタンス B にルーティングする後続リクエストを送っても、認証状態が維持される（`/login` にリダイレクトされない）ことを確認します。 + - インスタンス A を停止しても、セッション（およびシングルセッション強制）がインスタンス B から引き続き機能することを確認します。 + - 夜間ジョブの実行後、両方のインスタンスのログを確認し、そのジョブのログ行が両方ではなく正確に 1 つのインスタンスにのみ現れることを確認します。 + --- -**ローカル開発:** `SPRING_PROFILES_ACTIVE=local`、`.env.example` を `.env` にコピー、`OSWL_ENCRYPTION_KEY` を設定、`./gradlew bootRun` を実行。H2 ファイル DB、H2 コンソール、Swagger、`GET /data/test` はこのプロファイルでのみ利用可能です。 +**ローカル開発:** `./gradlew bootRun`（PowerShell: `.\gradlew.bat bootRun`）で `local` プロファイルと H2 を使用します。ローカル YAML には開発専用の暗号化キーがあります。必要に応じてプロセスの環境変数で変更してください。`.env` は起動ツールが明示的に読み込む場合のみ適用されます。 diff --git a/docs/ja/Scan-Api-Security.md b/docs/ja/Scan-Api-Security.md index 66dd7843..c253d702 100644 --- a/docs/ja/Scan-Api-Security.md +++ b/docs/ja/Scan-Api-Security.md @@ -30,7 +30,7 @@ |------|------------------| | 1 | `Authorization: Bearer …` の**プロジェクト API キー** | | 2 | JSON 本文内の**提出者**のメールアドレスとパスワード | -| 3 | 提出者が **`SCAN_SUBMIT`**（ロールテンプレートの権限）を持ち、そのプロジェクトの **`project_members`** に登録されていること | +| 3 | 送信者が **`SCAN_SUBMIT`** 権限を持ち、プロジェクトへの直接所属またはチームの権限付与によりアクセスできることを確認します。システム管理者には権限・アクセス検査の例外が適用されます。 | ロールテンプレートとプロジェクトメンバーシップの違いについては[権限レイヤー](Authorization-Layers.md)を参照してください。 diff --git a/docs/ja/Security-Center.md b/docs/ja/Security-Center.md index e5d1734a..e43e9f86 100644 --- a/docs/ja/Security-Center.md +++ b/docs/ja/Security-Center.md @@ -89,7 +89,7 @@ OsWL は標準的な CVSS 3.x の範囲を使って CVSS ベーススコアを | SBOM（CycloneDX） | `GET /api/projects/{projectId}/sbom` | CycloneDX 1.6 JSON | | VEX | `GET /api/projects/{projectId}/vex` | CycloneDX VEX — トリアージ判断を反映 | | SARIF | `GET /api/projects/{projectId}/sarif` | SARIF 2.1.0、GitHub コードスキャンにアップロード可能 | -| コンプライアンスレポート | `GET /security-center/compliance-report` | 印刷用 HTML（*印刷 → PDF として保存*を使用） | +| コンプライアンスレポート | `GET /projects/{projectId}/security-center/compliance-report` | 印刷用 HTML（*印刷 → PDF として保存*を使用） | | CVE／ライセンス CSV | — | 現在フィルタリングされているビュー | 一括操作には**アップグレード PR を作成**も含まれます。選択したすべてのコンポーネントを修正バージョンに引き上げる単一のプルリクエストを作成します。 diff --git a/docs/ja/User-Guide.md b/docs/ja/User-Guide.md index 7585eb66..afee624b 100644 --- a/docs/ja/User-Guide.md +++ b/docs/ja/User-Guide.md @@ -1,5 +1,7 @@ # ユーザーガイド +[1.0.5.1 の変更点](Whats-New-v1.0.5.1.md) + このページでは OsWL Web ダッシュボードの日常的な使い方を説明します。 表示されるのは自分が**メンバー**であるプロジェクトのみです（**システム管理者**を除く）。プロジェクト内でできることは **ロールテンプレート**（Admin / Developer / Viewer）によって決まります。[権限レイヤー](Authorization-Layers.md)を参照してください。 @@ -96,7 +98,7 @@ OsWL は入力のコンテキストハッシュを使って AI 要約をキャ ## 内蔵 AI モデル -OsWL の内蔵ローカル AI は llama.cpp サイドカーを実行し、既定モデルとして **Qwen3 1.7B** GGUF を使用します。初回起動時、OsWL は既定モデルをバックグラウンドで先読みダウンロードするため（`oswl.ai.embedded.auto-download-on-boot` で設定変更可能、閉域網（エアギャップ）モードでは無効）、設定画面で内蔵 AI を有効化する際の待ち時間が短縮されます。既定のダウンロードは OsWL 自身の GitHub Release アセットを使用し、失敗した場合は元の Hugging Face リポジトリへフォールバックします。すべてのダウンロードは SHA-256 チェックサムで検証されます。設定した embedded-ai ディレクトリに、互換性のある任意の `.gguf` ファイルを直接配置することもできます。インストールとトラブルシューティングについては [Embedded AI](Embedded-AI.md) を参照してください。 +内蔵 AI は別途インストールした llama.cpp を使用し、既定のダウンロードモデルは **Qwen3.5-2B Q4_K_M** です。**Gemma 4 E2B** は任意で手動インストールします。実行ファイルは `embedded-ai/llama/`、モデルは `embedded-ai/model/<系列>/` に配置します。起動時の事前取得はダウンロードのみで、サーバーの起動や LOCAL の有効化は行いません。既定の取得先は Hugging Face の固定リビジョンで、SHA-256 とサイズを検証します。既定の代替ミラーはなく、エアギャップモードではダウンロードしません。モデルを変更する場合は設定で停止し、モデルを選択・保存してから再度開始します。最新の要件と設定は[内蔵 AI](Embedded-AI.md)を参照してください。 --- diff --git a/docs/ja/Whats-New-v1.0.4.md b/docs/ja/Whats-New-v1.0.4.md index 7ecd7d5d..42ad55d5 100644 --- a/docs/ja/Whats-New-v1.0.4.md +++ b/docs/ja/Whats-New-v1.0.4.md @@ -64,7 +64,7 @@ VEX は検出結果そのものではなく、**トリアージの判断**を伝 ### コンプライアンスレポートパック -`GET /security-center/compliance-report` は印刷用レポートを描画します。コンポーネント一覧、ライセンス義務、NOTICE 文、深刻度別の未対応項目が含まれます。ブラウザの *印刷 → PDF として保存* を使ってください。プレビュー表示時に印刷ダイアログが自動で開かないため、出力前に内容を確認できます。 +`GET /projects/{projectId}/security-center/compliance-report` は印刷用レポートを描画します。コンポーネント一覧、ライセンス義務、NOTICE 文、深刻度別の未対応項目が含まれます。ブラウザの *印刷 → PDF として保存* を使ってください。プレビュー表示時に印刷ダイアログが自動で開かないため、出力前に内容を確認できます。 --- @@ -88,7 +88,7 @@ VEX は検出結果そのものではなく、**トリアージの判断**を伝 リクエストに GitHub の対象を指定すると、判定結果が **Check Run** と PR コメントとしても投稿されます。 -リクエスト形式の詳細とパイプライン例は [CLI 連携](../CLI-Integration.md) を参照してください。 +リクエスト形式の詳細とパイプライン例は [CLI 連携](CLI-Integration.md) を参照してください。 --- @@ -154,7 +154,7 @@ VEX は検出結果そのものではなく、**トリアージの判断**を伝 | バンドルの書き出し | `GET /api/admin/snapshot/export` | | バンドルの状態 | `GET /api/admin/snapshot` | -インターネットに接続された端末で書き出し、バンドルを持ち込んで取り込みます。スナップショットに無いコンポーネントは「脆弱性なし」ではなく**データなし**として扱われます。[組み込み AI](../Embedded-AI.md) サイドカーと組み合わせれば、ネットワークを切断した状態でもスキャン・トリアージ・AI 分析まで動作します。 +インターネットに接続された端末で書き出し、バンドルを持ち込んで取り込みます。スナップショットに無いコンポーネントは「脆弱性なし」ではなく**データなし**として扱われます。[組み込み AI](Embedded-AI.md) サイドカーと組み合わせれば、ネットワークを切断した状態でもスキャン・トリアージ・AI 分析まで動作します。 --- @@ -164,7 +164,7 @@ VEX は検出結果そのものではなく、**トリアージの判断**を伝 |---|---| | **Prometheus メトリクス** | `/actuator/prometheus` — micrometer で公開、管理者権限が必要 | | **ヘルス／情報** | `/actuator/health`、`/actuator/info` | -| **Flyway マイグレーション** | `OSWL_FLYWAY_ENABLED=true` でオプトイン（`baseline-on-migrate`）。既定は `ddl-auto` のまま — [DB スキーマ](../Database-Schema.md) 参照 | +| **Flyway マイグレーション** | `OSWL_FLYWAY_ENABLED=true` でオプトイン（`baseline-on-migrate`）。既定は `ddl-auto` のまま — [DB スキーマ](Database-Schema.md) 参照 | | **OIDC シングルサインオン** | `application-prod.yaml` の `spring.security.oauth2.client` ブロックのコメントを解除し、`OSWL_OIDC_CLIENT_ID` / `OSWL_OIDC_CLIENT_SECRET` / `OSWL_OIDC_ISSUER_URI` を設定（Okta、Entra ID など任意の OIDC プロバイダー）。プロバイダーが登録されている場合のみログイン画面に SSO ボタンが表示されます。 | | **監査ログの SIEM エクスポート** | `GET /api/admin/audit-logs/export?format=jsonl\|cef` — 既存の監査ログフィルターをそのまま使用し、`AUDIT_LOG_EXPORT` 権限が必要です。エクスポート自体も監査記録されます。 | diff --git a/docs/ja/Whats-New-v1.0.5.1.md b/docs/ja/Whats-New-v1.0.5.1.md new file mode 100644 index 00000000..1b9f3998 --- /dev/null +++ b/docs/ja/Whats-New-v1.0.5.1.md @@ -0,0 +1,24 @@ +# OsWL 1.0.5.1 の変更点 + +依存関係の情報、スキャンの安定性、ライトモードの画面を改善しました。 + +## 主な変更 + +- ログイン・検索・設定はライトモードを使用します。未保存の変更とエラーを区別し、AIの入力エラーを該当欄の下に表示します。保存完了の表示は保存ボタンの横に残ります。 +- 応答の多様性は0〜2（既定値0.15）、最大トークン数は256〜8192の整数（既定値1200）です。空欄では既定値を使います。プロバイダーや分析処理ごとの制限が優先される場合があります。Anthropicにはtemperature設定を適用しません。 +- 削除したプロジェクトをごみ箱で確認し、保持期間内に復元できます。設定からCLI APIキーを削除できます。削除したキーは使用できなくなります。 +- CVEの横からNVDを開けます。対応する数値バージョンの区間から修正バージョンを選択し、Mavenの親POMのプロパティと対応するGradleバージョン制約を解決します。 +- 診断で失敗・要確認・対象外を区別し、ディスク容量を読みやすく表示します。アーカイブ対象がなければ理由を表示し、対象があればJSONをダウンロードします。 +- キャッシュの「常に更新」はスキャンでデータを要求するときに適用します。バックグラウンドで継続的に更新する設定ではありません。 + +## アップグレード + +Java 25が必要です。データベースと永続ファイルを先にバックアップし、[デプロイチェックリスト](Production-Deployment-Checklist.md)と[バックアップ・復元](Backup-And-Restore.md)を確認してください。マイグレーションを使用するDBにはV35まで適用してください。JARの置換だけでDBも更新されたとは限りません。 + +該当するGitHub Releaseから`oswl-1.0.5.1.jar`と`SHA256SUMS`を取得してください。構成は[はじめに](Getting-Started.md)を参照してください。ブラウザー通知にはWeb Push/VAPIDの設定とブラウザーの許可が必要です。外部AI・SMTP・VCS連携にもそれぞれ設定が必要です。 + +## 精度と制限 + +アップグレードだけでは保存済みスキャンを書き換えません。パーサーと情報補完の修正を適用するには再スキャンしてください。宣言された依存関係とビルドで選択される依存関係は異なる場合があります。未解決のバージョンは確認が必要です。ライセンスや修正バージョンの情報がないことは、安全性やパッチが存在しないことの証明ではありません。複雑なバージョン範囲、生態系ごとの比較、オンライン・オフラインの結果の一致は、このリリースですべて解決したわけではありません。 + +[分析範囲の説明（英語）](../en/Analysis-Coverage.md)も参照してください。 diff --git a/docs/ko/API-Reference.md b/docs/ko/API-Reference.md index b105331d..da4bb858 100644 --- a/docs/ko/API-Reference.md +++ b/docs/ko/API-Reference.md @@ -1,6 +1,6 @@ # API 레퍼런스 -이 페이지는 OsWL이 노출하는 모든 REST 엔드포인트를 요약합니다. 인터랙티브 스키마는 **`local` 프로파일**의 Swagger UI(`http://localhost:8080/swagger-ui.html`)에서 확인합니다. **`prod`에서는 Swagger가 꺼져 있습니다.** +이 페이지는 OsWL이 노출하는 모든 REST 엔드포인트를 요약합니다. 인터랙티브 스키마는 **`local` 프로필**의 Swagger UI(`http://localhost:8080/swagger-ui.html`)에서 확인합니다. **`prod`에서는 Swagger가 꺼져 있습니다.** OpenAPI 스펙 (JSON): `http://:8080/v3/api-docs` @@ -86,7 +86,7 @@ Authorization: Bearer oswl_ | 메서드 | 경로 | 설명 | |---|---|---| | `POST` | `/api/github/connect` | GitHub PAT 연결 | -| `DELETE` | `/api/github/disconnect` | GitHub 연결 제거 | +| `POST` | `/api/github/disconnect` | GitHub 연결 제거 | | `GET` | `/api/github/status` | 연결 상태 | | `GET` | `/api/github/accounts` | 인증된 계정 목록 | | `GET` | `/api/github/repos` | 접근 가능한 저장소 목록 | @@ -101,7 +101,6 @@ Authorization: Bearer oswl_ | 메서드 | 경로 | 인증 | 설명 | |---|---|---|---| -| `POST` | `/api/auth` | API 키 | API 키 검증 (레거시) | | `GET` | `/api/scan/ping` | API 키 | 연결 및 키 유효성 확인 | | `GET` | `/api/scan/manifest-rules` | API 키 | manifest 수집 규칙 (`/scripts/manifest-rules.json`과 동일) | | `POST` | `/api/scan/parse` | API 키 | manifest zip 파싱 (CLI 1단계) | @@ -119,7 +118,7 @@ Authorization: Bearer oswl_ | `PATCH` | `/projects/{id}/security-center/bulk-status` | `SECURITY_CENTER_UPDATE_STATUS` | CVE 상태 일괄 업데이트 | | `GET` | `/projects/{id}/security-center/export` | `SECURITY_CENTER_EXPORT` | CVE 목록 CSV 다운로드 (`?scanId=`, `?format=csv`) | | `POST` | `/projects/{id}/security-center/batch-pr` | `SECURITY_CENTER_UPDATE_STATUS` | **v1.0.4** — 선택 컴포넌트 일괄 업그레이드 PR 생성 | -| `GET` | `/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — 인쇄용 컴플라이언스 리포트 | +| `GET` | `/projects/{projectId}/security-center/compliance-report` | `SECURITY_CENTER_EXPORT` | **v1.0.4** — 인쇄용 컴플라이언스 리포트 | ### SBOM / VEX / SARIF (v1.0.4) @@ -251,8 +250,8 @@ Authorization: Bearer oswl_ | 메서드 | 경로 | 설명 | |---|---|---| -| `GET` | `/api/admin/cli-keys` | 전역 CLI 키 목록 | -| `POST` | `/api/admin/cli-keys` | 전역 키 생성 | +| `GET` | `/api/admin/cli-keys` | 프로젝트별 CLI 키 통합 조회 | +| `POST` | `/api/admin/cli-keys` | 프로젝트별 키 발급 (`projectId` 필수) | | `PATCH` | `/api/admin/cli-keys/{keyId}/toggle` | 키 활성화/비활성화 | --- @@ -281,7 +280,7 @@ Authorization: Bearer oswl_ | `GET` | `/api/settings/ai/usage` | `SETTINGS_AI_MANAGE` | AI 사용량 통계 — 오늘 호출 수/토큰/예상 비용, 일일 상한, 최근 7일 집계(일별 집계 테이블에서 조회) | | `GET` | `/api/settings/ai/usage/events` | `SETTINGS_AI_MANAGE` | 최근 AI 호출 이벤트, 최신순 (`?page=`, `?size=`, 기본 크기 `10`). 최근 **100건**만 보존되며(FIFO), 최대 10페이지까지 존재 | | `GET` | `/api/settings/ai/embedded` | `SETTINGS_AI_MANAGE` | 내장 AI 상태 (`running`, `external`, `binaryFound`, `activeModel`, `fallbackUsed`, `lastError`, `availableModels`, `modelsDir`, `baseUrl`, 기본 모델 다운로드 진행 중이면 `downloading`, `downloadedBytes`, `downloadTotalBytes`도 포함) | -| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | llama.cpp 사이드카 시작 (모델 파일명 선택 지정; 후보 자동 폴백, 실패 시 400과 사유). `.gguf`가 하나도 없는 신규 설치에서는 대신 Apache 2.0 Qwen3-1.7B 모델을 백그라운드로 다운로드하고 즉시 응답(`downloading: true`) — 진행률은 `GET .../embedded`로 폴링 | +| `POST` | `/api/settings/ai/embedded/start?model=` | `SETTINGS_AI_MANAGE` | llama.cpp 사이드카 시작 (모델 파일명 선택 지정; 후보 자동 폴백, 실패 시 400과 사유). `.gguf`가 하나도 없는 신규 설치에서는 대신 Apache 2.0 Qwen3.5-2B Q4_K_M 모델을 백그라운드로 다운로드하고 즉시 응답(`downloading: true`) — 진행률은 `GET .../embedded`로 폴링 | | `POST` | `/api/settings/ai/embedded/stop` | `SETTINGS_AI_MANAGE` | 사이드카 중지 및 LOCAL 프로바이더 비활성화 | | `PUT` | `/api/settings/ai/embedded/config` | `SETTINGS_AI_MANAGE` | 폴더/모델 오버라이드 저장 `{ "dir", "model" }` (null은 유지, 공백은 해제; dir이 없으면 400) | @@ -324,7 +323,7 @@ Authorization: Bearer oswl_ --- -## 로컬/테스트 (local 프로파일 전용) +## 로컬/테스트 (local 프로필 전용) | 메서드 | 경로 | 설명 | |---|---|---| diff --git a/docs/ko/Administration.md b/docs/ko/Administration.md index efe6d0b2..e011704b 100644 --- a/docs/ko/Administration.md +++ b/docs/ko/Administration.md @@ -1,5 +1,7 @@ # 관리 +[1.0.5.1 변경 사항](Whats-New-v1.0.5.1.md) + 이 페이지는 모든 관리자 전용 기능을 다룹니다: 사용자 관리, 역할 템플릿, 감사 로그, 보안 설정, SMTP 구성. > 별도로 명시되지 않는 한 이 페이지의 모든 작업에는 **시스템 관리자** 권한이 필요합니다. @@ -219,6 +221,24 @@ v1.0.4의 작업 코드는 필터 UI에서 **모니터링**(`MONITOR.*`), **연 세 엔드포인트 모두 관리자 권한이 필요합니다. Prometheus 스크랩 설정은 `application-prod.yaml`의 `management` 블록에 있습니다. +### 비즈니스 메트릭 & Grafana + +기본 JVM/HTTP 미터 외에도 OsWL은 다음 비즈니스 메트릭을 기록합니다 (모두 `/actuator/prometheus`로 노출되며, Prometheus 이름 기준 — 점(.)은 밑줄(_)로 변환됩니다): + +| 메트릭 | 타입 | 태그 | 설명 | +|---|---|---|---| +| `oswl_scan_duration_seconds` | Timer | `outcome` (`completed`\|`failed`) | 스캔 파이프라인 전체 소요 시간 | +| `oswl_quickimport_queue_depth` | Gauge | — | 워커 슬롯을 기다리는 Quick Import 작업 수 | +| `oswl_quickimport_running` | Gauge | — | 현재 실행 중인 Quick Import 작업 수 | +| `oswl_components_ingested_total` | Counter | `ecosystem` | 스캔 인제스트로 저장된 컴포넌트 수 | +| `oswl_ai_calls_total` | Counter | `provider` | 기록된 AI 호출 수 | +| `oswl_ai_tokens_total` | Counter | `provider`, `direction` (`in`\|`out`) | AI 프롬프트/완성 토큰 수 | +| `oswl_ai_cost_usd_total` | Counter | `provider` | 추정 AI 비용 (USD) | +| `oswl_gate_evaluations_total` | Counter | `outcome` (`pass`\|`fail`) | 시큐리티 게이트 평가 수 | +| `oswl_external_api_calls_total` | Counter | `source` (`depsdev`, `osv`, `epss`, `kev`, `github-advisory`, `nvd`), `outcome` (`success`\|`failure`\|`ratelimited`) | 외부 데이터 소스 호출 수 | + +이 메트릭들을 다루는 Grafana 대시보드가 [`deploy/observability/grafana/oswl-dashboard.json`](../../deploy/observability/grafana/oswl-dashboard.json)에 포함되어 있습니다. **Dashboards → New → Import**로 임포트하면 Prometheus 데이터소스를 선택하라는 prompt가 표시되므로 JSON을 직접 수정할 필요가 없습니다. + --- ## 오프라인 스냅샷 번들 (v1.0.4) @@ -294,7 +314,7 @@ CVE/라이선스 요약에 사용할 LLM 제공업체와 보강 동작을 구성 각 프로바이더의 모델 입력란은 자유 입력 콤보박스입니다: 드롭다운에는 현재 모델이 제안으로 표시되지만, 계정에서 접근 가능한 어떤 모델 ID든 직접 입력할 수 있습니다. -같은 탭의 **내장 AI (기본 제공 로컬 모델)** 카드는 함께 제공되는 llama.cpp `llama-server`를 사이드카로 실행(CPU 전용, localhost 전용, API 키 불필요)하여 LOCAL 프로바이더로 등록합니다. 기본으로 번들되는 모델은 **Qwen3 1.7B**(최초 사용 시 다운로드)이며, 카드에서 **모델 드롭다운**(폴더 안의 모든 `.gguf` 또는 자동 순서), **폴더 변경 + 저장**(DB에 유지되며, 실행 중 변경 시 사이드카가 중지됨), 첫 번째 모델 시작 실패 시 다음 모델로 넘어가는 **자동 폴백**을 사용할 수 있습니다. [내장 AI](Embedded-AI.md) 참고. +내장 AI는 별도로 설치한 llama.cpp 실행 파일을 사용하며, 기본 다운로드 모델은 **Qwen3.5-2B Q4_K_M**입니다. **Gemma 4 E2B**는 선택적으로 직접 설치합니다. 실행 파일은 `embedded-ai/llama/`, 모델은 `embedded-ai/model/<계열>/`에 둡니다. 부팅 시 미리 받기는 다운로드만 수행하며 서버 실행이나 LOCAL 활성화는 하지 않습니다. 기본 다운로드는 Hugging Face의 고정 리비전을 사용하고 SHA-256 및 크기를 검증합니다. 기본 대체 미러는 없으며, 에어갭 모드에서는 다운로드하지 않습니다. 모델을 바꾸려면 설정에서 중지한 뒤 모델을 선택·저장하고 다시 시작하세요. 최신 요구 사항과 설정은 [내장 AI](Embedded-AI.md)를 참고하세요. 활성 제공업체는 **하나**만 둘 수 있습니다. 탭에서 추가로 설정할 수 있는 항목: @@ -353,3 +373,49 @@ AI 카드는 오늘의 호출 수, 토큰 합계, 예상 비용을 보여주고( 변경 사항은 `CACHE.UPDATE_TTL`, `CACHE.CLEAR`로 감사 로그에 기록됩니다. + +--- + +## SAML 2.0 SSO 및 SCIM 2.0 프로비저닝 + +OsWL은 Okta, Entra ID, 온프레미스 AD FS를 사용하는 기업용 SAML 2.0 단일 로그인을 지원합니다. SAML IdP가 설정되면 `/login`에 **SSO로 로그인** 옵션이 표시됩니다. + +### SAML 설정 + +1. SP 서명 키 쌍을 생성합니다(선택 사항이지만 권장): + ```bash + openssl req -x509 -newkey rsa:2048 -keyout oswl-saml-sp.key -out oswl-saml-sp.crt -nodes -days 3650 -subj "/CN=oswl" + ``` +2. `application-prod.yaml`의 SAML 블록의 주석을 해제하고 환경 변수를 설정합니다: + | 환경 변수 | 용도 | + |---|---| + | `OSWL_SAML_IDP_METADATA_URL` | IdP 메타데이터 URL(예: Okta/Entra 앱 메타데이터) | + | `OSWL_SAML_IDP_CERTIFICATE` | IdP 서명 인증서 파일 경로 | + | `OSWL_SAML_SP_PRIVATE_KEY` | SP 개인 키 파일 경로 | + | `OSWL_SAML_SP_CERTIFICATE` | SP 인증서 파일 경로 | +3. IdP에 SP 메타데이터를 등록합니다. 메타데이터 엔드포인트는 다음과 같습니다: + ``` + https:///saml2/service-provider-metadata/oswl + ``` +4. IdP가 email 클레임(NameID 또는 `email`/`mail` 속성)을 전송하는지 확인합니다. + +> SAML 로그인은 IdP가 이미 사용자를 인증했으므로 이메일 OTP 단계를 건너뜁니다. 기존 OsWL 계정과 일치하지 않는 이메일은 SCIM이 활성화하고 역할을 할당할 수 있도록 비활성화된 로컬 계정으로 자동 생성됩니다. + +### SCIM 2.0 프로비저닝 + +SCIM을 사용하면 IdP의 사용자 생명주기를 OsWL과 동기화할 수 있습니다. + +| 리소스 | 엔드포인트 | 참고 | +|---|---|---| +| Users | `/scim/v2/Users` | GET/POST/PUT/PATCH/DELETE | +| Groups | `/scim/v2/Groups` | GET/POST/PUT/PATCH/DELETE | + +**인증:** 모든 SCIM 요청에 `Authorization: Bearer `을 포함해야 합니다. 전용 SCIM 토큰은 `ApiKeyService#issueScimToken`을 통해 프로그래밍 방식으로 발급합니다. SCIM 토큰은 `api_keys` 테이블에 저장되지만 범위가 `SCIM`이며, 일반 CLI 스캔 API에서는 거부됩니다. + +**그룹 매핑:** `oswl.scim.group-mapping`(환경 변수: `OSWL_SCIM_GROUP_MAPPING`)으로 SCIM 그룹의 표현 방식을 선택합니다: +- `TEAM`(기본값) — 각 SCIM 그룹은 Team이 되고, 멤버는 TeamMember 행이 됩니다. +- `ROLE_TEMPLATE` — 각 SCIM 그룹은 RoleTemplate이 되고, 멤버는 해당 역할 템플릿이 할당됩니다. + +**사용자 비활성화:** `DELETE /scim/v2/Users/{id}`는 OsWL에서 `active=false`로 설정합니다. SCIM을 통해 사용자를 물리적으로 삭제하지는 않으므로 감사 귀속 정보가 보존됩니다. + +**감사 액션:** SCIM 작업은 `SCIM.USER_CREATE`, `SCIM.USER_UPDATE`, `SCIM.USER_DEACTIVATE`, `SCIM.GROUP_CREATE`, `SCIM.GROUP_UPDATE`, `SCIM.GROUP_DELETE`, `SCIM.GROUP_MEMBER_ADD`, `SCIM.GROUP_MEMBER_REMOVE`, `SCIM.AUTH_FAILURE`, `SCIM_KEY.CREATE`로 기록됩니다. SAML 로그인 이벤트는 `SAML.LOGIN_SUCCESS` 및 `SAML.LOGIN_FAILURE`로 기록됩니다. diff --git a/docs/ko/Backup-And-Restore.md b/docs/ko/Backup-And-Restore.md new file mode 100644 index 00000000..e1c056eb --- /dev/null +++ b/docs/ko/Backup-And-Restore.md @@ -0,0 +1,69 @@ +# 백업 및 복구 + +실무에서 가장 흔한 사고는 PostgreSQL 손실이 아니라 **DB 백업은 멀쩡한데 `OSWL_ENCRYPTION_KEY`만 잃어버리는 경우**입니다. DB에 저장된 모든 VCS 접근 토큰, AI 공급자 API 키, Jira API 토큰, SMTP 메일 비밀번호는 이 키로 암호화되어 있습니다. 키를 잃으면 DB는 완벽히 복원되지만 그 안의 시크릿은 전부 영구적으로 복호화할 수 없게 됩니다 — 모든 VCS 연결, AI 공급자, Jira 연동을 처음부터 다시 설정해야 합니다. + +이 문서는 [운영 배포](Production-Deployment-Checklist.md)의 운영자용 짝입니다 — 배포 방법은 그쪽을 먼저 읽고, 이 문서는 백업과 "복구가 실제로 되는지" 검증하는 것에만 집중합니다. + +--- + +## 백업 대상 + +| 항목 | 위치 | 중요한 이유 | +|---|---|---| +| PostgreSQL 데이터베이스 | `deploy/docker/compose.prod.yml`의 `db-data-prod` 볼륨, 또는 관리형 PostgreSQL 인스턴스 | 프로젝트·스캔·발견 사항·사용자·암호화된 시크릿 등 모든 애플리케이션 데이터. | +| `OSWL_ENCRYPTION_KEY` | 주입 방식에 따라 다름(`.env.prod`, 시크릿 매니저 등) | DB에 저장된 모든 VCS 토큰/AI API 키/Jira 토큰/SMTP 비밀번호를 복호화합니다. **이게 없으면 위 DB 백업은 이런 시크릿이 필요한 용도로는 쓸모없습니다.** | +| 오프라인 스냅샷 저장소 | `OSWL_AIRGAPPED_IMPORT_DIR` (폐쇄망 모드 사용 시) | 복구 후 재임포트는 이것 없이도 가능하지만, 임포트 이력이 사라져 번들을 다시 받고 검증해야 합니다. | +| 임베디드 AI 모델 디렉터리 | `OSWL_EMBEDDED_AI_DIR` (기본값 `embedded-ai/`) | 재다운로드 가능([내장 AI](Embedded-AI.md) 참고) — 폐쇄망이라 재다운로드가 안 될 때만 백업하세요. | +| 설정 파일 | `.env.prod`, `deploy/docker/compose.prod.yml`, `application-prod.yaml` 오버라이드 | 이게 없으면 데이터는 멀쩡해도 인스턴스가 실제로 어떻게 설정되어 있었는지(SMTP 호스트, HSTS 설정, 기능 플래그 등) 알 수 없습니다. | + +그 외(`OSWL_LOG_DIR`의 파일 로그, Quick Import 클론 임시 디렉터리)는 소모성이므로 백업하지 마세요. + +--- + +## PostgreSQL 백업 + +```bash +# 스키마 + 데이터, 커스텀 포맷(병렬 복원 지원, plain SQL보다 작음) +pg_dump -Fc -h -U -d -f oswl-$(date +%Y%m%d).dump +``` + +**권장 주기:** 매일 밤 전체 덤프, 30일 보관, 덤프 사이 시점 복구가 필요하면 PostgreSQL WAL 아카이빙도 함께. 덤프는 DB 호스트와 독립된 곳(오브젝트 스토리지, 다른 가용 영역)에 보관하세요 — 백업이 백업 대상 바로 옆에 있으면 그 대상을 앗아가는 사고에서 같이 사라집니다. + +`OSWL_ENCRYPTION_KEY`는 **`pg_dump` 결과물과 별도의** 시크릿 매니저에 백업하세요 — 이 시크릿들을 저장 시 암호화하는 이유 자체가, 같은 백업 덩어리에 키와 암호문을 같이 두면 무의미해집니다. + +--- + +## 복구 절차 + +1. **새 PostgreSQL 인스턴스를 준비**(또는 대상을 비우고) 덤프를 복원합니다: + ```bash + pg_restore -h -U -d --clean --if-exists oswl-20260730.dump + ``` +2. **백업 당시와 동일한 `OSWL_ENCRYPTION_KEY`를 주입**합니다 — 다른 키(심지어 유효해 보이는 새로 생성한 키라도)를 쓰면 저장된 모든 시크릿이 복호화 불가능해지며, 데이터 손상과 구분되지 않습니다. +3. **복원된 DB를 대상으로 앱을 기동**합니다(`SPRING_PROFILES_ACTIVE=prod`, `ddl-auto: validate` — 복원된 스키마가 실행 버전과 이미 일치해야 합니다. 백업 시점보다 최신 버전으로 복구한다면 기동 전에 `src/main/resources/db/`의 미적용 수동 마이그레이션 스크립트를 먼저 적용하세요). +4. **아래 검증 스크립트를 실행**해 복구가 "프로세스가 떴다" 수준을 넘어 실제로 쓸 수 있는지 확인합니다. + +```bash +OSWL_VERIFY_EMAIL=you@example.com \ +OSWL_VERIFY_PASSWORD='...' \ +OSWL_VERIFY_PROJECT_ID=1 \ +./scripts/ops/verify-restore.sh https://your-instance.example.com +``` + +이 스크립트는 대화형입니다(실제 로그인과 동일하게 이메일 OTP 코드 입력을 기다립니다) 아래를 확인합니다: + +| 확인 항목 | 무엇을 증명하는가 | +|---|---| +| `GET /actuator/health` → 200 | 복원된 DB와 주입된 키로 앱이 정상 기동했습니다. | +| 로그인 + OTP | 복원된 `users` 테이블에 대해 인증·세션 인프라가 동작합니다. | +| `GET /api/settings/vcs` → 200 | **`OSWL_ENCRYPTION_KEY`가 올바릅니다** — 저장된 VCS 토큰 최소 1건이 오류 없이 복호화되었습니다. 키가 틀리면 여기서 즉시 500으로 드러나며, 몇 주 뒤에야 발견되는 은근한 버그가 되지 않습니다. | +| `GET /projects/{id}/scan-history` → 200 | 스캔 이력이 복원되어 조회 가능합니다(복원된 데이터에 실제 존재하는 프로젝트 ID를 `OSWL_VERIFY_PROJECT_ID`로 설정해야 함). | +| `GET /api/admin/audit-logs` → 200 | 감사 로그가 복원되어 조회 가능합니다(`SYSTEM_ADMIN` 계정 필요). | + +이 스크립트는 실제 정기 **리허설**로 실행하세요(예: 분기별로 임시 환경에서) — 작성된 이후 한 번도 실행해 본 적 없는 복구 절차는 검증된 절차가 아닙니다. + +--- + +## 키 교체(rotation) + +현재 **재암호화 배치 작업은 없습니다.** 오늘 `OSWL_ENCRYPTION_KEY`를 교체하면 기존에 암호화된 모든 값(VCS 토큰, AI API 키, Jira 토큰, SMTP 비밀번호)이 복호화 불가능해집니다 — 실무적인 교체 절차는: 키를 교체한 뒤, 각 설정 화면(VCS 연결, AI 공급자 키, Jira 연동, SMTP 자격 증명)에서 시크릿을 다시 입력해 새 키로 재암호화되도록 하는 것입니다. 제대로 된 교체 도구(구 키로 복호화 → 신 키로 재암호화, 영향받는 모든 테이블에 대해 in-place로)는 별도 백로그 항목으로 추적 중입니다 — 이 도구가 나오기 전까지는 `OSWL_ENCRYPTION_KEY`를 사실상 한 번 정하면 영구적인 값으로 취급하고, 그에 맞게 보호하세요(시크릿 매니저에, 저장소의 `.env` 파일이 아니라). diff --git a/docs/ko/CLI-Integration.md b/docs/ko/CLI-Integration.md index 3ab161f2..52169e63 100644 --- a/docs/ko/CLI-Integration.md +++ b/docs/ko/CLI-Integration.md @@ -89,6 +89,8 @@ ScanIngestService → CVE·라이선스 비동기 보강 (OSV / deps.dev) --- +매니페스트 압축 파일의 수집 범위는 `/scripts/manifest-rules.json`을 따릅니다. 의존성 매니페스트 외에 빌드 설정, 래퍼 파일, `buildSrc`의 Java/Kotlin 파일도 포함될 수 있으므로 전송 전에 수집 규칙을 확인하세요. + ## 사전 요구사항 1. OsWL에 등록된 **프로젝트** @@ -108,12 +110,12 @@ ScanIngestService → CVE·라이선스 비동기 보강 (OSV / deps.dev) | `POST` | `/api/scan` | API key + 비밀번호 | 스캔 제출·보강 | | `GET` | `/api/scan/{scanId}/status` | 세션 | 스캔 상태 폴링 (UI) | | `POST` | `/api/scan/gate` | API 키 | **v1.0.4** — PR / CI 보안 게이트, `exitCode`가 담긴 판정 반환 | -| `GET` | `/api/projects/{projectId}/sbom` | 세션 / 키 | **v1.0.4** — CycloneDX 1.6 SBOM | -| `GET` | `/api/projects/{projectId}/vex` | 세션 / 키 | **v1.0.4** — CycloneDX VEX | -| `GET` | `/api/projects/{projectId}/sarif` | 세션 / 키 | **v1.0.4** — SARIF 2.1.0 | +| `GET` | `/api/projects/{projectId}/sbom` | 세션 | **v1.0.4** — CycloneDX 1.6 SBOM | +| `GET` | `/api/projects/{projectId}/vex` | 세션 | **v1.0.4** — CycloneDX VEX | +| `GET` | `/api/projects/{projectId}/sarif` | 세션 | **v1.0.4** — SARIF 2.1.0 | | `POST` | `/api/sbom/import` | 세션 | **v1.0.4** — 외부 CycloneDX 파일 가져오기 | -> CLI 엔드포인트는 `Authorization: Bearer` 헤더만으로 인증하며, 세션 쿠키나 CSRF 토큰은 필요 없습니다. `POST /api/scan`, `POST /api/scan/parse`, `GET /api/scan/ping`은 브라우저 CSRF 검사에서 제외되고, 그 외 경로는 기존 CSRF 보호가 유지됩니다. [Scan API 보안](Scan-Api-Security.md) 참고. +> CLI 요청은 `Authorization: Bearer`에 프로젝트 API 키를 전달합니다. `POST /api/scan`은 제출자의 이메일·비밀번호·권한·프로젝트 접근 권한도 확인합니다. `POST /api/scan`, `POST /api/scan/parse`, `POST /api/scan/gate`에는 브라우저 세션이나 CSRF 토큰이 필요하지 않습니다. `GET /api/scan/ping`은 키를 검증합니다. [스캔 API 보안](Scan-Api-Security.md)을 참고하세요. --- @@ -127,9 +129,9 @@ POST /api/projects/{projectId}/keys UI: 프로젝트 → **설정(⚙)** → **CLI** → **키 생성** -### 관리자 전역 키 +### 관리자의 키 관리 -**설정 → 관리자 → CLI 키** — [API 레퍼런스](API-Reference.md) 참고 +관리자는 여러 프로젝트의 CLI 키를 조회·폐기하고 지정한 `projectId`에 키를 발급할 수 있습니다. 스캔 키의 범위는 프로젝트 단위입니다. 별도 SCIM 토큰은 스캔 제출에 사용할 수 없습니다. --- @@ -238,8 +240,14 @@ exit "$(echo "$verdict" | jq -r .exitCode)" | `failOnEpss` | `OSWL_GATE_FAIL_ON_EPSS` | `0.5` | | `failOnLicenseViolation` | `OSWL_GATE_FAIL_ON_LICENSE_VIOLATION` | `true` | | `onlyNew` | `OSWL_GATE_ONLY_NEW` | `true` | +| `onlyReachable` | `OSWL_GATE_ONLY_REACHABLE` | `false` | +| `failOnSecrets` | `OSWL_GATE_FAIL_ON_SECRETS` | `false` | + +`onlyNew`는 기준 스캔에 이미 존재하던 CVE·라이선스 문제를 제외합니다. 통과를 보장하지는 않습니다. 악성 패키지, 활성화한 시크릿 탐지 등 다른 적용 규칙으로 실패할 수 있습니다. `onlyReachable`은 지원되는 바이트코드 또는 소스 참조 분석 결과가 `REACHABLE`인 컴포넌트의 CVE만 평가합니다. 활성화하면 `UNKNOWN`인 CVE는 제외하지만, 참조가 확인되지 않았다는 사실이 악용 불가능함을 뜻하지는 않습니다. 라이선스와 악성 패키지 검사는 이 필터와 별개입니다. 분석 범위를 검토한 뒤 활성화하세요. GitHub 대상을 설정하면 Check Run과 PR 댓글로 결과를 게시할 수 있습니다. + +확정 악성 패키지(OSV `MAL-` 어드바이저리)는 위의 모든 임계값 및 `onlyNew`/`onlyReachable`과 무관하게 항상 차단됩니다 — 유일한 해제 방법은 승인된 정책 예외(waiver, **v1.0.5**, `/api/policies/exceptions` 참고)뿐입니다. -`onlyNew`는 직전 완료 스캔을 베이스라인으로 비교하므로 기존 부채가 머지를 막지 않습니다. 요청에 GitHub 대상을 포함하면 판정이 Check Run과 PR 코멘트로도 게시됩니다. +`failOnSecrets`(**v1.0.5**)는 Quick Import 클론 스캔에서 CRITICAL/HIGH 등급 시크릿 탐지(정규식 + 엔트로피 규칙 — AWS 키, GitHub/GitLab/Slack/npm 토큰, 임베디드 프라이빗 키 블록 등)가 하나라도 있으면 차단합니다. 위의 다른 임계값과 마찬가지로 요청 오버라이드 → 조직/팀/프로젝트 정책 계층 → 인스턴스 기본값 순으로 해석됩니다. --- diff --git a/docs/ko/Database-Schema.md b/docs/ko/Database-Schema.md index 7103ef11..7d0a9298 100644 --- a/docs/ko/Database-Schema.md +++ b/docs/ko/Database-Schema.md @@ -1,12 +1,12 @@ # 데이터베이스 스키마 및 마이그레이션 -OsWL 애플리케이션 데이터는 PostgreSQL(`prod`) 또는 H2 파일 모드(`local`)에 저장됩니다. `domain/entity/` 아래 JPA 엔티티가 **실제 스키마의 기준**입니다. +OsWL 애플리케이션 데이터는 PostgreSQL(`prod`) 또는 H2 파일 모드(`local`)에 저장됩니다. `domain/entity/`, `auth/entity/` 아래 JPA 엔티티가 **실제 스키마의 기준**입니다. --- -## 프로파일별 동작 +## 프로필별 동작 -| 프로파일 | `ddl-auto` | 의미 | +| 프로필 | `ddl-auto` | 의미 | |----------|------------|------| | `local` | `update` | 엔티티 변경 시 H2 스키마가 자동 반영 | | `prod` | `validate` | PostgreSQL이 엔티티와 다르면 기동 실패 — **자동 마이그레이션 없음** | @@ -16,7 +16,9 @@ OsWL 애플리케이션 데이터는 PostgreSQL(`prod`) 또는 H2 파일 모드( ### Flyway (v1.0.4, 옵트인) -`OSWL_FLYWAY_ENABLED=true`로 설정하면 스키마 관리를 Flyway에 위임합니다(`baseline-on-migrate` 활성 — 기존 DB는 거부되지 않고 베이스라인 처리). 켜기 전에 현재 스키마와 일치하는 베이스라인을 생성하세요. 기본값 `false`에서는 위의 `ddl-auto` 동작이 그대로 유지됩니다. +`OSWL_FLYWAY_ENABLED=true`로 `src/main/resources/db/migration/`의 버전별 마이그레이션을 활성화합니다. 기본값은 `false`입니다. 저장소에는 이미 `V1__baseline.sql`과 이후 마이그레이션이 있습니다. 빈 PostgreSQL DB에서는 V1부터 순서대로 실행한 후 Hibernate가 스키마를 검증합니다. Flyway 이력이 없는 기존 DB에서는 `baseline-on-migrate`가 V1 실행 없이 버전 1을 기록하고 V2부터 실행합니다. 활성화 전에 백업하고 기존 스키마와 마이그레이션을 비교하세요. 이미 수동 적용한 변경과 후속 마이그레이션이 충돌할 수 있습니다. 공유 DB에 적용한 마이그레이션 파일은 재생성하거나 수정하지 마세요. SQL을 수동 관리한다면 대상 버전에 필요한 변경을 순서대로 모두 적용해야 합니다. 아래의 일부 레거시 스크립트만으로 신규 설치 스키마를 구성할 수는 없습니다. + +현재 스키마에는 v1.0.4 이후 변경도 포함됩니다. 조직·팀(V11), SAML/SCIM(V13), 웹훅(V14), CVE 출처와 C/C++ 메타데이터(V15–V16), 정책 상속·예외(V17, V28), 도달 가능성 및 근거(V18, V29–V30), 감사 로그 무결성(V19), UI 설정·온보딩(V20, V23–V24), 시크릿·IaC 탐지(V21), 스캔 아카이빙(V22), 보고서 브랜딩(V25), 캐시 집계·무효화(V26–V27), 영속적 가져오기 작업(V31)입니다. 전체 적용 순서는 실제 마이그레이션 파일을 기준으로 확인하세요. 일부 마이그레이션은 재실행을 허용하지 않으므로 무조건 반복 실행하면 안 됩니다. ### v1.0.4에서 추가된 컬럼 @@ -73,7 +75,7 @@ PostgreSQL에 `psql`, DBeaver, CI 마이그레이션 등으로 실행합니다. | `project_versions.imported_at`, `last_updated_at` | 미사용 타임스탬프 | | `projects.updated_at`, `version`, `last_scanned_at` | 비정규화; UI는 최신 `scan_results` 사용 | -[운영 배포 체크리스트](Production-Deployment-Checklist.md) §8 참고. +[운영 배포 체크리스트](Production-Deployment-Checklist.md) §9 참고. --- @@ -94,7 +96,7 @@ libraries (공유) airgapped_snapshot_entries ── airgapped_snapshot_meta (오프라인 스냅샷 저장소) -users, role_templates, audit_logs, cache_settings, vcs_connections, … +users, role_templates, audit_logs, cache_settings, user_vcs_connections, … ``` - **프로젝트 카드 버전 / 마지막 스캔** — `projects.version`이 아니라 최신 `scan_results`에서 계산. diff --git a/docs/ko/Embedded-AI.md b/docs/ko/Embedded-AI.md index fcae4d79..064be7a2 100644 --- a/docs/ko/Embedded-AI.md +++ b/docs/ko/Embedded-AI.md @@ -1,172 +1,99 @@ -# 내장 AI (Embedded AI) +# 내장 AI -내장 AI는 별도의 클라우드 계정이나 API 키 없이 OsWL이 로컬 LLM을 바로 사용할 수 있게 해주는 기능입니다. **데이터는 절대 기기 밖으로 나가지 않습니다.** 함께 제공되는 [llama.cpp](https://github.com/ggml-org/llama.cpp) `llama-server`를 사이드카 프로세스로 실행해 **OpenAI 호환** 엔드포인트(`http://127.0.0.1:/v1`)를 띄우고, 이를 **LOCAL** AI 프로바이더로 등록합니다. CVE 트리아지 요약과 라이선스 인사이트가 모두 이 컴퓨터 안에서만 처리됩니다. +OsWL은 llama.cpp를 `http://127.0.0.1:11435/v1`에서 실행해 LOCAL 제공자로 등록합니다. 추론 데이터는 서버 안에서 처리되며, 모델 설치에는 인터넷 또는 파일의 오프라인 전달이 필요합니다. **CPU 기본 모델은 Qwen3.5-2B Q4_K_M, 선택 모델은 Gemma 4 E2B Q4_K_M입니다.** 한 번에 하나만 실행합니다. 텍스트 전용이므로 GPU와 이미지·오디오 프로젝터는 필요하지 않습니다. ---- +## 사양과 폴더 구조 -## 동작 방식 +| 모델 | 가중치 다운로드 | 서버 전체 예상 최소 | 권장 | +|---|---:|---|---| +| Qwen3.5 2B Q4_K_M | 1.28 GB | 2 vCPU / RAM 8 GB | 4 vCPU / RAM 8~16 GB | +| Gemma 4 E2B Q4_K_M | 3.11 GB | 4 vCPU / RAM 8 GB | 4 vCPU / RAM 16 GB | -* OsWL이 **모델 디렉터리**(기본값 `./embedded-ai`)에서 `llama-server`를 실행하고 `/health`에 응답할 때까지 기다립니다. `.gguf` 파일이 아직 없다면 부팅 직후 백그라운드에서 기본 Qwen3 모델 다운로드가 자동으로 시작됩니다(최초 1회, 약 1.2GB) — 그래서 Settings에서 **시작**을 누를 때는 이미 다 받아져 있거나 다운로드가 진행 중인 경우가 많습니다. `oswl.ai.embedded.auto-download-on-boot=false`로 설정하면 예전처럼 시작 버튼을 눌러야만 다운로드가 시작됩니다. **폐쇄망**(`oswl.airgapped.enabled=true`) 환경에서는 이 백그라운드 다운로드가 절대 실행되지 않으므로 미리 직접 `.gguf` 파일을 넣어두세요([요구 사항 및 디렉터리 구조](#요구-사항-및-디렉터리-구조) 참고). -* 서버는 **localhost(`127.0.0.1`)에만 바인딩**되므로 다른 기기에서 접근할 수 없습니다. -* 시작에 성공하면 OsWL이 이 엔드포인트를 **LOCAL** 프로바이더로 저장하고 활성화합니다(활성 프로바이더는 하나뿐이므로 기존 프로바이더는 비활성화됩니다). -* 내장 AI를 중지하면 LOCAL 프로바이더도 함께 비활성화되어, 죽은 엔드포인트로 AI 호출이 나가는 일이 없습니다. -* 서버는 reasoning 비활성화(`--reasoning-budget 0`), 웹 UI 비활성화(`--no-webui`) 옵션으로 실행됩니다. 기본적으로 GPU 레이어 오프로드를 시도하며(`-ngl 999`), GPU 시작이 실패하면(GPU 빌드 부재, VRAM 부족 등) 같은 모델을 CPU 전용으로 1회 자동 재시도한 뒤에야 다음 후보로 넘어갑니다. -* 병렬 AI 콜을 지원합니다. 서버는 기본적으로 `--parallel 4 --cont-batching`, 플래시 어텐션(`-fa`), 프리픽스 캐시 재사용(`--cache-reuse 256`) 옵션으로 시작하고, OsWL 자체적으로 독립적인 AI 콜을 병렬로 실행합니다(최대 `oswl.ai.enrichment.max-parallel-calls`, 기본 `3`). -* LOCAL 프로바이더로 복사되는 배치 프롬프트는 더 단순한 JSON 스키마 변형(`oswl.ai.enrichment.local-simple-schema`, 기본 `true`)을 사용합니다. 소형 로컬 모델이 클라우드 대형 모델용 전체 스키마보다 단순한 출력 스키마를 훨씬 잘 따릅니다. -* CVE/라이선스 요약은 입력 컨텍스트 해시를 기준으로 캐싱되며, 변경되지 않은 항목은 다음 스캔에서 다시 AI를 호출하지 않습니다. -* 보안 자세(posture), 보안 트렌드, 라이선스 트렌드, 버전 차이 인사이트는 기존 4개의 개별 호출을 `insights.combined` 하나로 합쳐 고정 오버헤드를 줄입니다. +이는 **성능 보증이 아닌 용량 산정안**입니다. OsWL·PostgreSQL 동시 실행, 4K~8K 컨텍스트, 소규모 스캔과 AI 생성 1건씩의 간헐적 처리가 기준입니다. 대형 압축파일·동시 스캔·DB 증가에는 추가 자원이 필요합니다. 파일 크기는 최대 메모리가 아닙니다. 두 모델에 여유 디스크 6 GB 이상을 확보하고 실행 파일·DB·로그·기존 모델은 별도로 계산하세요. 빌드 사양은 포함하지 않습니다. -> 필요 권한: 다른 AI 설정과 동일하게 `SETTINGS_AI_MANAGE` 또는 시스템 관리자. +Qwen을 기본으로 고른 이유는 CPU 공유 서버에 맞는 작은 가중치 크기입니다. 항상 더 정확하다는 뜻은 아닙니다. 실제 한국어·영어·일본어 입력으로 품질을 비교하세요. 버스터블의 vCPU 수는 지속 성능을 보장하지 않으므로 CPU 크레딧 소진 상태에서도 확인해야 합니다. 연속 분석은 고정 성능 CPU나 별도 CPU 워커를 고려하되 GPU를 필수로 요구하지 않습니다. ---- +서버 OS·아키텍처에 맞는 CPU 실행 파일과 같은 배포본의 라이브러리를 사용합니다. 로컬 검증 기준은 llama.cpp **b10068 (571d0d540)**입니다. 두 모델 구조와 `--chat-template-kwargs`, `-fa on`을 지원하는 호환 버전이 필요합니다. -## 요구 사항 및 디렉터리 구조 - -모델 디렉터리에는 서버 바이너리가 있어야 하며, `.gguf` 모델이 없으면 **시작** 버튼을 처음 -누를 때(또는 부팅 시 백그라운드로) 자동으로 받아옵니다: - -``` +```text embedded-ai/ - llama-server(.exe) — llama.cpp 서버 바이너리 (직접 준비) - qwen3-1.7b-q4_k_m.gguf — 기본 모델 (Apache 2.0) — 최초 시작 시 자동 다운로드 + llama/ + llama-server(.exe) + ... companion libraries ... + model/ + Qwen/Qwen3.5-2B-Q4_K_M.gguf + Gemma/gemma-4-E2B-it-Q4_K_M.gguf + llama-server.log ``` -디렉터리가 비어 있으면 Qwen3-1.7B(~1.2GB)를 바로 그 위치로 다운로드합니다 — 부팅 직후 자동으로 -시작되거나, 아직 안 끝났다면 **시작**을 누르는 즉시 — SHA256 체크섬을 검증한 뒤에야 사이드카를 -실행합니다. 카드에 실시간 다운로드 진행률이 표시되며, `java -jar app.jar`만으로 전 과정이 -끝납니다. 별도 스크립트나 빌드 단계가 필요 없습니다. 이렇게 할 수 있는 이유는 Qwen3가 Apache 2.0 -라이선스이기 때문입니다([THIRD_PARTY_LICENSES.md](../../THIRD_PARTY_LICENSES.md#qwen3-17b-gguf) -참고) — 사용자를 대신해 받아오는 데 별도 재배포 의무가 없습니다. 모델은 기본적으로 업스트림 -[Hugging Face 저장소](https://huggingface.co/ggml-org/Qwen3-1.7B-GGUF)에서 다운로드됩니다. -서드파티 호스트에 의존하고 싶지 않다면 `OSWL_EMBEDDED_DEFAULT_MODEL_URL`을 바이트 단위로 -동일한 자체 호스팅 미러로 지정하세요. - -기본 모델 URL, SHA256, 크기 설정은 한 세트로 묶인 값입니다. URL만 바꾸고 SHA256/크기를 맞추지 -않으면 모든 다운로드가 체크섬 검증 실패로 거부됩니다. - -다른 `.gguf` 모델도 직접 넣어 쓸 수 있습니다 — OsWL은 기본 Qwen3뿐만 아니라 이 디렉터리에 직접 -넣은 모든 `.gguf` 파일을 인식합니다. 재배포하거나 공유하기 전에 해당 모델 자체의 라이선스를 -먼저 확인하세요 — OsWL이 번들/자동 다운로드하는 것은 Qwen3뿐입니다. - -| 항목 | OsWL이 찾는 위치 | -|---|---| -| 서버 바이너리 | `/llama-server(.exe)` → `/bin/` → 시스템 `PATH` 순 ([llama.cpp 릴리스](https://github.com/ggml-org/llama.cpp/releases)) — **자동 다운로드 안 됨**, 직접 준비 | -| 모델 | 디렉터리 바로 아래의 모든 `.gguf` 파일 | - -설정 기본값(UI에서 저장한 폴더가 `dir`보다 우선): - -| 설정 키 | 환경 변수 | 기본값 | 설명 | -|---|---|---|---| -| `oswl.ai.embedded.dir` | `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | 모델 디렉터리 (작업 디렉터리 기준 상대 경로) | -| `oswl.ai.embedded.port` | `OSWL_EMBEDDED_AI_PORT` | `11435` | 사이드카가 사용할 localhost 포트 | -| `oswl.ai.embedded.context-size` | `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | `llama-server -c`에 전달되는 전체 컨텍스트 크기. 병렬 슬롯 수로 나눠 각 슬롯에 할당됩니다 | -| `oswl.ai.embedded.gpu-layers` | `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | GPU 레이어 오프로드(`-ngl`): `-1`은 빌드가 지원하는 한 최대한, `0`은 CPU 전용, 양수는 명시적 레이어 수. GPU 시작 실패 시 CPU 전용으로 자동 재시도 | -| `oswl.ai.embedded.threads` | `OSWL_EMBEDDED_AI_THREADS` | `0` | 스레드 수(`-t`); `0`은 llama.cpp 자동 감지 | -| `oswl.ai.embedded.parallel-slots` | `OSWL_EMBEDDED_AI_PARALLEL` | `4` | `>1`이면 `--parallel N --cont-batching`을 추가해 서버에서 AI 콜이 직렬화되지 않게 합니다. 각 슬롯은 `context-size / N`을 받으며, 2048 미만이면 경고 로그가 남습니다 | -| `oswl.ai.embedded.flash-attn` | `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | 플래시 어텐션(`-fa`) | -| `oswl.ai.embedded.cache-reuse` | `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | 프리픽스 캐시 재사용(`--cache-reuse N`); `<=0`이면 비활성화 | -| `oswl.ai.embedded.extra-args` | `OSWL_EMBEDDED_AI_EXTRA_ARGS` | (비어 있음) | 추가 llama-server CLI 인자를 공백으로 구분해 그대로 덧붙임 — 서버 설정 전용이며 요청 입력에서 받지 않음 | -| `oswl.ai.embedded.startup-timeout-seconds` | `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | 모델 후보 한 개가 healthy 상태가 될 때까지 기다리는 최대 시간(초) | -| `oswl.ai.embedded.default-model-url` | `OSWL_EMBEDDED_DEFAULT_MODEL_URL` | 업스트림 Hugging Face `ggml-org/Qwen3-1.7B-GGUF` 자산 | 기본 Qwen3 모델의 1차 다운로드 소스 | -| `oswl.ai.embedded.default-model-sha256` | `OSWL_EMBEDDED_DEFAULT_MODEL_SHA256` | (THIRD_PARTY_LICENSES.md 참고) | 기대 SHA256 — URL과 항상 함께 변경 | -| `oswl.ai.embedded.default-model-size-bytes` | `OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES` | `1282439264` | 기대 파일 크기(바이트). 진행률 바를 미리 채우는 데 사용되며, URL/SHA256과 같은 세트입니다 | -| `oswl.ai.embedded.fallback-model-url` | `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | (비어 있음) | 1차 URL 실패 시 1회 재시도. 1차를 자체 호스팅 미러로 바꿀 때 이 값에 업스트림 URL을 지정하세요 | -| `oswl.ai.embedded.auto-download-on-boot` | `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | 부팅 시 백그라운드로 기본 모델을 미리 받음; `oswl.airgapped.enabled=true`면 절대 실행 안 함 | - ---- - -## 시작 및 중지 - -**설정 → AI**의 **내장 AI (기본 제공 로컬 모델)** 카드에서 관리합니다: - -1. 상태 표시(**실행 중** / **중지됨**)와 바이너리 누락 경고를 확인합니다. -2. **시작**을 클릭합니다. 디렉터리에 모델이 없으면 Qwen3 다운로드 진행률(~1.2GB, 연결 속도에 - 따라 몇 분 소요)이 먼저 표시된 뒤 서버가 실행됩니다. 모델이 이미 있으면 로딩만 최대 2분 - 정도 걸릴 수 있습니다(GPU 로딩 시 `startup-timeout-seconds`까지 허용). -3. 실행되면 카드에 **실행 모델**이 표시되고, 엔드포인트가 LOCAL 프로바이더로 동작합니다. -4. **중지**를 클릭하면 사이드카가 종료됩니다(다운로드된 모델 파일은 삭제되지 않으므로 다음 - 시작 시 바로 재사용됩니다). +| Model | Bytes | SHA-256 | +|---|---:|---| +| Qwen3.5-2B Q4_K_M | 1280835840 | `aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223` | +| Gemma 4 E2B Q4_K_M | 3106738272 | `740185b21d22ceb83a11c3aa62ad5842ef32c70f6096d756bbee85a1e4ec34b8` | -카드에는 현재 사용 중인 폴더, 감지된 `.gguf` 파일 목록, 마지막 시작 오류(있으면 빨간색)도 함께 표시됩니다. +- [Qwen model card](https://huggingface.co/Qwen/Qwen3.5-2B) +- [Qwen GGUF, pinned revision](https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/tree/f6d5376be1edb4d416d56da11e5397a961aca8ae) +- [Gemma model card](https://huggingface.co/google/gemma-4-E2B-it) +- [Gemma GGUF, pinned revision](https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/tree/0314792d7f1f7e229411f620751375812bb9faf2) +- [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases) +- [License notices](../../THIRD_PARTY_LICENSES.md#embedded-ai-runtime-and-models) ---- +설정 폴더는 모델 계열 폴더가 아닌 최상위 경로입니다. `model/`과 바로 아래 계열 폴더를 탐색합니다. 기존 최상위 GGUF와 최상위/bin 실행 파일도 인식합니다. 같은 파일 이름이면 새 model 폴더가 우선합니다. `mmproj*`, `mtp-*`, `imatrix*`와 최상위 경로 밖을 가리키는 파일은 선택에서 제외합니다. -## 모델 교체 +다른 설치의 기존 모델은 자동 삭제·교체하지 않습니다. 목록에서 빼려면 탐색 폴더 밖으로 옮기세요. 저장한 모델이 없어졌다면 설치된 기본 우선순위로 돌아갑니다. -기본 Qwen3 외에도 llama.cpp와 호환되는 `.gguf`라면 무엇이든 사용할 수 있습니다: +프로젝트의 다국어 프롬프트로 두 모델의 영어·한국어·일본어 응답을 확인했습니다. 다만 일부 Qwen 응답은 입력한 수정 버전이나 건수를 잘못 생성했습니다. 이 확인은 실행 호환성 검증이며 정확도 보장이 아닙니다. AI 권고는 원본 스캔 결과와 대조해야 하며, 기본 모델 선정은 자원 기준이지 품질 순위가 아닙니다. -1. 양자화된 GGUF 모델을 **다운로드**합니다 (예: [Hugging Face](https://huggingface.co/models?library=gguf)). -2. `.gguf` 파일을 카드에 표시된 모델 폴더에 **넣습니다**. -3. **모델** 드롭다운에서 파일을 **선택**하고(목록은 폴더 기준으로 갱신됨) **저장**을 클릭합니다. -4. **시작**을 클릭하면 선택한 모델이 가장 먼저 시도됩니다. 모델 선택은 다음 시작부터 적용되며, 실행 중에는 드롭다운이 비활성화되어 바꿀 수 없습니다. +## 설치·모델·언어 선택 -**자동 (기본 순서)** 옵션은 저장된 모델 → `qwen3…` → 나머지 `.gguf` 중 첫 번째 파일(가나다순) 순으로 시도합니다. +1. 실행 파일과 라이브러리를 `llama/`에 넣습니다. +2. 모델이 하나도 없으면 부팅 시 **Qwen3.5 2B만** `model/Qwen/`에 미리 다운로드합니다. 시작 버튼도 필요 시 다운로드합니다. 사전 다운로드는 `OSWL_EMBEDDED_AUTO_DOWNLOAD=false`로 끕니다. +3. Gemma는 위 고정 리비전의 파일을 직접 받아 SHA-256·바이트 수를 검증한 뒤 `model/Gemma/`에 넣습니다. +4. **설정 → AI → 제공자 → 내장 AI**에서 설치된 모델과 사양 안내를 확인합니다. +5. **중지 → 모델 선택 → 저장 → 시작** 순서로 변경합니다. 시작 실패 시 대체 모델이 실행될 수 있으므로 실행 중인 모델과 대체 표시를 확인하세요. +6. **분석 범위/컨텍스트**에서 한국어·영어·일본어를 선택해 저장합니다. 내장 AI 식별과 주소는 유지됩니다. 저장된 기존 요약은 재생성 전까지 번역되지 않습니다. -> CPU 전용 추론에는 **1B–4B 파라미터** 규모의 작은 양자화 모델(Q4_K_M 등)을 권장합니다. 더 큰 모델은 RAM을 많이 쓰고 느린 기기에서는 시작 제한 시간을 넘길 수 있습니다. 컨텍스트 크기는 `OSWL_EMBEDDED_AI_CONTEXT`(기본 `8192`)이며 병렬 슬롯 수로 나뉩니다 — 기본 4 슬롯이면 호출당 2048 토큰이므로, 호출당 더 긴 컨텍스트가 필요하면 컨텍스트를 늘리거나 `OSWL_EMBEDDED_AI_PARALLEL`을 낮추세요. +기존 AI 설정 관리 권한을 사용합니다. 시작하면 실제 모델이 LOCAL로 등록되고 다른 활성 제공자는 비활성화됩니다. 중지는 LOCAL도 비활성화합니다. 다른 제공자 선택만으로 내장 프로세스가 중지되지는 않으므로 메모리를 반환하려면 따로 중지하세요. ---- +기본 우선순위는 Qwen3.5-2B Q4_K_M → 다른 Qwen3 → Gemma 4 E2B → 나머지 호환 GGUF입니다. 명시적 선택과 유효한 저장값이 더 우선합니다. 다른 호환 모델을 추가할 때는 해당 모델의 사양과 라이선스를 확인하세요. -## 모델 폴더 변경 +폴더를 바꿀 때는 llama/와 model/을 담는 최상위 경로를 저장합니다. 경로 변경 시 관리 중인 서버는 중지됩니다. 파일 이동도 잠금을 피하기 위해 중지 후 수행하세요. Linux 실행 파일에는 실행 권한이 필요합니다. -OsWL이 다른 디렉터리를 바라보게 하는 방법은 두 가지입니다: +## CPU 기본값 -| 방법 | 적용 범위 | +| Environment variable | Default | |---|---| -| 내장 AI 카드의 **폴더** 입력 + **저장** | DB에 저장(`ai_preferences.embedded_dir` / `embedded_model`); 기본값보다 우선 | -| `OSWL_EMBEDDED_AI_DIR` 환경 변수 / `oswl.ai.embedded.dir` yaml | UI에 저장된 폴더가 없을 때 사용되는 기본값 | +| `OSWL_EMBEDDED_AI_DIR` | `embedded-ai` | +| `OSWL_EMBEDDED_AI_PORT` | `11435` | +| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `0` | +| `OSWL_EMBEDDED_AI_THREADS` | `1` | +| `OSWL_EMBEDDED_AI_PARALLEL` | `1` | +| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | +| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | +| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | +| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | +| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | empty | +| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | -`PUT /api/settings/ai/embedded/config`에 적용되는 규칙: +CPU 전용 `-ngl 0`과 생성 슬롯 1개를 명시합니다. `LLAMA_ARG_CHAT_TEMPLATE_KWARGS={"enable_thinking":false}`와 reasoning budget 0을 함께 사용합니다. 예산만 0으로 설정하면 새 모델은 빈 답변을 반환할 수 있습니다. 4 vCPU에서는 웹·스캔 지연 확인 후 스레드 2개를 검토하세요. 스레드 수는 CPU 사용률 상한이 아니므로 필요하면 OS·컨테이너 제한을 적용합니다. -* 폴더는 **미리 존재**해야 합니다 — 없으면 저장이 거부됩니다(`400`, "폴더가 없거나 디렉터리가 아닙니다"). -* 사이드카 **실행 중에 폴더를 바꾸면** 먼저 사이드카가 중지되고(실행 중인 `llama-server`가 기존 디렉터리의 파일 잠금을 잡고 있기 때문) LOCAL 프로바이더가 비활성화됩니다. 새 폴더에서 다시 시작하세요. -* 폴더 입력을 비우면(공백) 오버라이드가 제거되어 설정 기본값으로 돌아갑니다. +전체 컨텍스트는 슬롯 간 분할됩니다. `OSWL_AI_MAX_PARALLEL_CALLS` 기본값 3은 **스캔별** 제한입니다. 서버는 한 슬롯으로 생성해도 대기 요청이 비스트리밍 읽기 제한 90초를 초과할 수 있습니다. 소형 서버는 이 값을 1로 설정하고 스캔 중첩을 피하세요. 서버 전체 작업 접수 제한 기능은 아닙니다. ---- +## 무결성·폐쇄망·GitHub 배포 -## 자동 폴백 +기본 다운로드는 위 업스트림 고정 리비전을 사용합니다. 기존 GitHub `models-v1` 자산은 Qwen3 1.7B이므로 새 기본 모델 주소로 재사용하면 안 됩니다. 이 변경으로 새 GitHub 모델 자산을 게시하거나 존재한다고 가정하지 않습니다. -시작 버튼 한 번으로 여러 모델을 순서대로 시도할 수 있습니다. 요청/저장된 모델 → 내장 선호 순서 → 나머지 `.gguf` 순으로 후보를 시도하며, 각 후보는 최대 **120초** 안에 healthy 상태가 되어야 합니다. GPU 오프로드가 켜진 상태(기본값)에서 후보의 GPU 시작이 실패하면, OsWL은 먼저 같은 모델을 CPU 전용으로 1회 재시도한 뒤 다음 후보로 넘어갑니다. 크래시나 시간 초과된 모델도 건너뛰고 다음으로 넘어갑니다. +`OSWL_EMBEDDED_DEFAULT_MODEL_URL`, `OSWL_EMBEDDED_DEFAULT_MODEL_SHA256`, `OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES`는 같은 파일을 가리켜야 합니다. 부분 다운로드의 해시와 크기를 모두 검증한 뒤 설치합니다. `OSWL_EMBEDDED_FALLBACK_MODEL_URL`은 기본적으로 비어 있으며 바이트 단위로 동일한 미러만 지정하세요. 미러도 기본 Qwen 이름으로 저장하므로 다른 모델은 실제 이름으로 직접 설치합니다. -첫 번째 후보가 아닌 모델로 실행된 경우, 카드의 모델 선택 옆에 주황색 **"대체 모델로 실행 중"** 배지가 표시됩니다. 보통 선호 모델 로딩에 실패했다는 뜻이며(모델이 너무 크거나 다운로드가 깨진 경우), **실행 모델** 항목에서 실제로 돌고 있는 모델을 확인할 수 있습니다. +폐쇄망에서는 다운로드하지 않습니다. 실행 파일·검증한 가중치·라이선스 고지를 함께 전달하세요. Docker에도 포함되지 않으므로 최상위 폴더를 마운트하고 **Linux용** 실행 파일을 준비합니다. 자동 다운로드에는 쓰기 권한이 필요합니다. Windows 실행 파일은 Linux 컨테이너에서 쓸 수 없습니다. ---- - -## 상태 및 로그 - -`GET /api/settings/ai/embedded`는 `running`, `external`, `binaryFound`, `activeModel`, `fallbackUsed`, `lastError`, `availableModels`, `modelsDir`, `baseUrl`을 반환하며, 시작 버튼으로 트리거된 기본 모델 다운로드가 진행 중일 때는 `downloading`, `downloadedBytes`, `downloadTotalBytes`도 함께 반환합니다. - -`external`은 설정된 포트에서 OsWL이 직접 시작하지 않은 무언가(수동으로 띄운 `llama-server`, 또는 이전 OsWL 프로세스·크래시로 남겨진 고아 프로세스)가 이미 `/health`에 응답 중일 때 `true`가 됩니다. 이 경우에도 `running`은 `true`로 유지됩니다 — 엔드포인트 자체는 LOCAL 프로바이더로 정상 사용 가능하기 때문입니다 — 하지만 **중지** 버튼을 눌러도 OsWL이 소유하지 않은 프로세스는 종료할 수 없어 계속 실행 상태로 남고 상태 응답도 `external: true`를 유지합니다. - -`POST /api/settings/ai/embedded/start`는 Qwen3 다운로드를 기다리는 대신 트리거만 하고 즉시 응답합니다(`success: true`, `downloading: true`) — 설정 페이지가 상태를 폴링하며 진행률과 최종 `running`/`lastError` 결과를 표시합니다. 다운로드 자체는 브라우저 세션과 무관하게 서버에서 진행되므로, 페이지를 새로고침하거나 닫아도 취소되지 않고 다시 열으면 진행 상황이 이어서 표시됩니다. - -`llama-server`의 stdout/stderr는 **`/llama-server.log`**에 기록됩니다. 시작에 실패하면 이 로그의 마지막 몇 줄이 `lastError`에 포함되어 카드에 빨간색으로 표시되며, 자세한 내용은 파일 전체를 확인하세요. - ---- +`embedded-ai/`는 Git·Docker 빌드 컨텍스트에서 제외되며 배포 JAR에 모델·실행 파일이 포함되지 않습니다. Qwen3.5·Gemma 4는 Apache 2.0, llama.cpp는 MIT입니다. 라이선스 전문·출처·제공되는 업스트림 고지·Unsloth GGUF Q4_K_M 양자화 사실을 유지하세요. 실행 파일 재배포 시 동봉 라이브러리의 고지도 보존해야 합니다. ## 문제 해결 -| 증상 | 원인 및 해결 | -|---|---| -| "llama-server 바이너리를 찾을 수 없습니다" | 카드에 표시된 폴더(또는 그 `bin/` 하위, `PATH`)에 `llama-server(.exe)`를 넣으세요 — 이건 자동으로 받아지지 않습니다 | -| 모델이 없는데 시작을 눌러도 반응이 없어 보임 | 인터넷 연결을 확인하세요 — 기본 모델 다운로드에 최초 1회 인터넷이 필요합니다. 폐쇄망 환경이면 `.gguf` 파일을 직접 모델 폴더에 넣으세요 | -| "모델 다운로드 실패" / 체크섬 불일치 | 다운로드 도중 네트워크가 끊기거나 손상됐습니다 — 손상된 파일은 자동 삭제되니 **시작**을 다시 누르면 재시도됩니다 | -| 로그에 `failed to open GGUF file` | 설정의 폴더와 모델이 실제 있는 위치가 다릅니다 — **폴더** 입력값과 파일 이름이 드롭다운 항목과 일치하는지 확인 | -| "did not become healthy within 120s" | 기기가 느리거나 모델이 너무 큽니다 — 더 작은 양자화 모델(예: 1B~2B급 Q4_K_M `.gguf`)로 시도하거나, `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC`을 늘리세요. `(GPU)` 실패는 CPU 전용으로 자동 재시도되므로, 이 메시지가 지속되면 CPU 재시도도 실패한 것입니다 | -| 로그에 `slotContext … is below 2048` 경고 | 병렬 슬롯이 컨텍스트 크기에 비해 너무 많습니다 — `OSWL_EMBEDDED_AI_CONTEXT`를 늘리거나 `OSWL_EMBEDDED_AI_PARALLEL`을 낮추세요 | -| 포트가 이미 사용 중 | 다른 프로세스(또는 수동으로 띄운 `llama-server`)가 포트를 점유 중입니다 — 종료하거나 `OSWL_EMBEDDED_AI_PORT`를 변경하세요. 해당 포트에서 이미 healthy한 서버가 응답하면 "실행 중"으로 간주되며 상태 응답에 `external`로 표시됩니다 | -| **중지**를 눌러도 카드가 꺼지지 않음 | 실행 중인 서버가 `external`(이 OsWL 인스턴스가 시작하지 않음) 상태입니다 — 해당 프로세스를 직접 종료하세요(또는 실행 중인 머신/컨테이너를 재시작). OsWL은 이 프로세스를 종료할 수 없습니다 | -| 저장 시 "폴더가 없거나 디렉터리가 아닙니다" | 디렉터리를 먼저 만드세요 — 저장은 존재하는 폴더만 허용됩니다 | - ---- - -## 보안 및 프라이버시 - -* 사이드카는 `127.0.0.1`에만 바인딩되고 **API 키가 필요 없습니다** — 네트워크에 아무것도 노출되지 않습니다. -* `llama-server.log`에 보이는 llama.cpp의 **CORS 경고**는 localhost만 수신하기 때문에 예상된 것이며 무해합니다. -* 텔레메트리가 없습니다. 모델로 전송되는 프롬프트, 코드 조각, CVE 데이터는 기기를 벗어나지 않습니다. - ---- - -## REST API 요약 - -[API 레퍼런스 — AI](API-Reference.md#ai) 참고. 인터랙티브 스키마는 Swagger UI(`local` 프로파일)에서 확인할 수 있습니다. +- 실행 파일 없음: llama/ 위치·OS·아키텍처·라이브러리·실행 권한을 확인하세요. +- 빈 답변: 호환 버전과 명시적인 비추론 템플릿 옵션을 확인하세요. +- 시작 실패: llama-server.log에서 모델 지원·RAM 부족을 확인하세요. +- 다른 모델 실행: 중지·선택·저장·시작 후 대체 표시를 확인하세요. +- 시간 초과: 동시 스캔·호출 수와 CPU 크레딧을 확인하세요. +- 다운로드 실패: URL·크기·SHA-256을 함께 확인하세요. diff --git a/docs/ko/Getting-Started.md b/docs/ko/Getting-Started.md index 988b258d..36a3a35b 100644 --- a/docs/ko/Getting-Started.md +++ b/docs/ko/Getting-Started.md @@ -8,11 +8,11 @@ | 구성 요소 | 요구사항 | |---|---| -| **JDK** | 25 이상 | +| **JDK** | 25 | | **빌드 도구** | Gradle Wrapper (포함 — `./gradlew`) | | **데이터베이스** | H2 파일 모드 (로컬/개발) 또는 PostgreSQL 15 이상 (운영) | | **OS** | Linux, macOS, Windows | -| **메모리** | 최소 512MB, 1GB 이상 권장 | +| **메모리** | 스캔 작업량에 따라 다르며, 내장 AI에는 추가 메모리 필요 | > Node.js나 npm은 필요 없습니다 — Tailwind CSS 독립 실행형 바이너리가 첫 번째 빌드 시 Gradle에 의해 자동으로 다운로드됩니다. @@ -27,58 +27,38 @@ git clone https://github.com/SalkCoding/Oswl.git cd Oswl ``` -### 2. 프로파일 선택 +### 2. 프로필 선택 -OsWL은 두 가지 Spring 프로파일을 제공합니다: +OsWL은 두 가지 Spring 프로필을 제공합니다: -| 프로파일 | 데이터베이스 | 용도 | +| 프로필 | 데이터베이스 | 용도 | |---|---|---| | `local` *(기본값)* | H2 파일 (`./oswl-db.mv.db`) | 개발 및 평가 | | `prod` | PostgreSQL | 운영 배포 | ### 3. 애플리케이션 시작 -**로컬 (H2, 설정 없음):** +로컬 개발에서는 `./gradlew bootRun`을 실행합니다(PowerShell: `.\gradlew.bat bootRun`). 기본 `local` 프로필은 H2와 고정된 개발용 암호화 키를 사용합니다. 개발 환경 밖에서는 별도의 영구 키를 사용하고, 개발용 키를 운영 환경에 복사하지 마세요. -```bash -./gradlew bootRun -``` - -**운영 (PostgreSQL):** +운영 배포에서는 `./gradlew bootJar verifyProdJar`로 배포용 JAR를 빌드하고 `prod` 프로필로 실행합니다. `DB_URL`, `DB_USERNAME`, `DB_PASSWORD`와 Base64 디코딩 시 32바이트인 영구 `OSWL_ENCRYPTION_KEY`를 설정하세요. 키는 `openssl rand -base64 32`로 한 번 생성한 뒤 재시작과 복원 시에도 동일하게 유지합니다. `prod`는 스키마를 자동 생성하지 않고 검증하므로 PostgreSQL 스키마를 먼저 준비해야 합니다. -```bash -export SPRING_PROFILES_ACTIVE=prod -export DB_URL=jdbc:postgresql://localhost:5432/oswl -export DB_USERNAME=oswl -export DB_PASSWORD=changeme -export OSWL_ENCRYPTION_KEY=$(openssl rand -base64 32) - -./gradlew bootRun -``` +배포 절차는 [운영 배포 체크리스트](Production-Deployment-Checklist.md)와 [Docker 실행 안내](../../deploy/README.md)를 참고하세요. `bootRun`과 `java -jar`는 `.env` 파일을 자동으로 읽지 않습니다. 실행 셸에서 환경변수를 설정하거나 Spring 설정 파일을 사용하고, Compose에서는 `--env-file`을 지정하세요. -> **`OSWL_ENCRYPTION_KEY`** — VCS 등 저장 비밀 보호용. `local`에서는 개발용 키가 자동 생성될 수 있습니다. **`prod`에서는 기동 전 필수**이며, 없으면 애플리케이션이 시작되지 않습니다. 키 분실 시 기존 저장 자격증명을 사용할 수 없습니다. - -애플리케이션은 기본적으로 포트 **8080**에서 시작됩니다. - ---- +기본 애플리케이션 포트는 **8080**입니다. 필요한 메모리는 작업량에 따라 달라지며, 로컬 AI에는 모델과 컨텍스트를 위한 추가 메모리가 필요합니다. ## 임베디드 AI 모델 (최초 실행) -OsWL은 임베디드 llama.cpp 사이드카를 통해 AI 기능을 완전한 온프레미스로 실행할 수 있습니다. 최초 기동 시 `embedded-ai/`에 `.gguf` 모델이 없으면, OsWL이 기본 **Qwen3-1.7B** 모델(~1.2GB)을 백그라운드에서 자동으로 다운로드합니다: +현재 기본 모델은 **Qwen3.5-2B Q4_K_M**입니다(1,280,835,840바이트, 약 1.28GB). Hugging Face의 `unsloth/Qwen3.5-2B-GGUF`에서 고정된 리비전의 파일을 내려받아 `embedded-ai/model/Qwen/`에 저장하고 설정된 SHA-256으로 검증합니다. llama.cpp 실행 파일은 별도로 설치해 `embedded-ai/llama/` 또는 `PATH`에 둡니다. -* 업스트림 Hugging Face 저장소(`ggml-org/Qwen3-1.7B-GGUF`)에서 받으며 SHA-256 무결성을 검증합니다. 서드파티 호스트 의존을 피하려면 `OSWL_EMBEDDED_DEFAULT_MODEL_URL`을 자체 호스팅 미러로 지정하세요. -* 다운로드만 수행합니다 — 사이드카를 시작하거나 활성 AI 프로바이더를 변경하지 않습니다. 진행률은 **설정 → AI**에서 확인할 수 있으며, 파일이 준비되면 거기서 **시작**을 누르세요. -* `OSWL_EMBEDDED_AUTO_DOWNLOAD=false`로 끌 수 있습니다. 에어갭 모드에서는 다운로드를 시도하지 않습니다(아래 참조). - -`llama-server(.exe)` 바이너리만 수동 단계입니다 — [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases)에서 받아 `embedded-ai/`(또는 `PATH`)에 두세요. 자세한 내용은 [임베디드 AI](Embedded-AI.md)를 참조하세요. - ---- +모델이 없고 `OSWL_EMBEDDED_AUTO_DOWNLOAD=true`이면 기동 시 백그라운드에서 미리 다운로드합니다. 이 작업은 사이드카를 시작하거나 AI 제공자를 활성화하지 않습니다. 실행 파일을 설치한 뒤 **설정 → AI**에서 시작하세요. 기동 시 미리 받기를 끄려면 값을 `false`로 설정합니다. 폐쇄망 모드에서는 모델 자동 다운로드가 비활성화됩니다. 모델 탐색·설정·문제 해결은 [내장 AI](Embedded-AI.md)를 참고하세요. ## 에어갭(오프라인) 환경에서 시작하기 +폐쇄망 모드는 지원되는 취약점 정보원을 스냅샷으로 전환하는 기능이며 네트워크 방화벽이 아닙니다. VCS·SMTP·웹훅·AI 주소는 환경에 맞게 별도로 설정하세요. + 아웃바운드 인터넷 접속이 없는 호스트의 경우: -1. 기동 전 `OSWL_AIRGAPPED_ENABLED=true`를 설정합니다. 취약점/위협 인텔 조회(OSV, deps.dev, EPSS, KEV)는 import된 오프라인 스냅샷에서 제공되며 아웃바운드 HTTP를 시도하지 않고, 임베디드 모델 자동 다운로드도 건너뜁니다. +1. 기동 전 `OSWL_AIRGAPPED_ENABLED=true`를 설정합니다. 취약점/위협 인텔 조회(OSV, deps.dev, EPSS, KEV)는 가져온 오프라인 스냅샷에서 제공되며 아웃바운드 HTTP를 시도하지 않고, 임베디드 모델 자동 다운로드도 건너뜁니다. 2. 인터넷에 연결된 머신에서 스냅샷 번들을 빌드합니다: ```bash @@ -93,7 +73,7 @@ OsWL은 임베디드 llama.cpp 사이드카를 통해 AI 기능을 완전한 온 ## 설정 마법사 -최초 실행 시(빈 데이터베이스), OsWL은 모든 요청을 `http://localhost:8080/setup`으로 리다이렉트합니다. +최초 실행 시(빈 데이터베이스), OsWL은 일반 애플리케이션 페이지 요청을 `http://localhost:8080/setup`으로 리다이렉트합니다. 마법사에서 수집하는 정보: @@ -111,35 +91,24 @@ OsWL은 임베디드 llama.cpp 사이드카를 통해 AI 기능을 완전한 온 ## 첫 로그인 -1. `http://localhost:8080/login`으로 이동합니다. -2. 설정 마법사에서 생성한 이메일과 비밀번호를 입력합니다. -3. **이중 인증(2FA)**이 활성화된 경우(관리자 설정 가능), 이메일로 발송된 6자리 OTP를 입력하라는 메시지가 표시됩니다. - * `local` 모드에서는 OTP가 서버 로그에 표시됩니다: `*** OTP CODE: NNNNNN ***` - * 개발용 단축키: 테스트 프로파일 사용 시 `000000`이 허용됩니다. -4. 임시 비밀번호로 첫 로그인 시, OsWL이 즉시 비밀번호 변경을 강제합니다. - ---- +1. `http://localhost:8080/login`에서 설정 마법사로 만든 계정으로 로그인합니다. +2. 이메일 2단계 인증이 필요한 경우 현재 세션에 발급된 6자리 코드를 입력합니다. 코드는 3분간 유효하며, 재발송에는 60초의 대기 시간이 있습니다. +3. 기본 로컬 GreenMail SMTP 설정에서는 수신한 코드가 서버 로그의 `*** OTP CODE: ... ***`에 표시됩니다. 외부 SMTP를 설정했다면 수신자 메일함에서 확인하세요. 고정 코드 `000000`으로 인증을 우회하는 기능은 없습니다. +4. 비밀번호 변경 대상으로 지정된 계정은 새 비밀번호를 설정해야 계속 사용할 수 있습니다. ## 테스트 데이터 시드 (로컬 전용) -로그인 후 다음을 호출하세요: - -``` -GET http://localhost:8080/data/test -``` +설정 마법사를 완료한 뒤 `GET /data/test`를 호출하면 기존 프로젝트·스캔·라이브러리 데이터를 삭제하고 `DemoImportCatalog`에 등록된 공개 저장소의 실제 Quick Import 작업을 큐에 추가합니다. 프로젝트 화면으로 이동한 후에도 가져오기는 비동기로 진행되며 네트워크 연결이 필요합니다. 고정 테스트 계정이나 미리 정해진 취약점 목록을 생성하는 기능은 아닙니다. -이 엔드포인트(**`local` 프로파일에서만** 사용 가능): +이 개발용 엔드포인트는 local 소스 세트의 `local`/`test` 프로필에서 제공하며 운영 JAR에는 포함되지 않습니다. `local`에서는 `/data/**`에 인증 없이 접근할 수 있으므로, 데이터를 초기화하는 이 기능은 격리된 개발 인스턴스에서만 사용하세요. -* 기존의 모든 프로젝트, 스캔, 라이브러리, CVE를 삭제합니다. -* Maven과 npm 에코시스템의 여러 프로젝트, 다양한 심각도의 수십 개 CVE, 혼합된 라이선스 상태, 트렌드 시각화를 위한 다수의 히스토리 스캔이 포함된 풍부한 현실적 데이터셋으로 DB를 재구성합니다. +`GET /data/test-api-key`는 현재 첫 번째 프로젝트에 연결된 API 키를 발급합니다. 프로젝트가 없으면 404를 반환하므로 데모 가져오기로 프로젝트가 생성될 때까지 기다리세요. -테스트 API 키도 다음에서 확인할 수 있습니다: +## UI/접근성 테스트 하네스 (개발자 전용) -``` -GET http://localhost:8080/data/test-api-key -``` +`./gradlew uiTest`는 실제 애플리케이션을 대상으로 기존 Playwright 브라우저 테스트를 실행합니다. 접근성 테스트는 지정된 페이지에서 axe-core 검사를 수행하고, 다른 테스트는 화면 조작과 요청 흐름 등을 확인합니다. 필요한 경우 Chromium을 다운로드하며, `test`/`check`와 별도로 실행합니다. ---- +JUnit HTML 리포트는 `build/reports/tests/uiTest/`, axe 리포트는 `build/reports/axe/`에 저장됩니다. 폐쇄망에서는 브라우저 실행 파일과 빌드 의존성을 미리 준비하고, 필요한 경우 `PLAYWRIGHT_BROWSERS_PATH`를 지정하세요. 브라우저 설치만으로 빌드 의존성까지 준비되지는 않습니다. ## 접근 제어 (권장) diff --git a/docs/ko/Glossary.md b/docs/ko/Glossary.md index 43570151..88b9a1bd 100644 --- a/docs/ko/Glossary.md +++ b/docs/ko/Glossary.md @@ -170,7 +170,7 @@ OsWL은 사용자당 하나의 활성 세션만 허용합니다. 다른 브라 오픈소스 패키지에 초점을 맞춘 Google 호스팅 취약점 데이터베이스 및 API([osv.dev](https://osv.dev)). OsWL은 영향받는 버전 범위와 수정 버전을 포함한 어드바이저리 데이터를 OSV에서 조회합니다. **OTP (일회용 비밀번호, One-Time Password)** -2FA 인증의 두 번째 요소로서 사용자 이메일 주소로 발송되는 6자리 코드. 로컬 개발 프로파일에서 OTP 코드는 서버 로그에 `*** OTP CODE: NNNNNN ***`으로 표시됩니다. +2FA 인증의 두 번째 요소로서 사용자 이메일 주소로 발송되는 6자리 코드. 로컬 개발 프로필에서 OTP 코드는 서버 로그에 `*** OTP CODE: NNNNNN ***`으로 표시됩니다. **의존성 경로 (Dependency Path)** 루트 프로젝트에서 특정 라이브러리까지 이어지는 패키지 체인. 하나의 라이브러리는 여러 경로(직접 및/또는 전이적)로 도달할 수 있습니다. OsWL은 컴포넌트별로 해결된 모든 경로를 기록하고 표시합니다. diff --git a/docs/ko/Home.md b/docs/ko/Home.md index deb8a4f8..b13c4223 100644 --- a/docs/ko/Home.md +++ b/docs/ko/Home.md @@ -1,5 +1,7 @@ # OsWL 문서 +[1.0.5.1 변경 사항](Whats-New-v1.0.5.1.md) + **OsWL** (Open-source Software Watchlist) 문서 허브에 오신 것을 환영합니다. OsWL은 단일 마이크로서비스부터 전체 제품 포트폴리오까지 모든 OSS 의존성의 CVE 취약점과 라이선스 컴플라이언스를 팀이 한 곳에서 추적할 수 있도록 하는 사내 **SCA(Software Composition Analysis)** 플랫폼입니다. @@ -8,6 +10,7 @@ OsWL은 단일 마이크로서비스부터 전체 제품 포트폴리오까지 ## 탐색 + | 페이지 | 내용 | |---|---| | [v1.0.4 새로운 기능](Whats-New-v1.0.4.md) | SBOM / VEX / SARIF 내보내기, CI 게이트, 연속 모니터링, 조직 대시보드, 폐쇄망 모드 | @@ -24,13 +27,13 @@ OsWL은 단일 마이크로서비스부터 전체 제품 포트폴리오까지 | [관리](Administration.md) | 사용자 관리, 역할, 감사 로그, 보안 및 SMTP 설정 | | [권한 레이어](Authorization-Layers.md) | 역할 템플릿 vs 프로젝트 멤버십 | | [프로젝트 접근 제어](Project-Access-Control.md) | ACL 기술 참고 | -| [운영 배포 체크리스트](Production-Deployment-Checklist.md) | `prod` 프로파일 출시 전 점검 | +| [운영 배포 체크리스트](Production-Deployment-Checklist.md) | `prod` 프로필 출시 전 점검 | | [데이터베이스 스키마](Database-Schema.md) | `ddl-auto` 전략 및 `db/` 마이그레이션 | | [스캔 API 보안](Scan-Api-Security.md) | CLI 스캔 제출 보호 개요 | | [API 레퍼런스](API-Reference.md) | 전체 REST 엔드포인트 목록 | | [용어사전](Glossary.md) | OsWL 모든 용어 정의 | -> 영어 문서는 [`docs/`](../Home.md)에, 일본어 문서는 [`docs/ja/`](../ja/Home.md)에 있습니다. +> 영어 문서는 [`docs/en/`](../en/Home.md)에, 일본어 문서는 [`docs/ja/`](../ja/Home.md)에 있습니다. --- @@ -64,8 +67,8 @@ OsWL은 단일 마이크로서비스부터 전체 제품 포트폴리오까지 ## 도움 받기 -* **Swagger UI** (로컬 프로파일만): `http://localhost:8080/swagger-ui.html` -* **H2 콘솔** (로컬 프로파일만): `http://localhost:8080/h2-console` +* **Swagger UI** (로컬 프로필만): `http://localhost:8080/swagger-ui.html` +* **H2 콘솔** (로컬 프로필만): `http://localhost:8080/h2-console` * **이슈**: [GitHub Issues](https://github.com/SalkCoding/Oswl/issues) 운영 환경에서는 API 문서와 H2 콘솔이 비활성화됩니다. 이 문서와 [API 레퍼런스](API-Reference.md)를 참고하세요. diff --git a/docs/ko/Production-Deployment-Checklist.md b/docs/ko/Production-Deployment-Checklist.md index 3cdaba53..15137183 100644 --- a/docs/ko/Production-Deployment-Checklist.md +++ b/docs/ko/Production-Deployment-Checklist.md @@ -2,11 +2,11 @@ OsWL을 인터넷에 공개하기 전에 확인할 한 페이지 목록입니다. **`prod`를 `local` 기본값**(H2, Swagger, `/data/**`, 커밋된 암호화 키)으로 실행하지 마세요. -## 1. 프로파일 및 빌드 +## 1. 프로필 및 빌드 | 확인 | 조치 | |------|------| -| 프로파일 | `SPRING_PROFILES_ACTIVE=prod` 설정 | +| 프로필 | `SPRING_PROFILES_ACTIVE=prod` 설정 | | JAR | `./gradlew bootJar verifyProdJar`로 빌드 — JAR에 `TestDataController`가 **없어야** 함 | | 로컬 전용 코드 | `src/local/java`는 `bootRun`/개발용이며 `bootJar`에 포함되지 않음 | @@ -19,32 +19,32 @@ OsWL을 인터넷에 공개하기 전에 확인할 한 페이지 목록입니다 | `DB_PASSWORD` | DB 비밀번호 | | `OSWL_ENCRYPTION_KEY` | 인스턴스 암호화 키 (`openssl rand -base64 32`) | -`.env.prod.example` → `.env.prod` 복사 후 모든 값 입력. `application-prod.yaml`에는 DB·암호화 **기본값 없음**. +`deploy/docker/.env.prod.example` → `.env.prod` 복사 후 모든 값 입력. `application-prod.yaml`에는 DB·암호화 **기본값 없음**. -기동 시 누락 변수 등은 로그의 **`OSWL STARTUP WARNINGS`** 블록에 한 번에 출력됩니다. **`prod`에서 `OSWL_ENCRYPTION_KEY`가 없으면 기동 실패** — 출시 전 안정적인 키를 설정하세요. (`local` 프로파일은 개발 전용으로 임시 키를 사용할 수 있습니다.) +시작 후 설정 경고는 `OSWL STARTUP WARNINGS` 로그 블록에 모아서 출력됩니다. 운영 암호화 키 누락이나 잘못된 DB 설정 등은 이 블록이 출력되기 전에 시작 실패를 일으킬 수 있습니다. 운영에서는 고정된 `OSWL_ENCRYPTION_KEY`를 유지하세요. `local` YAML의 고정 대체 키는 개발 전용이며 운영에서 사용하면 안 됩니다. ## 3. 네트워크 바인딩 -| 확인 | 조치 | -|------|------| -| 기본 바인딩 | `SERVER_ADDRESS=127.0.0.1` (`application-prod.yaml`) | -| 공개 접근 | **nginx / Caddy / Traefik**(또는 클라우드 LB) 앞단, TLS 종료 | -| 직접 `0.0.0.0` | JVM HTTP 스택 노출을 감수할 때만; 방화벽·위험 문서화 | - -`docker-compose.prod.yml`은 기본 **`127.0.0.1:8080:8080`** 매핑. +호스트에서 JVM을 직접 실행하면 `application-prod.yaml`의 기본값인 `SERVER_ADDRESS=127.0.0.1`로 바인딩하며, 같은 호스트의 리버스 프록시가 연결할 수 있습니다. **Docker Compose에서는 컨테이너 내부의 `SERVER_ADDRESS=0.0.0.0`**을 사용해야 Docker가 애플리케이션으로 트래픽을 전달할 수 있습니다. 호스트 공개 범위는 별도입니다. `deploy/docker/compose.prod.yml`은 호스트 포트를 **`127.0.0.1:8080:8080`**에만 연결합니다. 운영 예제는 이 컨테이너 설정을 사용하며, 기존 `.env.prod`도 업그레이드 시 확인해야 합니다. -프록시가 `X-Forwarded-Proto`를 내면 HSTS·보안 쿠키를 위해 `server.forward-headers-strategy=framework` 사용 (`application.yaml` 기본). +리버스 프록시에서 TLS를 종료하세요. 제공된 호스트 루프백 포트 매핑을 사용할 때는 Docker 호스트에서 프록시를 실행합니다. 프록시도 컨테이너라면 공유 Docker 네트워크의 서비스 주소로 연결하세요. 전달 헤더는 신뢰하는 프록시에서 온 것만 수용해야 합니다. ## 4. Docker Compose (운영) +저장소 루트에서 실행합니다. 기존 `.env.prod` 값은 유지하고 새 설치에서만 템플릿을 복사합니다. 두 Compose 파일의 기본 프로젝트명은 `oswl`입니다. 기존 설치가 다른 프로젝트명을 사용했다면 `-p YOUR_EXISTING_PROJECT` 또는 `COMPOSE_PROJECT_NAME`으로 그 이름을 유지해야 기존 볼륨에 연결됩니다. [배포 파일 안내](../../deploy/README.md)를 참고하세요. + ```bash -cp .env.prod.example .env.prod +cp deploy/docker/.env.prod.example .env.prod # DB_*, OSWL_ENCRYPTION_KEY, SMTP_* 편집 -docker compose -f docker-compose.prod.yml up -d --build +docker compose --env-file .env.prod -f deploy/docker/compose.prod.yml up -d --build ``` +Compose는 `--env-file`로 `.env.prod`를 읽습니다. `java -jar`나 `bootRun`으로 직접 실행할 때는 이 파일을 자동으로 읽지 않으므로, 환경 변수를 내보내거나 서비스 관리 도구에 등록하세요. 운영 환경의 첫 시작 전에 DB 스키마를 준비해야 합니다(§9 참고). + 로그 확인: 누락 env 배너 없음, PostgreSQL 연결, H2/Swagger URL 없음. +`deploy/docker/compose.prod.yml`은 컨테이너 자체의 stdout/stderr(docker `json-file` 드라이버, 100MB × 10개)와 앱의 자체 회전 파일 로그(`oswl-logs-prod` 볼륨에 마운트) 둘 다 상한을 둡니다 — 후자는 §5 참고. + ## 5. 로깅 및 관측 | 확인 | 조치 | @@ -55,6 +55,17 @@ docker compose -f docker-compose.prod.yml up -d --build | 메트릭 스크랩 | Prometheus를 `/actuator/prometheus`로 지정 — 스크래퍼도 관리자 인증 필요 | | Actuator 인증 | **SYSTEM_ADMIN** 세션 필요 (공개 아님) | +### 로그 로테이션 및 요청 상관관계 + +`local`/`test`는 콘솔 전용입니다. `prod`에서는 `logback-spring.xml`이 회전 파일 로그를 추가로 기록합니다: + +| 변수 | 기본값 | 용도 | +|------|--------|------| +| `OSWL_LOG_DIR` | `./logs` (도커: `/var/log/oswl`, §4 참고) | `oswl.log` 저장 디렉터리. 100MB 또는 하루 단위로 회전, 최대 30개 파일 보관, 전체 5GB 상한. | +| `OSWL_LOG_JSON` | `false` | `true`로 설정하면 파일(콘솔 아님)이 한 줄당 JSON 오브젝트 하나로 바뀝니다 — 로그 수집기를 여기에 연결해 SIEM으로 보내세요. | + +모든 요청에는 `requestId`가 찍히고(응답 헤더 `X-Request-Id`로도 반환), 인증된 요청이라면 `userId`도 함께 찍힙니다 — 둘 다 MDC를 통해 해당 요청의 모든 로그 라인에 나타나므로(평문 모드는 `[req=...] [user=...]`, JSON 모드는 최상위 필드), 특정 요청을 언급하는 지원 티켓을 타임스탬프로 grep하지 않고도 로그 전체에서 추적할 수 있습니다. + ## 6. 운영에서 활성화되는 보안 - Springdoc / Swagger UI: **비활성** @@ -75,7 +86,7 @@ docker compose -f docker-compose.prod.yml up -d --build | 변수 | 기본값 | 활성화 시 동작 | |---|---|---| -| `OSWL_FLYWAY_ENABLED` | `false` | `baseline-on-migrate` 기반 버전 마이그레이션. 먼저 전체 베이스라인을 생성해야 합니다 | +| `OSWL_FLYWAY_ENABLED` | `false` | 제공되는 V1 및 이후 마이그레이션 실행. 기존 스키마는 먼저 검토 | | `OSWL_AIRGAPPED_ENABLED` | `false` | 취약점·위협 인텔 조회를 반입된 오프라인 스냅샷에서 처리, 외부 HTTP 없음 | | `OSWL_GATE_*` | [v1.0.4 새로운 기능](Whats-New-v1.0.4.md) 참고 | `POST /api/scan/gate`의 기본 임계값 | @@ -98,6 +109,8 @@ docker compose -f docker-compose.prod.yml up -d --build ### 7.1 폐쇄망 / 오프라인 스냅샷 (v1.0.4) +이 모드는 지원되는 취약점·위협 정보 피드를 스냅샷으로 전환하는 기능이며 네트워크 방화벽은 아닙니다. 폐쇄망에서는 VCS, SMTP, 웹훅, 외부 AI 프로바이더도 별도로 설정하세요. + `OSWL_AIRGAPPED_ENABLED=true`로 설정하면 취약점·위협 인텔 조회(OSV, deps.dev, EPSS, CISA KEV)를 실시간 외부 API 대신 반입된 오프라인 스냅샷에서 처리합니다. 보강을 위한 아웃바운드 HTTP는 시도되지 않습니다. | 단계 | 조치 | @@ -105,7 +118,7 @@ docker compose -f docker-compose.prod.yml up -d --build | 1. 번들 제작 | 인터넷에 연결된 머신에서 `oswl-vdb` 빌더를 실행합니다. 래퍼 스크립트: `scripts/oswl-vdb/oswl-vdb.sh`(Linux/macOS) 또는 `scripts/oswl-vdb/oswl-vdb.ps1`(Windows). 둘 다 `./gradlew vdbBuild --args="..."`를 호출합니다. | | 2. 번들 대상 선정 | 타깃 인스턴스가 실제로 스캔한 컴포넌트를 `GET /api/admin/snapshot/wanted-list`(SYSTEM_ADMIN)로 낸 뒤 `build --wanted wanted-list.jsonl`에 넘기세요. 빌더는 전체 업스트림 미러 대신 실제 사용 컴포넌트만 가져옵니다. | | 3. 번들 반입 | `POST /api/admin/snapshot/import?mode=replace|merge`(multipart `.zip`). 큰 번들은 `OSWL_AIRGAPPED_IMPORT_DIR` 화이트리스트 디렉터리를 설정한 뒤 `POST /api/admin/snapshot/import-from-path`에 `{"path":"bundle.zip","mode":"merge"}`로 요청하세요. | -| 4. 모델 배치 (내장 AI 사용 시) | 폐쇄망 호스트는 자동 다운로드를 비활성화합니다. `.gguf` 파일을 `embedded-ai/`에 직접 넣거나 내부 미러를 운영하세요(§8 참고). | +| 4. 모델 배치(내장 AI 사용 시) | 오프라인 서버를 시작하기 전에 `embedded-ai/llama/`에 실행 파일, `embedded-ai/model/<계열>/`에 검증한 모델을 반입하세요. 내부 미러를 지정해도 에어갭 모드의 다운로드는 비활성화됩니다. §8 참고. | `oswl-vdb build` 옵션(`VdbBuilderCli` 참고): - `--sources osv,epss,kev,depsdev`(기본값 전체). @@ -118,48 +131,23 @@ docker compose -f docker-compose.prod.yml up -d --build - `merge`는 `(source, entry_key)` 기준으로 upsert하고 `"_deleted":true` 라인은 삭제로 처리합니다. - v2 번들은 `meta.json`에 기록된 파일별 SHA-256 체크섬을 검증하며, 불일치 시 전체 번들을 거부하고 기존 스토어를 변경하지 않습니다. -정의 최신성(E7): `OSWL_AIRGAPPED_STALENESS_WARN_DAYS`(기본값 `7`)와 `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS`(기본값 `30`)는 반입된 스냅샷의 소스별 `sourceAsOf` 날짜 중 가장 오래된 값을 기준으로 관리 UI 배지를 결정합니다. +정의 최신성: `OSWL_AIRGAPPED_STALENESS_WARN_DAYS`(기본값 `7`)와 `OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS`(기본값 `30`)는 반입된 스냅샷의 소스별 `sourceAsOf` 날짜 중 가장 오래된 값을 기준으로 관리 UI 배지를 결정합니다. 번들이 50MB를 초과하면 `OSWL_MULTIPART_MAX_FILE_SIZE` / `OSWL_MULTIPART_MAX_REQUEST_SIZE`(기본값 각 `50MB`)를 조정해야 할 수 있습니다. -## 8. 내장 AI 모델 (선택, 온프레미스) - -**내장 AI**(설정 → AI → 로컬)를 클라우드 프로바이더 대신 또는 함께 쓸 계획일 때만 해당됩니다. +## 8. 내장 AI (선택, CPU 전용) -| 확인 | 조치 | -|------|------| -| 서버 바이너리 | [llama.cpp releases](https://github.com/ggml-org/llama.cpp/releases)에서 플랫폼에 맞는 `llama-server(.exe)`를 받아 `embedded-ai/`(또는 그 하위 `bin/`, 혹은 `PATH`)에 배치 — 유일한 수동 단계입니다 | -| 모델 | 별도 조치 불필요 — 신규 설치에서 **시작**을 누르면 Apache 2.0 라이선스인 Qwen3-1.7B 모델(~1.2GB)이 자동으로 다운로드됩니다(SHA256 검증, UI에 진행률 표시) | -| 폐쇄망 환경 | 자동 다운로드는 최초 1회 아웃바운드 인터넷 접근이 필요합니다. 인터넷이 없다면 시작을 누르기 전 직접 받은 `.gguf` 파일을 `embedded-ai/`에 미리 넣어두세요 | -| 커스텀 모델 | OsWL이 번들/자동 다운로드하는 것은 Qwen3-1.7B뿐입니다. 다른 `.gguf`(다른 크기나 라이선스)를 쓰고 싶다면 해당 모델의 라이선스를 직접 확인한 뒤 `embedded-ai/`에 넣으세요 — [내장 AI](Embedded-AI.md) 참고 | -| 디렉터리 | 기본값은 JVM이 시작되는 작업 디렉터리 기준 `./embedded-ai` — 다른 경로를 쓰려면 `OSWL_EMBEDDED_AI_DIR` 설정 | +기본은 **Qwen3.5-2B Q4_K_M**, 선택 모델은 **Gemma 4 E2B Q4_K_M**입니다. OsWL·PostgreSQL 동시 실행과 간헐적 사용 기준으로 Qwen 예상 최소 2 vCPU / RAM 8 GB, Gemma 권장 4 vCPU / RAM 16 GB를 잡습니다. 성능 보증이 아닌 추정치이며 CPU 크레딧과 스캔 중첩을 확인해야 합니다. -Gradle 태스크나 별도 스크립트가 필요 없습니다 — 다운로드는 시작 버튼을 처음 누를 때 앱 -자체에서 실행되므로, 단순히 `java -jar app.jar`로 배포해도 동작합니다. +실행 파일은 `embedded-ai/llama/`, 모델은 `model/Qwen/`, `model/Gemma/`에 둡니다. Qwen만 자동 다운로드합니다. 기본 GPU 레이어 0, 스레드 1, 생성 슬롯 1, 컨텍스트 8192입니다. 고정 URL·해시·크기를 함께 유지하세요. 기존 `models-v1`은 새 모델이 아닙니다. Docker는 폴더 마운트와 Linux 실행 파일이 필요합니다. -### 내장 AI 튜닝 (B1 / v1.0.4) - -기본값은 운영 환경에서 안전합니다. 측정된 이유가 있을 때만 오버라이드하세요. - -| 변수 | 기본값 | 용도 | -|---|---|---| -| `OSWL_EMBEDDED_AI_CONTEXT` | `8192` | 전체 컨텍스트 크기(`-c`). `--parallel` 사용 시 슬롯 간에 나뉘며, 슬롯 컨텍스트가 2048 아래로 떨어지면 경고 로그가 출력됩니다. | -| `OSWL_EMBEDDED_AI_GPU_LAYERS` | `-1` | `-ngl`: `-1`은 빌드가 지원하는 만큼 오프로드(`999` 전달), `0`은 CPU 전용, 양수는 명시적 레이어 수 | -| `OSWL_EMBEDDED_AI_THREADS` | `0` | `-t`: `0`은 llama.cpp 자동 감지, 양수는 스레드 수 고정 | -| `OSWL_EMBEDDED_AI_PARALLEL` | `4` | `--parallel N --cont-batching` 활성화; 1보다 크면 동시 AI 호출이 직렬화되지 않습니다. | -| `OSWL_EMBEDDED_AI_FLASH_ATTN` | `true` | `-fa`(flash attention) 추가 | -| `OSWL_EMBEDDED_AI_CACHE_REUSE` | `256` | `--cache-reuse` 토큰 수; `0` 이하면 비활성화 | -| `OSWL_EMBEDDED_AI_EXTRA_ARGS` | (비어 있음) | `llama-server` CLI 인자를 공백으로 구분해 그대로 덧붙임(관리자 전용 설정, 요청 입력 아님) | -| `OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC` | `120` | `/health` 응답을 기다리는 시간(초). 시간 내 실패 시 CPU 전용 재시도 또는 다음 모델 후보로 넘어갑니다. | -| `OSWL_EMBEDDED_DEFAULT_MODEL_URL` / `SHA256` / `SIZE_BYTES` | 업스트림 Hugging Face `ggml-org/Qwen3-1.7B-GGUF` | 기본 Qwen3-1.7B 다운로드용 매칭 세트; 자체 호스팅 미러 사용 시 셋 모두 오버라이드(바이트 단위로 동일한 재호스팅이면 URL만 변경) | -| `OSWL_EMBEDDED_FALLBACK_MODEL_URL` | Hugging Face | 기본 URL 실패 시 1회 재시도; primary와 같거나 비워두면 재시도 비활성화 | -| `OSWL_EMBEDDED_AUTO_DOWNLOAD` | `true` | 부팅 시 기본 모델을 백그라운드로 미리 다운로드(다운로드만, 사이드카는 시작 안 함). **`OSWL_AIRGAPPED_ENABLED=true`이면 무시됩니다**. | +전체 사양·구조·체크섬·미러 및 폐쇄망 설치·CPU 조정·모델과 언어 선택·재배포 고지는 [내장 AI](Embedded-AI.md)를 참고하세요. ## 9. 데이터베이스 스키마 (업그레이드) OsWL **`prod`는 Hibernate `ddl-auto=validate`** — 기동 시 PostgreSQL을 자동 변경하지 않습니다. -| 프로파일 | 스키마 관리 | +| 프로필 | 스키마 관리 | |----------|-------------| | `local` | `ddl-auto: update` — H2가 JPA 엔티티를 따름 | | `prod` | `ddl-auto: validate` — 업그레이드 시 SQL 스크립트 수동 실행 | @@ -177,7 +165,7 @@ OsWL **`prod`는 Hibernate `ddl-auto=validate`** — 기동 시 PostgreSQL을 ### Flyway (v1.0.4, 옵트인) -`OSWL_FLYWAY_ENABLED=true`로 설정하면 수동 스크립트 대신 Flyway가 스키마를 관리합니다. `baseline-on-migrate`가 켜져 있어 데이터가 있는 기존 DB도 거부되지 않고 베이스라인 처리되지만, **켜기 전에** 현재 스키마와 일치하는 전체 베이스라인 마이그레이션을 만들어 두어야 합니다. 기본값 `false`에서는 아무것도 달라지지 않습니다. +`OSWL_FLYWAY_ENABLED=true`로 `src/main/resources/db/migration/`의 버전별 마이그레이션을 활성화합니다. 기본값은 `false`입니다. 저장소에는 이미 `V1__baseline.sql`과 이후 마이그레이션이 있습니다. 빈 PostgreSQL DB에서는 V1부터 순서대로 실행한 후 Hibernate가 스키마를 검증합니다. Flyway 이력이 없는 기존 DB에서는 `baseline-on-migrate`가 V1 실행 없이 버전 1을 기록하고 V2부터 실행합니다. 활성화 전에 백업하고 기존 스키마와 마이그레이션을 비교하세요. 이미 수동 적용한 변경과 후속 마이그레이션이 충돌할 수 있습니다. 공유 DB에 적용한 마이그레이션 파일은 재생성하거나 수정하지 마세요. SQL을 수동 관리한다면 대상 버전에 필요한 변경을 순서대로 모두 적용해야 합니다. 아래의 일부 레거시 스크립트만으로 신규 설치 스키마를 구성할 수는 없습니다. ### v1.0.4 신규 컬럼 @@ -194,6 +182,10 @@ ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); （Flyway 사용자: 새로운 `libraries` 컬럼 3개는 `V3__component_metadata.sql`에서 처리됩니다. [데이터베이스 스키마](Database-Schema.md) 참고.） +### v1.0.5: Spring Session / ShedLock 테이블 (옵트인) + +**다중 인스턴스** 배포로 전환할 때만 필요합니다(§12 참고). `spring_session`, `spring_session_attributes`, `shedlock`이 추가됩니다. Flyway 사용자는 `db/migration/V10__spring_session_and_shedlock.sql`에서, 수동 스크립트 사용자는 `db/spring_session_and_shedlock.sql`을 실행하면 됩니다. 단일 인스턴스 배포라면 완전히 건너뛰어도 됩니다 — `OSWL_SESSION_STORE_TYPE=jdbc` 및/또는 `OSWL_SCHEDULER_LOCK_ENABLED=true`를 설정하기 전까지는 이 테이블을 아무도 참조하지 않습니다. + ## 10. 배포 후 스모크 테스트 1. HTTPS 리버스 프록시로만 UI 접근. @@ -205,10 +197,39 @@ ALTER TABLE scan_results ADD COLUMN IF NOT EXISTS ai_locale varchar(16); ## 11. 운영 -- PostgreSQL 백업, `OSWL_ENCRYPTION_KEY`는 시크릿 매니저에 보관(분실 시 VCS 토큰 복호 불가). +- PostgreSQL 백업, `OSWL_ENCRYPTION_KEY`는 시크릿 매니저에 보관(분실 시 VCS 토큰 복호 불가) — 전체 절차와 복구 리허설 스크립트는 [백업 및 복구](Backup-And-Restore.md) 참고. - 유출 시 API 키·SMTP 자격 증명 교체. - `local`로 돌리면 안 되는 이미지에 `SPRING_PROFILES_ACTIVE=local` 넣지 않기. +## 12. 다중 인스턴스 배포 (수평 확장 / HA) + +OsWL은 기본적으로 **단일 인스턴스**로 동작합니다 — 인메모리 HTTP 세션과 인스턴스별 `@Scheduled` 작업이죠. 컨테이너/프로세스 1개일 때는 이걸로 충분하지만, 로드밸런서 뒤에 두 번째 인스턴스를 두면 문제가 생깁니다: 사용자 세션이 로그인했던 인스턴스에 고정되고, 야간 모니터링/유예 만료/휴지통 정리 작업이 클러스터당 1회가 아니라 **인스턴스마다** 실행됩니다. 이 절은 동일한 PostgreSQL DB를 바라보는 **인스턴스 2대 이상**을 배포할 때만 해당됩니다. + +**1. 스키마부터 적용하세요.** 아래 기능을 켠 인스턴스를 기동하기 전에 `spring_session`, `spring_session_attributes`, `shedlock`이 존재하는지 먼저 확인하세요(§9, "v1.0.5: Spring Session / ShedLock 테이블"). 테이블이 없는 상태에서 아래 환경변수부터 배포하면 첫 요청/스케줄 시점에 모든 인스턴스가 죽습니다. + +**2. 환경 변수:** + +| 변수 | 용도 | +|------|------| +| `OSWL_SESSION_STORE_TYPE=jdbc` | HTTP 세션을 Tomcat 인메모리 저장에서 PostgreSQL(`spring_session`)로 옮깁니다. 로그인 상태와 단일세션 강제(`maximumSessions(1)`)가 인스턴스별이 아니라 클러스터 전체에서 동작합니다. | +| `OSWL_SCHEDULER_LOCK_ENABLED=true` | 스케줄 작업 3종(`ContinuousMonitoringScheduler`, `DeferExpiryScheduler`, `TrashCleanupScheduler`)을 클러스터 전역 락(ShedLock, `shedlock` 테이블 기반)으로 감싸서 사이클당 한 인스턴스에서만 실행되도록 합니다. | + +실제 다중 인스턴스 배포에서는 둘 다 함께 설정하세요 — 하나만 켜면 나머지 한쪽 공백이 그대로 남습니다. + +**3. 로드밸런서:** nginx, ALB 등 일반적인 L7 LB면 됩니다 — `OSWL_SESSION_STORE_TYPE=jdbc`를 설정하면 세션 상태가 인스턴스 메모리가 아니라 PostgreSQL에 중앙화되므로 **스티키 세션이 필요 없습니다.** + +**4. 단, 스캔 진행률 폴링은 예외입니다.** Quick Import/스캔 보강 중 표시되는 실시간 진행률(`EnrichmentProgressHolder`, `ScanStatusEmitterRegistry`)은 여전히 인스턴스별 인메모리 상태이며 DB에 저장되지 않습니다. 권장 방법: 로드밸런서 라우팅을 **활성 스캔이 진행되는 동안만** 스티키하게(예: 세션 기준 쿠키 어피니티) 설정해, 진행률 폴링 요청이 실제로 스캔을 실행 중인 인스턴스로 되돌아가도록 하세요. 스캔 진행률을 DB로 옮기고 UI를 순수 폴링 방식으로 바꾸는 대안은 더 큰 변경이라 별도로 추적하며, 지금은 스티키 라우팅이 실용적인 기본값입니다. + +**5. 롤링 배포 순서:** + 1. 대기 중인 DB 마이그레이션을 먼저 적용하세요(구버전 앱 코드가 새 스키마를 견뎌야 하므로 — `db/migration`은 이 원칙대로 추가 전용으로 작성됩니다). + 2. 인스턴스를 한 번에 하나씩 순차적으로 교체하고(전체 동시 교체 금지), 다음으로 넘어가기 전에 새 인스턴스가 준비성 검사를 통과할 때까지 기다리세요. + 3. `OSWL_SESSION_STORE_TYPE=jdbc`를 설정하면 세션이 인스턴스 메모리가 아니라 PostgreSQL에 있으므로, 롤링 재시작으로 사용자가 로그아웃되지 않습니다. + +**6. 정상 동작 확인:** + - 인스턴스 A에 로그인한 뒤, LB가 인스턴스 B로 라우팅하는 후속 요청을 보내도 인증이 유지되는지(`/login`으로 리다이렉트되지 않는지) 확인합니다. + - 인스턴스 A를 내려도 세션(및 단일세션 강제)이 인스턴스 B에서 계속 동작하는지 확인합니다. + - 야간 작업 실행 후 두 인스턴스의 로그를 확인해, 해당 작업의 로그 라인이 두 곳이 아니라 정확히 한 인스턴스에서만 나타나는지 확인합니다. + --- -**로컬 개발:** `SPRING_PROFILES_ACTIVE=local`, `.env.example` → `.env`, `OSWL_ENCRYPTION_KEY` 설정, `./gradlew bootRun`. H2, H2 콘솔, Swagger, `GET /data/test`는 이 프로파일에서만. +**로컬 개발:** `./gradlew bootRun`(PowerShell: `.\gradlew.bat bootRun`)으로 `local` 프로필과 H2를 사용합니다. 로컬 YAML에는 개발 전용 암호화 키가 있으며 필요하면 프로세스 환경 변수로 변경하세요. `.env`는 실행 도구가 명시적으로 읽을 때만 적용됩니다. diff --git a/docs/ko/Quick-Import.md b/docs/ko/Quick-Import.md index 25b48308..b9574fef 100644 --- a/docs/ko/Quick-Import.md +++ b/docs/ko/Quick-Import.md @@ -121,7 +121,7 @@ GitLab·Bitbucket 자체 호스팅은 VCS 연결의 API 기본 URL로 지원합 ## REST API 요약 -[API 레퍼런스 — Quick Import](API-Reference.md#quick-import) 참고. 인터랙티브 스키마는 Swagger UI(`local` 프로파일). +[API 레퍼런스 — Quick Import](API-Reference.md#quick-import) 참고. 인터랙티브 스키마는 Swagger UI(`local` 프로필). --- diff --git a/docs/ko/Scan-Api-Security.md b/docs/ko/Scan-Api-Security.md index cf80f75b..c380e2d4 100644 --- a/docs/ko/Scan-Api-Security.md +++ b/docs/ko/Scan-Api-Security.md @@ -30,7 +30,7 @@ CSRF 예외는 다음만 해당합니다. |------|-----------| | 1 | `Authorization: Bearer` **프로젝트 API 키** | | 2 | 본문의 제출자 **이메일·비밀번호** | -| 3 | 제출자에게 **`SCAN_SUBMIT`** 권한 및 해당 프로젝트 **`project_members`** 등록 | +| 3 | 제출자에게 **`SCAN_SUBMIT`** 권한이 있고, 직접 프로젝트 멤버십 또는 팀 권한 부여를 통해 프로젝트에 접근할 수 있는지 확인합니다. | 역할 템플릿과 프로젝트 멤버십: [권한 레이어](Authorization-Layers.md). diff --git a/docs/ko/Security-Center.md b/docs/ko/Security-Center.md index 6fea4540..380be446 100644 --- a/docs/ko/Security-Center.md +++ b/docs/ko/Security-Center.md @@ -89,7 +89,7 @@ OsWL은 표준 CVSS 3.x 구간에 따라 기본 점수를 심각도로 분류합 | SBOM (CycloneDX) | `GET /api/projects/{projectId}/sbom` | CycloneDX 1.6 JSON | | VEX | `GET /api/projects/{projectId}/vex` | CycloneDX VEX — 트리아지 판단 포함 | | SARIF | `GET /api/projects/{projectId}/sarif` | SARIF 2.1.0, GitHub 코드 스캐닝 업로드 가능 | -| 컴플라이언스 리포트 | `GET /security-center/compliance-report` | 인쇄용 HTML (*인쇄 → PDF로 저장* 사용) | +| 컴플라이언스 리포트 | `GET /projects/{projectId}/security-center/compliance-report` | 인쇄용 HTML (*인쇄 → PDF로 저장* 사용) | | CVE / 라이선스 CSV | — | 현재 필터가 적용된 목록 | 일괄 작업에는 선택한 컴포넌트를 모두 수정 버전으로 올리는 **업그레이드 PR 생성**도 포함됩니다. diff --git a/docs/ko/User-Guide.md b/docs/ko/User-Guide.md index 949ec9a6..06d66855 100644 --- a/docs/ko/User-Guide.md +++ b/docs/ko/User-Guide.md @@ -1,5 +1,7 @@ # 사용자 가이드 +[1.0.5.1 변경 사항](Whats-New-v1.0.5.1.md) + 이 페이지는 OsWL 웹 대시보드의 일상적인 사용법을 설명합니다. **시스템 관리자**가 아니면 **멤버로 등록된 프로젝트**만 보입니다. 프로젝트 안에서 할 수 있는 일은 **역할 템플릿**(Admin / Developer / Viewer)에 따릅니다. [권한 레이어](Authorization-Layers.md) 참고. @@ -96,7 +98,7 @@ OsWL은 입력 컨텍스트 해시로 AI 요약을 캐싱하므로, 재스캔 ## 내장 AI 모델 -OsWL의 내장 로컬 AI는 llama.cpp 사이드카를 실행하며, 기본 모델로 **Qwen3 1.7B** GGUF를 사용합니다. 최초 부팅 시 `oswl.ai.embedded.auto-download-on-boot` 설정이 켜져 있고 에어갭 모드가 아니라면 기본 모델을 백그라운드에서 미리 다운로드해, Settings에서 시작을 누를 때 대기 시간을 줄입니다. 기본 다운로드는 OsWL 자체 GitHub Release 자산을 사용하며 실패하면 원본 Hugging Face 저장소로 폴백합니다. 모든 다운로드는 SHA-256 체크섬으로 검증됩니다. 설정된 embedded-ai 디렉터리에 호환되는 임의의 `.gguf` 파일을 직접 넣을 수도 있습니다. 설치 및 문제 해결은 [Embedded AI](Embedded-AI.md)를 참조하세요. +내장 AI는 별도로 설치한 llama.cpp 실행 파일을 사용하며, 기본 다운로드 모델은 **Qwen3.5-2B Q4_K_M**입니다. **Gemma 4 E2B**는 선택적으로 직접 설치합니다. 실행 파일은 `embedded-ai/llama/`, 모델은 `embedded-ai/model/<계열>/`에 둡니다. 부팅 시 미리 받기는 다운로드만 수행하며 서버 실행이나 LOCAL 활성화는 하지 않습니다. 기본 다운로드는 Hugging Face의 고정 리비전을 사용하고 SHA-256 및 크기를 검증합니다. 기본 대체 미러는 없으며, 에어갭 모드에서는 다운로드하지 않습니다. 모델을 바꾸려면 설정에서 중지한 뒤 모델을 선택·저장하고 다시 시작하세요. 최신 요구 사항과 설정은 [내장 AI](Embedded-AI.md)를 참고하세요. --- diff --git a/docs/ko/Whats-New-v1.0.4.md b/docs/ko/Whats-New-v1.0.4.md index 1741fcc4..87f56ce1 100644 --- a/docs/ko/Whats-New-v1.0.4.md +++ b/docs/ko/Whats-New-v1.0.4.md @@ -64,7 +64,7 @@ VEX는 원시 탐지 결과가 아니라 **트리아지 판단**을 담습니다 ### 컴플라이언스 리포트 팩 -`GET /security-center/compliance-report`는 인쇄용 리포트를 렌더링합니다. 컴포넌트 인벤토리, 라이선스 의무, NOTICE 문구, 심각도별 미조치 항목이 포함됩니다. 브라우저의 *인쇄 → PDF로 저장*을 사용하세요. 미리보기 진입 시 인쇄 창이 자동으로 열리지 않으므로 내보내기 전에 내용을 확인할 수 있습니다. +`GET /projects/{projectId}/security-center/compliance-report`는 인쇄용 리포트를 렌더링합니다. 컴포넌트 인벤토리, 라이선스 의무, NOTICE 문구, 심각도별 미조치 항목이 포함됩니다. 브라우저의 *인쇄 → PDF로 저장*을 사용하세요. 미리보기 진입 시 인쇄 창이 자동으로 열리지 않으므로 내보내기 전에 내용을 확인할 수 있습니다. --- diff --git a/docs/ko/Whats-New-v1.0.5.1.md b/docs/ko/Whats-New-v1.0.5.1.md new file mode 100644 index 00000000..19185b5e --- /dev/null +++ b/docs/ko/Whats-New-v1.0.5.1.md @@ -0,0 +1,24 @@ +# OsWL 1.0.5.1 변경 사항 + +의존성 정보, 스캔 안정성, 라이트 모드 화면을 개선했습니다. + +## 사용 시 달라진 점 + +- 로그인·검색·설정은 라이트 모드를 사용합니다. 미저장 변경과 오류를 구분하고, AI 입력 오류는 해당 필드 아래에 표시합니다. 저장 성공 문구는 저장 버튼 옆에 남습니다. +- 응답 다양성은 0~2(기본값 0.15), 최대 토큰 수는 256~8192의 정수(기본값 1200)를 받습니다. 비우면 기본값을 사용합니다. 공급자·분석 작업별 제한이 우선할 수 있으며 Anthropic에는 응답 다양성 설정이 적용되지 않습니다. +- 삭제한 프로젝트를 휴지통에서 확인하고 보존 기간 내에 복원할 수 있습니다. 설정에서 CLI API 키를 삭제할 수 있으며, 삭제한 키는 더 이상 사용할 수 없습니다. +- CVE 옆에서 NVD를 바로 열 수 있습니다. 지원하는 숫자 버전 구간에서 수정 버전을 선택하고, Maven 상위 POM 속성과 지원되는 Gradle 버전 제약 조건을 해석합니다. +- 진단에서 실패·확인 필요·검사 제외를 구분하고 디스크 용량을 읽기 쉽게 표시합니다. 아카이브 대상이 없으면 이유를 안내하고, 대상이 있으면 JSON을 다운로드합니다. +- 캐시의 ‘항상 새로고침’은 스캔이 데이터를 요청할 때 적용됩니다. 백그라운드에서 계속 새로고침하는 설정이 아닙니다. + +## 업그레이드 + +Java 25가 필요합니다. 데이터베이스와 영구 저장 파일을 먼저 백업하고 [배포 체크리스트](Production-Deployment-Checklist.md)와 [백업·복원 안내](Backup-And-Restore.md)를 확인하세요. 마이그레이션을 사용하는 DB에는 V35까지 적용해야 합니다. JAR 교체만으로 DB 변경까지 적용됐다고 가정하지 마세요. + +해당 GitHub Release의 `oswl-1.0.5.1.jar`와 `SHA256SUMS`를 받으세요. 구성 방법은 [시작하기](Getting-Started.md)를 참고하세요. 브라우저 보안 알림에는 웹 푸시/VAPID 설정과 브라우저 권한이 필요합니다. 외부 AI·SMTP·VCS 연동도 각각 설정해야 합니다. + +## 정확도와 한계 + +업그레이드로 기존 저장 스캔이 다시 작성되지는 않습니다. 파싱·보강 수정 사항을 적용하려면 다시 스캔하세요. 선언된 의존성과 실제 빌드가 선택한 의존성은 다를 수 있으며, 해석하지 못한 버전은 추가 확인이 필요합니다. 라이선스·수정 버전 정보가 없다는 사실은 안전하거나 패치가 없다는 뜻이 아닙니다. 복잡한 버전 범위, 생태계별 버전 비교, 온라인·오프라인 결과 일치는 이번 버전에서 모두 해결된 상태가 아닙니다. + +지원 범위와 한계는 [분석 범위 안내(영어)](../en/Analysis-Coverage.md)를 참고하세요. diff --git a/landing/i18n/en.json b/landing/i18n/en.json index 11dd3c97..3905c5ce 100644 --- a/landing/i18n/en.json +++ b/landing/i18n/en.json @@ -8,18 +8,20 @@ "platform": "Platform", "howItWorks": "How It Works", "download": "Go to Download", - "themeToggle": "Toggle light/dark theme" + "docs": "Documentation", + "docsUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/en/Home.md" }, "hero": { - "badge": "Enterprise SCA Platform", - "title": "Know Every Vulnerability
in Your Open Source Stack", - "subtitle": "OsWL continuously scans your dependencies for CVEs, license obligations, and transitive risks — giving security and compliance teams complete SBOM visibility from a single self-hosted platform.", + "badge": "OsWL 1.0.5.1", + "title": "Understand Dependency Risks
in Your Open Source Stack", + "subtitle": "Track CVEs, license obligations, and dependency risks from one self-hosted platform. Scan repositories or submit dependencies from CI, then review findings with your security and compliance teams.", "ctaPrimary": "Install Now", - "ctaSecondary": "See the Platform" + "ctaSecondary": "See the Platform", + "installUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/en/Getting-Started.md" }, "stats": { "multiSource": "Multi-source", - "multiSourceLabel": "GHSA · OSV Advisories", + "multiSourceLabel": "OSV · GitHub Advisory · NVD", "ecosystemsLabel": "Package Ecosystems", "onDemand": "On-demand", "onDemandLabel": "deps.dev Enrichment", @@ -30,54 +32,60 @@ "features": { "label": "Core Capabilities", "title": "End-to-End Software
Composition Analysis", - "subtitle": "From dependency ingestion to remediation, OsWL covers the full SCA lifecycle with enterprise-grade accuracy and auditability.", + "subtitle": "Collect dependencies, assess findings, and track remediation with project access controls and audit logs.", "cveTitle": "CVE Vulnerability Tracking", - "cveDesc": "On-demand enrichment from deps.dev and OSV. Every component is cross-referenced against CVSS 3.x scores and patch availability, and a reminder banner surfaces when a deferred component's grace period expires.", + "cveDesc": "Review vulnerability data, available CVSS scores and known fix versions. Open NVD from a CVE and track remediation decisions. Missing fix data does not mean no patch exists.", "cveTag": "deps.dev · OSV · GHSA", "licenseTitle": "License Risk Management", - "licenseDesc": "Automatic SPDX classification of OSS licenses — copyleft, permissive, proprietary — with obligation rules, conflict detection, and NOTICE / SPDX SBOM export per scan.", + "licenseDesc": "Classify detected SPDX license identifiers against your license policy, review obligations and potential conflicts, and export NOTICE files or SPDX SBOMs for each scan.", "licenseTag": "GPL · LGPL · Apache · MIT · AGPL · MPL", "riskTitle": "Risk Trend Analysis", "riskDesc": "Track your security posture across scans. Visualize critical, high, medium, and low severity trends over time, with optional AI-generated deviation insights when an LLM provider is configured.", "riskTag": "Version-over-version delta", "transitiveTitle": "Transitive Dependency Traversal", - "transitiveDesc": "Uncover vulnerabilities hidden deep in your dependency graph. DependencyPath analysis traces both direct and transitive exposure across every supported manifest.", - "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer · Conan", + "transitiveDesc": "Trace direct and transitive dependencies when supported lock files or graph data provide paths. Coverage depends on the ecosystem and input; a manifest alone may not contain the complete dependency graph.", + "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer", "gitTitle": "Git-Native Repository Integration", - "gitDesc": "Connect GitHub, GitLab, or Bitbucket via Personal Access Token. Quick Import queues bulk repository imports with a cancel button for jobs still running, and every scan keeps branch-aware snapshots and per-project history out of the box.", + "gitDesc": "Connect supported GitHub, GitLab, or Bitbucket credentials, or import a public repository URL. Queue repository imports, cancel active jobs, and retain branch information and scan history for each project.", "gitTag": "GitHub · GitLab · Bitbucket", "cliTitle": "CLI & CI/CD Pipeline Scanning", - "cliDesc": "Integrate OsWL into any build pipeline with a single CLI command. Only parsed manifest metadata is uploaded — no source code leaves your build host. Bearer-token API keys per project or organization-wide.", - "cliTag": "Manifest-only upload", + "cliDesc": "Submit scans from local projects or CI. The CLI uploads selected dependency manifests and build files for server-side parsing, then submits components with a project-scoped API key and the submitting user’s credentials.", + "cliTag": "Build-input upload", "sbomTitle": "CycloneDX SBOM & VEX", "sbomDesc": "Export a CycloneDX 1.6 SBOM, a VEX document carrying your triage decisions, or a SARIF report for code-scanning dashboards. Import third-party CycloneDX files to scan components you don’t build yourself.", "sbomTag": "CycloneDX 1.6 · VEX · SARIF 2.1.0", "gateTitle": "Policy Gates for Pull Requests", - "gateDesc": "Define severity, license, and KEV thresholds per project, then let the gate pass or fail each scan. Results publish back to GitHub as a check run and PR comment, new findings are compared against a baseline so existing debt never blocks a merge, and any finding can be escalated to a linked Jira issue.", + "gateDesc": "Evaluate scan results against severity, license, and KEV policies. Use a baseline to assess newly introduced findings when needed. CI integrations can publish GitHub checks and PR comments, and Jira integration links findings to issues.", "gateTag": "Baseline diff · GitHub check run", "orgTitle": "Organization Dashboard", - "orgDesc": "One view across every project: KEV-listed and actively exploited CVEs first, EPSS exploit probability for ranking the rest, license warnings, and an audit-log export for your SIEM.", - "orgTag": "CISA KEV · EPSS · SIEM export", + "orgDesc": "Review vulnerability and license totals across projects, including unaddressed KEV-listed findings. Projects are ranked by severity counts. Organization and team membership control access; audit logs can be exported separately.", + "orgTag": "Project risk totals · Teams · Audit export", "embeddedAiTitle": "Embedded, Offline AI Insights", - "embeddedAiDesc": "A built-in llama.cpp sidecar starts and stops from Settings, running Qwen3 1.7B Q4_K_M locally (Gemma 3 1B on low-spec hardware) — CPU-only, no API key, and nothing leaves the host. Insights honor your chosen reasoning effort and are tracked in the same usage log as every cloud provider.", - "embeddedAiTag": "llama.cpp · CPU-only · Zero internet", + "embeddedAiDesc": "Run local inference with a separately installed llama.cpp runtime. Qwen3.5-2B Q4_K_M is the default download; Gemma 4 E2B is an optional manual installation. CPU-only defaults require no cloud API key. Prepare the runtime and model in advance for offline use.", + "embeddedAiTag": "llama.cpp · CPU default · Local inference", "airgappedTitle": "Air-Gapped & Offline-Ready", - "airgappedDesc": "Import versioned OSV, deps.dev, EPSS, and KEV snapshot bundles — checksummed and provenance-stamped — to keep vulnerability intelligence current with zero outbound internet access. A wanted-list export tells you exactly which components the next bundle needs to cover, and every finding shows its data-as-of date.", + "airgappedDesc": "Import checksummed OSV, deps.dev, EPSS, and KEV snapshot bundles for offline data lookups. Export a wanted list to target the next bundle and check its data freshness. Configure repository, email, webhook, and AI connections separately for an isolated deployment.", "airgappedTag": "Checksum · Provenance · Wanted-list export", - "remediationTitle": "One-Click Remediation PRs", - "remediationDesc": "Bump a vulnerable dependency straight from the Security Center — OsWL opens a version-bump PR or MR against GitHub, GitLab, or Bitbucket, with reviewers and a change summary attached. Run it in batch to open one PR per patchable component across an entire scan in a single action.", + "remediationTitle": "Dependency Upgrade PRs", + "remediationDesc": "Create version-bump PRs or MRs for supported manifests in connected GitHub, GitLab, and Bitbucket repositories. Batch actions attempt one PR per eligible component and report individual outcomes. Repository permissions and a supported version edit are required; reviewer assignment depends on the provider.", "remediationTag": "GitHub · GitLab · Bitbucket · Batch upgrade", - "supplyChainTitle": "Supply-Chain Attack Detection", - "supplyChainDesc": "Every resolved package name is screened for typosquatting — edit-distance and confusable-character matching against a per-ecosystem popular-package list — plus lightweight dependency-confusion signals like internal-looking names resolved from a public registry. Flagged packages surface as a verify-origin warning, never a silent block.", + "supplyChainTitle": "Supply-Chain Risk Signals", + "supplyChainDesc": "Flag suspicious package-name similarities and dependency-confusion patterns for review. These heuristics do not prove an attack or establish package provenance. Confirmed malware advisories are tracked separately and can fail the security gate.", "supplyChainTag": "Typosquat detection · Dependency confusion", - "ssoTitle": "Enterprise SSO via OIDC", - "ssoDesc": "Sign in through Okta, Entra ID, or any OpenID Connect provider — SSO activates automatically once an OIDC client is configured. Logins skip the email OTP step since the identity provider already authenticated the user, while every existing role and permission rule still applies.", - "ssoTag": "Okta · Entra ID · Any OIDC provider" + "ssoTitle": "SSO & User Provisioning", + "ssoDesc": "Configure OIDC or SAML 2.0 single sign-on and SCIM 2.0 provisioning. Map identity-provider users to OsWL accounts and manage group assignments. Integration setup and account provisioning are required; OsWL roles and project access still apply.", + "ssoTag": "OIDC · SAML 2.0 · SCIM 2.0", + "sourceTitle": "Source & Bytecode References", + "sourceDesc": "Inspect Java bytecode references and supported Python or JavaScript source imports when the corresponding inputs are provided. Evidence and coverage help explain findings. A reference does not prove execution, and incomplete analysis remains unknown.", + "sourceTag": "Java · Python · JavaScript · Coverage evidence", + "secretTitle": "Secret & IaC Findings", + "secretDesc": "Inspect collected Quick Import files for secret patterns and infrastructure configuration issues. Review locations and rules alongside vulnerability findings. Coverage depends on collected files and enabled scanners; full source checkout is a separate option.", + "secretTag": "Collected files · Rule-based findings" }, "platform": { - "label": "Live Platform", + "label": "Product Screenshots", "title": "Built for Security &
Compliance Teams", - "subtitle": "Every screen is engineered for actionability — from CVE triage to remediation tracking, no context switching required.", + "subtitle": "Explore example screens for vulnerability review, project management, license analysis, and risk trends. Screenshots use sample data.", "tabSc": "Security Center", "tabProjects": "Projects", "tabLicense": "License Analysis", @@ -94,12 +102,13 @@ "vuln": { "label": "Vulnerability Intelligence", "title": "Prioritize What
Actually Matters", - "desc": "OsWL surfaces exploitable, patchable vulnerabilities first. CVSS scores, exploit maturity, and fix availability are enriched automatically from deps.dev and OSV advisory feeds.", + "desc": "Use CVSS severity, EPSS probability, KEV listings, and known fix versions to prioritize review. Available signals depend on the advisory sources and component coverage; they do not prove exploitability in your deployment.", "bullet1": "Critical & High vulnerabilities flagged with patch targets", "bullet2": "Fix version surfaced — know if a patched release exists before triaging", "bullet3": "Transitive exposure traced to root dependency paths", "bullet4": "Bulk status updates — mark findings reviewed or ignored in one action", - "demoTitle": "backend-api · v3.2.0 — Security Center" + "demoTitle": "Example findings · CVSS 3.x", + "demoNote": "Illustrative findings, not an OsWL project scan. CVE links identify the source records; scores can differ by source." }, "table": { "component": "Component", @@ -127,27 +136,27 @@ "license": { "label": "License Intelligence", "title": "Eliminate
Compliance Blind Spots", - "desc": "Automatically classify every SPDX license across your dependency tree. Identify copyleft obligations, license conflicts, and components that need manual legal review before they reach production.", - "bullet1": "Copyleft licenses requiring full source disclosure", - "bullet2": "Weak copyleft or dual-licensed — legal review recommended", - "bullet3": "Permissive licenses — safe for commercial use" + "desc": "Compare detected SPDX license identifiers with your policy and review obligations in the context of use and distribution. The example classifications are policy outcomes, not a legal approval.", + "bullet1": "Copyleft obligations depend on how software is used and distributed", + "bullet2": "Review weak copyleft and dual-license terms in context", + "bullet3": "Permissive licenses still have terms and notice requirements" }, "workflow": { "label": "Workflow", "title": "Up and Scanning
in Minutes", "subtitle": "OsWL integrates directly into your existing development workflow. No agents, no heavyweight setup.", "step1Title": "Connect Your Repository", - "step1Desc": "Add a GitHub, GitLab, or Bitbucket Personal Access Token. OsWL discovers repositories and branches and imports manifests — no source code upload required.", + "step1Desc": "Connect a supported VCS account to browse repositories, or enter a public repository URL. Quick Import collects supported files on the OsWL server; build execution is disabled by default.", "step2Title": "Run a Dependency Scan", - "step2Desc": "OsWL parses your lock files and build manifests, resolves the transitive dependency graph, and cross-references every component against deps.dev, OSV, and your license policy.", + "step2Desc": "OsWL parses supported lock files and build manifests, resolves the dependency data they provide, and enriches components with vulnerability and license information.", "step3Title": "Triage & Remediate", "step3Desc": "Review findings in the Security Center, filter by severity, bulk-update statuses, and track your risk posture scan-over-scan in the Risk Trend dashboard.", "step4Title": "Automate in CI/CD", - "step4Desc": "Gate pull requests with the OsWL CLI. Bearer-token API keys enable automated scanning in any pipeline — Jenkins, GitHub Actions, GitLab CI, or custom build servers." + "step4Desc": "Submit scans from CI with a project API key and submitter credentials, then evaluate completed results through the gate API or CLI. Configure your pipeline to enforce the returned verdict." }, "cta": { "title": "Secure Your
Open Source Stack", - "sub": "Deploy OsWL on-premise and gain full SBOM visibility across every project, team, and dependency in your organization.", + "sub": "Deploy OsWL on your own infrastructure to review scanned dependencies, track remediation, and manage project access in one place.", "primary": "Start Now →", "secondary": "See How It Works" }, diff --git a/landing/i18n/ja.json b/landing/i18n/ja.json index 1b706a5b..65e28a10 100644 --- a/landing/i18n/ja.json +++ b/landing/i18n/ja.json @@ -8,18 +8,20 @@ "platform": "プラットフォーム", "howItWorks": "使い方", "download": "ダウンロードへ", - "themeToggle": "ライト／ダークテーマを切り替え" + "docs": "ドキュメント", + "docsUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/ja/Home.md" }, "hero": { - "badge": "エンタープライズ SCA プラットフォーム", - "title": "オープンソースの
脆弱性をすべて把握する", - "subtitle": "OsWL は依存関係の CVE、ライセンス義務、推移的リスクを継続的にスキャンし、セキュリティ・コンプライアンスチームに単一のセルフホスト基盤で完全な SBOM 可視性を提供します。", + "badge": "OsWL 1.0.5.1", + "title": "OSSの構成と
リスクを把握", + "subtitle": "セルフホスト型のプラットフォームで CVE、ライセンス義務、依存関係のリスクを管理します。リポジトリをスキャンするか CI から依存関係を送信し、セキュリティ・コンプライアンスチームで検出結果を確認できます。", "ctaPrimary": "今すぐインストール", - "ctaSecondary": "プラットフォームを見る" + "ctaSecondary": "プラットフォームを見る", + "installUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/ja/Getting-Started.md" }, "stats": { "multiSource": "マルチソース", - "multiSourceLabel": "GHSA · OSV アドバイザリ", + "multiSourceLabel": "OSV · GitHub Advisory · NVD", "ecosystemsLabel": "パッケージエコシステム", "onDemand": "オンデマンド", "onDemandLabel": "deps.dev による情報拡充", @@ -30,54 +32,60 @@ "features": { "label": "主要機能", "title": "エンドツーエンドの
ソフトウェア構成分析", - "subtitle": "依存関係の取り込みから修正対応まで、OsWL はエンタープライズ品質の精度と監査性で SCA ライフサイクル全体をカバーします。", + "subtitle": "依存関係の収集から検出結果の評価、対応状況の追跡まで。プロジェクトのアクセス制御と監査ログも提供します。", "cveTitle": "CVE 脆弱性の追跡", - "cveDesc": "deps.dev と OSV からオンデマンドで情報を拡充します。すべてのコンポーネントを CVSS 3.x スコアとパッチの提供状況と照合し、猶予期間が切れた保留コンポーネントにはリマインダーバナーを表示します。", + "cveDesc": "脆弱性情報、利用可能なCVSSスコア、確認できた修正バージョンを確認します。CVEからNVDを開き、対応状況を管理できます。修正バージョンの表示がなくても、パッチが存在しないとは限りません。", "cveTag": "deps.dev · OSV · GHSA", "licenseTitle": "ライセンスリスク管理", - "licenseDesc": "OSS ライセンスを SPDX で自動分類（コピーレフト／寛容／独占）し、義務ルール、競合検出、スキャンごとの NOTICE / SPDX SBOM 出力を提供します。", + "licenseDesc": "検出した SPDX ライセンス識別子をポリシーに従って分類し、義務や潜在的な競合を確認します。スキャンごとに NOTICE ファイルや SPDX SBOM を出力できます。", "licenseTag": "GPL · LGPL · Apache · MIT · AGPL · MPL", "riskTitle": "リスク傾向分析", "riskDesc": "スキャンをまたいでセキュリティ状態を追跡します。Critical・High・Medium・Low の推移を可視化し、LLM プロバイダーを設定すれば AI による差分インサイトも利用できます。", "riskTag": "バージョン間の差分", "transitiveTitle": "推移的依存関係の探索", - "transitiveDesc": "依存グラフの奥に潜む脆弱性を発見します。DependencyPath 解析により、対応するすべてのマニフェストで直接・推移的な影響範囲を追跡します。", - "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer · Conan", + "transitiveDesc": "対応するロックファイルやグラフデータにパスが含まれる場合、直接依存と推移的依存を追跡します。対応範囲はエコシステムと入力に依存し、マニフェストだけでは完全な依存関係グラフを得られない場合があります。", + "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer", "gitTitle": "Git ネイティブなリポジトリ連携", - "gitDesc": "Personal Access Token で GitHub、GitLab、Bitbucket に接続します。Quick Import は大量インポートをキューイングし進行中のジョブをキャンセルでき、ブランチ単位のインポート、バージョンごとのスナップショット、プロジェクト別スキャン履歴を標準で備えています。", + "gitDesc": "GitHub・GitLab・Bitbucket に対応する認証情報を接続するか、公開リポジトリの URL から取り込みます。インポートのキュー登録や実行中ジョブのキャンセルができ、プロジェクトごとにブランチ情報とスキャン履歴を保存します。", "gitTag": "GitHub · GitLab · Bitbucket", "cliTitle": "CLI & CI/CD パイプラインスキャン", - "cliDesc": "単一の CLI コマンドで、あらゆるビルドパイプラインに OsWL を組み込めます。アップロードされるのは解析済みのマニフェスト情報のみで、ソースコードはビルドホストから出ません。プロジェクト単位・組織全体の Bearer トークン API キーに対応します。", - "cliTag": "マニフェストのみ送信", + "cliDesc": "ローカルプロジェクトや CI からスキャンを送信できます。CLI は収集対象の依存関係マニフェストやビルドファイルをサーバーへ送って解析し、プロジェクト単位の API キーと送信者の認証情報でコンポーネントを登録します。", + "cliTag": "ビルド入力ファイルの送信", "sbomTitle": "CycloneDX SBOM & VEX", "sbomDesc": "CycloneDX 1.6 の SBOM、トリアージ判断を含む VEX 文書、コードスキャン用の SARIF レポートを出力できます。自社でビルドしないコンポーネントは、外部の CycloneDX ファイルを取り込んでスキャンします。", "sbomTag": "CycloneDX 1.6 · VEX · SARIF 2.1.0", "gateTitle": "プルリクエストのポリシーゲート", - "gateDesc": "プロジェクトごとに深刻度・ライセンス・KEV のしきい値を定めると、ゲートがスキャンごとに合否を判定します。結果は GitHub のチェックランと PR コメントとして返され、新規検出のみをベースラインと比較するため既存の負債がマージを妨げることはなく、各検出結果は連携済みの Jira 課題へワンクリックでエスカレーションできます。", + "gateDesc": "深刻度、ライセンス、KEV のポリシーに従ってスキャン結果を評価します。必要に応じてベースラインと比較し、新たに発生した問題を評価できます。CI 連携で GitHub のチェック結果や PR コメントを公開し、Jira 連携で検出結果を課題に関連付けます。", "gateTag": "ベースライン比較 · GitHub チェックラン", "orgTitle": "組織ダッシュボード", - "orgDesc": "すべてのプロジェクトを一画面で。KEV 収載・実際に悪用されている CVE を最優先で表示し、それ以外は EPSS の悪用確率で並べ替え、ライセンス警告と SIEM 向け監査ログ出力も備えます。", - "orgTag": "CISA KEV · EPSS · SIEM 出力", + "orgDesc": "各プロジェクトの脆弱性・ライセンスの集計と未対応の KEV 項目を確認できます。プロジェクトは深刻度別の脆弱性件数で並びます。組織・チームの所属でアクセスを管理し、監査ログは別途出力できます。", + "orgTag": "プロジェクトのリスク集計 · チーム · 監査ログ出力", "embeddedAiTitle": "内蔵オフライン AI インサイト", - "embeddedAiDesc": "設定画面から起動・停止できる内蔵の llama.cpp サイドカーが、Qwen3 1.7B Q4_K_M をローカルで実行します(低スペック環境では Gemma 3 1B にフォールバック)。CPU のみで動作し、API キーも不要、データが外部に出ることもありません。インサイトは設定した推論強度に従い、他のクラウドプロバイダーと同じ使用量ログに記録されます。", - "embeddedAiTag": "llama.cpp · CPU のみ · インターネット不要", + "embeddedAiDesc": "別途インストールした llama.cpp でローカル推論を実行します。既定のダウンロードモデルは Qwen3.5-2B Q4_K_M で、Gemma 4 E2B は任意で手動インストールできます。既定設定は CPU のみで、クラウドの API キーは不要です。オフラインで使う場合は実行ファイルとモデルを事前に用意してください。", + "embeddedAiTag": "llama.cpp · CPU が既定 · ローカル推論", "airgappedTitle": "エアギャップ／オフライン対応", - "airgappedDesc": "チェックサムと出所情報が保証された OSV・deps.dev・EPSS・KEV のスナップショットバンドルを取り込み、外部インターネット接続なしで脆弱性情報を最新に保ちます。wanted-list のエクスポートで次のバンドルに必要なコンポーネントを正確に把握でき、各検出結果にはデータの基準日が表示されます。", + "airgappedDesc": "チェックサムで検証する OSV・deps.dev・EPSS・KEV のスナップショットを取り込み、オフラインで照会できます。必要なコンポーネントの一覧を出力して次のバンドルの対象を絞り、データの鮮度を確認できます。閉域環境ではリポジトリ・メール・Webhook・AI の接続も別途設定してください。", "airgappedTag": "チェックサム · 出所情報 · wanted-list エクスポート", - "remediationTitle": "ワンクリック修正 PR", - "remediationDesc": "セキュリティセンターから直接、脆弱な依存関係のバージョンを引き上げられます — OsWL が GitHub、GitLab、Bitbucket に対してレビュアーと変更概要付きのバージョンアップ PR/MR を作成します。一括実行すれば、スキャン全体の修正可能なコンポーネントそれぞれに対して一度に PR を作成できます。", + "remediationTitle": "依存関係のアップグレード PR", + "remediationDesc": "接続した GitHub・GitLab・Bitbucket リポジトリの対応マニフェストに、バージョン変更の PR/MR を作成します。一括操作では対象コンポーネントごとに作成を試み、個別の結果を表示します。リポジトリの権限と対応するバージョン編集形式が必要で、レビュアーの指定はプロバイダーに依存します。", "remediationTag": "GitHub · GitLab · Bitbucket · 一括アップグレード", - "supplyChainTitle": "サプライチェーン攻撃の検知", - "supplyChainDesc": "解決されたすべてのパッケージ名を、エコシステムごとの人気パッケージリストとの編集距離・紛らわしい文字の一致によるタイポスクワッティング検査と、公開レジストリから解決された内部用らしき名前などの軽量な依存関係混同シグナルでスクリーニングします。検出されたパッケージは強制ブロックではなく「出所確認」の警告として表示されます。", + "supplyChainTitle": "サプライチェーンのリスク情報", + "supplyChainDesc": "不審なパッケージ名の類似や依存関係混同のパターンをレビュー対象として表示します。ヒューリスティックだけでは攻撃やパッケージの出所を断定できません。確認済みの悪意あるパッケージのアドバイザリは別途追跡し、セキュリティゲートを失敗させる場合があります。", "supplyChainTag": "タイポスクワッティング検知 · 依存関係混同", - "ssoTitle": "OIDC によるエンタープライズ SSO", - "ssoDesc": "Okta、Entra ID、またはあらゆる OpenID Connect プロバイダーでサインインできます。OIDC クライアントを設定すると自動的に有効になります。IdP がすでにユーザーを認証しているためメール OTP のステップはスキップされ、既存のロール・権限ルールはそのまま適用されます。", - "ssoTag": "Okta · Entra ID · あらゆる OIDC プロバイダー" + "ssoTitle": "SSO とユーザープロビジョニング", + "ssoDesc": "OIDC または SAML 2.0 の SSO と SCIM 2.0 プロビジョニングを構成できます。IdP のユーザーを OsWL アカウントに対応付け、グループ割り当てを管理します。連携設定とアカウントのプロビジョニングが必要で、OsWL のロールとプロジェクトへのアクセス権限も適用されます。", + "ssoTag": "OIDC · SAML 2.0 · SCIM 2.0", + "sourceTitle": "ソース・バイトコードの参照解析", + "sourceDesc": "必要な入力があれば、Java バイトコードの参照と、対応する Python・JavaScript ソースのインポートを解析します。根拠と解析範囲を確認できます。参照は実行を証明するものではなく、不完全な解析は不明のまま扱います。", + "sourceTag": "Java · Python · JavaScript · 解析の根拠", + "secretTitle": "シークレット・IaC の検出", + "secretDesc": "Quick Import で収集したファイルからシークレットのパターンやインフラ設定の問題を検出します。脆弱性の結果と併せて場所とルールを確認できます。範囲は収集ファイルと有効なスキャナーに依存し、ソース全体のチェックアウトは別のオプションです。", + "secretTag": "収集ファイル · ルールに基づく検出" }, "platform": { - "label": "実画面", + "label": "製品画面", "title": "セキュリティ &
コンプライアンスチームのために", - "subtitle": "すべての画面が「次の行動」を前提に設計されています。CVE のトリアージから対応追跡まで、画面を行き来する必要はありません。", + "subtitle": "脆弱性のレビュー、プロジェクト管理、ライセンス分析、リスク推移の画面を確認できます。スクリーンショットにはサンプルデータを使用しています。", "tabSc": "セキュリティセンター", "tabProjects": "プロジェクト", "tabLicense": "ライセンス分析", @@ -94,12 +102,13 @@ "vuln": { "label": "脆弱性インテリジェンス", "title": "本当に重要なものから
優先順位をつける", - "desc": "OsWL は悪用可能かつ修正可能な脆弱性を先に提示します。CVSS スコア、悪用の成熟度、修正版の有無は deps.dev と OSV のアドバイザリから自動的に拡充されます。", + "desc": "CVSS の深刻度、EPSS の確率、KEV 掲載状況、既知の修正バージョンを使ってレビューの優先順位を決めます。利用可能な情報はアドバイザリの出所と対応範囲に依存し、実環境での悪用可能性を証明するものではありません。", "bullet1": "Critical & High の脆弱性をパッチ対象とともに提示", "bullet2": "修正バージョンを表示 — トリアージ前に修正版の有無を確認", "bullet3": "推移的な影響をルート依存パスまで追跡", "bullet4": "ステータスの一括更新 — 確認済み・無視をまとめて反映", - "demoTitle": "backend-api · v3.2.0 — セキュリティセンター" + "demoTitle": "検出結果の例 · CVSS 3.x", + "demoNote": "OsWL プロジェクトの実際のスキャン結果ではなく表示例です。CVE リンクから出典を確認できます。スコアは出所によって異なる場合があります。" }, "table": { "component": "コンポーネント", @@ -115,8 +124,8 @@ "licCard": { "gpl2Type": "コピーレフト · 強", "lgplType": "コピーレフト · 弱", - "apacheType": "寛容", - "mitType": "寛容", + "apacheType": "パーミッシブ", + "mitType": "パーミッシブ", "mplType": "コピーレフト · ファイル単位", "proprietaryType": "商用", "restricted": "制限", @@ -127,27 +136,27 @@ "license": { "label": "ライセンスインテリジェンス", "title": "コンプライアンスの
死角をなくす", - "desc": "依存ツリー全体の SPDX ライセンスを自動分類します。コピーレフト義務、ライセンス競合、本番投入前に法務レビューが必要なコンポーネントを特定できます。", - "bullet1": "ソース全体の開示が必要なコピーレフトライセンス", - "bullet2": "弱いコピーレフトまたはデュアルライセンス — 法務レビュー推奨", - "bullet3": "寛容なライセンス — 商用利用でも安全" + "desc": "検出した SPDX ライセンス識別子をポリシーと比較し、利用・配布方法に応じた義務を確認します。表示例の分類はポリシー上の状態であり、法的な承認ではありません。", + "bullet1": "利用・配布方法に応じたコピーレフトの義務", + "bullet2": "弱いコピーレフトやデュアルライセンスの適用条件を確認", + "bullet3": "パーミッシブライセンスでも利用条件や表示義務への対応が必要" }, "workflow": { "label": "ワークフロー", "title": "数分で
スキャンを開始", "subtitle": "OsWL は既存の開発ワークフローにそのまま組み込めます。エージェントも大掛かりな準備も不要です。", "step1Title": "リポジトリを接続", - "step1Desc": "GitHub、GitLab、Bitbucket の Personal Access Token を登録します。OsWL がリポジトリとブランチを検出してマニフェストを取り込みます — ソースコードのアップロードは不要です。", + "step1Desc": "対応する VCS アカウントを接続してリポジトリを選ぶか、公開リポジトリの URL を入力します。Quick Import は OsWL サーバー上で対応ファイルを収集します。ビルド実行は既定で無効です。", "step2Title": "依存関係スキャンを実行", - "step2Desc": "OsWL がロックファイルとビルドマニフェストを解析し、推移的な依存グラフを解決したうえで、すべてのコンポーネントを deps.dev、OSV、ライセンスポリシーと照合します。", + "step2Desc": "OsWL が対応するロックファイルやビルドマニフェストから依存関係を読み取り、コンポーネントに脆弱性とライセンスの情報を関連付けます。", "step3Title": "トリアージと修正対応", "step3Desc": "セキュリティセンターで結果を確認し、深刻度で絞り込み、ステータスを一括更新して、リスク傾向ダッシュボードでスキャンごとの状態を追跡します。", "step4Title": "CI/CD で自動化", - "step4Desc": "OsWL CLI でプルリクエストをゲートします。Bearer トークン API キーがあれば、Jenkins、GitHub Actions、GitLab CI、独自のビルドサーバーなど、あらゆるパイプラインで自動スキャンできます。" + "step4Desc": "プロジェクト API キーと送信者の認証情報で CI からスキャンを送信し、完了した結果をゲート API または CLI で評価します。返された判定を反映するようにパイプラインを設定してください。" }, "cta": { "title": "オープンソースを
安全に運用する", - "sub": "OsWL をオンプレミスに配置し、組織のすべてのプロジェクト・チーム・依存関係にわたる完全な SBOM 可視性を手に入れましょう。", + "sub": "自社のインフラに OsWL を導入し、スキャンした依存関係の確認、対応状況の追跡、プロジェクトへのアクセス管理を一か所で行えます。", "primary": "今すぐ始める →", "secondary": "使い方を見る" }, diff --git a/landing/i18n/ko.json b/landing/i18n/ko.json index 5b49a44f..77098519 100644 --- a/landing/i18n/ko.json +++ b/landing/i18n/ko.json @@ -8,18 +8,20 @@ "platform": "플랫폼", "howItWorks": "사용 방법", "download": "다운로드", - "themeToggle": "라이트/다크 테마 전환" + "docs": "문서", + "docsUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/ko/Home.md" }, "hero": { - "badge": "엔터프라이즈 SCA 플랫폼", - "title": "오픈소스 스택의
모든 취약점을 파악하세요", - "subtitle": "OsWL은 의존성의 CVE, 라이선스 의무, 전이적 리스크를 지속적으로 스캔하여 보안·컴플라이언스 팀이 단일 자체 호스팅 플랫폼에서 완전한 SBOM 가시성을 확보할 수 있게 합니다.", + "badge": "OsWL 1.0.5.1", + "title": "오픈소스 스택의
의존성 리스크를 파악하세요", + "subtitle": "하나의 자체 호스팅 플랫폼에서 CVE, 라이선스 의무, 의존성 리스크를 관리하세요. 저장소를 스캔하거나 CI에서 의존성을 제출하고, 보안·컴플라이언스 팀과 탐지 결과를 검토할 수 있습니다.", "ctaPrimary": "지금 설치하기", - "ctaSecondary": "플랫폼 보기" + "ctaSecondary": "플랫폼 보기", + "installUrl": "https://github.com/SalkCoding/Oswl/blob/main/docs/ko/Getting-Started.md" }, "stats": { "multiSource": "다중 소스", - "multiSourceLabel": "GHSA · OSV Advisories", + "multiSourceLabel": "OSV · GitHub Advisory · NVD", "ecosystemsLabel": "패키지 생태계", "onDemand": "온디맨드", "onDemandLabel": "deps.dev 보강", @@ -30,54 +32,60 @@ "features": { "label": "핵심 기능", "title": "엔드투엔드
소프트웨어 구성 분석", - "subtitle": "의존성 수집부터 조치까지, OsWL은 엔터프라이즈급 정확도와 감사 추적 가능성으로 전체 SCA 라이프사이클을 커버합니다.", + "subtitle": "의존성을 수집하고 탐지 결과를 평가하며 조치 현황을 추적합니다. 프로젝트 접근 제어와 감사 로그도 함께 제공합니다.", "cveTitle": "CVE 취약점 추적", - "cveDesc": "deps.dev와 OSV에서 온디맨드로 보강합니다. 모든 컴포넌트를 CVSS 3.x 점수 및 패치 가능 여부와 교차 검증하며, 유예 처리된 컴포넌트의 유예 기간이 만료되면 리마인더 배너가 표시됩니다.", + "cveDesc": "취약점 정보, 제공되는 CVSS 점수와 확인된 수정 버전을 검토합니다. CVE에서 NVD를 바로 열고 조치 상태를 관리하세요. 수정 버전이 표시되지 않아도 패치가 없다는 뜻은 아닙니다.", "cveTag": "deps.dev · OSV · GHSA", "licenseTitle": "라이선스 리스크 관리", - "licenseDesc": "OSS 라이선스의 SPDX 자동 분류 — 카피레프트, 허용적, 독점 — 의무 규칙, 충돌 감지, 스캔별 NOTICE / SPDX SBOM 출력을 제공합니다.", + "licenseDesc": "탐지한 SPDX 라이선스 식별자를 정책에 따라 분류하고, 준수 의무와 잠재적 충돌을 검토합니다. 스캔별 NOTICE 파일과 SPDX SBOM을 내보낼 수 있습니다.", "licenseTag": "GPL · LGPL · Apache · MIT · AGPL · MPL", "riskTitle": "리스크 트렌드 분석", "riskDesc": "스캔 간 보안 상태를 추적합니다. Critical, High, Medium, Low 심각도 추이를 시각화하고, LLM 프로바이더 설정 시 AI 생성 편차 인사이트를 선택적으로 제공합니다.", "riskTag": "버전 간 델타", "transitiveTitle": "전이적 의존성 탐색", - "transitiveDesc": "의존성 그래프 깊숙이 숨은 취약점을 발견합니다. DependencyPath 분석이 지원되는 모든 매니페스트에서 직접·전이적 노출을 추적합니다.", - "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer · Conan", + "transitiveDesc": "지원되는 잠금 파일이나 그래프 데이터에 경로가 있으면 직접·전이 의존성을 추적합니다. 지원 범위는 생태계와 입력에 따라 달라지며, 매니페스트만으로 전체 의존성 그래프를 확인하지 못할 수 있습니다.", + "transitiveTag": "Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer", "gitTitle": "Git 네이티브 저장소 연동", - "gitDesc": "Personal Access Token으로 GitHub, GitLab, Bitbucket을 연결합니다. Quick Import는 대량 저장소 임포트를 큐에 담아 처리하며 진행 중인 작업은 취소 버튼으로 중단할 수 있고, 모든 스캔은 브랜치 인식 스냅샷과 프로젝트별 히스토리를 기본 제공합니다.", + "gitDesc": "GitHub·GitLab·Bitbucket에 맞는 인증 정보를 연결하거나 공개 저장소 URL로 가져오세요. 저장소 가져오기를 대기열에 등록하고 진행 중인 작업을 취소할 수 있으며, 프로젝트별 브랜치 정보와 스캔 이력을 보관합니다.", "gitTag": "GitHub · GitLab · Bitbucket", "cliTitle": "CLI & CI/CD 파이프라인 스캔", - "cliDesc": "단일 CLI 명령으로 모든 빌드 파이프라인에 OsWL을 통합합니다. 파싱된 매니페스트 메타데이터만 업로드되며 소스 코드는 빌드 호스트를 벗어나지 않습니다. 프로젝트별 또는 조직 전체 Bearer 토큰 API 키를 지원합니다.", - "cliTag": "매니페스트 전용 업로드", + "cliDesc": "로컬 프로젝트나 CI에서 스캔을 제출하세요. CLI는 수집 대상 의존성 매니페스트와 빌드 파일을 서버로 전송해 파싱한 뒤, 프로젝트별 API 키와 제출자 계정 인증 정보로 컴포넌트를 제출합니다.", + "cliTag": "빌드 입력 파일 업로드", "sbomTitle": "CycloneDX SBOM & VEX", "sbomDesc": "CycloneDX 1.6 SBOM, 트리아지 판단이 담긴 VEX 문서, 코드 스캐닝 대시보드용 SARIF 리포트로 내보낼 수 있습니다. 직접 빌드하지 않는 컴포넌트는 외부 CycloneDX 파일을 가져와 스캔하세요.", "sbomTag": "CycloneDX 1.6 · VEX · SARIF 2.1.0", "gateTitle": "Pull Request 정책 게이트", - "gateDesc": "프로젝트별로 심각도·라이선스·KEV 기준을 정하면 게이트가 스캔마다 통과/실패를 판정합니다. 결과는 GitHub 체크 런과 PR 코멘트로 게시되며, 새로 발견된 항목만 베이스라인과 비교하므로 기존 부채가 머지를 막지 않고, 각 발견 항목은 연동된 Jira 이슈로 바로 에스컬레이션할 수 있습니다.", + "gateDesc": "심각도, 라이선스, KEV 정책에 따라 스캔 결과를 평가합니다. 필요하면 기준 스캔과 비교해 새로 발생한 문제를 평가할 수 있습니다. CI 연동으로 GitHub 검사 결과와 PR 댓글을 게시하고, Jira 연동으로 탐지 결과를 이슈에 연결합니다.", "gateTag": "베이스라인 비교 · GitHub 체크 런", "orgTitle": "조직 대시보드", - "orgDesc": "모든 프로젝트를 한 화면에서 봅니다. KEV 등재·실제 악용 중인 CVE를 먼저 보여주고, 나머지는 EPSS 악용 확률로 순위를 정하며, 라이선스 경고와 SIEM 연동용 감사 로그 내보내기를 제공합니다.", - "orgTag": "CISA KEV · EPSS · SIEM 내보내기", + "orgDesc": "프로젝트 전반의 취약점·라이선스 집계와 미조치 KEV 항목을 확인합니다. 프로젝트는 심각도별 취약점 수를 기준으로 정렬됩니다. 조직·팀 멤버십으로 접근을 관리하고, 감사 로그는 별도로 내보낼 수 있습니다.", + "orgTag": "프로젝트 리스크 집계 · 팀 · 감사 로그 내보내기", "embeddedAiTitle": "내장 오프라인 AI 인사이트", - "embeddedAiDesc": "설정 화면에서 시작/중지하는 내장 llama.cpp 사이드카가 Qwen3 1.7B Q4_K_M을 로컬에서 구동합니다(저사양 환경은 Gemma 3 1B로 폴백) — CPU 전용이며 API 키도, 외부로 나가는 데이터도 없습니다. 인사이트는 설정한 추론 강도를 따르며 다른 클라우드 프로바이더와 동일한 사용량 로그에 기록됩니다.", - "embeddedAiTag": "llama.cpp · CPU 전용 · 인터넷 불필요", + "embeddedAiDesc": "별도로 설치한 llama.cpp 실행 파일로 로컬 추론을 수행합니다. 기본 다운로드 모델은 Qwen3.5-2B Q4_K_M이며, Gemma 4 E2B는 선택적으로 직접 설치할 수 있습니다. 기본 설정은 CPU 전용이며 클라우드 API 키가 필요하지 않습니다. 오프라인 사용 시 실행 파일과 모델을 미리 준비하세요.", + "embeddedAiTag": "llama.cpp · CPU 기본 설정 · 로컬 추론", "airgappedTitle": "폐쇄망 · 오프라인 대응", - "airgappedDesc": "체크섬과 프로비넌스가 보장된 OSV·deps.dev·EPSS·KEV 스냅샷 번들을 가져와 외부 인터넷 연결 없이 취약점 정보를 최신 상태로 유지합니다. wanted-list 내보내기로 다음 번들에 포함되어야 할 컴포넌트를 정확히 파악할 수 있고, 모든 탐지 결과에 데이터 기준일이 표시됩니다.", + "airgappedDesc": "체크섬으로 검증하는 OSV·deps.dev·EPSS·KEV 스냅샷 번들을 반입해 오프라인에서 조회합니다. 필요한 컴포넌트 목록을 내보내 다음 번들의 대상을 정하고, 데이터 최신성을 확인할 수 있습니다. 폐쇄망에서는 저장소·메일·웹훅·AI 연결도 별도로 구성하세요.", "airgappedTag": "체크섬 · 프로비넌스 · wanted-list 내보내기", - "remediationTitle": "원클릭 조치 PR", - "remediationDesc": "보안 센터에서 바로 취약한 의존성 버전을 올릴 수 있습니다 — OsWL이 GitHub, GitLab, Bitbucket에 리뷰어와 변경 요약이 포함된 버전 업그레이드 PR/MR을 생성합니다. 일괄 실행하면 스캔 전체에서 패치 가능한 모든 컴포넌트에 대해 한 번에 PR을 생성합니다.", + "remediationTitle": "의존성 업그레이드 PR", + "remediationDesc": "연결된 GitHub·GitLab·Bitbucket 저장소의 지원 매니페스트에 버전 변경 PR/MR을 생성합니다. 일괄 실행은 대상 컴포넌트별 PR 생성을 시도하고 각각의 결과를 보여줍니다. 저장소 권한과 지원되는 버전 수정 방식이 필요하며, 리뷰어 지정은 제공자에 따라 달라집니다.", "remediationTag": "GitHub · GitLab · Bitbucket · 일괄 업그레이드", - "supplyChainTitle": "공급망 공격 탐지", - "supplyChainDesc": "모든 해석된 패키지명은 타이포스쿼팅(에코시스템별 인기 패키지 목록과의 편집 거리 및 혼동 문자 매칭)과, 공개 레지스트리에서 해석된 내부용으로 보이는 이름 같은 경량 의존성 혼동 신호를 함께 검사받습니다. 탐지된 패키지는 강제 차단이 아니라 '출처 확인' 경고로 표시됩니다.", + "supplyChainTitle": "공급망 리스크 신호", + "supplyChainDesc": "패키지 이름의 의심스러운 유사성과 의존성 혼동 패턴을 검토 대상으로 표시합니다. 휴리스틱 결과만으로 공격 여부나 패키지 출처를 확정하지 않습니다. 확인된 악성 패키지 권고는 별도로 추적하며 보안 게이트를 실패시킬 수 있습니다.", "supplyChainTag": "타이포스쿼팅 탐지 · 의존성 혼동", - "ssoTitle": "OIDC 기반 엔터프라이즈 SSO", - "ssoDesc": "Okta, Entra ID 또는 모든 OpenID Connect 프로바이더로 로그인할 수 있으며, OIDC 클라이언트를 설정하면 자동으로 활성화됩니다. IdP가 이미 사용자를 인증했으므로 이메일 OTP 단계는 건너뛰고, 기존의 모든 역할·권한 규칙은 그대로 적용됩니다.", - "ssoTag": "Okta · Entra ID · 모든 OIDC 프로바이더" + "ssoTitle": "SSO 및 사용자 프로비저닝", + "ssoDesc": "OIDC 또는 SAML 2.0 SSO와 SCIM 2.0 프로비저닝을 구성할 수 있습니다. IdP 사용자를 OsWL 계정에 연결하고 그룹 할당을 관리하세요. 연동 설정과 계정 프로비저닝이 필요하며, OsWL 역할과 프로젝트 접근 권한은 계속 적용됩니다.", + "ssoTag": "OIDC · SAML 2.0 · SCIM 2.0", + "sourceTitle": "소스·바이트코드 참조 분석", + "sourceDesc": "필요한 입력을 제공하면 Java 바이트코드 참조와 지원되는 Python·JavaScript 소스의 가져오기 구문을 분석합니다. 근거와 분석 범위로 탐지 결과를 검토할 수 있습니다. 참조가 실행을 증명하지는 않으며, 분석이 불완전하면 미확인 상태를 유지합니다.", + "sourceTag": "Java · Python · JavaScript · 분석 근거", + "secretTitle": "시크릿·IaC 탐지", + "secretDesc": "Quick Import가 수집한 파일에서 시크릿 패턴과 인프라 설정 문제를 검사합니다. 취약점 결과와 함께 위치와 탐지 규칙을 검토하세요. 검사 범위는 수집 파일과 활성화한 스캐너에 따라 달라지며, 전체 소스 체크아웃은 별도 옵션입니다.", + "secretTag": "수집 파일 · 규칙 기반 탐지" }, "platform": { - "label": "라이브 플랫폼", + "label": "제품 화면", "title": "보안 &
컴플라이언스 팀을 위해", - "subtitle": "모든 화면은 실행 가능성을 위해 설계되었습니다 — CVE 트리아지부터 조치 추적까지, 컨텍스트 전환 없이 작업할 수 있습니다.", + "subtitle": "취약점 검토, 프로젝트 관리, 라이선스 분석, 리스크 추세 화면을 확인하세요. 스크린샷은 예시 데이터를 사용합니다.", "tabSc": "보안 센터", "tabProjects": "프로젝트", "tabLicense": "라이선스 분석", @@ -94,12 +102,13 @@ "vuln": { "label": "취약점 인텔리전스", "title": "진짜 중요한 것부터
우선순위를 정하세요", - "desc": "OsWL은 악용 가능하고 패치 가능한 취약점을 먼저 표면화합니다. CVSS 점수, 익스플로잇 성숙도, 수정 가능 여부가 deps.dev와 OSV 권고 피드에서 자동으로 보강됩니다.", + "desc": "CVSS 심각도, EPSS 확률, KEV 등재 여부와 알려진 수정 버전으로 검토 우선순위를 정하세요. 제공되는 정보는 권고 출처와 컴포넌트 지원 범위에 따라 달라지며, 해당 배포 환경에서의 악용 가능성을 증명하지는 않습니다.", "bullet1": "Critical & High 취약점을 패치 대상과 함께 표시", "bullet2": "수정 버전 표시 — 트리아지 전에 패치된 릴리스 존재 여부 확인", "bullet3": "전이적 노출을 루트 의존성 경로까지 추적", "bullet4": "일괄 상태 업데이트 — 한 번에 검토 완료 또는 무시 처리", - "demoTitle": "backend-api · v3.2.0 — 보안 센터" + "demoTitle": "탐지 결과 예시 · CVSS 3.x", + "demoNote": "OsWL 프로젝트의 실제 스캔 결과가 아닌 예시입니다. CVE 링크에서 출처를 확인할 수 있으며, 점수는 출처에 따라 다를 수 있습니다." }, "table": { "component": "컴포넌트", @@ -127,27 +136,27 @@ "license": { "label": "라이선스 인텔리전스", "title": "컴플라이언스
사각지대를 제거하세요", - "desc": "의존성 트리의 모든 SPDX 라이선스를 자동 분류합니다. 카피레프트 의무, 라이선스 충돌, 프로덕션 배포 전 법무 검토가 필요한 컴포넌트를 식별합니다.", - "bullet1": "전체 소스 공개가 필요한 카피레프트 라이선스", - "bullet2": "약한 카피레프트 또는 이중 라이선스 — 법무 검토 권장", - "bullet3": "허용적 라이선스 — 상업적 사용에 안전" + "desc": "탐지한 SPDX 라이선스 식별자를 정책과 비교하고 사용·배포 방식에 따른 의무를 검토하세요. 예시 분류는 정책에 따른 상태이며 법적 승인을 뜻하지 않습니다.", + "bullet1": "사용·배포 방식에 따라 달라지는 카피레프트 의무", + "bullet2": "약한 카피레프트와 이중 라이선스의 적용 조건 검토", + "bullet3": "허용적 라이선스도 이용 조건과 고지 의무 준수 필요" }, "workflow": { "label": "워크플로", "title": "몇 분 안에
스캔을 시작하세요", "subtitle": "OsWL은 기존 개발 워크플로에 직접 통합됩니다. 에이전트나 무거운 설정이 필요 없습니다.", "step1Title": "저장소 연결", - "step1Desc": "GitHub, GitLab, Bitbucket Personal Access Token을 등록합니다. OsWL이 저장소와 브랜치를 탐색하고 매니페스트를 임포트합니다 — 소스 코드 업로드는 필요 없습니다.", + "step1Desc": "지원되는 VCS 계정을 연결해 저장소를 탐색하거나 공개 저장소 URL을 입력하세요. Quick Import는 OsWL 서버에서 지원 파일을 수집하며, 빌드 실행은 기본으로 비활성화되어 있습니다.", "step2Title": "의존성 스캔 실행", - "step2Desc": "OsWL이 lock 파일과 빌드 매니페스트를 파싱하고 전이적 의존성 그래프를 해석한 뒤, 모든 컴포넌트를 deps.dev, OSV, 라이선스 정책과 교차 검증합니다.", + "step2Desc": "OsWL이 지원되는 잠금 파일과 빌드 매니페스트에서 의존성 정보를 읽고, 컴포넌트에 취약점 및 라이선스 정보를 연결합니다.", "step3Title": "트리아지 & 조치", "step3Desc": "보안 센터에서 결과를 검토하고, 심각도별로 필터링하며, 상태를 일괄 업데이트하고, 리스크 트렌드 대시보드에서 스캔 간 보안 상태를 추적합니다.", "step4Title": "CI/CD 자동화", - "step4Desc": "OsWL CLI로 Pull Request를 게이트합니다. Bearer 토큰 API 키로 Jenkins, GitHub Actions, GitLab CI 또는 커스텀 빌드 서버 등 모든 파이프라인에서 자동 스캔이 가능합니다." + "step4Desc": "프로젝트 API 키와 제출자 인증 정보로 CI에서 스캔을 제출하고, 완료된 결과를 게이트 API 또는 CLI로 평가하세요. 반환된 판정을 반영하도록 파이프라인을 구성해야 합니다." }, "cta": { "title": "오픈소스 스택을
안전하게 보호하세요", - "sub": "OsWL을 온프레미스에 배포하고 조직의 모든 프로젝트, 팀, 의존성에 대한 완전한 SBOM 가시성을 확보하세요.", + "sub": "자체 인프라에 OsWL을 배포해 스캔한 의존성 검토, 조치 추적, 프로젝트 접근 관리를 한곳에서 수행하세요.", "primary": "지금 시작하기 →", "secondary": "사용 방법 보기" }, diff --git a/landing/index.html b/landing/index.html index 2477f744..fbf49519 100644 --- a/landing/index.html +++ b/landing/index.html @@ -1,36 +1,18 @@ - + OsWL - Enterprise SCA Platform - - - + - + + - + @@ -484,17 +463,12 @@
- Enterprise SCA Platform + OsWL 1.0.5.1
-

- Know Every Vulnerability
in Your Open Source Stack -

-

- OsWL continuously scans your dependencies for CVEs, license obligations, and transitive risks — - giving security and compliance teams complete SBOM visibility from a single self-hosted platform. -

+

Understand Dependency Risks
in Your Open Source Stack

+

Track CVEs, license obligations, and dependency risks from one self-hosted platform. Scan repositories or submit dependencies from CI, then review findings with your security and compliance teams.

- Install Now + Install Now See the Platform
@@ -505,11 +479,11 @@

Multi-source
-
GHSA · OSV Advisories
+
OSV · GitHub Advisory · NVD
-
9
+
8+
Package Ecosystems
@@ -519,13 +493,13 @@

-
CVSS 3.x
+
CVSS 3.x / 4.0
Scoring Supported
Git-native
-
GitHub · GitLab · Bitbucket
+
GitHub · GitLab · Bitbucket

@@ -535,7 +509,7 @@

Core Capabilities

End-to-End Software
Composition Analysis

-

From dependency ingestion to remediation, OsWL covers the full SCA lifecycle with enterprise-grade accuracy and auditability.

+

Collect dependencies, assess findings, and track remediation with project access controls and audit logs.

@@ -543,8 +517,8 @@

End-to-End Software

CVE Vulnerability Tracking
-

On-demand enrichment from deps.dev and OSV. Every component is cross-referenced against CVSS 3.x scores and patch availability, and a reminder banner surfaces when a deferred component's grace period expires.

- deps.dev · OSV · GHSA +

Enrich scanned components with vulnerability data, available CVSS scores, and known fix versions. Track review decisions and see a reminder when a component’s deferral period ends.

+ deps.dev · OSV · GHSA
@@ -552,8 +526,8 @@

End-to-End Software

License Risk Management
-

Automatic SPDX classification of OSS licenses — copyleft, permissive, proprietary — with obligation rules, conflict detection, and NOTICE / SPDX SBOM export per scan.

- GPL · LGPL · Apache · MIT · AGPL · MPL +

Classify detected SPDX license identifiers against your license policy, review obligations and potential conflicts, and export NOTICE files or SPDX SBOMs for each scan.

+ GPL · LGPL · Apache · MIT · AGPL · MPL
@@ -570,8 +544,8 @@

End-to-End Software

Transitive Dependency Traversal
-

Uncover vulnerabilities hidden deep in your dependency graph. DependencyPath analysis traces both direct and transitive exposure across every supported manifest.

- Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer · Conan +

Trace direct and transitive dependencies when supported lock files or graph data provide paths. Coverage depends on the ecosystem and input; a manifest alone may not contain the complete dependency graph.

+ Maven · npm · PyPI · Go · Cargo · NuGet · RubyGems · Composer

@@ -579,8 +553,8 @@

End-to-End Software

Git-Native Repository Integration
-

Connect GitHub, GitLab, or Bitbucket via Personal Access Token. Quick Import queues bulk repository imports with a cancel button for jobs still running, and every scan keeps branch-aware snapshots and per-project history out of the box.

- GitHub · GitLab · Bitbucket +

Connect supported GitHub, GitLab, or Bitbucket credentials, or import a public repository URL. Queue repository imports, cancel active jobs, and retain branch information and scan history for each project.

+ GitHub · GitLab · Bitbucket
@@ -588,8 +562,8 @@

End-to-End Software

CLI & CI/CD Pipeline Scanning
-

Integrate OsWL into any build pipeline with a single CLI command. Only parsed manifest metadata is uploaded — no source code leaves your build host. Bearer-token API keys per project or organization-wide.

- Manifest-only upload +

Submit scans from local projects or CI. The CLI uploads selected dependency manifests and build files for server-side parsing, then submits components with a project-scoped API key and the submitting user’s credentials.

+ Build-input upload
@@ -597,8 +571,8 @@

End-to-End Software

CycloneDX SBOM & VEX
-

Export a CycloneDX 1.6 SBOM, a VEX document carrying your triage decisions, or a SARIF report for code-scanning dashboards. Import third-party CycloneDX files to scan components you don’t build yourself.

- CycloneDX 1.6 · VEX · SARIF 2.1.0 +

Export a CycloneDX 1.6 SBOM, a VEX document carrying your triage decisions, or a SARIF report for code-scanning dashboards. Import third-party CycloneDX files to scan components you don’t build yourself.

+ CycloneDX 1.6 · VEX · SARIF 2.1.0
@@ -606,8 +580,8 @@

End-to-End Software

Policy Gates for Pull Requests
-

Define severity, license, and KEV thresholds per project, then let the gate pass or fail each scan. Results publish back to GitHub as a check run and PR comment, new findings are compared against a baseline so existing debt never blocks a merge, and any finding can be escalated to a linked Jira issue.

- Baseline diff · GitHub check run +

Evaluate scan results against severity, license, and KEV policies. Use a baseline to assess newly introduced findings when needed. CI integrations can publish GitHub checks and PR comments, and Jira integration links findings to issues.

+ Baseline diff · GitHub check run
@@ -615,8 +589,8 @@

End-to-End Software

Organization Dashboard
-

One view across every project: KEV-listed and actively exploited CVEs first, EPSS exploit probability for ranking the rest, license warnings, and an audit-log export for your SIEM.

- CISA KEV · EPSS · SIEM export +

Review vulnerability and license totals across projects, including unaddressed KEV-listed findings. Projects are ranked by severity counts. Organization and team membership control access; audit logs can be exported separately.

+ Project risk totals · Teams · Audit export
@@ -624,8 +598,8 @@

End-to-End Software

Embedded, Offline AI Insights
-

A built-in llama.cpp sidecar starts and stops from Settings, running Qwen3 1.7B Q4_K_M locally (Gemma 3 1B on low-spec hardware) — CPU-only, no API key, and nothing leaves the host. Insights honor your chosen reasoning effort and are tracked in the same usage log as every cloud provider.

- llama.cpp · CPU-only · Zero internet +

Run local inference with a separately installed llama.cpp runtime. Qwen3.5-2B Q4_K_M is the default download; Gemma 4 E2B is an optional manual installation. CPU-only defaults require no cloud API key. Prepare the runtime and model in advance for offline use.

+ llama.cpp · CPU default · Local inference
@@ -633,36 +607,50 @@

End-to-End Software

Air-Gapped & Offline-Ready
-

Import versioned OSV, deps.dev, EPSS, and KEV snapshot bundles — checksummed and provenance-stamped — to keep vulnerability intelligence current with zero outbound internet access. A wanted-list export tells you exactly which components the next bundle needs to cover, and every finding shows its data-as-of date.

- Checksum · Provenance · Wanted-list export +

Import checksummed OSV, deps.dev, EPSS, and KEV snapshot bundles for offline data lookups. Export a wanted list to target the next bundle and check its data freshness. Configure repository, email, webhook, and AI connections separately for an isolated deployment.

+ Checksum · Provenance · Wanted-list export
-
One-Click Remediation PRs
-

Bump a vulnerable dependency straight from the Security Center — OsWL opens a version-bump PR or MR against GitHub, GitLab, or Bitbucket, with reviewers and a change summary attached. Run it in batch to open one PR per patchable component across an entire scan in a single action.

- GitHub · GitLab · Bitbucket · Batch upgrade +
Dependency Upgrade PRs
+

Create version-bump PRs or MRs for supported manifests in connected GitHub, GitLab, and Bitbucket repositories. Batch actions attempt one PR per eligible component and report individual outcomes. Repository permissions and a supported version edit are required; reviewer assignment depends on the provider.

+ GitHub · GitLab · Bitbucket · Batch upgrade
-
Supply-Chain Attack Detection
-

Every resolved package name is screened for typosquatting — edit-distance and confusable-character matching against a per-ecosystem popular-package list — plus lightweight dependency-confusion signals like internal-looking names resolved from a public registry. Flagged packages surface as a verify-origin warning, never a silent block.

- Typosquat detection · Dependency confusion +
Supply-Chain Risk Signals
+

Flag suspicious package-name similarities and dependency-confusion patterns for review. These heuristics do not prove an attack or establish package provenance. Confirmed malware advisories are tracked separately and can fail the security gate.

+ Typosquat detection · Dependency confusion
-
Enterprise SSO via OIDC
-

Sign in through Okta, Entra ID, or any OpenID Connect provider — SSO activates automatically once an OIDC client is configured. Logins skip the email OTP step since the identity provider already authenticated the user, while every existing role and permission rule still applies.

- Okta · Entra ID · Any OIDC provider +
SSO & User Provisioning
+

Configure OIDC or SAML 2.0 single sign-on and SCIM 2.0 provisioning. Map identity-provider users to OsWL accounts and manage group assignments. Integration setup and account provisioning are required; OsWL roles and project access still apply.

+ OIDC · SAML 2.0 · SCIM 2.0
+
+
+
Source & Bytecode References
+

Inspect Java bytecode references and supported Python or JavaScript source imports when the corresponding inputs are provided. Evidence and coverage help explain findings. A reference does not prove execution, and incomplete analysis remains unknown.

+ Java · Python · JavaScript · Coverage evidence +
+ +
+
+
Secret & IaC Findings
+

Inspect collected Quick Import files for secret patterns and infrastructure configuration issues. Review locations and rules alongside vulnerability findings. Coverage depends on collected files and enabled scanners; full source checkout is a separate option.

+ Collected files · Rule-based findings +
+ @@ -670,26 +658,26 @@

End-to-End Software
-

Live Platform

-

Built for Security &
Compliance Teams

-

Every screen is engineered for actionability — from CVE triage to remediation tracking, no context switching required.

- -
- - - - +

Product Screenshots

+

Built for Security &
Compliance Teams

+

Explore example screens for vulnerability review, project management, license analysis, and risk trends. Screenshots use sample data.

+ +
+ + + +
-
+
OsWL Security Center — CVE triage with CVSS scores
-
+ -
+ -
+
@@ -704,9 +692,7 @@

Built for Security &am

Vulnerability Intelligence

Prioritize What
Actually Matters

-

- OsWL surfaces exploitable, patchable vulnerabilities first. CVSS scores, exploit maturity, and fix availability are enriched automatically from deps.dev and OSV advisory feeds. -

+

Use CVSS severity, EPSS probability, KEV listings, and known fix versions to prioritize review. Available signals depend on the advisory sources and component coverage; they do not prove exploitability in your deployment.

@@ -714,7 +700,7 @@

- Fix version surfaced — know if a patched release exists before triaging + Fix version surfaced — know if a patched release exists before triaging
@@ -722,7 +708,7 @@

- Bulk status updates — mark findings reviewed or ignored in one action + Bulk status updates — mark findings reviewed or ignored in one action

@@ -731,74 +717,75 @@

- backend-api · v3.2.0 — Security Center + Example findings · CVSS 3.x
+
- - - - - - - - - + + + - - - + + + - - - + + + - + + + + + + +
ComponentCVE IDCVSSSeverity
jackson-databind
2.13.4.2		CVE-2022-420039.8Critical
spring-webmvc
5.3.27		CVE-2023-208618.6jackson-databind
2.13.4		CVE-2022-420037.5 High
commons-io
2.11.0		CVE-2024-220117.5logback-classic
1.4.11		CVE-2023-63787.1 High
logback-classic
1.2.11		CVE-2023-63786.2spring-expression
5.3.25		CVE-2023-208616.5 Medium
guava
31.1-jre		CVE-2023-2976CVE-2023-2976 5.5 Medium
commons-io
2.11.0		CVE-2024-475544.3Medium
+
+

Illustrative findings, not an OsWL project scan. CVE links identify the source records; scores can differ by source.

-
GPL-2.0-only
Copyleft · Strong
Restricted
-
LGPL-2.1-only
Copyleft · Weak
Caution
+
GPL-2.0-only
Copyleft · Strong
Restricted
+
LGPL-2.1-only
Copyleft · Weak
Caution
Apache-2.0
Permissive
Permitted
MIT
Permissive
Permitted
-
MPL-2.0
Copyleft · File-level
Caution
+
MPL-2.0
Copyleft · File-level
Caution
Proprietary
Commercial
Unknown

License Intelligence

Eliminate
Compliance Blind Spots

-

- Automatically classify every SPDX license across your dependency tree. Identify copyleft obligations, license conflicts, and components that need manual legal review before they reach production. -

+

Compare detected SPDX license identifiers with your policy and review obligations in the context of use and distribution. The example classifications are policy outcomes, not a legal approval.

Restricted - Copyleft licenses requiring full source disclosure + Copyleft obligations depend on how software is used and distributed
Caution - Weak copyleft or dual-licensed — legal review recommended + Review weak copyleft and dual-license terms in context
Permitted - Permissive licenses — safe for commercial use + Permissive licenses still have terms and notice requirements
@@ -818,12 +805,12 @@

Up and Scanning
in
01

Connect Your Repository

-

Add a GitHub, GitLab, or Bitbucket Personal Access Token. OsWL discovers repositories and branches and imports manifests — no source code upload required.

+

Connect a supported VCS account to browse repositories, or enter a public repository URL. Quick Import collects supported files on the OsWL server; build execution is disabled by default.

02

Run a Dependency Scan

-

OsWL parses your lock files and build manifests, resolves the transitive dependency graph, and cross-references every component against deps.dev, OSV, and your license policy.

+

OsWL parses supported lock files and build manifests, resolves the dependency data they provide, and enriches components with vulnerability and license information.

03
@@ -833,7 +820,7 @@

Triage & Remediate
04

Automate in CI/CD

-

Gate pull requests with the OsWL CLI. Bearer-token API keys enable automated scanning in any pipeline — Jenkins, GitHub Actions, GitLab CI, or custom build servers.

+

Submit scans from CI with a project API key and submitter credentials, then evaluate completed results through the gate API or CLI. Configure your pipeline to enforce the returned verdict.

@@ -843,9 +830,9 @@

Automate in CI/CD

Secure Your
Open Source Stack

-

Deploy OsWL on-premise and gain full SBOM visibility across every project, team, and dependency in your organization.

+

Deploy OsWL on your own infrastructure to review scanned dependencies, track remediation, and manage project access in one place.

- Start Now → + Start Now → See How It Works
@@ -859,7 +846,8 @@

Secure Your
OsWL

- Copyright © 2026 OsWL, Licensed under the MIT License. + Copyright © 2026 OsWL, Licensed under the MIT License. + · Documentation · Open Source Notices · @@ -874,13 +862,6 @@

Secure Your
Secure Your
Secure Your
/dev/null || true diff --git a/scripts/oci/scan-image.py b/scripts/oci/scan-image.py new file mode 100644 index 00000000..3d14a175 --- /dev/null +++ b/scripts/oci/scan-image.py @@ -0,0 +1,346 @@ +"""Inspect a pinned OCI image without running it; emit installed OS packages as an OsWL payload.""" +import argparse +import base64 +import gzip +import hashlib +import io +import json +import posixpath +import re +import shutil +import sys +import tarfile +import tempfile +import time +from datetime import datetime, timezone +import urllib.error +import urllib.parse +import urllib.request +from pathlib import Path + +class InspectionError(ValueError): + pass + + +TRACKED = {"etc/os-release", "usr/lib/os-release", "var/lib/dpkg/status", "lib/apk/db/installed"} +ACCEPT = ", ".join(["application/vnd.oci.image.index.v1+json", "application/vnd.oci.image.manifest.v1+json", "application/vnd.docker.distribution.manifest.list.v2+json", "application/vnd.docker.distribution.manifest.v2+json"]) + + +def digest(value): + if not isinstance(value, str) or not re.fullmatch(r"sha256:[0-9a-f]{64}", value): + raise InspectionError("A sha256 digest is required") + return value.split(":", 1)[1] + + +class Budget: + def __init__(self, seconds=120, compressed=512*1024**2, expanded=2*1024**3): + self.deadline = time.monotonic() + seconds + self.compressed, self.expanded = compressed, expanded + + def check(self): + if time.monotonic() > self.deadline: + raise InspectionError("Image inspection time budget exceeded") + + +class NoRedirect(urllib.request.HTTPRedirectHandler): + def redirect_request(self, req, fp, code, msg, headers, newurl): + return None + + +class Registry: + def __init__(self, host, repository, budget, credentials=None): + if not re.fullmatch(r"[a-zA-Z0-9.-]+(?::[0-9]{1,5})?", host) or not re.fullmatch(r"[a-z0-9._/-]+", repository) or ".." in repository or repository.startswith("/"): + raise InspectionError("Invalid registry or repository") + self.host, self.repository, self.budget = host, repository, budget + self.credentials, self.token = credentials, None + self.opener = urllib.request.build_opener(NoRedirect()) + + def authenticate(self, challenge): + if not challenge.lower().startswith("bearer "): + raise InspectionError("Registry requires unsupported authentication") + fields = urllib.request.parse_keqv_list(urllib.request.parse_http_list(challenge[7:])) + realm = urllib.parse.urlsplit(fields.get("realm", "")) + allowed = {self.host} + if self.host == "registry-1.docker.io": + allowed.add("auth.docker.io") + if realm.scheme != "https" or realm.netloc not in allowed or realm.username or realm.fragment: + raise InspectionError("Registry authentication realm is not trusted") + query = urllib.parse.urlencode({"service": fields.get("service", self.host), "scope": "repository:" + self.repository + ":pull"}) + url = urllib.parse.urlunsplit((realm.scheme, realm.netloc, realm.path, query, "")) + headers = {} + if self.credentials: + raw = (self.credentials["username"] + ":" + self.credentials["password"]).encode() + headers["Authorization"] = "Basic " + base64.b64encode(raw).decode() + # Credentials never follow a redirect, including at the token service. + with self.opener.open(urllib.request.Request(url, headers=headers), timeout=15) as response: + raw = response.read(65537) + if len(raw) > 65536: + raise InspectionError("Registry token response exceeds its budget") + token = json.loads(raw) + self.token = token.get("token") or token.get("access_token") + if not isinstance(self.token, str) or len(self.token) > 16384: + raise InspectionError("Invalid registry token response") + + def fetch(self, kind, reference, target, limit): + url = "https://" + self.host + "/v2/" + self.repository + "/" + kind + "/" + reference + authenticated = False + for _ in range(6): + self.budget.check() + parsed = urllib.parse.urlsplit(url) + if parsed.scheme != "https" or parsed.username or parsed.fragment: + raise InspectionError("Unsafe registry redirect") + headers = {"Accept": ACCEPT} + if self.token and parsed.netloc == self.host: + headers["Authorization"] = "Bearer " + self.token + try: + response = self.opener.open(urllib.request.Request(url, headers=headers), timeout=15) + except urllib.error.HTTPError as error: + if error.code == 401 and parsed.netloc == self.host and not authenticated: + self.authenticate(error.headers.get("WWW-Authenticate", "")); authenticated = True + error.close(); continue + if error.code in (301, 302, 303, 307, 308): + url = urllib.parse.urljoin(url, error.headers.get("Location", "")); error.close(); continue + error.close() + raise InspectionError("Registry request failed with HTTP " + str(error.code)) from None + total = 0 + with response, target.open("wb") as output: + while True: + self.budget.check() + block = response.read(65536) + if not block: break + total += len(block); self.budget.compressed -= len(block) + if total > limit or self.budget.compressed < 0: raise InspectionError("Compressed image budget exceeded") + output.write(block) + return + raise InspectionError("Too many registry redirects") + + +class ImageSource: + def __init__(self, workspace, budget, registry=None, layout=None): + self.workspace, self.budget, self.registry = Path(workspace), budget, registry + self.layout = Path(layout).resolve() if layout else None + self.cache = {} + + def blob(self, reference, kind="blobs", limit=512*1024**2): + name = digest(reference) + if reference in self.cache: return self.cache[reference] + target = self.workspace / name + if self.layout: + source = (self.layout / "blobs" / "sha256" / name).resolve() + if not source.is_relative_to(self.layout): raise InspectionError("Blob escapes OCI layout") + if source.stat().st_size > limit: raise InspectionError("Blob exceeds its budget") + self.budget.compressed -= source.stat().st_size + if self.budget.compressed < 0: raise InspectionError("Compressed image budget exceeded") + shutil.copyfile(source, target) + else: + self.registry.fetch(kind, reference, target, limit) + with target.open("rb") as stream: + actual = hashlib.file_digest(stream, "sha256").hexdigest() + if actual != name: raise InspectionError("Image blob checksum mismatch") + self.cache[reference] = target + return target + + def document(self, reference, kind="blobs"): + return json.loads(self.blob(reference, kind, 4*1024**2).read_bytes()) + + +class ExpandedReader: + def __init__(self, stream, budget): + self.stream, self.budget, self.hash = stream, budget, hashlib.sha256() + def read(self, size=-1): + self.budget.check() + if size < 0: size = 65536 + data = self.stream.read(size) + self.budget.expanded -= len(data) + if self.budget.expanded < 0: raise InspectionError("Expanded image budget exceeded") + self.hash.update(data) + return data + + +def path_name(raw): + if "\\" in raw or raw.startswith("/") or ".." in raw.split("/"): + raise InspectionError("Unsafe layer path") + return posixpath.normpath(raw) + + +def apply_layer(path, media_type, expected_diff_id, state, budget): + digest(expected_diff_id) + if media_type not in ("application/vnd.oci.image.layer.v1.tar", "application/vnd.oci.image.layer.v1.tar+gzip", "application/vnd.docker.image.rootfs.diff.tar.gzip"): + raise InspectionError("Unsupported layer media type; only tar and gzip are supported") + additions, removals, opaque, seen = {}, [], [], set() + with Path(path).open("rb") as raw: + stream = gzip.GzipFile(fileobj=raw) if media_type.endswith("gzip") else raw + reader = ExpandedReader(stream, budget) + with tarfile.open(fileobj=reader, mode="r|") as archive: + for entry in archive: + budget.check() + name = path_name(entry.name) + if name in seen: raise InspectionError("Duplicate layer path") + seen.add(name) + if len(seen) > 250000: raise InspectionError("Layer entry budget exceeded") + parent, base = posixpath.split(name) + if base == ".wh..wh..opq": opaque.append(parent); continue + if base.startswith(".wh."): removals.append(posixpath.join(parent, base[4:])); continue + if name.startswith("var/lib/dpkg/updates/") and entry.isfile() and entry.size: + raise InspectionError("Pending dpkg updates are unsupported") + if name not in TRACKED: + if any(item.startswith(name + "/") for item in TRACKED): + # A distro may link /lib while using only /var/lib/dpkg. Defer + # rejection until inventory actually needs that ancestor. + additions[name] = ("directory",) if entry.isdir() else ("blocked",) + continue + if entry.issym() or entry.islnk(): + link = entry.linkname.lstrip("/") if entry.linkname.startswith("/") else posixpath.join(parent if entry.issym() else "", entry.linkname) + link = posixpath.normpath(link) + if link not in TRACKED: raise InspectionError("Unsupported package database link") + additions[name] = ("link", link) + elif entry.isfile() and not entry.sparse: + if entry.size > 16*1024**2: raise InspectionError("Package database size budget exceeded") + additions[name] = archive.extractfile(entry).read() + else: raise InspectionError("Unsupported package database entry") + while reader.read(65536): pass + if "sha256:" + reader.hash.hexdigest() != expected_diff_id: raise InspectionError("Uncompressed layer checksum mismatch") + # Whiteouts only remove lower-layer entries, irrespective of archive order. + for old in list(state): + if any(old == removed or old.startswith(removed + "/") for removed in removals) or any(not directory or old.startswith(directory + "/") for directory in opaque): + del state[old] + state.update(additions) + + +def content(state, name): + seen = set() + while True: + if any(name.startswith(parent + "/") and value == ("blocked",) for parent,value in state.items()): + raise InspectionError("A required package database ancestor is not a directory") + value = state.get(name) + if not isinstance(value, tuple): break + if value[0] != "link": raise InspectionError("Invalid package database entry") + if name in seen: raise InspectionError("Cyclic package database link") + seen.add(name); name = value[1] + raw = state.get(name) + return raw.decode("utf-8", errors="strict") if isinstance(raw, bytes) else None + + +def inventory(state): + release = content(state, "etc/os-release") or content(state, "usr/lib/os-release") + if not release: raise InspectionError("Image has no supported os-release metadata") + info = {} + for line in release.splitlines(): + if re.match(r"^[A-Z_]+=", line): + key, value = line.split("=", 1); info[key] = value.strip().strip('"\'') + identity, version = info.get("ID"), info.get("VERSION_ID", "") + if not re.fullmatch(r"\d+(?:\.\d+){0,2}", version): raise InspectionError("Unsupported distribution version") + if identity == "alpine": ecosystem = "ALPINE:V" + ".".join(version.split(".")[:2]); database = content(state, "lib/apk/db/installed") + elif identity == "debian": ecosystem = "DEBIAN:" + version.split(".")[0]; database = content(state, "var/lib/dpkg/status") + elif identity == "ubuntu": + ecosystem = "UBUNTU:" + version + (":LTS" if version.endswith(".04") and int(version.split(".")[0]) % 2 == 0 else "") + database = content(state, "var/lib/dpkg/status") + else: raise InspectionError("Unsupported distribution package database") + if database is None: raise InspectionError("Image has no supported installed-package database") + components = {} + for paragraph in re.split(r"\n\s*\n", database): + fields = dict(line.split(":", 1) for line in paragraph.splitlines() if ":" in line and not line[0].isspace()) + fields = {key: value.strip() for key, value in fields.items()} + if not fields: continue + if identity == "alpine": name, package_version = fields.get("o") or fields.get("P"), fields.get("V") + else: + if fields.get("Status") != "install ok installed": continue + source = fields.get("Source", fields.get("Package", "")) + match = re.fullmatch(r"([^\s]+)(?: \(([^)]+)\))?", source) + if not match: raise InspectionError("Malformed installed package source") + name, package_version = match[1], match[2] or fields.get("Version") + if not name or not package_version or len(name) > 300 or len(package_version) > 100: raise InspectionError("Malformed installed package identity") + components[(name, package_version)] = dict(name=name, version=package_version, ecosystem=ecosystem, dependencyInfo="Installed OS package", dependencyPaths=[]) + if len(components) > 50000: raise InspectionError("Installed package count budget exceeded") + if not components: raise InspectionError("No supported installed packages; inspection is incomplete") + return sorted(components.values(), key=lambda item: (item["name"], item["version"])) + + +def inspect(source, reference, platform="linux/amd64"): + platform_parts = platform.split("/") + if len(platform_parts) not in (2,3): raise InspectionError("Platform must be os/architecture[/variant]") + manifest = source.document(reference, "manifests") + selected = reference + if "manifests" in manifest: + matches = [item for item in manifest["manifests"] if item.get("platform", {}).get("os") == platform_parts[0] and item.get("platform", {}).get("architecture") == platform_parts[1] and (len(platform_parts)==2 or item.get("platform", {}).get("variant")==platform_parts[2])] + if len(matches) != 1: raise InspectionError("No unique image matches the requested platform") + selected = matches[0]["digest"]; manifest = source.document(selected, "manifests") + if manifest.get("schemaVersion") != 2: raise InspectionError("Unsupported image manifest schema") + config = source.document(manifest["config"]["digest"]) + if config.get("os") != platform_parts[0] or config.get("architecture") != platform_parts[1]: raise InspectionError("Image configuration platform mismatch") + layers, diffs = manifest.get("layers", []), config.get("rootfs", {}).get("diff_ids", []) + if not layers or len(layers) != len(diffs) or len(layers) > 256: raise InspectionError("Invalid image layer chain") + state = {} + for layer, diff in zip(layers, diffs): + if layer.get("urls"): raise InspectionError("External layer URLs are unsupported") + path = source.blob(layer["digest"]) + if path.stat().st_size != layer.get("size"): raise InspectionError("Layer descriptor size mismatch") + apply_layer(path, layer["mediaType"], diff, state, source.budget) + packages = inventory(state) + return dict(version=selected, components=packages), dict(imageDigest=reference, manifestDigest=selected, platform=platform, layers=len(layers), installedPackages=len(packages), inventory="installed OS source packages", executedImage=False) + + +def query_osv(packages, budget): + results = [] + for start in range(0, len(packages), 1000): + budget.check() + chunk = packages[start:start+1000] + queries = [] + for package in chunk: + stored = package["ecosystem"] + ecosystem = ("Alpine:" + stored[7:].lower()) if stored.startswith("ALPINE:") else ("Debian:" + stored[7:]) if stored.startswith("DEBIAN:") else "Ubuntu:" + stored[7:] + queries.append(dict(package=dict(ecosystem=ecosystem,name=package["name"]),version=package["version"])) + request = urllib.request.Request("https://api.osv.dev/v1/querybatch",data=json.dumps(dict(queries=queries)).encode(),headers={"Content-Type":"application/json"}) + with urllib.request.build_opener(NoRedirect()).open(request,timeout=20) as response: + raw = response.read(16*1024**2+1) + if len(raw)>16*1024**2: raise InspectionError("Advisory response budget exceeded") + found = json.loads(raw).get("results") + if not isinstance(found,list) or len(found)!=len(chunk): raise InspectionError("Incomplete advisory response") + for package, result in zip(chunk, found): + if not isinstance(result,dict) or result.get("error") or result.get("next_page_token") or not isinstance(result.get("vulns",[]),list): raise InspectionError("Incomplete advisory response") + ids=[item.get("id") for item in result.get("vulns",[]) if isinstance(item,dict)] + if len(ids)!=len(result.get("vulns",[])) or not all(isinstance(value,str) and value for value in ids): raise InspectionError("Malformed advisory response") + results.append(dict(name=package["name"],version=package["version"],ecosystem=package["ecosystem"],ids=ids)) + return dict(status="RESOLVED",source="https://api.osv.dev/v1/querybatch",queriedAt=datetime.now(timezone.utc).isoformat(),packages=results) + + +def main(): + parser = argparse.ArgumentParser(description=__doc__) + group = parser.add_mutually_exclusive_group(required=True) + group.add_argument("--image", help="registry/repository@sha256:digest") + group.add_argument("--layout", help="Local OCI layout directory; requires --digest") + parser.add_argument("--digest") + parser.add_argument("--platform", default="linux/amd64") + parser.add_argument("--credentials-file", help="Private JSON file containing username and password; never printed") + parser.add_argument("--query-osv", action="store_true", help="Query the online OSV API for the exact installed package versions") + parser.add_argument("--output", required=True, help="New scan payload JSON file") + parser.add_argument("--report", required=True, help="New provenance report JSON file") + args = parser.parse_args() + if Path(args.output).exists() or Path(args.report).exists(): raise InspectionError("Output paths must be new files") + budget = Budget() + credentials = None + if args.credentials_file: + with open(args.credentials_file, "rb") as stream: raw = stream.read(16385) + if len(raw)>16384: raise InspectionError("Credentials file exceeds its budget") + credentials = json.loads(raw) + if not all(isinstance(credentials.get(key), str) for key in ("username","password")): raise InspectionError("Invalid credentials file") + with tempfile.TemporaryDirectory(prefix="oswl-oci-") as workspace: + if args.image: + location, reference = args.image.rsplit("@", 1) + host, repository = location.split("/", 1) + registry = Registry(host, repository, budget, credentials) + else: reference, registry = args.digest, None + digest(reference) + source = ImageSource(workspace, budget, registry, args.layout) + payload, report = inspect(source, reference, args.platform) + report["analysis"] = query_osv(payload["components"],budget) if args.query_osv else dict(status="UNQUERIED") + with open(args.output,"x",encoding="utf-8") as stream: json.dump(payload, stream, indent=2) + with open(args.report,"x",encoding="utf-8") as stream: json.dump(report, stream, indent=2) + + +if __name__ == "__main__": + try: main() + except Exception as error: + # Transport/library exception strings may contain signed URLs or credentials. + print(str(error) if isinstance(error, InspectionError) else "Image inspection failed; no credentials or source URLs were logged", file=sys.stderr) + sys.exit(2) diff --git a/scripts/oci/test_scan_image.py b/scripts/oci/test_scan_image.py new file mode 100644 index 00000000..5328e66b --- /dev/null +++ b/scripts/oci/test_scan_image.py @@ -0,0 +1,117 @@ +import hashlib +import importlib.util +import io +import json +import tarfile +import tempfile +import unittest +from unittest.mock import patch +import urllib.error +from pathlib import Path + +spec = importlib.util.spec_from_file_location("scan_image", Path(__file__).with_name("scan-image.py")) +scanner = importlib.util.module_from_spec(spec) +spec.loader.exec_module(scanner) + + +class ImageTest(unittest.TestCase): + def setUp(self): + self.temp = tempfile.TemporaryDirectory() + self.root = Path(self.temp.name) + self.blobs = self.root / "layout" / "blobs" / "sha256" + self.blobs.mkdir(parents=True) + self.work = self.root / "work"; self.work.mkdir() + + def tearDown(self): + self.temp.cleanup() + + def blob(self, data, media="application/vnd.oci.image.layer.v1.tar"): + value = hashlib.sha256(data).hexdigest() + (self.blobs / value).write_bytes(data) + return dict(digest="sha256:"+value, size=len(data), mediaType=media) + + def layer(self, entries): + output = io.BytesIO() + with tarfile.open(fileobj=output, mode="w") as tar: + for name, content in entries: + entry = tarfile.TarInfo(name); raw=content.encode();entry.size=len(raw) + tar.addfile(entry,io.BytesIO(raw)) + return self.blob(output.getvalue()) + + def image(self, layers): + config=self.blob(json.dumps(dict(os="linux", architecture="amd64", rootfs=dict(type="layers",diff_ids=[layer["digest"] for layer in layers]))).encode(),"application/vnd.oci.image.config.v1+json") + return self.blob(json.dumps(dict(schemaVersion=2,config=config,layers=layers)).encode(),"application/vnd.oci.image.manifest.v1+json")["digest"] + + def scan(self, reference, budget=None): + return scanner.inspect(scanner.ImageSource(self.work,budget or scanner.Budget(),layout=self.root/"layout"),reference) + + def test_real_layer_inventory_uses_final_installed_database(self): + base=self.layer([("etc/os-release",'ID=alpine\nVERSION_ID="3.16.0"\n'),("lib/apk/db/installed","P:old-binary\no:old-source\nV:1.0-r0\n")]) + # A whiteout after a same-layer replacement must only remove the lower layer. + update=self.layer([("lib/apk/db/installed","P:new-binary\no:new-source\nV:2.0-r1\n"),("lib/apk/db/.wh..wh..opq","")]) + payload, report=self.scan(self.image([base,update])) + self.assertEqual(payload["components"][0]["name"],"new-source") + self.assertEqual(payload["components"][0]["version"],"2.0-r1") + self.assertEqual(payload["components"][0]["ecosystem"],"ALPINE:V3.16") + self.assertFalse(report["executedImage"]) + + def test_deleted_database_is_incomplete_not_clean(self): + base=self.layer([("etc/os-release","ID=alpine\nVERSION_ID=3.16\n"),("lib/apk/db/installed","P:pkg\nV:1\n")]) + removed=self.layer([("lib/apk/.wh.db","")]) + with self.assertRaisesRegex(ValueError,"database"): + self.scan(self.image([base,removed])) + + def test_debian_uses_installed_source_version_and_ignores_removed_packages(self): + state={"etc/os-release":b'ID=debian\nVERSION_ID="12"\n',"var/lib/dpkg/status":b'Package: binary\nStatus: install ok installed\nSource: original (1:2.0-1)\nVersion: 1:2.0-1+b1\n\nPackage: removed\nStatus: deinstall ok config-files\nVersion: 3\n'} + result=scanner.inventory(state) + self.assertEqual([(r["name"],r["version"]) for r in result],[("original","1:2.0-1")]) + + def test_checksum_traversal_and_budget_fail_closed(self): + layer=self.layer([("../outside","never written")]) + with self.assertRaisesRegex(ValueError,"Unsafe"): + self.scan(self.image([layer])) + with self.assertRaisesRegex(ValueError,"budget"): + scanner.apply_layer(self.blobs/scanner.digest(layer["digest"]),layer["mediaType"],layer["digest"],{},scanner.Budget(expanded=100)) + safe=self.layer([("etc/os-release","ID=alpine")]) + with self.assertRaisesRegex(ValueError,"checksum"): + scanner.apply_layer(self.blobs/scanner.digest(safe["digest"]),safe["mediaType"],"sha256:"+"0"*64,{},scanner.Budget()) + + def test_registry_redirect_does_not_forward_bearer_token(self): + registry=scanner.Registry("registry.example","library/test",scanner.Budget());registry.token="sensitive-token" + calls=[] + def open_request(request,timeout): + calls.append(request) + if len(calls)==1: + raise urllib.error.HTTPError(request.full_url,302,"redirect",{"Location":"https://cdn.example/blob"},None) + return io.BytesIO(b"blob") + registry.opener.open=open_request + registry.fetch("blobs","sha256:"+"a"*64,self.work/"download",100) + self.assertEqual(calls[0].get_header("Authorization"),"Bearer sensitive-token") + self.assertIsNone(calls[1].get_header("Authorization")) + + def test_credentials_are_not_sent_to_foreign_token_realm(self): + registry=scanner.Registry("registry.example","library/test",scanner.Budget(),dict(username="user",password="secret")) + with self.assertRaisesRegex(ValueError,"not trusted"): + registry.authenticate('Bearer realm="https://attacker.example/token",service="registry.example"') + + def test_advisory_empty_success_differs_from_truncation(self): + packages=[dict(name="openssl",version="1.1.1o-r0",ecosystem="ALPINE:V3.16")] + with patch.object(scanner.urllib.request,"build_opener") as opener: + opener.return_value.open.return_value=io.BytesIO(b'{"results":[{}]}') + self.assertEqual(scanner.query_osv(packages,scanner.Budget())["packages"][0]["ids"],[]) + opener.return_value.open.return_value=io.BytesIO(b'{"results":[{"next_page_token":"more"}]}') + with self.assertRaisesRegex(ValueError,"Incomplete advisory"): + scanner.query_osv(packages,scanner.Budget()) + + def test_unrelated_merged_usr_link_is_allowed_but_required_ancestor_is_not(self): + release=b'ID=debian\nVERSION_ID="12"\n' + database=b'Package: pkg\nStatus: install ok installed\nVersion: 1\n' + state={"etc/os-release":release,"var/lib/dpkg/status":database,"lib":("blocked",)} + self.assertEqual(scanner.inventory(state)[0]["name"],"pkg") + state["var/lib"]=("blocked",) + with self.assertRaisesRegex(ValueError,"required package database ancestor"): + scanner.inventory(state) + + +if __name__ == "__main__": + unittest.main() diff --git a/scripts/ops/verify-restore.sh b/scripts/ops/verify-restore.sh new file mode 100644 index 00000000..f90c6833 --- /dev/null +++ b/scripts/ops/verify-restore.sh @@ -0,0 +1,121 @@ +#!/usr/bin/env bash +# OsWL restore-rehearsal verification — run this against a freshly restored +# instance (restored PostgreSQL + injected OSWL_ENCRYPTION_KEY + app started) to confirm the +# three things a backup restore actually needs to prove: +# (a) the encryption key is correct — a stored VCS token decrypts without error +# (b) the restored scan history is queryable +# (c) the restored audit log is queryable +# +# This is an interactive drill script (a human runs it during a DR rehearsal), not an +# unattended health check — logging in still goes through real email OTP 2FA, so it pauses to +# ask you for the code. See docs/en/Backup-And-Restore.md for the full restore procedure this +# script verifies the end of. +# +# Usage: +# OSWL_VERIFY_EMAIL=admin@example.com \ +# OSWL_VERIFY_PASSWORD='...' \ +# OSWL_VERIFY_PROJECT_ID=1 \ +# ./scripts/ops/verify-restore.sh [base-url, default http://localhost:8080] + +set -euo pipefail + +BASE_URL="${1:-http://localhost:8080}" +EMAIL="${OSWL_VERIFY_EMAIL:-}" +PASSWORD="${OSWL_VERIFY_PASSWORD:-}" +PROJECT_ID="${OSWL_VERIFY_PROJECT_ID:-}" + +RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m' +PASS=0 +FAIL=0 + +pass() { echo -e "${GREEN}[PASS]${NC} $1"; PASS=$((PASS + 1)); } +fail() { echo -e "${RED}[FAIL]${NC} $1"; FAIL=$((FAIL + 1)); } +info() { echo -e "${YELLOW}[INFO]${NC} $1"; } + +require() { + command -v "$1" &>/dev/null || { echo "Missing required tool: $1" >&2; exit 1; } +} +require curl +require jq + +if [[ -z "$EMAIL" || -z "$PASSWORD" ]]; then + echo "Set OSWL_VERIFY_EMAIL and OSWL_VERIFY_PASSWORD (an account you can log into on the" >&2 + echo "restored instance) before running this script." >&2 + exit 1 +fi + +JAR="$(mktemp)" +trap 'rm -f "$JAR"' EXIT + +echo "== 1. App health ==" +HEALTH=$(curl -s -o /dev/null -w '%{http_code}' "$BASE_URL/actuator/health" || true) +if [[ "$HEALTH" == "200" ]]; then + pass "GET /actuator/health returned 200 — app started against the restored DB" +else + fail "GET /actuator/health returned $HEALTH — app may not have started; stop here and check logs" + exit 1 +fi + +echo "== 2. Log in (email + password + OTP) ==" +CSRF=$(curl -s -c "$JAR" "$BASE_URL/login" | grep -oE 'name="_csrf" value="[^"]+"' | head -1 | sed 's/.*value="//;s/"//') +curl -s -b "$JAR" -c "$JAR" -o /dev/null \ + -d "email=$EMAIL" -d "password=$PASSWORD" -d "_csrf=$CSRF" \ + "$BASE_URL/login" + +info "A one-time code was emailed to $EMAIL (check the mail relay / GreenMail log)." +read -rp "Enter the OTP code: " OTP_CODE + +XSRF=$(awk '$6=="XSRF-TOKEN"{print $7}' "$JAR") +OTP_STATUS=$(curl -s -o /dev/null -w '%{http_code}' -b "$JAR" -c "$JAR" \ + -H "Content-Type: application/json" -H "X-XSRF-TOKEN: $XSRF" \ + -d "{\"code\":\"$OTP_CODE\"}" \ + "$BASE_URL/login/otp-verify") + +if [[ "$OTP_STATUS" == "200" ]]; then + pass "Login + OTP succeeded" +else + fail "POST /login/otp-verify returned $OTP_STATUS — cannot continue without a session" + exit 1 +fi + +XSRF=$(awk '$6=="XSRF-TOKEN"{print $7}' "$JAR") + +echo "== 3. VCS token decryption (OSWL_ENCRYPTION_KEY correctness) ==" +VCS_RESPONSE=$(curl -s -w '\n%{http_code}' -b "$JAR" -c "$JAR" -H "X-XSRF-TOKEN: $XSRF" \ + "$BASE_URL/api/settings/vcs") +VCS_STATUS=$(echo "$VCS_RESPONSE" | tail -1) +VCS_BODY=$(echo "$VCS_RESPONSE" | sed '$d') +if [[ "$VCS_STATUS" == "200" ]]; then + COUNT=$(echo "$VCS_BODY" | jq 'length' 2>/dev/null || echo "?") + pass "GET /api/settings/vcs returned 200 ($COUNT connection(s)) — no decryption error" +else + fail "GET /api/settings/vcs returned $VCS_STATUS — likely a wrong OSWL_ENCRYPTION_KEY (decryption failure)" +fi + +echo "== 4. Recent scan history ==" +if [[ -z "$PROJECT_ID" ]]; then + info "OSWL_VERIFY_PROJECT_ID not set — skipping scan-history check" +else + SCAN_STATUS=$(curl -s -o /dev/null -w '%{http_code}' -b "$JAR" -c "$JAR" -H "X-XSRF-TOKEN: $XSRF" \ + "$BASE_URL/projects/$PROJECT_ID/scan-history") + if [[ "$SCAN_STATUS" == "200" ]]; then + pass "GET /projects/$PROJECT_ID/scan-history returned 200 — scan history is queryable" + else + fail "GET /projects/$PROJECT_ID/scan-history returned $SCAN_STATUS" + fi +fi + +echo "== 5. Audit log (requires SYSTEM_ADMIN) ==" +AUDIT_STATUS=$(curl -s -o /dev/null -w '%{http_code}' -b "$JAR" -c "$JAR" -H "X-XSRF-TOKEN: $XSRF" \ + "$BASE_URL/api/admin/audit-logs") +if [[ "$AUDIT_STATUS" == "200" ]]; then + pass "GET /api/admin/audit-logs returned 200 — audit log is queryable" +elif [[ "$AUDIT_STATUS" == "403" ]]; then + info "GET /api/admin/audit-logs returned 403 — the account used isn't SYSTEM_ADMIN, skipping (not a restore failure)" +else + fail "GET /api/admin/audit-logs returned $AUDIT_STATUS" +fi + +echo +echo "== Summary: $PASS passed, $FAIL failed ==" +[[ "$FAIL" -eq 0 ]] diff --git a/scripts/oswl-vdb/oswl-vdb.sh b/scripts/oswl-vdb/oswl-vdb.sh index 1b1ddb56..0e1fb206 100644 --- a/scripts/oswl-vdb/oswl-vdb.sh +++ b/scripts/oswl-vdb/oswl-vdb.sh @@ -1,5 +1,5 @@ #!/usr/bin/env bash -# E5: thin wrapper around the oswl-vdb Java CLI (com.salkcoding.oswl.vdb.VdbBuilderCli), +# thin wrapper around the oswl-vdb Java CLI (com.salkcoding.oswl.vdb.VdbBuilderCli), # run on an internet-connected machine to build/verify/inspect offline vulnerability-DB # bundles for import into an air-gapped OsWL instance. # diff --git a/scripts/vdb/build-cocoapods-specs.py b/scripts/vdb/build-cocoapods-specs.py new file mode 100644 index 00000000..e94fd64f --- /dev/null +++ b/scripts/vdb/build-cocoapods-specs.py @@ -0,0 +1,52 @@ +"""Build a scoped v2 offline bundle from operator-supplied podspec JSON files. No network.""" +import argparse +import hashlib +import json +import re +import zipfile +from datetime import datetime, timezone +from pathlib import Path +from urllib.parse import urlsplit + + +def build(manifest_path, output): + manifest_path = Path(manifest_path).resolve() + manifest = json.loads(manifest_path.read_text(encoding="utf-8")) + if not isinstance(manifest, list) or not 1 <= len(manifest) <= 1000: + raise ValueError("Manifest must contain 1–1000 spec entries") + records, identities = [], set() + for item in manifest: + spec_path = manifest_path.parent / item["file"] + with spec_path.open("rb") as source: + raw = source.read(65537) + if len(raw) > 65536: + raise ValueError("Spec exceeds 64 KiB") + text = raw.decode("utf-8") + spec = json.loads(text) + name, version, origin = spec["name"], spec["version"], item["origin"] + for value, maximum in [(name, 200), (version, 100)]: + if not isinstance(value, str) or not re.fullmatch(r"[A-Za-z0-9_+.-]{1," + str(maximum) + "}", value) or value in (".", ".."): + raise ValueError("Invalid spec identity") + url = urlsplit(origin) + if url.scheme != "https" or not url.hostname or url.username or url.password or url.query or url.fragment or len(origin) > 2000: + raise ValueError("Origin must be an HTTPS provenance URL without credentials/query/fragment") + if (name, version) in identities: + raise ValueError("Duplicate pod/version") + identities.add((name, version)) + records.append(dict(name=name, version=version, origin=origin, sha256=hashlib.sha256(raw).hexdigest(), podspec=text)) + data = ("\n".join(json.dumps(r, ensure_ascii=False) for r in records) + "\n").encode("utf-8") + meta = dict(format="oswl-vdb", formatVersion=2, mode="full", builder="oswl-scoped-podspecs", + builtAt=datetime.now(timezone.utc).replace(tzinfo=None).isoformat(), + sources={"cocoapods-specs": {"records": len(records), "origin": "operator-supplied-podspecs"}}, + files={"cocoapods-specs.jsonl": {"sha256": hashlib.sha256(data).hexdigest(), "lines": len(records)}}) + with zipfile.ZipFile(output, "x", zipfile.ZIP_DEFLATED) as bundle: + bundle.writestr("meta.json", json.dumps(meta)) + bundle.writestr("cocoapods-specs.jsonl", data) + + +if __name__ == "__main__": + parser = argparse.ArgumentParser(description=__doc__) + parser.add_argument("manifest", help="JSON array of {file, origin}; file paths relative to this manifest") + parser.add_argument("output", help="New ZIP path (existing files are not overwritten)") + args = parser.parse_args() + build(args.manifest, args.output) diff --git a/scripts/verification/cluster_assertions.py b/scripts/verification/cluster_assertions.py new file mode 100644 index 00000000..b23a3b76 --- /dev/null +++ b/scripts/verification/cluster_assertions.py @@ -0,0 +1,75 @@ +"""Pure result checks for the opt-in local cluster rehearsal; no server or DB mutation.""" +import argparse +from datetime import datetime +from html.parser import HTMLParser +from pathlib import Path +import re + +class PageText(HTMLParser): + def __init__(self): + super().__init__() + self.text = [] + def handle_data(self, data): + self.text.append(data.strip()) + +def session_identity(status, body, expected_email): + page = PageText() + page.feed(body) + return (str(status) == "200" and expected_email in page.text + and 'onboardingWizard(' in body and 'id="login-email"' not in body) + +def session_rejected(status): + # A server error or network failure is not evidence that logout invalidated a session. + return str(status) in {"302", "401", "403"} + +def scheduler_cycles(logs, period_seconds=20, minimum_cycles=2): + cycles = {} + marker = "[Monitor] Continuous monitoring cycle START" + for owner, text in logs.items(): + for line in text.splitlines(): + if marker not in line: + continue + stamp = re.match(r"(\d{4}-\d{2}-\d{2})[T ](\d{2}:\d{2}:\d{2})", line) + if not stamp: + raise ValueError("Scheduler start has no recognizable timestamp") + value = datetime.fromisoformat(stamp[1] + "T" + stamp[2]) + # Same-host local logs share a timezone. This does not test clock skew. + bucket = int((value - datetime(1970, 1, 1)).total_seconds()) // period_seconds + cycles.setdefault(bucket, []).append(owner) + if len(cycles) < minimum_cycles: + raise ValueError(f"Only {len(cycles)} observed cycles; need {minimum_cycles}") + duplicate = {cycle: owners for cycle, owners in cycles.items() if len(owners) != 1} + if duplicate: + raise ValueError(f"Duplicate execution in a cron cycle: {duplicate}") + return cycles + +def main(): + parser = argparse.ArgumentParser(description=__doc__) + commands = parser.add_subparsers(dest="command", required=True) + session = commands.add_parser("session") + session.add_argument("status") + session.add_argument("body", type=Path) + session.add_argument("email") + rejected = commands.add_parser("rejected") + rejected.add_argument("status") + scheduler = commands.add_parser("scheduler") + scheduler.add_argument("log_a", type=Path) + scheduler.add_argument("log_b", type=Path) + args = parser.parse_args() + if args.command == "session": + if not session_identity(args.status, args.body.read_text(encoding="utf-8"), args.email): + raise SystemExit("Expected authenticated onboarding identity; redirect/login/other user rejected") + print("Authenticated onboarding identity matched") + elif args.command == "rejected": + if not session_rejected(args.status): + raise SystemExit("Expected authentication redirect/denial, not a server or transport error") + print("Protected request redirected or denied") + else: + try: + cycles = scheduler_cycles({"A": args.log_a.read_text(encoding="utf-8"), "B": args.log_b.read_text(encoding="utf-8")}) + except ValueError as error: + raise SystemExit(str(error)) + print(f"Exactly one execution in each of {len(cycles)} observed cron cycles; owners may change") + +if __name__ == "__main__": + main() diff --git a/scripts/verification/performance.gradle b/scripts/verification/performance.gradle new file mode 100644 index 00000000..14aed32e --- /dev/null +++ b/scripts/verification/performance.gradle @@ -0,0 +1,11 @@ +// Explicit opt-in verification budget; the normal test/uiTest defaults remain unchanged. +allprojects { + // Concurrent developer builds must not replace classes under a running measurement JVM. + layout.buildDirectory = layout.projectDirectory.dir('build/performance-work') + tasks.withType(Test).configureEach { + maxHeapSize = providers.gradleProperty('verificationHeap').orElse('2g').get() + def isolatedTemp = layout.buildDirectory.dir('performance-temp').get().asFile + systemProperty 'java.io.tmpdir', isolatedTemp.absolutePath + doFirst { isolatedTemp.mkdirs() } + } +} diff --git a/scripts/verification/test_cluster_assertions.py b/scripts/verification/test_cluster_assertions.py new file mode 100644 index 00000000..02f02412 --- /dev/null +++ b/scripts/verification/test_cluster_assertions.py @@ -0,0 +1,36 @@ +import unittest +from cluster_assertions import session_identity, session_rejected, scheduler_cycles + +class ClusterAssertionsTest(unittest.TestCase): + def test_redirect_and_login_are_not_authenticated(self): + page = '
reader@example.test
' + self.assertTrue(session_identity(200, page, 'reader@example.test')) + self.assertFalse(session_identity(302, page, 'reader@example.test')) + self.assertFalse(session_identity(200, '', 'reader@example.test')) + self.assertFalse(session_identity(200, page, 'other@example.test')) + for status in (302, 401, 403): + self.assertTrue(session_rejected(status)) + for status in (200, 500, 503, '000'): + self.assertFalse(session_rejected(status)) + + def line(self, second): + return f'2026-09-06 12:{second // 60:02d}:{second % 60:02d}.010 INFO [Monitor] Continuous monitoring cycle START' + + def test_ownership_may_change_between_observed_cycles(self): + result = scheduler_cycles({'A': self.line(0), 'B': self.line(80)}) + self.assertEqual(len(result), 2) + + def test_duplicates_within_cycle_fail_even_on_same_owner(self): + for logs in ({'A': self.line(0), 'B': self.line(1)+'\n'+self.line(80)}, + {'A': self.line(0)+'\n'+self.line(1)+'\n'+self.line(80)}): + with self.assertRaisesRegex(ValueError, 'Duplicate'): + scheduler_cycles(logs) + + def test_no_activity_or_unparseable_evidence_fails(self): + with self.assertRaisesRegex(ValueError, 'Only'): + scheduler_cycles({'A': '', 'B': ''}) + with self.assertRaisesRegex(ValueError, 'timestamp'): + scheduler_cycles({'A': '[Monitor] Continuous monitoring cycle START'}) + +if __name__ == '__main__': + unittest.main() diff --git a/scripts/verification/test_push_worker.cjs b/scripts/verification/test_push_worker.cjs new file mode 100644 index 00000000..291ce485 --- /dev/null +++ b/scripts/verification/test_push_worker.cjs @@ -0,0 +1,14 @@ +const fs=require('node:fs'),vm=require('node:vm'),assert=require('node:assert/strict'); +const handlers={},notifications=[],opened=[]; +const context={URL,clients:{openWindow:async url=>opened.push(url)},self:{location:{origin:'https://oswl.example'},addEventListener:(name,fn)=>handlers[name]=fn,registration:{showNotification:async(title,data)=>notifications.push({title,data})}}}; +vm.runInNewContext(fs.readFileSync('src/main/resources/static/oswl-push-sw.js','utf8'),context); +(async()=>{ +let pending; +handlers.push({data:{json:()=>({body:'Review required',url:'https://attacker.example/',tag:'security'})},waitUntil:p=>pending=p});await pending; +assert.equal(notifications[0].data.data.path,'/projects'); +handlers.notificationclick({notification:{close(){},data:{path:'//attacker.example/'}},waitUntil:p=>pending=p});await pending; +assert.equal(opened[0],'https://oswl.example/projects'); +handlers.notificationclick({notification:{close(){},data:{path:'/projects/12/security-center'}},waitUntil:p=>pending=p});await pending; +assert.equal(opened[1],'https://oswl.example/projects/12/security-center'); +console.log('Service worker notification and same-origin click checks passed'); +})().catch(error=>{console.error(error);process.exitCode=1;}); diff --git a/scripts/verification/verify-h2-cluster.py b/scripts/verification/verify-h2-cluster.py new file mode 100644 index 00000000..d366fac2 --- /dev/null +++ b/scripts/verification/verify-h2-cluster.py @@ -0,0 +1,98 @@ +"""Two owned JVMs and a disposable H2 DB. No deployment or external notifications.""" +import argparse, copy, http.cookiejar, json, os, re, socket, subprocess, tempfile, time, urllib.request, urllib.parse, urllib.error +from pathlib import Path +from cluster_assertions import session_identity, session_rejected, scheduler_cycles + +class NoRedirect(urllib.request.HTTPRedirectHandler): + def redirect_request(self,*args): return None + +def port(): + with socket.socket() as value: + value.bind(("127.0.0.1",0));return value.getsockname()[1] + +def main(): + parser=argparse.ArgumentParser(description=__doc__);parser.add_argument("--jar",required=True);args=parser.parse_args() + root=Path(__file__).resolve().parents[2];jar=Path(args.jar).resolve() + if not jar.is_file(): raise ValueError("Build a production bootJar first") + work=Path(tempfile.mkdtemp(prefix="h2-cluster-",dir=root/"build"));print(work,flush=True) + h2=next((Path.home()/".gradle/caches/modules-2/files-2.1/com.h2database/h2").rglob("h2-*.jar")) + db="jdbc:h2:file:"+(work/"cluster").as_posix()+";MODE=PostgreSQL;AUTO_SERVER=TRUE;DB_CLOSE_DELAY=-1;LOCK_TIMEOUT=30000;WRITE_DELAY=0" + flags=dict(creationflags=subprocess.CREATE_NO_WINDOW) if os.name=="nt" else {} + subprocess.run(["java","-cp",str(h2),"org.h2.tools.RunScript","-url",db,"-user","sa","-password","","-script",str(root/"src/main/resources/db/spring_session_and_shedlock.sql")],check=True,**flags) + processes=[];handles=[];ports=[port(),port()];logs={};results={} + common=["--server.address=127.0.0.1","--spring.profiles.active=cluster-verification","--spring.datasource.url="+db,"--spring.datasource.driver-class-name=org.h2.Driver","--spring.datasource.username=sa","--spring.datasource.password=","--spring.session.store-type=jdbc","--oswl.scheduler-lock.enabled=true","--oswl.monitoring.enabled=true","--oswl.monitoring.cron=0/20 * * * * *","--oswl.encryption.key=KOaEB3zxojumnrmUsXpl4tPQGXSCLd+pE5bEuOirJy0=","--oswl.airgapped.enabled=true","--spring.jpa.open-in-view=false"] + def request(index,path,cookies=None,data=None): + opener=urllib.request.build_opener(NoRedirect(),urllib.request.HTTPCookieProcessor(cookies if cookies is not None else http.cookiejar.CookieJar())) + req=urllib.request.Request(f"http://127.0.0.1:{ports[index]}"+path,data=urllib.parse.urlencode(data).encode() if data else None) + try: response=opener.open(req,timeout=10) + except urllib.error.HTTPError as error: response=error + with response:return response.status,response.read().decode("utf-8") + def csrf(body): + match=re.search(r'name="_csrf"[^>]*value="([^"]+)"',body) or re.search(r'name="_csrf"[^>]*content="([^"]+)"',body) + if not match:raise AssertionError("Missing CSRF token") + return match[1] + def sql(command): + result=subprocess.run(["java","-cp",str(h2),"org.h2.tools.Shell","-url",db,"-user","sa","-password","","-sql",command],capture_output=True,text=True,check=True,**flags) + if "Error:" in result.stdout:raise AssertionError("Fixture SQL failed") + return result.stdout + def start(index,ddl): + label=str(index)+"-"+str(len(processes));log=work/("instance-"+label+".log");logs[label]=log + stream=log.open("w",encoding="utf-8");handles.append(stream) + process=subprocess.Popen(["java","-Xmx768m","-jar",str(jar),"--server.port="+str(ports[index]),"--spring.jpa.hibernate.ddl-auto="+ddl,"--oswl.ai.embedded.dir="+str(work/("ai-"+str(index)))]+common,stdout=stream,stderr=subprocess.STDOUT,**flags);processes.append(process) + for _ in range(90): + if process.poll() is not None:raise AssertionError("JVM startup failed: "+log.name) + try: + if request(index,"/setup")[0] in (200,302):return process + except (OSError,urllib.error.URLError):pass + time.sleep(1) + raise AssertionError("JVM readiness timeout") + try: + a=start(0,"update");b=start(1,"none");cookies=http.cookiejar.CookieJar();email="cluster@example.test";password="ClusterVerifyPass123!" + _,body=request(0,"/setup",cookies) + status,_=request(0,"/setup",cookies,dict(email=email,password=password,passwordConfirm=password,displayName="Cluster Verification",_csrf=csrf(body)));assert status==302,"Setup failed" + def login(index,jar): + _,body=request(index,"/login",jar) + status,_=request(index,"/login",jar,dict(email=email,password=password,_csrf=csrf(body)));assert status==302,"Login failed" + login(0,cookies) + status,body=request(1,"/onboarding",cookies);assert session_identity(status,body,email),"Cross-instance session failed" + results["crossInstanceSession"]=True + assert session_rejected(request(1,"/onboarding")[0]);results["anonymousNegativeControl"]=True + stale=http.cookiejar.CookieJar() + for cookie in cookies:stale.set_cookie(copy.copy(cookie)) + status,_=request(0,"/logout",cookies,dict(_csrf=csrf(body)));assert status==302 + assert session_rejected(request(1,"/onboarding",stale)[0]),"Logged-out cookie accepted";results["logoutOldCookieRejected"]=True + cookies=http.cookiejar.CookieJar();login(1,cookies) + status,body=request(1,"/onboarding",cookies) + assert session_identity(status,body,email),"New login on B failed before kill, status="+str(status) + for number,canceled in [(1,False),(2,True)]: + job="00000000-0000-0000-0000-00000000000"+str(number) + snapshot=json.dumps(dict(jobId=job,phase="CLONING",componentCount=0)) + sql("INSERT INTO import_jobs(job_id,owner_id,repo_key,worker_id,phase,snapshot_json,lease_until,created_at,canceled,worker_active) VALUES('"+job+"',1,'fixture-"+str(number)+"','departed-worker','CLONING','"+snapshot+"',DATEADD('SECOND',10,CURRENT_TIMESTAMP),CURRENT_TIMESTAMP,"+str(canceled).upper()+",TRUE)") + a.kill();a.wait(timeout=20) + status,body=request(1,"/onboarding",cookies) + assert session_identity(status,body,email),"Surviving JVM lost session, status="+str(status);results["survivingJvmSession"]=True + a=start(0,"none");assert session_identity(*request(0,"/onboarding",cookies),email),"Restarted JVM lost session";results["restartedJvmSession"]=True + second=http.cookiejar.CookieJar();login(0,second) + assert session_rejected(request(1,"/onboarding",cookies)[0]),"Single-session limit not shared";results["singleSessionAcrossInstances"]=True + for _ in range(30): + proof=sql("SELECT CASE WHEN COUNT(*)=2 AND SUM(CASE WHEN phase='FAILED' AND finished_at IS NOT NULL AND worker_active=FALSE THEN 1 ELSE 0 END)=2 AND SUM(CASE WHEN canceled THEN 1 ELSE 0 END)=1 THEN 'LEASE_RECOVERED' ELSE 'WAIT' END FROM import_jobs WHERE worker_id='departed-worker'") + if "LEASE_RECOVERED" in proof:break + time.sleep(1) + else:raise AssertionError("Expired fixture jobs were not recovered") + assert "NO_DUPLICATE_SCAN" in sql("SELECT CASE WHEN COUNT(*)=0 THEN 'NO_DUPLICATE_SCAN' ELSE 'UNEXPECTED_SCAN' END FROM scan_results") + results["expiredFixtureJobsTerminatedWithoutReplay"]=True + results["fixtureCancellationPreserved"]=True + time.sleep(65) + cycles=scheduler_cycles({key:path.read_text(encoding="utf-8") for key,path in logs.items()}) + ordered=sorted(cycles);results["observedSchedulerCycles"]=len(cycles);results["missingCyclesBetweenObservations"]=[cycle for cycle in range(ordered[0],ordered[-1]+1) if cycle not in cycles] + results["oneOwnerPerObservedCycle"]=True;results["database"]="H2 PostgreSQL mode, same host; not PostgreSQL or LB evidence" + (work/"result.json").write_text(json.dumps(results,indent=2),encoding="utf-8");print(json.dumps(results),flush=True) + finally: + for process in processes: + if process.poll() is None:process.terminate() + for process in processes: + try:process.wait(timeout=15) + except subprocess.TimeoutExpired:process.kill();process.wait(timeout=10) + for stream in handles:stream.close() + +if __name__=="__main__":main() diff --git a/scripts/verification/verify-multi-instance.sh b/scripts/verification/verify-multi-instance.sh new file mode 100644 index 00000000..2f143b5f --- /dev/null +++ b/scripts/verification/verify-multi-instance.sh @@ -0,0 +1,194 @@ +#!/usr/bin/env bash +# OsWL multi-instance verification — a local approximation of "two instances behind a load +# balancer" run entirely on one machine, since no Docker/PostgreSQL cluster is assumed to be +# available. Boots two `local`-profile instances against the SAME H2 file DB (opened with +# AUTO_SERVER=TRUE so more than one JVM can hold it open at once), enables JDBC-backed HTTP +# sessions and cluster-wide scheduler locking (both opt-in, off by default — see +# application.yaml's `spring.session.store-type` and `oswl.scheduler-lock.enabled`), and checks +# the two things that actually matter for horizontal scaling: +# (a) a session created by logging into instance A is honored by instance B (the JDBC session +# store, not sticky in-memory Tomcat sessions, is what makes this possible) +# (b) the nightly monitoring job runs on exactly one instance per cycle, not once per instance +# (ShedLock, via the shared `shedlock` table) +# +# This is NOT a substitute for a real PostgreSQL-backed staging rehearsal — H2's AUTO_SERVER mode +# and two processes on one host don't exercise real network partitions, clock skew, or PostgreSQL +# advisory-lock semantics. Predicate self-tests alone do not verify session/scheduler wiring. +# +# Requires: a built boot jar (`./gradlew bootJar`), curl, Python 3. Uses a unique throwaway H2 DB +# under build/cluster-verification.* — never touches the developer's own ./oswl-db. +# +# Usage: ./scripts/verification/verify-multi-instance.sh + +set -euo pipefail + +# Result predicates have standalone regression checks; actual process/schema/session +# rehearsal is still unverified. Keep the explicit opt-in until it has run end to end. +if [[ "${OSWL_ALLOW_DRAFT_CLUSTER_CHECK:-0}" != "1" ]]; then + echo "Unverified runtime draft: assertion self-tests do not prove process/schema/session wiring. See ROADMAP.md." >&2 + exit 2 +fi + +cd "$(dirname "$0")/../.." + +RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; NC='\033[0m' +PASS=0 +FAIL=0 +pass() { echo -e "${GREEN}[PASS]${NC} $1"; PASS=$((PASS + 1)); } +fail() { echo -e "${RED}[FAIL]${NC} $1"; FAIL=$((FAIL + 1)); } +info() { echo -e "${YELLOW}[INFO]${NC} $1"; } + +require() { command -v "$1" &>/dev/null || { echo "Missing required tool: $1" >&2; exit 1; }; } +require curl +require java +require python3 + +mkdir -p "$(pwd)/build" +WORKDIR=$(mktemp -d "$(pwd)/build/cluster-verification.XXXXXX") +DB_PATH="$WORKDIR/cluster-db" +LOG_A="$WORKDIR/instance-a.log" +LOG_B="$WORKDIR/instance-b.log" +JAR_A="$WORKDIR/cookies-a.txt" +PORT_A=18080 +PORT_B=18081 +ENC_KEY="KOaEB3zxojumnrmUsXpl4tPQGXSCLd+pE5bEuOirJy0=" + + + +echo "== 1. Locate boot jar ==" +JAR=$(find build/libs -maxdepth 1 -name "*.jar" ! -name "*plain*" 2>/dev/null | head -1) +if [[ -z "$JAR" ]]; then + echo "No boot jar found under build/libs — run ./gradlew bootJar first." >&2 + exit 1 +fi +info "Using $JAR" + +echo "== 2. Pre-create spring_session/shedlock tables ==" +H2_JAR=$(find "${GRADLE_USER_HOME:-$HOME/.gradle}/caches/modules-2" -name "h2-*.jar" ! -name "*sources*" ! -name "*javadoc*" 2>/dev/null | head -1) +if [[ -z "$H2_JAR" ]]; then + echo "Could not locate the H2 jar in the Gradle cache." >&2 + exit 1 +fi +DB_URL="jdbc:h2:file:${DB_PATH};MODE=PostgreSQL;AUTO_SERVER=TRUE;DB_CLOSE_DELAY=-1" +java -cp "$H2_JAR" org.h2.tools.RunScript \ + -url "$DB_URL" -user sa -password "" \ + -script src/main/resources/db/spring_session_and_shedlock.sql +pass "spring_session/spring_session_attributes/shedlock tables created" + +echo "== 3. Start two instances against the same DB ==" +# LocalSmtpConfig (the embedded GreenMail SMTP mock, @Profile("local")) hardcodes port 3025 with +# no property to override it — fine for a single local dev instance, but a second instance on the +# same `local` profile fails to bind it. Rather than touch that dev-only code for a multi-instance +# test it was never meant to run under, instance A keeps the full `local` profile (GreenMail +# included, useful for watching OTP mail), and instance B runs with no profile, supplying only the +# handful of properties that profile would otherwise provide and actually matter here — the shared +# DB and the encryption key. `ddl-auto=none` on B avoids two instances racing to alter the schema. +COMMON_ARGS=( + "--spring.datasource.url=${DB_URL}" + "--spring.datasource.driver-class-name=org.h2.Driver" + "--spring.datasource.username=sa" + "--spring.datasource.password=" + "--spring.session.store-type=jdbc" + "--oswl.scheduler-lock.enabled=true" + "--oswl.monitoring.enabled=true" + "--oswl.monitoring.cron=0/20 * * * * *" + "--oswl.encryption.key=${ENC_KEY}" + "--logging.level.com.salkcoding.oswl.scheduler.ContinuousMonitoringScheduler=DEBUG" +) + +cleanup() { + kill "${PID_A:-}" "${PID_B:-}" 2>/dev/null || true + wait "${PID_A:-}" "${PID_B:-}" 2>/dev/null || true +} +trap cleanup EXIT + +wait_for_login_page() { + local port=$1 + for _ in $(seq 1 60); do + # A fresh (no admin yet) instance 302s /login -> /setup, so follow redirects (-L): /setup is + # the thing that's always a real 200 regardless of setup state. + code=$(curl -s --ipv4 -L -o /dev/null -w '%{http_code}' "http://127.0.0.1:${port}/setup" || true) + [[ "$code" == "200" ]] && return 0 + sleep 2 + done + return 1 +} + +# A first, alone, with ddl-auto=update — it owns schema creation. B (ddl-auto=none) only starts +# once A's schema is confirmed up, so B never queries a table that doesn't exist yet. +java -jar "$JAR" --server.port=$PORT_A --spring.profiles.active=local \ + --spring.jpa.hibernate.ddl-auto=update "${COMMON_ARGS[@]}" > "$LOG_A" 2>&1 & +PID_A=$! +wait_for_login_page "$PORT_A" || { fail "Instance A did not come up — see $LOG_A"; exit 1; } +pass "Instance A up on :$PORT_A (owns schema creation)" + + +# application.yaml defaults spring.profiles.active to "local" when SPRING_PROFILES_ACTIVE isn't +# set (`active: ${SPRING_PROFILES_ACTIVE:local}`), so omitting --spring.profiles.active here +# would silently activate `local` (and its GreenMail bean) anyway. Naming a profile that has no +# application-.yaml is harmless — Spring Boot just applies the base application.yaml. +java -jar "$JAR" --server.port=$PORT_B --spring.profiles.active=cluster-verify-b \ + --spring.jpa.hibernate.ddl-auto=none "${COMMON_ARGS[@]}" > "$LOG_B" 2>&1 & +PID_B=$! +wait_for_login_page "$PORT_B" || { fail "Instance B did not come up — see $LOG_B"; exit 1; } +pass "Instance B up on :$PORT_B (same DB file, AUTO_SERVER=TRUE — both JVMs hold it open concurrently)" + +echo "== 4. Create the initial admin account (via instance A's /setup) ==" +EMAIL="clusterverify@test.local" +PASSWORD="ClusterVerifyPass123!" +CSRF=$(curl -s --ipv4 -c "$JAR_A" "http://127.0.0.1:${PORT_A}/setup" \ + | grep -oE 'name="_csrf" value="[^"]+"' | head -1 | sed 's/.*value="//;s/"//') +curl -s --ipv4 -b "$JAR_A" -c "$JAR_A" -o /dev/null \ + -d "email=${EMAIL}" -d "password=${PASSWORD}" -d "passwordConfirm=${PASSWORD}" \ + -d "displayName=Cluster Verify" -d "_csrf=${CSRF}" \ + "http://127.0.0.1:${PORT_A}/setup" +pass "Initial admin created on instance A" + +echo "== 5. Log in on instance A, then reuse the session cookie against instance B ==" +CSRF=$(curl -s --ipv4 -c "$JAR_A" "http://127.0.0.1:${PORT_A}/login" \ + | grep -oE 'name="_csrf" value="[^"]+"' | head -1 | sed 's/.*value="//;s/"//') +curl -s --ipv4 -b "$JAR_A" -c "$JAR_A" -o /dev/null \ + -d "email=${EMAIL}" -d "password=${PASSWORD}" -d "_csrf=${CSRF}" \ + "http://127.0.0.1:${PORT_A}/login" + +BODY_B="$WORKDIR/session-b.html" +STATUS_B=$(curl -s --ipv4 -o "$BODY_B" -w '%{http_code}' -b "$JAR_A" "http://127.0.0.1:${PORT_B}/onboarding") +if python3 scripts/verification/cluster_assertions.py session "$STATUS_B" "$BODY_B" "$EMAIL"; then + pass "Instance B returned the authenticated identity without redirects" +else + fail "Instance B did not return the expected identity" +fi +ANONYMOUS_BODY="$WORKDIR/anonymous.html" +ANONYMOUS_STATUS=$(curl -s --ipv4 -o "$ANONYMOUS_BODY" -w '%{http_code}' "http://127.0.0.1:${PORT_B}/onboarding") +if python3 scripts/verification/cluster_assertions.py rejected "$ANONYMOUS_STATUS"; then + pass "Unauthenticated request rejected by the identity assertion" +else + fail "Unauthenticated request was not a valid redirect/denial" +fi + +CSRF=$(grep -oE 'name="_csrf" value="[^"]+"' "$BODY_B" | head -1 | sed 's/.*value="//;s/"//') +LOGOUT_STATUS=$(curl -s --ipv4 -b "$JAR_A" -o /dev/null -w '%{http_code}' \ + --data-urlencode "_csrf=${CSRF}" "http://127.0.0.1:${PORT_A}/logout") +[[ "$LOGOUT_STATUS" == "302" ]] || { fail "Logout was not accepted"; exit 1; } +LOGGED_OUT_BODY="$WORKDIR/logged-out.html" +LOGGED_OUT_STATUS=$(curl -s --ipv4 -b "$JAR_A" -o "$LOGGED_OUT_BODY" -w '%{http_code}' "http://127.0.0.1:${PORT_B}/onboarding") +if python3 scripts/verification/cluster_assertions.py rejected "$LOGGED_OUT_STATUS"; then + pass "Logged-out cookie rejected on instance B" +else + fail "Logged-out cookie did not receive a valid redirect/denial on instance B" +fi + +echo "== 6. Scheduler: wait ~100s (5 cron cycles at 20s) and check which instance ran the job ==" +sleep 100 +# ContinuousMonitoringScheduler itself logs nothing — the service it calls +# (ContinuousMonitoringService) is what actually logs the "[Monitor] cycle START/DONE" lines. +if python3 scripts/verification/cluster_assertions.py scheduler "$LOG_A" "$LOG_B"; then + pass "Observed cron cycles have one execution each; owner changes are allowed" +else + fail "Missing or duplicate scheduler evidence; inspect both logs" +fi + +echo +echo "== Summary: $PASS passed, $FAIL failed ==" +info "Logs kept at $LOG_A and $LOG_B for inspection. Throwaway DB at $DB_PATH.*" +[[ "$FAIL" -eq 0 ]] diff --git a/src/local/java/com/salkcoding/oswl/config/TmpObjectMapperConfig.java b/src/local/java/com/salkcoding/oswl/config/TmpObjectMapperConfig.java deleted file mode 100644 index 00381756..00000000 --- a/src/local/java/com/salkcoding/oswl/config/TmpObjectMapperConfig.java +++ /dev/null @@ -1,20 +0,0 @@ -package com.salkcoding.oswl.config; - -import org.springframework.context.annotation.Bean; -import org.springframework.context.annotation.Configuration; -import org.springframework.context.annotation.Profile; - -/** - * TEMPORARY local-only shim so bootRun starts while a parallel in-progress service - * (AuditLogSiemExportService) still injects the Jackson 2 ObjectMapper. - * DELETE THIS FILE once that service is fixed — do not commit. - */ -@Configuration -@Profile("local") -public class TmpObjectMapperConfig { - - @Bean - public com.fasterxml.jackson.databind.ObjectMapper objectMapper() { - return new com.fasterxml.jackson.databind.ObjectMapper(); - } -} diff --git a/src/local/java/com/salkcoding/oswl/controller/TestDataController.java b/src/local/java/com/salkcoding/oswl/controller/TestDataController.java index e760c3d9..b00651be 100644 --- a/src/local/java/com/salkcoding/oswl/controller/TestDataController.java +++ b/src/local/java/com/salkcoding/oswl/controller/TestDataController.java @@ -3,12 +3,12 @@ import com.salkcoding.oswl.auth.entity.User; import com.salkcoding.oswl.auth.repository.UserRepository; import com.salkcoding.oswl.demo.DemoImportCatalog; -import com.salkcoding.oswl.domain.entity.Project; -import com.salkcoding.oswl.repository.LibraryRepository; -import com.salkcoding.oswl.repository.ProjectMemberRepository; -import com.salkcoding.oswl.repository.ProjectRepository; -import com.salkcoding.oswl.service.ApiKeyService; -import com.salkcoding.oswl.service.QuickImportService; +import com.salkcoding.oswl.domain.entity.project.Project; +import com.salkcoding.oswl.repository.vulnerability.LibraryRepository; +import com.salkcoding.oswl.repository.project.ProjectMemberRepository; +import com.salkcoding.oswl.repository.project.ProjectRepository; +import com.salkcoding.oswl.service.apikey.ApiKeyService; +import com.salkcoding.oswl.service.ingest.QuickImportService; import com.salkcoding.oswl.auth.service.MailService; import lombok.RequiredArgsConstructor; import lombok.extern.slf4j.Slf4j; diff --git a/src/local/java/com/salkcoding/oswl/demo/SupplyChainHeuristicsScratch.java b/src/local/java/com/salkcoding/oswl/demo/SupplyChainHeuristicsScratch.java index 6bcfc666..82111254 100644 --- a/src/local/java/com/salkcoding/oswl/demo/SupplyChainHeuristicsScratch.java +++ b/src/local/java/com/salkcoding/oswl/demo/SupplyChainHeuristicsScratch.java @@ -1,14 +1,14 @@ package com.salkcoding.oswl.demo; -import com.salkcoding.oswl.domain.entity.Library; -import com.salkcoding.oswl.service.SupplyChainHeuristicsService; +import com.salkcoding.oswl.domain.entity.vulnerability.Library; +import com.salkcoding.oswl.service.vulnerability.SupplyChainHeuristicsService; import java.util.ArrayList; import java.util.List; /** * Development-only scratch verifier ({@code src/local/java} — not in the production bootJar) - * for the roadmap #16 supply-chain heuristics. + * for the supply-chain heuristics. * *

Run after {@code ./gradlew compileJava compileLocalJava processResources}: * 

diff --git a/src/local/java/com/salkcoding/oswl/local/CppManifestParserSanityCheck.java b/src/local/java/com/salkcoding/oswl/local/CppManifestParserSanityCheck.java
new file mode 100644
index 00000000..f47db718
--- /dev/null
+++ b/src/local/java/com/salkcoding/oswl/local/CppManifestParserSanityCheck.java
@@ -0,0 +1,73 @@
+package com.salkcoding.oswl.local;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.CondaPypiMappingService;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService;
+import com.salkcoding.oswl.service.ingest.MavenBomVersionResolver;
+
+import java.nio.file.Path;
+import java.util.List;
+
+/**
+ * Throwaway sanity check for the C/C++ manifest parsers (vcpkg.json, .gitmodules, conan.lock).
+ * Not part of the build or test suite — compiled and run manually against fixtures under
+ * args[0]/{vcpkg,conan,submodule}, mirroring {@link LockParserSanityCheck}.
+ */
+public final class CppManifestParserSanityCheck {
+
+    private CppManifestParserSanityCheck() {}
+
+    static void main(String[] args) throws Exception {
+        DependencyManifestParserService parser =
+                new DependencyManifestParserService(new MavenBomVersionResolver(), new CondaPypiMappingService());
+        int failures = 0;
+
+        Path vcpkgDir = Path.of(args[0], "vcpkg");
+        Path conanDir = Path.of(args[0], "conan");
+        Path submoduleDir = Path.of(args[0], "submodule");
+
+        var vcpkgResult = parser.parseDependencies(vcpkgDir, "vcpkg-fixture");
+        failures += check("vcpkg ecosystem", "VCPKG".equals(vcpkgResult.ecosystem()));
+        ScanPayload.ComponentPayload openssl = find(vcpkgResult.components(), "openssl");
+        failures += check("vcpkg openssl>=1.1.1k parsed",
+                openssl != null && "1.1.1k".equals(openssl.getVersion()));
+        failures += check("vcpkg zlib (unversioned string entry) parsed",
+                find(vcpkgResult.components(), "zlib") != null);
+        System.out.printf("  [vcpkg] %s%n", describe(vcpkgResult.components()));
+
+        var conanResult = parser.parseDependencies(conanDir, "conan-fixture");
+        failures += check("conan ecosystem", "CONAN".equals(conanResult.ecosystem()));
+        ScanPayload.ComponentPayload conanOpenssl = find(conanResult.components(), "openssl");
+        failures += check("conan openssl/1.1.1k parsed",
+                conanOpenssl != null && "1.1.1k".equals(conanOpenssl.getVersion()));
+        System.out.printf("  [conan] %s%n", describe(conanResult.components()));
+
+        var submoduleResult = parser.parseDependencies(submoduleDir, "submodule-fixture");
+        failures += check("submodule ecosystem", "SUBMODULE".equals(submoduleResult.ecosystem()));
+        ScanPayload.ComponentPayload sub = find(submoduleResult.components(), "third_party/openssl");
+        failures += check("submodule pinned SHA resolved (not a semantic version)",
+                sub != null && "fd78df59b0f656aefe96e39533130454aa957c00".equals(sub.getVersion()));
+        System.out.printf("  [submodule] %s%n", describe(submoduleResult.components()));
+
+        System.out.println(failures == 0 ? "ALL CHECKS PASSED" : "FAILURES: " + failures);
+        System.exit(failures == 0 ? 0 : 1);
+    }
+
+    private static ScanPayload.ComponentPayload find(List comps, String name) {
+        return comps.stream().filter(c -> name.equals(c.getName())).findFirst().orElse(null);
+    }
+
+    private static String describe(List comps) {
+        StringBuilder sb = new StringBuilder();
+        for (ScanPayload.ComponentPayload c : comps) {
+            if (!sb.isEmpty()) sb.append(", ");
+            sb.append(c.getName()).append('@').append(c.getVersion());
+        }
+        return sb.toString();
+    }
+
+    private static int check(String label, boolean ok) {
+        System.out.println((ok ? "  PASS " : "  FAIL ") + label);
+        return ok ? 0 : 1;
+    }
+}
diff --git a/src/local/java/com/salkcoding/oswl/local/CvssV4CalculatorSanityCheck.java b/src/local/java/com/salkcoding/oswl/local/CvssV4CalculatorSanityCheck.java
new file mode 100644
index 00000000..f8d6d9dd
--- /dev/null
+++ b/src/local/java/com/salkcoding/oswl/local/CvssV4CalculatorSanityCheck.java
@@ -0,0 +1,65 @@
+package com.salkcoding.oswl.local;
+
+import com.salkcoding.oswl.service.cvss.CvssV4Calculator;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * Throwaway sanity check for {@link CvssV4Calculator}, cross-checked against scores computed by
+ * FIRST's own unmodified reference JavaScript (github.com/FIRSTdotorg/cvss-v4-calculator,
+ * {@code cvss_score.js} run under Node against the same 20 vectors). Not part of the build or
+ * test suite — compiled and run manually, mirroring {@link LockParserSanityCheck}.
+ */
+public final class CvssV4CalculatorSanityCheck {
+
+    private CvssV4CalculatorSanityCheck() {}
+
+    // vector -> expected score, taken verbatim from the Node run of FIRST's reference cvss_score.js.
+    private static final Map EXPECTED = new LinkedHashMap<>();
+    static {
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", 9.3);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N", 0.0);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", 8.7);
+        EXPECTED.put("CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N", 5.1);
+        EXPECTED.put("CVSS:4.0/AV:P/AC:H/AT:P/PR:H/UI:A/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L", 1.0);
+        EXPECTED.put("CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N", 0.0);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", 9.5);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N", 5.3);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", 7.1);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U", 8.1);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P", 8.9);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A", 9.3);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/CR:H/IR:H/AR:H", 8.8);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/CR:L/IR:L/AR:L", 7.8);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/MVC:H/MVI:H/MVA:H", 9.3);
+        EXPECTED.put("CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", 2.1);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H", 7.9);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N", 9.2);
+        EXPECTED.put("CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", 2.4);
+        EXPECTED.put("CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N", 8.5);
+    }
+
+    public static void main(String[] args) {
+        int failures = 0;
+        for (Map.Entry e : EXPECTED.entrySet()) {
+            Double actual = CvssV4Calculator.baseScore(e.getKey());
+            boolean ok = actual != null && Math.abs(actual - e.getValue()) < 1e-9;
+            System.out.printf("%s %s expected=%s actual=%s%n", ok ? "PASS" : "FAIL", e.getKey(), e.getValue(), actual);
+            if (!ok) failures++;
+        }
+
+        // Malformed / non-v4.0 vectors must return null, not throw or guess.
+        failures += check("null for v3.1 vector", CvssV4Calculator.baseScore("CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") == null);
+        failures += check("null for missing required metric", CvssV4Calculator.baseScore("CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N") == null);
+        failures += check("null for garbage", CvssV4Calculator.baseScore("not a vector") == null);
+
+        System.out.println(failures == 0 ? "ALL CHECKS PASSED" : "FAILURES: " + failures);
+        System.exit(failures == 0 ? 0 : 1);
+    }
+
+    private static int check(String label, boolean ok) {
+        System.out.println((ok ? "  PASS " : "  FAIL ") + label);
+        return ok ? 0 : 1;
+    }
+}
diff --git a/src/local/java/com/salkcoding/oswl/local/LockParserSanityCheck.java b/src/local/java/com/salkcoding/oswl/local/LockParserSanityCheck.java
index 4f35403d..b79caf17 100644
--- a/src/local/java/com/salkcoding/oswl/local/LockParserSanityCheck.java
+++ b/src/local/java/com/salkcoding/oswl/local/LockParserSanityCheck.java
@@ -1,16 +1,21 @@
 package com.salkcoding.oswl.local;
 
 import com.salkcoding.oswl.dto.scan.ScanPayload;
-import com.salkcoding.oswl.service.DependencyManifestParserService;
-import com.salkcoding.oswl.service.MavenBomVersionResolver;
+import com.salkcoding.oswl.service.ingest.CondaPypiMappingService;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService;
+import com.salkcoding.oswl.service.ingest.MavenBomVersionResolver;
 
 import java.nio.file.Files;
 import java.nio.file.Path;
 import java.util.List;
 
 /**
- * Throwaway sanity check for roadmap item 7 (composer.lock / conan.lock parsing).
- * Not part of the build or test suite — compiled and run manually, then deleted.
+ * Throwaway sanity check for composer.lock / conan.lock / Podfile.lock / conda lock-format
+ * parsing. Not part of the build or test suite — compiled and run manually, then deleted.
+ *
+ * With no arguments only the fixture-free checks run (upload-path content detection plus a
+ * temp-dir pixi.lock repo walk); pass a fixture root directory to also run the historical
+ * composer/conan tree checks.
  */
 public final class LockParserSanityCheck {
 
@@ -18,13 +23,143 @@ private LockParserSanityCheck() {}
 
     static void main(String[] args) throws Exception {
         DependencyManifestParserService parser =
-                new DependencyManifestParserService(new MavenBomVersionResolver());
+                new DependencyManifestParserService(new MavenBomVersionResolver(), new CondaPypiMappingService());
+        int failures = 0;
+
+        if (args.length > 0) {
+            failures += runFixtureChecks(parser, args[0]);
+        }
+
+        failures += runUploadPathChecks(parser);
+        failures += runPixiRepoWalkCheck(parser);
+
+        System.out.println(failures == 0 ? "ALL CHECKS PASSED" : "FAILURES: " + failures);
+        System.exit(failures == 0 ? 0 : 1);
+    }
+
+    // ── Upload path: parseUploadedLockFile by content shape (no fixtures needed) ──
+    private static int runUploadPathChecks(DependencyManifestParserService parser) {
+        int failures = 0;
+
+        // Podfile.lock (YAML-shaped, line-parsed)
+        byte[] podfile = ("PODS:\n"
+                + "  - Alamofire (5.6.4)\n"
+                + "  - GoogleUtilities/Environment (7.11.0):\n"
+                + "    - GoogleUtilities/Core\n"
+                + "DEPENDENCIES:\n"
+                + "  - Alamofire\n").getBytes();
+        var pods = parser.parseUploadedLockFile(podfile, "upload-podfile");
+        failures += check("upload Podfile.lock recognized", pods != null && pods.size() == 2);
+        ScanPayload.ComponentPayload alamofire = pods != null ? find(pods, "Alamofire") : null;
+        failures += check("upload Podfile.lock Alamofire 5.6.4 COCOAPODS",
+                alamofire != null && "5.6.4".equals(alamofire.getVersion())
+                        && "COCOAPODS".equals(alamofire.getEcosystem()));
+        ScanPayload.ComponentPayload gu = pods != null ? find(pods, "GoogleUtilities") : null;
+        failures += check("upload Podfile.lock subspec folded into base pod",
+                gu != null && "7.11.0".equals(gu.getVersion()));
+
+        // conda-lock.yml (YAML with a flat "package" list)
+        byte[] condaLock = ("version: 1\n"
+                + "metadata:\n  content_hash: {}\n"
+                + "channels: []\nplatforms: []\n"
+                + "package:\n"
+                + "  - name: openssl\n    version: 1.1.1k\n    manager: conda\n"
+                + "  - name: requests\n    version: 2.31.0\n    manager: pip\n").getBytes();
+        var condaComps = parser.parseUploadedLockFile(condaLock, "upload-condalock");
+        failures += check("upload conda-lock.yml recognized", condaComps != null && condaComps.size() == 2);
+        ScanPayload.ComponentPayload requests = condaComps != null ? find(condaComps, "requests") : null;
+        failures += check("upload conda-lock pip entry stays PYPI",
+                requests != null && "PYPI".equals(requests.getEcosystem())
+                        && "2.31.0".equals(requests.getVersion()));
+        ScanPayload.ComponentPayload opensslConda = condaComps != null ? find(condaComps, "openssl") : null;
+        failures += check("upload conda-lock conda entry tagged CONDA or mapped PYPI",
+                opensslConda != null && "1.1.1k".equals(opensslConda.getVersion())
+                        && ("CONDA".equals(opensslConda.getEcosystem()) || "PYPI".equals(opensslConda.getEcosystem())));
+
+        // pixi.lock (YAML: environments → per-platform package URLs)
+        byte[] pixiLock = pixiLockBytes();
+        var pixiComps = parser.parseUploadedLockFile(pixiLock, "upload-pixi");
+        failures += check("upload pixi.lock recognized", pixiComps != null && pixiComps.size() == 2);
+        ScanPayload.ComponentPayload pixiOpenssl = pixiComps != null ? find(pixiComps, "openssl") : null;
+        failures += check("upload pixi.lock conda URL filename -> openssl 3.1.1",
+                pixiOpenssl != null && "3.1.1".equals(pixiOpenssl.getVersion()));
+        ScanPayload.ComponentPayload pixiRequests = pixiComps != null ? find(pixiComps, "requests") : null;
+        failures += check("upload pixi.lock pypi entry PYPI 2.31.0",
+                pixiRequests != null && "PYPI".equals(pixiRequests.getEcosystem())
+                        && "2.31.0".equals(pixiRequests.getVersion()));
+
+        // conda list --explicit spec (no stable filename — content shape only)
+        byte[] explicit = ("# This file may be used to create an environment using:\n"
+                + "# $ conda create --name myenv --file \n"
+                + "# platform: linux-64\n"
+                + "@EXPLICIT\n"
+                + "https://conda.anaconda.org/conda-forge/linux-64/openssl-1.1.1k-hd590300_0.tar.bz2\n"
+                + "https://conda.anaconda.org/conda-forge/linux-64/_libgcc_mutex-0.1-conda_forge.tar.bz2\n").getBytes();
+        var explicitComps = parser.parseUploadedLockFile(explicit, "upload-explicit");
+        failures += check("upload conda explicit spec recognized",
+                explicitComps != null && explicitComps.size() == 2);
+        ScanPayload.ComponentPayload explicitOpenssl = explicitComps != null ? find(explicitComps, "openssl") : null;
+        failures += check("upload explicit openssl 1.1.1k",
+                explicitOpenssl != null && "1.1.1k".equals(explicitOpenssl.getVersion()));
+        ScanPayload.ComponentPayload libgcc = explicitComps != null ? find(explicitComps, "_libgcc_mutex") : null;
+        failures += check("upload explicit leading-underscore name parsed",
+                libgcc != null && "0.1".equals(libgcc.getVersion()));
+
+        // Misdetection guards
+        failures += check("CycloneDX JSON not misdetected as lock file",
+                parser.parseUploadedLockFile("{\"bomFormat\":\"CycloneDX\",\"specVersion\":\"1.6\",\"version\":1,\"components\":[]}".getBytes(), "upload-sbom") == null);
+        failures += check("package-lock.json not misdetected as composer.lock",
+                parser.parseUploadedLockFile("{\"name\":\"x\",\"version\":\"1.0.0\",\"lockfileVersion\":3,\"requires\":true,\"packages\":{\"\":{\"name\":\"x\"}}}".getBytes(), "upload-npm") == null);
+        failures += check("CycloneDX XML not misdetected as lock file",
+                parser.parseUploadedLockFile("".getBytes(), "upload-xml") == null);
+        failures += check("random YAML not misdetected",
+                parser.parseUploadedLockFile("foo: bar\nbaz: 1\n".getBytes(), "upload-yaml") == null);
+        failures += check("pnpm-lock.yaml not misdetected as conda-lock",
+                parser.parseUploadedLockFile("lockfileVersion: '9.0'\npackages:\n  /lodash@4.17.21:\n    resolution: {}\n".getBytes(), "upload-pnpm") == null);
+        failures += check("garbage returns null",
+                parser.parseUploadedLockFile("not json at all".getBytes(), "upload-garbage") == null);
+        return failures;
+    }
+
+    // ── Repo-walk path: pixi.lock in a temp tree (exercises ManifestCollectRules wiring) ──
+    private static int runPixiRepoWalkCheck(DependencyManifestParserService parser) throws Exception {
+        int failures = 0;
+        Path dir = Files.createTempDirectory("oswl-pixi-fixture");
+        try {
+            Files.write(dir.resolve("pixi.lock"), pixiLockBytes());
+            var result = parser.parseDependencies(dir, "pixi-fixture");
+            failures += check("repo-walk pixi.lock found", result.components().size() == 2);
+            ScanPayload.ComponentPayload openssl = find(result.components(), "openssl");
+            failures += check("repo-walk pixi.lock openssl 3.1.1",
+                    openssl != null && "3.1.1".equals(openssl.getVersion()));
+        } finally {
+            Files.deleteIfExists(dir.resolve("pixi.lock"));
+            Files.deleteIfExists(dir);
+        }
+        return failures;
+    }
+
+    private static byte[] pixiLockBytes() {
+        return ("version: 6\n"
+                + "environments:\n"
+                + "  default:\n"
+                + "    channels:\n"
+                + "      - url: https://conda.anaconda.org/conda-forge/\n"
+                + "    packages:\n"
+                + "      linux-64:\n"
+                + "        - conda: https://conda.anaconda.org/conda-forge/linux-64/openssl-3.1.1-hd590300_1.conda\n"
+                + "        - pypi: https://files.pythonhosted.org/packages/xx/requests-2.31.0-py3-none-any.whl\n"
+                + "          name: requests\n"
+                + "          version: 2.31.0\n").getBytes();
+    }
+
+    private static int runFixtureChecks(DependencyManifestParserService parser, String fixtureRoot) throws Exception {
         int failures = 0;
 
         // ── 1. Repo-walk parse: composer.lock + conan.lock (2.x) in one tree ──
-        Path composerDir = Path.of(args[0], "composer");
-        Path conan2Dir   = Path.of(args[0], "conan2");
-        Path conan1Dir   = Path.of(args[0], "conan1");
+        Path composerDir = Path.of(fixtureRoot, "composer");
+        Path conan2Dir   = Path.of(fixtureRoot, "conan2");
+        Path conan1Dir   = Path.of(fixtureRoot, "conan1");
 
         var composerResult = parser.parseDependencies(composerDir, "composer-fixture");
         failures += check("composer ecosystem", "COMPOSER".equals(composerResult.ecosystem()));
@@ -89,21 +224,7 @@ static void main(String[] args) throws Exception {
         failures += check("upload conan 1.x lock recognized",
                 uploadedConan1 != null && uploadedConan1.size() == 3);
 
-        // CycloneDX JSON must NOT be detected as a lock file (falls back to SBOM path)
-        byte[] cycloneDx = ("{\"bomFormat\":\"CycloneDX\",\"specVersion\":\"1.6\",\"version\":1,"
-                + "\"components\":[]}").getBytes();
-        failures += check("CycloneDX JSON not misdetected as lock file",
-                parser.parseUploadedLockFile(cycloneDx, "upload-sbom") == null);
-        // package-lock.json must NOT be misdetected as composer.lock
-        byte[] npmLock = ("{\"name\":\"x\",\"version\":\"1.0.0\",\"lockfileVersion\":3,"
-                + "\"requires\":true,\"packages\":{\"\":{\"name\":\"x\"}}}").getBytes();
-        failures += check("package-lock.json not misdetected as composer.lock",
-                parser.parseUploadedLockFile(npmLock, "upload-npm") == null);
-        failures += check("garbage returns null",
-                parser.parseUploadedLockFile("not json at all".getBytes(), "upload-garbage") == null);
-
-        System.out.println(failures == 0 ? "ALL CHECKS PASSED" : "FAILURES: " + failures);
-        System.exit(failures == 0 ? 0 : 1);
+        return failures;
     }
 
     private static ScanPayload.ComponentPayload find(List comps, String name) {
diff --git a/src/local/java/com/salkcoding/oswl/local/LogoResizeSanityCheck.java b/src/local/java/com/salkcoding/oswl/local/LogoResizeSanityCheck.java
new file mode 100644
index 00000000..e2f9d2da
--- /dev/null
+++ b/src/local/java/com/salkcoding/oswl/local/LogoResizeSanityCheck.java
@@ -0,0 +1,88 @@
+package com.salkcoding.oswl.local;
+
+import com.salkcoding.oswl.util.LogoImageNormalizer;
+
+import javax.imageio.ImageIO;
+import java.awt.image.BufferedImage;
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.util.Base64;
+
+/**
+ * Throwaway sanity check for {@link LogoImageNormalizer}. Not part of the build or test
+ * suite — compiled and run manually, then deleted.
+ */
+public final class LogoResizeSanityCheck {
+
+    private LogoResizeSanityCheck() {}
+
+    static void main(String[] args) throws Exception {
+        int failures = 0;
+
+        // 1. Oversized PNG with alpha → downscaled to 256 on the long edge, alpha kept
+        String bigPng = toDataUri(makeImage(2000, 1000, true), "png");
+        String resized = LogoImageNormalizer.normalize(bigPng);
+        BufferedImage decoded = decode(resized);
+        failures += check("oversized PNG downscaled to 256x128",
+                decoded.getWidth() == 256 && decoded.getHeight() == 128);
+        failures += check("resized PNG keeps alpha",
+                resized.startsWith("data:image/png;base64,") && decoded.getColorModel().hasAlpha());
+
+        // 2. Small image → returned byte-identical (no re-encode)
+        String small = toDataUri(makeImage(100, 60, true), "png");
+        failures += check("small image returned unchanged", small.equals(LogoImageNormalizer.normalize(small)));
+
+        // 3. Oversized JPEG → stays JPEG, no alpha
+        String bigJpeg = toDataUri(makeImage(1024, 2048, false), "jpeg");
+        String resizedJpeg = LogoImageNormalizer.normalize(bigJpeg);
+        BufferedImage decodedJpeg = decode(resizedJpeg);
+        failures += check("oversized JPEG stays jpeg, 128x256",
+                resizedJpeg.startsWith("data:image/jpeg;base64,")
+                        && decodedJpeg.getWidth() == 128 && decodedJpeg.getHeight() == 256);
+        failures += check("resized JPEG has no alpha", !decodedJpeg.getColorModel().hasAlpha());
+
+        // 4. Exact-boundary image (256px) → unchanged
+        String boundary = toDataUri(makeImage(256, 100, false), "png");
+        failures += check("256px boundary image unchanged", boundary.equals(LogoImageNormalizer.normalize(boundary)));
+
+        // 5. Garbage → IllegalArgumentException
+        failures += check("non-image data URI rejected",
+                throwsIllegal(() -> LogoImageNormalizer.normalize("data:image/png;base64,aGVsbG8gd29ybGQ=")));
+        failures += check("non-base64 payload rejected",
+                throwsIllegal(() -> LogoImageNormalizer.normalize("data:image/png;base64,!!!notbase64!!!")));
+        failures += check("plain text rejected",
+                throwsIllegal(() -> LogoImageNormalizer.normalize("hello")));
+
+        System.out.println(failures == 0 ? "ALL CHECKS PASSED" : "FAILURES: " + failures);
+        System.exit(failures == 0 ? 0 : 1);
+    }
+
+    private static BufferedImage makeImage(int w, int h, boolean alpha) {
+        return new BufferedImage(w, h, alpha ? BufferedImage.TYPE_INT_ARGB : BufferedImage.TYPE_INT_RGB);
+    }
+
+    private static String toDataUri(BufferedImage image, String format) throws Exception {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        ImageIO.write(image, format, out);
+        return "data:image/" + format + ";base64," + Base64.getEncoder().encodeToString(out.toByteArray());
+    }
+
+    private static BufferedImage decode(String dataUri) throws Exception {
+        String payload = dataUri.substring(dataUri.indexOf(',') + 1);
+        return ImageIO.read(new ByteArrayInputStream(Base64.getDecoder().decode(payload)));
+    }
+
+    private static boolean throwsIllegal(Runnable r) {
+        try {
+            r.run();
+            return false;
+        } catch (IllegalArgumentException e) {
+            return true;
+        }
+    }
+
+    private static int check(String label, boolean ok) {
+        System.out.println((ok ? "  PASS " : "  FAIL ") + label);
+        return ok ? 0 : 1;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/cli/AuditLogIntegrityCli.java b/src/main/java/com/salkcoding/oswl/auth/cli/AuditLogIntegrityCli.java
new file mode 100644
index 00000000..0965e2e2
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/cli/AuditLogIntegrityCli.java
@@ -0,0 +1,43 @@
+package com.salkcoding.oswl.auth.cli;
+
+import com.salkcoding.oswl.auth.dto.AuditLogIntegrityReport;
+import com.salkcoding.oswl.auth.service.AuditLogIntegrityService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.CommandLineRunner;
+import org.springframework.boot.SpringApplication;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.context.ApplicationContext;
+import org.springframework.stereotype.Component;
+
+@Slf4j
+@Component
+@ConditionalOnProperty("oswl.audit.integrity.verify-and-exit")
+@RequiredArgsConstructor
+public class AuditLogIntegrityCli implements CommandLineRunner {
+
+    private final AuditLogIntegrityService integrityService;
+    private final ApplicationContext context;
+
+    @Value("${oswl.audit.integrity.batch-size:1000}")
+    private int batchSize;
+
+    @Override
+    public void run(String... args) {
+        AuditLogIntegrityReport report = integrityService.verify(null, batchSize);
+
+        System.out.println("[audit-log-integrity] verified=" + report.isVerified()
+                + " total=" + report.getTotal()
+                + " unhashed=" + report.getUnhashedCount()
+                + " broken=" + report.getBrokenCount()
+                + (report.getFirstBrokenId() != null ? " firstBrokenId=" + report.getFirstBrokenId() : ""));
+
+        if (!report.getBrokenIds().isEmpty()) {
+            System.err.println("[audit-log-integrity] broken ids: " + report.getBrokenIds());
+        }
+
+        int exitCode = report.isVerified() ? 0 : 1;
+        System.exit(SpringApplication.exit(context, () -> exitCode));
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/AdminAuditLogIntegrityController.java b/src/main/java/com/salkcoding/oswl/auth/controller/AdminAuditLogIntegrityController.java
new file mode 100644
index 00000000..ef6fea2a
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/AdminAuditLogIntegrityController.java
@@ -0,0 +1,28 @@
+package com.salkcoding.oswl.auth.controller;
+
+import com.salkcoding.oswl.auth.controller.spec.AdminAuditLogIntegrityControllerSpec;
+import com.salkcoding.oswl.auth.dto.AuditLogFilter;
+import com.salkcoding.oswl.auth.dto.AuditLogIntegrityReport;
+import com.salkcoding.oswl.auth.service.AuditLogIntegrityService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/api/admin/audit-logs/integrity")
+@RequiredArgsConstructor
+@PreAuthorize("hasPermission(null, 'AUDIT_LOG_VERIFY') or hasRole('SYSTEM_ADMIN')")
+public class AdminAuditLogIntegrityController implements AdminAuditLogIntegrityControllerSpec {
+
+    private final AuditLogIntegrityService integrityService;
+
+    @GetMapping("/verify")
+    public AuditLogIntegrityReport verify(@ModelAttribute AuditLogFilter filter,
+                                          @RequestParam(defaultValue = "1000") int batchSize) {
+        return integrityService.verify(filter, batchSize);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/AuthViewController.java b/src/main/java/com/salkcoding/oswl/auth/controller/AuthViewController.java
index 9184df93..df103cf3 100644
--- a/src/main/java/com/salkcoding/oswl/auth/controller/AuthViewController.java
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/AuthViewController.java
@@ -21,7 +21,7 @@ public class AuthViewController {
 
     private final OtpService             otpService;
     private final SecuritySettingService securitySettingService;
-    /** Present only when an OIDC provider is configured (roadmap #13 SSO). */
+    /** Present only when an OIDC provider is configured (SSO). */
     private final org.springframework.beans.factory.ObjectProvider<
             org.springframework.security.oauth2.client.registration.ClientRegistrationRepository> clientRegistrations;
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/OnboardingController.java b/src/main/java/com/salkcoding/oswl/auth/controller/OnboardingController.java
new file mode 100644
index 00000000..93d03bea
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/OnboardingController.java
@@ -0,0 +1,40 @@
+package com.salkcoding.oswl.auth.controller;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.auth.service.OnboardingService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+/**
+ * Post-setup onboarding wizard — a skippable, re-runnable guided tour covering
+ * SSO/user invites, repo connection, policy defaults, and notifications. Tracked separately
+ * from {@link com.salkcoding.oswl.auth.entity.InstanceSetupLock}, which only covers creating
+ * the first admin account. Reachable by any authenticated user (re-run link in Settings), but
+ * the post-login auto-redirect to it only fires for the system admin.
+ */
+@Controller
+@RequestMapping("/onboarding")
+@RequiredArgsConstructor
+public class OnboardingController {
+
+    private final OnboardingService onboardingService;
+
+    @GetMapping
+    public String wizard(Model model, @AuthenticationPrincipal OswlUserPrincipal principal) {
+        model.addAttribute("stepStatus",
+                onboardingService.stepStatus(principal != null ? principal.getUserId() : null));
+        return "auth/onboarding";
+    }
+
+    /** Marks the wizard done — reached by both "Finish" and every step's "Skip" advancing to the end. */
+    @PostMapping("/complete")
+    public String complete() {
+        onboardingService.markCompleted();
+        return "redirect:/projects";
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/OtpVerifyController.java b/src/main/java/com/salkcoding/oswl/auth/controller/OtpVerifyController.java
index ce468cec..97973010 100644
--- a/src/main/java/com/salkcoding/oswl/auth/controller/OtpVerifyController.java
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/OtpVerifyController.java
@@ -119,7 +119,7 @@ public ResponseEntity> verifyOtp(
         loginCompletionService.recordSuccessfulLogin(principal.getUsername());
 
         log.info("[OTP] 2FA authentication succeeded for user {}.", principal.getUsername());
-        String redirectUrl = principal.isMustChangePassword() ? "/change-password" : "/projects";
+        String redirectUrl = loginCompletionService.resolvePostLoginDestination(principal);
         return ResponseEntity.ok(Map.of("redirectUrl", redirectUrl));
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/UserThemeController.java b/src/main/java/com/salkcoding/oswl/auth/controller/UserThemeController.java
new file mode 100644
index 00000000..616a1926
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/UserThemeController.java
@@ -0,0 +1,47 @@
+package com.salkcoding.oswl.auth.controller;
+
+import com.salkcoding.oswl.auth.controller.spec.UserThemeControllerSpec;
+import com.salkcoding.oswl.auth.dto.UserThemeRequest;
+import com.salkcoding.oswl.auth.enums.UserThemeMode;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.auth.service.UserThemeService;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.Map;
+
+@RestController
+@RequestMapping("/api/my")
+@RequiredArgsConstructor
+public class UserThemeController implements UserThemeControllerSpec {
+
+    private final UserThemeService userThemeService;
+
+    @GetMapping("/theme")
+    public ResponseEntity> getTheme(
+            @AuthenticationPrincipal OswlUserPrincipal principal) {
+        if (principal == null) {
+            return ResponseEntity.status(401).body(Map.of("theme", UserThemeMode.LIGHT.name()));
+        }
+        UserThemeMode mode = userThemeService.getTheme(principal.getUserId());
+        return ResponseEntity.ok(Map.of("theme", mode.name()));
+    }
+
+    @PostMapping("/theme")
+    public ResponseEntity> updateTheme(
+            @AuthenticationPrincipal OswlUserPrincipal principal,
+            @RequestBody @Valid UserThemeRequest request) {
+        if (principal == null) {
+            return ResponseEntity.status(401).body(Map.of("error", "Authentication required."));
+        }
+        userThemeService.updateTheme(principal, request.getTheme());
+        return ResponseEntity.ok(Map.of("theme", request.getTheme().name()));
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/spec/AdminAuditLogIntegrityControllerSpec.java b/src/main/java/com/salkcoding/oswl/auth/controller/spec/AdminAuditLogIntegrityControllerSpec.java
new file mode 100644
index 00000000..aa05287c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/spec/AdminAuditLogIntegrityControllerSpec.java
@@ -0,0 +1,33 @@
+package com.salkcoding.oswl.auth.controller.spec;
+
+import com.salkcoding.oswl.auth.dto.AuditLogFilter;
+import com.salkcoding.oswl.auth.dto.AuditLogIntegrityReport;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.bind.annotation.RequestParam;
+
+@Tag(name = "Admin — Audit Log Integrity", description = "Hash-chain verification of the audit trail. Requires the AUDIT_LOG_VERIFY permission.")
+public interface AdminAuditLogIntegrityControllerSpec {
+
+    @Operation(summary = "Verify the audit log integrity chain",
+        description = """
+            Recomputes the SHA-256 integrity hash for each audit log entry and checks that every
+            hashed row references the hash of the immediately preceding row. Rows without a hash
+            are treated as legacy entries and are skipped until the first hashed row is reached.
+            The verification itself is recorded as AUDIT_LOG.VERIFY.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Integrity verification report"),
+        @ApiResponse(responseCode = "403", description = "Caller lacks AUDIT_LOG_VERIFY", content = @Content)
+    })
+    AuditLogIntegrityReport verify(
+        @ModelAttribute AuditLogFilter filter,
+        @Parameter(description = "Number of rows to verify in each batch", example = "1000")
+        @RequestParam(defaultValue = "1000") int batchSize
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/controller/spec/UserThemeControllerSpec.java b/src/main/java/com/salkcoding/oswl/auth/controller/spec/UserThemeControllerSpec.java
new file mode 100644
index 00000000..35d049cb
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/controller/spec/UserThemeControllerSpec.java
@@ -0,0 +1,45 @@
+package com.salkcoding.oswl.auth.controller.spec;
+
+import com.salkcoding.oswl.auth.dto.UserThemeRequest;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.ExampleObject;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.RequestBody;
+
+import java.util.Map;
+
+@Tag(name = "My Account", description = "Self-service account operations for the signed-in user.")
+public interface UserThemeControllerSpec {
+
+    @Operation(summary = "Get current UI theme",
+        description = "Returns the authenticated user's saved theme preference (LIGHT, DARK, or SYSTEM).")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Theme preference",
+            content = @Content(examples = @ExampleObject(value = "{ \"theme\": \"SYSTEM\" }"))),
+        @ApiResponse(responseCode = "401", description = "Not authenticated", content = @Content)
+    })
+    ResponseEntity> getTheme(
+        @Parameter(hidden = true) @AuthenticationPrincipal OswlUserPrincipal principal
+    );
+
+    @Operation(summary = "Update UI theme",
+        description = "Persists the user's UI theme preference. Use SYSTEM to follow the OS/browser setting.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Theme updated",
+            content = @Content(examples = @ExampleObject(value = "{ \"theme\": \"DARK\" }"))),
+        @ApiResponse(responseCode = "400", description = "Invalid theme value", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Not authenticated", content = @Content)
+    })
+    ResponseEntity> updateTheme(
+        @Parameter(hidden = true) @AuthenticationPrincipal OswlUserPrincipal principal,
+        @Valid @RequestBody UserThemeRequest request
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogDto.java b/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogDto.java
index a0efcac4..4e65af4a 100644
--- a/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogDto.java
+++ b/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogDto.java
@@ -30,4 +30,8 @@ public class AuditLogDto {
     private LocalDateTime createdAt;
     @Schema(description = "Optional extra detail", example = "roles=[Developer]")
     private String detail;
+    @Schema(description = "SHA-256 hash of the preceding audit log entry", example = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
+    private String prevHash;
+    @Schema(description = "SHA-256 integrity hash of this entry", example = "b5d4045c3f466fa91fe2cc6abe79232a1a57cdf104f7a26e716e0a1e2789df78")
+    private String hash;
 }
diff --git a/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogIntegrityReport.java b/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogIntegrityReport.java
new file mode 100644
index 00000000..2ae07db4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/dto/AuditLogIntegrityReport.java
@@ -0,0 +1,38 @@
+package com.salkcoding.oswl.auth.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Schema(description = "Audit log integrity chain verification report")
+@Data
+@Builder
+@AllArgsConstructor
+public class AuditLogIntegrityReport {
+
+    @Schema(description = "True when no broken chain links were detected among hashed entries")
+    private boolean verified;
+
+    @Schema(description = "Total audit log rows examined")
+    private long total;
+
+    @Schema(description = "Rows that have no stored hash (legacy entries created before the chain was enabled)")
+    private long unhashedCount;
+
+    @Schema(description = "Number of rows that failed integrity or continuity checks")
+    private long brokenCount;
+
+    @Schema(description = "Primary key of the first failing entry, if any")
+    private Long firstBrokenId;
+
+    @Schema(description = "Primary key of the last entry processed")
+    private Long lastId;
+
+    @Schema(description = "Up to 100 identifiers of failing entries")
+    @Builder.Default
+    private List brokenIds = new ArrayList<>();
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/dto/CreateUserRequest.java b/src/main/java/com/salkcoding/oswl/auth/dto/CreateUserRequest.java
index e0563df2..c2e03e66 100644
--- a/src/main/java/com/salkcoding/oswl/auth/dto/CreateUserRequest.java
+++ b/src/main/java/com/salkcoding/oswl/auth/dto/CreateUserRequest.java
@@ -22,6 +22,8 @@ public class CreateUserRequest {
 
     @Schema(description = "Temporary password the user must change on first login", example = "Temp@1234")
     @NotBlank @Size(min = 8)
+    @lombok.ToString.Exclude
+    @com.fasterxml.jackson.annotation.JsonProperty(access = com.fasterxml.jackson.annotation.JsonProperty.Access.WRITE_ONLY)
     private String temporaryPassword;
 
     @Schema(description = "IDs of role templates to assign (empty = no roles)", example = "[1, 3]")
diff --git a/src/main/java/com/salkcoding/oswl/auth/dto/UserThemeRequest.java b/src/main/java/com/salkcoding/oswl/auth/dto/UserThemeRequest.java
new file mode 100644
index 00000000..b62ab71f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/dto/UserThemeRequest.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.auth.dto;
+
+import com.salkcoding.oswl.auth.enums.UserThemeMode;
+import jakarta.validation.constraints.NotNull;
+import lombok.Value;
+
+@Value
+public class UserThemeRequest {
+
+    @NotNull
+    UserThemeMode theme;
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/entity/AuditLog.java b/src/main/java/com/salkcoding/oswl/auth/entity/AuditLog.java
index a97f0054..c66a206b 100644
--- a/src/main/java/com/salkcoding/oswl/auth/entity/AuditLog.java
+++ b/src/main/java/com/salkcoding/oswl/auth/entity/AuditLog.java
@@ -52,4 +52,12 @@ public class AuditLog {
     @CreationTimestamp
     @Column(name = "created_at", nullable = false, updatable = false)
     private LocalDateTime createdAt;
+
+    /** Hash of the immediately preceding audit log entry (null for the first entry in the chain). */
+    @Column(name = "prev_hash", length = 64)
+    private String prevHash;
+
+    /** SHA-256 integrity hash covering this entry's contents and {@code prevHash}. */
+    @Column(name = "hash", length = 64)
+    private String hash;
 }
diff --git a/src/main/java/com/salkcoding/oswl/auth/entity/OnboardingProgress.java b/src/main/java/com/salkcoding/oswl/auth/entity/OnboardingProgress.java
new file mode 100644
index 00000000..60750707
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/entity/OnboardingProgress.java
@@ -0,0 +1,39 @@
+package com.salkcoding.oswl.auth.entity;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+import lombok.AccessLevel;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+import java.time.Instant;
+
+/**
+ * Singleton row (id = 1) — set once the post-setup onboarding wizard is finished or dismissed.
+ * Tracked separately from {@link InstanceSetupLock}: setup creates the first admin account,
+ * onboarding is the guided tour after that (SSO/invites, repo connection, policy defaults,
+ * notifications) — skippable, and re-runnable from Settings even after completion.
+ */
+@Entity
+@Table(name = "onboarding_progress")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class OnboardingProgress {
+
+    public static final long SINGLETON_ID = 1L;
+
+    @Id
+    private Long id;
+
+    @Column(name = "completed_at", nullable = false)
+    private Instant completedAt;
+
+    public static OnboardingProgress create() {
+        OnboardingProgress progress = new OnboardingProgress();
+        progress.id = SINGLETON_ID;
+        progress.completedAt = Instant.now();
+        return progress;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/entity/User.java b/src/main/java/com/salkcoding/oswl/auth/entity/User.java
index 24d93a4c..139857d1 100644
--- a/src/main/java/com/salkcoding/oswl/auth/entity/User.java
+++ b/src/main/java/com/salkcoding/oswl/auth/entity/User.java
@@ -1,5 +1,6 @@
 package com.salkcoding.oswl.auth.entity;
 
+import com.salkcoding.oswl.auth.enums.UserThemeMode;
 import jakarta.persistence.*;
 import lombok.*;
 import org.hibernate.annotations.CreationTimestamp;
@@ -58,6 +59,11 @@ public class User {
     @Builder.Default
     private boolean mustChangePassword = false;
 
+    @Enumerated(EnumType.STRING)
+    @Column(name = "theme", nullable = false, length = 20)
+    @Builder.Default
+    private UserThemeMode theme = UserThemeMode.LIGHT;
+
     @Builder.Default
     @ManyToMany(fetch = FetchType.LAZY)
     @JoinTable(
diff --git a/src/main/java/com/salkcoding/oswl/auth/enums/Permission.java b/src/main/java/com/salkcoding/oswl/auth/enums/Permission.java
index d98d665a..4c049958 100644
--- a/src/main/java/com/salkcoding/oswl/auth/enums/Permission.java
+++ b/src/main/java/com/salkcoding/oswl/auth/enums/Permission.java
@@ -43,8 +43,17 @@ public enum Permission {
     ORG_DASHBOARD_VIEW("View Organization Dashboard"),
     AUDIT_LOG_VIEW("View Audit Log"),
     AUDIT_LOG_EXPORT("Export Audit Log (SIEM)"),
+    AUDIT_LOG_VERIFY("Verify Audit Log Integrity"),
     SETTINGS_JIRA_MANAGE("Manage Jira Integration"),
-    SETTINGS_SNAPSHOT_MANAGE("Manage Offline Snapshot Bundles");
+    SETTINGS_SNAPSHOT_MANAGE("Manage Offline Snapshot Bundles"),
+
+    // ── v1.0.5 capabilities ──
+    SETTINGS_WEBHOOK_MANAGE("Manage Webhook Notifications"),
+    POLICY_MANAGE("Manage Security Policies"),
+    SETTINGS_REPORTING_MANAGE("Manage Report Branding"),
+
+    // ── Organization structure — team hierarchy and membership management ──
+    TEAM_MANAGE("Manage Teams");
 
     private final String description;
 }
diff --git a/src/main/java/com/salkcoding/oswl/auth/enums/UserThemeMode.java b/src/main/java/com/salkcoding/oswl/auth/enums/UserThemeMode.java
new file mode 100644
index 00000000..566ed29e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/enums/UserThemeMode.java
@@ -0,0 +1,7 @@
+package com.salkcoding.oswl.auth.enums;
+
+public enum UserThemeMode {
+    LIGHT,
+    DARK,
+    SYSTEM
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/repository/AuditLogRepository.java b/src/main/java/com/salkcoding/oswl/auth/repository/AuditLogRepository.java
index ef60f2cb..528c825e 100644
--- a/src/main/java/com/salkcoding/oswl/auth/repository/AuditLogRepository.java
+++ b/src/main/java/com/salkcoding/oswl/auth/repository/AuditLogRepository.java
@@ -10,6 +10,7 @@
 import org.springframework.transaction.annotation.Transactional;
 
 import java.time.LocalDateTime;
+import java.util.Optional;
 
 public interface AuditLogRepository extends JpaRepository {
 
@@ -31,4 +32,18 @@ Page search(@Param("start") LocalDateTime start,
     @Modifying
     @Query("DELETE FROM AuditLog a WHERE a.createdAt < :cutoff")
     int deleteOlderThan(@Param("cutoff") LocalDateTime cutoff);
+
+    /** Most recent audit log whose primary key is strictly lower than the given id. */
+    Optional findTopByIdLessThanOrderByIdDesc(Long id);
+
+    /** All audit logs matching the optional date range, ordered by primary key ascending (chain order). */
+    @Query("""
+            select a from AuditLog a
+            where (:start is null or a.createdAt >= :start)
+              and (:end is null or a.createdAt <= :end)
+            order by a.id asc
+            """)
+    Page findAllByFilterOrderByIdAsc(@Param("start") LocalDateTime start,
+                                                 @Param("end") LocalDateTime end,
+                                                 Pageable pageable);
 }
diff --git a/src/main/java/com/salkcoding/oswl/auth/repository/OnboardingProgressRepository.java b/src/main/java/com/salkcoding/oswl/auth/repository/OnboardingProgressRepository.java
new file mode 100644
index 00000000..50f53898
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/repository/OnboardingProgressRepository.java
@@ -0,0 +1,7 @@
+package com.salkcoding.oswl.auth.repository;
+
+import com.salkcoding.oswl.auth.entity.OnboardingProgress;
+import org.springframework.data.jpa.repository.JpaRepository;
+
+public interface OnboardingProgressRepository extends JpaRepository {
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/repository/RoleTemplateRepository.java b/src/main/java/com/salkcoding/oswl/auth/repository/RoleTemplateRepository.java
index 21f463a5..9884222e 100644
--- a/src/main/java/com/salkcoding/oswl/auth/repository/RoleTemplateRepository.java
+++ b/src/main/java/com/salkcoding/oswl/auth/repository/RoleTemplateRepository.java
@@ -6,10 +6,13 @@
 import org.springframework.data.jpa.repository.Query;
 
 import java.util.List;
+import java.util.Optional;
 
 public interface RoleTemplateRepository extends JpaRepository {
     boolean existsByName(String name);
 
+    Optional findByName(String name);
+
     @Query("select count(u) from User u join u.roleTemplates rt where rt.id = :templateId")
     long countUsersByTemplateId(Long templateId);
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/repository/UserVcsConnectionRepository.java b/src/main/java/com/salkcoding/oswl/auth/repository/UserVcsConnectionRepository.java
index 715a6d94..dcac184b 100644
--- a/src/main/java/com/salkcoding/oswl/auth/repository/UserVcsConnectionRepository.java
+++ b/src/main/java/com/salkcoding/oswl/auth/repository/UserVcsConnectionRepository.java
@@ -10,6 +10,8 @@
 public interface UserVcsConnectionRepository extends JpaRepository {
     List findByUserIdAndActiveTrue(Long userId);
 
+    boolean existsByUserIdAndActiveTrue(Long userId);
+
     Optional findByUserIdAndProviderAndActiveTrue(Long userId, VcsProvider provider);
 
     void deleteByUser_Id(Long userId);
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/JdbcSessionConfig.java b/src/main/java/com/salkcoding/oswl/auth/security/JdbcSessionConfig.java
new file mode 100644
index 00000000..1442a950
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/security/JdbcSessionConfig.java
@@ -0,0 +1,39 @@
+package com.salkcoding.oswl.auth.security;
+
+import jakarta.servlet.DispatcherType;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
+import org.springframework.boot.convert.DurationStyle;
+import org.springframework.boot.web.servlet.FilterRegistrationBean;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.session.config.SessionRepositoryCustomizer;
+import org.springframework.session.jdbc.JdbcIndexedSessionRepository;
+import org.springframework.session.jdbc.config.annotation.web.http.EnableJdbcHttpSession;
+import org.springframework.session.web.http.SessionRepositoryFilter;
+
+/** Explicit opt-in: the Spring Session library alone does not configure Boot's servlet integration. */
+@Configuration(proxyBeanMethods = false)
+@ConditionalOnProperty(name = "spring.session.store-type", havingValue = "jdbc")
+@EnableJdbcHttpSession
+public class JdbcSessionConfig {
+    @Bean
+    SessionRepositoryCustomizer jdbcSessionSettings(
+            @Value("${spring.session.timeout:${server.servlet.session.timeout:30m}}") String timeout,
+            @Value("${spring.session.jdbc.table-name:SPRING_SESSION}") String tableName) {
+        return repository -> {
+            repository.setDefaultMaxInactiveInterval(DurationStyle.detectAndParse(timeout));
+            repository.setTableName(tableName);
+        };
+    }
+
+    @Bean
+    FilterRegistrationBean> jdbcSessionFilterRegistration(
+            SessionRepositoryFilter filter) {
+        var registration = new FilterRegistrationBean>(filter);
+        registration.setOrder(SessionRepositoryFilter.DEFAULT_ORDER);
+        registration.setDispatcherTypes(DispatcherType.REQUEST, DispatcherType.ASYNC, DispatcherType.ERROR);
+        registration.setAsyncSupported(true);
+        return registration;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/OidcLoginSuccessHandler.java b/src/main/java/com/salkcoding/oswl/auth/security/OidcLoginSuccessHandler.java
index 009d8219..7bfd23cb 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/OidcLoginSuccessHandler.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/OidcLoginSuccessHandler.java
@@ -20,7 +20,7 @@
 import java.io.IOException;
 
 /**
- * OIDC SSO (roadmap #13) success handler. After the IdP (Okta / Entra / any OIDC provider)
+ * OIDC SSO success handler. After the IdP (Okta / Entra / any OIDC provider)
  * authenticates the user, this maps the verified email claim onto the existing OsWL user and
  * replaces the security context with the standard {@link OswlUserPrincipal} — so every existing
  * authorization rule (roles, permissions, single-session) behaves exactly as with form login.
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/OswlSecurityHeadersProperties.java b/src/main/java/com/salkcoding/oswl/auth/security/OswlSecurityHeadersProperties.java
index d9ac6f3d..42bf0b62 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/OswlSecurityHeadersProperties.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/OswlSecurityHeadersProperties.java
@@ -5,7 +5,7 @@
 import org.springframework.boot.context.properties.ConfigurationProperties;
 
 /**
- * HTTP security response headers (Sprint 5 / #20).
+ * HTTP security response headers.
  */
 @Getter
 @Setter
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/OswlUserPrincipal.java b/src/main/java/com/salkcoding/oswl/auth/security/OswlUserPrincipal.java
index 7bcea492..bc494a1e 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/OswlUserPrincipal.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/OswlUserPrincipal.java
@@ -1,6 +1,7 @@
 package com.salkcoding.oswl.auth.security;
 
 import com.salkcoding.oswl.auth.enums.Permission;
+import com.salkcoding.oswl.auth.enums.UserThemeMode;
 import lombok.Getter;
 import org.springframework.security.core.GrantedAuthority;
 import org.springframework.security.core.userdetails.User;
@@ -21,7 +22,12 @@ public class OswlUserPrincipal extends User {
     private final Set roleTemplateIds;
     private final Set permissions;
     private final boolean mustChangePassword;
+    private final UserThemeMode theme;
 
+    /**
+     * Backward-compatible constructor; defaults the UI theme to LIGHT so existing
+     * call sites (including tests) keep compiling without changes.
+     */
     public OswlUserPrincipal(Long userId,
                              String email,
                              String passwordHash,
@@ -32,6 +38,21 @@ public OswlUserPrincipal(Long userId,
                              Set roleTemplateIds,
                              Set permissions,
                              boolean mustChangePassword) {
+        this(userId, email, passwordHash, displayName, systemAdmin, enabled,
+                authorities, roleTemplateIds, permissions, mustChangePassword, UserThemeMode.LIGHT);
+    }
+
+    public OswlUserPrincipal(Long userId,
+                             String email,
+                             String passwordHash,
+                             String displayName,
+                             boolean systemAdmin,
+                             boolean enabled,
+                             Collection authorities,
+                             Set roleTemplateIds,
+                             Set permissions,
+                             boolean mustChangePassword,
+                             UserThemeMode theme) {
         super(email, passwordHash, enabled, true, true, true, authorities);
         this.userId = userId;
         this.displayName = displayName;
@@ -39,6 +60,7 @@ public OswlUserPrincipal(Long userId,
         this.roleTemplateIds = roleTemplateIds;
         this.permissions = permissions;
         this.mustChangePassword = mustChangePassword;
+        this.theme = theme != null ? theme : UserThemeMode.LIGHT;
     }
 
     public boolean hasPermission(Permission permission) {
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/Saml2LoginSuccessHandler.java b/src/main/java/com/salkcoding/oswl/auth/security/Saml2LoginSuccessHandler.java
new file mode 100644
index 00000000..90e1d86b
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/security/Saml2LoginSuccessHandler.java
@@ -0,0 +1,147 @@
+package com.salkcoding.oswl.auth.security;
+
+import com.salkcoding.oswl.auth.entity.User;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.jspecify.annotations.NonNull;
+import org.springframework.security.authentication.UsernamePasswordAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContext;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.security.core.userdetails.UserDetailsService;
+import org.springframework.security.core.userdetails.UsernameNotFoundException;
+import org.springframework.security.saml2.provider.service.authentication.Saml2AuthenticatedPrincipal;
+import org.springframework.security.web.authentication.AuthenticationSuccessHandler;
+import org.springframework.security.web.context.HttpSessionSecurityContextRepository;
+import org.springframework.security.web.context.SecurityContextRepository;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.io.IOException;
+import java.security.SecureRandom;
+import java.util.Base64;
+import java.util.List;
+
+/**
+ * SAML 2.0 SSO success handler. After the IdP authenticates the user, this maps the
+ * verified NameID/email onto an OsWL user and replaces the security context with the
+ * standard {@link OswlUserPrincipal}. If no matching account exists yet, a disabled-by-default
+ * local user is provisioned so SCIM can then activate and assign roles.
+ *
+ * Because the IdP already performed authentication (and typically MFA), the email OTP step
+ * is intentionally skipped for SSO logins.
+ */
+@Slf4j
+@RequiredArgsConstructor
+public class Saml2LoginSuccessHandler implements AuthenticationSuccessHandler {
+
+    private final UserDetailsService userDetailsService;
+    private final UserRepository userRepository;
+    private final AuditLogService auditLogService;
+    private final PasswordEncoder passwordEncoder;
+    private final SecurityContextRepository securityContextRepository =
+            new HttpSessionSecurityContextRepository();
+
+    @Override
+    @Transactional
+    public void onAuthenticationSuccess(@NonNull HttpServletRequest request, @NonNull HttpServletResponse response,
+                                        @NonNull Authentication authentication) throws IOException {
+        String email = extractEmail(authentication);
+        if (email == null) {
+            log.warn("[SAML] Assertion has no usable email/NameID claim — rejecting.");
+            response.sendRedirect("/login?error=sso_no_email");
+            return;
+        }
+
+        User user = userRepository.findByEmail(email).orElse(null);
+        if (user == null) {
+            user = provisionUser(email);
+            log.info("[SAML] Provisioned new user '{}' from SAML assertion", email);
+            auditLogService.log("USER.CREATE", "USER", user.getId().toString(), user.getEmail(),
+                    "source=SAML auto-provisioned");
+        }
+
+        if (!user.isEnabled()) {
+            log.warn("[SAML] SSO email '{}' maps to a disabled OsWL user — rejecting.", email);
+            auditLogService.logAnonymous(email, "SAML.LOGIN_FAILURE", "USER",
+                    user.getId().toString(), email, "Account disabled");
+            response.sendRedirect("/login?error=sso_disabled");
+            return;
+        }
+
+        try {
+            var principal = userDetailsService.loadUserByUsername(email);
+            UsernamePasswordAuthenticationToken oswlAuth =
+                    new UsernamePasswordAuthenticationToken(principal, null, principal.getAuthorities());
+
+            SecurityContext context = SecurityContextHolder.createEmptyContext();
+            context.setAuthentication(oswlAuth);
+            SecurityContextHolder.setContext(context);
+            securityContextRepository.saveContext(context, request, response);
+
+            log.info("[SAML] SSO login mapped to OsWL user '{}'", email);
+            auditLogService.log("SAML.LOGIN_SUCCESS", "USER", user.getId().toString(), user.getEmail(), null);
+            response.sendRedirect("/projects");
+        } catch (UsernameNotFoundException e) {
+            log.warn("[SAML] SSO email '{}' could not be loaded as an OsWL user — rejecting.", email);
+            response.sendRedirect("/login?error=sso_unprovisioned");
+        }
+    }
+
+    private User provisionUser(String email) {
+        String displayName = email.substring(0, email.indexOf('@'));
+        User user = User.builder()
+                .email(email)
+                .passwordHash(passwordEncoder.encode(generateRandomPassword()))
+                .displayName(displayName)
+                .isSystemAdmin(false)
+                .enabled(false)
+                .mustChangePassword(false)
+                .build();
+        return userRepository.save(user);
+    }
+
+    private String extractEmail(Authentication authentication) {
+        if (authentication.getPrincipal() instanceof Saml2AuthenticatedPrincipal saml) {
+            String nameId = saml.getName();
+            if (nameId != null && nameId.contains("@")) {
+                return nameId.toLowerCase();
+            }
+            String email = firstStringAttribute(saml, "email");
+            if (email != null) {
+                return email.toLowerCase();
+            }
+            String mail = firstStringAttribute(saml, "mail");
+            if (mail != null) {
+                return mail.toLowerCase();
+            }
+            String upn = firstStringAttribute(saml, "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn");
+            if (upn != null) {
+                return upn.toLowerCase();
+            }
+        }
+        return null;
+    }
+
+    private String firstStringAttribute(Saml2AuthenticatedPrincipal principal, String name) {
+        List values = principal.getAttribute(name);
+        if (values == null || values.isEmpty()) {
+            return null;
+        }
+        Object first = values.get(0);
+        if (first instanceof String s && s.contains("@")) {
+            return s;
+        }
+        return null;
+    }
+
+    private String generateRandomPassword() {
+        byte[] bytes = new byte[32];
+        new SecureRandom().nextBytes(bytes);
+        return Base64.getUrlEncoder().withoutPadding().encodeToString(bytes);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/SecurityConfig.java b/src/main/java/com/salkcoding/oswl/auth/security/SecurityConfig.java
index e992705f..e0aa1338 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/SecurityConfig.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/SecurityConfig.java
@@ -2,7 +2,9 @@
 
 import com.salkcoding.oswl.auth.repository.InstanceSetupLockRepository;
 import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.service.AuditLogService;
 import lombok.RequiredArgsConstructor;
+import org.springframework.security.crypto.password.PasswordEncoder;
 import org.springframework.boot.context.properties.EnableConfigurationProperties;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -22,6 +24,9 @@
 import org.springframework.security.core.session.SessionRegistry;
 import org.springframework.security.core.session.SessionRegistryImpl;
 import org.springframework.security.web.SecurityFilterChain;
+import org.springframework.session.FindByIndexNameSessionRepository;
+import org.springframework.session.Session;
+import org.springframework.session.security.SpringSessionBackedSessionRegistry;
 import org.springframework.security.web.access.AccessDeniedHandler;
 import org.springframework.security.web.authentication.UsernamePasswordAuthenticationFilter;
 import org.springframework.security.web.csrf.CookieCsrfTokenRepository;
@@ -39,14 +44,29 @@ public class SecurityConfig {
     private final OswlSecurityHeadersProperties securityHeadersProperties;
     private final UserRepository userRepository;
     private final InstanceSetupLockRepository setupLockRepository;
+    private final AuditLogService auditLogService;
+    private final PasswordEncoder passwordEncoder;
     private final PermissionEvaluator oswlPermissionEvaluator;
     private final OswlAuthenticationFailureHandler authenticationFailureHandler;
     private final AuditLogoutSuccessHandler auditLogoutSuccessHandler;
     private final TwoFaAuthenticationSuccessHandler twoFaAuthenticationSuccessHandler;
     private final OswlSessionExpiredStrategy oswlSessionExpiredStrategy;
 
+    /**
+     * Horizontal scaling / HA: when {@code spring.session.store-type=jdbc} is active, a
+     * {@link FindByIndexNameSessionRepository} bean is auto-configured and single-session
+     * enforcement must see the whole cluster's sessions, not just this instance's in-memory ones —
+     * otherwise {@code maximumSessions(1)} would only be enforced per-instance and a user could hold
+     * one live session per instance behind the load balancer. Falls back to the in-memory registry
+     * when no such bean exists (default: single instance, in-memory Tomcat session).
+     */
     @Bean
-    public SessionRegistry sessionRegistry() {
+    public SessionRegistry sessionRegistry(
+            org.springframework.beans.factory.ObjectProvider> sessionRepositoryProvider) {
+        FindByIndexNameSessionRepository sessionRepository = sessionRepositoryProvider.getIfAvailable();
+        if (sessionRepository != null) {
+            return new SpringSessionBackedSessionRegistry<>(sessionRepository);
+        }
         return new SessionRegistryImpl();
     }
 
@@ -60,7 +80,9 @@ public HttpSessionEventPublisher httpSessionEventPublisher() {
     @Order(2)
     public SecurityFilterChain securityFilterChain(HttpSecurity http,
             org.springframework.beans.factory.ObjectProvider clientRegistrations,
-            org.springframework.security.core.userdetails.UserDetailsService userDetailsService) {
+            org.springframework.beans.factory.ObjectProvider relyingParties,
+            org.springframework.security.core.userdetails.UserDetailsService userDetailsService,
+            SessionRegistry sessionRegistry) {
         AccessDeniedHandler accessDeniedHandler = (request, response, _) -> {
             String accept = request.getHeader("Accept");
             String uri = request.getRequestURI();
@@ -105,11 +127,13 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http,
                     .maximumSessions(1)
                         .maxSessionsPreventsLogin(false)
                         .expiredSessionStrategy(oswlSessionExpiredStrategy)
-                        .sessionRegistry(sessionRegistry()))
+                        .sessionRegistry(sessionRegistry))
             .authorizeHttpRequests(auth -> auth
                     .requestMatchers("/", "/login", "/login/otp-verify", "/login/otp-resend", "/setup", "/error/**").permitAll()
-                    .requestMatchers("/css/**", "/js/**", "/icon/**", "/img/**", "/graphic/**", "/scripts/**", "/webjars/**", "/favicon.ico").permitAll()
+                    .requestMatchers("/css/**", "/js/**", "/icon/**", "/img/**", "/graphic/**", "/scripts/**", "/webjars/**", "/favicon.ico", "/oswl-push-sw.js").permitAll()
                     .requestMatchers("/oss-notices").permitAll()
+                    .requestMatchers("/saml2/service-provider-metadata/**").permitAll()
+                    .requestMatchers("/scim/v2/**").permitAll()
                     .requestMatchers("/api/scan/**").permitAll()
                     .requestMatchers("/actuator/**").hasRole("SYSTEM_ADMIN")
                     .anyRequest().authenticated())
@@ -144,9 +168,13 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http,
             .addFilterBefore(new SetupRedirectFilter(userRepository, setupLockRepository),
                     UsernamePasswordAuthenticationFilter.class)
             .addFilterAfter(new MustChangePasswordFilter(),
-                    SetupRedirectFilter.class);
+                    SetupRedirectFilter.class)
+            // After SecurityContextHolderFilter so the session-backed Authentication (if any) is
+            // already resolved when this filter reads it for the userId MDC value.
+            .addFilterAfter(new com.salkcoding.oswl.web.filter.RequestContextLoggingFilter(),
+                    org.springframework.security.web.context.SecurityContextHolderFilter.class);
 
-        // OIDC SSO (roadmap #13) — activated only when an OIDC provider is configured
+        // OIDC SSO — activated only when an OIDC provider is configured
         // (spring.security.oauth2.client.registration.*). Default deploys have no registration
         // bean, so nothing changes. SSO users are mapped to their existing OsWL account.
         if (clientRegistrations.getIfAvailable() != null) {
@@ -156,6 +184,16 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http,
                     .failureHandler(authenticationFailureHandler));
         }
 
+        // SAML 2.0 SSO — activated only when a relying party is configured
+        // (spring.security.saml2.relyingparty.registration.*). IdP metadata and verification
+        // credentials are injected via environment variables.
+        if (relyingParties.getIfAvailable() != null) {
+            http.saml2Login(saml2 -> saml2
+                    .loginPage("/login")
+                    .successHandler(new Saml2LoginSuccessHandler(userDetailsService, userRepository, auditLogService, passwordEncoder))
+                    .failureHandler(authenticationFailureHandler));
+        }
+
         return http.build();
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/TwoFaAuthenticationSuccessHandler.java b/src/main/java/com/salkcoding/oswl/auth/security/TwoFaAuthenticationSuccessHandler.java
index b85cd832..d6003834 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/TwoFaAuthenticationSuccessHandler.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/TwoFaAuthenticationSuccessHandler.java
@@ -52,7 +52,7 @@ public void onAuthenticationSuccess(HttpServletRequest  request,
             // Skip OTP when the device is trusted
             if (trustedDeviceService.isTrusted(principal.getUserId(), request)) {
                 loginCompletionService.recordSuccessfulLogin(principal.getUsername());
-                String dest = principal.isMustChangePassword() ? "/change-password" : "/projects";
+                String dest = loginCompletionService.resolvePostLoginDestination(principal);
                 log.info("[Auth] Login succeeded for user='{}' via trusted-device bypass → {}", principal.getUsername(), dest);
                 response.sendRedirect(request.getContextPath() + dest);
                 return;
@@ -71,7 +71,7 @@ public void onAuthenticationSuccess(HttpServletRequest  request,
         } else {
             // 2FA not configured — check whether a password change is required
             OswlUserPrincipal principal = (OswlUserPrincipal) authentication.getPrincipal();
-            String dest = principal.isMustChangePassword() ? "/change-password" : "/projects";
+            String dest = loginCompletionService.resolvePostLoginDestination(principal);
             log.info("[Auth] Login succeeded for user='{}' (2FA disabled) → {}", principal.getUsername(), dest);
             response.sendRedirect(request.getContextPath() + dest);
         }
diff --git a/src/main/java/com/salkcoding/oswl/auth/security/UserDetailsServiceImpl.java b/src/main/java/com/salkcoding/oswl/auth/security/UserDetailsServiceImpl.java
index 406b0e88..3e608977 100644
--- a/src/main/java/com/salkcoding/oswl/auth/security/UserDetailsServiceImpl.java
+++ b/src/main/java/com/salkcoding/oswl/auth/security/UserDetailsServiceImpl.java
@@ -47,7 +47,8 @@ public UserDetails loadUserByUsername(String email) throws UsernameNotFoundExcep
                 authorities,
                 user.getRoleTemplates().stream().map(rt -> rt.getId()).collect(java.util.stream.Collectors.toSet()),
                 collectPermissions(user),
-                user.isMustChangePassword()
+                user.isMustChangePassword(),
+                user.getTheme()
         );
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/AccountDeletionService.java b/src/main/java/com/salkcoding/oswl/auth/service/AccountDeletionService.java
index 3db0c8a0..6d2befb1 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/AccountDeletionService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/AccountDeletionService.java
@@ -3,7 +3,8 @@
 import com.salkcoding.oswl.auth.entity.User;
 import com.salkcoding.oswl.auth.repository.UserRepository;
 import com.salkcoding.oswl.auth.repository.UserVcsConnectionRepository;
-import com.salkcoding.oswl.repository.ProjectMemberRepository;
+import com.salkcoding.oswl.repository.project.ProjectMemberRepository;
+import com.salkcoding.oswl.repository.org.TeamMemberRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.crypto.password.PasswordEncoder;
@@ -21,6 +22,7 @@ public class AccountDeletionService {
 
     private final UserRepository userRepository;
     private final ProjectMemberRepository projectMemberRepository;
+    private final TeamMemberRepository teamMemberRepository;
     private final UserVcsConnectionRepository vcsConnectionRepository;
     private final PasswordEncoder passwordEncoder;
     private final AuditLogService auditLogService;
@@ -54,6 +56,7 @@ public void deleteOwnAccount(Long authenticatedUserId, String currentPassword) {
         auditLogService.log("USER.SELF_DELETE", "USER", userId.toString(), email, displayName);
 
         projectMemberRepository.deleteByUserId(userId);
+        teamMemberRepository.deleteByUserId(userId);
         vcsConnectionRepository.deleteByUser_Id(userId);
         user.getRoleTemplates().clear();
         userRepository.delete(user);
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/AuditLogIntegrityService.java b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogIntegrityService.java
new file mode 100644
index 00000000..e753a6cc
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogIntegrityService.java
@@ -0,0 +1,142 @@
+package com.salkcoding.oswl.auth.service;
+
+import com.salkcoding.oswl.auth.dto.AuditLogFilter;
+import com.salkcoding.oswl.auth.dto.AuditLogIntegrityReport;
+import com.salkcoding.oswl.auth.entity.AuditLog;
+import com.salkcoding.oswl.auth.repository.AuditLogRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.data.domain.Page;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.data.domain.Pageable;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Service
+@RequiredArgsConstructor
+public class AuditLogIntegrityService {
+
+    private static final int DEFAULT_BATCH_SIZE = 1000;
+    private static final int MAX_BROKEN_IDS = 100;
+
+    private final AuditLogRepository auditLogRepository;
+    private final AuditLogService auditLogService;
+
+    @Transactional(readOnly = true)
+    public AuditLogIntegrityReport verify(AuditLogFilter filter) {
+        return verify(filter, DEFAULT_BATCH_SIZE);
+    }
+
+    /**
+     * Verifies the audit log integrity hash chain in batches.
+     *
+     * 
Rows are examined in primary-key order. Legacy rows without a stored hash are allowed
+     * only before the first hashed row; once the chain has started, an unhashed row is treated
+     * as a broken link. Each hashed row must reference the stored hash of the row immediately
+     * before it and its own stored hash must match a recomputation over its contents.

+     */
+    @Transactional(readOnly = true)
+    public AuditLogIntegrityReport verify(AuditLogFilter filter, int batchSize) {
+        if (batchSize < 1) {
+            batchSize = DEFAULT_BATCH_SIZE;
+        }
+
+        long total = 0;
+        long unhashedCount = 0;
+        long brokenCount = 0;
+        Long firstBrokenId = null;
+        Long lastId = null;
+        List brokenIds = new ArrayList<>();
+
+        String previousHash = null;
+        boolean previousWasHashed = false;
+        boolean chainStartedInResult = false;
+
+        int pageNumber = 0;
+        Page page;
+        do {
+            Pageable pageable = PageRequest.of(pageNumber, batchSize);
+            page = auditLogRepository.findAllByFilterOrderByIdAsc(
+                    filter != null ? filter.getStartDate() : null,
+                    filter != null ? filter.getEndDate() : null,
+                    pageable);
+
+            for (AuditLog entry : page.getContent()) {
+                total++;
+                lastId = entry.getId();
+
+                boolean currentHashed = entry.getHash() != null;
+
+                if (!currentHashed) {
+                    unhashedCount++;
+                    if (previousWasHashed) {
+                        // A hashed row was followed by an unhashed one: the chain is broken.
+                        brokenCount++;
+                        if (firstBrokenId == null) {
+                            firstBrokenId = entry.getId();
+                        }
+                        addBrokenId(brokenIds, entry.getId());
+                    }
+                    previousWasHashed = false;
+                    previousHash = null;
+                    continue;
+                }
+
+                if (!chainStartedInResult) {
+                    // First hashed row in the result set starts the verified segment.
+                    chainStartedInResult = true;
+                    // If this is the absolute chain start, prevHash must be null. When a date
+                    // filter omits earlier rows we skip this check for the first hashed row.
+                    if (filter == null
+                            || (filter.getStartDate() == null && filter.getEndDate() == null)) {
+                        if (entry.getPrevHash() != null) {
+                            brokenCount++;
+                            if (firstBrokenId == null) {
+                                firstBrokenId = entry.getId();
+                            }
+                            addBrokenId(brokenIds, entry.getId());
+                        }
+                    }
+                } else if (previousWasHashed) {
+                    if (entry.getPrevHash() == null
+                            || !entry.getPrevHash().equals(previousHash)
+                            || !auditLogService.computeHash(entry).equals(entry.getHash())) {
+                        brokenCount++;
+                        if (firstBrokenId == null) {
+                            firstBrokenId = entry.getId();
+                        }
+                        addBrokenId(brokenIds, entry.getId());
+                    }
+                }
+
+                previousHash = entry.getHash();
+                previousWasHashed = true;
+            }
+            pageNumber++;
+        } while (page.hasNext());
+
+        AuditLogIntegrityReport report = AuditLogIntegrityReport.builder()
+                .verified(brokenCount == 0)
+                .total(total)
+                .unhashedCount(unhashedCount)
+                .brokenCount(brokenCount)
+                .firstBrokenId(firstBrokenId)
+                .lastId(lastId)
+                .brokenIds(brokenIds)
+                .build();
+
+        auditLogService.log("AUDIT_LOG.VERIFY", "AUDIT_LOG", null, null,
+                "total=" + total + "; broken=" + brokenCount
+                        + (firstBrokenId != null ? "; firstBrokenId=" + firstBrokenId : ""));
+
+        return report;
+    }
+
+    private void addBrokenId(List brokenIds, Long id) {
+        if (brokenIds.size() < MAX_BROKEN_IDS) {
+            brokenIds.add(id);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/AuditLogService.java b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogService.java
index 3b8b681d..fb5e703d 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/AuditLogService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogService.java
@@ -23,8 +23,13 @@
 import java.io.ByteArrayOutputStream;
 import java.io.PrintWriter;
 import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.security.NoSuchAlgorithmException;
 import java.time.LocalDateTime;
 import java.time.format.DateTimeFormatter;
+import java.time.temporal.ChronoUnit;
+import java.util.HexFormat;
+import java.util.Optional;
 
 @Slf4j
 @Service
@@ -48,7 +53,7 @@ public void log(String action, String targetType, String targetId, String target
             actorId     = p.getUserId();
             displayName = p.getDisplayName();
         }
-        auditLogRepository.save(AuditLog.builder()
+        persistWithHash(AuditLog.builder()
                 .actorEmail(email)
                 .actorUserId(actorId)
                 .actorDisplayName(displayName)
@@ -68,7 +73,7 @@ public void log(String action, String targetType, String targetId, String target
     @Transactional(propagation = Propagation.REQUIRES_NEW)
     public void logAnonymous(String actorEmail, String action, String targetType,
                              String targetId, String targetName, String detail) {
-        auditLogRepository.save(AuditLog.builder()
+        persistWithHash(AuditLog.builder()
                 .actorEmail(actorEmail != null ? actorEmail : "anonymous")
                 .actorIp(resolveClientIp())
                 .action(action)
@@ -79,6 +84,63 @@ public void logAnonymous(String actorEmail, String action, String targetType,
                 .build());
     }
 
+    /** Persists the entry and appends its SHA-256 integrity hash to the chain. */
+    private void persistWithHash(AuditLog entry) {
+        auditLogRepository.save(entry);
+        auditLogRepository.flush();
+
+        AuditLog target = entry.getId() != null
+                ? auditLogRepository.findById(entry.getId()).orElse(entry)
+                : entry;
+
+        String prevHash = null;
+        if (target.getId() != null) {
+            Optional previous = auditLogRepository.findTopByIdLessThanOrderByIdDesc(target.getId());
+            prevHash = previous.map(AuditLog::getHash).orElse(null);
+        }
+        target.setPrevHash(prevHash);
+        target.setHash(computeHash(target));
+    }
+
+    /**
+     * Computes the canonical SHA-256 hash for an audit log entry.
+     *
+     * 
{@code createdAt} is truncated to microseconds before hashing. Without this, the hash
+     * computed right after insert (over the full-nanosecond-precision Java value still held by
+     * the just-saved entity) would never match the hash recomputed during verification (over a
+     * value freshly read from a database column that stores less precision than a
+     * {@code LocalDateTime} — e.g. PostgreSQL's default {@code timestamp} precision is
+     * microseconds) — every row would look "tampered" purely from a rounding difference, never
+     * from actual corruption. Truncating on both sides to a precision no supported database
+     * stores less than makes the two computations agree regardless of column precision.
+     */
+    public String computeHash(AuditLog entry) {
+        try {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            update(digest, entry.getId());
+            update(digest, entry.getActorUserId());
+            update(digest, entry.getActorEmail());
+            update(digest, entry.getActorDisplayName());
+            update(digest, entry.getActorIp());
+            update(digest, entry.getAction());
+            update(digest, entry.getTargetType());
+            update(digest, entry.getTargetId());
+            update(digest, entry.getTargetName());
+            update(digest, entry.getDetail());
+            update(digest, entry.getCreatedAt() != null
+                    ? entry.getCreatedAt().truncatedTo(ChronoUnit.MICROS) : null);
+            update(digest, entry.getPrevHash());
+            return HexFormat.of().formatHex(digest.digest());
+        } catch (NoSuchAlgorithmException e) {
+            throw new IllegalStateException("SHA-256 not available", e);
+        }
+    }
+
+    private void update(MessageDigest digest, Object value) {
+        digest.update((byte) 0x7c);
+        digest.update(value != null ? value.toString().getBytes(StandardCharsets.UTF_8) : new byte[]{'\0'});
+    }
+
     private String resolveClientIp() {
         try {
             ServletRequestAttributes attrs =
@@ -113,10 +175,10 @@ public byte[] exportCsv(AuditLogFilter filter) {
         ByteArrayOutputStream baos = new ByteArrayOutputStream();
         try (PrintWriter pw = new PrintWriter(baos, false, StandardCharsets.UTF_8)) {
             pw.print('\uFEFF'); // UTF-8 BOM so Excel renders Korean correctly
-            pw.println("createdAt,actorDisplayName,actorEmail,actorIp,action,targetType,targetName,detail");
+            pw.println("createdAt,actorDisplayName,actorEmail,actorIp,action,targetType,targetName,detail,prevHash,hash");
             DateTimeFormatter fmt = DateTimeFormatter.ISO_LOCAL_DATE_TIME;
             for (AuditLog l : page.getContent()) {
-                pw.printf("%s,%s,%s,%s,%s,%s,%s,%s%n",
+                pw.printf("%s,%s,%s,%s,%s,%s,%s,%s,%s,%s%n",
                         l.getCreatedAt() != null ? l.getCreatedAt().format(fmt) : "",
                         csv(l.getActorDisplayName()),
                         csv(l.getActorEmail()),
@@ -124,7 +186,9 @@ public byte[] exportCsv(AuditLogFilter filter) {
                         csv(l.getAction()),
                         csv(l.getTargetType()),
                         csv(l.getTargetName()),
-                        csv(l.getDetail()));
+                        csv(l.getDetail()),
+                        csv(l.getPrevHash()),
+                        csv(l.getHash()));
             }
         }
         return baos.toByteArray();
@@ -152,6 +216,8 @@ private AuditLogDto toDto(AuditLog l) {
                 .targetName(l.getTargetName())
                 .createdAt(l.getCreatedAt())
                 .detail(l.getDetail())
+                .prevHash(l.getPrevHash())
+                .hash(l.getHash())
                 .build();
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/AuditLogSiemExportService.java b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogSiemExportService.java
index dda71fc4..b57473b7 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/AuditLogSiemExportService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/AuditLogSiemExportService.java
@@ -79,6 +79,8 @@ private String toJsonLine(AuditLog l) throws IOException {
         row.put("targetId", l.getTargetId());
         row.put("targetName", l.getTargetName());
         row.put("detail", l.getDetail());
+        row.put("prevHash", l.getPrevHash());
+        row.put("hash", l.getHash());
         return MAPPER.writeValueAsString(row);
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/LoginCompletionService.java b/src/main/java/com/salkcoding/oswl/auth/service/LoginCompletionService.java
index af5e3bd2..08ab9d00 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/LoginCompletionService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/LoginCompletionService.java
@@ -1,6 +1,7 @@
 package com.salkcoding.oswl.auth.service;
 
 import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
@@ -14,10 +15,28 @@ public class LoginCompletionService {
 
     private final UserRepository userRepository;
     private final AuditLogService auditLogService;
+    private final OnboardingService onboardingService;
 
     @Transactional
     public void recordSuccessfulLogin(String email) {
         userRepository.updateLastLoginAt(email, LocalDateTime.now());
         auditLogService.log("AUTH.LOGIN_SUCCESS", "AUTH", null, null, null);
     }
+
+    /**
+     * Where a fully-authenticated user should land — password change first if required, then
+     * (for the system admin only, until dismissed) the onboarding wizard, else the projects page.
+     * Onboarding never gates non-admin users; only the admin who ran /setup is expected to walk
+     * through org-wide configuration (SSO/invites, repo connection, policy defaults, notifications).
+     */
+    @Transactional(readOnly = true)
+    public String resolvePostLoginDestination(OswlUserPrincipal principal) {
+        if (principal.isMustChangePassword()) {
+            return "/change-password";
+        }
+        if (principal.isSystemAdmin() && !onboardingService.isCompleted()) {
+            return "/onboarding";
+        }
+        return "/projects";
+    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/OnboardingService.java b/src/main/java/com/salkcoding/oswl/auth/service/OnboardingService.java
new file mode 100644
index 00000000..9add9629
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/service/OnboardingService.java
@@ -0,0 +1,64 @@
+package com.salkcoding.oswl.auth.service;
+
+import com.salkcoding.oswl.auth.entity.OnboardingProgress;
+import com.salkcoding.oswl.auth.repository.OnboardingProgressRepository;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.repository.UserVcsConnectionRepository;
+import com.salkcoding.oswl.repository.notification.WebhookSettingRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.ObjectProvider;
+import org.springframework.dao.DataIntegrityViolationException;
+import org.springframework.security.oauth2.client.registration.ClientRegistrationRepository;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+@Service
+@RequiredArgsConstructor
+public class OnboardingService {
+
+    private final OnboardingProgressRepository repository;
+    private final UserRepository userRepository;
+    private final UserVcsConnectionRepository userVcsConnectionRepository;
+    private final WebhookSettingRepository webhookSettingRepository;
+    /** Present only when an OIDC provider is configured (SSO). */
+    private final ObjectProvider clientRegistrations;
+
+    @Transactional(readOnly = true)
+    public boolean isCompleted() {
+        return repository.existsById(OnboardingProgress.SINGLETON_ID);
+    }
+
+    /** Idempotent — completing (or skipping to the end of) the wizard twice is a no-op. */
+    @Transactional
+    public void markCompleted() {
+        if (isCompleted()) return;
+        try {
+            repository.saveAndFlush(OnboardingProgress.create());
+        } catch (DataIntegrityViolationException ignored) {
+            // Another concurrent request already completed it — fine, same end state.
+        }
+    }
+
+    /**
+     * Per-step completion for the wizard, derived from real instance state rather than stored
+     * flags — the wizard is re-runnable, so a step is "done" only while the thing it sets up
+     * actually exists. The policy-defaults step has no derivable state (reviewing is the task)
+     * and intentionally gets no badge.
+     *
+     * @param teamReady          SSO configured, or at least one teammate beyond the first admin
+     * @param repoConnected      the current user has an active VCS connection
+     * @param notificationsReady a webhook URL is configured and enabled
+     */
+    public record StepStatus(boolean teamReady, boolean repoConnected, boolean notificationsReady) {}
+
+    @Transactional(readOnly = true)
+    public StepStatus stepStatus(Long userId) {
+        boolean teamReady = clientRegistrations.getIfAvailable() != null || userRepository.count() > 1;
+        boolean repoConnected = userId != null
+                && userVcsConnectionRepository.existsByUserIdAndActiveTrue(userId);
+        boolean notificationsReady = webhookSettingRepository.findFirstByOrderByIdAsc()
+                .map(w -> w.isEnabled() && w.getWebhookUrl() != null && !w.getWebhookUrl().isBlank())
+                .orElse(false);
+        return new StepStatus(teamReady, repoConnected, notificationsReady);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/RoleTemplateService.java b/src/main/java/com/salkcoding/oswl/auth/service/RoleTemplateService.java
index 4b161a41..60a0f56e 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/RoleTemplateService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/RoleTemplateService.java
@@ -4,12 +4,16 @@
 import com.salkcoding.oswl.auth.dto.RoleTemplateRequest;
 import com.salkcoding.oswl.auth.entity.RoleTemplate;
 import com.salkcoding.oswl.auth.enums.Permission;
+import com.github.benmanes.caffeine.cache.Cache;
+import com.github.benmanes.caffeine.cache.Caffeine;
 import com.salkcoding.oswl.auth.repository.RoleTemplateRepository;
 import com.salkcoding.oswl.aop.Auditable;
+import com.salkcoding.oswl.service.config.CacheInvalidationService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
+import java.time.Duration;
 import java.util.EnumSet;
 import java.util.List;
 import java.util.Set;
@@ -19,14 +23,29 @@
 @RequiredArgsConstructor
 public class RoleTemplateService {
 
+    private static final String CACHE_KEY_ALL = "all";
+
     private final RoleTemplateRepository roleTemplateRepository;
     private final AuditLogService auditLogService;
+    private final CacheInvalidationService cacheInvalidationService;
+
+    private final Cache> roleTemplateCache = Caffeine.newBuilder()
+            .expireAfterWrite(Duration.ofHours(1))
+            .maximumSize(10)
+            .recordStats()
+            .build();
 
     @Transactional(readOnly = true)
     public List findAll() {
-        return roleTemplateRepository.findAll().stream()
+        List cached = roleTemplateCache.getIfPresent(CACHE_KEY_ALL);
+        if (cached != null) {
+            return List.copyOf(cached);
+        }
+        List dtos = roleTemplateRepository.findAll().stream()
                 .map(this::toDto)
                 .collect(Collectors.toList());
+        roleTemplateCache.put(CACHE_KEY_ALL, dtos);
+        return List.copyOf(dtos);
     }
 
     @Transactional
@@ -42,7 +61,10 @@ public RoleTemplateDto create(RoleTemplateRequest request) {
                 .isBuiltIn(false)
                 .permissions(parsePermissions(request.getPermissions()))
                 .build();
-        return toDto(roleTemplateRepository.save(rt));
+        RoleTemplateDto dto = toDto(roleTemplateRepository.save(rt));
+        roleTemplateCache.invalidateAll();
+        cacheInvalidationService.bump(CacheInvalidationService.ROLE_TEMPLATE);
+        return dto;
     }
 
     @Transactional
@@ -56,7 +78,28 @@ public RoleTemplateDto update(Long id, RoleTemplateRequest request) {
         }
         rt.setDescription(request.getDescription());
         rt.setPermissions(parsePermissions(request.getPermissions()));
-        return toDto(rt);
+        RoleTemplateDto dto = toDto(rt);
+        roleTemplateCache.invalidateAll();
+        cacheInvalidationService.bump(CacheInvalidationService.ROLE_TEMPLATE);
+        return dto;
+    }
+
+    /**
+     * Create-or-update by name — used by config import, which has no template id
+     * to key off (ids are not portable across instances). Built-in templates are never modified
+     * this way; a same-named built-in in the bundle is silently skipped.
+     */
+    @Transactional
+    public RoleTemplateDto upsertByName(String name, String description, Set permissionNames) {
+        RoleTemplate existing = roleTemplateRepository.findByName(name).orElse(null);
+        if (existing != null && existing.isBuiltIn()) {
+            return toDto(existing);
+        }
+        RoleTemplateRequest req = new RoleTemplateRequest();
+        req.setName(name);
+        req.setDescription(description);
+        req.setPermissions(permissionNames);
+        return existing != null ? update(existing.getId(), req) : create(req);
     }
 
     @Transactional
@@ -73,9 +116,16 @@ public void delete(Long id) {
         }
         String name = rt.getName();
         roleTemplateRepository.delete(rt);
+        roleTemplateCache.invalidateAll();
+        cacheInvalidationService.bump(CacheInvalidationService.ROLE_TEMPLATE);
         auditLogService.log("ROLE_TEMPLATE.DELETE", "ROLE_TEMPLATE", id.toString(), name, null);
     }
 
+    /** Drops the local cache; called by the invalidation poller when another instance changed templates. */
+    public void evictLocalCache() {
+        roleTemplateCache.invalidateAll();
+    }
+
     private Set parsePermissions(Set permissionNames) {
         if (permissionNames == null || permissionNames.isEmpty()) {
             return EnumSet.noneOf(Permission.class);
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/SecuritySettingService.java b/src/main/java/com/salkcoding/oswl/auth/service/SecuritySettingService.java
index 90745431..53cf18b9 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/SecuritySettingService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/SecuritySettingService.java
@@ -7,13 +7,17 @@
 import com.salkcoding.oswl.auth.enums.MailMode;
 import com.salkcoding.oswl.auth.enums.TwoFaMode;
 import com.salkcoding.oswl.auth.repository.SecuritySettingRepository;
+import com.github.benmanes.caffeine.cache.Cache;
+import com.github.benmanes.caffeine.cache.Caffeine;
 import com.salkcoding.oswl.auth.security.EncryptionService;
+import com.salkcoding.oswl.service.config.CacheInvalidationService;
 import jakarta.mail.MessagingException;
 import lombok.RequiredArgsConstructor;
 import org.springframework.mail.javamail.JavaMailSenderImpl;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
+import java.time.Duration;
 import java.util.Properties;
 
 @Service
@@ -24,11 +28,28 @@ public class SecuritySettingService {
 
     private final SecuritySettingRepository repository;
     private final EncryptionService encryptionService;
+    private final CacheInvalidationService cacheInvalidationService;
+
+    private final Cache securitySettingsCache = Caffeine.newBuilder()
+            .expireAfterWrite(Duration.ofMinutes(5))
+            .maximumSize(10)
+            .recordStats()
+            .build();
 
     // ── Read ────────────────────────────────────────────────────────────
 
     @Transactional
     public SecuritySetting getOrCreate() {
+        SecuritySetting cached = securitySettingsCache.getIfPresent(SETTINGS_ID);
+        if (cached != null) {
+            return cached;
+        }
+        SecuritySetting setting = fetchOrCreate();
+        securitySettingsCache.put(SETTINGS_ID, setting);
+        return setting;
+    }
+
+    private SecuritySetting fetchOrCreate() {
         return repository.findById(SETTINGS_ID)
                 .orElseGet(() -> repository.save(
                         SecuritySetting.builder().id(SETTINGS_ID).build()));
@@ -38,7 +59,7 @@ public SecuritySetting getOrCreate() {
 
     @Transactional
     public SecuritySetting update(SecuritySettingUpdateRequest req) {
-        SecuritySetting s = getOrCreate();
+        SecuritySetting s = fetchOrCreate();
 
         if (req.getMailMode() != null) {
             s.setMailMode(MailMode.valueOf(req.getMailMode()));
@@ -62,11 +83,32 @@ public SecuritySetting update(SecuritySettingUpdateRequest req) {
             s.setTwoFaMode(TwoFaMode.valueOf(req.getTwoFaMode()));
         }
 
-        return repository.save(s);
+        SecuritySetting saved = repository.save(s);
+        securitySettingsCache.invalidate(SETTINGS_ID);
+        cacheInvalidationService.bump(CacheInvalidationService.SECURITY_SETTINGS);
+        return saved;
+    }
+
+    /** Drops the local cache; called by the invalidation poller when another instance changed the settings. */
+    public void evictLocalCache() {
+        securitySettingsCache.invalidateAll();
     }
 
     // ── Mail connection test ───────────────────────────────────────────
 
+    /**
+     * Tests the currently stored SMTP settings as-is (no form input) — used by the self-diagnostics
+     * page. Throws {@link MessagingException} on failure; {@link IllegalStateException}
+     * if no SMTP settings are stored yet.
+     */
+    public void testStoredMailConnection() throws MessagingException {
+        SecuritySetting stored = repository.findById(SETTINGS_ID).orElse(null);
+        if (stored == null || stored.getMailHost() == null || stored.getMailHost().isBlank()) {
+            throw new IllegalStateException("No SMTP settings configured.");
+        }
+        testMailConnection(new MailTestRequest());
+    }
+
     /**
      * Attempts to open an SMTP session using the provided parameters.
      * Throws {@link MessagingException} if the connection fails.
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/UserManagementService.java b/src/main/java/com/salkcoding/oswl/auth/service/UserManagementService.java
index 07fe9e6b..4ce60b47 100644
--- a/src/main/java/com/salkcoding/oswl/auth/service/UserManagementService.java
+++ b/src/main/java/com/salkcoding/oswl/auth/service/UserManagementService.java
@@ -48,6 +48,8 @@ public UserSummaryDto createUser(CreateUserRequest request) {
         Set templates = new HashSet<>();
         if (request.getTemplateIds() != null && !request.getTemplateIds().isEmpty()) {
             templates.addAll(roleTemplateRepository.findAllById(request.getTemplateIds()));
+            if (templates.size() != new HashSet<>(request.getTemplateIds()).size())
+                throw new IllegalArgumentException("A selected role template no longer exists. Reload and try again.");
         }
         User user = User.builder()
                 .email(email)
diff --git a/src/main/java/com/salkcoding/oswl/auth/service/UserThemeService.java b/src/main/java/com/salkcoding/oswl/auth/service/UserThemeService.java
new file mode 100644
index 00000000..59a7350d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/auth/service/UserThemeService.java
@@ -0,0 +1,39 @@
+package com.salkcoding.oswl.auth.service;
+
+import com.salkcoding.oswl.auth.entity.User;
+import com.salkcoding.oswl.auth.enums.UserThemeMode;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+@Service
+@RequiredArgsConstructor
+public class UserThemeService {
+
+    private final UserRepository userRepository;
+    private final AuditLogService auditLogService;
+
+    @Transactional(readOnly = true)
+    public UserThemeMode getTheme(Long userId) {
+        return userRepository.findById(userId)
+                .map(User::getTheme)
+                .map(theme -> theme != null ? theme : UserThemeMode.LIGHT)
+                .orElse(UserThemeMode.LIGHT);
+    }
+
+    @Transactional
+    public void updateTheme(OswlUserPrincipal principal, UserThemeMode mode) {
+        if (mode == null) {
+            mode = UserThemeMode.LIGHT;
+        }
+        User user = userRepository.findById(principal.getUserId())
+                .orElseThrow(() -> new IllegalArgumentException("User not found."));
+        UserThemeMode previous = user.getTheme();
+        user.setTheme(mode);
+        auditLogService.log("USER.UPDATE_THEME", "USER",
+                user.getId().toString(), user.getEmail(),
+                previous + " -> " + mode);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/auth/web/SettingsTabAccess.java b/src/main/java/com/salkcoding/oswl/auth/web/SettingsTabAccess.java
index 702d1443..adc5e9b0 100644
--- a/src/main/java/com/salkcoding/oswl/auth/web/SettingsTabAccess.java
+++ b/src/main/java/com/salkcoding/oswl/auth/web/SettingsTabAccess.java
@@ -16,6 +16,8 @@ public static class TabSpec {
         private String icon;     // emoji
         /** i18n message key resolved in the template (e.g. settings.tab.admin). */
         private String labelKey;
+        /** User-facing task group used by the settings navigation, not an authorization boundary. */
+        private String group;
     }
 
     public static List accessibleTabsFor(OswlUserPrincipal principal) {
@@ -31,27 +33,47 @@ public static List accessibleTabsFor(OswlUserPrincipal principal) {
                 || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.AUDIT_LOG_VIEW)
                 || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.AUDIT_LOG_EXPORT)
                 || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_SNAPSHOT_MANAGE)) {
-            tabs.add(new TabSpec("admin", "🔐", "settings.tab.admin"));
+            tabs.add(new TabSpec("admin", "🔐", "settings.tab.admin", "access"));
         }
         if (principal.isSystemAdmin()
                 || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_SECURITY_MANAGE)) {
-            tabs.add(new TabSpec("security", "🛡️", "settings.tab.security"));
+            tabs.add(new TabSpec("security", "🛡️", "settings.tab.security", "access"));
         }
         if (principal.isSystemAdmin()
                 || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.LICENSE_POLICY_MANAGE)) {
-            tabs.add(new TabSpec("license-policy", "📋", "settings.tab.licensePolicy"));
+            tabs.add(new TabSpec("license-policy", "📋", "settings.tab.licensePolicy", "policy"));
+        }
+        if (principal.isSystemAdmin()
+                || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.POLICY_MANAGE)) {
+            tabs.add(new TabSpec("policy", "📜", "settings.tab.policy", "policy"));
         }
         if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_AI_MANAGE)) {
-            tabs.add(new TabSpec("ai", "🤖", "settings.tab.ai"));
+            tabs.add(new TabSpec("ai", "🤖", "settings.tab.ai", "policy"));
         }
         if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_VCS_MANAGE)) {
-            tabs.add(new TabSpec("vcs", "🔗", "settings.tab.vcs"));
+            tabs.add(new TabSpec("vcs", "🔗", "settings.tab.vcs", "connections"));
         }
         if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_CLI_KEY_MANAGE)) {
-            tabs.add(new TabSpec("cli", "🔑", "settings.tab.cli"));
+            tabs.add(new TabSpec("cli", "🔑", "settings.tab.cli", "connections"));
         }
         if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_CACHE_MANAGE)) {
-            tabs.add(new TabSpec("cache", "⚡", "settings.tab.cache"));
+            tabs.add(new TabSpec("cache", "⚡", "settings.tab.cache", "operations"));
+        }
+        if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_WEBHOOK_MANAGE)) {
+            tabs.add(new TabSpec("webhooks", "🔔", "settings.tab.webhooks", "connections"));
+        }
+        if (principal.isSystemAdmin() || principal.hasPermission(com.salkcoding.oswl.auth.enums.Permission.SETTINGS_REPORTING_MANAGE)) {
+            tabs.add(new TabSpec("reports", "🖨️", "settings.tab.reports", "operations"));
+        }
+        // Read-only infra/connectivity checks — SYSTEM_ADMIN only (no delegated permission,
+        // unlike the other tabs: it surfaces DB/SMTP/AI/VCS reachability details in one place).
+        if (principal.isSystemAdmin()) {
+            tabs.add(new TabSpec("diagnostics", "🩺", "settings.tab.diagnostics", "operations"));
+        }
+        // Config export/import — SYSTEM_ADMIN only, mirrors the admin tab's own
+        // security posture (role templates, license policy) rather than a delegatable permission.
+        if (principal.isSystemAdmin()) {
+            tabs.add(new TabSpec("config-transfer", "📦", "settings.tab.configTransfer", "operations"));
         }
         return tabs;
     }
diff --git a/src/main/java/com/salkcoding/oswl/client/CocoaPodsSpecsClient.java b/src/main/java/com/salkcoding/oswl/client/CocoaPodsSpecsClient.java
new file mode 100644
index 00000000..61bedaf5
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/client/CocoaPodsSpecsClient.java
@@ -0,0 +1,173 @@
+package com.salkcoding.oswl.client;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.web.client.HttpClientErrorException;
+import org.springframework.web.client.RestClient;
+import org.springframework.web.client.RestClientException;
+
+import java.security.MessageDigest;
+import java.time.Duration;
+import java.util.HexFormat;
+import java.util.Locale;
+import java.util.Optional;
+
+/**
+ * Resolves a CocoaPods pod name + version to its source repository URL and license, via the
+ * public {@code CocoaPods/Specs} trunk on GitHub — CocoaPods has no package registry API of its
+ * own; the podspec files themselves are the only source of this metadata.
+ *
+ * 
The repository URL is what OSV's {@code SwiftURL} ecosystem actually keys vulnerabilities
+ * by (not the pod name — a CocoaPods pod and a Swift Package Manager package that share the same
+ * GitHub repository are the same OSV entry).
+ *
+ * 
Air-gapped mode uses only imported scoped Specs. Missing mappings remain unanalysed;
+ * this client never falls back to an external request in that mode.
+ */
+@Slf4j
+public class CocoaPodsSpecsClient {
+
+    private static final String BASE_URL = "https://raw.githubusercontent.com/CocoaPods/Specs/master";
+    private static final Duration DEFAULT_CONNECT_TIMEOUT = Duration.ofSeconds(5);
+    private static final Duration DEFAULT_READ_TIMEOUT = Duration.ofSeconds(10);
+
+    private final RestClient restClient;
+    private final boolean airgapped;
+    private final AirgappedSnapshotService snapshotService;
+    private final ObjectMapper objectMapper = new ObjectMapper();
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
+
+    /** Live-HTTP client. Used directly by unit tests. */
+    public CocoaPodsSpecsClient() {
+        this(false);
+    }
+
+    public CocoaPodsSpecsClient(boolean airgapped) {
+        this(airgapped, DEFAULT_CONNECT_TIMEOUT, DEFAULT_READ_TIMEOUT);
+    }
+
+    public CocoaPodsSpecsClient(boolean airgapped, Duration connectTimeout, Duration readTimeout) {
+        this(airgapped, connectTimeout, readTimeout, null);
+    }
+
+    public CocoaPodsSpecsClient(boolean airgapped, Duration connectTimeout, Duration readTimeout, AirgappedSnapshotService snapshotService) {
+        this.airgapped = airgapped;
+        this.snapshotService = snapshotService;
+        SimpleClientHttpRequestFactory requestFactory = new SimpleClientHttpRequestFactory();
+        requestFactory.setConnectTimeout(connectTimeout);
+        requestFactory.setReadTimeout(readTimeout);
+        this.restClient = RestClient.builder()
+                .requestFactory(requestFactory)
+                .defaultHeader("Accept", "application/json")
+                .build();
+        if (airgapped) {
+            log.info("[CocoaPodsSpecs] Air-gapped mode — only imported scoped Specs are used");
+        }
+    }
+
+    /** Resolved podspec metadata needed to query OSV and to set the component's license. */
+    public record PodSpecInfo(String repoUrl, String license) {}
+
+    /**
+     * Resolves a pod to its repository URL (host+path only, e.g. {@code github.com/Alamofire/
+     * Alamofire} — no scheme, no {@code .git} suffix, matching OSV's {@code SwiftURL} convention)
+     * and license. Empty when a mapping is absent from the selected online/offline source, or the
+     * pod has no {@code source.git} (e.g. it ships as a local/binary-only pod).
+     */
+    public Optional resolve(String podName, String version) {
+        if (podName == null || podName.isBlank() || version == null || version.isBlank()) {
+            return Optional.empty();
+        }
+        if (airgapped) {
+            if (snapshotService == null) return Optional.empty();
+            return snapshotService.findCocoaPodsSpec(podName, version).flatMap(spec -> {
+                try { spec.validate(); return parsePodspec(spec.podspec()); }
+                catch (Exception e) { return Optional.empty(); }
+            });
+        }
+        String url = BASE_URL + "/Specs/" + md5Shard(podName) + "/" + podName + "/" + version + "/" + podName + ".podspec.json";
+        try {
+            String body = restClient.get().uri(url).retrieve().body(String.class);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
+            if (body == null || body.isBlank()) {
+                return Optional.empty();
+            }
+            return parsePodspec(body);
+        } catch (HttpClientErrorException.NotFound e) {
+            // Expected and common — pod or exact version not in the trunk (renamed, unpublished,
+            // pinned to a fork, etc). Not a client failure, so it's not recorded as one.
+            return Optional.empty();
+        } catch (RestClientException e) {
+            recordApiCall(OswlMetrics.OUTCOME_FAILURE);
+            log.debug("[CocoaPodsSpecs] Resolution failed for {}@{}: {}", podName, version, e.getMessage());
+            return Optional.empty();
+        } catch (Exception e) {
+            log.debug("[CocoaPodsSpecs] Unexpected error resolving {}@{}: {}", podName, version, e.getMessage());
+            return Optional.empty();
+        }
+    }
+
+    /** {@code https://github.com/Owner/Repo.git} → {@code github.com/Owner/Repo}, matching OSV's SwiftURL keys. Non-GitHub hosts return null — SwiftURL only covers GitHub-style repos. */
+    private Optional parsePodspec(String body) throws Exception {
+        JsonNode root = objectMapper.readTree(body);
+        String repoUrl = normalizeRepoUrl(root.path("source").path("git").asText(null));
+        return repoUrl == null ? Optional.empty() : Optional.of(new PodSpecInfo(repoUrl, extractLicense(root.path("license"))));
+    }
+
+    private static String normalizeRepoUrl(String rawGitUrl) {
+        if (rawGitUrl == null || rawGitUrl.isBlank()) {
+            return null;
+        }
+        String url = rawGitUrl.strip();
+        url = url.replaceFirst("^git@github\\.com:", "github.com/");
+        url = url.replaceFirst("^\\w+://", "");
+        url = url.replaceFirst("\\.git$", "");
+        url = url.replaceFirst("/+$", "");
+        if (!url.matches("(?i)github\\.com/[A-Za-z0-9_-]+/[A-Za-z0-9_.-]+") || url.endsWith("/.") || url.endsWith("/..")) {
+            return null;
+        }
+        return url;
+    }
+
+    /** podspec {@code license} is either a plain string or {@code {"type": "...", ...}}. */
+    private static String extractLicense(JsonNode licenseNode) {
+        if (licenseNode == null || licenseNode.isMissingNode() || licenseNode.isNull()) {
+            return null;
+        }
+        if (licenseNode.isTextual()) {
+            String value = licenseNode.asText(null);
+            return value != null && !value.isBlank() ? value.strip() : null;
+        }
+        String type = licenseNode.path("type").asText(null);
+        return type != null && !type.isBlank() ? type.strip() : null;
+    }
+
+    private static String md5Shard(String podName) {
+        try {
+            MessageDigest md5 = MessageDigest.getInstance("MD5");
+            byte[] digest = md5.digest(podName.getBytes(java.nio.charset.StandardCharsets.UTF_8));
+            String hex = HexFormat.of().formatHex(digest);
+            return hex.charAt(0) + "/" + hex.charAt(1) + "/" + hex.charAt(2);
+        } catch (Exception e) {
+            // MD5 is always available on any standard JVM — this branch is unreachable in practice.
+            throw new IllegalStateException("MD5 not available", e);
+        }
+    }
+
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("cocoapods-specs", outcome);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/client/CpeMatchService.java b/src/main/java/com/salkcoding/oswl/client/CpeMatchService.java
new file mode 100644
index 00000000..b42ab262
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/client/CpeMatchService.java
@@ -0,0 +1,17 @@
+package com.salkcoding.oswl.client;
+
+import org.springframework.stereotype.Service;
+
+import java.util.List;
+
+/**
+ * Spring-managed wrapper around {@link CpeNameMapper} so the enrichment pipeline can
+ * inject name-to-CPE inference as a service.
+ */
+@Service
+public class CpeMatchService {
+
+    public List inferCpes(String name, String version) {
+        return CpeNameMapper.infer(name, version);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/client/CpeNameMapper.java b/src/main/java/com/salkcoding/oswl/client/CpeNameMapper.java
new file mode 100644
index 00000000..c2f4418e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/client/CpeNameMapper.java
@@ -0,0 +1,79 @@
+package com.salkcoding.oswl.client;
+
+import com.salkcoding.oswl.domain.enums.MatchConfidence;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Best-effort mapping from a component name to candidate CPE vendor/product pairs.
+ *
+ * 
The NVD API is CPE-based, so a package-manager coordinate (e.g. {@code openssl/1.1.1k})
+ * must be converted to {@code cpe:2.3:a:::} before lookup.
+ * Name matching is inherently noisy, so every candidate carries a confidence grade:
+ * known libraries resolve with high confidence; heuristic guesses are marked low or medium
+ * and surfaced in the UI as needing manual review.
+ */
+public final class CpeNameMapper {
+
+    private CpeNameMapper() {}
+
+    private static final Map KNOWN = Map.ofEntries(
+            Map.entry("openssl", new String[]{"openssl", "openssl"}),
+            Map.entry("zlib", new String[]{"zlib", "zlib"}),
+            Map.entry("libpng", new String[]{"libpng", "libpng"}),
+            Map.entry("curl", new String[]{"curl", "curl"}),
+            Map.entry("libcurl", new String[]{"curl", "curl"}),
+            Map.entry("libxml2", new String[]{"xmlsoft", "libxml2"}),
+            Map.entry("libxslt", new String[]{"xmlsoft", "libxslt"}),
+            Map.entry("libssh2", new String[]{"libssh2", "libssh2"}),
+            Map.entry("libssh", new String[]{"libssh", "libssh"}),
+            Map.entry("libgit2", new String[]{"libgit2", "libgit2"}),
+            Map.entry("libtiff", new String[]{"libtiff", "libtiff"}),
+            Map.entry("libjpeg-turbo", new String[]{"libjpeg-turbo", "libjpeg-turbo"}),
+            Map.entry("libwebp", new String[]{"webmproject", "libwebp"}),
+            Map.entry("freetype", new String[]{"freetype", "freetype"}),
+            Map.entry("harfbuzz", new String[]{"harfbuzz", "harfbuzz"}),
+            Map.entry("pcre", new String[]{"pcre", "pcre"}),
+            Map.entry("pcre2", new String[]{"pcre2", "pcre2"}),
+            Map.entry("sqlite", new String[]{"sqlite", "sqlite"}),
+            Map.entry("ffmpeg", new String[]{"ffmpeg", "ffmpeg"}),
+            Map.entry("gnutls", new String[]{"gnutls", "gnutls"}),
+            Map.entry("libgcrypt", new String[]{"gnupg", "libgcrypt"}),
+            Map.entry("busybox", new String[]{"busybox", "busybox"}),
+            Map.entry("openssh", new String[]{"openbsd", "openssh"}),
+            Map.entry("gnupg", new String[]{"gnupg", "gnupg"}),
+            Map.entry("libx11", new String[]{"x.org", "libx11"})
+    );
+
+    public record CpeCandidate(String vendor, String product, String version, MatchConfidence confidence) {}
+
+    /**
+     * Returns one or more CPE candidates for a component name/version.
+     * Known C/C++ libraries are pinned to their canonical vendor/product pair with high
+     * confidence; unknown names fall back to heuristic guesses with lower confidence.
+     */
+    public static List infer(String name, String version) {
+        String key = (name == null) ? "" : name.strip().toLowerCase(Locale.ROOT);
+        if (KNOWN.containsKey(key)) {
+            String[] vp = KNOWN.get(key);
+            return List.of(new CpeCandidate(vp[0], vp[1], version, MatchConfidence.HIGH));
+        }
+
+        List candidates = new ArrayList<>();
+        String product = key.replaceFirst("^lib", "");
+        if (product.isBlank()) {
+            product = key;
+        }
+
+        if (product.equals(key)) {
+            candidates.add(new CpeCandidate(product, product, version, MatchConfidence.LOW));
+        } else {
+            candidates.add(new CpeCandidate(product, product, version, MatchConfidence.MEDIUM));
+            candidates.add(new CpeCandidate(key, key, version, MatchConfidence.LOW));
+        }
+        return candidates;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/client/DepsDevClient.java b/src/main/java/com/salkcoding/oswl/client/DepsDevClient.java
index 1ab85f72..eb8619e8 100644
--- a/src/main/java/com/salkcoding/oswl/client/DepsDevClient.java
+++ b/src/main/java/com/salkcoding/oswl/client/DepsDevClient.java
@@ -1,9 +1,10 @@
 package com.salkcoding.oswl.client;
 
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotAdvisory;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotVersion;
-import com.salkcoding.oswl.service.EnrichmentProgressContext;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotAdvisory;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVersion;
+import com.salkcoding.oswl.service.ingest.EnrichmentProgressContext;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.http.client.SimpleClientHttpRequestFactory;
 import org.springframework.web.client.RestClient;
@@ -46,6 +47,20 @@
 public class DepsDevClient {
 
     private static final String BASE_URL = "https://api.deps.dev";
+    /**
+     * The only systems deps.dev supports (per its public docs). Anything else — notably
+     * COMPOSER and CONAN, which deps.dev does not cover at all — is skipped before any
+     * HTTP call, so an unsupported ecosystem resolves as {@link #unresolved()} instead of
+     * flooding the logs with 404s.
+     */
+    public static final Set SUPPORTED_SYSTEMS =
+            Set.of("GO", "RUBYGEMS", "NPM", "CARGO", "MAVEN", "PYPI", "NUGET");
+
+    /** True when deps.dev has a system for this ecosystem tag (case-insensitive). */
+    public static boolean isSupportedSystem(String ecosystem) {
+        return ecosystem != null
+                && SUPPORTED_SYSTEMS.contains(ecosystem.strip().toUpperCase(java.util.Locale.ROOT));
+    }
     /** Default max simultaneous HTTP requests to deps.dev across all virtual-thread tasks. */
     private static final int DEFAULT_MAX_CONCURRENT_REQUESTS = 24;
     /** Base delay before the single retry after an HTTP 429 (doubles per attempt if more were allowed). */
@@ -73,6 +88,13 @@ public class DepsDevClient {
     private final Semaphore requestPermits;
     private final AirgappedSnapshotService snapshotService;
     private final boolean airgapped;
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
 
     /** Live-HTTP client (no snapshot store). Used directly by unit tests. */
     public DepsDevClient() {
@@ -157,13 +179,13 @@ public record AdvisoryInfo(
      * Calls GetVersion in parallel for all components (concurrency bounded by the permit semaphore).
      * Returns a list aligned with the input list; null means the package lookup failed.
      *
-     * Duplicate keys are fetched only once (A2): several ScanComponents often share the same
+     * Duplicate keys are fetched only once: several ScanComponents often share the same
      * (ecosystem, name, version), and previously each copy cost its own HTTP call. The returned
      * list MUST keep the input's exact size and order — callers index-match it back to their
      * component list, so a misalignment would attach licenses/CVEs to the wrong library.
      */
     public List getVersionsBatch(List components) {
-        // D3: completion counts flow to the caller either explicitly (2-arg overload) or via
+        // Completion counts flow to the caller either explicitly (2-arg overload) or via
         // the thread-scoped enrichment progress context — the 1-arg signature is kept because
         // existing callers (and their mocks) depend on it.
         return getVersionsBatch(components, EnrichmentProgressContext.currentFetchProgress());
@@ -171,7 +193,7 @@ public List getVersionsBatch(List components) {
 
     /**
      * Same as {@link #getVersionsBatch(List)}, additionally invoking {@code onProgress} with the
-     * running count of completed distinct-key fetches as each parallel call finishes (D3).
+     * running count of completed distinct-key fetches as each parallel call finishes.
      */
     public List getVersionsBatch(List components, IntConsumer onProgress) {
         if (airgapped) {
@@ -292,11 +314,15 @@ private List getAdvisoriesFromSnapshot(List ghsaIds) {
      */
     private  T withPermit(Supplier call) {
         try {
-            return callUnderPermit(call);
+            T result = callUnderPermit(call);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
+            return result;
         } catch (RestClientException e) {
             if (!isRateLimited(e)) {
+                recordApiCall(OswlMetrics.OUTCOME_FAILURE);
                 throw e;
             }
+            recordApiCall(OswlMetrics.OUTCOME_RATE_LIMITED);
             log.debug("[DepsDevClient] 429 rate limit from deps.dev — backing off {}ms before a single retry",
                     RATE_LIMIT_BACKOFF_MS);
         }
@@ -308,13 +334,24 @@ private  T withPermit(Supplier call) {
             return null;
         }
         try {
-            return callUnderPermit(call);
+            T result = callUnderPermit(call);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
+            return result;
         } catch (RestClientException e) {
+            recordApiCall(isRateLimited(e) ? OswlMetrics.OUTCOME_RATE_LIMITED : OswlMetrics.OUTCOME_FAILURE);
             log.debug("[DepsDevClient] request still failing after 429 retry: {}", e.getMessage());
             return null;
         }
     }
 
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("depsdev", outcome);
+        }
+    }
+
     private  T callUnderPermit(Supplier call) {
         try {
             requestPermits.acquire();
@@ -337,6 +374,13 @@ private static boolean isRateLimited(RestClientException e) {
 
     private VersionInfo getVersion(ComponentKey key) {
         try {
+            if (!isSupportedSystem(key.ecosystem())) {
+                // Not a failure — deps.dev simply has no data for this ecosystem (e.g. COMPOSER,
+                // CONAN). Skip the call entirely instead of logging a 404 per component.
+                log.debug("[DepsDevClient] Skipping GetVersion {}:{} — ecosystem '{}' is not supported by deps.dev",
+                        key.name(), key.version(), key.ecosystem());
+                return unresolved();
+            }
             if (key.version() == null || key.version().isBlank()) {
                 log.debug("[DepsDevClient] Skipping GetVersion {}:{} — version is null/blank", key.name(), key.version());
                 return unresolved();
@@ -483,7 +527,7 @@ private static String extractSourceRepoProjectKey(Map versionBod
 
     /**
      * Reads registry default (latest stable) version from the package listing API.
-     * Cached per {@code ECOSYSTEM|name} (A2): several scanned versions of the same package
+     * Cached per {@code ECOSYSTEM|name}: several scanned versions of the same package
      * would otherwise each trigger this listing call. Failures are negative-cached via the
      * {@link #DEFAULT_VERSION_MISS} sentinel, since ConcurrentHashMap forbids null values.
      */
diff --git a/src/main/java/com/salkcoding/oswl/client/EpssClient.java b/src/main/java/com/salkcoding/oswl/client/EpssClient.java
index caf80456..0f69dbbc 100644
--- a/src/main/java/com/salkcoding/oswl/client/EpssClient.java
+++ b/src/main/java/com/salkcoding/oswl/client/EpssClient.java
@@ -1,6 +1,7 @@
 package com.salkcoding.oswl.client;
 
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.web.client.RestClient;
 
@@ -23,6 +24,13 @@ public class EpssClient {
     private final RestClient restClient = RestClient.create();
     private final AirgappedSnapshotService snapshotService;
     private final boolean airgapped;
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
 
     /** Live-HTTP client (no snapshot store). Used directly by unit tests. */
     public EpssClient() {
@@ -64,6 +72,7 @@ public Map fetchScores(List cveIds) {
                     .uri(BASE + "?cve=" + joined)
                     .retrieve()
                     .body(Map.class);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
             if (body == null) return Map.of();
             Object data = body.get("data");
             if (!(data instanceof List rows)) return Map.of();
@@ -85,8 +94,17 @@ public Map fetchScores(List cveIds) {
             }
             return result;
         } catch (Exception e) {
+            recordApiCall(OswlMetrics.OUTCOME_FAILURE);
             log.warn("[EPSS] Batch fetch failed: {}", e.getMessage());
             return Map.of();
         }
     }
+
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("epss", outcome);
+        }
+    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/client/GitHubAdvisoryClient.java b/src/main/java/com/salkcoding/oswl/client/GitHubAdvisoryClient.java
new file mode 100644
index 00000000..5c4e03bb
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/client/GitHubAdvisoryClient.java
@@ -0,0 +1,331 @@
+package com.salkcoding.oswl.client;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
+import com.salkcoding.oswl.vdb.SimpleVersionComparator;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.web.client.RestClient;
+import org.springframework.web.client.RestClientException;
+
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * GitHub Security Advisory GraphQL client.
+ *
+ * 
Queries {@code securityVulnerabilities} by package name + ecosystem using a GitHub PAT.
+ * Reuses the existing GitHub token infrastructure: the token is supplied at construction time
+ * from the deployment configuration (not a per-user VCS connection).
+ *
+ * 
Air-gapped mode: queries are answered from the offline snapshot store keyed by component
+ * ({@code ECOSYSTEM|name|version}) instead of live GraphQL calls.
+ */
+@Slf4j
+public class GitHubAdvisoryClient {
+
+    private static final String DEFAULT_GRAPHQL_URL = "https://api.github.com/graphql";
+    private static final Duration DEFAULT_CONNECT_TIMEOUT = Duration.ofSeconds(5);
+    private static final Duration DEFAULT_READ_TIMEOUT = Duration.ofSeconds(20);
+
+    private static final String QUERY = """
+            query($ecosystem: SecurityAdvisoryEcosystem, $package: SecurityAdvisoryPackageName, $first: Int!) {
+              securityVulnerabilities(ecosystem: $ecosystem, package: $package, first: $first) {
+                pageInfo { hasNextPage }
+                nodes {
+                  advisory {
+                    identifiers { type value }
+                    summary
+                    cvss { score vectorString }
+                  }
+                  package { name ecosystem }
+                  firstPatchedVersion { identifier }
+                  vulnerableVersionRange
+                  severity
+                }
+              }
+            }
+            """;
+
+    private final RestClient restClient;
+    private final String graphqlUrl;
+    private final String token;
+    private final AirgappedSnapshotService snapshotService;
+    private final boolean airgapped;
+    private final ObjectMapper objectMapper = new ObjectMapper();
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
+
+    /** Live-HTTP client with no token (will silently return empty results). Used by unit tests. */
+    public GitHubAdvisoryClient() {
+        this(null, false, null, DEFAULT_GRAPHQL_URL, DEFAULT_CONNECT_TIMEOUT, DEFAULT_READ_TIMEOUT);
+    }
+
+    public GitHubAdvisoryClient(AirgappedSnapshotService snapshotService, boolean airgapped, String token,
+                                String apiBase, Duration connectTimeout, Duration readTimeout) {
+        this.snapshotService = snapshotService;
+        this.airgapped = airgapped && snapshotService != null;
+        this.token = (token != null) ? token.strip() : null;
+        this.graphqlUrl = resolveGraphqlUrl(apiBase);
+        SimpleClientHttpRequestFactory factory = new SimpleClientHttpRequestFactory();
+        factory.setConnectTimeout(connectTimeout);
+        factory.setReadTimeout(readTimeout);
+        this.restClient = RestClient.builder()
+                .requestFactory(factory)
+                .build();
+        if (this.airgapped) {
+            log.info("[GitHubAdvisory] Air-gapped mode — advisory lookups served from the offline snapshot store, no outbound HTTP");
+        }
+    }
+
+    private static String resolveGraphqlUrl(String apiBase) {
+        if (apiBase == null || apiBase.isBlank()) {
+            return DEFAULT_GRAPHQL_URL;
+        }
+        String base = apiBase.strip().replaceAll("/+$", "");
+        if (base.endsWith("/api/v3")) {
+            return base.replace("/api/v3", "/api/graphql");
+        }
+        if (base.contains("/api/v3")) {
+            return base + "/graphql";
+        }
+        return DEFAULT_GRAPHQL_URL;
+    }
+
+    /** One GitHub advisory relevant to a specific package/version. */
+    public record GitHubAdvisory(String ghsaId, String cveId, String summary, RiskLevel severity,
+                                  Double cvssScore, String cvss3Vector, String fixVersion) {}
+
+    public boolean canLookup(String ecosystem) {
+        return !airgapped && token != null && !token.isBlank() && toGitHubEcosystem(ecosystem) != null;
+    }
+
+    /**
+     * Looks up advisories for a single package/version. Returns an empty list when the ecosystem
+     * is not supported by GitHub Advisory or the client is air-gapped. Failed requests throw.
+     */
+    public List findByPackage(String ecosystem, String name, String version) {
+        if (airgapped) {
+            return List.of();
+        }
+        String ghEcosystem = toGitHubEcosystem(ecosystem);
+        if (ghEcosystem == null) {
+            log.debug("[GitHubAdvisory] Skipping {} — ecosystem '{}' is not supported by GitHub Advisory", name, ecosystem);
+            return List.of();
+        }
+        if (token == null || token.isBlank()) {
+            log.debug("[GitHubAdvisory] No GitHub token configured — skipping advisory lookup");
+            return List.of();
+        }
+        try {
+            List result = query(ghEcosystem, name, version);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
+            return result;
+        } catch (Exception e) {
+            recordApiCall(isRateLimited(e) ? OswlMetrics.OUTCOME_RATE_LIMITED : OswlMetrics.OUTCOME_FAILURE);
+            log.warn("[GitHubAdvisory] Lookup failed for {}:{} — {}", name, version, e.getMessage());
+            throw new IllegalStateException("GitHub Advisory lookup unavailable", e);
+        }
+    }
+
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("github-advisory", outcome);
+        }
+    }
+
+    /** GitHub rate limiting surfaces as a 403/429 status in the error message. */
+    private static boolean isRateLimited(Exception e) {
+        String message = e.getMessage();
+        return message != null && (message.contains("429") || message.contains("403"));
+    }
+
+    /**
+     * Offline path: looks up GitHub Advisory-derived CVEs by component key.
+     * Returns stored results only; absent keys have no completed lookup evidence.
+     */
+    public Map> findByComponentKeys(Collection componentKeys) {
+        if (!airgapped || componentKeys == null || componentKeys.isEmpty()) {
+            return Map.of();
+        }
+        Map> found =
+                snapshotService.findGitHubAdvisoryVulns(componentKeys);
+        Map> result = new LinkedHashMap<>();
+        for (String key : componentKeys) {
+            List vulns = found.get(key);
+            if (vulns == null) {
+                continue;
+            } else {
+                result.put(key, vulns.stream()
+                        .map(v -> new GitHubAdvisory(v.osvId(), v.cveId(), v.summary(),
+                                parseSeverity(v.severity()), v.cvssScore(), v.cvss3Vector(), v.fixVersion()))
+                        .toList());
+            }
+        }
+        return result;
+    }
+
+    @SuppressWarnings("unchecked")
+    private List query(String ghEcosystem, String name, String version) throws Exception {
+        Map variables = Map.of(
+                "ecosystem", ghEcosystem,
+                "package", name,
+                "first", 100);
+        Map body = Map.of("query", QUERY, "variables", variables);
+
+        Map response = restClient.post()
+                .uri(graphqlUrl)
+                .header("Authorization", "Bearer " + token)
+                .header("Accept", "application/vnd.github+json")
+                .header("X-GitHub-Api-Version", "2022-11-28")
+                .header("Content-Type", "application/json")
+                .body(body)
+                .retrieve()
+                .body(Map.class);
+
+        if (response == null) throw new IllegalStateException("Empty GraphQL response");
+        Object errors = response.get("errors");
+        if (errors instanceof List errorList && !errorList.isEmpty()) {
+            throw new IllegalStateException("GraphQL response contains errors");
+        }
+        Object data = response.get("data");
+        if (!(data instanceof Map dataMap)) throw new IllegalStateException("Missing GraphQL data");
+        Object sv = dataMap.get("securityVulnerabilities");
+        if (!(sv instanceof Map svMap)) throw new IllegalStateException("Missing vulnerability connection");
+        if (svMap.get("pageInfo") instanceof Map pageInfo && Boolean.TRUE.equals(pageInfo.get("hasNextPage")))
+            throw new IllegalStateException("Incomplete advisory pagination");
+        Object nodes = svMap.get("nodes");
+        if (!(nodes instanceof List nodeList)) throw new IllegalStateException("Missing advisory nodes");
+
+        List result = new ArrayList<>();
+        for (Object nodeObj : nodeList) {
+            if (!(nodeObj instanceof Map node) || !(node.get("advisory") instanceof Map))
+                throw new IllegalStateException("Malformed advisory node");
+            String range = (String) node.get("vulnerableVersionRange");
+            if (!isVersionAffected(version, range)) continue;
+            result.add(parseAdvisoryNode(node));
+        }
+        return result;
+    }
+
+    @SuppressWarnings("unchecked")
+    private GitHubAdvisory parseAdvisoryNode(Map node) {
+        Map advisory = (Map) node.get("advisory");
+        String ghsaId = null;
+        String cveId = null;
+        Object identifiers = advisory != null ? advisory.get("identifiers") : null;
+        if (identifiers instanceof List idList) {
+            for (Object idObj : idList) {
+                if (!(idObj instanceof Map id)) continue;
+                String type = String.valueOf(id.get("type"));
+                String value = (String) id.get("value");
+                if ("GHSA".equalsIgnoreCase(type) && value != null) ghsaId = value;
+                if ("CVE".equalsIgnoreCase(type) && value != null) cveId = value;
+            }
+        }
+        String summary = advisory != null ? (String) advisory.get("summary") : null;
+        Double cvssScore = null;
+        String cvssVector = null;
+        if (advisory != null) {
+            Object cvss = advisory.get("cvss");
+            if (cvss instanceof Map cvssMap) {
+                Object score = cvssMap.get("score");
+                if (score instanceof Number n) cvssScore = n.doubleValue();
+                cvssVector = (String) cvssMap.get("vectorString");
+            }
+        }
+        RiskLevel severity = parseSeverity((String) node.get("severity"));
+        if (severity == RiskLevel.NONE && cvssScore != null) {
+            severity = cvssToRiskLevel(cvssScore);
+        }
+        String fixVersion = null;
+        Object fpv = node.get("firstPatchedVersion");
+        if (fpv instanceof Map fpvMap) {
+            fixVersion = (String) fpvMap.get("identifier");
+        }
+        return new GitHubAdvisory(ghsaId, cveId, summary, severity, cvssScore, cvssVector, fixVersion);
+    }
+
+    private static boolean isVersionAffected(String version, String range) {
+        if (range == null || range.isBlank()) return true;
+        String normalizedVersion = version == null ? "" : version.strip();
+        if (normalizedVersion.isEmpty()) return true;
+        String[] parts = range.split(",");
+        for (String part : parts) {
+            String constraint = part.strip();
+            if (constraint.isEmpty()) continue;
+            String op;
+            String ver;
+            if (constraint.startsWith(">=")) { op = ">="; ver = constraint.substring(2).strip(); }
+            else if (constraint.startsWith("<=")) { op = "<="; ver = constraint.substring(2).strip(); }
+            else if (constraint.startsWith(">")) { op = ">"; ver = constraint.substring(1).strip(); }
+            else if (constraint.startsWith("<")) { op = "<"; ver = constraint.substring(1).strip(); }
+            else if (constraint.startsWith("=")) { op = "="; ver = constraint.substring(1).strip(); }
+            else { op = "="; ver = constraint; }
+            try {
+                int cmp = SimpleVersionComparator.compare(normalizedVersion, ver);
+                boolean ok = switch (op) {
+                    case ">=" -> cmp >= 0;
+                    case "<=" -> cmp <= 0;
+                    case ">" -> cmp > 0;
+                    case "<" -> cmp < 0;
+                    default -> cmp == 0;
+                };
+                if (!ok) return false;
+            } catch (IllegalArgumentException e) {
+                // If we cannot compare, err on the side of surfacing the advisory.
+                return true;
+            }
+        }
+        return true;
+    }
+
+    private static RiskLevel parseSeverity(String severity) {
+        if (severity == null || severity.isBlank()) return RiskLevel.NONE;
+        try {
+            return RiskLevel.valueOf(severity.strip().toUpperCase(Locale.ROOT));
+        } catch (IllegalArgumentException e) {
+            return RiskLevel.NONE;
+        }
+    }
+
+    private static RiskLevel cvssToRiskLevel(Double score) {
+        if (score == null) return RiskLevel.NONE;
+        if (score >= 9.0) return RiskLevel.CRITICAL;
+        if (score >= 7.0) return RiskLevel.HIGH;
+        if (score >= 4.0) return RiskLevel.MEDIUM;
+        if (score > 0.0) return RiskLevel.LOW;
+        return RiskLevel.NONE;
+    }
+
+    private static String toGitHubEcosystem(String ecosystem) {
+        if (ecosystem == null) return null;
+        return switch (ecosystem.strip().toUpperCase(Locale.ROOT)) {
+            case "MAVEN" -> "MAVEN";
+            case "NPM" -> "NPM";
+            case "PYPI", "PIP" -> "PIP";
+            case "GO" -> "GO";
+            case "CARGO" -> "RUST";
+            case "NUGET" -> "NUGET";
+            case "RUBYGEMS" -> "RUBYGEMS";
+            case "COMPOSER" -> "COMPOSER";
+            default -> null;
+        };
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/client/KevCatalogService.java b/src/main/java/com/salkcoding/oswl/client/KevCatalogService.java
index 88ec346a..64c95d50 100644
--- a/src/main/java/com/salkcoding/oswl/client/KevCatalogService.java
+++ b/src/main/java/com/salkcoding/oswl/client/KevCatalogService.java
@@ -1,6 +1,7 @@
 package com.salkcoding.oswl.client;
 
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.scheduling.annotation.Scheduled;
 import org.springframework.web.client.RestClient;
@@ -29,6 +30,13 @@ public class KevCatalogService {
     private final AirgappedSnapshotService snapshotService;
     private final boolean airgapped;
     private volatile Set kevCveIds = Set.of();
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
 
     /** Live-HTTP catalog (no snapshot store). Used directly by unit tests. */
     public KevCatalogService() {
@@ -57,6 +65,7 @@ public void refresh() {
                     .uri(KEV_FEED_URL)
                     .retrieve()
                     .body(Map.class);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
             if (body == null) return;
             Object vulns = body.get("vulnerabilities");
             if (!(vulns instanceof List list)) return;
@@ -72,10 +81,19 @@ public void refresh() {
             kevCveIds = Collections.unmodifiableSet(ids);
             log.info("[KEV] Loaded {} known exploited CVE entries", ids.size());
         } catch (Exception e) {
+            recordApiCall(OswlMetrics.OUTCOME_FAILURE);
             log.warn("[KEV] Failed to refresh catalog: {}", e.getMessage());
         }
     }
 
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("kev", outcome);
+        }
+    }
+
     public boolean isListed(String cveId) {
         if (cveId == null || !cveId.startsWith("CVE-")) return false;
         return kevCveIds.contains(cveId.strip().toUpperCase());
diff --git a/src/main/java/com/salkcoding/oswl/client/NvdClient.java b/src/main/java/com/salkcoding/oswl/client/NvdClient.java
new file mode 100644
index 00000000..8e1eb7cc
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/client/NvdClient.java
@@ -0,0 +1,293 @@
+package com.salkcoding.oswl.client;
+
+import com.salkcoding.oswl.domain.enums.MatchConfidence;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.client.SimpleClientHttpRequestFactory;
+import org.springframework.web.client.RestClient;
+import org.springframework.web.client.RestClientException;
+
+import java.net.URLEncoder;
+import java.nio.charset.StandardCharsets;
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * NVD 2.0 REST API client.
+ *
+ * 
Supports both authenticated (API key) and unauthenticated calls. NVD rate-limits requests
+ * per rolling window, so the client enforces a minimum interval between calls and backs off
+ * exponentially when it receives a 403/429 response.
+ *
+ * 
Air-gapped mode: queries are answered from the offline snapshot store keyed by component
+ * ({@code ECOSYSTEM|name|version}) instead of live NVD HTTP calls.
+ */
+@Slf4j
+public class NvdClient {
+
+    private static final String BASE_URL = "https://services.nvd.nist.gov/rest/json/cves/2.0";
+    private static final int MAX_RETRIES = 3;
+    private static final long UNAUTH_INTERVAL_MS = 6_500;
+    private static final long AUTH_INTERVAL_MS = 650;
+    private static final Duration DEFAULT_CONNECT_TIMEOUT = Duration.ofSeconds(5);
+    private static final Duration DEFAULT_READ_TIMEOUT = Duration.ofSeconds(20);
+
+    private final RestClient restClient;
+    private final AirgappedSnapshotService snapshotService;
+    private final boolean airgapped;
+    private final String apiKey;
+    private final long minIntervalMs;
+    private long lastRequestMs = 0;
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
+
+    /** Live-HTTP client with no API key. Used directly by unit tests. */
+    public NvdClient() {
+        this(null, false, null, DEFAULT_CONNECT_TIMEOUT, DEFAULT_READ_TIMEOUT);
+    }
+
+    public NvdClient(AirgappedSnapshotService snapshotService, boolean airgapped, String apiKey,
+                     Duration connectTimeout, Duration readTimeout) {
+        this.snapshotService = snapshotService;
+        this.airgapped = airgapped && snapshotService != null;
+        this.apiKey = (apiKey != null) ? apiKey.strip() : null;
+        this.minIntervalMs = (this.apiKey != null && !this.apiKey.isBlank()) ? AUTH_INTERVAL_MS : UNAUTH_INTERVAL_MS;
+        SimpleClientHttpRequestFactory factory = new SimpleClientHttpRequestFactory();
+        factory.setConnectTimeout(connectTimeout);
+        factory.setReadTimeout(readTimeout);
+        this.restClient = RestClient.builder()
+                .requestFactory(factory)
+                .build();
+        if (this.airgapped) {
+            log.info("[NVD] Air-gapped mode — NVD queries served from the offline snapshot store, no outbound HTTP");
+        }
+    }
+
+    /** One NVD CVE returned for a CPE lookup. */
+    public record NvdCve(String cveId, String description, RiskLevel severity,
+                         Double cvssScore, String cvss3Vector, MatchConfidence matchConfidence) {}
+
+    /**
+     * Queries live NVD by exact CPE name. Returns an empty list when the CPE is blank,
+     * or the client is air-gapped. Failed/malformed lookups throw so callers retain incomplete coverage.
+     */
+    public List findByCpeName(String cpeName, MatchConfidence confidence) {
+        if (airgapped || cpeName == null || cpeName.isBlank()) {
+            return List.of();
+        }
+        String url = BASE_URL + "?cpeName=" + URLEncoder.encode(cpeName.strip(), StandardCharsets.UTF_8);
+        try {
+            return parseBody(doRequest(url), confidence);
+        } catch (Exception e) {
+            log.warn("[NVD] CPE lookup failed for {}: {}", cpeName, e.getMessage());
+            throw new IllegalStateException("NVD lookup unavailable", e);
+        }
+    }
+
+    public boolean isAirgapped() { return airgapped; }
+
+    /**
+     * Offline path: looks up NVD-derived CVEs by component key.
+     * Returns a map keyed by the input component keys; absent keys mean "no known vulnerabilities".
+     */
+    public Map> findByComponentKeys(Collection componentKeys) {
+        if (!airgapped || componentKeys == null || componentKeys.isEmpty()) {
+            return Map.of();
+        }
+        Map> found =
+                snapshotService.findNvdVulns(componentKeys);
+        Map> result = new LinkedHashMap<>();
+        for (String key : componentKeys) {
+            List vulns = found.get(key);
+            if (vulns == null) {
+                continue;
+            } else {
+                result.put(key, vulns.stream()
+                        .map(v -> new NvdCve(v.cveId(), v.summary(),
+                                parseSeverity(v.severity()), v.cvssScore(), v.cvss3Vector(),
+                                parseConfidence(v.matchConfidence())))
+                        .toList());
+            }
+        }
+        return result;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map doRequest(String url) {
+        int attempt = 0;
+        while (true) {
+            throttle();
+            try {
+                Map body = restClient.get()
+                        .uri(url)
+                        .header("Accept", "application/json")
+                        .headers(headers -> {
+                            if (apiKey != null && !apiKey.isBlank()) {
+                                headers.add("apiKey", apiKey);
+                            } else {
+                                headers.add("User-Agent", "OsWL-NvdClient/1.0");
+                            }
+                        })
+                        .retrieve()
+                        .body(Map.class);
+                recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
+                return body != null ? body : Map.of();
+            } catch (RestClientException e) {
+                recordApiCall(isRateLimited(e) ? OswlMetrics.OUTCOME_RATE_LIMITED : OswlMetrics.OUTCOME_FAILURE);
+                if (!isRateLimited(e) || attempt >= MAX_RETRIES) {
+                    throw e;
+                }
+                long backoff = minIntervalMs * (1L << attempt);
+                log.debug("[NVD] Rate limited — backing off {}ms before retry {}/{}", backoff, attempt + 1, MAX_RETRIES);
+                try {
+                    Thread.sleep(backoff);
+                } catch (InterruptedException ie) {
+                    Thread.currentThread().interrupt();
+                    throw new RestClientException("Interrupted during NVD rate-limit backoff", ie);
+                }
+                attempt++;
+            }
+        }
+    }
+
+    private synchronized void throttle() {
+        long now = System.currentTimeMillis();
+        long elapsed = now - lastRequestMs;
+        if (elapsed < minIntervalMs && lastRequestMs > 0) {
+            try {
+                Thread.sleep(minIntervalMs - elapsed);
+            } catch (InterruptedException e) {
+                Thread.currentThread().interrupt();
+            }
+        }
+        lastRequestMs = System.currentTimeMillis();
+    }
+
+    private static boolean isRateLimited(RestClientException e) {
+        String message = e.getMessage();
+        return message != null && (message.contains("403") || message.contains("429"));
+    }
+
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("nvd", outcome);
+        }
+    }
+
+    @SuppressWarnings("unchecked")
+    private List parseBody(Map body, MatchConfidence confidence) {
+        if (body == null) throw new IllegalArgumentException("Missing NVD response");
+        Object vulns = body.get("vulnerabilities");
+        if (!(vulns instanceof List list)) throw new IllegalArgumentException("Missing NVD vulnerabilities");
+        if (body.get("totalResults") instanceof Number total && total.longValue() > list.size())
+            throw new IllegalArgumentException("NVD response requires additional pages");
+        List result = new ArrayList<>();
+        for (Object item : list) {
+            if (!(item instanceof Map v)) throw new IllegalArgumentException("Invalid NVD item");
+            Map cve = (Map) v.get("cve");
+            if (cve == null) throw new IllegalArgumentException("Missing NVD CVE");
+            String id = (String) cve.get("id");
+            if (id == null) throw new IllegalArgumentException("Missing NVD identifier");
+            Cvss cvss = extractCvss(cve);
+            result.add(new NvdCve(id, extractDescription(cve), cvss.severity, cvss.score, cvss.vector, confidence));
+        }
+        return result;
+    }
+
+    @SuppressWarnings("unchecked")
+    private static String extractDescription(Map cve) {
+        Object descriptions = cve.get("descriptions");
+        if (!(descriptions instanceof List list)) return null;
+        for (Object d : list) {
+            if (!(d instanceof Map m)) continue;
+            if ("en".equalsIgnoreCase(String.valueOf(m.get("lang")))) {
+                Object value = m.get("value");
+                return value instanceof String s && !s.isBlank() ? s : null;
+            }
+        }
+        return null;
+    }
+
+    private static Cvss extractCvss(Map cve) {
+        Object metrics = cve.get("metrics");
+        if (!(metrics instanceof Map m)) return Cvss.empty();
+        Cvss cvss = fromMetricArray(m.get("cvssMetricV40"));
+        if (cvss != null) return cvss;
+        cvss = fromMetricArray(m.get("cvssMetricV31"));
+        if (cvss != null) return cvss;
+        cvss = fromMetricArray(m.get("cvssMetricV30"));
+        return cvss != null ? cvss : Cvss.empty();
+    }
+
+    @SuppressWarnings("unchecked")
+    private static Cvss fromMetricArray(Object metricArray) {
+        if (!(metricArray instanceof List list) || list.isEmpty()) return null;
+        Object first = list.get(0);
+        if (!(first instanceof Map m)) return null;
+        Object cvssData = m.get("cvssData");
+        if (!(cvssData instanceof Map data)) return null;
+        Object scoreObj = data.get("baseScore");
+        Double score = (scoreObj instanceof Number n) ? n.doubleValue() : null;
+        String vector = data.get("vectorString") instanceof String s ? s : null;
+        RiskLevel severity = cvssToRiskLevel(score);
+        Object sevObj = data.get("baseSeverity");
+        if (sevObj instanceof String s) {
+            try {
+                RiskLevel parsed = RiskLevel.valueOf(s.toUpperCase());
+                if (severity == RiskLevel.NONE || parsed.ordinal() <= severity.ordinal()) {
+                    severity = parsed;
+                }
+            } catch (IllegalArgumentException ignored) {
+                // keep score-derived severity
+            }
+        }
+        return new Cvss(severity, score, vector);
+    }
+
+    private static RiskLevel parseSeverity(String severity) {
+        if (severity == null || severity.isBlank()) return RiskLevel.NONE;
+        try {
+            return RiskLevel.valueOf(severity.strip().toUpperCase());
+        } catch (IllegalArgumentException e) {
+            return RiskLevel.NONE;
+        }
+    }
+
+    private static MatchConfidence parseConfidence(String confidence) {
+        if (confidence == null || confidence.isBlank()) return null;
+        try {
+            return MatchConfidence.valueOf(confidence.strip().toUpperCase());
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    private static RiskLevel cvssToRiskLevel(Double score) {
+        if (score == null) return RiskLevel.NONE;
+        if (score >= 9.0) return RiskLevel.CRITICAL;
+        if (score >= 7.0) return RiskLevel.HIGH;
+        if (score >= 4.0) return RiskLevel.MEDIUM;
+        if (score > 0.0) return RiskLevel.LOW;
+        return RiskLevel.NONE;
+    }
+
+    private record Cvss(RiskLevel severity, Double score, String vector) {
+        static Cvss empty() {
+            return new Cvss(RiskLevel.NONE, null, null);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/client/OsvClient.java b/src/main/java/com/salkcoding/oswl/client/OsvClient.java
index c9696617..10413d10 100644
--- a/src/main/java/com/salkcoding/oswl/client/OsvClient.java
+++ b/src/main/java/com/salkcoding/oswl/client/OsvClient.java
@@ -1,7 +1,8 @@
 package com.salkcoding.oswl.client;
 
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotVuln;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVuln;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.http.client.SimpleClientHttpRequestFactory;
 import org.springframework.web.client.RestClient;
@@ -18,13 +19,13 @@
 /**
  * REST API client for OSV.dev.
  *
- * Uses only the querybatch endpoint (POST /v1/querybatch) —
+ * Discovers affected IDs with the querybatch endpoint (POST /v1/querybatch) —
  * repeated single-item calls to /v1/query are intentionally avoided.
- * Up to 1,000 queries can be sent in a single batch call, with no rate limit.
+ * Fetches deduplicated advisory details within a bounded per-call request/time budget.
  *
  * Air-gapped mode: when constructed with a snapshot store and the air-gapped flag,
  * queries are answered from the offline snapshot instead of HTTP (components absent
- * from the snapshot resolve as "no vulnerabilities").
+ * from the snapshot remain unresolved).
  */
 @Slf4j
 public class OsvClient {
@@ -39,6 +40,13 @@ public class OsvClient {
     private final RestClient restClient;
     private final AirgappedSnapshotService snapshotService;
     private final boolean airgapped;
+    /** Null until wired by Spring config (unit tests construct the client directly) — every use is guarded. */
+    private volatile OswlMetrics oswlMetrics;
+
+    /** Called once by Spring config after construction to enable external-API metrics. */
+    public void setOswlMetrics(OswlMetrics oswlMetrics) {
+        this.oswlMetrics = oswlMetrics;
+    }
 
     /** Live-HTTP client (no snapshot store). Used directly by unit tests. */
     public OsvClient() {
@@ -74,16 +82,30 @@ public record OsvVuln(
             String cveId,
             String summary,
             String fixVersion,
-            String cweId) {}
+            String cweId,
+            com.salkcoding.oswl.domain.enums.RiskLevel severity,
+            Double cvssScore,
+            String cvssVector) {
+        public OsvVuln(String osvId, String cveId, String summary, String fixVersion, String cweId) {
+            this(osvId, cveId, summary, fixVersion, cweId, null, null, null);
+        }
+        public com.salkcoding.oswl.domain.enums.RiskLevel effectiveSeverity() {
+            if (osvId != null && osvId.startsWith("MAL-")) return com.salkcoding.oswl.domain.enums.RiskLevel.CRITICAL;
+            return severity != null ? severity : com.salkcoding.oswl.domain.enums.RiskLevel.NONE;
+        }
+    }
 
     /** Result set for a single query, aligned with the input batch index. */
-    public record OsvResult(List vulns) {}
+    public record OsvResult(List vulns, boolean resolved) {
+        public OsvResult(List vulns) { this(vulns, true); }
+        public static OsvResult unresolved() { return new OsvResult(List.of(), false); }
+    }
 
     // ── Public API ───────────────────────────────────────────────────────
 
     /**
      * Sends components in batches of up to 1,000 and returns results aligned with the input list.
-     * An empty OsvResult(vulns = []) means the component has no vulnerabilities.
+     * Only a resolved empty result means the lookup returned no findings; failures remain unresolved.
      */
     public List queryBatch(List queries) {
         if (queries.isEmpty()) return Collections.emptyList();
@@ -94,9 +116,10 @@ public List queryBatch(List queries) {
 
         List allResults = new ArrayList<>(queries.size());
 
+        DetailBudget details = new DetailBudget();
         for (int i = 0; i < queries.size(); i += MAX_BATCH_SIZE) {
             List chunk = queries.subList(i, Math.min(i + MAX_BATCH_SIZE, queries.size()));
-            allResults.addAll(doQueryBatch(chunk));
+            allResults.addAll(doQueryBatch(chunk, details));
         }
         return allResults;
     }
@@ -113,18 +136,19 @@ private List queryBatchFromSnapshot(List queries) {
             if (key != null) distinctKeys.add(key);
         }
         Map> found = snapshotService.findOsvVulns(distinctKeys);
+        Set unresolved = snapshotService.findUnresolvedKeys(distinctKeys);
 
         List results = new ArrayList<>(queries.size());
         int hits = 0;
         for (String key : keys) {
             List vulns = key != null ? found.get(key) : null;
             if (vulns == null) {
-                results.add(new OsvResult(List.of()));
+                results.add(OsvResult.unresolved());
             } else {
                 hits++;
                 results.add(new OsvResult(vulns.stream()
-                        .map(v -> new OsvVuln(v.osvId(), v.cveId(), v.summary(), v.fixVersion(), v.cweId()))
-                        .toList()));
+                        .map(v -> new OsvVuln(v.osvId(), v.cveId(), v.summary(), v.fixVersion(), v.cweId(), risk(v.severity(), v.cvssScore()), v.cvssScore(), v.cvss3Vector()))
+                        .toList(), !unresolved.contains(key)));
             }
         }
         log.debug("[OsvClient] air-gapped querybatch size={} snapshotHits={} totalVulns={}",
@@ -135,8 +159,12 @@ private List queryBatchFromSnapshot(List queries) {
 
     // ── Internal ─────────────────────────────────────────────────────────
 
+    public Set findUnresolvedComponentKeys(java.util.Collection keys) {
+        return airgapped ? snapshotService.findUnresolvedKeys(keys) : Set.of();
+    }
+
     @SuppressWarnings("unchecked")
-    private List doQueryBatch(List queries) {
+    private List doQueryBatch(List queries, DetailBudget details) {
         try {
             // Map.of() rejects null values — pre-filter queries with null fields
             // and track original indices to realign the result list.
@@ -153,11 +181,11 @@ private List doQueryBatch(List queries) {
             }
 
             if (requestBody.isEmpty()) {
-                return Collections.nCopies(queries.size(), new OsvResult(List.of()));
+                return Collections.nCopies(queries.size(), OsvResult.unresolved());
             }
 
-            log.debug("[OsvClient] querybatch request size={} valid={} queries={}",
-                    queries.size(), validIndices.size(), queries);
+            log.debug("[OsvClient] querybatch request size={} valid={}",
+                    queries.size(), validIndices.size());
 
             Map response = restClient.post()
                     .uri("/v1/querybatch")
@@ -165,34 +193,41 @@ private List doQueryBatch(List queries) {
                     .body(Map.of("queries", requestBody))
                     .retrieve()
                     .body(Map.class);
+            recordApiCall(OswlMetrics.OUTCOME_SUCCESS);
 
-            log.debug("[OsvClient] querybatch response raw={}", response);
-
-            if (response == null || !response.containsKey("results")) {
+            if (response == null || !(response.get("results") instanceof List rawResults)) {
                 log.debug("[OsvClient] querybatch response is empty or missing the 'results' key");
-                return Collections.nCopies(queries.size(), new OsvResult(List.of()));
+                return Collections.nCopies(queries.size(), OsvResult.unresolved());
             }
 
-            List rawResults = (List) response.get("results");
             List parsed = new ArrayList<>(rawResults.size());
 
             for (Object rawResult : rawResults) {
+                if (parsed.size() >= validIndices.size()) break;
+                OsvQuery query = queries.get(validIndices.get(parsed.size()));
                 if (!(rawResult instanceof Map resultMap)) {
-                    parsed.add(new OsvResult(List.of()));
+                    parsed.add(OsvResult.unresolved());
                     continue;
                 }
                 Object vulnsObj = resultMap.get("vulns");
+                if (vulnsObj != null && !(vulnsObj instanceof List)) {
+                    parsed.add(OsvResult.unresolved());
+                    continue;
+                }
                 if (!(vulnsObj instanceof List vulnList) || vulnList.isEmpty()) {
-                    parsed.add(new OsvResult(List.of()));
+                    parsed.add(new OsvResult(List.of(), !resultMap.containsKey("next_page_token")));
                     continue;
                 }
                 List vulns = new ArrayList<>();
+                boolean resolved = !resultMap.containsKey("next_page_token");
                 for (Object vulnObj : vulnList) {
-                    if (vulnObj instanceof Map vuln) {
-                        vulns.add(parseVuln((Map) vuln));
-                    }
+                    if (vulnObj instanceof Map vuln && vuln.get("id") instanceof String id && !id.isBlank()) {
+                        Map detail = loadDetail(id, details);
+                        vulns.add(parseVuln(detail != null ? detail : (Map) vuln, query));
+                        if (detail == null) resolved = false;
+                    } else resolved = false;
                 }
-                parsed.add(new OsvResult(vulns));
+                parsed.add(new OsvResult(vulns, resolved));
             }
             log.debug("[OsvClient] querybatch parsed results count={} totalVulns={}",
                     parsed.size(),
@@ -200,7 +235,7 @@ private List doQueryBatch(List queries) {
 
             // Expand to queries.size() to preserve alignment and insert empty results for null versions
             OsvResult[] finalResults = new OsvResult[queries.size()];
-            java.util.Arrays.fill(finalResults, new OsvResult(List.of()));
+            java.util.Arrays.fill(finalResults, OsvResult.unresolved());
             for (int i = 0; i < validIndices.size() && i < parsed.size(); i++) {
                 finalResults[validIndices.get(i)] = parsed.get(i);
             }
@@ -210,17 +245,34 @@ private List doQueryBatch(List queries) {
             }
             return java.util.Arrays.asList(finalResults);
         } catch (RestClientException e) {
+            recordApiCall(isRateLimited(e) ? OswlMetrics.OUTCOME_RATE_LIMITED : OswlMetrics.OUTCOME_FAILURE);
             log.error("[OsvClient] querybatch failed: {}", e.getMessage());
-            return Collections.nCopies(queries.size(), new OsvResult(List.of()));
+            return Collections.nCopies(queries.size(), OsvResult.unresolved());
         }
     }
 
-    private OsvVuln parseVuln(Map vuln) {
+    /** External-API call counter — no-op until Spring config wires the metrics bean. */
+    private void recordApiCall(String outcome) {
+        OswlMetrics m = oswlMetrics;
+        if (m != null) {
+            m.recordExternalApiCall("osv", outcome);
+        }
+    }
+
+    /** A 429 (or 403, used by some hosts as a throttle signal) anywhere in the error message. */
+    private static boolean isRateLimited(RestClientException e) {
+        String message = e.getMessage();
+        return message != null && (message.contains("429") || message.contains("403"));
+    }
+
+    OsvVuln parseVuln(Map vuln) { return parseVuln(vuln, null); }
+
+    OsvVuln parseVuln(Map vuln, OsvQuery query) {
         String osvId  = (String) vuln.get("id");
         String summary = (String) vuln.get("summary");
 
         // Extract the CVE ID from aliases
-        String cveId = null;
+        String cveId = osvId != null && osvId.startsWith("CVE-") ? osvId : null;
         Object aliasesObj = vuln.get("aliases");
         if (aliasesObj instanceof List aliases) {
             cveId = aliases.stream()
@@ -228,35 +280,147 @@ private OsvVuln parseVuln(Map vuln) {
                     .map(String.class::cast)
                     .filter(a -> a.startsWith("CVE-"))
                     .findFirst()
-                    .orElse(null);
+                    .orElse(cveId);
         }
 
         // Extract the fixed version from affected[].ranges[].events[fixed]
         String fixVersion = null;
+        Set fixedVersions = new LinkedHashSet<>();
+        int rangeCount = 0;
+        int introducedCount = 0;
+        boolean openEnded = false;
         Object affectedObj = vuln.get("affected");
-        outer:
         if (affectedObj instanceof List affected) {
             for (Object aff : affected) {
                 if (!(aff instanceof Map affMap)) continue;
+                if (query != null && (!(affMap.get("package") instanceof Map pkg)
+                        || !query.name().equals(pkg.get("name")) || !query.ecosystem().equals(pkg.get("ecosystem")))) continue;
                 Object rangesObj = affMap.get("ranges");
                 if (!(rangesObj instanceof List ranges)) continue;
                 for (Object range : ranges) {
                     if (!(range instanceof Map rangeMap)) continue;
+                    if ("GIT".equals(rangeMap.get("type"))) continue;
                     Object eventsObj = rangeMap.get("events");
                     if (!(eventsObj instanceof List events)) continue;
+                    rangeCount++;
+                    boolean open = false;
                     for (Object event : events) {
                         if (!(event instanceof Map eventMap)) continue;
+                        if (eventMap.containsKey("introduced")) { introducedCount++; open = true; }
                         Object fixed = eventMap.get("fixed");
                         if (fixed instanceof String fs && !fs.isBlank()) {
-                            fixVersion = fs;
-                            break outer;
+                            fixedVersions.add(fs);
+                            open = false;
                         }
                     }
+                    openEnded |= open;
+                }
+            }
+        }
+
+        // Ecosystem-specific ordering is needed to choose among disjoint ranges. Never
+        // recommend an earlier fix when the advisory includes a later vulnerable interval.
+        if (rangeCount == 1 && introducedCount <= 1 && !openEnded && fixedVersions.size() == 1)
+            fixVersion = fixedVersions.iterator().next();
+        if (query != null && affectedObj instanceof List affected) {
+            String matchedFix = fixForInstalledVersion(affected, query);
+            if (matchedFix != null) fixVersion = matchedFix;
+        }
+
+        Double score = null; String vector = null;
+        if (vuln.get("severity") instanceof List severities) {
+            for (String prefix : List.of("CVSS:4.0/", "CVSS:3.")) {
+                for (Object raw : severities) {
+                    if (!(raw instanceof Map entry) || !(entry.get("score") instanceof String value) || !value.startsWith(prefix)) continue;
+                    Double parsed = value.startsWith("CVSS:4.0/")
+                            ? com.salkcoding.oswl.service.cvss.CvssV4Calculator.baseScore(value)
+                            : com.salkcoding.oswl.service.cvss.CvssV3Calculator.baseScore(value);
+                    if (parsed != null && (score == null || parsed > score)) { score = parsed; vector = value; }
                 }
+                if (score != null) break;
             }
         }
+        String severity = vuln.get("database_specific") instanceof Map db && db.get("severity") instanceof String value ? value : null;
+        return new OsvVuln(osvId, cveId, summary, fixVersion, extractCweId(vuln), risk(severity, score), score, vector);
+    }
+
+    private record VersionInterval(String introduced, String fixed) {}
+
+    /** Select a fix in the installed release's interval, never a fix from an older release line. */
+    private static String fixForInstalledVersion(List affected, OsvQuery query) {
+        if (!numericRelease(query.version())) return null;
+        List intervals = new ArrayList<>();
+        for (Object raw : affected) {
+            if (!(raw instanceof Map entry) || !(entry.get("package") instanceof Map pkg)
+                    || !query.name().equals(pkg.get("name")) || !query.ecosystem().equals(pkg.get("ecosystem"))
+                    || !(entry.get("ranges") instanceof List ranges)) continue;
+            for (Object rawRange : ranges) {
+                if (!(rawRange instanceof Map range) || "GIT".equals(range.get("type"))
+                        || !(range.get("events") instanceof List events)) continue;
+                String introduced = null;
+                for (Object rawEvent : events) {
+                    if (!(rawEvent instanceof Map event)) continue;
+                    if (event.get("introduced") instanceof String value) introduced = value;
+                    if (event.containsKey("last_affected") || event.containsKey("limit")) return null;
+                    if (event.get("fixed") instanceof String fixed && introduced != null) {
+                        if (!numericRelease(introduced) || !numericRelease(fixed)) return null;
+                        intervals.add(new VersionInterval(introduced, fixed));
+                        introduced = null;
+                    }
+                }
+                if (introduced != null) {
+                    if (!numericRelease(introduced)) return null;
+                    intervals.add(new VersionInterval(introduced, null));
+                }
+            }
+        }
+        try {
+            return intervals.stream().filter(i -> containsVersion(i, query.version()) && i.fixed() != null)
+                    .map(VersionInterval::fixed)
+                    .filter(candidate -> intervals.stream().noneMatch(i -> containsVersion(i, candidate)))
+                    .min(com.salkcoding.oswl.vdb.SimpleVersionComparator::compare).orElse(null);
+        } catch (IllegalArgumentException unsupported) {
+            return null;
+        }
+    }
+
+    private static boolean containsVersion(VersionInterval interval, String version) {
+        return com.salkcoding.oswl.vdb.SimpleVersionComparator.compare(version, interval.introduced()) >= 0
+                && (interval.fixed() == null || com.salkcoding.oswl.vdb.SimpleVersionComparator.compare(version, interval.fixed()) < 0);
+    }
+
+    private static boolean numericRelease(String value) {
+        return value != null && value.matches("[vV]?[0-9]+(?:\\.[0-9]+)*");
+    }
+
+    private static final class DetailBudget {
+        final Map> cache = new java.util.HashMap<>();
+        long deadline;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map loadDetail(String id, DetailBudget budget) {
+        if (budget.cache.containsKey(id)) return budget.cache.get(id);
+        if (budget.deadline == 0) budget.deadline = System.nanoTime() + Duration.ofSeconds(30).toNanos();
+        if (budget.cache.size() >= 256 || System.nanoTime() >= budget.deadline || Thread.currentThread().isInterrupted()) return null;
+        Map detail = null;
+        try {
+            var response = restClient.get().uri("/v1/vulns/{id}", id).retrieve().body(Map.class);
+            if (response != null && id.equals(response.get("id"))) detail = response;
+        } catch (RestClientException e) {
+            recordApiCall(isRateLimited(e) ? OswlMetrics.OUTCOME_RATE_LIMITED : OswlMetrics.OUTCOME_FAILURE);
+            log.warn("[OsvClient] advisory detail unavailable; retaining ID with incomplete coverage");
+        }
+        budget.cache.put(id, detail);
+        return detail;
+    }
 
-        return new OsvVuln(osvId, cveId, summary, fixVersion, extractCweId(vuln));
+    private static com.salkcoding.oswl.domain.enums.RiskLevel risk(String label, Double score) {
+        var levels = com.salkcoding.oswl.domain.enums.RiskLevel.values();
+        if (score != null && Double.isFinite(score) && score >= 0 && score <= 10)
+            return levels[score >= 9 ? 0 : score >= 7 ? 1 : score >= 4 ? 2 : score > 0 ? 3 : 4];
+        try { return label == null ? null : com.salkcoding.oswl.domain.enums.RiskLevel.valueOf(label.toUpperCase(java.util.Locale.ROOT)); }
+        catch (IllegalArgumentException e) { return null; }
     }
 
     /**
diff --git a/src/main/java/com/salkcoding/oswl/config/AirgappedClientConfig.java b/src/main/java/com/salkcoding/oswl/config/AirgappedClientConfig.java
index 350311db..e460dc1c 100644
--- a/src/main/java/com/salkcoding/oswl/config/AirgappedClientConfig.java
+++ b/src/main/java/com/salkcoding/oswl/config/AirgappedClientConfig.java
@@ -1,10 +1,14 @@
 package com.salkcoding.oswl.config;
 
+import com.salkcoding.oswl.client.CocoaPodsSpecsClient;
 import com.salkcoding.oswl.client.DepsDevClient;
 import com.salkcoding.oswl.client.EpssClient;
+import com.salkcoding.oswl.client.GitHubAdvisoryClient;
 import com.salkcoding.oswl.client.KevCatalogService;
+import com.salkcoding.oswl.client.NvdClient;
 import com.salkcoding.oswl.client.OsvClient;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Bean;
@@ -22,6 +26,7 @@
 public class AirgappedClientConfig {
 
     private final AirgappedSnapshotService snapshotService;
+    private final OswlMetrics oswlMetrics;
 
     @Value("${oswl.airgapped.enabled:false}")
     private boolean airgapped;
@@ -41,26 +46,86 @@ public class AirgappedClientConfig {
     @Value("${oswl.client.osv.read-timeout-ms:30000}")
     private long osvReadTimeoutMs;
 
+    @Value("${oswl.client.github-advisory.token:}")
+    private String githubAdvisoryToken;
+
+    @Value("${oswl.client.github-advisory.api-base:}")
+    private String githubAdvisoryApiBase;
+
+    @Value("${oswl.client.github-advisory.connect-timeout-ms:5000}")
+    private long githubAdvisoryConnectTimeoutMs;
+
+    @Value("${oswl.client.github-advisory.read-timeout-ms:20000}")
+    private long githubAdvisoryReadTimeoutMs;
+
+    @Value("${oswl.client.nvd.api-key:}")
+    private String nvdApiKey;
+
+    @Value("${oswl.client.nvd.connect-timeout-ms:5000}")
+    private long nvdConnectTimeoutMs;
+
+    @Value("${oswl.client.nvd.read-timeout-ms:20000}")
+    private long nvdReadTimeoutMs;
+
     @Bean
     public OsvClient osvClient() {
-        return new OsvClient(snapshotService, airgapped,
+        OsvClient client = new OsvClient(snapshotService, airgapped,
                 Duration.ofMillis(osvConnectTimeoutMs), Duration.ofMillis(osvReadTimeoutMs));
+        client.setOswlMetrics(oswlMetrics);
+        return client;
     }
 
     @Bean
     public DepsDevClient depsDevClient() {
-        return new DepsDevClient(snapshotService, airgapped,
+        DepsDevClient client = new DepsDevClient(snapshotService, airgapped,
                 Duration.ofMillis(depsDevConnectTimeoutMs), Duration.ofMillis(depsDevReadTimeoutMs),
                 depsDevMaxConcurrent);
+        client.setOswlMetrics(oswlMetrics);
+        return client;
     }
 
     @Bean
     public EpssClient epssClient() {
-        return new EpssClient(snapshotService, airgapped);
+        EpssClient client = new EpssClient(snapshotService, airgapped);
+        client.setOswlMetrics(oswlMetrics);
+        return client;
     }
 
     @Bean
     public KevCatalogService kevCatalogService() {
-        return new KevCatalogService(snapshotService, airgapped);
+        KevCatalogService client = new KevCatalogService(snapshotService, airgapped);
+        client.setOswlMetrics(oswlMetrics);
+        return client;
+    }
+
+    @Bean
+    public GitHubAdvisoryClient gitHubAdvisoryClient() {
+        GitHubAdvisoryClient client = new GitHubAdvisoryClient(snapshotService, airgapped, githubAdvisoryToken,
+                githubAdvisoryApiBase,
+                Duration.ofMillis(githubAdvisoryConnectTimeoutMs), Duration.ofMillis(githubAdvisoryReadTimeoutMs));
+        client.setOswlMetrics(oswlMetrics);
+        return client;
+    }
+
+    @Bean
+    public NvdClient nvdClient() {
+        NvdClient client = new NvdClient(snapshotService, airgapped, nvdApiKey,
+                Duration.ofMillis(nvdConnectTimeoutMs), Duration.ofMillis(nvdReadTimeoutMs));
+        client.setOswlMetrics(oswlMetrics);
+        return client;
+    }
+
+    @Value("${oswl.client.cocoapods-specs.connect-timeout-ms:5000}")
+    private long cocoaPodsConnectTimeoutMs;
+
+    @Value("${oswl.client.cocoapods-specs.read-timeout-ms:10000}")
+    private long cocoaPodsReadTimeoutMs;
+
+    @Bean
+    public CocoaPodsSpecsClient cocoaPodsSpecsClient() {
+        CocoaPodsSpecsClient client = new CocoaPodsSpecsClient(airgapped,
+                Duration.ofMillis(cocoaPodsConnectTimeoutMs), Duration.ofMillis(cocoaPodsReadTimeoutMs), snapshotService);
+        client.setOswlMetrics(oswlMetrics);
+        return client;
     }
 }
diff --git a/src/main/java/com/salkcoding/oswl/config/OswlStartupWarnings.java b/src/main/java/com/salkcoding/oswl/config/OswlStartupWarnings.java
index d552fbc5..6d3597d3 100644
--- a/src/main/java/com/salkcoding/oswl/config/OswlStartupWarnings.java
+++ b/src/main/java/com/salkcoding/oswl/config/OswlStartupWarnings.java
@@ -11,6 +11,7 @@
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.List;
+import java.util.Optional;
 import java.util.stream.Collectors;
 
 /**
@@ -58,6 +59,8 @@ public void onApplicationEvent(ApplicationReadyEvent event) {
             sections.add(ephemeralEncryptionSection(isProd(env)));
         }
 
+        quickImportPoolSizeSection(env).ifPresent(sections::add);
+
         if (sections.isEmpty()) {
             return;
         }
@@ -71,8 +74,8 @@ public void onApplicationEvent(ApplicationReadyEvent event) {
                 {}
                 {}
                 
-                 Copy .env.example → .env (local) or .env.prod.example → .env.prod (production).
-                 See docs/Production-Deployment-Checklist.md
+                 Copy deploy/docker/.env.example → .env (local) or deploy/docker/.env.prod.example → .env.prod (production).
+                 See docs/en/Production-Deployment-Checklist.md
                 {}
                 """,
                 SEPARATOR,
@@ -132,6 +135,30 @@ private static String ephemeralEncryptionSection(boolean prod) {
                  Set OSWL_ENCRYPTION_KEY in your environment or .env file.""".formatted(context);
     }
 
+    /**
+     * Warns when the Quick Import concurrency cap can exhaust the DB connection pool on
+     * its own. Each running import holds connections during ingest/enrichment; with
+     * {@code max-concurrent >= maximum-pool-size} a burst of imports leaves nothing for
+     * interactive requests.
+     */
+    private static Optional quickImportPoolSizeSection(Environment env) {
+        int maxConcurrent = Integer.parseInt(env.getProperty("oswl.quick-import.max-concurrent", "3"));
+        // Spring Boot's HikariCP default when the property is unset.
+        int dbPool = Integer.parseInt(env.getProperty("spring.datasource.hikari.maximum-pool-size", "10"));
+        if (maxConcurrent < dbPool) {
+            return Optional.empty();
+        }
+        return Optional.of("""
+                [QUICK IMPORT CONCURRENCY >= DB CONNECTION POOL]
+                 oswl.quick-import.max-concurrent is %d but spring.datasource.hikari.maximum-pool-size is %d.
+                 A burst of concurrent imports can hold every pooled connection during ingest/enrichment,
+                 starving interactive web requests until a connection frees up.
+
+                 Fix: lower OSWL_QUICK_IMPORT_MAX_CONCURRENT below the pool size, or raise
+                 spring.datasource.hikari.maximum-pool-size (and the DB's max_connections) accordingly."""
+                .formatted(maxConcurrent, dbPool));
+    }
+
     private static List missingVars(Environment env, String... names) {
         List missing = new ArrayList<>();
         for (String name : names) {
diff --git a/src/main/java/com/salkcoding/oswl/controller/AdminProjectController.java b/src/main/java/com/salkcoding/oswl/controller/AdminProjectController.java
new file mode 100644
index 00000000..0512ac5f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/AdminProjectController.java
@@ -0,0 +1,28 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.controller.spec.AdminProjectControllerSpec;
+import com.salkcoding.oswl.dto.AdminProjectRefDto;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/projects")
+@RequiredArgsConstructor
+@PreAuthorize("hasRole('SYSTEM_ADMIN')")
+public class AdminProjectController implements AdminProjectControllerSpec {
+
+    private final ProjectRepository projectRepository;
+
+    @GetMapping
+    public List listActiveProjects() {
+        return projectRepository.findAllByDeletedAtIsNullOrderByCreatedAtDesc().stream()
+                .map(p -> new AdminProjectRefDto(p.getId(), p.getName()))
+                .toList();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/ConfigTransferController.java b/src/main/java/com/salkcoding/oswl/controller/ConfigTransferController.java
new file mode 100644
index 00000000..eaaa80f0
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/ConfigTransferController.java
@@ -0,0 +1,29 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.controller.spec.ConfigTransferControllerSpec;
+import com.salkcoding.oswl.dto.config.ConfigBundle;
+import com.salkcoding.oswl.dto.config.ConfigImportResult;
+import com.salkcoding.oswl.service.config.ConfigTransferService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/settings/config-transfer")
+@RequiredArgsConstructor
+@PreAuthorize("hasRole('SYSTEM_ADMIN')")
+public class ConfigTransferController implements ConfigTransferControllerSpec {
+
+    private final ConfigTransferService configTransferService;
+
+    @GetMapping("/export")
+    public ConfigBundle export() {
+        return configTransferService.export();
+    }
+
+    @PostMapping("/import")
+    public ConfigImportResult importBundle(@RequestBody ConfigBundle bundle,
+                                           @RequestParam(defaultValue = "true") boolean dryRun) {
+        return configTransferService.importBundle(bundle, dryRun);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/DiagnosticsController.java b/src/main/java/com/salkcoding/oswl/controller/DiagnosticsController.java
new file mode 100644
index 00000000..633af76d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/DiagnosticsController.java
@@ -0,0 +1,28 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.controller.spec.DiagnosticsControllerSpec;
+import com.salkcoding.oswl.dto.diagnostics.DiagnosticCheckResult;
+import com.salkcoding.oswl.service.diagnostics.DiagnosticsService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/settings/diagnostics")
+@RequiredArgsConstructor
+@PreAuthorize("hasRole('SYSTEM_ADMIN')")
+public class DiagnosticsController implements DiagnosticsControllerSpec {
+
+    private final DiagnosticsService diagnosticsService;
+
+    @GetMapping
+    public List run(@AuthenticationPrincipal OswlUserPrincipal principal) {
+        return diagnosticsService.runAll(principal != null ? principal.getUserId() : null);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/LocalDevController.java b/src/main/java/com/salkcoding/oswl/controller/LocalDevController.java
index fa4ff24b..66d1b203 100644
--- a/src/main/java/com/salkcoding/oswl/controller/LocalDevController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/LocalDevController.java
@@ -1,11 +1,11 @@
 package com.salkcoding.oswl.controller;
 
 import com.salkcoding.oswl.dto.gate.GateResultDto;
-import com.salkcoding.oswl.service.ContinuousMonitoringService;
-import com.salkcoding.oswl.service.ContinuousMonitoringService.MonitoringSummary;
-import com.salkcoding.oswl.service.GatePolicyService;
-import com.salkcoding.oswl.service.GatePolicyService.GateOptions;
-import com.salkcoding.oswl.service.SbomExportService;
+import com.salkcoding.oswl.service.vulnerability.ContinuousMonitoringService;
+import com.salkcoding.oswl.service.vulnerability.ContinuousMonitoringService.MonitoringSummary;
+import com.salkcoding.oswl.service.gate.GatePolicyService;
+import com.salkcoding.oswl.service.gate.GatePolicyService.GateOptions;
+import com.salkcoding.oswl.service.reporting.SbomExportService;
 import io.swagger.v3.oas.annotations.Hidden;
 import lombok.RequiredArgsConstructor;
 import org.cyclonedx.Version;
@@ -44,7 +44,7 @@ public GateResultDto gate(@PathVariable Long projectId,
                               @org.springframework.web.bind.annotation.RequestParam(required = false) Boolean onlyNew,
                               @org.springframework.web.bind.annotation.RequestParam(required = false) String failOnSeverity) {
         return gatePolicyService.evaluate(projectId,
-                new GateOptions(null, failOnSeverity, null, null, null, onlyNew));
+                new GateOptions(null, failOnSeverity, null, null, null, onlyNew, null, null));
     }
 
     @GetMapping("/monitor")
diff --git a/src/main/java/com/salkcoding/oswl/controller/MobileController.java b/src/main/java/com/salkcoding/oswl/controller/MobileController.java
new file mode 100644
index 00000000..f9132fa3
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/MobileController.java
@@ -0,0 +1,38 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.auth.enums.Permission;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.service.MobileDashboardService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+
+import java.util.List;
+
+/**
+ * Lightweight mobile "notifications" screen — unacknowledged CVE alerts on
+ * projects the user can see, plus (for whoever can manage policy) pending waiver approvals.
+ * A phone-sized companion view, not a mobile port of the full app: no scan browsing, no
+ * settings, nothing else. Reuses the same session auth and the existing acknowledge/approve/
+ * revoke endpoints — this controller only assembles the read side.
+ */
+@Controller
+@RequestMapping("/mobile")
+@RequiredArgsConstructor
+public class MobileController {
+
+    private final MobileDashboardService mobileDashboardService;
+
+    @GetMapping
+    public String index(@AuthenticationPrincipal OswlUserPrincipal principal, Model model) {
+        boolean canManagePolicy = principal != null
+                && (principal.isSystemAdmin() || principal.hasPermission(Permission.POLICY_MANAGE));
+        model.addAttribute("alerts", mobileDashboardService.pendingAlerts());
+        model.addAttribute("waivers", canManagePolicy ? mobileDashboardService.pendingWaivers() : List.of());
+        model.addAttribute("canManagePolicy", canManagePolicy);
+        return "mobile/index";
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/ScanArchivingController.java b/src/main/java/com/salkcoding/oswl/controller/ScanArchivingController.java
new file mode 100644
index 00000000..8431f168
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/ScanArchivingController.java
@@ -0,0 +1,36 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.controller.spec.ScanArchivingControllerSpec;
+import com.salkcoding.oswl.dto.scan.ScanArchiveExportDto;
+import com.salkcoding.oswl.dto.scan.ScanArchiveResult;
+import com.salkcoding.oswl.service.scan.ScanArchivingService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/admin/projects/{projectId}/archive-scans")
+@RequiredArgsConstructor
+@PreAuthorize("hasRole('SYSTEM_ADMIN')")
+public class ScanArchivingController implements ScanArchivingControllerSpec {
+
+    private final ScanArchivingService scanArchivingService;
+
+    @GetMapping("/export")
+    public List exportPendingArchive(@PathVariable Long projectId,
+                                                            @RequestParam(required = false) Integer retainCount) {
+        return retainCount != null
+                ? scanArchivingService.exportPendingArchive(projectId, retainCount)
+                : scanArchivingService.exportPendingArchive(projectId);
+    }
+
+    @PostMapping
+    public ScanArchiveResult archive(@PathVariable Long projectId,
+                                     @RequestParam(required = false) Integer retainCount) {
+        return retainCount != null
+                ? scanArchivingService.archiveProject(projectId, retainCount)
+                : scanArchivingService.archiveProject(projectId);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/SearchController.java b/src/main/java/com/salkcoding/oswl/controller/SearchController.java
new file mode 100644
index 00000000..9b099c53
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/SearchController.java
@@ -0,0 +1,23 @@
+package com.salkcoding.oswl.controller;
+
+import com.salkcoding.oswl.controller.spec.SearchControllerSpec;
+import com.salkcoding.oswl.dto.search.GlobalSearchResponse;
+import com.salkcoding.oswl.service.SearchService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+@RestController
+@RequestMapping("/api/search")
+@RequiredArgsConstructor
+public class SearchController implements SearchControllerSpec {
+
+    private final SearchService searchService;
+
+    @GetMapping
+    public GlobalSearchResponse search(@RequestParam(required = false) String q) {
+        return searchService.search(q);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/AiSettingController.java b/src/main/java/com/salkcoding/oswl/controller/ai/AiSettingController.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/controller/AiSettingController.java
rename to src/main/java/com/salkcoding/oswl/controller/ai/AiSettingController.java
index 6dd5ba43..d211db86 100644
--- a/src/main/java/com/salkcoding/oswl/controller/AiSettingController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/ai/AiSettingController.java
@@ -1,11 +1,11 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.ai;
 
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.salkcoding.oswl.auth.security.EncryptionService;
 import com.salkcoding.oswl.controller.spec.AiSettingControllerSpec;
-import com.salkcoding.oswl.domain.entity.AiPreferences;
-import com.salkcoding.oswl.domain.entity.AiSetting;
+import com.salkcoding.oswl.domain.entity.ai.AiPreferences;
+import com.salkcoding.oswl.domain.entity.ai.AiSetting;
 import com.salkcoding.oswl.domain.enums.AiEffort;
 import com.salkcoding.oswl.domain.enums.AiProvider;
 import com.salkcoding.oswl.domain.enums.DeploymentProfile;
@@ -16,7 +16,7 @@
 import com.salkcoding.oswl.dto.api.AiUsageEventDto;
 import com.salkcoding.oswl.dto.api.AiUsageStatsResponse;
 import com.salkcoding.oswl.dto.api.EmbeddedAiConfigRequest;
-import com.salkcoding.oswl.repository.AiSettingRepository;
+import com.salkcoding.oswl.repository.ai.AiSettingRepository;
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.service.ai.AiAnalysisService;
 import com.salkcoding.oswl.dto.AiConnectionTestResult;
@@ -29,7 +29,7 @@
 import com.salkcoding.oswl.service.ai.EmbeddedAiBootstrapService;
 import com.salkcoding.oswl.service.ai.EmbeddedAiProviderRegistrar;
 import com.salkcoding.oswl.service.ai.EmbeddedAiService;
-import com.salkcoding.oswl.service.VulnerabilityEnrichmentService;
+import com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.MessageSource;
@@ -138,9 +138,10 @@ public ResponseEntity upsert(@Valid @RequestBody AiSettingUpd
             validateAiBaseUrl(request.getProvider(), request.getBaseUrl());
         }
         setting.update(encryptedKey, request.getModelName(), request.getBaseUrl());
-        // Saving a provider from the settings form always means a user-configured endpoint — the
-        // embedded sidecar is registered through EmbeddedAiProviderRegistrar, never through here.
-        setting.markEmbeddedManaged(false);
+        // Language/prompt-only saves must preserve ownership of the embedded LOCAL endpoint.
+        if (request.getApiKey() != null || request.getModelName() != null || request.getBaseUrl() != null) {
+            setting.markEmbeddedManaged(false);
+        }
 
         boolean activating = Boolean.TRUE.equals(request.getActivate());
         if (activating) {
diff --git a/src/main/java/com/salkcoding/oswl/controller/AdminCliKeyController.java b/src/main/java/com/salkcoding/oswl/controller/apikey/AdminCliKeyController.java
similarity index 79%
rename from src/main/java/com/salkcoding/oswl/controller/AdminCliKeyController.java
rename to src/main/java/com/salkcoding/oswl/controller/apikey/AdminCliKeyController.java
index d48465b5..af0116dc 100644
--- a/src/main/java/com/salkcoding/oswl/controller/AdminCliKeyController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/apikey/AdminCliKeyController.java
@@ -1,13 +1,13 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.apikey;
 
-import com.salkcoding.oswl.domain.entity.ApiKey;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
 import com.salkcoding.oswl.dto.api.AdminCliKeyIssueRequest;
 import com.salkcoding.oswl.dto.api.ApiKeyIssueResponse;
 import com.salkcoding.oswl.dto.api.GlobalApiKeyResponse;
-import com.salkcoding.oswl.service.ApiKeyService;
-import com.salkcoding.oswl.service.ApiKeyTokenSupport;
-import com.salkcoding.oswl.service.IssuedApiKey;
-import com.salkcoding.oswl.service.ProjectCliKeyPolicyService;
+import com.salkcoding.oswl.service.apikey.ApiKeyService;
+import com.salkcoding.oswl.service.apikey.ApiKeyTokenSupport;
+import com.salkcoding.oswl.service.apikey.IssuedApiKey;
+import com.salkcoding.oswl.service.apikey.ProjectCliKeyPolicyService;
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.controller.spec.AdminCliKeyControllerSpec;
 import lombok.RequiredArgsConstructor;
@@ -66,8 +66,17 @@ public ResponseEntity issue(@RequestBody AdminCliKeyIssueRe
     public ResponseEntity toggle(@PathVariable Long keyId) {
         ApiKey key = apiKeyService.toggleActive(keyId);
         String action = key.isActive() ? "CLI_KEY.ACTIVATE" : "CLI_KEY.REVOKE";
-        auditLogService.log(action, "CLI_KEY", keyId.toString(),
-                (key.getLabel() != null ? key.getLabel() : "") + " / " + key.getProject().getName(), null);
+        String targetName = key.getLabel() != null ? key.getLabel() : "";
+        if (key.getProject() != null) {
+            targetName += " / " + key.getProject().getName();
+        }
+        auditLogService.log(action, "CLI_KEY", keyId.toString(), targetName, null);
+        return ResponseEntity.noContent().build();
+    }
+
+    @DeleteMapping("/{keyId}")
+    public ResponseEntity delete(@PathVariable Long keyId) {
+        apiKeyService.delete(keyId);
         return ResponseEntity.noContent().build();
     }
 
@@ -77,8 +86,8 @@ private GlobalApiKeyResponse toGlobalResponse(ApiKey key) {
         return GlobalApiKeyResponse.builder()
                 .id(key.getId())
                 .token(ApiKeyTokenSupport.maskForDisplay(key.getTokenPrefix()))
-                .projectId(key.getProject().getId())
-                .projectName(key.getProject().getName())
+                .projectId(key.getProject() != null ? key.getProject().getId() : null)
+                .projectName(key.getProject() != null ? key.getProject().getName() : null)
                 .label(key.getLabel() != null ? key.getLabel() : "")
                 .active(key.isActive())
                 .createdAt(key.getCreatedAt().toString())
diff --git a/src/main/java/com/salkcoding/oswl/controller/ApiKeyController.java b/src/main/java/com/salkcoding/oswl/controller/apikey/ApiKeyController.java
similarity index 89%
rename from src/main/java/com/salkcoding/oswl/controller/ApiKeyController.java
rename to src/main/java/com/salkcoding/oswl/controller/apikey/ApiKeyController.java
index 21ee7fa8..eb24162b 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ApiKeyController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/apikey/ApiKeyController.java
@@ -1,15 +1,15 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.apikey;
 
 import com.salkcoding.oswl.controller.spec.ApiKeyControllerSpec;
-import com.salkcoding.oswl.domain.entity.ApiKey;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
 import com.salkcoding.oswl.dto.api.ApiKeyIssueRequest;
 import com.salkcoding.oswl.dto.api.ApiKeyIssueResponse;
 import com.salkcoding.oswl.dto.api.ApiKeyResponse;
-import com.salkcoding.oswl.service.ApiKeyService;
-import com.salkcoding.oswl.service.ApiKeyTokenSupport;
-import com.salkcoding.oswl.service.IssuedApiKey;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.ProjectCliKeyPolicyService;
+import com.salkcoding.oswl.service.apikey.ApiKeyService;
+import com.salkcoding.oswl.service.apikey.ApiKeyTokenSupport;
+import com.salkcoding.oswl.service.apikey.IssuedApiKey;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.apikey.ProjectCliKeyPolicyService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
diff --git a/src/main/java/com/salkcoding/oswl/controller/AdminAuditExportController.java b/src/main/java/com/salkcoding/oswl/controller/audit/AdminAuditExportController.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/controller/AdminAuditExportController.java
rename to src/main/java/com/salkcoding/oswl/controller/audit/AdminAuditExportController.java
index 4afd2980..0ebad312 100644
--- a/src/main/java/com/salkcoding/oswl/controller/AdminAuditExportController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/audit/AdminAuditExportController.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.audit;
 
 import com.salkcoding.oswl.auth.dto.AuditLogFilter;
 import com.salkcoding.oswl.auth.service.AuditLogService;
diff --git a/src/main/java/com/salkcoding/oswl/controller/QuickImportController.java b/src/main/java/com/salkcoding/oswl/controller/ingest/QuickImportController.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/controller/QuickImportController.java
rename to src/main/java/com/salkcoding/oswl/controller/ingest/QuickImportController.java
index 88f14534..3912247a 100644
--- a/src/main/java/com/salkcoding/oswl/controller/QuickImportController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/ingest/QuickImportController.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.ingest;
 
 import com.salkcoding.oswl.auth.dto.VcsConnectionDto;
 import com.salkcoding.oswl.auth.enums.VcsProvider;
@@ -15,7 +15,7 @@
 import com.salkcoding.oswl.exception.QuickImportQueueFullException;
 import com.salkcoding.oswl.exception.QuickImportUpstreamException;
 import com.salkcoding.oswl.controller.spec.QuickImportControllerSpec;
-import com.salkcoding.oswl.service.QuickImportService;
+import com.salkcoding.oswl.service.ingest.QuickImportService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
diff --git a/src/main/java/com/salkcoding/oswl/controller/ScanController.java b/src/main/java/com/salkcoding/oswl/controller/ingest/ScanController.java
similarity index 93%
rename from src/main/java/com/salkcoding/oswl/controller/ScanController.java
rename to src/main/java/com/salkcoding/oswl/controller/ingest/ScanController.java
index e79cff25..7cca4802 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ScanController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/ingest/ScanController.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.ingest;
 
 import com.salkcoding.oswl.auth.enums.Permission;
 import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.controller.spec.ScanControllerSpec;
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.dto.api.PingResponse;
@@ -14,14 +14,14 @@
 import com.salkcoding.oswl.dto.scan.ScanPayload;
 import com.salkcoding.oswl.exception.ForbiddenException;
 import com.salkcoding.oswl.exception.UnauthorizedException;
-import com.salkcoding.oswl.repository.ScanResultRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.service.DependencyManifestParserService;
-import com.salkcoding.oswl.service.ManifestArchiveService;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService;
+import com.salkcoding.oswl.service.ingest.ManifestArchiveService;
 import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.ScanApiCredentialThrottleService;
-import com.salkcoding.oswl.service.ScanIngestService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.ingest.ScanApiCredentialThrottleService;
+import com.salkcoding.oswl.service.ingest.ScanIngestService;
 import com.salkcoding.oswl.web.interceptor.ApiKeyAuthInterceptor;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.validation.Valid;
@@ -65,7 +65,7 @@ public class ScanController implements ScanControllerSpec {
     private final ScanApiCredentialThrottleService scanApiCredentialThrottleService;
     private final DependencyManifestParserService dependencyManifestParserService;
     private final ManifestArchiveService manifestArchiveService;
-    private final com.salkcoding.oswl.service.PrGateService prGateService;
+    private final com.salkcoding.oswl.service.gate.PrGateService prGateService;
 
     /** Ping endpoint used by the CLI auth command for a connection test */
     @GetMapping("/ping")
diff --git a/src/main/java/com/salkcoding/oswl/controller/JiraController.java b/src/main/java/com/salkcoding/oswl/controller/jira/JiraController.java
similarity index 89%
rename from src/main/java/com/salkcoding/oswl/controller/JiraController.java
rename to src/main/java/com/salkcoding/oswl/controller/jira/JiraController.java
index 96f80d31..9d88f647 100644
--- a/src/main/java/com/salkcoding/oswl/controller/JiraController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/jira/JiraController.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.jira;
 
 import com.salkcoding.oswl.dto.JiraSettingDto;
-import com.salkcoding.oswl.service.JiraService;
-import com.salkcoding.oswl.service.JiraService.JiraTicketResult;
+import com.salkcoding.oswl.service.jira.JiraService;
+import com.salkcoding.oswl.service.jira.JiraService.JiraTicketResult;
 import io.swagger.v3.oas.annotations.Hidden;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
@@ -12,7 +12,7 @@
 import java.util.Map;
 
 /**
- * Jira integration (roadmap #10): admin settings + per-component ticket creation.
+ * Jira integration: admin settings + per-component ticket creation.
  */
 @Hidden
 @RestController
diff --git a/src/main/java/com/salkcoding/oswl/controller/LicenseController.java b/src/main/java/com/salkcoding/oswl/controller/license/LicenseController.java
similarity index 95%
rename from src/main/java/com/salkcoding/oswl/controller/LicenseController.java
rename to src/main/java/com/salkcoding/oswl/controller/license/LicenseController.java
index 39e242fb..6c00045e 100644
--- a/src/main/java/com/salkcoding/oswl/controller/LicenseController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/license/LicenseController.java
@@ -1,11 +1,11 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.license;
 
 import com.salkcoding.oswl.controller.spec.LicenseControllerSpec;
 import com.salkcoding.oswl.dto.LicenseContextDto;
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.service.LicenseService;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.VulnerabilityEnrichmentService;
+import com.salkcoding.oswl.service.license.LicenseService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.MessageSource;
 import org.springframework.context.i18n.LocaleContextHolder;
diff --git a/src/main/java/com/salkcoding/oswl/controller/LicensePolicyController.java b/src/main/java/com/salkcoding/oswl/controller/license/LicensePolicyController.java
similarity index 92%
rename from src/main/java/com/salkcoding/oswl/controller/LicensePolicyController.java
rename to src/main/java/com/salkcoding/oswl/controller/license/LicensePolicyController.java
index 94cfb1b6..eae3510b 100644
--- a/src/main/java/com/salkcoding/oswl/controller/LicensePolicyController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/license/LicensePolicyController.java
@@ -1,9 +1,9 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.license;
 
 import com.salkcoding.oswl.controller.spec.LicensePolicyControllerSpec;
 import com.salkcoding.oswl.dto.LicensePolicyEntryDto;
 import com.salkcoding.oswl.dto.LicensePolicyPageResponse;
-import com.salkcoding.oswl.service.LicensePolicyService;
+import com.salkcoding.oswl.service.license.LicensePolicyService;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
diff --git a/src/main/java/com/salkcoding/oswl/controller/OssNoticesController.java b/src/main/java/com/salkcoding/oswl/controller/license/OssNoticesController.java
similarity index 85%
rename from src/main/java/com/salkcoding/oswl/controller/OssNoticesController.java
rename to src/main/java/com/salkcoding/oswl/controller/license/OssNoticesController.java
index ff3c6846..fc606f61 100644
--- a/src/main/java/com/salkcoding/oswl/controller/OssNoticesController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/license/OssNoticesController.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.license;
 
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.ObjectMapper;
@@ -13,10 +13,10 @@
 
 /**
  * Serves the public /oss-notices page. Not an API — a plain view controller, so springdoc/
- * controller-spec annotations (rule C3) do not apply here.
+ * controller-spec annotations do not apply here.
  *
- * 
H4: reads the OSS version manifest generated at build time by the {@code generateOssManifest}
- * Gradle task (H2) so the page always shows the versions build.gradle actually resolved, instead
+ * 
Reads the OSS version manifest generated at build time by the {@code generateOssManifest}
+ * Gradle task so the page always shows the versions build.gradle actually resolved, instead
  * of hand-maintained literals.
  */
 @Slf4j
diff --git a/src/main/java/com/salkcoding/oswl/controller/notification/WebPushController.java b/src/main/java/com/salkcoding/oswl/controller/notification/WebPushController.java
new file mode 100644
index 00000000..66d94819
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/notification/WebPushController.java
@@ -0,0 +1,17 @@
+package com.salkcoding.oswl.controller.notification;
+import com.salkcoding.oswl.controller.spec.WebPushControllerSpec;
+import com.salkcoding.oswl.dto.api.*;
+import com.salkcoding.oswl.service.notification.WebPushService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+@RestController @RequiredArgsConstructor @RequestMapping("/api/my/web-push")
+public class WebPushController implements WebPushControllerSpec {
+    private final WebPushService service;
+    @GetMapping @PreAuthorize("isAuthenticated()")
+    public WebPushStatus status(){return service.status();}
+    @PostMapping @PreAuthorize("isAuthenticated()")
+    public Long subscribe(@RequestBody WebPushSubscriptionRequest request){return service.subscribe(request);}
+    @DeleteMapping("/{id}") @PreAuthorize("isAuthenticated()")
+    public void unsubscribe(@PathVariable Long id){service.unsubscribe(id);}
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/notification/WebPushPageController.java b/src/main/java/com/salkcoding/oswl/controller/notification/WebPushPageController.java
new file mode 100644
index 00000000..a3f7746f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/notification/WebPushPageController.java
@@ -0,0 +1,9 @@
+package com.salkcoding.oswl.controller.notification;
+import org.springframework.stereotype.Controller;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.GetMapping;
+@Controller
+public class WebPushPageController {
+    @GetMapping("/my/notifications") @PreAuthorize("isAuthenticated()")
+    public String page(){return "notification/preferences";}
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/notification/WebhookSettingController.java b/src/main/java/com/salkcoding/oswl/controller/notification/WebhookSettingController.java
new file mode 100644
index 00000000..400d272c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/notification/WebhookSettingController.java
@@ -0,0 +1,124 @@
+package com.salkcoding.oswl.controller.notification;
+
+import com.salkcoding.oswl.controller.spec.WebhookSettingControllerSpec;
+import com.salkcoding.oswl.domain.entity.notification.WebhookDelivery;
+import com.salkcoding.oswl.domain.entity.notification.WebhookSetting;
+import com.salkcoding.oswl.domain.enums.WebhookDeliveryStatus;
+import com.salkcoding.oswl.domain.enums.WebhookEventType;
+import com.salkcoding.oswl.dto.api.WebhookDeliveryDto;
+import com.salkcoding.oswl.dto.api.WebhookSettingResponse;
+import com.salkcoding.oswl.dto.api.WebhookSettingUpdateRequest;
+import com.salkcoding.oswl.dto.api.WebhookTestRequest;
+import com.salkcoding.oswl.repository.notification.WebhookDeliveryRepository;
+import com.salkcoding.oswl.service.notification.WebhookSettingService;
+import com.salkcoding.oswl.service.notification.WebhookClient;
+import com.salkcoding.oswl.service.notification.WebhookMessageBuilder;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+@RestController
+@RequestMapping("/api/settings/webhooks")
+@PreAuthorize("hasPermission(null, 'SETTINGS_WEBHOOK_MANAGE') or hasRole('SYSTEM_ADMIN')")
+@RequiredArgsConstructor
+public class WebhookSettingController implements WebhookSettingControllerSpec {
+
+    private final WebhookSettingService webhookSettingService;
+    private final WebhookDeliveryRepository webhookDeliveryRepository;
+    private final WebhookMessageBuilder messageBuilder;
+    private final WebhookClient webhookClient;
+
+    @GetMapping
+    public ResponseEntity getSettings() {
+        WebhookSetting setting = webhookSettingService.getSetting();
+        return ResponseEntity.ok(WebhookSettingResponse.builder()
+                .provider(setting.getProvider())
+                .hasUrl(setting.getWebhookUrl() != null && !setting.getWebhookUrl().isBlank())
+                .enabled(setting.isEnabled())
+                .notifyNewCve(setting.isNotifyNewCve())
+                .notifyGateFailure(setting.isNotifyGateFailure())
+                .notifyScanFailure(setting.isNotifyScanFailure())
+                .notifyWaiverExpiry(setting.isNotifyWaiverExpiry())
+                .build());
+    }
+
+    @PutMapping
+    public ResponseEntity saveSettings(@Valid @RequestBody WebhookSettingUpdateRequest request) {
+        webhookSettingService.save(request.getProvider(), request.getUrl(), request.isEnabled(),
+                request.isNotifyNewCve(), request.isNotifyGateFailure(),
+                request.isNotifyScanFailure(), request.isNotifyWaiverExpiry());
+        return ResponseEntity.noContent().build();
+    }
+
+    @PostMapping("/test")
+    public ResponseEntity> testWebhook(@Valid @RequestBody WebhookTestRequest request) {
+        WebhookSetting setting = webhookSettingService.getSetting();
+        String payload = messageBuilder.buildPayload(setting.getProvider(),
+                "OsWL webhook test",
+                List.of("This is a test message from OsWL webhook settings."),
+                null);
+
+        WebhookClient.DeliveryOutcome outcome = webhookClient.send(
+                request.getUrl().strip(), payload, WebhookEventType.NEW_CVE, null, null, "test");
+
+        Map body = new LinkedHashMap<>();
+        body.put("success", outcome.success());
+        body.put("status", outcome.lastHttpStatus());
+        if (outcome.lastError() != null) {
+            body.put("error", outcome.lastError());
+        }
+        return ResponseEntity.ok(body);
+    }
+
+    @GetMapping("/deliveries")
+    public ResponseEntity> getDeliveries(
+            @RequestParam(required = false) String eventType,
+            @RequestParam(required = false) String status,
+            @RequestParam(defaultValue = "50") int limit) {
+        int pageSize = Math.min(Math.max(limit, 1), 200);
+        List deliveries;
+        if (status != null && !status.isBlank()) {
+            try {
+                WebhookDeliveryStatus s = WebhookDeliveryStatus.valueOf(status.toUpperCase());
+                deliveries = webhookDeliveryRepository.findByStatusOrderByCreatedAtDesc(s,
+                        PageRequest.of(0, pageSize));
+            } catch (IllegalArgumentException e) {
+                deliveries = webhookDeliveryRepository.findAll(PageRequest.of(0, pageSize)).getContent();
+            }
+        } else if (eventType != null && !eventType.isBlank()) {
+            try {
+                WebhookEventType e = WebhookEventType.valueOf(eventType.toUpperCase());
+                deliveries = webhookDeliveryRepository.findByEventTypeOrderByCreatedAtDesc(e,
+                        PageRequest.of(0, pageSize));
+            } catch (IllegalArgumentException e) {
+                deliveries = webhookDeliveryRepository.findAll(PageRequest.of(0, pageSize)).getContent();
+            }
+        } else {
+            deliveries = webhookDeliveryRepository.findAll(PageRequest.of(0, pageSize)).getContent();
+        }
+        return ResponseEntity.ok(deliveries.stream().map(this::toDto).toList());
+    }
+
+    private WebhookDeliveryDto toDto(WebhookDelivery d) {
+        return WebhookDeliveryDto.builder()
+                .id(d.getId())
+                .eventType(d.getEventType())
+                .projectId(d.getProjectId())
+                .projectName(d.getProjectName())
+                .referenceId(d.getReferenceId())
+                .status(d.getStatus())
+                .httpStatus(d.getHttpStatus())
+                .errorMessage(d.getErrorMessage())
+                .retryCount(d.getRetryCount())
+                .payloadSummary(d.getPayloadSummary())
+                .createdAt(d.getCreatedAt())
+                .build();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/org/ExecutiveSummaryController.java b/src/main/java/com/salkcoding/oswl/controller/org/ExecutiveSummaryController.java
new file mode 100644
index 00000000..a9c84c0f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/org/ExecutiveSummaryController.java
@@ -0,0 +1,16 @@
+package com.salkcoding.oswl.controller.org;
+import com.salkcoding.oswl.controller.spec.ExecutiveSummaryControllerSpec;
+import com.salkcoding.oswl.service.org.ExecutiveSummaryService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.GetMapping;
+@Controller
+@RequiredArgsConstructor
+public class ExecutiveSummaryController implements ExecutiveSummaryControllerSpec {
+    private final ExecutiveSummaryService service;
+    @GetMapping("/org-dashboard/summary")
+    @PreAuthorize("hasPermission(null, 'ORG_DASHBOARD_VIEW') or hasRole('SYSTEM_ADMIN')")
+    public String summary(Model model) { service.populate(model); return "org-dashboard/summary"; }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/OrgDashboardController.java b/src/main/java/com/salkcoding/oswl/controller/org/OrgDashboardController.java
similarity index 90%
rename from src/main/java/com/salkcoding/oswl/controller/OrgDashboardController.java
rename to src/main/java/com/salkcoding/oswl/controller/org/OrgDashboardController.java
index 8af1d4c2..ba4d7594 100644
--- a/src/main/java/com/salkcoding/oswl/controller/OrgDashboardController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/org/OrgDashboardController.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.org;
 
 import com.salkcoding.oswl.controller.spec.OrgDashboardControllerSpec;
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.service.OrgDashboardService;
+import com.salkcoding.oswl.service.org.OrgDashboardService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.stereotype.Controller;
diff --git a/src/main/java/com/salkcoding/oswl/controller/org/TeamController.java b/src/main/java/com/salkcoding/oswl/controller/org/TeamController.java
new file mode 100644
index 00000000..822041a8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/org/TeamController.java
@@ -0,0 +1,128 @@
+package com.salkcoding.oswl.controller.org;
+
+import com.salkcoding.oswl.controller.spec.TeamControllerSpec;
+import com.salkcoding.oswl.domain.enums.TeamMemberRole;
+import com.salkcoding.oswl.dto.TeamMemberDto;
+import com.salkcoding.oswl.dto.TeamSummaryDto;
+import com.salkcoding.oswl.service.org.TeamService;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.stereotype.Controller;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+/**
+ * Team hierarchy management (Organization → Team → Project). The page and every
+ * mutation require the global {@code TEAM_MANAGE} permission or SYSTEM_ADMIN;
+ * project-level visibility granted by team membership is resolved separately in
+ * {@code ProjectAccessService}.
+ */
+@Controller
+@RequiredArgsConstructor
+@PreAuthorize("hasPermission(null, 'TEAM_MANAGE') or hasRole('SYSTEM_ADMIN')")
+public class TeamController implements TeamControllerSpec {
+
+    private final TeamService teamService;
+
+    @GetMapping("/teams")
+    public String index(Model model) {
+        model.addAttribute("teams", teamService.listTeams());
+        return "teams/index";
+    }
+
+    @GetMapping("/api/teams")
+    @ResponseBody
+    public List listTeams() {
+        return teamService.listTeams();
+    }
+
+    @PostMapping("/api/teams")
+    @ResponseBody
+    public TeamSummaryDto createTeam(@Valid @RequestBody TeamRequest request) {
+        return teamService.createTeam(request.name(), request.description(), request.parentTeamId());
+    }
+
+    @PutMapping("/api/teams/{teamId}")
+    @ResponseBody
+    public TeamSummaryDto updateTeam(@PathVariable Long teamId, @Valid @RequestBody TeamRequest request) {
+        return teamService.updateTeam(teamId, request.name(), request.description(), request.parentTeamId());
+    }
+
+    @DeleteMapping("/api/teams/{teamId}")
+    @ResponseBody
+    public ResponseEntity deleteTeam(@PathVariable Long teamId) {
+        teamService.deleteTeam(teamId);
+        return ResponseEntity.noContent().build();
+    }
+
+    @GetMapping("/api/teams/user-directory")
+    @ResponseBody
+    public List userDirectory() {
+        return teamService.userDirectory();
+    }
+
+    @GetMapping("/api/teams/{teamId}/members")
+    @ResponseBody
+    public List listMembers(@PathVariable Long teamId) {
+        return teamService.listMembers(teamId);
+    }
+
+    @PostMapping("/api/teams/{teamId}/members")
+    @ResponseBody
+    public ResponseEntity addMember(@PathVariable Long teamId,
+                                          @Valid @RequestBody AddMemberRequest request) {
+        teamService.addMember(teamId, request.userId(), parseRole(request.role()));
+        return ResponseEntity.ok().build();
+    }
+
+    @PutMapping("/api/teams/{teamId}/members/{userId}")
+    @ResponseBody
+    public ResponseEntity updateMemberRole(@PathVariable Long teamId, @PathVariable Long userId,
+                                                 @Valid @RequestBody UpdateMemberRoleRequest request) {
+        teamService.updateMemberRole(teamId, userId, parseRole(request.role()));
+        return ResponseEntity.ok().build();
+    }
+
+    @DeleteMapping("/api/teams/{teamId}/members/{userId}")
+    @ResponseBody
+    public ResponseEntity removeMember(@PathVariable Long teamId, @PathVariable Long userId) {
+        teamService.removeMember(teamId, userId);
+        return ResponseEntity.noContent().build();
+    }
+
+    @GetMapping("/api/teams/{teamId}/projects")
+    @ResponseBody
+    public List listTeamProjects(@PathVariable Long teamId) {
+        return teamService.listTeamProjects(teamId);
+    }
+
+    @PostMapping("/api/teams/{teamId}/projects")
+    @ResponseBody
+    public ResponseEntity assignProject(@PathVariable Long teamId,
+                                              @Valid @RequestBody AssignProjectRequest request) {
+        teamService.assignProjectToTeam(request.projectId(), teamId);
+        return ResponseEntity.ok().build();
+    }
+
+    @DeleteMapping("/api/teams/{teamId}/projects/{projectId}")
+    @ResponseBody
+    public ResponseEntity unassignProject(@PathVariable Long teamId, @PathVariable Long projectId) {
+        teamService.unassignProject(projectId);
+        return ResponseEntity.noContent().build();
+    }
+
+    private static TeamMemberRole parseRole(String role) {
+        if (role == null || role.isBlank()) {
+            return null;
+        }
+        try {
+            return TeamMemberRole.valueOf(role.trim().toUpperCase());
+        } catch (IllegalArgumentException e) {
+            throw new IllegalArgumentException("Unknown team role: " + role);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/policy/PolicyController.java b/src/main/java/com/salkcoding/oswl/controller/policy/PolicyController.java
new file mode 100644
index 00000000..dee42f09
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/policy/PolicyController.java
@@ -0,0 +1,109 @@
+package com.salkcoding.oswl.controller.policy;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.controller.spec.PolicyControllerSpec;
+import com.salkcoding.oswl.dto.policy.EffectivePolicyDto;
+import com.salkcoding.oswl.dto.policy.PolicyDto;
+import com.salkcoding.oswl.dto.policy.PolicyExceptionDto;
+import com.salkcoding.oswl.dto.policy.PolicyExceptionRequest;
+import com.salkcoding.oswl.dto.policy.PolicyGitOpsRequest;
+import com.salkcoding.oswl.dto.policy.PolicyRequest;
+import com.salkcoding.oswl.dto.policy.PolicyScopeOptionsDto;
+import com.salkcoding.oswl.service.policy.PolicyService;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+@RestController
+@RequestMapping("/api/policies")
+@PreAuthorize("hasPermission(null, 'POLICY_MANAGE') or hasRole('SYSTEM_ADMIN')")
+@RequiredArgsConstructor
+public class PolicyController implements PolicyControllerSpec {
+
+    private final PolicyService policyService;
+
+    @GetMapping
+    public List list() {
+        return policyService.findAll();
+    }
+
+    @GetMapping("/{id}")
+    public PolicyDto get(@PathVariable Long id) {
+        return policyService.findById(id);
+    }
+
+    @GetMapping("/scope-options")
+    public PolicyScopeOptionsDto scopeOptions() {
+        return policyService.getScopeOptions();
+    }
+
+    @PostMapping
+    public PolicyDto create(@Valid @RequestBody PolicyRequest request) {
+        return policyService.create(request);
+    }
+
+    @PutMapping("/{id}")
+    public PolicyDto update(@PathVariable Long id, @Valid @RequestBody PolicyRequest request) {
+        return policyService.update(id, request);
+    }
+
+    @DeleteMapping("/{id}")
+    public PolicyDto delete(@PathVariable Long id) {
+        return policyService.delete(id);
+    }
+
+    @GetMapping("/export")
+    public String exportAll() {
+        return policyService.exportAllAsYaml();
+    }
+
+    @PostMapping("/import")
+    public List importYaml(@RequestBody ImportRequest request) {
+        return policyService.importFromYaml(request.yaml());
+    }
+
+    @PostMapping("/gitops-sync")
+    public PolicyDto gitopsSync(@Valid @RequestBody PolicyGitOpsRequest request) {
+        return policyService.syncFromGitRepository(request);
+    }
+
+    @GetMapping("/effective/{projectId}")
+    public EffectivePolicyDto effective(@PathVariable Long projectId) {
+        return policyService.getEffectivePolicy(projectId);
+    }
+
+    @GetMapping("/effective/{projectId}/export")
+    public String exportEffective(@PathVariable Long projectId) {
+        return policyService.exportEffectiveAsYaml(projectId);
+    }
+
+    @GetMapping("/exceptions/{projectId}")
+    public List listExceptions(@PathVariable Long projectId) {
+        return policyService.listExceptions(projectId);
+    }
+
+    @PostMapping("/exceptions")
+    public PolicyExceptionDto requestException(@Valid @RequestBody PolicyExceptionRequest request,
+                                               @AuthenticationPrincipal OswlUserPrincipal principal) {
+        Long userId = principal != null ? principal.getUserId() : null;
+        String name = principal != null ? principal.getDisplayName() : "unknown";
+        return policyService.requestException(request, userId, name);
+    }
+
+    @PostMapping("/exceptions/{id}/approve")
+    public PolicyExceptionDto approveException(@PathVariable Long id,
+                                               @AuthenticationPrincipal OswlUserPrincipal principal) {
+        Long userId = principal != null ? principal.getUserId() : null;
+        String name = principal != null ? principal.getDisplayName() : "unknown";
+        return policyService.approveException(id, userId, name);
+    }
+
+    @PostMapping("/exceptions/{id}/revoke")
+    public PolicyExceptionDto revokeException(@PathVariable Long id) {
+        return policyService.revokeException(id);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/ProjectContextController.java b/src/main/java/com/salkcoding/oswl/controller/project/ProjectContextController.java
similarity index 63%
rename from src/main/java/com/salkcoding/oswl/controller/ProjectContextController.java
rename to src/main/java/com/salkcoding/oswl/controller/project/ProjectContextController.java
index 5fd2ac89..eef7ba70 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ProjectContextController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/project/ProjectContextController.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.project;
 
 import com.salkcoding.oswl.controller.spec.ProjectContextControllerSpec;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.ProjectService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.project.ProjectService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.ResponseEntity;
 import org.springframework.security.access.prepost.PreAuthorize;
@@ -27,4 +27,14 @@ public ResponseEntity> updateDeploymentProfile(
         projectService.updateDeploymentProfile(projectId, request.deploymentProfile());
         return ResponseEntity.ok(Map.of("deploymentProfile", request.deploymentProfile().name()));
     }
+
+    @PatchMapping("/tags")
+    @PreAuthorize("hasPermission(null, 'PROJECT_UPDATE') or hasRole('SYSTEM_ADMIN')")
+    public ResponseEntity> updateTags(
+            @PathVariable Long projectId,
+            @RequestBody TagsRequest request) {
+        projectAccessService.assertCanViewProject(projectId);
+        projectService.updateTags(projectId, request.tags());
+        return ResponseEntity.ok(Map.of("tags", request.tags() != null ? request.tags() : ""));
+    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/controller/ProjectController.java b/src/main/java/com/salkcoding/oswl/controller/project/ProjectController.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/controller/ProjectController.java
rename to src/main/java/com/salkcoding/oswl/controller/project/ProjectController.java
index 8dcc4130..6157a07c 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ProjectController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/project/ProjectController.java
@@ -1,10 +1,10 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.project;
 
 import com.salkcoding.oswl.controller.spec.ProjectControllerSpec;
-import com.salkcoding.oswl.domain.entity.Project;
+import com.salkcoding.oswl.domain.entity.project.Project;
 import com.salkcoding.oswl.dto.ProjectSummaryDto;
-import com.salkcoding.oswl.service.ProjectService;
-import com.salkcoding.oswl.service.ScanStatusEmitterRegistry;
+import com.salkcoding.oswl.service.project.ProjectService;
+import com.salkcoding.oswl.service.scan.ScanStatusEmitterRegistry;
 import jakarta.validation.Valid;
 import jakarta.validation.constraints.NotBlank;
 import jakarta.validation.constraints.Size;
diff --git a/src/main/java/com/salkcoding/oswl/controller/reporting/ReportBrandingController.java b/src/main/java/com/salkcoding/oswl/controller/reporting/ReportBrandingController.java
new file mode 100644
index 00000000..fe06d4de
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/reporting/ReportBrandingController.java
@@ -0,0 +1,37 @@
+package com.salkcoding.oswl.controller.reporting;
+
+import com.salkcoding.oswl.controller.spec.ReportBrandingControllerSpec;
+import com.salkcoding.oswl.domain.entity.reporting.ReportBrandingSettings;
+import com.salkcoding.oswl.dto.ReportBrandingResponse;
+import com.salkcoding.oswl.dto.ReportBrandingUpdateRequest;
+import com.salkcoding.oswl.service.reporting.ReportBrandingService;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/settings/report-branding")
+@PreAuthorize("hasPermission(null, 'SETTINGS_REPORTING_MANAGE') or hasRole('SYSTEM_ADMIN')")
+@RequiredArgsConstructor
+public class ReportBrandingController implements ReportBrandingControllerSpec {
+
+    private final ReportBrandingService reportBrandingService;
+
+    @Override
+    @GetMapping
+    public ResponseEntity getSettings() {
+        ReportBrandingSettings s = reportBrandingService.getSettings();
+        return ResponseEntity.ok(new ReportBrandingResponse(
+                s.getCompanyName(), s.getLogoDataUri(), s.getHeaderText(), s.isShowCoverPage()));
+    }
+
+    @Override
+    @PutMapping
+    public ResponseEntity saveSettings(@Valid @RequestBody ReportBrandingUpdateRequest request) {
+        reportBrandingService.save(request.companyName(), request.logoDataUri(),
+                request.headerText(), request.showCoverPage());
+        return ResponseEntity.noContent().build();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/RiskTrendController.java b/src/main/java/com/salkcoding/oswl/controller/reporting/RiskTrendController.java
similarity index 86%
rename from src/main/java/com/salkcoding/oswl/controller/RiskTrendController.java
rename to src/main/java/com/salkcoding/oswl/controller/reporting/RiskTrendController.java
index 125f978a..3a9bfae3 100644
--- a/src/main/java/com/salkcoding/oswl/controller/RiskTrendController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/reporting/RiskTrendController.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.reporting;
 
 import com.salkcoding.oswl.controller.spec.RiskTrendControllerSpec;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.RiskTrendService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.reporting.RiskTrendService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
diff --git a/src/main/java/com/salkcoding/oswl/controller/SbomController.java b/src/main/java/com/salkcoding/oswl/controller/reporting/SbomController.java
similarity index 91%
rename from src/main/java/com/salkcoding/oswl/controller/SbomController.java
rename to src/main/java/com/salkcoding/oswl/controller/reporting/SbomController.java
index e1b2e32b..c390af69 100644
--- a/src/main/java/com/salkcoding/oswl/controller/SbomController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/reporting/SbomController.java
@@ -1,14 +1,14 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.reporting;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.controller.spec.SbomControllerSpec;
 import com.salkcoding.oswl.exception.InvalidRequestException;
-import com.salkcoding.oswl.service.SbomExportService;
-import com.salkcoding.oswl.service.SbomExportService.SbomFile;
-import com.salkcoding.oswl.service.SarifExportService;
-import com.salkcoding.oswl.service.SarifExportService.SarifFile;
-import com.salkcoding.oswl.service.SbomImportService;
-import com.salkcoding.oswl.service.SbomImportService.SbomImportResult;
+import com.salkcoding.oswl.service.reporting.SbomExportService;
+import com.salkcoding.oswl.service.reporting.SbomExportService.SbomFile;
+import com.salkcoding.oswl.service.reporting.SarifExportService;
+import com.salkcoding.oswl.service.reporting.SarifExportService.SarifFile;
+import com.salkcoding.oswl.service.ingest.SbomImportService;
+import com.salkcoding.oswl.service.ingest.SbomImportService.SbomImportResult;
 import lombok.RequiredArgsConstructor;
 import org.springframework.http.HttpHeaders;
 import org.springframework.http.MediaType;
diff --git a/src/main/java/com/salkcoding/oswl/controller/ComponentDetailController.java b/src/main/java/com/salkcoding/oswl/controller/scan/ComponentDetailController.java
similarity index 92%
rename from src/main/java/com/salkcoding/oswl/controller/ComponentDetailController.java
rename to src/main/java/com/salkcoding/oswl/controller/scan/ComponentDetailController.java
index c87a5a42..a5f686fe 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ComponentDetailController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/scan/ComponentDetailController.java
@@ -1,15 +1,15 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.scan;
 
 import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
 import com.salkcoding.oswl.controller.spec.ComponentDetailControllerSpec;
 import com.salkcoding.oswl.dto.CreatePrRequest;
 import com.salkcoding.oswl.dto.CveDto;
 import com.salkcoding.oswl.dto.DeferralRequest;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.service.ComponentDetailService;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.VcsAuthTokenService;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.service.scan.ComponentDetailService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vcs.VcsAuthTokenService;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpSession;
 import lombok.RequiredArgsConstructor;
diff --git a/src/main/java/com/salkcoding/oswl/controller/scan/CustomScanRuleController.java b/src/main/java/com/salkcoding/oswl/controller/scan/CustomScanRuleController.java
new file mode 100644
index 00000000..925ade40
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/scan/CustomScanRuleController.java
@@ -0,0 +1,20 @@
+package com.salkcoding.oswl.controller.scan;
+import com.salkcoding.oswl.dto.scan.CustomRuleSet;
+import com.salkcoding.oswl.controller.spec.CustomScanRuleControllerSpec;
+import com.salkcoding.oswl.service.secretscan.CustomScanRuleService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/settings/scan-rules")
+@RequiredArgsConstructor
+public class CustomScanRuleController implements CustomScanRuleControllerSpec {
+    private final CustomScanRuleService service;
+    @GetMapping
+    @PreAuthorize("hasRole('SYSTEM_ADMIN')")
+    public CustomRuleSet read() { return service.read(); }
+    @PutMapping
+    @PreAuthorize("hasRole('SYSTEM_ADMIN')")
+    public CustomRuleSet publish(@RequestBody CustomRuleSet request) { return service.publish(request); }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/ScanHistoryController.java b/src/main/java/com/salkcoding/oswl/controller/scan/ScanHistoryController.java
similarity index 87%
rename from src/main/java/com/salkcoding/oswl/controller/ScanHistoryController.java
rename to src/main/java/com/salkcoding/oswl/controller/scan/ScanHistoryController.java
index c9a668ea..5ea3cf99 100644
--- a/src/main/java/com/salkcoding/oswl/controller/ScanHistoryController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/scan/ScanHistoryController.java
@@ -1,11 +1,11 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.scan;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.controller.spec.ScanHistoryControllerSpec;
-import com.salkcoding.oswl.repository.ScanResultRepository;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.ScanHistoryService;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.scan.ScanHistoryService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.http.ResponseEntity;
@@ -38,7 +38,7 @@ public String index(@PathVariable Long projectId, Model model) {
     }
 
     /**
-     * E7: in air-gapped mode, the scan results were analyzed against snapshot definitions as of
+     * In air-gapped mode, the scan results were analyzed against snapshot definitions as of
      * {@link AirgappedSnapshotService#oldestSourceAsOf()}; the page shows that date so auditors can
      * see how fresh the underlying data was. Null outside air-gapped mode or with no provenance.
      */
diff --git a/src/main/java/com/salkcoding/oswl/controller/VersionDiffController.java b/src/main/java/com/salkcoding/oswl/controller/scan/VersionDiffController.java
similarity index 85%
rename from src/main/java/com/salkcoding/oswl/controller/VersionDiffController.java
rename to src/main/java/com/salkcoding/oswl/controller/scan/VersionDiffController.java
index 233fb76b..61ba9e62 100644
--- a/src/main/java/com/salkcoding/oswl/controller/VersionDiffController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/scan/VersionDiffController.java
@@ -1,7 +1,7 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.scan;
 
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.VersionDiffService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.scan.VersionDiffService;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.Model;
diff --git a/src/main/java/com/salkcoding/oswl/controller/scim/ScimGroupController.java b/src/main/java/com/salkcoding/oswl/controller/scim/ScimGroupController.java
new file mode 100644
index 00000000..1e124365
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/scim/ScimGroupController.java
@@ -0,0 +1,106 @@
+package com.salkcoding.oswl.controller.scim;
+
+import com.salkcoding.oswl.controller.spec.ScimGroupControllerSpec;
+import com.salkcoding.oswl.dto.scim.ScimError;
+import com.salkcoding.oswl.dto.scim.ScimGroup;
+import com.salkcoding.oswl.dto.scim.ScimPatchRequest;
+import com.salkcoding.oswl.service.scim.ScimProvisioningService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+import java.util.NoSuchElementException;
+
+/**
+ * SCIM 2.0 Groups resource endpoint.
+ *
+ * Authentication is performed by {@link com.salkcoding.oswl.web.interceptor.ScimAuthInterceptor}
+ * using a dedicated SCIM-scoped API key. Groups are mapped to either Team or RoleTemplate
+ * based on {@code oswl.scim.group-mapping}.
+ */
+@RestController
+@RequestMapping("/scim/v2/Groups")
+@RequiredArgsConstructor
+public class ScimGroupController implements ScimGroupControllerSpec {
+
+    private final ScimProvisioningService scimProvisioningService;
+
+    @GetMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity getGroup(@PathVariable Long id) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.getGroup(id));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        }
+    }
+
+    @GetMapping(produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity listGroups() {
+        return ResponseEntity.ok(scimProvisioningService.listGroups());
+    }
+
+    @PostMapping(produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity createGroup(@RequestBody ScimGroup request) {
+        try {
+            return ResponseEntity.status(HttpStatus.CREATED)
+                    .body(scimProvisioningService.createGroup(request));
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @PutMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity updateGroup(@PathVariable Long id, @RequestBody ScimGroup request) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.updateGroup(id, request));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @PatchMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity patchGroup(@PathVariable Long id, @RequestBody ScimPatchRequest request) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.patchGroup(id, request));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @DeleteMapping("/{id}")
+    public ResponseEntity deleteGroup(@PathVariable Long id) {
+        try {
+            scimProvisioningService.deleteGroup(id);
+            return ResponseEntity.noContent().build();
+        } catch (NoSuchElementException e) {
+            return ResponseEntity.notFound().build();
+        } catch (IllegalStateException e) {
+            return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        }
+    }
+
+    private ResponseEntity notFound(String detail) {
+        return ResponseEntity.status(HttpStatus.NOT_FOUND)
+                .body(ScimError.builder()
+                        .schemas(List.of("urn:ietf:params:scim:api:messages:2.0:Error"))
+                        .status(String.valueOf(HttpStatus.NOT_FOUND.value()))
+                        .detail(detail)
+                        .build());
+    }
+
+    private ResponseEntity badRequest(String detail) {
+        return ResponseEntity.status(HttpStatus.BAD_REQUEST)
+                .body(ScimError.builder()
+                        .schemas(List.of("urn:ietf:params:scim:api:messages:2.0:Error"))
+                        .status(String.valueOf(HttpStatus.BAD_REQUEST.value()))
+                        .detail(detail)
+                        .build());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/scim/ScimUserController.java b/src/main/java/com/salkcoding/oswl/controller/scim/ScimUserController.java
new file mode 100644
index 00000000..1f419ac6
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/scim/ScimUserController.java
@@ -0,0 +1,108 @@
+package com.salkcoding.oswl.controller.scim;
+
+import com.salkcoding.oswl.controller.spec.ScimUserControllerSpec;
+import com.salkcoding.oswl.dto.scim.ScimError;
+import com.salkcoding.oswl.dto.scim.ScimPatchRequest;
+import com.salkcoding.oswl.dto.scim.ScimUser;
+import com.salkcoding.oswl.service.scim.ScimProvisioningService;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+import java.util.NoSuchElementException;
+
+/**
+ * SCIM 2.0 Users resource endpoint.
+ *
+ * Authentication is performed by {@link com.salkcoding.oswl.web.interceptor.ScimAuthInterceptor}
+ * using a dedicated SCIM-scoped API key.
+ */
+@RestController
+@RequestMapping("/scim/v2/Users")
+@RequiredArgsConstructor
+public class ScimUserController implements ScimUserControllerSpec {
+
+    private final ScimProvisioningService scimProvisioningService;
+
+    @GetMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity getUser(@PathVariable Long id) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.getUser(id));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        }
+    }
+
+    @GetMapping(produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity listUsers(
+            @RequestParam(name = "filter", required = false) String filter,
+            @RequestParam(name = "startIndex", defaultValue = "1") int startIndex,
+            @RequestParam(name = "count", defaultValue = "100") int count) {
+        return ResponseEntity.ok(scimProvisioningService.listUsers(filter, startIndex, count));
+    }
+
+    @PostMapping(produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity createUser(@RequestBody ScimUser request) {
+        try {
+            return ResponseEntity.status(HttpStatus.CREATED)
+                    .body(scimProvisioningService.createUser(request));
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @PutMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity updateUser(@PathVariable Long id, @RequestBody ScimUser request) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.updateUser(id, request));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @PatchMapping(value = "/{id}", produces = MediaType.APPLICATION_JSON_VALUE)
+    public ResponseEntity patchUser(@PathVariable Long id, @RequestBody ScimPatchRequest request) {
+        try {
+            return ResponseEntity.ok(scimProvisioningService.patchUser(id, request));
+        } catch (NoSuchElementException e) {
+            return notFound(e.getMessage());
+        } catch (IllegalArgumentException e) {
+            return badRequest(e.getMessage());
+        }
+    }
+
+    @DeleteMapping("/{id}")
+    public ResponseEntity deleteUser(@PathVariable Long id) {
+        try {
+            scimProvisioningService.deactivateUser(id);
+            return ResponseEntity.noContent().build();
+        } catch (NoSuchElementException e) {
+            return ResponseEntity.notFound().build();
+        } catch (IllegalStateException e) {
+            return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
+        }
+    }
+
+    private ResponseEntity notFound(String detail) {
+        return ResponseEntity.status(HttpStatus.NOT_FOUND)
+                .body(ScimError.builder()
+                        .schemas(List.of("urn:ietf:params:scim:api:messages:2.0:Error"))
+                        .status(String.valueOf(HttpStatus.NOT_FOUND.value()))
+                        .detail(detail)
+                        .build());
+    }
+
+    private ResponseEntity badRequest(String detail) {
+        return ResponseEntity.status(HttpStatus.BAD_REQUEST)
+                .body(ScimError.builder()
+                        .schemas(List.of("urn:ietf:params:scim:api:messages:2.0:Error"))
+                        .status(String.valueOf(HttpStatus.BAD_REQUEST.value()))
+                        .detail(detail)
+                        .build());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/SnapshotAdminController.java b/src/main/java/com/salkcoding/oswl/controller/snapshot/SnapshotAdminController.java
similarity index 91%
rename from src/main/java/com/salkcoding/oswl/controller/SnapshotAdminController.java
rename to src/main/java/com/salkcoding/oswl/controller/snapshot/SnapshotAdminController.java
index 37babb13..59cca11a 100644
--- a/src/main/java/com/salkcoding/oswl/controller/SnapshotAdminController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/snapshot/SnapshotAdminController.java
@@ -1,14 +1,14 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.snapshot;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.client.KevCatalogService;
 import com.salkcoding.oswl.controller.spec.SnapshotAdminControllerSpec;
 import com.salkcoding.oswl.dto.SnapshotImportFromPathRequest;
 import com.salkcoding.oswl.exception.InvalidRequestException;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.ImportMode;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotImportResult;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SourceStatus;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.ImportMode;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotImportResult;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SourceStatus;
 import com.salkcoding.oswl.service.git.CloneRootPathGuard;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
@@ -40,7 +40,7 @@
  *
  * GET  /api/admin/snapshot              — air-gapped flag + per-source store status
  * POST /api/admin/snapshot/import       — upload a snapshot bundle (zip of JSONL files)
- * POST /api/admin/snapshot/import-from-path — import a bundle already on the server's disk (E3)
+ * POST /api/admin/snapshot/import-from-path — import a bundle already on the server's disk
  * GET  /api/admin/snapshot/export       — download a snapshot bundle built from this
  *                                         instance's fetched data (run on an online instance)
  */
@@ -58,11 +58,11 @@ public class SnapshotAdminController implements SnapshotAdminControllerSpec {
     @Value("${oswl.airgapped.enabled:false}")
     private boolean airgapped;
 
-    /** E3: server-path import only accepts files under this directory; blank disables the endpoint. */
+    /** Server-path import only accepts files under this directory; blank disables the endpoint. */
     @Value("${oswl.airgapped.import-dir:}")
     private String importDir;
 
-    /** E7: staleness badge thresholds, measured from {@link AirgappedSnapshotService#oldestSourceAsOf()}. */
+    /** Staleness badge thresholds, measured from {@link AirgappedSnapshotService#oldestSourceAsOf()}. */
     @Value("${oswl.airgapped.staleness-warn-days:7}")
     private int stalenessWarnDays;
 
@@ -81,7 +81,7 @@ public ResponseEntity importBundle(
             @RequestParam(required = false) String mode) {
         ImportMode importMode = parseMode(mode);
         SnapshotImportResult result;
-        // E3: the multipart upload's own stream is handed to the service directly — no
+        // the multipart upload's own stream is handed to the service directly — no
         // file.getBytes() buffering the whole compressed upload in memory up front.
         try (InputStream in = file.getInputStream()) {
             result = importMode != null
@@ -179,7 +179,7 @@ private static ImportMode parseMode(String mode) {
     // ── DTO ──────────────────────────────────────────────────────────────
 
     /**
-     * E7: {@code oldestSourceAsOf}/{@code stalenessWarnDays}/{@code stalenessCriticalDays} let the
+     * {@code oldestSourceAsOf}/{@code stalenessWarnDays}/{@code stalenessCriticalDays} let the
      * admin UI render the staleness badge without hardcoding the threshold values it's configured with.
      */
     public record SnapshotStatusResponse(boolean airgapped, List sources,
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/AdminCliKeyControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/AdminCliKeyControllerSpec.java
index d0758838..5d61c486 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/AdminCliKeyControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/AdminCliKeyControllerSpec.java
@@ -19,6 +19,9 @@
 @Tag(name = "Admin — CLI Keys", description = "Global CLI API key management across all projects. Requires the SETTINGS_CLI_KEY_MANAGE permission or the SYSTEM_ADMIN role.")
 public interface AdminCliKeyControllerSpec {
 
+    @Operation(summary = "Delete a CLI API key", description = "Permanently removes the key and immediately prevents further authentication with it.")
+    ResponseEntity delete(@PathVariable Long keyId);
+
     @Operation(summary = "List all CLI API keys",
         description = "Returns every API key in the system across all projects. Tokens are masked — only the first 9 and last 4 characters are shown.")
     @ApiResponses({
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/AdminProjectControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/AdminProjectControllerSpec.java
new file mode 100644
index 00000000..2f1e2e39
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/AdminProjectControllerSpec.java
@@ -0,0 +1,29 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.AdminProjectRefDto;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.media.ArraySchema;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+
+import java.util.List;
+
+@Tag(name = "Admin Projects", description = "Lightweight project references for SYSTEM_ADMIN-only operational UIs.")
+public interface AdminProjectControllerSpec {
+
+    @Operation(summary = "List active projects (id + name only)",
+        description = """
+            Returns every non-deleted project as a bare id/name pair, newest first. Exists for
+            admin pickers (e.g. the scan-archiving panel) that must not depend on the heavier
+            project-card payload. SYSTEM_ADMIN only.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Active projects, newest first",
+            content = @Content(array = @ArraySchema(schema = @Schema(implementation = AdminProjectRefDto.class)))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content)
+    })
+    List listActiveProjects();
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ConfigTransferControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ConfigTransferControllerSpec.java
new file mode 100644
index 00000000..12c1e1f1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ConfigTransferControllerSpec.java
@@ -0,0 +1,39 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.config.ConfigBundle;
+import com.salkcoding.oswl.dto.config.ConfigImportResult;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestParam;
+
+@Tag(name = "Settings — Config Transfer", description = "Export/import a portable subset of instance config — role templates, license policy, AI settings minus secrets, cache TTLs. SYSTEM_ADMIN only.")
+public interface ConfigTransferControllerSpec {
+
+    @Operation(summary = "Export the config bundle",
+        description = "Never includes any secret, API key, or password. redactedFields lists what must be re-entered by hand after import.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Config bundle",
+            content = @Content(schema = @Schema(implementation = ConfigBundle.class))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content)
+    })
+    ConfigBundle export();
+
+    @Operation(summary = "Import a config bundle",
+        description = "dryRun=true (default) previews counts without writing anything. Set dryRun=false to apply.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Import result",
+            content = @Content(schema = @Schema(implementation = ConfigImportResult.class))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content)
+    })
+    ConfigImportResult importBundle(
+        @RequestBody ConfigBundle bundle,
+        @Parameter(description = "Preview only — nothing is written when true", example = "true")
+        @RequestParam(defaultValue = "true") boolean dryRun
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/CustomScanRuleControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/CustomScanRuleControllerSpec.java
new file mode 100644
index 00000000..552ed108
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/CustomScanRuleControllerSpec.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.controller.spec;
+import com.salkcoding.oswl.dto.scan.CustomRuleSet;
+import com.salkcoding.oswl.service.secretscan.CustomScanRuleService;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.tags.Tag;
+@Tag(name = "Custom scan rules")
+public interface CustomScanRuleControllerSpec {
+    @Operation(summary = "Read the deployed custom rule set (system administrator)")
+    CustomRuleSet read();
+    @Operation(summary = "Validate and atomically deploy rules using the current revision")
+    CustomRuleSet publish(CustomRuleSet request);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/DiagnosticsControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/DiagnosticsControllerSpec.java
new file mode 100644
index 00000000..3c380013
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/DiagnosticsControllerSpec.java
@@ -0,0 +1,34 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.dto.diagnostics.DiagnosticCheckResult;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.ArraySchema;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+
+import java.util.List;
+
+@Tag(name = "Settings — Diagnostics", description = "Self-service connectivity/health checks. SYSTEM_ADMIN only.")
+public interface DiagnosticsControllerSpec {
+
+    @Operation(summary = "Run self-diagnostics",
+        description = """
+            Runs every diagnostic check synchronously and returns the results: database, disk
+            space, embedded AI sidecar, air-gapped snapshot freshness, active AI provider
+            reachability, SMTP, the current user's VCS token validity, and outbound reachability
+            of OSV / deps.dev / FIRST.org EPSS / CISA KEV. Each result is safe to paste into a
+            support request — no secret, token, or password value is ever included.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Diagnostic results",
+            content = @Content(array = @ArraySchema(schema = @Schema(implementation = DiagnosticCheckResult.class)))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content)
+    })
+    List run(@Parameter(hidden = true) @AuthenticationPrincipal OswlUserPrincipal principal);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ExecutiveSummaryControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ExecutiveSummaryControllerSpec.java
new file mode 100644
index 00000000..d8a88611
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ExecutiveSummaryControllerSpec.java
@@ -0,0 +1,7 @@
+package com.salkcoding.oswl.controller.spec;
+import io.swagger.v3.oas.annotations.Operation;
+import org.springframework.ui.Model;
+public interface ExecutiveSummaryControllerSpec {
+    @Operation(summary = "Printable organization risk and action summary")
+    String summary(Model model);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/PolicyControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/PolicyControllerSpec.java
new file mode 100644
index 00000000..489c25c0
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/PolicyControllerSpec.java
@@ -0,0 +1,80 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.dto.policy.EffectivePolicyDto;
+import com.salkcoding.oswl.dto.policy.PolicyDto;
+import com.salkcoding.oswl.dto.policy.PolicyExceptionDto;
+import com.salkcoding.oswl.dto.policy.PolicyExceptionRequest;
+import com.salkcoding.oswl.dto.policy.PolicyGitOpsRequest;
+import com.salkcoding.oswl.dto.policy.PolicyRequest;
+import com.salkcoding.oswl.dto.policy.PolicyScopeOptionsDto;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestBody;
+
+import java.util.List;
+
+@Tag(name = "Policy as Code", description = "Organization/team/project security-gate policy hierarchy and waiver "
+        + "(policy exception) approval workflow. Requires POLICY_MANAGE or SYSTEM_ADMIN.")
+public interface PolicyControllerSpec {
+
+    @Operation(summary = "List all policies")
+    List list();
+
+    @Operation(summary = "Get a policy by id")
+    @ApiResponses({@ApiResponse(responseCode = "404", description = "Not found", content = @Content)})
+    PolicyDto get(@Parameter(description = "Policy id", required = true) @PathVariable Long id);
+
+    @Operation(summary = "List available scopes (organization/teams/projects) for the policy scope selector")
+    PolicyScopeOptionsDto scopeOptions();
+
+    @Operation(summary = "Create a policy at an organization, team, or project scope")
+    @ApiResponses({@ApiResponse(responseCode = "409", description = "A policy already exists for that scope", content = @Content)})
+    PolicyDto create(@Valid @RequestBody PolicyRequest request);
+
+    @Operation(summary = "Update a policy")
+    PolicyDto update(@PathVariable Long id, @Valid @RequestBody PolicyRequest request);
+
+    @Operation(summary = "Delete a policy")
+    PolicyDto delete(@PathVariable Long id);
+
+    @Operation(summary = "Export all policies as GitOps-compatible YAML")
+    String exportAll();
+
+    @Operation(summary = "Import one or more policies from YAML (upserts by scope)")
+    List importYaml(@RequestBody ImportRequest request);
+
+    @Operation(summary = "Pull .oswl/policy.yaml from a Git repository and apply it as the project's policy")
+    PolicyDto gitopsSync(@Valid @RequestBody PolicyGitOpsRequest request);
+
+    @Operation(summary = "Resolve the effective (org → team → project, override-aware) policy for a project")
+    EffectivePolicyDto effective(@Parameter(description = "Project id", required = true) @PathVariable Long projectId);
+
+    @Operation(summary = "Export a project's effective policy as YAML")
+    String exportEffective(@PathVariable Long projectId);
+
+    @Operation(summary = "List policy exceptions (waivers) requested for a project")
+    List listExceptions(@PathVariable Long projectId);
+
+    @Operation(summary = "Request a policy exception (waiver) for a CVE, license violation, or whole component")
+    PolicyExceptionDto requestException(@Valid @RequestBody PolicyExceptionRequest request,
+                                        @Parameter(hidden = true) @AuthenticationPrincipal OswlUserPrincipal principal);
+
+    @Operation(summary = "Approve a pending policy exception — it starts suppressing matching gate findings immediately")
+    PolicyExceptionDto approveException(@PathVariable Long id,
+                                        @Parameter(hidden = true) @AuthenticationPrincipal OswlUserPrincipal principal);
+
+    @Operation(summary = "Revoke a pending or approved policy exception")
+    PolicyExceptionDto revokeException(@PathVariable Long id);
+
+    @Schema(description = "Raw policy YAML to import")
+    record ImportRequest(String yaml) {}
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ProjectContextControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ProjectContextControllerSpec.java
index 63a0942d..d138a0d2 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/ProjectContextControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ProjectContextControllerSpec.java
@@ -9,6 +9,7 @@
 import io.swagger.v3.oas.annotations.responses.ApiResponses;
 import io.swagger.v3.oas.annotations.tags.Tag;
 import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
 import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.PathVariable;
 import org.springframework.web.bind.annotation.RequestBody;
@@ -25,6 +26,13 @@ record DeploymentProfileRequest(
             @NotNull DeploymentProfile deploymentProfile
     ) {}
 
+    @Schema(description = "Project tag labels update")
+    record TagsRequest(
+            @Schema(description = "Comma-separated tag labels (max 500 chars)", example = "backend,pci")
+            @Size(max = 500, message = "Tags must not exceed 500 characters")
+            String tags
+    ) {}
+
     @Operation(summary = "Set project deployment profile",
             description = """
                     Updates the deployment profile used when generating AI CVE batch summaries for this project.
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ProjectControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ProjectControllerSpec.java
index 6bcd0f51..89a749a8 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/ProjectControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ProjectControllerSpec.java
@@ -1,6 +1,6 @@
 package com.salkcoding.oswl.controller.spec;
 
-import com.salkcoding.oswl.controller.ProjectController.CreateProjectRequest;
+import com.salkcoding.oswl.controller.project.ProjectController.CreateProjectRequest;
 import com.salkcoding.oswl.dto.ProjectSummaryDto;
 import io.swagger.v3.oas.annotations.Hidden;
 import io.swagger.v3.oas.annotations.Operation;
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/QuickImportControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/QuickImportControllerSpec.java
index 2205fbaa..f13990a4 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/QuickImportControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/QuickImportControllerSpec.java
@@ -131,7 +131,8 @@ ResponseEntity jobStatus(
     @Operation(summary = "Subscribe to Quick Import job updates (SSE)",
             description = """
                     Server-Sent Events stream. Each event is named `job-update` with a JSON `QuickImportJobStatus` body.
-                    The server sends the current status immediately on connect, then on each state change.
+                    The server sends the current status immediately on connect, then on each state change, plus
+                    lightweight `heartbeat` events so clients can detect a stalled connection before polling.
                     """)
     @ApiResponses({
             @ApiResponse(responseCode = "200", description = "SSE stream (`text/event-stream`)",
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ReportBrandingControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ReportBrandingControllerSpec.java
new file mode 100644
index 00000000..d337616c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ReportBrandingControllerSpec.java
@@ -0,0 +1,37 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.ReportBrandingResponse;
+import com.salkcoding.oswl.dto.ReportBrandingUpdateRequest;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import io.swagger.v3.oas.annotations.parameters.RequestBody;
+import org.springframework.http.ResponseEntity;
+
+@Tag(name = "Report Branding", description = "Logo, company name, header text, and cover page options applied to printable reports.")
+public interface ReportBrandingControllerSpec {
+
+    @Operation(summary = "Get report branding settings",
+            description = "Returns the single-row branding settings applied to printable reports (compliance report today).")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Branding settings",
+                    content = @Content(schema = @Schema(implementation = ReportBrandingResponse.class)))
+    })
+    ResponseEntity getSettings();
+
+    @Operation(summary = "Save report branding settings",
+            description = "Upserts the single-row branding settings. A null logoDataUri leaves the stored logo unchanged; a blank one removes it.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "204", description = "Settings saved"),
+            @ApiResponse(responseCode = "400", description = "Invalid logo image or validation error", content = @Content)
+    })
+    ResponseEntity saveSettings(
+            @RequestBody(description = "Branding settings", required = true,
+                    content = @Content(schema = @Schema(implementation = ReportBrandingUpdateRequest.class)))
+            @Valid @org.springframework.web.bind.annotation.RequestBody ReportBrandingUpdateRequest request
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/SavedViewControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/SavedViewControllerSpec.java
new file mode 100644
index 00000000..1061dc69
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/SavedViewControllerSpec.java
@@ -0,0 +1,60 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.dto.SavedViewCreateRequest;
+import com.salkcoding.oswl.dto.SavedViewDto;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestBody;
+
+import java.util.List;
+
+@Tag(name = "Saved Views", description = "Named Security Center filter/sort combinations, personal or shared per project.")
+public interface SavedViewControllerSpec {
+
+    @Operation(summary = "List saved views",
+            description = "Returns the caller's own saved views plus every view another user marked shared, for one project.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "List of saved views",
+                    content = @Content(schema = @Schema(implementation = SavedViewDto.class)))
+    })
+    List list(
+            @Parameter(description = "Project ID") @PathVariable Long projectId,
+            @AuthenticationPrincipal OswlUserPrincipal principal
+    );
+
+    @Operation(summary = "Save a new filter view",
+            description = "Stores the current Security Center filter/sort state under a name, for the caller to reapply or (if shared) for teammates to open with the same result.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Saved view created",
+                    content = @Content(schema = @Schema(implementation = SavedViewDto.class))),
+            @ApiResponse(responseCode = "400", description = "Validation error", content = @Content)
+    })
+    ResponseEntity create(
+            @Parameter(description = "Project ID") @PathVariable Long projectId,
+            @Valid @RequestBody SavedViewCreateRequest request,
+            @AuthenticationPrincipal OswlUserPrincipal principal
+    );
+
+    @Operation(summary = "Delete a saved view",
+            description = "Only the view's creator may delete it, regardless of the shared flag.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "204", description = "Deleted"),
+            @ApiResponse(responseCode = "403", description = "Not the creator", content = @Content),
+            @ApiResponse(responseCode = "404", description = "Not found", content = @Content)
+    })
+    ResponseEntity delete(
+            @Parameter(description = "Project ID") @PathVariable Long projectId,
+            @Parameter(description = "Saved view ID") @PathVariable Long viewId,
+            @AuthenticationPrincipal OswlUserPrincipal principal
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/SbomControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/SbomControllerSpec.java
index 5f1deeef..94a74fc9 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/SbomControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/SbomControllerSpec.java
@@ -1,6 +1,6 @@
 package com.salkcoding.oswl.controller.spec;
 
-import com.salkcoding.oswl.service.SbomImportService.SbomImportResult;
+import com.salkcoding.oswl.service.ingest.SbomImportService.SbomImportResult;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.media.Content;
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ScanArchivingControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ScanArchivingControllerSpec.java
new file mode 100644
index 00000000..905d22e3
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ScanArchivingControllerSpec.java
@@ -0,0 +1,62 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.scan.ScanArchiveExportDto;
+import com.salkcoding.oswl.dto.scan.ScanArchiveResult;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.ArraySchema;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestParam;
+
+import java.util.List;
+
+@Tag(name = "Scan Archiving", description = "Deletes old scans' component/CVE detail beyond a per-project retain count, keeping only an aggregate summary. Manually triggered — SYSTEM_ADMIN only.")
+public interface ScanArchivingControllerSpec {
+
+    @Operation(summary = "Preview + export what a call to /archive-scans would delete",
+        description = """
+            Read-only. Returns the full component/CVE/dependency-path detail for every completed,
+            not-yet-archived scan beyond `retainCount` — exactly the set of scans the archive
+            endpoint would strip down to an aggregate summary. Call this first and save the
+            response if you need a record of the detail before it's deleted; archiving itself
+            is irreversible and this is the only way to keep a copy.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Scans pending archival, in full detail",
+            content = @Content(array = @ArraySchema(schema = @Schema(implementation = ScanArchiveExportDto.class)))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Project not found", content = @Content)
+    })
+    List exportPendingArchive(
+        @Parameter(description = "Project ID", example = "1", required = true)
+        @PathVariable Long projectId,
+        @Parameter(description = "Number of most-recent completed scans to keep in full detail; below 1 falls back to the instance default", example = "20")
+        @RequestParam(required = false) Integer retainCount
+    );
+
+    @Operation(summary = "Archive a project's old scans",
+        description = """
+            Keeps the most recent `retainCount` completed scans in full detail; every older
+            completed scan not already archived has its scan_components/dependency_paths rows
+            deleted and an aggregate severity/license summary stamped onto the scan itself instead.
+            Already-archived scans are skipped. Irreversible — call the export endpoint above
+            first if you want a copy of the detail before it's gone.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Archiving result",
+            content = @Content(schema = @Schema(implementation = ScanArchiveResult.class))),
+        @ApiResponse(responseCode = "403", description = "Not a SYSTEM_ADMIN", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Project not found", content = @Content)
+    })
+    ScanArchiveResult archive(
+        @Parameter(description = "Project ID", example = "1", required = true)
+        @PathVariable Long projectId,
+        @Parameter(description = "Number of most-recent completed scans to keep in full detail; below 1 falls back to the instance default", example = "20")
+        @RequestParam(required = false) Integer retainCount
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ScimGroupControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ScimGroupControllerSpec.java
new file mode 100644
index 00000000..7a827825
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ScimGroupControllerSpec.java
@@ -0,0 +1,79 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.scim.ScimGroup;
+import com.salkcoding.oswl.dto.scim.ScimPatchRequest;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.parameters.RequestBody;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.security.SecurityRequirement;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.http.ResponseEntity;
+
+@Tag(name = "SCIM 2.0 — Groups", description = "Group provisioning endpoints. Groups map to Team or RoleTemplate based on oswl.scim.group-mapping.")
+@SecurityRequirement(name = "ScimBearerAuth")
+public interface ScimGroupControllerSpec {
+
+    @Operation(summary = "Get a group by ID")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Group found",
+            content = @Content(schema = @Schema(implementation = ScimGroup.class))),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Group not found", content = @Content)
+    })
+    ResponseEntity getGroup(
+        @Parameter(description = "SCIM group ID", example = "3", required = true) Long id
+    );
+
+    @Operation(summary = "List groups")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Group list returned", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content)
+    })
+    ResponseEntity listGroups();
+
+    @Operation(summary = "Create a group")
+    @ApiResponses({
+        @ApiResponse(responseCode = "201", description = "Group created",
+            content = @Content(schema = @Schema(implementation = ScimGroup.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content)
+    })
+    ResponseEntity createGroup(
+        @RequestBody(description = "SCIM group resource", required = true,
+            content = @Content(schema = @Schema(implementation = ScimGroup.class)))
+        ScimGroup request
+    );
+
+    @Operation(summary = "Replace a group")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Group replaced",
+            content = @Content(schema = @Schema(implementation = ScimGroup.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Group not found", content = @Content)
+    })
+    ResponseEntity updateGroup(Long id, ScimGroup request);
+
+    @Operation(summary = "Patch a group", description = "Supports replacing the members list.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Group patched",
+            content = @Content(schema = @Schema(implementation = ScimGroup.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Group not found", content = @Content)
+    })
+    ResponseEntity patchGroup(Long id, ScimPatchRequest request);
+
+    @Operation(summary = "Delete a group")
+    @ApiResponses({
+        @ApiResponse(responseCode = "204", description = "Group deleted", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "403", description = "Built-in role template cannot be deleted", content = @Content),
+        @ApiResponse(responseCode = "404", description = "Group not found", content = @Content)
+    })
+    ResponseEntity deleteGroup(Long id);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/ScimUserControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/ScimUserControllerSpec.java
new file mode 100644
index 00000000..09d084a4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/ScimUserControllerSpec.java
@@ -0,0 +1,83 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.scim.ScimPatchRequest;
+import com.salkcoding.oswl.dto.scim.ScimUser;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.parameters.RequestBody;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.security.SecurityRequirement;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.http.ResponseEntity;
+
+@Tag(name = "SCIM 2.0 — Users", description = "User provisioning endpoints for SAML/SCIM identity providers.")
+@SecurityRequirement(name = "ScimBearerAuth")
+public interface ScimUserControllerSpec {
+
+    @Operation(summary = "Get a user by ID")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "User found",
+            content = @Content(schema = @Schema(implementation = ScimUser.class))),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "User not found", content = @Content)
+    })
+    ResponseEntity getUser(
+        @Parameter(description = "SCIM user ID", example = "2", required = true) Long id
+    );
+
+    @Operation(summary = "List users", description = "Returns a SCIM list response. Supports a simple `userName eq \"email\"` filter.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "User list returned", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content)
+    })
+    ResponseEntity listUsers(
+        @Parameter(description = "Optional filter, e.g. userName eq \"alice@example.com\"") String filter,
+        @Parameter(description = "1-based start index") int startIndex,
+        @Parameter(description = "Page size") int count
+    );
+
+    @Operation(summary = "Create a user")
+    @ApiResponses({
+        @ApiResponse(responseCode = "201", description = "User created",
+            content = @Content(schema = @Schema(implementation = ScimUser.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content)
+    })
+    ResponseEntity createUser(
+        @RequestBody(description = "SCIM user resource", required = true,
+            content = @Content(schema = @Schema(implementation = ScimUser.class)))
+        ScimUser request
+    );
+
+    @Operation(summary = "Replace a user")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "User replaced",
+            content = @Content(schema = @Schema(implementation = ScimUser.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "User not found", content = @Content)
+    })
+    ResponseEntity updateUser(Long id, ScimUser request);
+
+    @Operation(summary = "Patch a user", description = "Supports replacing the `active` status.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "User patched",
+            content = @Content(schema = @Schema(implementation = ScimUser.class))),
+        @ApiResponse(responseCode = "400", description = "Invalid request", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "404", description = "User not found", content = @Content)
+    })
+    ResponseEntity patchUser(Long id, ScimPatchRequest request);
+
+    @Operation(summary = "Deactivate a user", description = "Sets active=false. OsWL never deletes users via SCIM.")
+    @ApiResponses({
+        @ApiResponse(responseCode = "204", description = "User deactivated", content = @Content),
+        @ApiResponse(responseCode = "401", description = "Missing or invalid SCIM bearer token", content = @Content),
+        @ApiResponse(responseCode = "403", description = "System administrator cannot be deactivated", content = @Content),
+        @ApiResponse(responseCode = "404", description = "User not found", content = @Content)
+    })
+    ResponseEntity deleteUser(Long id);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/SearchControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/SearchControllerSpec.java
new file mode 100644
index 00000000..b76ea82e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/SearchControllerSpec.java
@@ -0,0 +1,32 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.search.GlobalSearchResponse;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import org.springframework.web.bind.annotation.RequestParam;
+
+@Tag(name = "Search", description = "Global search across projects, components, and CVE ids.")
+public interface SearchControllerSpec {
+
+    @Operation(summary = "Global search",
+        description = """
+            Unified search backing the keyboard palette. Matches projects by name, components by
+            library name, and CVEs by CVE id — all scoped to the projects the current user can
+            view (components and CVEs come from the latest completed scan of each accessible
+            project). Queries shorter than 2 characters after trimming return empty groups.
+            Each group is capped and carries a {@code hasMore} hint.
+            """)
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Grouped, capped search results",
+            content = @Content(schema = @Schema(implementation = GlobalSearchResponse.class))),
+        @ApiResponse(responseCode = "401", description = "Not authenticated", content = @Content)
+    })
+    GlobalSearchResponse search(
+        @Parameter(description = "Search text; minimum 2 characters after trimming")
+        @RequestParam(required = false) String q);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/SecurityCenterControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/SecurityCenterControllerSpec.java
index 12a0400a..c5db134a 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/SecurityCenterControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/SecurityCenterControllerSpec.java
@@ -46,6 +46,39 @@ String print(
         Model model
     );
 
+    @Hidden
+    String rows(
+        @PathVariable Long projectId,
+        @RequestParam Long scanId,
+        @RequestParam(required = false) String search,
+        @RequestParam(defaultValue = "false") boolean hideNonRuntime,
+        @RequestParam(defaultValue = "false") boolean reviewed,
+        @RequestParam(defaultValue = "false") boolean nonReviewed,
+        @RequestParam(defaultValue = "false") boolean ignored,
+        @RequestParam(defaultValue = "false") boolean nonIgnored,
+        @RequestParam(defaultValue = "false") boolean deferred,
+        @RequestParam(defaultValue = "false") boolean reachable,
+        @RequestParam(defaultValue = "false") boolean notReachable,
+        @RequestParam(defaultValue = "false") boolean unknownReachability,
+        @RequestParam(defaultValue = "false") boolean secCritical,
+        @RequestParam(defaultValue = "false") boolean secHigh,
+        @RequestParam(defaultValue = "false") boolean secMedium,
+        @RequestParam(defaultValue = "false") boolean secLow,
+        @RequestParam(defaultValue = "false") boolean secUnknown,
+        @RequestParam(defaultValue = "false") boolean licRestricted,
+        @RequestParam(defaultValue = "false") boolean licCaution,
+        @RequestParam(defaultValue = "false") boolean licUnknown,
+        @RequestParam(defaultValue = "false") boolean licPermitted,
+        @RequestParam(defaultValue = "false") boolean patchable,
+        @RequestParam(defaultValue = "false") boolean nonPatchable,
+        @RequestParam(defaultValue = "false") boolean patchDeprecated,
+        @RequestParam(defaultValue = "false") boolean patchOutdated,
+        @RequestParam(defaultValue = "false") boolean patchUpToDate,
+        @RequestParam(defaultValue = "risk") String sortMode,
+        @RequestParam(defaultValue = "0") int page,
+        Model model
+    );
+
     @Hidden
     String complianceReport(
         @PathVariable Long projectId,
@@ -89,4 +122,22 @@ ResponseEntity export(
         @Parameter(description = "Export format — only `csv` is supported", example = "csv")
         @RequestParam(defaultValue = "csv") String format
     );
+
+    @Operation(
+        summary = "Secret / IaC misconfiguration findings",
+        description = """
+            Lists secret and Terraform/Kubernetes/Dockerfile misconfiguration findings detected
+            during the Quick Import clone scan. Never includes the matched secret
+            value — only the rule id, file location, severity and a non-reversible fingerprint.
+            """
+    )
+    @ApiResponses({
+        @ApiResponse(responseCode = "200", description = "Findings for the resolved scan")
+    })
+    java.util.List findings(
+        @Parameter(description = "Project ID", example = "1", required = true)
+        @PathVariable Long projectId,
+        @Parameter(description = "Specific scan ID; omit for latest")
+        @RequestParam(required = false) Long scanId
+    );
 }
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/SnapshotAdminControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/SnapshotAdminControllerSpec.java
index 889295e6..fcfd1a4b 100644
--- a/src/main/java/com/salkcoding/oswl/controller/spec/SnapshotAdminControllerSpec.java
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/SnapshotAdminControllerSpec.java
@@ -1,8 +1,8 @@
 package com.salkcoding.oswl.controller.spec;
 
-import com.salkcoding.oswl.controller.SnapshotAdminController.SnapshotStatusResponse;
+import com.salkcoding.oswl.controller.snapshot.SnapshotAdminController.SnapshotStatusResponse;
 import com.salkcoding.oswl.dto.SnapshotImportFromPathRequest;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotImportResult;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotImportResult;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.Parameter;
 import io.swagger.v3.oas.annotations.media.Content;
@@ -21,9 +21,9 @@ public interface SnapshotAdminControllerSpec {
 
     @Operation(summary = "Snapshot store status",
         description = "Returns the air-gapped flag and, per source (osv, depsdev-version, depsdev-advisory, epss, kev), " +
-            "the number of stored records, when they were last imported, and (E1, when the source bundle carried v2 " +
+            "the number of stored records, when they were last imported, and (when the source bundle carried v2 " +
             "provenance) its bundleId/builtAt/sourceAsOf/origin — null for a source last imported from a v1 or meta-less bundle. " +
-            "Also returns (E7) the oldest sourceAsOf across all sources and the configured staleness-warn/critical-day " +
+            "Also returns the oldest sourceAsOf across all sources and the configured staleness-warn/critical-day " +
             "thresholds, so the admin UI can render the definition-freshness badge without hardcoding them.")
     @ApiResponses({
         @ApiResponse(responseCode = "200", description = "Store status",
@@ -37,7 +37,7 @@ Uploads a snapshot bundle (zip of JSONL files: `osv.jsonl`, `depsdev.jsonl`, `ep
             plus a `meta.json` — see the Offline VDB docs for the v2 schema) and updates the store contents for
             every source present in the bundle. `mode=replace` (default when the bundle carries no `meta.json`
             `mode` either) clears each source before writing; `mode=merge` upserts by key and honors a `"_deleted":true`
-            line as a delete (E2). A v2 bundle's checksums are verified before any store mutation — a mismatch
+            line as a delete. A v2 bundle's checksums are verified before any store mutation — a mismatch
             rejects the whole bundle and leaves the existing store untouched.
             With `oswl.airgapped.enabled=true`, OSV/deps.dev/EPSS/KEV lookups are then served
             from this store instead of live external APIs.
@@ -57,7 +57,7 @@ ResponseEntity importBundle(
 
     @Operation(summary = "Import an offline snapshot bundle already on the server's disk",
         description = """
-            E3: for large bundles where uploading through the browser is impractical. `path` is resolved under
+            for large bundles where uploading through the browser is impractical. `path` is resolved under
             `oswl.airgapped.import-dir` (a server-side whitelist — the endpoint returns 400 if that setting is
             blank, or if `path` resolves outside it). Same mode/checksum/merge semantics as the multipart upload.
             """
@@ -69,11 +69,11 @@ ResponseEntity importBundle(
     })
     ResponseEntity importFromPath(@RequestBody SnapshotImportFromPathRequest request);
 
-    @Operation(summary = "Export a wanted-list (E6)",
+    @Operation(summary = "Export a wanted-list",
         description = """
             Streams one JSONL line per distinct (ecosystem, name, version) this instance has ever
             scanned — `{"ecosystem":"NPM","name":"left-pad","version":"1.3.0"}` — for handing to the
-            `oswl-vdb build --wanted` CLI (E5) on an internet-connected machine, so it fetches only
+            `oswl-vdb build --wanted` CLI on an internet-connected machine, so it fetches only
             the components this instance actually uses instead of a full upstream mirror.
             Deliberately omits project names, repository URLs, and paths — only ecosystem/name/version
             leave the instance. Streamed directly from the database (no full in-memory list) so this
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/TeamControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/TeamControllerSpec.java
new file mode 100644
index 00000000..535e5e57
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/TeamControllerSpec.java
@@ -0,0 +1,157 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.TeamMemberDto;
+import com.salkcoding.oswl.dto.TeamSummaryDto;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import jakarta.validation.constraints.Size;
+import org.springframework.http.ResponseEntity;
+import org.springframework.ui.Model;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.RequestBody;
+
+import java.util.List;
+
+@Tag(name = "Teams", description = """
+        Organization → Team → Project hierarchy. Team membership grants access to every project
+        of the team (OR-ed with direct project membership). Teams nest at most two levels.
+        All endpoints require the TEAM_MANAGE permission or SYSTEM_ADMIN.
+        """)
+public interface TeamControllerSpec {
+
+    @Schema(description = "Create/update team request")
+    record TeamRequest(
+            @Schema(description = "Team name (unique within the organization)", example = "Payments")
+            @NotBlank(message = "Team name is required")
+            @Size(max = 200, message = "Team name must not exceed 200 characters")
+            String name,
+
+            @Schema(description = "Optional team description", example = "Payment platform services")
+            @Size(max = 1000, message = "Description must not exceed 1000 characters")
+            String description,
+
+            @Schema(description = "Parent team id — null for a top-level team (max two levels)", example = "3")
+            Long parentTeamId
+    ) {}
+
+    @Schema(description = "Add team member request")
+    record AddMemberRequest(
+            @Schema(description = "User id to add", example = "7")
+            @NotNull(message = "User is required")
+            Long userId,
+
+            @Schema(description = "Team role — LEAD or MEMBER (defaults to MEMBER)", example = "MEMBER")
+            String role
+    ) {}
+
+    @Schema(description = "Change team member role request")
+    record UpdateMemberRoleRequest(
+            @Schema(description = "New team role — LEAD or MEMBER", example = "LEAD")
+            @NotBlank(message = "Role is required")
+            String role
+    ) {}
+
+    @Schema(description = "Assign project to team request")
+    record AssignProjectRequest(
+            @Schema(description = "Project id to move into the team", example = "12")
+            @NotNull(message = "Project is required")
+            Long projectId
+    ) {}
+
+    @Schema(description = "Project row inside a team detail view")
+    record TeamProjectDto(
+            @Schema(description = "Project primary key", example = "12") Long id,
+            @Schema(description = "Project name", example = "acme/api-service") String name
+    ) {}
+
+    @Operation(summary = "Team management page",
+            description = "Renders the team hierarchy management UI (teams, members, project assignment).")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Team management page rendered",
+                    content = @Content(mediaType = "text/html")),
+            @ApiResponse(responseCode = "403", description = "Missing TEAM_MANAGE permission", content = @Content)
+    })
+    String index(Model model);
+
+    @Operation(summary = "List teams", description = "All teams with member/project counts, ordered by name.")
+    @ApiResponse(responseCode = "200", description = "Team list")
+    List listTeams();
+
+    @Operation(summary = "Create team")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Team created"),
+            @ApiResponse(responseCode = "400", description = "Validation failure or nesting deeper than two levels",
+                    content = @Content)
+    })
+    TeamSummaryDto createTeam(@RequestBody TeamRequest request);
+
+    @Operation(summary = "Update team", description = "Rename, re-describe or re-parent a team. The Default team cannot be renamed.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Team updated"),
+            @ApiResponse(responseCode = "404", description = "Team not found", content = @Content)
+    })
+    TeamSummaryDto updateTeam(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                              @RequestBody TeamRequest request);
+
+    @Operation(summary = "Delete team",
+            description = "Projects move to the Default team, child teams become top-level, memberships are removed.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "204", description = "Team deleted"),
+            @ApiResponse(responseCode = "404", description = "Team not found", content = @Content)
+    })
+    ResponseEntity deleteTeam(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId);
+
+    @Operation(summary = "User directory", description = "Enabled users (id, display name, email) for the member picker.")
+    @ApiResponse(responseCode = "200", description = "Enabled user list")
+    List userDirectory();
+
+    @Operation(summary = "List team members")
+    @ApiResponse(responseCode = "200", description = "Member list")
+    List listMembers(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId);
+
+    @Operation(summary = "Add team member", description = "Grants the user access to every project of the team.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Member added"),
+            @ApiResponse(responseCode = "404", description = "Team or user not found", content = @Content)
+    })
+    ResponseEntity addMember(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                                   @RequestBody AddMemberRequest request);
+
+    @Operation(summary = "Change team member role")
+    @ApiResponse(responseCode = "200", description = "Role updated")
+    ResponseEntity updateMemberRole(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                                          @Parameter(description = "User ID", required = true) @PathVariable Long userId,
+                                          @RequestBody UpdateMemberRoleRequest request);
+
+    @Operation(summary = "Remove team member",
+            description = "Revokes the team grant; direct project memberships of the user are unaffected.")
+    @ApiResponse(responseCode = "204", description = "Member removed")
+    ResponseEntity removeMember(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                                      @Parameter(description = "User ID", required = true) @PathVariable Long userId);
+
+    @Operation(summary = "List team projects", description = "Active projects currently assigned to the team.")
+    @ApiResponse(responseCode = "200", description = "Project list")
+    List listTeamProjects(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId);
+
+    @Operation(summary = "Assign project to team",
+            description = "Moves the project under the team — team members immediately gain access.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Project assigned"),
+            @ApiResponse(responseCode = "404", description = "Team or project not found", content = @Content)
+    })
+    ResponseEntity assignProject(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                                       @RequestBody AssignProjectRequest request);
+
+    @Operation(summary = "Remove project from team",
+            description = "Detaches the project from its team; direct project memberships keep working.")
+    @ApiResponse(responseCode = "204", description = "Project unassigned")
+    ResponseEntity unassignProject(@Parameter(description = "Team ID", required = true) @PathVariable Long teamId,
+                                         @Parameter(description = "Project ID", required = true) @PathVariable Long projectId);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/WebPushControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/WebPushControllerSpec.java
new file mode 100644
index 00000000..5476094b
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/WebPushControllerSpec.java
@@ -0,0 +1,8 @@
+package com.salkcoding.oswl.controller.spec;
+import com.salkcoding.oswl.dto.api.*;
+import io.swagger.v3.oas.annotations.Operation;
+public interface WebPushControllerSpec {
+    @Operation(summary="Read this account's browser subscriptions and public VAPID configuration") WebPushStatus status();
+    @Operation(summary="Subscribe or update this account's browser security alerts") Long subscribe(WebPushSubscriptionRequest request);
+    @Operation(summary="Remove an owned browser subscription and its queued deliveries") void unsubscribe(Long id);
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/spec/WebhookSettingControllerSpec.java b/src/main/java/com/salkcoding/oswl/controller/spec/WebhookSettingControllerSpec.java
new file mode 100644
index 00000000..04c4ebe0
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/spec/WebhookSettingControllerSpec.java
@@ -0,0 +1,71 @@
+package com.salkcoding.oswl.controller.spec;
+
+import com.salkcoding.oswl.dto.api.WebhookDeliveryDto;
+import com.salkcoding.oswl.dto.api.WebhookSettingResponse;
+import com.salkcoding.oswl.dto.api.WebhookSettingUpdateRequest;
+import com.salkcoding.oswl.dto.api.WebhookTestRequest;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.Parameter;
+import io.swagger.v3.oas.annotations.media.Content;
+import io.swagger.v3.oas.annotations.media.Schema;
+import io.swagger.v3.oas.annotations.parameters.RequestBody;
+import io.swagger.v3.oas.annotations.responses.ApiResponse;
+import io.swagger.v3.oas.annotations.responses.ApiResponses;
+import io.swagger.v3.oas.annotations.tags.Tag;
+import jakarta.validation.Valid;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.RequestParam;
+
+import java.util.List;
+import java.util.Map;
+
+@Tag(name = "Webhook Settings", description = "Configure Slack/Teams incoming webhook notifications and view delivery history.")
+public interface WebhookSettingControllerSpec {
+
+    @Operation(summary = "Get webhook settings",
+            description = "Returns the configured provider, event toggles, and whether a webhook URL is stored. The URL itself is never returned.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Webhook settings",
+                    content = @Content(schema = @Schema(implementation = WebhookSettingResponse.class)))
+    })
+    ResponseEntity getSettings();
+
+    @Operation(summary = "Save webhook settings",
+            description = "Upserts the single-row webhook settings. The URL is encrypted at rest. A blank URL keeps the existing URL.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "204", description = "Settings saved"),
+            @ApiResponse(responseCode = "400", description = "Invalid URL or validation error", content = @Content)
+    })
+    ResponseEntity saveSettings(
+            @RequestBody(description = "Webhook settings", required = true,
+                    content = @Content(schema = @Schema(implementation = WebhookSettingUpdateRequest.class)))
+            @Valid @org.springframework.web.bind.annotation.RequestBody WebhookSettingUpdateRequest request
+    );
+
+    @Operation(summary = "Test webhook URL",
+            description = "Sends a sample notification to the provided URL without saving it. Useful for validating connectivity before storing credentials.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "Test result",
+                    content = @Content(schema = @Schema(implementation = Map.class)))
+    })
+    ResponseEntity> testWebhook(
+            @RequestBody(description = "URL to test", required = true,
+                    content = @Content(schema = @Schema(implementation = WebhookTestRequest.class)))
+            @Valid @org.springframework.web.bind.annotation.RequestBody WebhookTestRequest request
+    );
+
+    @Operation(summary = "List recent webhook deliveries",
+            description = "Returns the most recent delivery attempts (success or failure) for the failure-history UI.")
+    @ApiResponses({
+            @ApiResponse(responseCode = "200", description = "List of deliveries",
+                    content = @Content(schema = @Schema(implementation = WebhookDeliveryDto.class)))
+    })
+    ResponseEntity> getDeliveries(
+            @Parameter(description = "Filter by event type")
+            @RequestParam(required = false) String eventType,
+            @Parameter(description = "Filter by status (SUCCESS or FAILED)")
+            @RequestParam(required = false) String status,
+            @Parameter(description = "Maximum number of rows", example = "50")
+            @RequestParam(defaultValue = "50") int limit
+    );
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/GitHubApiController.java b/src/main/java/com/salkcoding/oswl/controller/vcs/GitHubApiController.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/controller/GitHubApiController.java
rename to src/main/java/com/salkcoding/oswl/controller/vcs/GitHubApiController.java
index 26124da2..679f5d4e 100644
--- a/src/main/java/com/salkcoding/oswl/controller/GitHubApiController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/vcs/GitHubApiController.java
@@ -1,13 +1,13 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.vcs;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.controller.spec.GitHubApiControllerSpec;
 import com.salkcoding.oswl.dto.github.GitHubAccountDto;
 import com.salkcoding.oswl.dto.github.GitHubImportRequest;
 import com.salkcoding.oswl.dto.github.GitHubRepoDto;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.service.GitHubService;
-import com.salkcoding.oswl.service.ProjectService;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.service.vcs.GitHubService;
+import com.salkcoding.oswl.service.project.ProjectService;
 import com.salkcoding.oswl.service.SessionCipherService;
 import jakarta.servlet.http.HttpSession;
 import lombok.RequiredArgsConstructor;
diff --git a/src/main/java/com/salkcoding/oswl/controller/VcsBranchController.java b/src/main/java/com/salkcoding/oswl/controller/vcs/VcsBranchController.java
similarity index 91%
rename from src/main/java/com/salkcoding/oswl/controller/VcsBranchController.java
rename to src/main/java/com/salkcoding/oswl/controller/vcs/VcsBranchController.java
index 1c96905f..ee6d3073 100644
--- a/src/main/java/com/salkcoding/oswl/controller/VcsBranchController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/vcs/VcsBranchController.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.vcs;
 
 import com.salkcoding.oswl.auth.entity.UserVcsConnection;
 import com.salkcoding.oswl.auth.enums.VcsProvider;
@@ -6,13 +6,13 @@
 import com.salkcoding.oswl.auth.security.EncryptionService;
 import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
 import com.salkcoding.oswl.controller.spec.VcsBranchControllerSpec;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.service.GitHubService;
-import com.salkcoding.oswl.service.GitLabService;
-import com.salkcoding.oswl.service.BitbucketService;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.VcsAuthTokenService;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.service.vcs.GitHubService;
+import com.salkcoding.oswl.service.vcs.GitLabService;
+import com.salkcoding.oswl.service.vcs.BitbucketService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vcs.VcsAuthTokenService;
 import jakarta.servlet.http.HttpSession;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
diff --git a/src/main/java/com/salkcoding/oswl/controller/vulnerability/SavedViewController.java b/src/main/java/com/salkcoding/oswl/controller/vulnerability/SavedViewController.java
new file mode 100644
index 00000000..0a23a6c8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/controller/vulnerability/SavedViewController.java
@@ -0,0 +1,56 @@
+package com.salkcoding.oswl.controller.vulnerability;
+
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.controller.spec.SavedViewControllerSpec;
+import com.salkcoding.oswl.dto.SavedViewCreateRequest;
+import com.salkcoding.oswl.dto.SavedViewDto;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vulnerability.SavedViewService;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
+import org.springframework.security.core.annotation.AuthenticationPrincipal;
+import org.springframework.web.bind.annotation.*;
+
+import java.util.List;
+
+/** Saved Security Center filter/sort combinations, scoped per project. */
+@RestController
+@RequestMapping("/api/projects/{projectId}/saved-views")
+@PreAuthorize("hasPermission(null, 'SECURITY_CENTER_VIEW') or hasRole('SYSTEM_ADMIN')")
+@RequiredArgsConstructor
+public class SavedViewController implements SavedViewControllerSpec {
+
+    private final SavedViewService savedViewService;
+    private final ProjectAccessService projectAccessService;
+
+    @Override
+    @GetMapping
+    public List list(@PathVariable Long projectId,
+                                   @AuthenticationPrincipal OswlUserPrincipal principal) {
+        projectAccessService.assertCanViewProject(projectId);
+        return savedViewService.list(projectId, principal.getUserId());
+    }
+
+    @Override
+    @PostMapping
+    public ResponseEntity create(@PathVariable Long projectId,
+                                               @Valid @RequestBody SavedViewCreateRequest req,
+                                               @AuthenticationPrincipal OswlUserPrincipal principal) {
+        projectAccessService.assertCanViewProject(projectId);
+        SavedViewDto dto = savedViewService.create(
+                projectId, principal.getUserId(), principal.getDisplayName(), req);
+        return ResponseEntity.ok(dto);
+    }
+
+    @Override
+    @DeleteMapping("/{viewId}")
+    public ResponseEntity delete(@PathVariable Long projectId,
+                                       @PathVariable Long viewId,
+                                       @AuthenticationPrincipal OswlUserPrincipal principal) {
+        projectAccessService.assertCanViewProject(projectId);
+        savedViewService.delete(projectId, viewId, principal.getUserId());
+        return ResponseEntity.noContent().build();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/controller/SecurityCenterController.java b/src/main/java/com/salkcoding/oswl/controller/vulnerability/SecurityCenterController.java
similarity index 62%
rename from src/main/java/com/salkcoding/oswl/controller/SecurityCenterController.java
rename to src/main/java/com/salkcoding/oswl/controller/vulnerability/SecurityCenterController.java
index 690a5fab..80442325 100644
--- a/src/main/java/com/salkcoding/oswl/controller/SecurityCenterController.java
+++ b/src/main/java/com/salkcoding/oswl/controller/vulnerability/SecurityCenterController.java
@@ -1,18 +1,20 @@
-package com.salkcoding.oswl.controller;
+package com.salkcoding.oswl.controller.vulnerability;
 
 import com.salkcoding.oswl.controller.spec.SecurityCenterControllerSpec;
-import com.salkcoding.oswl.domain.entity.Project;
+import com.salkcoding.oswl.domain.entity.project.Project;
 import com.salkcoding.oswl.dto.BulkStatusRequest;
 import com.salkcoding.oswl.dto.ComplianceReportDto;
 import com.salkcoding.oswl.dto.CreatePrRequest;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.ComplianceReportService;
-import com.salkcoding.oswl.service.ComponentDetailService;
-import com.salkcoding.oswl.service.ProjectAccessService;
-import com.salkcoding.oswl.service.SecurityCenterService;
-import com.salkcoding.oswl.service.VcsAuthTokenService;
-import com.salkcoding.oswl.service.VulnerabilityEnrichmentService;
+import com.salkcoding.oswl.dto.scan.ScanFindingRowDto;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.reporting.ComplianceReportService;
+import com.salkcoding.oswl.service.reporting.ReportBrandingService;
+import com.salkcoding.oswl.service.scan.ComponentDetailService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vulnerability.SecurityCenterService;
+import com.salkcoding.oswl.service.vcs.VcsAuthTokenService;
+import com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService;
 import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import jakarta.servlet.http.HttpSession;
@@ -41,6 +43,7 @@ public class SecurityCenterController implements SecurityCenterControllerSpec {
 
     private final SecurityCenterService securityCenterService;
     private final ComplianceReportService complianceReportService;
+    private final ReportBrandingService reportBrandingService;
     private final ComponentDetailService componentDetailService;
     private final VcsAuthTokenService vcsAuthTokenService;
     private final ProjectRepository projectRepository;
@@ -58,11 +61,63 @@ public String index(@PathVariable Long projectId,
                         @RequestParam(required = false) Long scanId,
                         Model model) {
         projectAccessService.assertCanViewProject(projectId);
-        securityCenterService.populateModel(projectId, scanId, model);
+        securityCenterService.populateIndexModel(projectId, scanId, model);
         addDefinitionsAsOf(model);
         return "security-center/index";
     }
 
+    /**
+     * Filtered/sorted/paginated component rows — called by the filter panel, sort
+     * menu, search box, and "Load more" button after the initial page load, instead of shipping
+     * and client-side-hiding every component up front. Returns the same row markup the initial
+     * page uses so filter changes and pagination render identically either way.
+     */
+    @GetMapping("/rows")
+    public String rows(@PathVariable Long projectId,
+                       @RequestParam Long scanId,
+                       @RequestParam(required = false) String search,
+                       @RequestParam(defaultValue = "false") boolean hideNonRuntime,
+                       @RequestParam(defaultValue = "false") boolean reviewed,
+                       @RequestParam(defaultValue = "false") boolean nonReviewed,
+                       @RequestParam(defaultValue = "false") boolean ignored,
+                       @RequestParam(defaultValue = "false") boolean nonIgnored,
+                       @RequestParam(defaultValue = "false") boolean deferred,
+                       @RequestParam(defaultValue = "false") boolean reachable,
+                       @RequestParam(defaultValue = "false") boolean notReachable,
+                       @RequestParam(defaultValue = "false") boolean unknownReachability,
+                       @RequestParam(defaultValue = "false") boolean secCritical,
+                       @RequestParam(defaultValue = "false") boolean secHigh,
+                       @RequestParam(defaultValue = "false") boolean secMedium,
+                       @RequestParam(defaultValue = "false") boolean secLow,
+                       @RequestParam(defaultValue = "false") boolean secUnknown,
+                       @RequestParam(defaultValue = "false") boolean licRestricted,
+                       @RequestParam(defaultValue = "false") boolean licCaution,
+                       @RequestParam(defaultValue = "false") boolean licUnknown,
+                       @RequestParam(defaultValue = "false") boolean licPermitted,
+                       @RequestParam(defaultValue = "false") boolean patchable,
+                       @RequestParam(defaultValue = "false") boolean nonPatchable,
+                       @RequestParam(defaultValue = "false") boolean patchDeprecated,
+                       @RequestParam(defaultValue = "false") boolean patchOutdated,
+                       @RequestParam(defaultValue = "false") boolean patchUpToDate,
+                       @RequestParam(defaultValue = "risk") String sortMode,
+                       @RequestParam(defaultValue = "0") int page,
+                       Model model) {
+        projectAccessService.assertCanViewProject(projectId);
+        com.salkcoding.oswl.dto.SecurityCenterRowFilterParams params = new com.salkcoding.oswl.dto.SecurityCenterRowFilterParams(
+                search, hideNonRuntime, reviewed, nonReviewed, ignored, nonIgnored, deferred,
+                reachable, notReachable, unknownReachability,
+                secCritical, secHigh, secMedium, secLow, secUnknown,
+                licRestricted, licCaution, licUnknown, licPermitted,
+                patchable, nonPatchable, patchDeprecated, patchOutdated, patchUpToDate,
+                sortMode);
+        var result = securityCenterService.queryRows(projectId, scanId, params, page);
+        model.addAttribute("components", result.getContent());
+        model.addAttribute("totalComponentCount", result.getTotalElements());
+        model.addAttribute("hasMoreComponents", result.hasNext());
+        model.addAttribute("projectId", projectId);
+        return "security-center/fragments/table :: rows";
+    }
+
     @GetMapping("/print")
     @PreAuthorize("hasPermission(null, 'SECURITY_CENTER_EXPORT') or hasRole('SYSTEM_ADMIN')")
     public String print(@PathVariable Long projectId,
@@ -112,13 +167,14 @@ public String complianceReport(@PathVariable Long projectId, Model model) {
         ComplianceReportDto report = complianceReportService.build(projectId);
         model.addAttribute("report", report);
         model.addAttribute("projectId", projectId);
+        model.addAttribute("branding", reportBrandingService.getSettings());
         addDefinitionsAsOf(model);
         auditLogService.log("COMPLIANCE_REPORT.VIEW", "PROJECT", projectId.toString(), null, null);
         return "reports/compliance-report";
     }
 
     /**
-     * E7: in air-gapped mode, results were analyzed against snapshot definitions as of
+     * In air-gapped mode, results were analyzed against snapshot definitions as of
      * {@link AirgappedSnapshotService#oldestSourceAsOf()}; the pages/reports show that date so
      * auditors can see how fresh the underlying data was. Not added outside air-gapped mode or
      * when no source has provenance yet (attribute stays absent, templates render nothing).
@@ -165,6 +221,15 @@ public ResponseEntity> refreshInsights(@PathVariable Long pr
         return ResponseEntity.ok(Map.of("success", true));
     }
 
+    /** Secret/IaC misconfiguration findings from the Quick Import clone scan. */
+    @GetMapping("/findings")
+    @ResponseBody
+    public java.util.List findings(
+            @PathVariable Long projectId, @RequestParam(required = false) Long scanId) {
+        projectAccessService.assertCanViewProject(projectId);
+        return securityCenterService.findings(projectId, scanId);
+    }
+
     @GetMapping("/export")
     @PreAuthorize("hasPermission(null, 'SECURITY_CENTER_EXPORT') or hasRole('SYSTEM_ADMIN')")
     @ResponseBody
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/AiDailyUsage.java b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiDailyUsage.java
similarity index 75%
rename from src/main/java/com/salkcoding/oswl/domain/entity/AiDailyUsage.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/ai/AiDailyUsage.java
index 54f293ee..54ff93ce 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/AiDailyUsage.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiDailyUsage.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.ai;
 
 import com.salkcoding.oswl.domain.enums.AiProvider;
 import jakarta.persistence.*;
@@ -46,6 +46,15 @@ public class AiDailyUsage {
     @Builder.Default
     private BigDecimal estimatedCostUsd = BigDecimal.ZERO;
 
+    /** Context-hash cache outcomes at item level (CVE/license), not per API call. */
+    @Column(name = "cache_hits", nullable = false)
+    @Builder.Default
+    private int cacheHits = 0;
+
+    @Column(name = "cache_misses", nullable = false)
+    @Builder.Default
+    private int cacheMisses = 0;
+
     public void increment() {
         this.callCount++;
     }
@@ -57,4 +66,10 @@ public void accumulateUsage(int promptTokens, int completionTokens, BigDecimal c
         this.totalTokens += promptTokens + completionTokens;
         this.estimatedCostUsd = this.estimatedCostUsd.add(costUsd);
     }
+
+    /** Counts items served from the context-hash cache vs items that needed an AI call. */
+    public void accumulateCacheOutcomes(int hits, int misses) {
+        this.cacheHits += hits;
+        this.cacheMisses += misses;
+    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/AiPreferences.java b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiPreferences.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/domain/entity/AiPreferences.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/ai/AiPreferences.java
index b68b8cd8..580065d2 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/AiPreferences.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiPreferences.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.ai;
 
 import com.salkcoding.oswl.domain.enums.AiEffort;
 import com.salkcoding.oswl.domain.enums.DeploymentProfile;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/AiSetting.java b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiSetting.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/domain/entity/AiSetting.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/ai/AiSetting.java
index 7b1c5b44..ed806170 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/AiSetting.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiSetting.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.ai;
 
 import com.salkcoding.oswl.domain.enums.AiProvider;
 import jakarta.persistence.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/AiUsageEvent.java b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiUsageEvent.java
similarity index 97%
rename from src/main/java/com/salkcoding/oswl/domain/entity/AiUsageEvent.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/ai/AiUsageEvent.java
index 44edb8db..3e3d2fb6 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/AiUsageEvent.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/ai/AiUsageEvent.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.ai;
 
 import com.salkcoding.oswl.domain.enums.AiProvider;
 import jakarta.persistence.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/ApiKey.java b/src/main/java/com/salkcoding/oswl/domain/entity/apikey/ApiKey.java
similarity index 78%
rename from src/main/java/com/salkcoding/oswl/domain/entity/ApiKey.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/apikey/ApiKey.java
index fd93b496..75fce9b5 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/ApiKey.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/apikey/ApiKey.java
@@ -1,5 +1,7 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.apikey;
 
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.enums.ApiKeyScope;
 import jakarta.persistence.*;
 import lombok.*;
 import org.hibernate.annotations.CreationTimestamp;
@@ -23,7 +25,7 @@ public class ApiKey {
     @GeneratedValue(strategy = GenerationType.IDENTITY)
     private Long id;
 
-    /** First {@link com.salkcoding.oswl.service.ApiKeyTokenSupport#PREFIX_LENGTH} chars of the token for lookup */
+    /** First {@link com.salkcoding.oswl.service.apikey.ApiKeyTokenSupport#PREFIX_LENGTH} chars of the token for lookup */
     @Column(name = "token_prefix", nullable = false, unique = true, length = 20)
     private String tokenPrefix;
 
@@ -34,6 +36,11 @@ public class ApiKey {
     @Column(length = 200)
     private String label;
 
+    @Enumerated(EnumType.STRING)
+    @Column(name = "scope", nullable = false, length = 20)
+    @Builder.Default
+    private ApiKeyScope scope = ApiKeyScope.PROJECT;
+
     @Column(name = "is_active", nullable = false)
     @Builder.Default
     private boolean active = true;
@@ -51,8 +58,8 @@ public class ApiKey {
     @Column(name = "created_at", updatable = false)
     private LocalDateTime createdAt;
 
-    @ManyToOne(fetch = FetchType.LAZY, optional = false)
-    @JoinColumn(name = "project_id", nullable = false)
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "project_id")
     private Project project;
 
     public void revoke() {
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/config/CacheInvalidation.java b/src/main/java/com/salkcoding/oswl/domain/entity/config/CacheInvalidation.java
new file mode 100644
index 00000000..7975cae1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/config/CacheInvalidation.java
@@ -0,0 +1,38 @@
+package com.salkcoding.oswl.domain.entity.config;
+
+import jakarta.persistence.Column;
+import jakarta.persistence.Entity;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+import lombok.AccessLevel;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+import java.time.LocalDateTime;
+
+/**
+ * One row per logical JVM-local (Caffeine) cache. The owning service bumps {@code version}
+ * in the same transaction as a settings mutation; every instance polls this table
+ * (see {@code CacheInvalidationPoller}) and evicts its local cache on a version change,
+ * propagating invalidations across instances without extra infrastructure.
+ */
+@Entity
+@Table(name = "cache_invalidation")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@AllArgsConstructor
+@Builder
+public class CacheInvalidation {
+
+    @Id
+    @Column(name = "cache_name", length = 100)
+    private String cacheName;
+
+    @Column(name = "version", nullable = false)
+    private long version;
+
+    @Column(name = "updated_at", nullable = false)
+    private LocalDateTime updatedAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/JiraSetting.java b/src/main/java/com/salkcoding/oswl/domain/entity/jira/JiraSetting.java
similarity index 95%
rename from src/main/java/com/salkcoding/oswl/domain/entity/JiraSetting.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/jira/JiraSetting.java
index c6496dd9..1338cc5c 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/JiraSetting.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/jira/JiraSetting.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.jira;
 
 import jakarta.persistence.*;
 import lombok.*;
@@ -7,7 +7,7 @@
 import java.time.LocalDateTime;
 
 /**
- * Single-row Jira integration settings (roadmap #10).
+ * Single-row Jira integration settings.
  * When enabled, triage actions can create Jira issues for a component's vulnerabilities.
  * The API token is stored AES-256-GCM encrypted (same as VCS tokens / mail password).
  */
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/LicensePolicyEntry.java b/src/main/java/com/salkcoding/oswl/domain/entity/license/LicensePolicyEntry.java
similarity index 97%
rename from src/main/java/com/salkcoding/oswl/domain/entity/LicensePolicyEntry.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/license/LicensePolicyEntry.java
index 5d614f96..03bdf845 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/LicensePolicyEntry.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/license/LicensePolicyEntry.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.license;
 
 import com.salkcoding.oswl.domain.enums.LicenseStatus;
 import jakarta.persistence.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushDelivery.java b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushDelivery.java
new file mode 100644
index 00000000..beab2329
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushDelivery.java
@@ -0,0 +1,18 @@
+package com.salkcoding.oswl.domain.entity.notification;
+import jakarta.persistence.*;
+import lombok.*;
+import java.time.LocalDateTime;
+@Entity @Table(name="web_push_deliveries",uniqueConstraints=@UniqueConstraint(columnNames={"subscription_id","event_key"}))
+@Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor
+public class WebPushDelivery {
+    @Id @GeneratedValue(strategy=GenerationType.IDENTITY) private Long id;
+    @Column(name="subscription_id",nullable=false) private Long subscriptionId;
+    @Column(name="project_id",nullable=false) private Long projectId;
+    @Column(name="event_key",nullable=false,length=100) private String eventKey;
+    @Column(name="event_type",nullable=false,length=20) private String eventType;
+    @Column(nullable=false) private int attempts;
+    @Column(nullable=false) private boolean finished;
+    @Column(name="next_attempt",nullable=false) private LocalDateTime nextAttempt;
+    @Column(name="expires_at",nullable=false) private LocalDateTime expiresAt;
+    @Column(name="last_status") private Integer lastStatus;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushSubscription.java b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushSubscription.java
new file mode 100644
index 00000000..8f5a3b4d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebPushSubscription.java
@@ -0,0 +1,13 @@
+package com.salkcoding.oswl.domain.entity.notification;
+import jakarta.persistence.*;
+import lombok.*;
+import java.time.LocalDateTime;
+@Entity @Table(name="web_push_subscriptions", uniqueConstraints=@UniqueConstraint(columnNames="endpoint_hash"))
+@Getter @Setter @Builder @NoArgsConstructor @AllArgsConstructor
+public class WebPushSubscription {
+    @Id @GeneratedValue(strategy=GenerationType.IDENTITY) private Long id;
+    @Column(name="user_id",nullable=false) private Long userId;
+    @Column(name="endpoint_hash",nullable=false,length=64) private String endpointHash;
+    @Column(name="encrypted_subscription",nullable=false,columnDefinition="TEXT") private String encryptedSubscription;
+    @Column(name="expires_at",nullable=false) private LocalDateTime expiresAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookDelivery.java b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookDelivery.java
new file mode 100644
index 00000000..1939cf0d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookDelivery.java
@@ -0,0 +1,66 @@
+package com.salkcoding.oswl.domain.entity.notification;
+
+import com.salkcoding.oswl.domain.enums.WebhookDeliveryStatus;
+import com.salkcoding.oswl.domain.enums.WebhookEventType;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * One recorded webhook delivery attempt. Retries create separate rows so the
+ * full history is visible in the settings UI.
+ */
+@Entity
+@Table(name = "webhook_deliveries",
+        indexes = {
+                @Index(name = "idx_webhook_deliveries_created_at", columnList = "created_at DESC"),
+                @Index(name = "idx_webhook_deliveries_status", columnList = "status"),
+                @Index(name = "idx_webhook_deliveries_event_type", columnList = "event_type")
+        })
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class WebhookDelivery {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Enumerated(EnumType.STRING)
+    @Column(name = "event_type", nullable = false, length = 30)
+    private WebhookEventType eventType;
+
+    @Column(name = "project_id")
+    private Long projectId;
+
+    @Column(name = "project_name", length = 160)
+    private String projectName;
+
+    /** Optional scan/component/gate identifier for context. */
+    @Column(name = "reference_id", length = 40)
+    private String referenceId;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 20)
+    private WebhookDeliveryStatus status;
+
+    @Column(name = "http_status")
+    private Integer httpStatus;
+
+    @Column(name = "error_message", length = 500)
+    private String errorMessage;
+
+    @Column(name = "retry_count", nullable = false)
+    @Builder.Default
+    private int retryCount = 0;
+
+    @Column(name = "payload_summary", length = 500)
+    private String payloadSummary;
+
+    @CreationTimestamp
+    @Column(name = "created_at", nullable = false, updatable = false)
+    private LocalDateTime createdAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookSetting.java b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookSetting.java
new file mode 100644
index 00000000..cb412b0c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/notification/WebhookSetting.java
@@ -0,0 +1,81 @@
+package com.salkcoding.oswl.domain.entity.notification;
+
+import com.salkcoding.oswl.domain.enums.WebhookProvider;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * Single-row Slack/Teams incoming webhook settings.
+ * The webhook URL is stored AES-256-GCM encrypted by the service layer.
+ */
+@Entity
+@Table(name = "webhook_settings")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class WebhookSetting {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 20)
+    private WebhookProvider provider;
+
+    /** Encrypted incoming webhook URL. */
+    @Column(name = "webhook_url", length = 1000)
+    private String webhookUrl;
+
+    @Column(nullable = false)
+    @Builder.Default
+    private boolean enabled = false;
+
+    @Column(name = "notify_new_cve", nullable = false)
+    @Builder.Default
+    private boolean notifyNewCve = true;
+
+    @Column(name = "notify_gate_failure", nullable = false)
+    @Builder.Default
+    private boolean notifyGateFailure = true;
+
+    @Column(name = "notify_scan_failure", nullable = false)
+    @Builder.Default
+    private boolean notifyScanFailure = true;
+
+    @Column(name = "notify_waiver_expiry", nullable = false)
+    @Builder.Default
+    private boolean notifyWaiverExpiry = true;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    @UpdateTimestamp
+    @Column(name = "updated_at")
+    private LocalDateTime updatedAt;
+
+    public void update(WebhookProvider provider, String webhookUrl,
+                       boolean enabled, boolean notifyNewCve,
+                       boolean notifyGateFailure, boolean notifyScanFailure,
+                       boolean notifyWaiverExpiry) {
+        this.provider = provider;
+        if (webhookUrl != null) {
+            this.webhookUrl = webhookUrl;
+        }
+        this.enabled = enabled;
+        this.notifyNewCve = notifyNewCve;
+        this.notifyGateFailure = notifyGateFailure;
+        this.notifyScanFailure = notifyScanFailure;
+        this.notifyWaiverExpiry = notifyWaiverExpiry;
+    }
+
+    public boolean isConfigured() {
+        return enabled && webhookUrl != null && !webhookUrl.isBlank();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/org/Organization.java b/src/main/java/com/salkcoding/oswl/domain/entity/org/Organization.java
new file mode 100644
index 00000000..aee5bd36
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/org/Organization.java
@@ -0,0 +1,39 @@
+package com.salkcoding.oswl.domain.entity.org;
+
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * The organization that owns all teams and projects.
+ *
+ * OsWL currently runs as a single-organization deployment: exactly one row exists,
+ * created by the schema migration or by {@code TeamBootstrapRunner} on first boot.
+ * The entity still exists as a real table so a future multi-org rollout is a data
+ * change, not a schema change.
+ */
+@Entity
+@Table(name = "organizations")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class Organization {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Column(nullable = false, length = 200)
+    private String name;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    public void rename(String name) {
+        this.name = name;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/org/Team.java b/src/main/java/com/salkcoding/oswl/domain/entity/org/Team.java
new file mode 100644
index 00000000..1666ccc8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/org/Team.java
@@ -0,0 +1,62 @@
+package com.salkcoding.oswl.domain.entity.org;
+
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * A team inside the organization. Teams group projects so access can be granted
+ * once per team instead of once per project (see {@code TeamMember}).
+ *
+ * A team may have one parent team ({@code parent_team_id}); nesting is limited to
+ * two levels — a team that already has a parent cannot be used as a parent.
+ * Depth is enforced by {@code TeamService}, not by the schema.
+ */
+@Entity
+@Table(name = "teams",
+        uniqueConstraints = @UniqueConstraint(
+                name = "uq_teams_org_name",
+                columnNames = {"organization_id", "name"}
+        ))
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class Team {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "organization_id", nullable = false)
+    private Organization organization;
+
+    @Column(nullable = false, length = 200)
+    private String name;
+
+    @Column(length = 1000)
+    private String description;
+
+    /** Optional parent team. Null = top-level team. Max two levels total. */
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "parent_team_id")
+    private Team parent;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    public void update(String name, String description, Team parent) {
+        this.name = name;
+        this.description = description;
+        this.parent = parent;
+    }
+
+    /** Detaches this team from its parent (used when the parent team is deleted). */
+    public void clearParent() {
+        this.parent = null;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/org/TeamMember.java b/src/main/java/com/salkcoding/oswl/domain/entity/org/TeamMember.java
new file mode 100644
index 00000000..d12479cd
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/org/TeamMember.java
@@ -0,0 +1,51 @@
+package com.salkcoding.oswl.domain.entity.org;
+
+import com.salkcoding.oswl.domain.enums.TeamMemberRole;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * Team membership. Any role grants access to all projects assigned to the team —
+ * combined with a direct {@link ProjectMember} row by OR in {@code ProjectAccessService},
+ * so existing per-project grants keep working unchanged.
+ */
+@Entity
+@Table(name = "team_members",
+        uniqueConstraints = @UniqueConstraint(
+                name = "uq_team_members_team_user",
+                columnNames = {"team_id", "user_id"}
+        ),
+        indexes = @Index(name = "idx_team_members_user_id", columnList = "user_id"))
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class TeamMember {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "team_id", nullable = false)
+    private Team team;
+
+    @Column(name = "user_id", nullable = false)
+    private Long userId;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 20)
+    @Builder.Default
+    private TeamMemberRole role = TeamMemberRole.MEMBER;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    public void changeRole(TeamMemberRole role) {
+        this.role = role;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/policy/Policy.java b/src/main/java/com/salkcoding/oswl/domain/entity/policy/Policy.java
new file mode 100644
index 00000000..056ed423
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/policy/Policy.java
@@ -0,0 +1,118 @@
+package com.salkcoding.oswl.domain.entity.policy;
+
+import com.salkcoding.oswl.domain.entity.org.Organization;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.enums.PolicyScopeType;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * Policy-as-Code row for the security gate. Policies are attached to exactly one scope
+ * (organization, team, or project) and compose hierarchically: organization → team → project.
+ * A locked policy prevents lower levels from overriding the fields it defines.
+ */
+@Entity
+@Table(name = "policies",
+        uniqueConstraints = {
+                @UniqueConstraint(name = "uq_policies_organization", columnNames = {"organization_id"}),
+                @UniqueConstraint(name = "uq_policies_team", columnNames = {"team_id"}),
+                @UniqueConstraint(name = "uq_policies_project", columnNames = {"project_id"})
+        },
+        indexes = {
+                @Index(name = "idx_policies_scope", columnList = "scope")
+        })
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder(toBuilder = true)
+@AllArgsConstructor
+public class Policy {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 20)
+    private PolicyScopeType scope;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "organization_id")
+    private Organization organization;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "team_id")
+    private Team team;
+
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "project_id")
+    private Project project;
+
+    @Column(nullable = false, length = 200)
+    private String name;
+
+    @Column(length = 1000)
+    private String description;
+
+    @Column(nullable = false)
+    @Builder.Default
+    private boolean locked = false;
+
+    @Column(nullable = false)
+    @Builder.Default
+    private boolean enabled = true;
+
+    @Column(name = "fail_on_severity", length = 20)
+    private String failOnSeverity;
+
+    @Column(name = "fail_on_kev")
+    private Boolean failOnKev;
+
+    @Column(name = "fail_on_epss")
+    private Double failOnEpss;
+
+    @Column(name = "fail_on_license_violation")
+    private Boolean failOnLicenseViolation;
+
+    @Column(name = "only_new")
+    private Boolean onlyNew;
+
+    @Column(name = "only_reachable")
+    private Boolean onlyReachable;
+
+    @Column(name = "fail_on_secrets")
+    private Boolean failOnSecrets;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    @UpdateTimestamp
+    @Column(name = "updated_at")
+    private LocalDateTime updatedAt;
+
+    public void update(String name, String description, boolean locked, boolean enabled,
+                       String failOnSeverity, Boolean failOnKev, Double failOnEpss,
+                       Boolean failOnLicenseViolation, Boolean onlyNew,
+                       Boolean onlyReachable, Boolean failOnSecrets) {
+        this.name = name;
+        this.description = description;
+        this.locked = locked;
+        this.enabled = enabled;
+        this.failOnSeverity = failOnSeverity;
+        this.failOnKev = failOnKev;
+        this.failOnEpss = failOnEpss;
+        this.failOnLicenseViolation = failOnLicenseViolation;
+        this.onlyNew = onlyNew;
+        this.onlyReachable = onlyReachable;
+        this.failOnSecrets = failOnSecrets;
+    }
+
+    public void setEnabled(boolean enabled) {
+        this.enabled = enabled;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/policy/PolicyException.java b/src/main/java/com/salkcoding/oswl/domain/entity/policy/PolicyException.java
new file mode 100644
index 00000000..272b7512
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/policy/PolicyException.java
@@ -0,0 +1,115 @@
+package com.salkcoding.oswl.domain.entity.policy;
+
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionStatus;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionTargetType;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+import org.hibernate.annotations.UpdateTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * A requested, approved, revoked, or expired waiver for a specific gate finding
+ * (or an entire component). Approved exceptions suppress matching violations
+ * during gate evaluation until they expire.
+ */
+@Entity
+@Table(name = "policy_exceptions",
+        indexes = {
+                @Index(name = "idx_policy_exceptions_project_status",
+                        columnList = "project_id, status"),
+                @Index(name = "idx_policy_exceptions_status_expiry",
+                        columnList = "status, expiry")
+        })
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class PolicyException {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "project_id", nullable = false)
+    private Project project;
+
+    @Column(name = "requester_user_id", nullable = false)
+    private Long requesterUserId;
+
+    @Column(name = "requester_name", length = 100)
+    private String requesterName;
+
+    @Column(name = "approver_user_id")
+    private Long approverUserId;
+
+    @Column(name = "approver_name", length = 100)
+    private String approverName;
+
+    @Column(nullable = false, length = 1000)
+    private String reason;
+
+    @Column(nullable = false)
+    private LocalDateTime expiry;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 20)
+    @Builder.Default
+    private PolicyExceptionStatus status = PolicyExceptionStatus.PENDING;
+
+    @Enumerated(EnumType.STRING)
+    @Column(name = "target_type", nullable = false, length = 20)
+    @Builder.Default
+    private PolicyExceptionTargetType targetType = PolicyExceptionTargetType.ALL;
+
+    @Column(name = "target_id", length = 200)
+    private String targetId;
+
+    @Column(name = "component_coordinate", length = 300)
+    private String componentCoordinate;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+
+    @UpdateTimestamp
+    @Column(name = "updated_at")
+    private LocalDateTime updatedAt;
+
+    @Column(name = "approved_at")
+    private LocalDateTime approvedAt;
+
+    @Column(name = "revoked_at")
+    private LocalDateTime revokedAt;
+
+    public void approve(Long approverUserId, String approverName) {
+        if (this.status != PolicyExceptionStatus.PENDING) {
+            throw new IllegalStateException("Only pending exceptions can be approved.");
+        }
+        this.status = PolicyExceptionStatus.APPROVED;
+        this.approverUserId = approverUserId;
+        this.approverName = approverName;
+        this.approvedAt = LocalDateTime.now();
+    }
+
+    public void revoke() {
+        if (this.status == PolicyExceptionStatus.EXPIRED) {
+            throw new IllegalStateException("Expired exceptions cannot be revoked.");
+        }
+        this.status = PolicyExceptionStatus.REVOKED;
+        this.revokedAt = LocalDateTime.now();
+    }
+
+    public void expire() {
+        if (this.status == PolicyExceptionStatus.APPROVED) {
+            this.status = PolicyExceptionStatus.EXPIRED;
+        }
+    }
+
+    public boolean isApproved() {
+        return this.status == PolicyExceptionStatus.APPROVED;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/Project.java b/src/main/java/com/salkcoding/oswl/domain/entity/project/Project.java
similarity index 71%
rename from src/main/java/com/salkcoding/oswl/domain/entity/Project.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/project/Project.java
index 8249ea80..1edf74fc 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/Project.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/project/Project.java
@@ -1,6 +1,9 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.project;
 
 import com.salkcoding.oswl.auth.enums.VcsProvider;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.DeploymentProfile;
 import jakarta.persistence.*;
 import lombok.*;
@@ -25,7 +28,13 @@
         uniqueConstraints = @UniqueConstraint(
                 name = "uq_projects_github_repo",
                 columnNames = {"github_repo"}
-        ))
+        ),
+        indexes = {
+                // Project list, trash, and auto-cleanup queries all filter on deleted_at.
+                @Index(name = "idx_projects_deleted_at", columnList = "deleted_at"),
+                // Team-scoped listing + team detail view.
+                @Index(name = "idx_projects_team_id", columnList = "team_id")
+        })  
 @Getter
 @NoArgsConstructor(access = AccessLevel.PROTECTED)
 @Builder
@@ -85,6 +94,19 @@ public class Project {
     @Column(name = "deployment_profile", length = 40)
     private DeploymentProfile deploymentProfile;
 
+    /**
+     * The team that owns this project. Membership of this team grants access to the project
+     * (combined with direct {@link ProjectMember} rows by OR in {@code ProjectAccessService}).
+     * Existing projects are folded into the "Default" team by the schema migration.
+     */
+    @ManyToOne(fetch = FetchType.LAZY)
+    @JoinColumn(name = "team_id")
+    private Team team;
+
+    /** Free-form comma-separated labels for filtering on the project list (e.g. "backend,pci"). */
+    @Column(name = "tags", length = 500)
+    private String tags;
+
     @CreationTimestamp
     @Column(name = "created_at", updatable = false)
     private LocalDateTime createdAt;
@@ -139,4 +161,30 @@ public void restore() {
     public void updateDeploymentProfile(DeploymentProfile profile) {
         this.deploymentProfile = profile;
     }
+
+    public void assignTeam(Team team) {
+        this.team = team;
+    }
+
+    public void updateTags(String tags) {
+        this.tags = tags;
+    }
+
+    /**
+     * Tags as a normalized list (trimmed, blanks dropped) for display and filtering.
+     * The raw comma-separated form stays in {@link #tags}.
+     */
+    public List tagList() {
+        if (tags == null || tags.isBlank()) {
+            return List.of();
+        }
+        List result = new ArrayList<>();
+        for (String tag : tags.split(",")) {
+            String trimmed = tag.trim();
+            if (!trimmed.isEmpty()) {
+                result.add(trimmed);
+            }
+        }
+        return result;
+    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/ProjectMember.java b/src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectMember.java
similarity index 95%
rename from src/main/java/com/salkcoding/oswl/domain/entity/ProjectMember.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectMember.java
index 8f3885bf..bed7d25e 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/ProjectMember.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectMember.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.project;
 
 import com.salkcoding.oswl.domain.enums.ProjectMemberRole;
 import jakarta.persistence.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/ProjectVersion.java b/src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectVersion.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/domain/entity/ProjectVersion.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectVersion.java
index 9fbfaf1d..c98b8a5d 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/ProjectVersion.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/project/ProjectVersion.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.project;
 
 import com.salkcoding.oswl.domain.enums.ImportSource;
 import jakarta.persistence.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/reporting/ReportBrandingSettings.java b/src/main/java/com/salkcoding/oswl/domain/entity/reporting/ReportBrandingSettings.java
new file mode 100644
index 00000000..ea6ac245
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/reporting/ReportBrandingSettings.java
@@ -0,0 +1,60 @@
+package com.salkcoding.oswl.domain.entity.reporting;
+
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.UpdateTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * Single-row branding settings applied to printable reports (compliance report today,
+ * any future printable report later). Logo is stored as a data URI rather than a file
+ * path — small enough (SVG/PNG logos are typically well under 100KB) that a dedicated
+ * upload/storage path would be more machinery than the feature needs.
+ */
+@Entity
+@Table(name = "report_branding_settings")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class ReportBrandingSettings {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @Column(name = "company_name", length = 150)
+    private String companyName;
+
+    /** "data:image/png;base64,..." — null falls back to the default OsWL logo. */
+    @Column(name = "logo_data_uri", columnDefinition = "TEXT")
+    private String logoDataUri;
+
+    /** Custom header/disclaimer line shown under the report title. Null = OsWL default. */
+    @Column(name = "header_text", length = 300)
+    private String headerText;
+
+    @Column(name = "show_cover_page", nullable = false)
+    @Builder.Default
+    private boolean showCoverPage = false;
+
+    @UpdateTimestamp
+    @Column(name = "updated_at")
+    private LocalDateTime updatedAt;
+
+    public void update(String companyName, String logoDataUri, String headerText, boolean showCoverPage) {
+        this.companyName = blankToNull(companyName);
+        // A null logoDataUri from the client means "leave as-is" (the branding form doesn't
+        // re-submit the current logo); an explicit empty string means "remove the logo".
+        if (logoDataUri != null) {
+            this.logoDataUri = logoDataUri.isBlank() ? null : logoDataUri;
+        }
+        this.headerText = blankToNull(headerText);
+        this.showCoverPage = showCoverPage;
+    }
+
+    private static String blankToNull(String s) {
+        return (s == null || s.isBlank()) ? null : s.strip();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/scan/CustomRuleConfiguration.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/CustomRuleConfiguration.java
new file mode 100644
index 00000000..423660da
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/CustomRuleConfiguration.java
@@ -0,0 +1,19 @@
+package com.salkcoding.oswl.domain.entity.scan;
+
+import jakarta.persistence.*;
+import lombok.*;
+
+@Entity
+@Table(name = "custom_scan_rules")
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class CustomRuleConfiguration {
+    @Id private Long id;
+    @Version private Long revision;
+    @Column(name = "rules_json", nullable = false, columnDefinition = "TEXT")
+    private String rulesJson;
+    public static CustomRuleConfiguration create(String json) {
+        var config = new CustomRuleConfiguration(); config.id = 1L; config.rulesJson = json; return config;
+    }
+    public void replace(String json) { rulesJson = json; }
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/DependencyPath.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/DependencyPath.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/domain/entity/DependencyPath.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/scan/DependencyPath.java
index a2e1e5c9..f7a5a8e9 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/DependencyPath.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/DependencyPath.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.scan;
 
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.ObjectMapper;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportCoordinator.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportCoordinator.java
new file mode 100644
index 00000000..d0c2c849
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportCoordinator.java
@@ -0,0 +1,16 @@
+package com.salkcoding.oswl.domain.entity.scan;
+
+import jakarta.persistence.Entity;
+import jakarta.persistence.Id;
+import jakarta.persistence.Table;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+
+/** Singleton lock serializes cluster-wide admission and worker slot reservations. */
+@Entity
+@Table(name = "import_coordinator")
+@Getter
+@NoArgsConstructor
+public class ImportCoordinator {
+    @Id private Long id = 1L;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportJob.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportJob.java
new file mode 100644
index 00000000..f2990ce6
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ImportJob.java
@@ -0,0 +1,27 @@
+package com.salkcoding.oswl.domain.entity.scan;
+
+import jakarta.persistence.*;
+import lombok.*;
+import java.time.Instant;
+
+@Entity
+@Table(name = "import_jobs", indexes = {
+        @Index(name = "idx_import_jobs_owner", columnList = "owner_id"),
+        @Index(name = "idx_import_jobs_lease", columnList = "lease_until")})
+@Getter
+@Setter
+@NoArgsConstructor
+public class ImportJob {
+    @Id @GeneratedValue(strategy = GenerationType.IDENTITY) private Long id;
+    @Column(name = "job_id", nullable = false, unique = true, length = 36) private String jobId;
+    @Column(name = "owner_id", nullable = false) private Long ownerId;
+    @Column(name = "repo_key", nullable = false, length = 64) private String repoKey;
+    @Column(name = "worker_id", nullable = false, length = 36) private String workerId;
+    @Column(nullable = false, length = 20) private String phase;
+    @Column(name = "snapshot_json", nullable = false, columnDefinition = "TEXT") private String snapshotJson;
+    @Column(name = "lease_until", nullable = false) private Instant leaseUntil;
+    @Column(name = "finished_at") private Instant finishedAt;
+    @Column(name = "created_at", nullable = false) private Instant createdAt;
+    @Column(nullable = false) private boolean canceled;
+    @Column(name = "worker_active", nullable = false) private boolean workerActive;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/ScanComponent.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanComponent.java
similarity index 79%
rename from src/main/java/com/salkcoding/oswl/domain/entity/ScanComponent.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanComponent.java
index 619670eb..00b8dc13 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/ScanComponent.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanComponent.java
@@ -1,5 +1,7 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.scan;
 
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.enums.Reachability;
 import jakarta.persistence.*;
 import lombok.*;
 
@@ -53,6 +55,23 @@ public class ScanComponent {
     @Column(name = "scope", length = 20)
     private String scope;
 
+    /**
+     * Bytecode call-graph reachability result for Java components.
+     * UNKNOWN when no project bytecode was supplied or analysis failed.
+     */
+    @Enumerated(EnumType.STRING)
+    @Column(name = "reachability", length = 20, nullable = false)
+    @Builder.Default
+    private Reachability reachability = Reachability.UNKNOWN;
+
+    /**
+     * Human-readable evidence backing a REACHABLE verdict — up to a handful of
+     * "your class X references library class Y" lines, one per line. Null for
+     * NOT_REACHABLE/UNKNOWN, where there's nothing to point to.
+     */
+    @Column(name = "reachability_evidence", columnDefinition = "TEXT")
+    private String reachabilityEvidence;
+
     @Column(nullable = false)
     @Builder.Default
     private boolean reviewed = false;
@@ -93,7 +112,7 @@ public class ScanComponent {
     @Column(name = "reviewed_by_name", length = 100)
     private String reviewedByName;
 
-    /** Jira issue key created for this component's vulnerabilities (roadmap #10); null = none. */
+    /** Jira issue key created for this component's vulnerabilities; null = none. */
     @Column(name = "jira_issue_key", length = 50)
     private String jiraIssueKey;
 
@@ -110,6 +129,9 @@ public class ScanComponent {
     @Builder.Default
     private List dependencyPaths = new ArrayList<>();
 
+    @Column(name = "reachability_analysis", columnDefinition = "TEXT")
+    private String reachabilityAnalysis;
+
     // ── Mutation helpers ─────────────────────────────────────────
 
     public void markReviewed(boolean reviewed) {
@@ -128,6 +150,19 @@ public void markIgnored(boolean ignored) {
         this.ignored = ignored;
     }
 
+    public void updateReachability(Reachability reachability) {
+        this.reachability = reachability != null ? reachability : Reachability.UNKNOWN;
+        this.reachabilityEvidence = null;
+    }
+
+    /** Same as {@link #updateReachability(Reachability)} but also records why — evidence lines,
+     *  each "referencingClass -> referencedClass", one per line. */
+    public void updateReachability(Reachability reachability, String evidenceText) {
+        this.reachability = reachability != null ? reachability : Reachability.UNKNOWN;
+        this.reachabilityEvidence = (this.reachability == Reachability.REACHABLE
+                && evidenceText != null && !evidenceText.isBlank()) ? evidenceText : null;
+    }
+
     public void applyDeferral(String reason, LocalDateTime expiresAt, String note) {
         this.deferredAt = LocalDateTime.now();
         this.deferralReason = reason;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanFinding.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanFinding.java
new file mode 100644
index 00000000..2be6bc62
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanFinding.java
@@ -0,0 +1,70 @@
+package com.salkcoding.oswl.domain.entity.scan;
+
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.domain.enums.ScanFindingType;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * A secret or IaC misconfiguration finding from a Quick Import clone.
+ *
+ * The matched secret value itself is never persisted — only the file location, the
+ * rule that matched, and a fingerprint (hash prefix) so the same finding can be
+ * recognized as unchanged across scans without being able to reconstruct the secret.
+ */
+@Entity
+@Table(name = "scan_findings", indexes = {
+        @Index(name = "idx_scan_findings_scan_result", columnList = "scan_result_id"),
+        @Index(name = "idx_scan_findings_scan_result_type", columnList = "scan_result_id, type")
+})
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class ScanFinding {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "scan_result_id", nullable = false)
+    private ScanResult scanResult;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 10)
+    private ScanFindingType type;
+
+    /** Stable identifier of the rule that matched, e.g. {@code aws-access-key}, {@code tf-public-s3}. */
+    @Column(name = "rule_id", nullable = false, length = 100)
+    private String ruleId;
+
+    @Enumerated(EnumType.STRING)
+    @Column(nullable = false, length = 10)
+    private RiskLevel severity;
+
+    @Column(name = "file_path", nullable = false, length = 1000)
+    private String filePath;
+
+    @Column(name = "line_number")
+    private Integer lineNumber;
+
+    /** Short human-readable description of what was found — never includes the matched value. */
+    @Column(nullable = false, length = 500)
+    private String description;
+
+    /**
+     * First 12 hex chars of SHA-256(matched value), so the same secret re-appearing across
+     * scans can be recognized without storing (or being able to recover) the value itself.
+     * Null for IaC findings, which have no secret value to fingerprint.
+     */
+    @Column(length = 12)
+    private String fingerprint;
+
+    @CreationTimestamp
+    @Column(name = "created_at", updatable = false)
+    private LocalDateTime createdAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/ScanResult.java b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanResult.java
similarity index 61%
rename from src/main/java/com/salkcoding/oswl/domain/entity/ScanResult.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanResult.java
index 57df77e5..c17289c3 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/ScanResult.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/scan/ScanResult.java
@@ -1,5 +1,6 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.scan;
 
+import com.salkcoding.oswl.domain.entity.project.Project;
 import com.salkcoding.oswl.domain.enums.AiEnrichmentStatus;
 import com.salkcoding.oswl.domain.enums.ScanStatus;
 import jakarta.persistence.*;
@@ -14,7 +15,15 @@
  * Tracks CLI version, scan time, and status (PENDING → COMPLETED, etc.).
  */
 @Entity
-@Table(name = "scan_results")
+@Table(name = "scan_results", indexes = {
+        // History/trend queries: ScanResultRepository.findCompletedByProjectId, findRecentCompleted
+        @Index(name = "idx_scan_results_project_status_scanned", columnList = "project_id, status, scanned_at"),
+        // Status polling banner + scan history page: findLatestByProjectId, findAllByProjectIdOrderByScannedAtDesc
+        // (the composite above cannot serve project_id-only scans ordered by scanned_at across mixed statuses)
+        @Index(name = "idx_scan_results_project_scanned", columnList = "project_id, scanned_at"),
+        // AI insight backfill: findTop15ByStatusOrderByScannedAtDesc
+        @Index(name = "idx_scan_results_status_scanned", columnList = "status, scanned_at")
+})
 @Getter
 @NoArgsConstructor(access = AccessLevel.PROTECTED)
 @Builder
@@ -100,6 +109,65 @@ public void setScannedAt(LocalDateTime scannedAt) {
     @Builder.Default
     private List components = new ArrayList<>();
 
+    /** Secret/IaC misconfiguration findings from the Quick Import clone. */
+    @OneToMany(mappedBy = "scanResult", cascade = CascadeType.ALL, orphanRemoval = true)
+    @Builder.Default
+    private List findings = new ArrayList<>();
+
+    /**
+     * Retention policy: once true, {@link #components} has been deleted and only the
+     * aggregate counts below remain — the scan is still listed (with its version/date), but its
+     * per-component/CVE detail is gone. Never set directly; go through {@link #archive}.
+     */
+    @Column(name = "archived", nullable = false)
+    @Builder.Default
+    private boolean archived = false;
+
+    @Column(name = "archived_at")
+    private LocalDateTime archivedAt;
+
+    @Column(name = "archived_component_count")
+    private Integer archivedComponentCount;
+
+    @Column(name = "archived_security_critical")
+    private Integer archivedSecurityCritical;
+    @Column(name = "archived_security_high")
+    private Integer archivedSecurityHigh;
+    @Column(name = "archived_security_medium")
+    private Integer archivedSecurityMedium;
+    @Column(name = "archived_security_low")
+    private Integer archivedSecurityLow;
+    @Column(name = "archived_security_unscored")
+    private Integer archivedSecurityUnscored;
+
+    @Column(name = "archived_license_critical")
+    private Integer archivedLicenseCritical;
+    @Column(name = "archived_license_high")
+    private Integer archivedLicenseHigh;
+    @Column(name = "archived_license_medium")
+    private Integer archivedLicenseMedium;
+    @Column(name = "archived_license_low")
+    private Integer archivedLicenseLow;
+
+    /**
+     * Records the aggregate before the caller deletes {@link #components}/dependency paths —
+     * this method only stamps the summary, it does not touch the component rows itself.
+     */
+    public void archive(int componentCount, int[] security, int[] license) {
+        this.archived = true;
+        this.archivedAt = LocalDateTime.now();
+        this.archivedComponentCount = componentCount;
+        this.archivedSecurityCritical = security[0];
+        this.archivedSecurityHigh = security[1];
+        this.archivedSecurityMedium = security[2];
+        this.archivedSecurityLow = security[3];
+        this.archivedSecurityUnscored = security[4];
+        this.archivedLicenseCritical = license[0];
+        this.archivedLicenseHigh = license[1];
+        this.archivedLicenseMedium = license[2];
+        this.archivedLicenseLow = license[3];
+    }
+
     public void complete() {
         this.status = ScanStatus.COMPLETED;
     }
@@ -176,6 +244,18 @@ public void resetForRescan() {
         this.versionDiffAiInsight = null;
         this.versionDiffFromScanId = null;
         this.aiStatus = null;
+        this.archived = false;
+        this.archivedAt = null;
+        this.archivedComponentCount = null;
+        this.archivedSecurityCritical = null;
+        this.archivedSecurityHigh = null;
+        this.archivedSecurityMedium = null;
+        this.archivedSecurityLow = null;
+        this.archivedSecurityUnscored = null;
+        this.archivedLicenseCritical = null;
+        this.archivedLicenseHigh = null;
+        this.archivedLicenseMedium = null;
+        this.archivedLicenseLow = null;
     }
 }
 
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/SnapshotEntry.java b/src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotEntry.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/domain/entity/SnapshotEntry.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotEntry.java
index 847c869c..06133532 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/SnapshotEntry.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotEntry.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.snapshot;
 
 import jakarta.persistence.*;
 import lombok.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/SnapshotMeta.java b/src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotMeta.java
similarity index 88%
rename from src/main/java/com/salkcoding/oswl/domain/entity/SnapshotMeta.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotMeta.java
index 1b058983..45e10389 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/SnapshotMeta.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/snapshot/SnapshotMeta.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.snapshot;
 
 import jakarta.persistence.Column;
 import jakarta.persistence.Entity;
@@ -13,10 +13,10 @@
  * Per-source bookkeeping for the air-gapped offline snapshot store:
  * when the source was last imported and how many records it holds.
  *
- * 
E1: the {@code bundleId}/{@code builtAt}/{@code sourceAsOf}/{@code origin}/
+ * 
The {@code bundleId}/{@code builtAt}/{@code sourceAsOf}/{@code origin}/
  * {@code formatVersion} columns capture bundle provenance — null on rows imported from a
- * v1 (pre-E1) bundle or before this column set existed, since those bundles carried no
- * provenance to record. {@code sourceAsOf} (the upstream data's own as-of date) is what E7's
+ * v1 (original) bundle or before this column set existed, since those bundles carried no
+ * provenance to record. {@code sourceAsOf} (the upstream data's own as-of date) is what the
  * staleness UI keys off, deliberately distinct from {@code importedAt}/{@code builtAt}.
  */
 @Entity
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/system/DatabaseMutationLock.java b/src/main/java/com/salkcoding/oswl/domain/entity/system/DatabaseMutationLock.java
new file mode 100644
index 00000000..5ad87198
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/system/DatabaseMutationLock.java
@@ -0,0 +1,13 @@
+package com.salkcoding.oswl.domain.entity.system;
+
+import jakarta.persistence.*;
+import lombok.AccessLevel;
+import lombok.NoArgsConstructor;
+
+/** Stable rows used to serialize bounded mutations across application instances. */
+@Entity
+@Table(name = "database_mutation_locks")
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+public class DatabaseMutationLock {
+    @Id private Long id;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/Cve.java b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Cve.java
similarity index 58%
rename from src/main/java/com/salkcoding/oswl/domain/entity/Cve.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Cve.java
index 6fb25b0d..f65baf09 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/Cve.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Cve.java
@@ -1,9 +1,14 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.vulnerability;
 
+import com.salkcoding.oswl.domain.enums.CveSource;
+import com.salkcoding.oswl.domain.enums.MatchConfidence;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import jakarta.persistence.*;
 import lombok.*;
 
+import java.util.HashSet;
+import java.util.Set;
+
 /**
  * CVE (or GHSA advisory) attached to a shared Library.
  * Data is fetched from deps.dev GetAdvisory + OSV querybatch.
@@ -78,8 +83,8 @@ public class Cve {
      * SHA-256 (hex) of the fields that actually drive the AI triage prompt (severity, cvss,
      * fixVersion, cwe, vector, dependencyType, patchability, epss bucket, kev, deploymentProfile
      * — see {@code VulnerabilityEnrichmentService.cveContextHash()}). When a re-scan computes the
-     * same hash and {@link #aiSummary} is already present, the batch call is skipped entirely
-     * (F1) — null on every pre-existing row, which is simply always a cache miss.
+     * same hash and {@link #aiSummary} is already present, the batch call is skipped entirely —
+     * null on every pre-existing row, which is simply always a cache miss.
      */
     @Column(name = "ai_context_hash", length = 64)
     private String aiContextHash;
@@ -92,6 +97,32 @@ public class Cve {
     @Column(name = "kev_listed")
     private Boolean kevListed;
 
+    /**
+     * Upstream sources that contributed data for this CVE.
+     * Stored as a separate table so a CVE can be attributed to multiple databases
+     * (e.g., OSV + GitHub Advisory + NVD) without duplicating rows.
+     */
+    @ElementCollection(fetch = FetchType.EAGER)
+    @CollectionTable(name = "library_cve_sources",
+            joinColumns = @JoinColumn(name = "cve_id"))
+    @Column(name = "source", nullable = false, length = 20)
+    @Enumerated(EnumType.STRING)
+    @Builder.Default
+    private Set sources = new HashSet<>();
+
+    /** True when two or more sources supplied different non-null severities. */
+    @Column(name = "severity_conflict", nullable = false)
+    @Builder.Default
+    private boolean severityConflict = false;
+
+    /**
+     * Confidence of the name-to-vulnerability match. Used for CPE-based NVD lookups,
+     * where a low-confidence match must be flagged for manual review.
+     */
+    @Enumerated(EnumType.STRING)
+    @Column(name = "match_confidence", length = 10)
+    private MatchConfidence matchConfidence;
+
     // ── Mutation helpers ─────────────────────────────────────────────────
 
     public void enrichFromAdvisory(String cveId, String title, Double cvssScore, String cvss3Vector, RiskLevel severity) {
@@ -108,7 +139,7 @@ public void setAiTriage(String summary, String priority, String recommendedActio
         this.aiRecommendedAction = recommendedAction;
     }
 
-    /** F1: records the context hash the current {@link #aiSummary} was generated for. */
+    /** Records the context hash the current {@link #aiSummary} was generated for. */
     public void setAiContextHash(String hash) {
         this.aiContextHash = hash;
     }
@@ -118,6 +149,61 @@ public void setThreatIntel(Double epssScore, boolean kevListed) {
         this.kevListed = kevListed;
     }
 
+    public void addSource(CveSource source) {
+        if (source != null) {
+            this.sources.add(source);
+        }
+    }
+
+    /**
+     * Merges a severity reported by an upstream source into this CVE. If another source
+     * already contributed a different non-null severity, the highest one is kept and the
+     * conflict flag is set so the UI can warn the reviewer.
+     */
+    public void mergeSeverity(CveSource source, RiskLevel incoming) {
+        addSource(source);
+        if (incoming == null) {
+            return;
+        }
+        if (this.severity == null) {
+            this.severity = incoming;
+            return;
+        }
+        if (this.severity == incoming) {
+            return;
+        }
+        this.severityConflict = true;
+        if (incoming.ordinal() < this.severity.ordinal()) {
+            this.severity = incoming;
+        }
+    }
+
+    public void setMatchConfidence(MatchConfidence confidence) {
+        this.matchConfidence = confidence;
+    }
+
+    public void setCvssScoreIfMissing(Double score) {
+        if (this.cvssScore == null && score != null) this.cvssScore = score;
+    }
+
+    public void setCvss3VectorIfMissing(String vector) {
+        if ((this.cvss3Vector == null || this.cvss3Vector.isBlank()) && vector != null && !vector.isBlank()) {
+            this.cvss3Vector = vector;
+        }
+    }
+
+    public void setFixVersionIfMissing(String version) {
+        if ((this.fixVersion == null || this.fixVersion.isBlank()) && version != null && !version.isBlank()) {
+            this.fixVersion = version;
+        }
+    }
+
+    public void setSummaryIfMissing(String summary) {
+        if ((this.summary == null || this.summary.isBlank()) && summary != null && !summary.isBlank()) {
+            this.summary = summary;
+        }
+    }
+
     /** Backfills summary, fix version, and CWE from OSV when available. */
     public void enrichFromOsv(String summary, String fixVersion, String cweId) {
         if (summary != null && !summary.isBlank()) {
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/CveAlert.java b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/CveAlert.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/domain/entity/CveAlert.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/CveAlert.java
index ab1d3619..0dc83bc2 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/CveAlert.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/CveAlert.java
@@ -1,5 +1,6 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.vulnerability;
 
+import com.salkcoding.oswl.domain.entity.project.Project;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import jakarta.persistence.*;
 import lombok.*;
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/Library.java b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Library.java
similarity index 75%
rename from src/main/java/com/salkcoding/oswl/domain/entity/Library.java
rename to src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Library.java
index ff8964e4..52726afe 100644
--- a/src/main/java/com/salkcoding/oswl/domain/entity/Library.java
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/Library.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.domain.entity;
+package com.salkcoding.oswl.domain.entity.vulnerability;
 
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.ObjectMapper;
@@ -13,6 +13,7 @@
 import java.util.Comparator;
 import java.util.List;
 import java.util.Objects;
+import java.util.Map;
 
 /**
  * Unique open-source library identified by (name, version, ecosystem).
@@ -55,7 +56,7 @@ public class Library {
     private String licenseName;
 
     /**
-     * E4: the original per-license list deps.dev returned, before it was joined with
+     * The original per-license list deps.dev returned, before it was joined with
      * {@code " AND "} into {@link #licenseName} for display. Preserved so an offline snapshot
      * export (see {@code AirgappedSnapshotService}) can round-trip a multi-license package
      * (e.g. {@code ["MIT", "Apache-2.0"]}) instead of re-splitting {@code licenseName} on
@@ -97,6 +98,25 @@ public class Library {
     @Column(name = "fetched_at")
     private LocalDateTime fetchedAt;
 
+    @Column(name = "vulnerability_lookup_at")
+    private LocalDateTime vulnerabilityLookupAt;
+
+    @Convert(converter = LookupOutcomesConverter.class)
+    @Column(name = "vulnerability_lookup_outcomes", columnDefinition = "TEXT")
+    private Map vulnerabilityLookupOutcomes;
+
+    public void recordLookupOutcomes(Map outcomes) {
+        this.vulnerabilityLookupOutcomes = Map.copyOf(outcomes);
+        this.vulnerabilityLookupAt = LocalDateTime.now();
+    }
+
+    public boolean isVulnerabilitiesAnalyzed() {
+        if (fetchedAt == null) return false;
+        if (vulnerabilityLookupOutcomes == null) return true; // legacy stored cache; refreshed on normal expiry
+        return vulnerabilityLookupOutcomes.containsValue("RESOLVED")
+                && !vulnerabilityLookupOutcomes.containsValue("UNAVAILABLE");
+    }
+
     /**
      * Timestamp of the last deps.dev version-metadata refresh (isLatestVersion / deprecated /
      * latestVersion / scorecard). Tracked separately from {@link #fetchedAt} (full CVE + license
@@ -113,7 +133,7 @@ public class Library {
      * SHA-256 (hex) of the fields that drive the AI license summary prompt (licenseName,
      * licenseStatus, policyReason, ecosystem, dependencyType, latestVersion, deploymentProfile —
      * see {@code VulnerabilityEnrichmentService.licenseContextHash()}). Mirrors
-     * {@code Cve.aiContextHash} (F1) — null on every pre-existing row, always a cache miss.
+     * {@code Cve.aiContextHash} — null on every pre-existing row, always a cache miss.
      */
     @Column(name = "ai_license_context_hash", length = 64)
     private String aiLicenseContextHash;
@@ -134,6 +154,13 @@ public class Library {
     @Column(name = "source_repo_url", length = 500)
     private String sourceRepoUrl;
 
+    /**
+     * Best-matching CPE name for C/C++ components that are enriched through NVD CPE lookups
+     * (Conan, vcpkg, git submodules, vendored C/C++). Null for ecosystems covered by deps.dev/OSV.
+     */
+    @Column(columnDefinition = "TEXT")
+    private String cpe;
+
     /** True when OSV flags this package version as malicious (a {@code MAL-} advisory). */
     // columnDefinition supplies a DB default so ddl-auto=update can add this NOT NULL column to an existing populated table.
     @Column(name = "malicious", nullable = false, columnDefinition = "boolean default false")
@@ -153,13 +180,35 @@ public class Library {
     @Builder.Default
     private List cves = new ArrayList<>();
 
+    /**
+     * Read-only, DB-computed severity ranking for the Security Center's default "risk" sort —
+     * lets that sort be expressed as a normal {@link org.springframework.data.domain.Sort}
+     * property (server-side pagination) instead of loading every row into Java to
+     * sort in memory. Weighted so critical always outranks any number of lower severities.
+     */
+    @org.hibernate.annotations.Formula("""
+            (SELECT COUNT(*) FROM library_cves lc WHERE lc.library_id = id AND lc.severity = 'CRITICAL') * 1000000000
+            + (SELECT COUNT(*) FROM library_cves lc WHERE lc.library_id = id AND lc.severity = 'HIGH') * 1000000
+            + (SELECT COUNT(*) FROM library_cves lc WHERE lc.library_id = id AND lc.severity = 'MEDIUM') * 1000
+            + (SELECT COUNT(*) FROM library_cves lc WHERE lc.library_id = id AND lc.severity = 'LOW')
+            """)
+    private Long riskSortScore;
+
+    /** Read-only, DB-computed rank for the Security Center's "license" sort — same reason as {@link #riskSortScore}. */
+    @org.hibernate.annotations.Formula("""
+            CASE license_status
+                WHEN 'RESTRICTED' THEN 0 WHEN 'CAUTION' THEN 1 WHEN 'UNKNOWN' THEN 2 WHEN 'PERMITTED' THEN 3 ELSE 4
+            END
+            """)
+    private Integer licenseSortRank;
+
     // ── Mutation helpers ───────────────────────────────────────────
 
     public void updateLicense(String licenseName, LicenseStatus licenseStatus) {
         updateLicense(licenseName, null, licenseStatus);
     }
 
-    /** E4: also stores the pre-join per-license list (see {@link #licenseExpressionRaw}). */
+    /** Also stores the pre-join per-license list (see {@link #licenseExpressionRaw}). */
     public void updateLicense(String licenseName, List licenseExpressionRaw, LicenseStatus licenseStatus) {
         this.licenseName = licenseName;
         this.licenseExpressionRaw = licenseExpressionRaw;
@@ -184,7 +233,7 @@ public void updateAiLicenseSummary(String summary) {
         this.aiLicenseSummary = summary;
     }
 
-    /** F1: records the context hash the current {@link #aiLicenseSummary} was generated for. */
+    /** Records the context hash the current {@link #aiLicenseSummary} was generated for. */
     public void updateAiLicenseContextHash(String hash) {
         this.aiLicenseContextHash = hash;
     }
@@ -204,6 +253,13 @@ public void updateScorecardScore(Double scorecardScore) {
         this.scorecardScore = scorecardScore;
     }
 
+    /** Stores the CPE name that produced NVD results for this C/C++ component. */
+    public void updateCpe(String cpe) {
+        if (cpe != null && !cpe.isBlank()) {
+            this.cpe = cpe.strip();
+        }
+    }
+
     public void markMalicious() {
         this.malicious = true;
     }
@@ -276,6 +332,21 @@ public String resolvePrTargetVersion() {
     }
 
     /** Converts {@code List} ↔ JSON array string for portable TEXT storage (see {@link DependencyPath}'s converter for the same pattern). */
+    @Converter
+    public static class LookupOutcomesConverter implements AttributeConverter, String> {
+        private static final ObjectMapper MAPPER = new ObjectMapper();
+        public String convertToDatabaseColumn(Map values) {
+            if (values == null) return null;
+            try { return MAPPER.writeValueAsString(values); }
+            catch (Exception e) { throw new IllegalArgumentException("Cannot serialize lookup outcomes", e); }
+        }
+        public Map convertToEntityAttribute(String value) {
+            if (value == null) return null;
+            try { return Map.copyOf(MAPPER.readValue(value, new TypeReference>() {})); }
+            catch (Exception e) { return Map.of("STORAGE", "UNAVAILABLE"); }
+        }
+    }
+
     @Converter
     public static class StringListJsonConverter implements AttributeConverter, String> {
 
diff --git a/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/SavedView.java b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/SavedView.java
new file mode 100644
index 00000000..579b7708
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/entity/vulnerability/SavedView.java
@@ -0,0 +1,55 @@
+package com.salkcoding.oswl.domain.entity.vulnerability;
+
+import com.salkcoding.oswl.domain.entity.project.Project;
+import jakarta.persistence.*;
+import lombok.*;
+import org.hibernate.annotations.CreationTimestamp;
+
+import java.time.LocalDateTime;
+
+/**
+ * A named Security Center filter/sort combination, scoped to one project. The filter state
+ * itself ({@code filtersJson}) is stored as an opaque client-authored JSON blob rather than
+ * individual columns — the client owns the shape of its filter object, and this keeps the
+ * server from needing a migration every time a new filter checkbox is added to the page.
+ */
+@Entity
+@Table(name = "saved_views",
+        indexes = @Index(name = "idx_saved_views_project_id", columnList = "project_id"))
+@Getter
+@NoArgsConstructor(access = AccessLevel.PROTECTED)
+@Builder
+@AllArgsConstructor
+public class SavedView {
+
+    @Id
+    @GeneratedValue(strategy = GenerationType.IDENTITY)
+    private Long id;
+
+    @ManyToOne(fetch = FetchType.LAZY, optional = false)
+    @JoinColumn(name = "project_id", nullable = false)
+    private Project project;
+
+    @Column(name = "created_by_user_id", nullable = false)
+    private Long createdByUserId;
+
+    /** Denormalized so the view list stays readable without a user join. */
+    @Column(name = "created_by_name", nullable = false, length = 150)
+    private String createdByName;
+
+    @Column(nullable = false, length = 100)
+    private String name;
+
+    /** Client-authored blob: filters/sortMode/searchQuery, applied back verbatim on load. */
+    @Column(name = "filters_json", nullable = false, columnDefinition = "TEXT")
+    private String filtersJson;
+
+    /** False = only visible to its creator; true = visible to everyone who can view the project. */
+    @Column(nullable = false)
+    @Builder.Default
+    private boolean shared = false;
+
+    @CreationTimestamp
+    @Column(name = "created_at", nullable = false, updatable = false)
+    private LocalDateTime createdAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/ApiKeyScope.java b/src/main/java/com/salkcoding/oswl/domain/enums/ApiKeyScope.java
new file mode 100644
index 00000000..e19fa76a
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/ApiKeyScope.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Scope of an API key. PROJECT keys are bound to a single project and used by
+ * the CLI scan client. SCIM keys are admin-level provisioning tokens and must
+ * not be accepted by the normal scan API.
+ */
+public enum ApiKeyScope {
+    PROJECT,
+    SCIM
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/CveSource.java b/src/main/java/com/salkcoding/oswl/domain/enums/CveSource.java
new file mode 100644
index 00000000..9c8bd931
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/CveSource.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Upstream source that contributed data to a CVE row.
+ */
+public enum CveSource {
+    OSV,
+    DEPS_DEV,
+    GITHUB_ADVISORY,
+    NVD,
+    CPE
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/MatchConfidence.java b/src/main/java/com/salkcoding/oswl/domain/enums/MatchConfidence.java
new file mode 100644
index 00000000..14bc5647
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/MatchConfidence.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Confidence of the match between a component name and a vulnerability identifier.
+ * Used primarily for CPE-based NVD lookups, where a naive name→vendor/product mapping
+ * can easily produce false positives.
+ */
+public enum MatchConfidence {
+    HIGH,
+    MEDIUM,
+    LOW
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionStatus.java b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionStatus.java
new file mode 100644
index 00000000..8ad9ac42
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionStatus.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Lifecycle state of a policy-exception (waiver) request.
+ */
+public enum PolicyExceptionStatus {
+    PENDING,
+    APPROVED,
+    REVOKED,
+    EXPIRED
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionTargetType.java b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionTargetType.java
new file mode 100644
index 00000000..ba3661a4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyExceptionTargetType.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * What a {@link com.salkcoding.oswl.domain.entity.policy.PolicyException} waives.
+ */
+public enum PolicyExceptionTargetType {
+    CVE,
+    LICENSE,
+    MALICIOUS,
+    ALL
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/PolicyScopeType.java b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyScopeType.java
new file mode 100644
index 00000000..ff792652
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/PolicyScopeType.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Scope at which a {@link com.salkcoding.oswl.domain.entity.policy.Policy} applies.
+ * Exactly one of organization / team / project is set on a given row.
+ */
+public enum PolicyScopeType {
+    ORGANIZATION,
+    TEAM,
+    PROJECT
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/Reachability.java b/src/main/java/com/salkcoding/oswl/domain/enums/Reachability.java
new file mode 100644
index 00000000..083cb45f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/Reachability.java
@@ -0,0 +1,16 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Result of bytecode call-graph reachability analysis for a scanned component.
+ *
+ * REACHABLE    — the project bytecode contains at least one reference to a class
+ *                belonging to this component.
+ * NOT_REACHABLE — no such reference was found in the analyzed project bytecode.
+ * UNKNOWN       — analysis could not be performed (no bytecode supplied, I/O error,
+ *                 or non-Java ecosystem).
+ */
+public enum Reachability {
+    REACHABLE,
+    NOT_REACHABLE,
+    UNKNOWN
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/ScanFindingType.java b/src/main/java/com/salkcoding/oswl/domain/enums/ScanFindingType.java
new file mode 100644
index 00000000..2cf40834
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/ScanFindingType.java
@@ -0,0 +1,5 @@
+package com.salkcoding.oswl.domain.enums;
+
+public enum ScanFindingType {
+    SECRET, IAC
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/ScimGroupMapping.java b/src/main/java/com/salkcoding/oswl/domain/enums/ScimGroupMapping.java
new file mode 100644
index 00000000..05d44b17
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/ScimGroupMapping.java
@@ -0,0 +1,9 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Controls how SCIM Groups are mapped into OsWL authorization structures.
+ */
+public enum ScimGroupMapping {
+    TEAM,
+    ROLE_TEMPLATE
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/TeamMemberRole.java b/src/main/java/com/salkcoding/oswl/domain/enums/TeamMemberRole.java
new file mode 100644
index 00000000..fb542534
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/TeamMemberRole.java
@@ -0,0 +1,15 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Role of a user within a team (team-scoped ACL).
+ *
+ * Both roles grant access to every project assigned to the team; the role only
+ * marks the team's point of contact. Team structure/membership management itself is
+ * governed by the global {@code TEAM_MANAGE} permission (or SYSTEM_ADMIN).
+ */
+public enum TeamMemberRole {
+    /** Designated point of contact for the team */
+    LEAD,
+    /** Regular team member — access to all projects of the team */
+    MEMBER
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/WebhookDeliveryStatus.java b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookDeliveryStatus.java
new file mode 100644
index 00000000..303d22f4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookDeliveryStatus.java
@@ -0,0 +1,10 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Outcome of a webhook delivery attempt. A single event may produce multiple
+ * attempts if retries are configured.
+ */
+public enum WebhookDeliveryStatus {
+    SUCCESS,
+    FAILED
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/WebhookEventType.java b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookEventType.java
new file mode 100644
index 00000000..a2d6420d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookEventType.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Webhook notification event types. Each event can be toggled independently
+ * in the webhook settings.
+ */
+public enum WebhookEventType {
+    NEW_CVE,
+    GATE_FAILURE,
+    SCAN_FAILURE,
+    WAIVER_EXPIRY
+}
diff --git a/src/main/java/com/salkcoding/oswl/domain/enums/WebhookProvider.java b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookProvider.java
new file mode 100644
index 00000000..f46c9b4e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/domain/enums/WebhookProvider.java
@@ -0,0 +1,10 @@
+package com.salkcoding.oswl.domain.enums;
+
+/**
+ * Supported incoming-webhook providers. The payload shape differs per provider,
+ * but both are simple HTTPS POST requests with a JSON body.
+ */
+public enum WebhookProvider {
+    SLACK,
+    TEAMS
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/AdminProjectRefDto.java b/src/main/java/com/salkcoding/oswl/dto/AdminProjectRefDto.java
new file mode 100644
index 00000000..750466b5
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/AdminProjectRefDto.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.dto;
+
+/**
+ * Minimal id+name reference to an active project, for SYSTEM_ADMIN-only pickers
+ * (e.g. the scan-archiving panel) that need a project dropdown without the full
+ * {@link ProjectSummaryDto} card payload.
+ */
+public record AdminProjectRefDto(
+        Long id,
+        String name
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/ComponentRowDto.java b/src/main/java/com/salkcoding/oswl/dto/ComponentRowDto.java
index 65dc1c86..77e2c530 100644
--- a/src/main/java/com/salkcoding/oswl/dto/ComponentRowDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/ComponentRowDto.java
@@ -53,6 +53,15 @@ public class ComponentRowDto {
     @Schema(description = "Number of Unscored CVEs (no CVSS score, severity = NONE)", example = "4")
     private final int securityUnscored;
 
+    @Schema(description = "False when the vulnerability pipeline never answered for this component "
+            + "(e.g. its ecosystem has no OSV mapping) — zero CVEs then means 'not analyzed', not 'clean'", example = "true")
+    private final boolean vulnerabilitiesAnalyzed;
+
+    @Schema(description = "Latest attempted lookup result per source: RESOLVED, UNAVAILABLE, UNSUPPORTED or NOT_CONFIGURED; null for legacy cache")
+    private final java.util.Map vulnerabilityLookupOutcomes;
+
+    private final java.time.LocalDateTime vulnerabilityLookupAt;
+
     @Schema(description = "Patchability status", example = "patchable", allowableValues = {"patchable", "non-patchable", "unknown"})
     private final String patchability;
 
@@ -80,6 +89,10 @@ public class ComponentRowDto {
     @Schema(description = "True for production dependencies (scope runtime/compile); false for test/dev/provided", example = "true")
     private final boolean runtimeScope;
 
+    @Schema(description = "Bytecode call-graph reachability result", example = "REACHABLE",
+            allowableValues = {"REACHABLE", "NOT_REACHABLE", "UNKNOWN"})
+    private final String reachability;
+
     @Schema(description = "OpenSSF Scorecard overall score (0.0–10.0) from deps.dev; null when unavailable", example = "7.4")
     private final Double scorecardScore;
 
diff --git a/src/main/java/com/salkcoding/oswl/dto/CveDto.java b/src/main/java/com/salkcoding/oswl/dto/CveDto.java
index 4225fdc7..32d8260c 100644
--- a/src/main/java/com/salkcoding/oswl/dto/CveDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/CveDto.java
@@ -29,6 +29,11 @@ public class CveDto {
     @Schema(description = "CVSS 3.x vector string", example = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H")
     private final String cvss3Vector;
 
+    @Schema(description = "CVSS 3.x Environmental score (0.0–10.0) — the base score adjusted for this "
+            + "project's deployment profile and the component's runtime scope; null when cvss3Vector "
+            + "isn't a scorable CVSS v3.0/v3.1 vector", example = "9.1")
+    private final Double environmentalScore;
+
     @Schema(description = "CWE identifier when available", example = "CWE-20")
     private final String cweId;
 
diff --git a/src/main/java/com/salkcoding/oswl/dto/OrgProjectRiskDto.java b/src/main/java/com/salkcoding/oswl/dto/OrgProjectRiskDto.java
index 9f9ed820..7073d008 100644
--- a/src/main/java/com/salkcoding/oswl/dto/OrgProjectRiskDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/OrgProjectRiskDto.java
@@ -49,4 +49,10 @@ public class OrgProjectRiskDto {
 
     @Schema(description = "KEV-listed CVEs on components that are neither reviewed nor deferred", example = "2")
     private final int kevUnaddressed;
+
+    @Schema(description = "Owning team id — null when the project has no team", example = "1")
+    private final Long teamId;
+
+    @Schema(description = "Owning team name — null when the project has no team", example = "Payments")
+    private final String teamName;
 }
diff --git a/src/main/java/com/salkcoding/oswl/dto/OrgTeamRiskDto.java b/src/main/java/com/salkcoding/oswl/dto/OrgTeamRiskDto.java
new file mode 100644
index 00000000..f71350c9
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/OrgTeamRiskDto.java
@@ -0,0 +1,51 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+
+import java.util.List;
+
+@Schema(description = "Org dashboard team roll-up row — per-team risk aggregate with its project rows for drilldown")
+@Getter
+@Builder
+@AllArgsConstructor
+public class OrgTeamRiskDto {
+
+    @Schema(description = "Team primary key — null for the synthetic 'no team' bucket", example = "1")
+    private final Long teamId;
+
+    @Schema(description = "Team name", example = "Payments")
+    private final String teamName;
+
+    @Schema(description = "Number of projects in the team", example = "12")
+    private final int projectCount;
+
+    @Schema(description = "Number of projects with at least one completed scan", example = "10")
+    private final int scannedProjects;
+
+    @Schema(description = "Number of Critical CVEs across the team's latest completed scans", example = "4")
+    private final int securityCritical;
+
+    @Schema(description = "Number of High CVEs", example = "9")
+    private final int securityHigh;
+
+    @Schema(description = "Number of Medium CVEs", example = "21")
+    private final int securityMedium;
+
+    @Schema(description = "Number of Low CVEs", example = "40")
+    private final int securityLow;
+
+    @Schema(description = "Number of Unscored CVEs (no CVSS score)", example = "1")
+    private final int securityUnscored;
+
+    @Schema(description = "Number of license violations (RESTRICTED components)", example = "2")
+    private final int licenseViolations;
+
+    @Schema(description = "KEV-listed CVEs on components that are neither reviewed nor deferred", example = "3")
+    private final int kevUnaddressed;
+
+    @Schema(description = "The team's project risk rows (same shape as the worst-project ranking) for drilldown")
+    private final List projects;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/ProjectSummaryDto.java b/src/main/java/com/salkcoding/oswl/dto/ProjectSummaryDto.java
index 100bb32f..7cd285a2 100644
--- a/src/main/java/com/salkcoding/oswl/dto/ProjectSummaryDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/ProjectSummaryDto.java
@@ -5,6 +5,8 @@
 import lombok.Builder;
 import lombok.Getter;
 
+import java.util.List;
+
 @Schema(description = "Project list card — includes security and license summary figures based on the latest completed scan")
 @Getter
 @Builder
@@ -72,4 +74,13 @@ public class ProjectSummaryDto {
 
     @Schema(description = "Unacknowledged new-CVE alerts raised by continuous monitoring since the last scan", example = "2")
     private final long newCveAlerts;
+
+    @Schema(description = "Owning team id — null when the project has no team", example = "1")
+    private final Long teamId;
+
+    @Schema(description = "Owning team name — null when the project has no team", example = "Payments")
+    private final String teamName;
+
+    @Schema(description = "Free-form labels for filtering on the project list", example = "[\"backend\", \"pci\"]")
+    private final List tags;
 }
diff --git a/src/main/java/com/salkcoding/oswl/dto/QuickImportJobStatus.java b/src/main/java/com/salkcoding/oswl/dto/QuickImportJobStatus.java
index 65a7f68f..6a6b79c6 100644
--- a/src/main/java/com/salkcoding/oswl/dto/QuickImportJobStatus.java
+++ b/src/main/java/com/salkcoding/oswl/dto/QuickImportJobStatus.java
@@ -9,7 +9,11 @@
 @Schema(description = "Quick Import job status snapshot")
 @Getter
 @Builder(toBuilder = true)
+@com.fasterxml.jackson.databind.annotation.JsonDeserialize(builder = QuickImportJobStatus.QuickImportJobStatusBuilder.class)
 public class QuickImportJobStatus {
+    @com.fasterxml.jackson.annotation.JsonIgnoreProperties(ignoreUnknown = true)
+    @com.fasterxml.jackson.databind.annotation.JsonPOJOBuilder(withPrefix = "")
+    public static class QuickImportJobStatusBuilder {}
 
     @Schema(description = "Import pipeline phase")
     public enum Phase {
@@ -63,13 +67,13 @@ public enum Phase {
     @Schema(description = "Latest AI preview lines from enrichment")
     private final List aiPreviews;
 
-    @Schema(description = "Total components evaluated in the deps.dev cache decision (D4)", example = "1204")
+    @Schema(description = "Total components evaluated in the deps.dev cache decision", example = "1204")
     private final Integer cacheTotal;
 
-    @Schema(description = "Components served from the dependency cache without a refetch (D4)", example = "1180")
+    @Schema(description = "Components served from the dependency cache without a refetch", example = "1180")
     private final Integer cacheHit;
 
-    @Schema(description = "Components that required a fresh deps.dev fetch (D4)", example = "24")
+    @Schema(description = "Components that required a fresh deps.dev fetch", example = "24")
     private final Integer cacheToFetch;
 
     @Schema(description = "Number of imports currently executing")
diff --git a/src/main/java/com/salkcoding/oswl/dto/ReportBrandingResponse.java b/src/main/java/com/salkcoding/oswl/dto/ReportBrandingResponse.java
new file mode 100644
index 00000000..7d062da6
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/ReportBrandingResponse.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+@Schema(description = "Current report branding settings")
+public record ReportBrandingResponse(
+        String companyName,
+        String logoDataUri,
+        String headerText,
+        boolean showCoverPage
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/ReportBrandingUpdateRequest.java b/src/main/java/com/salkcoding/oswl/dto/ReportBrandingUpdateRequest.java
new file mode 100644
index 00000000..e154f4be
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/ReportBrandingUpdateRequest.java
@@ -0,0 +1,20 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import jakarta.validation.constraints.Size;
+
+@Schema(description = "Request body for updating report branding settings")
+public record ReportBrandingUpdateRequest(
+        @Schema(example = "Acme Corp")
+        @Size(max = 150, message = "companyName must be at most 150 characters")
+        String companyName,
+
+        @Schema(description = "Image data URI (data:image/...;base64,...). Null = leave unchanged, blank = remove.")
+        String logoDataUri,
+
+        @Schema(example = "Confidential — internal distribution only")
+        @Size(max = 300, message = "headerText must be at most 300 characters")
+        String headerText,
+
+        boolean showCoverPage
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/SavedViewCreateRequest.java b/src/main/java/com/salkcoding/oswl/dto/SavedViewCreateRequest.java
new file mode 100644
index 00000000..745ba038
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/SavedViewCreateRequest.java
@@ -0,0 +1,21 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.Size;
+
+@Schema(description = "Request body for saving a new Security Center filter view")
+public record SavedViewCreateRequest(
+        @Schema(example = "Critical, unreviewed only", requiredMode = Schema.RequiredMode.REQUIRED)
+        @NotBlank(message = "name must not be blank")
+        @Size(max = 100, message = "name must be at most 100 characters")
+        String name,
+
+        @Schema(description = "Opaque client-authored JSON blob: filters/sortMode/searchQuery",
+                requiredMode = Schema.RequiredMode.REQUIRED)
+        @NotBlank(message = "filtersJson must not be blank")
+        String filtersJson,
+
+        @Schema(description = "Visible to everyone who can view the project (default: creator only)")
+        boolean shared
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/SavedViewDto.java b/src/main/java/com/salkcoding/oswl/dto/SavedViewDto.java
new file mode 100644
index 00000000..a9e4d491
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/SavedViewDto.java
@@ -0,0 +1,19 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import java.time.LocalDateTime;
+
+@Schema(description = "A saved Security Center filter/sort view")
+public record SavedViewDto(
+        Long id,
+        String name,
+        @Schema(description = "Opaque client-authored JSON blob: filters/sortMode/searchQuery, applied back verbatim")
+        String filtersJson,
+        boolean shared,
+        Long createdByUserId,
+        String createdByName,
+        @Schema(description = "True when the current user created this view (only the creator may delete it)")
+        boolean own,
+        LocalDateTime createdAt
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/ScanHistoryRowDto.java b/src/main/java/com/salkcoding/oswl/dto/ScanHistoryRowDto.java
index 94a1ae7b..bffc2ac0 100644
--- a/src/main/java/com/salkcoding/oswl/dto/ScanHistoryRowDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/ScanHistoryRowDto.java
@@ -14,4 +14,12 @@ public class ScanHistoryRowDto {
     private final long   componentCount;
     private final String errorMessage; // null unless FAILED
     private final String importSource; // GIT, CLI, or null
+
+    /** True once the scan's component/CVE detail has been deleted by the retention policy. */
+    private final boolean archived;
+    // Populated only when archived — the aggregate the retention policy stamped before deleting detail.
+    private final Integer archivedSecurityCritical;
+    private final Integer archivedSecurityHigh;
+    private final Integer archivedLicenseCritical;
+    private final Integer archivedLicenseHigh;
 }
diff --git a/src/main/java/com/salkcoding/oswl/dto/SecurityCenterRowFilterParams.java b/src/main/java/com/salkcoding/oswl/dto/SecurityCenterRowFilterParams.java
new file mode 100644
index 00000000..759a5700
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/SecurityCenterRowFilterParams.java
@@ -0,0 +1,32 @@
+package com.salkcoding.oswl.dto;
+
+/**
+ * Server-side mirror of the Security Center table's Alpine {@code filters} object and free-text
+ * search/sort state — one field per filter checkbox, same names. Bound from request
+ * params on the {@code /rows} endpoint, and also used directly for the initial page load so that
+ * load matches exactly what the interactive filter panel would produce with its default toggles.
+ */
+public record SecurityCenterRowFilterParams(
+        String search,
+        boolean hideNonRuntime,
+        boolean reviewed, boolean nonReviewed,
+        boolean ignored, boolean nonIgnored, boolean deferred,
+        boolean reachable, boolean notReachable, boolean unknownReachability,
+        boolean secCritical, boolean secHigh, boolean secMedium, boolean secLow, boolean secUnknown,
+        boolean licRestricted, boolean licCaution, boolean licUnknown, boolean licPermitted,
+        boolean patchable, boolean nonPatchable, boolean patchDeprecated, boolean patchOutdated, boolean patchUpToDate,
+        String sortMode
+) {
+    /** Matches the Alpine component's default {@code filters} state on a fresh page load. */
+    public static SecurityCenterRowFilterParams initialPageLoad() {
+        return new SecurityCenterRowFilterParams(
+                null, true,
+                false, false,
+                false, true, false,
+                false, false, false,
+                false, false, false, false, false,
+                false, false, false, false,
+                false, false, false, false, false,
+                "risk");
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/SnapshotImportFromPathRequest.java b/src/main/java/com/salkcoding/oswl/dto/SnapshotImportFromPathRequest.java
index 223335d2..8f24e7f6 100644
--- a/src/main/java/com/salkcoding/oswl/dto/SnapshotImportFromPathRequest.java
+++ b/src/main/java/com/salkcoding/oswl/dto/SnapshotImportFromPathRequest.java
@@ -1,7 +1,7 @@
 package com.salkcoding.oswl.dto;
 
 /**
- * POST /api/admin/snapshot/import-from-path payload (E3). {@code path} must resolve under
+ * POST /api/admin/snapshot/import-from-path payload. {@code path} must resolve under
  * {@code oswl.airgapped.import-dir} (enforced server-side — see SnapshotAdminController).
  * {@code mode} is optional: {@code "replace"} or {@code "merge"}; omitted lets the bundle's own
  * {@code meta.json} decide (falling back to replace).
diff --git a/src/main/java/com/salkcoding/oswl/dto/TeamMemberDto.java b/src/main/java/com/salkcoding/oswl/dto/TeamMemberDto.java
new file mode 100644
index 00000000..b883dff7
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/TeamMemberDto.java
@@ -0,0 +1,25 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+
+@Schema(description = "Team member row — user identity plus the team-scoped role")
+@Getter
+@Builder
+@AllArgsConstructor
+public class TeamMemberDto {
+
+    @Schema(description = "User primary key", example = "7")
+    private final Long userId;
+
+    @Schema(description = "User display name", example = "Jane Doe")
+    private final String displayName;
+
+    @Schema(description = "User email", example = "jane@example.com")
+    private final String email;
+
+    @Schema(description = "Team role — LEAD or MEMBER", example = "MEMBER")
+    private final String role;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/TeamSummaryDto.java b/src/main/java/com/salkcoding/oswl/dto/TeamSummaryDto.java
new file mode 100644
index 00000000..80c42a62
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/TeamSummaryDto.java
@@ -0,0 +1,37 @@
+package com.salkcoding.oswl.dto;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Getter;
+
+@Schema(description = "Team summary row for the team management page and team pickers")
+@Getter
+@Builder
+@AllArgsConstructor
+public class TeamSummaryDto {
+
+    @Schema(description = "Team primary key", example = "1")
+    private final Long id;
+
+    @Schema(description = "Team name (unique within the organization)", example = "Payments")
+    private final String name;
+
+    @Schema(description = "Optional team description", example = "Payment platform services")
+    private final String description;
+
+    @Schema(description = "Parent team id — null for top-level teams (max two levels)", example = "3")
+    private final Long parentTeamId;
+
+    @Schema(description = "Parent team name — null for top-level teams", example = "Engineering")
+    private final String parentTeamName;
+
+    @Schema(description = "Number of team members", example = "5")
+    private final long memberCount;
+
+    @Schema(description = "Number of active (non-deleted) projects assigned to the team", example = "12")
+    private final long projectCount;
+
+    @Schema(description = "True for the built-in 'Default' team that cannot be deleted", example = "false")
+    private final boolean defaultTeam;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/AiCacheSumsDto.java b/src/main/java/com/salkcoding/oswl/dto/api/AiCacheSumsDto.java
new file mode 100644
index 00000000..ac64b49c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/AiCacheSumsDto.java
@@ -0,0 +1,7 @@
+package com.salkcoding.oswl.dto.api;
+
+import java.math.BigDecimal;
+
+/** JPQL constructor projection for the all-time context-hash cache sums over {@code AiDailyUsage}. */
+public record AiCacheSumsDto(long hits, long misses, BigDecimal estimatedCostUsd) {
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/AiSettingUpdateRequest.java b/src/main/java/com/salkcoding/oswl/dto/api/AiSettingUpdateRequest.java
index eaafc379..dc5c062a 100644
--- a/src/main/java/com/salkcoding/oswl/dto/api/AiSettingUpdateRequest.java
+++ b/src/main/java/com/salkcoding/oswl/dto/api/AiSettingUpdateRequest.java
@@ -29,7 +29,7 @@ public class AiSettingUpdateRequest {
     @Schema(description = "If true, activates the provider upon save", example = "true")
     private Boolean    activate;
 
-    @Schema(description = "Prompt response language", example = "en", allowableValues = {"en", "ko"})
+    @Schema(description = "Prompt response language", example = "en", allowableValues = {"en", "ko", "ja"})
     private String     promptsLocale;
 
     @Schema(description = "Max Critical/High CVEs summarized per scan enrichment", example = "10")
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/AiUsageStatsResponse.java b/src/main/java/com/salkcoding/oswl/dto/api/AiUsageStatsResponse.java
index 9b64253e..2022d7f8 100644
--- a/src/main/java/com/salkcoding/oswl/dto/api/AiUsageStatsResponse.java
+++ b/src/main/java/com/salkcoding/oswl/dto/api/AiUsageStatsResponse.java
@@ -18,4 +18,9 @@ public class AiUsageStatsResponse {
     private final BigDecimal todayEstimatedCostUsd;
     private final int dailyCallCap;
     private final List dailySummaries;
+    /** All-time context-hash cache counters (item level); 0/0 when no scan has run yet. */
+    private final long cacheHitCount;
+    private final long cacheMissCount;
+    /** Rough avoided-cost estimate (average cost per summarized item × cache hits); null when no misses are recorded yet. */
+    private final BigDecimal estimatedAvoidedCostUsd;
 }
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/EmbeddedAiConfigRequest.java b/src/main/java/com/salkcoding/oswl/dto/api/EmbeddedAiConfigRequest.java
index 7ba99229..b49d2ad5 100644
--- a/src/main/java/com/salkcoding/oswl/dto/api/EmbeddedAiConfigRequest.java
+++ b/src/main/java/com/salkcoding/oswl/dto/api/EmbeddedAiConfigRequest.java
@@ -9,11 +9,11 @@
 @Setter
 public class EmbeddedAiConfigRequest {
 
-    @Schema(description = "Directory holding llama-server(.exe) and .gguf models. Null = keep current; blank = clear override (use oswl.ai.embedded.dir default).",
+    @Schema(description = "Root directory with llama/ runtime and model/Qwen, model/Gemma weights. Null = keep current; blank = clear override (use oswl.ai.embedded.dir default).",
             example = "C:\\tools\\embedded-ai")
     private String dir;
 
     @Schema(description = "Preferred .gguf model file name. Null = keep current; blank = clear override (use built-in preference order). Takes effect on next start.",
-            example = "qwen3-1.7b-q4_k_m.gguf")
+            example = "Qwen3.5-2B-Q4_K_M.gguf")
     private String model;
 }
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebPushAttempt.java b/src/main/java/com/salkcoding/oswl/dto/api/WebPushAttempt.java
new file mode 100644
index 00000000..632dc7f4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebPushAttempt.java
@@ -0,0 +1,2 @@
+package com.salkcoding.oswl.dto.api;
+public record WebPushAttempt(Long deliveryId,WebPushSubscriptionRequest subscription,String payload) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebPushStatus.java b/src/main/java/com/salkcoding/oswl/dto/api/WebPushStatus.java
new file mode 100644
index 00000000..f85e345c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebPushStatus.java
@@ -0,0 +1,6 @@
+package com.salkcoding.oswl.dto.api;
+import java.time.LocalDateTime;
+import java.util.List;
+public record WebPushStatus(boolean enabled,String publicKey,List subscriptions) {
+    public record Subscription(Long id,String endpointHash,boolean newHighRisk,boolean gateFailure,LocalDateTime expiresAt,boolean active) {}
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebPushSubscriptionRequest.java b/src/main/java/com/salkcoding/oswl/dto/api/WebPushSubscriptionRequest.java
new file mode 100644
index 00000000..78bd2837
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebPushSubscriptionRequest.java
@@ -0,0 +1,4 @@
+package com.salkcoding.oswl.dto.api;
+public record WebPushSubscriptionRequest(String endpoint,String p256dh,String auth,boolean newHighRisk,boolean gateFailure,String locale) {
+    @Override public String toString() {return "WebPushSubscriptionRequest[redacted]";}
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebhookDeliveryDto.java b/src/main/java/com/salkcoding/oswl/dto/api/WebhookDeliveryDto.java
new file mode 100644
index 00000000..43c2270a
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebhookDeliveryDto.java
@@ -0,0 +1,28 @@
+package com.salkcoding.oswl.dto.api;
+
+import com.salkcoding.oswl.domain.enums.WebhookDeliveryStatus;
+import com.salkcoding.oswl.domain.enums.WebhookEventType;
+import lombok.Builder;
+import lombok.Value;
+
+import java.time.LocalDateTime;
+
+/**
+ * One webhook delivery attempt shown in the settings UI.
+ */
+@Value
+@Builder
+public class WebhookDeliveryDto {
+
+    Long id;
+    WebhookEventType eventType;
+    Long projectId;
+    String projectName;
+    String referenceId;
+    WebhookDeliveryStatus status;
+    Integer httpStatus;
+    String errorMessage;
+    int retryCount;
+    String payloadSummary;
+    LocalDateTime createdAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingResponse.java b/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingResponse.java
new file mode 100644
index 00000000..46b3ed94
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingResponse.java
@@ -0,0 +1,22 @@
+package com.salkcoding.oswl.dto.api;
+
+import com.salkcoding.oswl.domain.enums.WebhookProvider;
+import lombok.Builder;
+import lombok.Value;
+
+/**
+ * Current Slack/Teams webhook settings. The URL itself is never returned;
+ * {@code hasUrl} indicates that an encrypted URL is stored.
+ */
+@Value
+@Builder
+public class WebhookSettingResponse {
+
+    WebhookProvider provider;
+    boolean hasUrl;
+    boolean enabled;
+    boolean notifyNewCve;
+    boolean notifyGateFailure;
+    boolean notifyScanFailure;
+    boolean notifyWaiverExpiry;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingUpdateRequest.java b/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingUpdateRequest.java
new file mode 100644
index 00000000..0649aecf
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebhookSettingUpdateRequest.java
@@ -0,0 +1,22 @@
+package com.salkcoding.oswl.dto.api;
+
+import com.salkcoding.oswl.domain.enums.WebhookProvider;
+import jakarta.validation.constraints.NotNull;
+import lombok.Value;
+
+/**
+ * Save request for webhook settings. A blank URL keeps the existing encrypted URL.
+ */
+@Value
+public class WebhookSettingUpdateRequest {
+
+    @NotNull
+    WebhookProvider provider;
+
+    String url;
+    boolean enabled;
+    boolean notifyNewCve;
+    boolean notifyGateFailure;
+    boolean notifyScanFailure;
+    boolean notifyWaiverExpiry;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/api/WebhookTestRequest.java b/src/main/java/com/salkcoding/oswl/dto/api/WebhookTestRequest.java
new file mode 100644
index 00000000..6f451781
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/api/WebhookTestRequest.java
@@ -0,0 +1,14 @@
+package com.salkcoding.oswl.dto.api;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Value;
+
+/**
+ * Test request that sends a sample message to the supplied URL without persisting it.
+ */
+@Value
+public class WebhookTestRequest {
+
+    @NotBlank
+    String url;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/config/ConfigBundle.java b/src/main/java/com/salkcoding/oswl/dto/config/ConfigBundle.java
new file mode 100644
index 00000000..1355843c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/config/ConfigBundle.java
@@ -0,0 +1,52 @@
+package com.salkcoding.oswl.dto.config;
+
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Portable instance-config bundle — role templates, license policy overrides,
+ * AI provider settings (minus secrets), user-customized AI prompt overrides, cache TTL
+ * policy, and the org/team/project security policy hierarchy. Never contains any secret,
+ * API key, or password; {@code redactedFields} lists what must be re-entered by hand after import.
+ *
+ * 
Prompt overrides are the DB-stored per-key customizations made in Settings → AI
+ * ({@code AiPreferences.promptOverrides}); the base templates themselves ship with the app
+ * (classpath resources, locale-overlaid) and are deliberately not portable.
+ *
+ * Policies are exported with their scope resolved to names (never numeric ids,
+ * which are not portable across instances). On import the scope is matched by exact name:
+ * the singleton organization always matches, teams and active (non-deleted) projects must
+ * match exactly one row — unresolvable or ambiguous scopes are skipped and reported in
+ * {@code ConfigImportResult.manualStepsRequired} instead of being guessed.
+ */
+public record ConfigBundle(
+        String exportedAt,
+        String appVersion,
+        List roleTemplates,
+        List licensePolicy,
+        List aiSettings,
+        /** User-customized AI prompt overrides ({key → template text}); base templates ship with the app. */
+        Map promptOverrides,
+        List cacheSettings,
+        List policies,
+        List redactedFields
+) {
+    public record RoleTemplateExport(String name, String description, java.util.Set permissions) {}
+
+    public record LicensePolicyExport(String spdxId, String status, String reason) {}
+
+    /** apiKey is never included — importing recreates the row inactive with the key blank. */
+    public record AiSettingExport(String provider, String modelName, String baseUrl, boolean wasActive) {}
+
+    public record CacheSettingExport(String cacheKey, long ttlSeconds) {}
+
+    /**
+     * One policy row with its scope as scopeType + scopeName (organization/team/project name).
+     * Raw org/team/project ids are never exported — they differ per instance.
+     */
+    public record PolicyExport(String scopeType, String scopeName, String name, String description,
+                               boolean locked, boolean enabled,
+                               String failOnSeverity, Boolean failOnKev, Double failOnEpss,
+                               Boolean failOnLicenseViolation, Boolean onlyNew,
+                               Boolean onlyReachable, Boolean failOnSecrets) {}
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/config/ConfigImportResult.java b/src/main/java/com/salkcoding/oswl/dto/config/ConfigImportResult.java
new file mode 100644
index 00000000..cc8e125b
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/config/ConfigImportResult.java
@@ -0,0 +1,19 @@
+package com.salkcoding.oswl.dto.config;
+
+import java.util.List;
+
+/**
+ * Outcome of a config bundle import — same shape for a dry run (nothing persisted)
+ * and a real apply, so the UI can preview before committing.
+ */
+public record ConfigImportResult(
+        boolean dryRun,
+        int roleTemplatesCreated, int roleTemplatesUpdated, int roleTemplatesSkippedBuiltIn,
+        int licensePolicyCreated, int licensePolicyUpdated,
+        int aiSettingsCreated, int aiSettingsUpdated,
+        int promptOverridesCreated, int promptOverridesUpdated,
+        int cacheSettingsUpdated,
+        int policiesCreated, int policiesUpdated, int policiesSkippedUnresolved,
+        List manualStepsRequired
+) {
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/diagnostics/DiagnosticCheckResult.java b/src/main/java/com/salkcoding/oswl/dto/diagnostics/DiagnosticCheckResult.java
new file mode 100644
index 00000000..59bd90a8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/diagnostics/DiagnosticCheckResult.java
@@ -0,0 +1,14 @@
+package com.salkcoding.oswl.dto.diagnostics;
+
+/**
+ * One self-diagnostics check result. {@code detail} is always safe to display or
+ * copy into a support request — no secrets, tokens, or passwords are ever placed there.
+ */
+public record DiagnosticCheckResult(
+        String id,
+        String label,
+        String status,   // UP | DOWN | SKIPPED | UNKNOWN
+        String detail,
+        long tookMs
+) {
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/gate/GateRequest.java b/src/main/java/com/salkcoding/oswl/dto/gate/GateRequest.java
index 6a531c74..75d433a2 100644
--- a/src/main/java/com/salkcoding/oswl/dto/gate/GateRequest.java
+++ b/src/main/java/com/salkcoding/oswl/dto/gate/GateRequest.java
@@ -22,6 +22,12 @@ public record GateRequest(
         Boolean failOnLicenseViolation,
         @Schema(description = "Consider only findings absent from the previous completed scan", example = "true")
         Boolean onlyNew,
+        @Schema(description = "Opt-in CVE filter: evaluate libraries referenced by bytecode or supported source imports. " +
+                "UNKNOWN is excluded; static references do not prove runtime execution. Default false includes UNKNOWN.",
+                example = "false")
+        Boolean onlyReachable,
+        @Schema(description = "Fail on any CRITICAL/HIGH-severity secret finding", example = "false")
+        Boolean failOnSecrets,
         @Schema(description = "Optional GitHub target — when present, the result is posted as a PR comment and/or Check Run")
         GitHubTarget github
 ) {
diff --git a/src/main/java/com/salkcoding/oswl/dto/gate/GateResultDto.java b/src/main/java/com/salkcoding/oswl/dto/gate/GateResultDto.java
index e513cf11..661d9ba7 100644
--- a/src/main/java/com/salkcoding/oswl/dto/gate/GateResultDto.java
+++ b/src/main/java/com/salkcoding/oswl/dto/gate/GateResultDto.java
@@ -17,25 +17,31 @@ public record GateResultDto(
         String scanVersion,
         String baselineVersion,
         boolean onlyNew,
+        boolean onlyReachable,
         Thresholds thresholds,
         int evaluatedCount,
         int newVulnerabilityCount,
         List violations,
         String summary,
         String commentMarkdown,
-        GitHubResult github
+        GitHubResult github,
+        Coverage coverage
 ) {
+    /** Stored lookup evidence, not a guarantee of current upstream completeness or safety. */
+    public record Coverage(int totalComponents, long unanalysedComponents,
+                           boolean scanCompleted, boolean detailsAvailable, boolean complete) {}
     /** The gate thresholds that were applied (echoed for transparency in the comment). */
     public record Thresholds(
             String failOnSeverity,
             boolean failOnKev,
             Double failOnEpss,
-            boolean failOnLicenseViolation
+            boolean failOnLicenseViolation,
+            boolean failOnSecrets
     ) {}
 
     /** One reason the gate would fail (or a notable finding when the gate passes). */
     public record Violation(
-            String type,          // CVE | LICENSE
+            String type,          // CVE | LICENSE | MALICIOUS | SECRET | COVERAGE
             String id,            // CVE/GHSA id, or license name
             String component,     // name@version
             String severity,      // CVE severity or LICENSE status
diff --git a/src/main/java/com/salkcoding/oswl/dto/mobile/MobileAlertDto.java b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileAlertDto.java
new file mode 100644
index 00000000..583d82a1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileAlertDto.java
@@ -0,0 +1,18 @@
+package com.salkcoding.oswl.dto.mobile;
+
+/**
+ * One unacknowledged CVE alert row for the mobile notifications view.
+ * {@code detectedAt} is pre-formatted server-side (not a raw LocalDateTime) — this DTO is
+ * serialized straight into a {@code th:inline="javascript"} block, and Thymeleaf's inliner
+ * serializing java.time types is not something to rely on for a display string.
+ */
+public record MobileAlertDto(
+        Long id,
+        Long projectId,
+        String projectName,
+        String libraryName,
+        String libraryVersion,
+        String vulnId,
+        String severity,
+        String detectedAt
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/mobile/MobileProjectAlertsDto.java b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileProjectAlertsDto.java
new file mode 100644
index 00000000..0ac4a065
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileProjectAlertsDto.java
@@ -0,0 +1,10 @@
+package com.salkcoding.oswl.dto.mobile;
+
+import java.util.List;
+
+/**
+ * One project's unacknowledged CVE alerts, grouped for the mobile notifications view
+ * — the existing acknowledge endpoint clears a whole project's alerts at once,
+ * so the UI acts at the same granularity rather than per-alert.
+ */
+public record MobileProjectAlertsDto(Long projectId, String projectName, List alerts) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/mobile/MobileWaiverDto.java b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileWaiverDto.java
new file mode 100644
index 00000000..dac4c3bf
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/mobile/MobileWaiverDto.java
@@ -0,0 +1,17 @@
+package com.salkcoding.oswl.dto.mobile;
+
+/**
+ * One pending policy exception (waiver) row for the mobile approval view.
+ * {@code expiry} is pre-formatted server-side (not a raw LocalDateTime) — see
+ * {@link MobileAlertDto} for why.
+ */
+public record MobileWaiverDto(
+        Long id,
+        Long projectId,
+        String projectName,
+        String requesterName,
+        String reason,
+        String expiry,
+        String targetType,
+        String targetId
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/EffectivePolicyDto.java b/src/main/java/com/salkcoding/oswl/dto/policy/EffectivePolicyDto.java
new file mode 100644
index 00000000..d0dbeb28
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/EffectivePolicyDto.java
@@ -0,0 +1,26 @@
+package com.salkcoding.oswl.dto.policy;
+
+import lombok.Builder;
+import lombok.Value;
+
+@Value
+@Builder
+public class EffectivePolicyDto {
+
+    Long projectId;
+    PolicyDto organizationPolicy;
+    PolicyDto teamPolicy;
+    PolicyDto projectPolicy;
+
+    String failOnSeverity;
+    boolean failOnKev;
+    Double failOnEpss;
+    boolean failOnLicenseViolation;
+    boolean onlyNew;
+    // Boolean (not the primitive the 5 fields above use) — unlike those, which always have an
+    // instance-wide default to fall back to before this DTO is built, onlyReachable/failOnSecrets
+    // can legitimately be null here (GatePolicyService applies its own default later); a primitive
+    // would NPE on unboxing that null.
+    Boolean onlyReachable;
+    Boolean failOnSecrets;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyDto.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyDto.java
new file mode 100644
index 00000000..1065c595
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyDto.java
@@ -0,0 +1,30 @@
+package com.salkcoding.oswl.dto.policy;
+
+import com.salkcoding.oswl.domain.enums.PolicyScopeType;
+import lombok.Builder;
+import lombok.Value;
+
+import java.time.LocalDateTime;
+
+@Value
+@Builder
+public class PolicyDto {
+
+    Long id;
+    PolicyScopeType scope;
+    Long scopeId;
+    String scopeName;
+    String name;
+    String description;
+    boolean locked;
+    boolean enabled;
+    String failOnSeverity;
+    Boolean failOnKev;
+    Double failOnEpss;
+    Boolean failOnLicenseViolation;
+    Boolean onlyNew;
+    Boolean onlyReachable;
+    Boolean failOnSecrets;
+    LocalDateTime createdAt;
+    LocalDateTime updatedAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionDto.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionDto.java
new file mode 100644
index 00000000..6a2a71ef
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionDto.java
@@ -0,0 +1,30 @@
+package com.salkcoding.oswl.dto.policy;
+
+import com.salkcoding.oswl.domain.enums.PolicyExceptionStatus;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionTargetType;
+import lombok.Builder;
+import lombok.Value;
+
+import java.time.LocalDateTime;
+
+@Value
+@Builder
+public class PolicyExceptionDto {
+
+    Long id;
+    Long projectId;
+    Long requesterUserId;
+    String requesterName;
+    Long approverUserId;
+    String approverName;
+    String reason;
+    LocalDateTime expiry;
+    PolicyExceptionStatus status;
+    PolicyExceptionTargetType targetType;
+    String targetId;
+    String componentCoordinate;
+    LocalDateTime createdAt;
+    LocalDateTime updatedAt;
+    LocalDateTime approvedAt;
+    LocalDateTime revokedAt;
+}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionRequest.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionRequest.java
new file mode 100644
index 00000000..b849fa3d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyExceptionRequest.java
@@ -0,0 +1,17 @@
+package com.salkcoding.oswl.dto.policy;
+
+import com.salkcoding.oswl.domain.enums.PolicyExceptionTargetType;
+
+import java.time.LocalDateTime;
+
+/**
+ * Request a new policy exception (waiver).
+ */
+public record PolicyExceptionRequest(
+        Long projectId,
+        String reason,
+        LocalDateTime expiry,
+        PolicyExceptionTargetType targetType,
+        String targetId,
+        String componentCoordinate
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyGitOpsRequest.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyGitOpsRequest.java
new file mode 100644
index 00000000..d2c5e678
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyGitOpsRequest.java
@@ -0,0 +1,11 @@
+package com.salkcoding.oswl.dto.policy;
+
+/**
+ * Trigger a one-time GitOps sync of .oswl/policy.yaml for a project.
+ */
+public record PolicyGitOpsRequest(
+        Long projectId,
+        String repositoryUrl,
+        String accessToken,
+        String branch
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyRequest.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyRequest.java
new file mode 100644
index 00000000..14ba2ee8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyRequest.java
@@ -0,0 +1,22 @@
+package com.salkcoding.oswl.dto.policy;
+
+import com.salkcoding.oswl.domain.enums.PolicyScopeType;
+
+/**
+ * Create / update request for a scoped policy.
+ */
+public record PolicyRequest(
+        PolicyScopeType scopeType,
+        Long scopeId,
+        String name,
+        String description,
+        boolean locked,
+        boolean enabled,
+        String failOnSeverity,
+        Boolean failOnKev,
+        Double failOnEpss,
+        Boolean failOnLicenseViolation,
+        Boolean onlyNew,
+        Boolean onlyReachable,
+        Boolean failOnSecrets
+) {}
diff --git a/src/main/java/com/salkcoding/oswl/dto/policy/PolicyScopeOptionsDto.java b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyScopeOptionsDto.java
new file mode 100644
index 00000000..c11d251e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/dto/policy/PolicyScopeOptionsDto.java
@@ -0,0 +1,12 @@
+package com.salkcoding.oswl.dto.policy;
+
+import java.util.List;
+
+/**
+ * Options for the policy scope selector in the settings UI — the singleton
+ * organization (if the bootstrap row exists), every team, and every active project.
+ */
+public record PolicyScopeOptionsDto(Option organization, List
  *   embedded-ai/
- *     llama-server(.exe)     — llama.cpp server binary (or on PATH)
- *     qwen3-1.7b-q4_k_m.gguf — preferred model
+ *     llama/llama-server(.exe) — runtime and its companion libraries
+ *     model/Qwen/Qwen3.5-2B-Q4_K_M.gguf — CPU default
+ *     model/Gemma/gemma-4-E2B-it-Q4_K_M.gguf — optional model
  * 

  * Any other {@code .gguf} file dropped in this directory is picked up too — see
  * {@link #MODEL_PREFERENCE}.
@@ -56,16 +57,15 @@ public class EmbeddedAiService {
      * candidate by {@code startCandidates()}/{@code pickPreferredModel()}, this list only
      * orders preference among what's present.
      */
-    private static final List MODEL_PREFERENCE = List.of("qwen3");
+    private static final List MODEL_PREFERENCE = List.of("qwen3.5-2b-q4_k_m", "qwen3", "gemma-4-e2b-it");
 
     /**
      * Default model auto-fetched when the sidecar directory has no .gguf at all, so a fresh
      * on-premise install works out of the box with just {@code java -jar app.jar} — no
      * separate download step or build tooling required. Apache 2.0 licensed (see
-     * THIRD_PARTY_LICENSES.md), so bundling/auto-fetching it carries no extra redistribution
-     * obligation.
+     * THIRD_PARTY_LICENSES.md). Redistributors must retain the license and attribution.
      */
-    private static final String DEFAULT_MODEL_FILE = "qwen3-1.7b-q4_k_m.gguf";
+    private static final String DEFAULT_MODEL_FILE = "Qwen3.5-2B-Q4_K_M.gguf";
 
     private final String dirPath;
     private final int port;
@@ -119,16 +119,16 @@ public EmbeddedAiService(
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.dir:embedded-ai}") String dirPath,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.port:11435}") int port,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.context-size:8192}") int contextSize,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.gpu-layers:-1}") int gpuLayers,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.threads:0}") int threads,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.parallel-slots:4}") int parallelSlots,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.gpu-layers:0}") int gpuLayers,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.threads:1}") int threads,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.parallel-slots:1}") int parallelSlots,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.flash-attn:true}") boolean flashAttn,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.cache-reuse:256}") int cacheReuse,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.extra-args:}") String extraArgs,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.startup-timeout-seconds:120}") int startupTimeoutSeconds,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-url:https://huggingface.co/ggml-org/Qwen3-1.7B-GGUF/resolve/main/Qwen3-1.7B-Q4_K_M.gguf}") String defaultModelUrl,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-sha256:d2387ca2dbfee2ffabce7120d3770dadca0b293052bc2f0e138fdc940d9bc7b5}") String defaultModelSha256,
-            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-size-bytes:1282439264}") long defaultModelSizeBytes,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-url:https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/resolve/f6d5376be1edb4d416d56da11e5397a961aca8ae/Qwen3.5-2B-Q4_K_M.gguf}") String defaultModelUrl,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-sha256:aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223}") String defaultModelSha256,
+            @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.default-model-size-bytes:1280835840}") long defaultModelSizeBytes,
             @org.springframework.beans.factory.annotation.Value("${oswl.ai.embedded.fallback-model-url:}") String fallbackModelUrl,
             @org.springframework.beans.factory.annotation.Value("${oswl.airgapped.enabled:false}") boolean airgapped,
             AiPreferencesRepository preferencesRepository) {
@@ -169,7 +169,7 @@ public static class EmbeddedAiStatus {
         List availableModels;
         String baseUrl;
         String modelsDir;
-        /** True while the default Qwen3 model is being fetched (see {@link #downloadDefaultModel()}). */
+        /** True while the default Qwen3.5 model is being fetched (see {@link #downloadDefaultModel()}). */
         boolean downloading;
         long downloadedBytes;
         long downloadTotalBytes;
@@ -184,7 +184,7 @@ public String baseUrl() {
         return "http://127.0.0.1:" + port + "/v1";
     }
 
-    /** Model name reported to the OpenAI-compatible API (file stem, e.g. {@code qwen3-1.7b-q4_k_m}). */
+    /** Model name reported to the OpenAI-compatible API (file stem, e.g. {@code Qwen3.5-2B-Q4_K_M}). */
     public String modelName() {
         String file = activeModelFile != null ? activeModelFile
                 : pickPreferredModel().map(p -> p.getFileName().toString()).orElse("embedded");
@@ -262,13 +262,13 @@ public synchronized void start(String requestedModel) {
         stopRequested = false;
 
         Path binary = findServerBinary().orElseThrow(() -> new IllegalStateException(
-                "llama-server binary not found. Place llama-server(.exe) in " + resolveDir().toAbsolutePath()
+                "llama-server binary not found. Place llama-server(.exe) in " + resolveDir().resolve("llama").toAbsolutePath()
                         + " or on PATH (download: https://github.com/ggml-org/llama.cpp/releases)."));
         List candidates = startCandidates(requestedModel);
         if (candidates.isEmpty()) {
             throw new IllegalStateException(
                     "No .gguf model found in " + resolveDir().toAbsolutePath()
-                            + ". Expected qwen3-1.7b-q4_k_m.gguf (or any other .gguf file).");
+                            + "/model. Expected " + DEFAULT_MODEL_FILE + " (or another compatible .gguf file).");
         }
 
         lastError = null;
@@ -345,7 +345,7 @@ private boolean tryLaunchModel(Path binary, Path model, String name, boolean use
     }
 
     /**
-     * Downloads the default Qwen3 model into the sidecar directory, verifying its SHA256
+     * Downloads the default Qwen3.5 model into model/Qwen, verifying its SHA256
      * checksum before making it visible under its final name. Deliberately not
      * {@code synchronized} — a 1.2GB download can take minutes, and {@link #status()} (also
      * synchronized) must keep responding to polling for the {@code downloading}/progress
@@ -366,12 +366,18 @@ public void downloadDefaultModel() {
                     + "Place a .gguf model file in " + resolveDir().toAbsolutePath() + " manually.";
             throw new IllegalStateException(lastError);
         }
-        if (downloading) return;
-        downloading = true;
-        downloadedBytes = 0;
-        downloadTotalBytes = defaultModelSizeBytes;
+        synchronized (this) {
+            if (downloading) return;
+            downloading = true;
+            downloadedBytes = 0;
+            downloadTotalBytes = defaultModelSizeBytes;
+            lastError = null;
+        }
         try {
             attemptDownloadWithFallback();
+        } catch (RuntimeException e) {
+            lastError = e.getMessage();
+            throw e;
         } finally {
             downloading = false;
         }
@@ -386,7 +392,7 @@ public void downloadDefaultModel() {
      * byte-identical copy re-hosted elsewhere.
      */
     private void attemptDownloadWithFallback() {
-        Path dir = resolveDir();
+        Path dir = resolveDir().resolve("model").resolve("Qwen");
         Path dest = dir.resolve(DEFAULT_MODEL_FILE);
         Path partFile = dir.resolve(DEFAULT_MODEL_FILE + ".part");
         boolean hasFallback = fallbackModelUrl != null && !fallbackModelUrl.isBlank()
@@ -394,7 +400,7 @@ private void attemptDownloadWithFallback() {
         try {
             attemptDownload(defaultModelUrl, dir, dest, partFile);
         } catch (IllegalStateException primaryFailure) {
-            if (!hasFallback) throw primaryFailure;
+            if (!hasFallback || Thread.currentThread().isInterrupted()) throw primaryFailure;
             log.warn("[EmbeddedAI] Default model download from primary URL failed ({}) — retrying fallback {}",
                     primaryFailure.getMessage(), fallbackModelUrl);
             downloadedBytes = 0;
@@ -419,6 +425,7 @@ private void attemptDownload(String url, Path dir, Path dest, Path partFile) {
                     .build();
             HttpResponse response = downloadClient.send(request, HttpResponse.BodyHandlers.ofInputStream());
             if (response.statusCode() != 200) {
+                response.body().close();
                 throw new IllegalStateException(
                         "Model download failed: HTTP " + response.statusCode() + " from " + url);
             }
@@ -431,13 +438,16 @@ private void attemptDownload(String url, Path dir, Path dest, Path partFile) {
                 byte[] buffer = new byte[64 * 1024];
                 int read;
                 while ((read = in.read(buffer)) != -1) {
+                    if (Thread.currentThread().isInterrupted()) throw new InterruptedException("Model download interrupted");
+                    if (downloadedBytes + read > defaultModelSizeBytes)
+                        throw new IOException("Model download exceeds the expected size");
                     out.write(buffer, 0, read);
                     downloadedBytes += read;
                 }
             }
 
             String actualSha256 = HexFormat.of().formatHex(digest.digest());
-            if (!actualSha256.equalsIgnoreCase(defaultModelSha256)) {
+            if (downloadedBytes != defaultModelSizeBytes || !actualSha256.equalsIgnoreCase(defaultModelSha256)) {
                 Files.deleteIfExists(partFile);
                 throw new IllegalStateException("Downloaded model failed checksum verification "
                         + "(expected " + defaultModelSha256 + ", got " + actualSha256 + ") — deleted, please retry.");
@@ -478,7 +488,7 @@ private static MessageDigest sha256Digest() {
      * Launches llama-server for one model candidate. Binary, model and log paths are
      * absolute-normalized because the child process CWD is the sidecar directory.
      *
-     * @param useGpu when {@code false}, {@code -ngl} is omitted regardless of the configured
+     * @param useGpu when {@code false}, {@code -ngl 0} is explicit regardless of the configured
      *               {@code gpu-layers} — used for the CPU-only retry after a GPU start failure
      */
     private void launch(Path binary, Path model, boolean useGpu) throws IOException {
@@ -500,22 +510,21 @@ private void launch(Path binary, Path model, boolean useGpu) throws IOException
         cmd.add("0");
         cmd.add("--no-webui");
 
-        if (useGpu && gpuLayers != 0) {
-            cmd.add("-ngl");
-            cmd.add(gpuLayers < 0 ? "999" : String.valueOf(gpuLayers));
-        }
+        cmd.add("-ngl");
+        cmd.add(useGpu ? (gpuLayers < 0 ? "999" : String.valueOf(gpuLayers)) : "0");
         if (threads > 0) {
             cmd.add("-t");
             cmd.add(String.valueOf(threads));
         }
+        cmd.add("--parallel");
+        cmd.add(String.valueOf(Math.max(1, parallelSlots)));
         if (parallelSlots > 1) {
-            cmd.add("--parallel");
-            cmd.add(String.valueOf(parallelSlots));
             cmd.add("--cont-batching");
             logSlotContextWarningIfNeeded();
         }
         if (flashAttn) {
             cmd.add("-fa");
+            cmd.add("on");
         }
         if (cacheReuse > 0) {
             cmd.add("--cache-reuse");
@@ -529,6 +538,9 @@ private void launch(Path binary, Path model, boolean useGpu) throws IOException
                 .directory(resolveDir().toFile())
                 .redirectErrorStream(true)
                 .redirectOutput(logFile.toFile());
+        // Use the runtime's environment option so Windows argument parsing cannot strip
+        // JSON quotes. A zero reasoning budget alone is insufficient for these templates.
+        pb.environment().put("LLAMA_ARG_CHAT_TEMPLATE_KWARGS", "{\"enable_thinking\":false}");
         process = pb.start();
         log.info("[EmbeddedAI] Started llama-server pid={} model={} port={} gpu={} ngl={} parallel={} threads={} flashAttn={} cacheReuse={}",
                 process.pid(), model.getFileName(), port, useGpu,
@@ -646,7 +658,8 @@ private String persistedEmbeddedModel() {
     /** Model shown in the UI: persisted preference when set, otherwise the first preferred .gguf. */
     private String preferredModelFile() {
         String persisted = persistedEmbeddedModel();
-        if (persisted != null) return persisted;
+        if (persisted != null && findModels().stream()
+                .anyMatch(p -> p.getFileName().toString().equalsIgnoreCase(persisted))) return persisted;
         return pickPreferredModel().map(p -> p.getFileName().toString()).orElse(null);
     }
 
@@ -697,7 +710,8 @@ private String logTail() {
     private Optional findServerBinary() {
         String exe = isWindows() ? "llama-server.exe" : "llama-server";
         Path dir = resolveDir();
-        for (Path candidate : List.of(dir.resolve(exe), dir.resolve("bin").resolve(exe))) {
+        for (Path candidate : List.of(dir.resolve("llama").resolve(exe),
+                dir.resolve("llama").resolve("bin").resolve(exe), dir.resolve(exe), dir.resolve("bin").resolve(exe))) {
             if (Files.isRegularFile(candidate)) return Optional.of(candidate);
         }
         // PATH lookup
@@ -715,17 +729,41 @@ private Optional findServerBinary() {
     private List findModels() {
         Path dir = resolveDir();
         if (!Files.isDirectory(dir)) return List.of();
-        try (Stream files = Files.list(dir)) {
-            return files
-                    .filter(p -> p.getFileName().toString().toLowerCase(Locale.ROOT).endsWith(".gguf"))
-                    .sorted()
-                    .toList();
+        try {
+            // Scan only the managed model tree and the legacy flat folder. Runtime assets,
+            // archived weights and multimodal projectors must never become model choices.
+            List found = new ArrayList<>();
+            Path modelDir = dir.resolve("model");
+            if (Files.isDirectory(modelDir)) {
+                try (Stream files = Files.walk(modelDir, 2)) {
+                    files.filter(p -> isChatModel(dir, p)).sorted().forEach(found::add);
+                }
+            }
+            try (Stream files = Files.list(dir)) {
+                files.filter(p -> isChatModel(dir, p)).sorted().forEach(found::add);
+            }
+            // The public API uses file names. Prefer the managed tree for duplicate names,
+            // retaining compatibility with previously saved flat-folder selections.
+            java.util.Map unique = new java.util.LinkedHashMap<>();
+            for (Path file : found) unique.putIfAbsent(file.getFileName().toString().toLowerCase(Locale.ROOT), file);
+            return List.copyOf(unique.values());
         } catch (IOException e) {
             log.warn("[EmbeddedAI] Could not list models in {}: {}", dir, e.getMessage());
             return List.of();
         }
     }
 
+    private boolean isChatModel(Path root, Path file) {
+        String name = file.getFileName().toString().toLowerCase(Locale.ROOT);
+        if (!Files.isRegularFile(file) || !name.endsWith(".gguf")
+                || name.startsWith("mmproj") || name.startsWith("mtp-") || name.startsWith("imatrix")) return false;
+        try {
+            return file.toRealPath().startsWith(root.toRealPath());
+        } catch (IOException e) {
+            return false;
+        }
+    }
+
     private Optional pickPreferredModel() {
         List models = findModels();
         for (String fragment : MODEL_PREFERENCE) {
diff --git a/src/main/java/com/salkcoding/oswl/service/ai/OpenAiClient.java b/src/main/java/com/salkcoding/oswl/service/ai/OpenAiClient.java
index 7cd9f6ca..3b18485b 100644
--- a/src/main/java/com/salkcoding/oswl/service/ai/OpenAiClient.java
+++ b/src/main/java/com/salkcoding/oswl/service/ai/OpenAiClient.java
@@ -3,7 +3,7 @@
 import com.fasterxml.jackson.core.type.TypeReference;
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.salkcoding.oswl.domain.entity.AiSetting;
+import com.salkcoding.oswl.domain.entity.ai.AiSetting;
 import com.salkcoding.oswl.domain.enums.AiEffort;
 import com.salkcoding.oswl.domain.enums.AiProvider;
 import com.salkcoding.oswl.security.OutboundUrlValidator;
@@ -43,10 +43,10 @@ public class OpenAiClient implements AiAnalysisClient {
     private static final String DEFAULT_GEMINI_MODEL = "gemini-2.5-flash";
     private static final String PROVIDER_TAG = "OpenAI";
 
-    /** Streaming connect timeout (C9) — same backstop as the non-streaming RestTemplate. */
+    /** Streaming connect timeout — same backstop as the non-streaming RestTemplate. */
     private static final Duration STREAMING_CONNECT_TIMEOUT = Duration.ofSeconds(10);
     /**
-     * Total-exchange timeout for a streaming call (C9). Unlike the non-streaming read timeout
+     * Total-exchange timeout for a streaming call. Unlike the non-streaming read timeout
      * (socket-idle based), the JDK {@link HttpClient} request timeout caps the WHOLE exchange,
      * and a slow local model can legitimately stream tokens for minutes — so this is a
      * deliberately generous hang backstop rather than a latency target.
@@ -66,7 +66,7 @@ public class OpenAiClient implements AiAnalysisClient {
             .build();
 
     /**
-     * D2: stream free-form AI calls (posture/trend/diff) token-by-token so Quick Import can show
+     * Stream free-form AI calls (posture/trend/diff) token-by-token so Quick Import can show
      * a live preview. Field-injected (not constructor) so plain-Mockito unit tests keep the
      * Java default {@code false} — the non-streaming path they were written against.
      */
@@ -105,7 +105,7 @@ public String callWithSetting(String prompt, AiSetting setting, String operation
     }
 
     /**
-     * Free-form variant with a live chunk sink (D2). Streams tokens over OpenAI-compatible SSE
+     * Free-form variant with a live chunk sink. Streams tokens over OpenAI-compatible SSE
      * (llama.cpp uses the same format), pushing each delta to {@code chunkSink} as it arrives.
      * Falls back to the plain non-streaming call when streaming is disabled, the endpoint
      * rejects the streaming request, or the stream breaks mid-flight — the caller's contract
@@ -167,7 +167,7 @@ private String resolveModelsUrl(AiSetting setting) {
                 : completions;
     }
 
-    // ── Streaming (D2) ────────────────────────────────────────────────────────
+    // ── Streaming ────────────────────────────────────────────────────────
 
     /**
      * One streaming chat-completion call: {@code stream: true} + SSE parsing. Returns the full
diff --git a/src/main/java/com/salkcoding/oswl/service/ApiKeyService.java b/src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyService.java
similarity index 58%
rename from src/main/java/com/salkcoding/oswl/service/ApiKeyService.java
rename to src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyService.java
index 5f8b7c2e..1456407d 100644
--- a/src/main/java/com/salkcoding/oswl/service/ApiKeyService.java
+++ b/src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyService.java
@@ -1,11 +1,12 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.apikey;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.domain.entity.ApiKey;
-import com.salkcoding.oswl.domain.entity.Project;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.enums.ApiKeyScope;
 import com.salkcoding.oswl.exception.UnauthorizedException;
-import com.salkcoding.oswl.repository.ApiKeyRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
+import com.salkcoding.oswl.repository.apikey.ApiKeyRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.crypto.password.PasswordEncoder;
@@ -56,6 +57,7 @@ public IssuedApiKey issue(Long projectId, String label, LocalDateTime expiresAt)
 
         ApiKey apiKey = ApiKey.builder()
                 .project(project)
+                .scope(ApiKeyScope.PROJECT)
                 .tokenPrefix(tokenPrefix)
                 .tokenHash(tokenHash)
                 .label(label)
@@ -71,11 +73,76 @@ public IssuedApiKey issue(Long projectId, String label, LocalDateTime expiresAt)
         return new IssuedApiKey(saved, plainToken);
     }
 
+    /**
+     * Issues a dedicated SCIM provisioning token. Unlike project keys, this token is not
+     * bound to a project and is rejected by the normal CLI scan API.
+     */
+    @Transactional
+    public IssuedApiKey issueScimToken(String label, LocalDateTime expiresAt) {
+        String plainToken = null;
+        String tokenPrefix = null;
+        String tokenHash = null;
+
+        for (int attempt = 0; attempt < PREFIX_COLLISION_RETRIES; attempt++) {
+            plainToken = generateToken();
+            tokenPrefix = ApiKeyTokenSupport.extractPrefix(plainToken);
+            if (apiKeyRepository.findByTokenPrefix(tokenPrefix).isEmpty()) {
+                tokenHash = passwordEncoder.encode(plainToken);
+                break;
+            }
+            log.warn("[ApiKey] Token prefix collision on attempt {} — regenerating", attempt + 1);
+        }
+        if (tokenHash == null) {
+            throw new IllegalStateException("Could not generate a unique API key prefix");
+        }
+
+        ApiKey apiKey = ApiKey.builder()
+                .scope(ApiKeyScope.SCIM)
+                .tokenPrefix(tokenPrefix)
+                .tokenHash(tokenHash)
+                .label(label)
+                .expiresAt(expiresAt)
+                .build();
+
+        ApiKey saved = apiKeyRepository.save(apiKey);
+        log.info("[ApiKey] Issued SCIM token label={} keyId={}", label, saved.getId());
+        auditLogService.log("SCIM_KEY.CREATE", "SCIM_KEY",
+                saved.getId().toString(),
+                label != null ? label : "-",
+                "scope=SCIM");
+        return new IssuedApiKey(saved, plainToken);
+    }
+
     @Transactional
     public ApiKey validateAndRecord(String rawToken) {
         if (rawToken == null || rawToken.isBlank()) {
             throw new UnauthorizedException("API key is invalid.");
         }
+        ApiKey key = validateRawToken(rawToken);
+        if (key.getScope() != ApiKeyScope.PROJECT) {
+            throw new UnauthorizedException("API key scope is not valid for this endpoint.");
+        }
+        key.recordUsage();
+        return key;
+    }
+
+    /**
+     * Validates a raw token and returns the key when the scope matches the expected one.
+     * Caller must record usage if desired.
+     */
+    @Transactional
+    public ApiKey validateScopedToken(String rawToken, ApiKeyScope expectedScope) {
+        if (rawToken == null || rawToken.isBlank()) {
+            throw new UnauthorizedException("API key is invalid.");
+        }
+        ApiKey key = validateRawToken(rawToken);
+        if (key.getScope() != expectedScope) {
+            throw new UnauthorizedException("API key scope is not valid for this endpoint.");
+        }
+        return key;
+    }
+
+    private ApiKey validateRawToken(String rawToken) {
         String prefix = ApiKeyTokenSupport.extractPrefix(rawToken.strip());
         ApiKey key = apiKeyRepository.findByTokenPrefix(prefix)
                 .orElseThrow(() -> new UnauthorizedException("API key is invalid."));
@@ -87,8 +154,6 @@ public ApiKey validateAndRecord(String rawToken) {
         if (!key.isValid()) {
             throw new UnauthorizedException("API key has been revoked or expired.");
         }
-
-        key.recordUsage();
         return key;
     }
 
@@ -96,7 +161,7 @@ public ApiKey validateAndRecord(String rawToken) {
     public void revoke(Long keyId, Long projectId) {
         ApiKey key = apiKeyRepository.findById(keyId)
                 .orElseThrow(() -> new IllegalArgumentException("ApiKey not found: " + keyId));
-        if (!key.getProject().getId().equals(projectId)) {
+        if (key.getProject() == null || !key.getProject().getId().equals(projectId)) {
             throw new IllegalArgumentException("Key does not belong to project " + projectId + ".");
         }
         key.revoke();
@@ -128,6 +193,15 @@ public ApiKey toggleActive(Long keyId) {
         return key;
     }
 
+    @Transactional
+    public void delete(Long keyId) {
+        ApiKey key = apiKeyRepository.findWithProjectById(keyId)
+                .orElseThrow(() -> new IllegalArgumentException("ApiKey not found: " + keyId));
+        auditLogService.log("CLI_KEY.DELETE", "CLI_KEY", keyId.toString(),
+                key.getLabel() != null ? key.getLabel() : "-", null);
+        apiKeyRepository.delete(key);
+    }
+
     private String generateToken() {
         byte[] bytes = new byte[TOKEN_BYTES];
         secureRandom.nextBytes(bytes);
diff --git a/src/main/java/com/salkcoding/oswl/service/ApiKeyTokenSupport.java b/src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyTokenSupport.java
similarity index 94%
rename from src/main/java/com/salkcoding/oswl/service/ApiKeyTokenSupport.java
rename to src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyTokenSupport.java
index f0bb669c..c9cc40cf 100644
--- a/src/main/java/com/salkcoding/oswl/service/ApiKeyTokenSupport.java
+++ b/src/main/java/com/salkcoding/oswl/service/apikey/ApiKeyTokenSupport.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.apikey;
 
 /**
  * Helpers for CLI API key prefix extraction and display masking.
diff --git a/src/main/java/com/salkcoding/oswl/service/IssuedApiKey.java b/src/main/java/com/salkcoding/oswl/service/apikey/IssuedApiKey.java
similarity index 60%
rename from src/main/java/com/salkcoding/oswl/service/IssuedApiKey.java
rename to src/main/java/com/salkcoding/oswl/service/apikey/IssuedApiKey.java
index 21b0c8f1..df881f72 100644
--- a/src/main/java/com/salkcoding/oswl/service/IssuedApiKey.java
+++ b/src/main/java/com/salkcoding/oswl/service/apikey/IssuedApiKey.java
@@ -1,6 +1,6 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.apikey;
 
-import com.salkcoding.oswl.domain.entity.ApiKey;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
 
 /**
  * Result of issuing a CLI API key — plain token is available only in this object.
diff --git a/src/main/java/com/salkcoding/oswl/service/ProjectCliKeyPolicyService.java b/src/main/java/com/salkcoding/oswl/service/apikey/ProjectCliKeyPolicyService.java
similarity index 93%
rename from src/main/java/com/salkcoding/oswl/service/ProjectCliKeyPolicyService.java
rename to src/main/java/com/salkcoding/oswl/service/apikey/ProjectCliKeyPolicyService.java
index 2132ffd6..6c5e82ee 100644
--- a/src/main/java/com/salkcoding/oswl/service/ProjectCliKeyPolicyService.java
+++ b/src/main/java/com/salkcoding/oswl/service/apikey/ProjectCliKeyPolicyService.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.apikey;
 
-import com.salkcoding.oswl.domain.entity.ApiKey;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
 import com.salkcoding.oswl.exception.ConflictException;
-import com.salkcoding.oswl.repository.ApiKeyRepository;
+import com.salkcoding.oswl.repository.apikey.ApiKeyRepository;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
diff --git a/src/main/java/com/salkcoding/oswl/service/config/CacheInvalidationService.java b/src/main/java/com/salkcoding/oswl/service/config/CacheInvalidationService.java
new file mode 100644
index 00000000..d832aaf6
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/config/CacheInvalidationService.java
@@ -0,0 +1,74 @@
+package com.salkcoding.oswl.service.config;
+
+import com.salkcoding.oswl.domain.entity.config.CacheInvalidation;
+import com.salkcoding.oswl.repository.config.CacheInvalidationRepository;
+import jakarta.annotation.PostConstruct;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.dao.DataIntegrityViolationException;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.PlatformTransactionManager;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.transaction.support.TransactionTemplate;
+
+import java.time.LocalDateTime;
+import java.util.List;
+
+/**
+ * Broadcasts "this cache changed" to other instances by bumping a version row in the
+ * {@code cache_invalidation} table. Caffeine caches are JVM-local, so without this a
+ * settings change on one instance would only reach the others at TTL expiry.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class CacheInvalidationService {
+
+    /** Logical cache names — one per cached service, evict-all granularity. */
+    public static final String LICENSE_POLICY = "licensePolicy";
+    public static final String ROLE_TEMPLATE = "roleTemplate";
+    public static final String SECURITY_SETTINGS = "securitySettings";
+    public static final String WEBHOOK_SETTINGS = "webhookSettings";
+
+    private static final List ALL = List.of(
+            LICENSE_POLICY, ROLE_TEMPLATE, SECURITY_SETTINGS, WEBHOOK_SETTINGS);
+
+    private final CacheInvalidationRepository cacheInvalidationRepository;
+    private final PlatformTransactionManager transactionManager;
+
+    /**
+     * Pre-creates one row per known cache so {@link #bump(String)} is normally a pure
+     * atomic UPDATE. Two instances booting concurrently can race on the insert; the loser
+     * gets a PK violation, which is harmless — the row now exists, so it is swallowed.
+     */
+    @PostConstruct
+    void seedRows() {
+        for (String name : ALL) {
+            try {
+                new TransactionTemplate(transactionManager).executeWithoutResult(tx -> {
+                    if (!cacheInvalidationRepository.existsById(name)) {
+                        cacheInvalidationRepository.save(
+                                new CacheInvalidation(name, 0L, LocalDateTime.now()));
+                    }
+                });
+            } catch (DataIntegrityViolationException e) {
+                log.debug("[CacheInvalidation] Row for '{}' already inserted by a concurrent instance", name);
+            }
+        }
+    }
+
+    /**
+     * Records that {@code cacheName} changed. Joins the caller's transaction (REQUIRED),
+     * so the bump commits — or rolls back — together with the settings mutation itself.
+     */
+    @Transactional
+    public void bump(String cacheName) {
+        int updated = cacheInvalidationRepository.incrementVersion(cacheName, LocalDateTime.now());
+        if (updated == 0) {
+            // Rows are seeded at startup; reaching here means a new cache type whose row
+            // was never seeded — insert defensively.
+            cacheInvalidationRepository.save(
+                    new CacheInvalidation(cacheName, 1L, LocalDateTime.now()));
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/config/ConfigTransferService.java b/src/main/java/com/salkcoding/oswl/service/config/ConfigTransferService.java
new file mode 100644
index 00000000..888d1dbd
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/config/ConfigTransferService.java
@@ -0,0 +1,388 @@
+package com.salkcoding.oswl.service.config;
+
+import com.salkcoding.oswl.auth.entity.RoleTemplate;
+import com.salkcoding.oswl.auth.repository.RoleTemplateRepository;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.auth.service.CacheManagementService;
+import com.salkcoding.oswl.auth.service.RoleTemplateService;
+import com.fasterxml.jackson.core.type.TypeReference;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.domain.entity.ai.AiPreferences;
+import com.salkcoding.oswl.domain.entity.ai.AiSetting;
+import com.salkcoding.oswl.domain.entity.org.Organization;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.entity.policy.Policy;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.enums.AiProvider;
+import com.salkcoding.oswl.domain.enums.LicenseStatus;
+import com.salkcoding.oswl.domain.enums.PolicyScopeType;
+import com.salkcoding.oswl.dto.config.ConfigBundle;
+import com.salkcoding.oswl.dto.config.ConfigBundle.AiSettingExport;
+import com.salkcoding.oswl.dto.config.ConfigBundle.CacheSettingExport;
+import com.salkcoding.oswl.dto.config.ConfigBundle.LicensePolicyExport;
+import com.salkcoding.oswl.dto.config.ConfigBundle.PolicyExport;
+import com.salkcoding.oswl.dto.config.ConfigBundle.RoleTemplateExport;
+import com.salkcoding.oswl.dto.config.ConfigImportResult;
+import com.salkcoding.oswl.repository.ai.AiSettingRepository;
+import com.salkcoding.oswl.repository.license.LicensePolicyRepository;
+import com.salkcoding.oswl.repository.org.OrganizationRepository;
+import com.salkcoding.oswl.repository.org.TeamRepository;
+import com.salkcoding.oswl.repository.policy.PolicyRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.service.ai.AiPreferencesService;
+import com.salkcoding.oswl.service.ai.AiPromptTemplateService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.time.Instant;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Exports/imports a portable subset of instance configuration as a single JSON bundle —
+ * role templates, license policy overrides, AI provider settings minus
+ * secrets, cache TTL policy, and the org/team/project policy hierarchy.
+ * Meant for staging→prod promotion and air-gapped transfer.
+ *
+ * Policies cross instances with name-based scope matching (numeric ids are not
+ * portable): the singleton organization always matches, teams and active projects must
+ * match exactly one row by exact name. Unresolvable or ambiguous scopes are skipped and
+ * reported in {@code manualStepsRequired} — never guessed.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class ConfigTransferService {
+
+    private static final ObjectMapper MAPPER = new ObjectMapper();
+
+    private final RoleTemplateService roleTemplateService;
+    private final RoleTemplateRepository roleTemplateRepository;
+    private final LicensePolicyRepository licensePolicyRepository;
+    private final com.salkcoding.oswl.service.license.LicensePolicyService licensePolicyService;
+    private final AiSettingRepository aiSettingRepository;
+    private final com.salkcoding.oswl.repository.ai.AiPreferencesRepository aiPreferencesRepository;
+    private final AiPreferencesService aiPreferencesService;
+    private final CacheManagementService cacheManagementService;
+    private final AuditLogService auditLogService;
+    private final PolicyRepository policyRepository;
+    private final OrganizationRepository organizationRepository;
+    private final TeamRepository teamRepository;
+    private final ProjectRepository projectRepository;
+
+    @Transactional(readOnly = true)
+    public ConfigBundle export() {
+        List roleTemplates = roleTemplateService.findAll().stream()
+                .filter(t -> !t.isBuiltIn())
+                .map(t -> new RoleTemplateExport(t.getName(), t.getDescription(), t.getPermissions()))
+                .toList();
+
+        List licensePolicy = licensePolicyRepository.findAll().stream()
+                .map(e -> new LicensePolicyExport(e.getSpdxId(), e.getStatus().name(), e.getReason()))
+                .toList();
+
+        List aiSettings = aiSettingRepository.findAll().stream()
+                .map(s -> new AiSettingExport(s.getProvider().name(), s.getModelName(), s.getBaseUrl(), s.isActive()))
+                .toList();
+
+        Map promptOverrides = parseOverridesJson(
+                aiPreferencesRepository.findById(AiPreferences.SINGLETON_ID)
+                        .map(AiPreferences::getPromptOverrides).orElse(null));
+        if (promptOverrides.isEmpty()) {
+            promptOverrides = null;
+        }
+
+        List cacheSettings = cacheManagementService.findAll().stream()
+                .map(c -> new CacheSettingExport(c.getCacheKey(), c.getTtlSeconds()))
+                .toList();
+
+        List policies = policyRepository.findAllByOrderByCreatedAtDesc().stream()
+                .map(p -> new PolicyExport(p.getScope().name(), exportScopeName(p),
+                        p.getName(), p.getDescription(), p.isLocked(), p.isEnabled(),
+                        p.getFailOnSeverity(), p.getFailOnKev(), p.getFailOnEpss(),
+                        p.getFailOnLicenseViolation(), p.getOnlyNew(),
+                        p.getOnlyReachable(), p.getFailOnSecrets()))
+                .toList();
+
+        List redacted = new ArrayList<>();
+        if (!aiSettings.isEmpty()) {
+            redacted.add("aiSettings[*].apiKey — re-enter and re-activate each provider in Settings → AI after import");
+        }
+
+        return new ConfigBundle(Instant.now().toString(), null,
+                roleTemplates, licensePolicy, aiSettings, promptOverrides, cacheSettings, policies, redacted);
+    }
+
+    /** Scope as a name, never an id — ids are not portable across instances. */
+    private static String exportScopeName(Policy p) {
+        return switch (p.getScope()) {
+            case ORGANIZATION -> p.getOrganization() != null ? p.getOrganization().getName() : null;
+            case TEAM -> p.getTeam() != null ? p.getTeam().getName() : null;
+            case PROJECT -> p.getProject() != null ? p.getProject().getName() : null;
+        };
+    }
+
+    /** {@code dryRun=true} counts what would change without writing anything. */
+    @Transactional
+    public ConfigImportResult importBundle(ConfigBundle bundle, boolean dryRun) {
+        int rtCreated = 0, rtUpdated = 0, rtSkippedBuiltIn = 0;
+        for (RoleTemplateExport rt : nullSafe(bundle.roleTemplates())) {
+            RoleTemplate existing = roleTemplateRepository.findByName(rt.name()).orElse(null);
+            if (existing != null && existing.isBuiltIn()) {
+                rtSkippedBuiltIn++;
+                continue;
+            }
+            if (existing != null) rtUpdated++; else rtCreated++;
+            if (!dryRun) {
+                roleTemplateService.upsertByName(rt.name(), rt.description(), rt.permissions());
+            }
+        }
+
+        int licCreated = 0, licUpdated = 0;
+        for (LicensePolicyExport lic : nullSafe(bundle.licensePolicy())) {
+            boolean exists = licensePolicyRepository.findBySpdxId(lic.spdxId()).isPresent();
+            if (exists) licUpdated++; else licCreated++;
+            if (!dryRun) {
+                LicenseStatus status = parseStatus(lic.status());
+                if (status != null) {
+                    licensePolicyService.upsertEntry(lic.spdxId(), status, lic.reason());
+                }
+            }
+        }
+
+        int aiCreated = 0, aiUpdated = 0;
+        List manualSteps = new ArrayList<>();
+        for (AiSettingExport ai : nullSafe(bundle.aiSettings())) {
+            AiProvider provider = parseProvider(ai.provider());
+            if (provider == null) continue;
+            AiSetting existing = aiSettingRepository.findByProvider(provider).orElse(null);
+            if (existing != null) aiUpdated++; else aiCreated++;
+            if (!dryRun) {
+                if (existing != null) {
+                    existing.update(null, ai.modelName(), ai.baseUrl());
+                    aiSettingRepository.save(existing);
+                } else {
+                    aiSettingRepository.save(AiSetting.builder()
+                            .provider(provider)
+                            .modelName(ai.modelName())
+                            .baseUrl(ai.baseUrl())
+                            .active(false)
+                            .build());
+                }
+            }
+            manualSteps.add("AI provider " + provider + ": enter the API key and re-activate in Settings → AI");
+        }
+
+        // Prompt overrides merge key-by-key (bundle wins per key); keys outside the editable
+        // set and blank values are dropped, never guessed at.
+        int promptsCreated = 0, promptsUpdated = 0;
+        Map bundleOverrides = new LinkedHashMap<>();
+        for (Map.Entry e : (bundle.promptOverrides() != null
+                ? bundle.promptOverrides() : Map.of()).entrySet()) {
+            if (AiPromptTemplateService.EDITABLE_PROMPT_KEYS.contains(e.getKey())
+                    && e.getValue() != null && !e.getValue().isBlank()) {
+                bundleOverrides.put(e.getKey(), e.getValue());
+            }
+        }
+        if (!bundleOverrides.isEmpty()) {
+            AiPreferences prefs = aiPreferencesService.getEffective();
+            Map merged = new LinkedHashMap<>(parseOverridesJson(prefs.getPromptOverrides()));
+            for (Map.Entry e : bundleOverrides.entrySet()) {
+                if (merged.containsKey(e.getKey())) promptsUpdated++; else promptsCreated++;
+                merged.put(e.getKey(), e.getValue());
+            }
+            if (!dryRun) {
+                aiPreferencesService.save(prefs.getPromptsLocale(), prefs.getCveLimit(), prefs.getLicenseLimit(),
+                        prefs.getCveSeverities(), prefs.getTemperature(), prefs.getMaxTokens(),
+                        prefs.getDailyCallCap(), writeOverridesJson(merged), prefs.getDefaultDeploymentProfile(),
+                        prefs.getReasoningEffort(), prefs.isAutoBackfillInsights());
+            }
+        }
+
+        int cacheUpdated = 0;
+        for (CacheSettingExport c : nullSafe(bundle.cacheSettings())) {
+            cacheUpdated++;
+            if (!dryRun && c.ttlSeconds() > 0) {
+                cacheManagementService.updateTtl(c.cacheKey(), c.ttlSeconds());
+            }
+        }
+
+        int polCreated = 0, polUpdated = 0, polUnresolved = 0;
+        for (PolicyExport pol : nullSafe(bundle.policies())) {
+            PolicyTarget target = resolvePolicyTarget(pol, manualSteps);
+            if (target == null) {
+                polUnresolved++;
+                continue;
+            }
+            if (target.existing() != null) polUpdated++; else polCreated++;
+            if (!dryRun) {
+                applyPolicy(pol, target);
+            }
+        }
+
+        if (!dryRun) {
+            String summary = String.format(
+                    "roleTemplates=%d/%d license=%d/%d aiSettings=%d/%d promptOverrides=%d/%d cache=%d policies=%d/%d unresolvedPolicies=%d (created/updated)",
+                    rtCreated, rtUpdated, licCreated, licUpdated, aiCreated, aiUpdated,
+                    promptsCreated, promptsUpdated, cacheUpdated,
+                    polCreated, polUpdated, polUnresolved);
+            auditLogService.log("CONFIG.IMPORT", "SYSTEM", null, "config-bundle", summary);
+            log.info("[ConfigTransfer] Import applied: {}", summary);
+        }
+
+        return new ConfigImportResult(dryRun, rtCreated, rtUpdated, rtSkippedBuiltIn,
+                licCreated, licUpdated, aiCreated, aiUpdated, promptsCreated, promptsUpdated,
+                cacheUpdated, polCreated, polUpdated, polUnresolved, manualSteps);
+    }
+
+    /**
+     * Matches an exported policy's scope to a target on this instance by name.
+     * Returns {@code null} when the scope cannot be resolved — the caller then skips the
+     * policy (a reason has already been appended to {@code manualSteps}).
+     *
+     * Organization scope always matches this instance's single organization row; a name
+     * mismatch is only noted, since there is exactly one organization per instance.
+     */
+    private PolicyTarget resolvePolicyTarget(PolicyExport pol, List manualSteps) {
+        PolicyScopeType scopeType = parseScopeType(pol.scopeType());
+        if (scopeType == null) {
+            manualSteps.add(unresolvedStep(pol, "unknown scopeType '" + pol.scopeType() + "'"));
+            return null;
+        }
+        switch (scopeType) {
+            case ORGANIZATION -> {
+                Organization org = organizationRepository.findFirstByOrderByIdAsc().orElse(null);
+                if (org == null) {
+                    manualSteps.add(unresolvedStep(pol, "no organization exists on this instance"));
+                    return null;
+                }
+                if (pol.scopeName() != null && !pol.scopeName().equals(org.getName())) {
+                    manualSteps.add("Policy '" + pol.name() + "': organization name mismatch — bundle scope is '"
+                            + pol.scopeName() + "' but this instance's organization is '" + org.getName()
+                            + "'; applied to this instance's organization anyway");
+                }
+                Policy existing = policyRepository.findByOrganizationId(org.getId()).orElse(null);
+                return new PolicyTarget(org, null, null, existing);
+            }
+            case TEAM -> {
+                Team team = pol.scopeName() != null
+                        ? teamRepository.findByName(pol.scopeName()).orElse(null)
+                        : null;
+                if (team == null) {
+                    manualSteps.add(unresolvedStep(pol, "no team named '" + pol.scopeName()
+                            + "' on this instance — re-create it manually or rename the target"));
+                    return null;
+                }
+                Policy existing = policyRepository.findByTeamId(team.getId()).orElse(null);
+                return new PolicyTarget(null, team, null, existing);
+            }
+            case PROJECT -> {
+                List matches = pol.scopeName() != null
+                        ? projectRepository.findAllByNameAndDeletedAtIsNull(pol.scopeName())
+                        : List.of();
+                if (matches.isEmpty()) {
+                    manualSteps.add(unresolvedStep(pol, "no project named '" + pol.scopeName()
+                            + "' on this instance — re-create it manually or rename the target"));
+                    return null;
+                }
+                if (matches.size() > 1) {
+                    manualSteps.add(unresolvedStep(pol, matches.size() + " active projects named '"
+                            + pol.scopeName() + "' on this instance — ambiguous, not applied; "
+                            + "rename the target project and retry, or re-create the policy manually"));
+                    return null;
+                }
+                Project project = matches.get(0);
+                Policy existing = policyRepository.findByProjectId(project.getId()).orElse(null);
+                return new PolicyTarget(null, null, project, existing);
+            }
+        }
+        return null; // unreachable — switch is exhaustive
+    }
+
+    private static String unresolvedStep(PolicyExport pol, String reason) {
+        return "Policy '" + pol.name() + "': " + reason;
+    }
+
+    private void applyPolicy(PolicyExport pol, PolicyTarget target) {
+        if (target.existing() != null) {
+            target.existing().update(pol.name(), pol.description(), pol.locked(), pol.enabled(),
+                    pol.failOnSeverity(), pol.failOnKev(), pol.failOnEpss(),
+                    pol.failOnLicenseViolation(), pol.onlyNew(),
+                    pol.onlyReachable(), pol.failOnSecrets());
+            policyRepository.save(target.existing());
+        } else {
+            policyRepository.save(Policy.builder()
+                    .scope(parseScopeType(pol.scopeType()))
+                    .organization(target.organization())
+                    .team(target.team())
+                    .project(target.project())
+                    .name(pol.name())
+                    .description(pol.description())
+                    .locked(pol.locked())
+                    .enabled(pol.enabled())
+                    .failOnSeverity(pol.failOnSeverity())
+                    .failOnKev(pol.failOnKev())
+                    .failOnEpss(pol.failOnEpss())
+                    .failOnLicenseViolation(pol.failOnLicenseViolation())
+                    .onlyNew(pol.onlyNew())
+                    .onlyReachable(pol.onlyReachable())
+                    .failOnSecrets(pol.failOnSecrets())
+                    .build());
+        }
+    }
+
+    /** Resolved import target: exactly one of organization/team/project is non-null. */
+    private record PolicyTarget(Organization organization, Team team, Project project, Policy existing) {}
+
+    private static PolicyScopeType parseScopeType(String s) {
+        try {
+            return s != null ? PolicyScopeType.valueOf(s) : null;
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    private static LicenseStatus parseStatus(String s) {
+        try {
+            return s != null ? LicenseStatus.valueOf(s) : null;
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    private static AiProvider parseProvider(String s) {
+        try {
+            return s != null ? AiProvider.valueOf(s) : null;
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    private static  List nullSafe(List list) {
+        return list != null ? list : List.of();
+    }
+
+    private static Map parseOverridesJson(String json) {
+        if (json == null || json.isBlank()) return Map.of();
+        try {
+            return MAPPER.readValue(json, new TypeReference>() {});
+        } catch (Exception e) {
+            log.warn("[ConfigTransfer] Ignoring unparseable prompt overrides JSON: {}", e.getMessage());
+            return Map.of();
+        }
+    }
+
+    private static String writeOverridesJson(Map overrides) {
+        if (overrides.isEmpty()) return null;
+        try {
+            return MAPPER.writeValueAsString(overrides);
+        } catch (Exception e) {
+            log.warn("[ConfigTransfer] Failed to serialize prompt overrides: {}", e.getMessage());
+            return null;
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/container/BaseImageEcosystemMapper.java b/src/main/java/com/salkcoding/oswl/service/container/BaseImageEcosystemMapper.java
new file mode 100644
index 00000000..55eed64e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/container/BaseImageEcosystemMapper.java
@@ -0,0 +1,100 @@
+package com.salkcoding.oswl.service.container;
+
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Maps a Docker base image reference ({@code repository[:tag]}) to the internal ecosystem tag
+ * for that OS release, when — and only when — the repository name and tag unambiguously name a
+ * known Linux distribution release.
+ *
+ * 
Deliberately conservative: only images whose repository name itself is a known
+ * distro (e.g. {@code debian}, {@code alpine}) are mapped. Images like {@code python:3.11-slim}
+ * or {@code node:20-alpine} are very likely Debian/Alpine underneath, but guessing that from the
+ * tag string would be exactly the "assume the label, not the data" mistake was
+ * written to stop repeating — so those return empty rather than a guess.
+ *
+ * 
The returned tag already carries the version, e.g. {@code "DEBIAN:11"} or
+ * {@code "ALPINE:V3.14"} — {@link com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService}
+ * reconstructs the exact-cased OSV ecosystem string ({@code "Debian:11"}, {@code "Alpine:v3.14"})
+ * from this at query time, since {@code Library.ecosystem} is always stored upper-cased.
+ */
+public final class BaseImageEcosystemMapper {
+
+    private BaseImageEcosystemMapper() {
+    }
+
+    /** Debian codename -> major version, for the well-known still-relevant stable releases. */
+    private static final Map DEBIAN_CODENAMES = Map.of(
+            "buster", "10", "bullseye", "11", "bookworm", "12", "trixie", "13");
+
+    /** Ubuntu codename -> release version, for the well-known LTS releases. */
+    private static final Map UBUNTU_CODENAMES = Map.of(
+            "bionic", "18.04", "focal", "20.04", "jammy", "22.04", "noble", "24.04");
+
+    /**
+     * @param repository the image repository name, e.g. {@code "debian"} in {@code debian:11}
+     *                    (registry/namespace prefixes like {@code library/} already stripped)
+     * @param tag         the image tag, e.g. {@code "11"}; {@code null}/blank treated as
+     *                    {@code "latest"}
+     * @return the internal ecosystem tag (e.g. {@code "DEBIAN:11"}), or {@code null} if this
+     *         repository/tag isn't a recognized, version-pinned distro release
+     */
+    public static String map(String repository, String tag) {
+        if (repository == null) {
+            return null;
+        }
+        String repo = repository.strip().toLowerCase(Locale.ROOT);
+        int slash = repo.lastIndexOf('/');
+        if (slash >= 0) {
+            repo = repo.substring(slash + 1);
+        }
+        String t = (tag == null || tag.isBlank()) ? "latest" : tag.strip().toLowerCase(Locale.ROOT);
+
+        return switch (repo) {
+            case "debian" -> debian(t);
+            case "ubuntu" -> ubuntu(t);
+            case "alpine" -> alpine(t);
+            default -> null;
+        };
+    }
+
+    private static String debian(String tag) {
+        String version = DEBIAN_CODENAMES.get(tag);
+        if (version == null && tag.matches("\\d+(\\.\\d+)?")) {
+            version = tag.split("\\.")[0]; // "11.5" -> "11" — OSV's Debian ecosystem is major-version only
+        }
+        return version != null ? "DEBIAN:" + version : null;
+    }
+
+    private static String ubuntu(String tag) {
+        String version = UBUNTU_CODENAMES.get(tag);
+        if (version != null) {
+            // Every codename in UBUNTU_CODENAMES is an LTS release, and OSV's real ecosystem/bucket
+            // name for those carries a literal ":LTS" suffix (e.g. "Ubuntu:22.04:LTS" — confirmed
+            // against the live osv-vulnerabilities GCS bucket listing, 2026-08-13). Omitting it here
+            // used to still resolve for live queries (OSV's query API tolerates the missing
+            // suffix) but 404s against the bulk dump bucket, which only has the ":LTS" folder.
+            return "UBUNTU:" + version + ":LTS";
+        }
+        if (tag.matches("\\d{2}\\.\\d{2}")) {
+            // Ubuntu's public numbering scheme: LTS releases are always an even year's April
+            // (YY.04); anything else (odd years, or the October interim releases) is a non-LTS
+            // release, whose OSV bucket has no ":LTS" suffix (e.g. "Ubuntu:23.10").
+            String[] parts = tag.split("\\.");
+            boolean isLts = "04".equals(parts[1]) && Integer.parseInt(parts[0]) % 2 == 0;
+            return "UBUNTU:" + tag + (isLts ? ":LTS" : "");
+        }
+        return null;
+    }
+
+    private static String alpine(String tag) {
+        // Alpine tags are "3.14", "3.14.2" (patch releases share the minor's advisory feed) — OSV's
+        // Alpine ecosystem is major.minor only.
+        if (tag.matches("\\d+\\.\\d+(\\.\\d+)?")) {
+            String[] parts = tag.split("\\.");
+            return "ALPINE:V" + parts[0] + "." + parts[1];
+        }
+        return null;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/container/DockerfileParser.java b/src/main/java/com/salkcoding/oswl/service/container/DockerfileParser.java
new file mode 100644
index 00000000..cdab38c3
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/container/DockerfileParser.java
@@ -0,0 +1,158 @@
+package com.salkcoding.oswl.service.container;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Parses a {@code Dockerfile} for OS-package vulnerability inventory.
+ *
+ * 
Scope, deliberately kept narrow: a Dockerfile alone cannot tell you the actual
+ * installed-package inventory of an image — that depends on the base image's own layers, which
+ * this parser never inspects (that would require pulling/extracting the image, out of scope
+ * here). What a Dockerfile can tell you reliably is:
+ * 
    
+ *   
  1. the base image's distro + version, from the final {@code FROM} instruction, and
    2. 
+ *   
  2. any package explicitly installed with a pinned version in a {@code RUN} instruction
+ *       (e.g. {@code apt-get install -y openssl=1.1.1n-0+deb11u4}).
    3. 
+ * 

+ * Packages installed without a pinned version are skipped rather than guessed at, and unrecognized
+ * base images are skipped rather than inventoried with an unknown/wrong distro — both would
+ * otherwise silently misreport results, the exact class of bug was written to fix.
+ */
+@Slf4j
+public final class DockerfileParser {
+
+    private static final Pattern FROM = Pattern.compile(
+            "^\\s*FROM\\s+(?:--platform=\\S+\\s+)?(\\S+)(?:\\s+[Aa][Ss]\\s+(\\S+))?\\s*$");
+    private static final Pattern RUN = Pattern.compile("^\\s*RUN\\s+(.*)$", Pattern.DOTALL);
+
+    /** {@code apt-get install ...=...} / {@code apt install ...} */
+    private static final Pattern APT_INSTALL = Pattern.compile(
+            "\\bapt(?:-get)?\\s+(?:-\\S+\\s+)*install\\b");
+    /** {@code apk add ...=...} */
+    private static final Pattern APK_ADD = Pattern.compile("\\bapk\\s+(?:--\\S+\\s+)*add\\b");
+    /** A single {@code name=version} token (apt and apk both use this syntax for pinning). */
+    private static final Pattern PINNED_PACKAGE = Pattern.compile("^([a-zA-Z0-9][a-zA-Z0-9+.-]*)=([a-zA-Z0-9:.+~_-]+)$");
+
+    public DockerfileParser() {
+    }
+
+    /**
+     * @param content    raw Dockerfile text
+     * @param repoName   for logging only
+     * @return components for every explicitly version-pinned OS package found, or an empty list
+     *         if the base image isn't a recognized distro release or no pinned packages were found
+     */
+    public List parse(String content, String repoName) {
+        if (content == null || content.isBlank()) {
+            return List.of();
+        }
+
+        String ecosystem = resolveBaseImageEcosystem(content, repoName);
+        if (ecosystem == null) {
+            return List.of();
+        }
+
+        List components = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        for (String line : joinLineContinuations(content)) {
+            Matcher runMatcher = RUN.matcher(line);
+            if (!runMatcher.matches()) {
+                continue;
+            }
+            String instruction = runMatcher.group(1);
+            if (APT_INSTALL.matcher(instruction).find() || APK_ADD.matcher(instruction).find()) {
+                for (String token : instruction.split("\\s+")) {
+                    Matcher pinned = PINNED_PACKAGE.matcher(token.replaceAll("[,\\\\]+$", ""));
+                    if (pinned.matches() && seen.add(pinned.group(1))) {
+                        components.add(ScanPayload.ComponentPayload.create(
+                                pinned.group(1), pinned.group(2), ecosystem, "Direct (Dockerfile)", List.of()));
+                    }
+                }
+            }
+        }
+
+        if (!components.isEmpty()) {
+            log.info("[DockerfileParser] '{}': base image ecosystem={} pinned OS package(s)={}",
+                    repoName, ecosystem, components.size());
+        }
+        return components;
+    }
+
+    /**
+     * Resolves the ecosystem of the image that actually ships: the last {@code FROM} instruction
+     * whose image isn't a reference to an earlier build stage (multi-stage builds name their
+     * final stage's base image last, by Docker convention).
+     */
+    private String resolveBaseImageEcosystem(String content, String repoName) {
+        Set stageAliases = new HashSet<>();
+        String lastExternalImage = null;
+
+        for (String line : joinLineContinuations(content)) {
+            Matcher m = FROM.matcher(line);
+            if (!m.matches()) {
+                continue;
+            }
+            String image = m.group(1);
+            String alias = m.group(2);
+            if (!stageAliases.contains(image.toLowerCase(java.util.Locale.ROOT))) {
+                lastExternalImage = image;
+            }
+            if (alias != null) {
+                stageAliases.add(alias.toLowerCase(java.util.Locale.ROOT));
+            }
+        }
+
+        if (lastExternalImage == null) {
+            return null;
+        }
+        String[] repoAndTag = splitRepoTag(lastExternalImage);
+        String ecosystem = BaseImageEcosystemMapper.map(repoAndTag[0], repoAndTag[1]);
+        if (ecosystem == null) {
+            log.debug("[DockerfileParser] '{}': base image '{}' is not a recognized, version-pinned "
+                    + "distro release — skipping OS package inventory for this Dockerfile",
+                    repoName, lastExternalImage);
+        }
+        return ecosystem;
+    }
+
+    /** Splits {@code repo:tag} (or {@code repo} with no tag) — ignores a digest suffix if present. */
+    private static String[] splitRepoTag(String image) {
+        String withoutDigest = image.split("@", 2)[0];
+        int colon = withoutDigest.lastIndexOf(':');
+        // A colon before the last '/' is a registry port (e.g. localhost:5000/debian), not a tag.
+        int lastSlash = withoutDigest.lastIndexOf('/');
+        if (colon > lastSlash) {
+            return new String[] {withoutDigest.substring(0, colon), withoutDigest.substring(colon + 1)};
+        }
+        return new String[] {withoutDigest, null};
+    }
+
+    /** Joins {@code \}-terminated line continuations so multi-line RUN instructions parse as one line. */
+    private static List joinLineContinuations(String content) {
+        List lines = new ArrayList<>();
+        StringBuilder current = new StringBuilder();
+        for (String raw : content.split("\\r?\\n")) {
+            String line = raw.stripTrailing();
+            if (line.endsWith("\\")) {
+                current.append(line, 0, line.length() - 1).append(' ');
+            } else {
+                current.append(line);
+                lines.add(current.toString());
+                current.setLength(0);
+            }
+        }
+        if (!current.isEmpty()) {
+            lines.add(current.toString());
+        }
+        return lines;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Calculator.java b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Calculator.java
new file mode 100644
index 00000000..c6ace755
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Calculator.java
@@ -0,0 +1,167 @@
+package com.salkcoding.oswl.service.cvss;
+
+/**
+ * CVSS v3.0/v3.1 Base and Environmental score calculator, implemented directly from the
+ * FIRST.org specification (no external dependency, no lookup table — v3's formulas are
+ * closed-form).
+ *
+ * 
CVSS v4.0 vectors are scored separately by {@link CvssV4Calculator} — v4.0 scoring is not
+ * a closed-form formula the way v3's is, so it needs FIRST's published MacroVector lookup table
+ * rather than the algebraic approach this class uses. {@link CvssVectorVersion#detect} tells a
+ * caller which vector version it has so it can route to the matching calculator; no data source
+ * wired into OsWL supplies v4.0 vectors today (deps.dev, NVD, and GitHub Advisory all report
+ * CVSS 3.x), so {@link CvssV4Calculator} exists ready for when one does.
+ *
+ * 
OsWL does not collect CVSS Temporal metrics (Exploit Code Maturity / Remediation Level /
+ * Report Confidence) or the attacker-facing Modified* Base metrics from any data source, so the
+ * Environmental score calculation only varies the three Security Requirement metrics
+ * (Confidentiality/Integrity/Availability Requirement) — Modified* metrics are always equal to
+ * the corresponding Base metric, and the three Temporal multipliers are always 1.0 ("Not
+ * Defined"), exactly as CVSS itself defines a metric's neutral value.
+ */
+public final class CvssV3Calculator {
+
+    private CvssV3Calculator() {
+    }
+
+    /** A CVSS Security Requirement (Confidentiality/Integrity/Availability Requirement) value. */
+    public enum Requirement {
+        LOW(0.5), MEDIUM(1.0), HIGH(1.5);
+
+        private final double multiplier;
+
+        Requirement(double multiplier) {
+            this.multiplier = multiplier;
+        }
+    }
+
+    /**
+     * Computes the CVSS v3.0/v3.1 Base Score for a vector string.
+     *
+     * @return the base score (0.0–10.0), or {@code null} if {@code vector} is not a well-formed
+     *         CVSS v3.0/v3.1 base vector
+     */
+    public static Double baseScore(String vector) {
+        CvssV3Vector v = CvssV3Vector.parse(vector);
+        if (v == null) {
+            return null;
+        }
+        double impact = impact(iscBase(v), v.scopeChanged());
+        double exploitability = exploitability(v);
+        return combine(impact, exploitability, v.scopeChanged());
+    }
+
+    /**
+     * Computes the CVSS v3.0/v3.1 Environmental Score for a vector string, varying only the
+     * Security Requirement metrics (see class Javadoc for what's held at its neutral value).
+     *
+     * @return the environmental score (0.0–10.0), or {@code null} if {@code vector} is not a
+     *         well-formed CVSS v3.0/v3.1 base vector
+     */
+    public static Double environmentalScore(String vector, Requirement cr, Requirement ir, Requirement ar) {
+        CvssV3Vector v = CvssV3Vector.parse(vector);
+        if (v == null) {
+            return null;
+        }
+        double miss = Math.min(modifiedIscBase(v, cr, ir, ar), 0.915);
+        double modifiedImpact = impact(miss, v.scopeChanged());
+        double modifiedExploitability = exploitability(v);
+        // The spec's full formula is roundup(roundup(min(...)) * E * RL * RC); the outer
+        // roundup/multiplication is skipped here because the three Temporal multipliers
+        // (Exploit Code Maturity / Remediation Level / Report Confidence) are always 1.0 —
+        // see class Javadoc — making it a no-op on the already-rounded inner value.
+        return combine(modifiedImpact, modifiedExploitability, v.scopeChanged());
+    }
+
+    // ── Shared v3.0/v3.1 formula (FIRST.org CVSS v3.1 Specification Document, §7–8) ──────────
+
+    private static double iscBase(CvssV3Vector v) {
+        double c = cia(v.c());
+        double i = cia(v.i());
+        double a = cia(v.a());
+        return 1 - ((1 - c) * (1 - i) * (1 - a));
+    }
+
+    private static double modifiedIscBase(CvssV3Vector v, Requirement cr, Requirement ir, Requirement ar) {
+        // No per-metric cap here — CIA's max weight (0.56) times a Requirement's max
+        // multiplier (1.5) is 0.84, so (1 - MC*CR) etc. can never go negative on its own.
+        // The spec applies a single cap of 0.915 to the combined result (done by the caller).
+        double c = cia(v.c()) * cr.multiplier;
+        double i = cia(v.i()) * ir.multiplier;
+        double a = cia(v.a()) * ar.multiplier;
+        return 1 - ((1 - c) * (1 - i) * (1 - a));
+    }
+
+    private static double impact(double iscBase, boolean scopeChanged) {
+        if (iscBase <= 0) {
+            return 0;
+        }
+        return scopeChanged
+                ? 7.52 * (iscBase - 0.029) - 3.25 * Math.pow(iscBase - 0.02, 15)
+                : 6.42 * iscBase;
+    }
+
+    private static double exploitability(CvssV3Vector v) {
+        return 8.22 * av(v.av()) * ac(v.ac()) * pr(v.pr(), v.scopeChanged()) * ui(v.ui());
+    }
+
+    private static double combine(double impact, double exploitability, boolean scopeChanged) {
+        if (impact <= 0) {
+            return 0;
+        }
+        double sum = impact + exploitability;
+        return scopeChanged ? roundUp(Math.min(1.08 * sum, 10)) : roundUp(Math.min(sum, 10));
+    }
+
+    /**
+     * The CVSS spec's "round up to one decimal" — implemented on scaled integers, exactly as
+     * the spec's own reference pseudocode does, to avoid binary floating-point rounding bugs
+     * (e.g. a naive {@code Math.ceil(x * 10) / 10.0} misrounds values like 4.020 due to how
+     * 4.02 is represented in double precision).
+     */
+    private static double roundUp(double input) {
+        long scaled = Math.round(input * 100_000);
+        if (scaled % 10_000 == 0) {
+            return scaled / 100_000.0;
+        }
+        return (Math.floorDiv(scaled, 10_000) + 1) / 10.0;
+    }
+
+    // ── Metric → numeric weight tables (FIRST.org CVSS v3.1 Specification Document, §7.4) ───
+
+    private static double av(String value) {
+        return switch (value) {
+            case "N" -> 0.85;
+            case "A" -> 0.62;
+            case "L" -> 0.55;
+            case "P" -> 0.2;
+            default -> throw new IllegalStateException("Unreachable — validated by CvssV3Vector");
+        };
+    }
+
+    private static double ac(String value) {
+        return "L".equals(value) ? 0.77 : 0.44;
+    }
+
+    private static double pr(String value, boolean scopeChanged) {
+        return switch (value) {
+            case "N" -> 0.85;
+            case "L" -> scopeChanged ? 0.68 : 0.62;
+            case "H" -> scopeChanged ? 0.50 : 0.27;
+            default -> throw new IllegalStateException("Unreachable — validated by CvssV3Vector");
+        };
+    }
+
+    private static double ui(String value) {
+        return "N".equals(value) ? 0.85 : 0.62;
+    }
+
+    private static double cia(String value) {
+        return switch (value) {
+            case "N" -> 0.0;
+            case "L" -> 0.22;
+            case "H" -> 0.56;
+            default -> throw new IllegalStateException("Unreachable — validated by CvssV3Vector");
+        };
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Vector.java b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Vector.java
new file mode 100644
index 00000000..b7b6b290
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV3Vector.java
@@ -0,0 +1,78 @@
+package com.salkcoding.oswl.service.cvss;
+
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Set;
+
+/**
+ * Parsed CVSS v3.0/v3.1 base metrics from a vector string
+ * (e.g. {@code CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H}).
+ *
+ * 
Only the eight Base metrics are modeled — OsWL does not collect Temporal or the
+ * attacker-facing Modified* metrics from any data source, so those stay at their CVSS-defined
+ * "Not Defined" (neutral) value everywhere they would apply.
+ */
+record CvssV3Vector(String av, String ac, String pr, String ui, String scope, String c, String i, String a) {
+
+    private static final Set REQUIRED_METRICS = Set.of("AV", "AC", "PR", "UI", "S", "C", "I", "A");
+
+    /**
+     * @param vector a full vector string, with or without the {@code CVSS:3.x/} prefix
+     * @return the parsed metrics, or {@code null} if the vector is not a well-formed CVSS v3
+     *         base vector (missing/unknown metric, or not a v3.0/v3.1 vector at all)
+     */
+    static CvssV3Vector parse(String vector) {
+        if (vector == null || vector.isBlank()) {
+            return null;
+        }
+        String trimmed = vector.strip();
+        if (!trimmed.startsWith("CVSS:3.0/") && !trimmed.startsWith("CVSS:3.1/")) {
+            return null;
+        }
+        String body = trimmed.substring(trimmed.indexOf('/') + 1);
+        Map metrics = new HashMap<>();
+        for (String part : body.split("/")) {
+            String[] kv = part.split(":", 2);
+            if (kv.length != 2) {
+                return null;
+            }
+            metrics.put(kv[0], kv[1]);
+        }
+        if (!metrics.keySet().containsAll(REQUIRED_METRICS)) {
+            return null;
+        }
+        try {
+            CvssV3Vector parsed = new CvssV3Vector(
+                    metrics.get("AV"), metrics.get("AC"), metrics.get("PR"), metrics.get("UI"),
+                    metrics.get("S"), metrics.get("C"), metrics.get("I"), metrics.get("A"));
+            parsed.validate();
+            return parsed;
+        } catch (IllegalArgumentException e) {
+            return null;
+        }
+    }
+
+    private void validate() {
+        requireOneOf("AV", av, "N", "A", "L", "P");
+        requireOneOf("AC", ac, "L", "H");
+        requireOneOf("PR", pr, "N", "L", "H");
+        requireOneOf("UI", ui, "N", "R");
+        requireOneOf("S", scope, "U", "C");
+        requireOneOf("C", c, "N", "L", "H");
+        requireOneOf("I", i, "N", "L", "H");
+        requireOneOf("A", a, "N", "L", "H");
+    }
+
+    private static void requireOneOf(String metric, String value, String... allowed) {
+        for (String candidate : allowed) {
+            if (candidate.equals(value)) {
+                return;
+            }
+        }
+        throw new IllegalArgumentException("Invalid CVSS v3 metric " + metric + ": " + value);
+    }
+
+    boolean scopeChanged() {
+        return "C".equals(scope);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Calculator.java b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Calculator.java
new file mode 100644
index 00000000..1bd8ab3f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Calculator.java
@@ -0,0 +1,409 @@
+package com.salkcoding.oswl.service.cvss;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import lombok.extern.slf4j.Slf4j;
+
+import java.io.InputStream;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * CVSS v4.0 Base and Environmental score calculator.
+ *
+ * 
Unlike v3.x (see {@link CvssV3Calculator}), v4.0 scoring is not a closed-form formula: a
+ * vector resolves to a "MacroVector" (a 6-digit code across six equivalence classes, EQ1–EQ6),
+ * whose score is looked up in a table published by FIRST.org and then adjusted by interpolating
+ * how far the actual vector sits from the highest-severity vector sharing that same MacroVector.
+ * Reproducing that by hand from the spec prose risks a subtly wrong implementation that still
+ * looks plausible — the exact failure mode this class exists to avoid.
+ *
+ * 
Ported directly from FIRST's own reference implementation
+ * (github.com/FIRSTdotorg/cvss-v4-calculator — {@code cvss_score.js}, BSD-2-Clause; see
+ * {@code THIRD_PARTY_LICENSES.md}), method for method, rather than re-derived from the spec
+ * document. The 270-entry MacroVector score table is vendored verbatim as
+ * {@code resources/cvss/cvss-v4-lookup.json}; the small per-equivalence-class "maximum severity
+ * vector" and "maximum severity distance" tables ({@code max_composed.js}/{@code max_severity.js}
+ * in the same repo, same license) are small enough to transcribe directly as constants below
+ * rather than ship as a second resource file.
+ *
+ * 
What OsWL calls "Base Score" and "Environmental Score" here are exactly what this same
+ * algorithm computes when the Threat (E) and Environmental (CR/IR/AR/M*) metrics are absent from
+ * the vector — CVSS v4.0 defines those metrics' "Not Defined" (X) value to mean exactly that, so
+ * one implementation naturally covers both, the same relationship {@link CvssV3Calculator}'s two
+ * entry points have.
+ */
+@Slf4j
+public final class CvssV4Calculator {
+
+    private CvssV4Calculator() {
+    }
+
+    private static final String LOOKUP_RESOURCE = "/cvss/cvss-v4-lookup.json";
+    private static final Map LOOKUP = loadLookup();
+
+    private static Map loadLookup() {
+        Map map = new HashMap<>();
+        try (InputStream in = CvssV4Calculator.class.getResourceAsStream(LOOKUP_RESOURCE)) {
+            if (in == null) {
+                log.warn("[CvssV4] Bundled lookup table {} not found — every CVSS v4.0 vector will score as unscoreable", LOOKUP_RESOURCE);
+                return Map.of();
+            }
+            JsonNode root = new ObjectMapper().readTree(in);
+            for (Map.Entry entry : root.properties()) {
+                map.put(entry.getKey(), entry.getValue().asDouble());
+            }
+        } catch (Exception e) {
+            log.warn("[CvssV4] Failed to load {}: {}", LOOKUP_RESOURCE, e.getMessage());
+            return Map.of();
+        }
+        return Map.copyOf(map);
+    }
+
+    /**
+     * Computes the CVSS v4.0 Base Score for a vector string.
+     *
+     * @return the base score (0.0–10.0), or {@code null} if {@code vector} is not a well-formed
+     *         CVSS v4.0 vector, or the lookup table failed to load
+     */
+    public static Double baseScore(String vector) {
+        CvssV4Vector v = CvssV4Vector.parse(vector);
+        if (v == null || LOOKUP.isEmpty()) {
+            return null;
+        }
+        return score(v);
+    }
+
+    /**
+     * Computes the CVSS v4.0 Environmental Score for a vector string, overriding the three
+     * Security Requirement metrics (Confidentiality/Integrity/Availability Requirement) — the
+     * same three metrics {@link CvssV3Calculator#environmentalScore} varies, reusing its
+     * {@link CvssV3Calculator.Requirement} enum since CVSS v3 and v4 both use High/Medium/Low here.
+     *
+     * @return the environmental score (0.0–10.0), or {@code null} if {@code vector} is not a
+     *         well-formed CVSS v4.0 vector, or the lookup table failed to load
+     */
+    public static Double environmentalScore(String vector, CvssV3Calculator.Requirement cr,
+                                            CvssV3Calculator.Requirement ir, CvssV3Calculator.Requirement ar) {
+        CvssV4Vector v = CvssV4Vector.parse(vector);
+        if (v == null || LOOKUP.isEmpty()) {
+            return null;
+        }
+        v = v.withOverrides(Map.of("CR", letter(cr), "IR", letter(ir), "AR", letter(ar)));
+        return score(v);
+    }
+
+    private static String letter(CvssV3Calculator.Requirement r) {
+        return switch (r) {
+            case LOW -> "L";
+            case MEDIUM -> "M";
+            case HIGH -> "H";
+        };
+    }
+
+    // ── FIRST.org cvss_score.js, ported method for method ───────────────────────────────────
+
+    private static final List NO_IMPACT_METRICS = List.of("VC", "VI", "VA", "SC", "SI", "SA");
+
+    private static double score(CvssV4Vector v) {
+        if (NO_IMPACT_METRICS.stream().allMatch(metric -> "N".equals(m(v, metric)))) {
+            return 0.0;
+        }
+
+        String macroVectorResult = macroVector(v);
+        Double baseValue = LOOKUP.get(macroVectorResult);
+        if (baseValue == null) {
+            // Every well-formed vector resolves to one of the 270 vendored MacroVectors —
+            // reaching this means the table failed to load or a parsing bug produced an
+            // impossible EQ combination. Fail closed rather than guess.
+            log.warn("[CvssV4] MacroVector '{}' has no lookup entry — cannot score", macroVectorResult);
+            return 0.0;
+        }
+        double value = baseValue;
+
+        int eq1 = digit(macroVectorResult, 0);
+        int eq2 = digit(macroVectorResult, 1);
+        int eq3 = digit(macroVectorResult, 2);
+        int eq4 = digit(macroVectorResult, 3);
+        int eq5 = digit(macroVectorResult, 4);
+        int eq6 = digit(macroVectorResult, 5);
+
+        String eq1NextLower = key(eq1 + 1, eq2, eq3, eq4, eq5, eq6);
+        String eq2NextLower = key(eq1, eq2 + 1, eq3, eq4, eq5, eq6);
+
+        Double scoreEq3Eq6NextLower;
+        if (eq3 == 1 && eq6 == 1) {
+            scoreEq3Eq6NextLower = LOOKUP.get(key(eq1, eq2, eq3 + 1, eq4, eq5, eq6));
+        } else if (eq3 == 0 && eq6 == 1) {
+            scoreEq3Eq6NextLower = LOOKUP.get(key(eq1, eq2, eq3 + 1, eq4, eq5, eq6));
+        } else if (eq3 == 1 && eq6 == 0) {
+            scoreEq3Eq6NextLower = LOOKUP.get(key(eq1, eq2, eq3, eq4, eq5, eq6 + 1));
+        } else if (eq3 == 0 && eq6 == 0) {
+            Double left = LOOKUP.get(key(eq1, eq2, eq3, eq4, eq5, eq6 + 1));
+            Double right = LOOKUP.get(key(eq1, eq2, eq3 + 1, eq4, eq5, eq6));
+            scoreEq3Eq6NextLower = (left != null && right != null && left > right) ? left : right;
+        } else {
+            // 21 --> 32 (does not exist) — deliberately unresolvable, same as the reference impl.
+            scoreEq3Eq6NextLower = LOOKUP.get(key(eq1, eq2, eq3 + 1, eq4, eq5, eq6 + 1));
+        }
+
+        String eq4NextLower = key(eq1, eq2, eq3, eq4 + 1, eq5, eq6);
+        String eq5NextLower = key(eq1, eq2, eq3, eq4, eq5 + 1, eq6);
+
+        Double scoreEq1NextLower = LOOKUP.get(eq1NextLower);
+        Double scoreEq2NextLower = LOOKUP.get(eq2NextLower);
+        Double scoreEq4NextLower = LOOKUP.get(eq4NextLower);
+        Double scoreEq5NextLower = LOOKUP.get(eq5NextLower);
+
+        List eq1Maxes = MAX_COMPOSED_EQ1.get(eq1);
+        List eq2Maxes = MAX_COMPOSED_EQ2.get(eq2);
+        List eq3Eq6Maxes = MAX_COMPOSED_EQ3.get(eq3).get(eq6);
+        List eq4Maxes = MAX_COMPOSED_EQ4.get(eq4);
+        List eq5Maxes = MAX_COMPOSED_EQ5.get(eq5);
+
+        // Find the first candidate "highest severity vector in this MacroVector" that the
+        // to-be-scored vector is no more severe than in every metric (severity distance >= 0
+        // for all of them) — mirrors the reference impl's early-break-on-first-fit.
+        String maxVector = null;
+        double sdAV = 0, sdPR = 0, sdUI = 0, sdAC = 0, sdAT = 0;
+        double sdVC = 0, sdVI = 0, sdVA = 0, sdSC = 0, sdSI = 0, sdSA = 0;
+        double sdCR = 0, sdIR = 0, sdAR = 0;
+        outer:
+        for (String eq1Max : eq1Maxes) {
+            for (String eq2Max : eq2Maxes) {
+                for (String eq3Eq6Max : eq3Eq6Maxes) {
+                    for (String eq4Max : eq4Maxes) {
+                        for (String eq5Max : eq5Maxes) {
+                            String candidate = eq1Max + eq2Max + eq3Eq6Max + eq4Max + eq5Max;
+                            double dAV = AV_LEVELS.get(m(v, "AV")) - AV_LEVELS.get(extract("AV", candidate));
+                            double dPR = PR_LEVELS.get(m(v, "PR")) - PR_LEVELS.get(extract("PR", candidate));
+                            double dUI = UI_LEVELS.get(m(v, "UI")) - UI_LEVELS.get(extract("UI", candidate));
+                            double dAC = AC_LEVELS.get(m(v, "AC")) - AC_LEVELS.get(extract("AC", candidate));
+                            double dAT = AT_LEVELS.get(m(v, "AT")) - AT_LEVELS.get(extract("AT", candidate));
+                            double dVC = VC_LEVELS.get(m(v, "VC")) - VC_LEVELS.get(extract("VC", candidate));
+                            double dVI = VC_LEVELS.get(m(v, "VI")) - VC_LEVELS.get(extract("VI", candidate));
+                            double dVA = VC_LEVELS.get(m(v, "VA")) - VC_LEVELS.get(extract("VA", candidate));
+                            double dSC = SC_LEVELS.get(m(v, "SC")) - SC_LEVELS.get(extract("SC", candidate));
+                            double dSI = SI_LEVELS.get(m(v, "SI")) - SI_LEVELS.get(extract("SI", candidate));
+                            double dSA = SI_LEVELS.get(m(v, "SA")) - SI_LEVELS.get(extract("SA", candidate));
+                            double dCR = CR_LEVELS.get(m(v, "CR")) - CR_LEVELS.get(extract("CR", candidate));
+                            double dIR = CR_LEVELS.get(m(v, "IR")) - CR_LEVELS.get(extract("IR", candidate));
+                            double dAR = CR_LEVELS.get(m(v, "AR")) - CR_LEVELS.get(extract("AR", candidate));
+                            if (dAV < 0 || dPR < 0 || dUI < 0 || dAC < 0 || dAT < 0 || dVC < 0 || dVI < 0 || dVA < 0
+                                    || dSC < 0 || dSI < 0 || dSA < 0 || dCR < 0 || dIR < 0 || dAR < 0) {
+                                continue;
+                            }
+                            maxVector = candidate;
+                            sdAV = dAV; sdPR = dPR; sdUI = dUI; sdAC = dAC; sdAT = dAT;
+                            sdVC = dVC; sdVI = dVI; sdVA = dVA; sdSC = dSC; sdSI = dSI; sdSA = dSA;
+                            sdCR = dCR; sdIR = dIR; sdAR = dAR;
+                            break outer;
+                        }
+                    }
+                }
+            }
+        }
+        if (maxVector == null) {
+            // Should not happen for a well-formed vector (the exact-match candidate is always
+            // among the maxes) — fail closed rather than silently score against a zero baseline.
+            log.warn("[CvssV4] No maximum-severity vector matched MacroVector '{}' — cannot score", macroVectorResult);
+            return Math.max(0.0, Math.min(10.0, value));
+        }
+
+        double currentSeverityDistanceEq1 = sdAV + sdPR + sdUI;
+        double currentSeverityDistanceEq2 = sdAC + sdAT;
+        double currentSeverityDistanceEq3Eq6 = sdVC + sdVI + sdVA + sdCR + sdIR + sdAR;
+        double currentSeverityDistanceEq4 = sdSC + sdSI + sdSA;
+
+        double step = 0.1;
+
+        Double availableDistanceEq1 = scoreEq1NextLower == null ? null : value - scoreEq1NextLower;
+        Double availableDistanceEq2 = scoreEq2NextLower == null ? null : value - scoreEq2NextLower;
+        Double availableDistanceEq3Eq6 = scoreEq3Eq6NextLower == null ? null : value - scoreEq3Eq6NextLower;
+        Double availableDistanceEq4 = scoreEq4NextLower == null ? null : value - scoreEq4NextLower;
+        Double availableDistanceEq5 = scoreEq5NextLower == null ? null : value - scoreEq5NextLower;
+
+        double maxSeverityEq1 = MAX_SEVERITY_EQ1.get(eq1) * step;
+        double maxSeverityEq2 = MAX_SEVERITY_EQ2.get(eq2) * step;
+        double maxSeverityEq3Eq6 = MAX_SEVERITY_EQ3EQ6.get(eq3).get(eq6) * step;
+        double maxSeverityEq4 = MAX_SEVERITY_EQ4.get(eq4) * step;
+
+        int nExistingLower = 0;
+        double normalizedSeverityEq1 = 0, normalizedSeverityEq2 = 0, normalizedSeverityEq3Eq6 = 0;
+        double normalizedSeverityEq4 = 0, normalizedSeverityEq5 = 0;
+
+        if (availableDistanceEq1 != null) {
+            nExistingLower++;
+            double percent = currentSeverityDistanceEq1 / maxSeverityEq1;
+            normalizedSeverityEq1 = availableDistanceEq1 * percent;
+        }
+        if (availableDistanceEq2 != null) {
+            nExistingLower++;
+            double percent = currentSeverityDistanceEq2 / maxSeverityEq2;
+            normalizedSeverityEq2 = availableDistanceEq2 * percent;
+        }
+        if (availableDistanceEq3Eq6 != null) {
+            nExistingLower++;
+            double percent = currentSeverityDistanceEq3Eq6 / maxSeverityEq3Eq6;
+            normalizedSeverityEq3Eq6 = availableDistanceEq3Eq6 * percent;
+        }
+        if (availableDistanceEq4 != null) {
+            nExistingLower++;
+            double percent = currentSeverityDistanceEq4 / maxSeverityEq4;
+            normalizedSeverityEq4 = availableDistanceEq4 * percent;
+        }
+        if (availableDistanceEq5 != null) {
+            // EQ5's percentage is always 0 in the reference implementation — the Threat metric
+            // (E) never has a "worse" sibling within the same MacroVector to interpolate toward.
+            nExistingLower++;
+            normalizedSeverityEq5 = availableDistanceEq5 * 0.0;
+        }
+
+        double meanDistance = nExistingLower == 0 ? 0.0
+                : (normalizedSeverityEq1 + normalizedSeverityEq2 + normalizedSeverityEq3Eq6
+                        + normalizedSeverityEq4 + normalizedSeverityEq5) / nExistingLower;
+
+        value -= meanDistance;
+        if (value < 0) value = 0.0;
+        if (value > 10) value = 10.0;
+        return Math.round(value * 10) / 10.0;
+    }
+
+    private static int digit(String macroVector, int index) {
+        return Character.getNumericValue(macroVector.charAt(index));
+    }
+
+    private static String key(int a, int b, int c, int d, int e, int f) {
+        return "" + a + b + c + d + e + f;
+    }
+
+    /** Effective value of a metric: Modified* override if set, Threat/Environmental "X" default, else the raw value. */
+    private static String m(CvssV4Vector v, String metric) {
+        String selected = v.raw(metric);
+        if (selected == null) {
+            selected = "X";
+        }
+        if ("E".equals(metric) && "X".equals(selected)) {
+            return "A";
+        }
+        if (("CR".equals(metric) || "IR".equals(metric) || "AR".equals(metric)) && "X".equals(selected)) {
+            return "H";
+        }
+        String modified = v.raw("M" + metric);
+        if (modified != null && !"X".equals(modified)) {
+            return modified;
+        }
+        return selected;
+    }
+
+    /** Extracts one metric's value out of a "AV:N/PR:N/UI:N/" -style max-vector fragment string. */
+    private static String extract(String metric, String str) {
+        int idx = str.indexOf(metric);
+        int start = idx + metric.length() + 1;
+        int slash = str.indexOf('/', start);
+        return slash > start ? str.substring(start, slash) : str.substring(start);
+    }
+
+    private static String macroVector(CvssV4Vector v) {
+        int eq1;
+        if ("N".equals(m(v, "AV")) && "N".equals(m(v, "PR")) && "N".equals(m(v, "UI"))) {
+            eq1 = 0;
+        } else if (("N".equals(m(v, "AV")) || "N".equals(m(v, "PR")) || "N".equals(m(v, "UI")))
+                && !("N".equals(m(v, "AV")) && "N".equals(m(v, "PR")) && "N".equals(m(v, "UI")))
+                && !"P".equals(m(v, "AV"))) {
+            eq1 = 1;
+        } else {
+            eq1 = 2;
+        }
+
+        int eq2 = ("L".equals(m(v, "AC")) && "N".equals(m(v, "AT"))) ? 0 : 1;
+
+        int eq3;
+        if ("H".equals(m(v, "VC")) && "H".equals(m(v, "VI"))) {
+            eq3 = 0;
+        } else if (!("H".equals(m(v, "VC")) && "H".equals(m(v, "VI")))
+                && ("H".equals(m(v, "VC")) || "H".equals(m(v, "VI")) || "H".equals(m(v, "VA")))) {
+            eq3 = 1;
+        } else {
+            eq3 = 2;
+        }
+
+        int eq4;
+        if ("S".equals(m(v, "MSI")) || "S".equals(m(v, "MSA"))) {
+            eq4 = 0;
+        } else if ("H".equals(m(v, "SC")) || "H".equals(m(v, "SI")) || "H".equals(m(v, "SA"))) {
+            eq4 = 1;
+        } else {
+            eq4 = 2;
+        }
+
+        int eq5 = switch (m(v, "E")) {
+            case "A" -> 0;
+            case "P" -> 1;
+            default -> 2; // U
+        };
+
+        boolean eq6High = ("H".equals(m(v, "CR")) && "H".equals(m(v, "VC")))
+                || ("H".equals(m(v, "IR")) && "H".equals(m(v, "VI")))
+                || ("H".equals(m(v, "AR")) && "H".equals(m(v, "VA")));
+        int eq6 = eq6High ? 0 : 1;
+
+        return "" + eq1 + eq2 + eq3 + eq4 + eq5 + eq6;
+    }
+
+    // ── FIRST.org cvss_score.js metric-level constants, ported verbatim ─────────────────────
+
+    private static final Map AV_LEVELS = Map.of("N", 0.0, "A", 0.1, "L", 0.2, "P", 0.3);
+    private static final Map PR_LEVELS = Map.of("N", 0.0, "L", 0.1, "H", 0.2);
+    private static final Map UI_LEVELS = Map.of("N", 0.0, "P", 0.1, "A", 0.2);
+    private static final Map AC_LEVELS = Map.of("L", 0.0, "H", 0.1);
+    private static final Map AT_LEVELS = Map.of("N", 0.0, "P", 0.1);
+    private static final Map VC_LEVELS = Map.of("H", 0.0, "L", 0.1, "N", 0.2);
+    private static final Map SC_LEVELS = Map.of("H", 0.1, "L", 0.2, "N", 0.3);
+    private static final Map SI_LEVELS = Map.of("S", 0.0, "H", 0.1, "L", 0.2, "N", 0.3);
+    private static final Map CR_LEVELS = Map.of("H", 0.0, "M", 0.1, "L", 0.2);
+
+    // ── FIRST.org max_composed.js, transcribed verbatim (BSD-2-Clause; see THIRD_PARTY_LICENSES.md) ──
+
+    private static final Map> MAX_COMPOSED_EQ1 = Map.of(
+            0, List.of("AV:N/PR:N/UI:N/"),
+            1, List.of("AV:A/PR:N/UI:N/", "AV:N/PR:L/UI:N/", "AV:N/PR:N/UI:P/"),
+            2, List.of("AV:P/PR:N/UI:N/", "AV:A/PR:L/UI:P/"));
+
+    private static final Map> MAX_COMPOSED_EQ2 = Map.of(
+            0, List.of("AC:L/AT:N/"),
+            1, List.of("AC:H/AT:N/", "AC:L/AT:P/"));
+
+    private static final Map>> MAX_COMPOSED_EQ3 = Map.of(
+            0, Map.of(
+                    0, List.of("VC:H/VI:H/VA:H/CR:H/IR:H/AR:H/"),
+                    1, List.of("VC:H/VI:H/VA:L/CR:M/IR:M/AR:H/", "VC:H/VI:H/VA:H/CR:M/IR:M/AR:M/")),
+            1, Map.of(
+                    0, List.of("VC:L/VI:H/VA:H/CR:H/IR:H/AR:H/", "VC:H/VI:L/VA:H/CR:H/IR:H/AR:H/"),
+                    1, List.of("VC:L/VI:H/VA:L/CR:H/IR:M/AR:H/", "VC:L/VI:H/VA:H/CR:H/IR:M/AR:M/",
+                            "VC:H/VI:L/VA:H/CR:M/IR:H/AR:M/", "VC:H/VI:L/VA:L/CR:M/IR:H/AR:H/",
+                            "VC:L/VI:L/VA:H/CR:H/IR:H/AR:M/")),
+            2, Map.of(
+                    1, List.of("VC:L/VI:L/VA:L/CR:H/IR:H/AR:H/")));
+
+    private static final Map> MAX_COMPOSED_EQ4 = Map.of(
+            0, List.of("SC:H/SI:S/SA:S/"),
+            1, List.of("SC:H/SI:H/SA:H/"),
+            2, List.of("SC:L/SI:L/SA:L/"));
+
+    private static final Map> MAX_COMPOSED_EQ5 = Map.of(
+            0, List.of("E:A/"),
+            1, List.of("E:P/"),
+            2, List.of("E:U/"));
+
+    // ── FIRST.org max_severity.js, transcribed verbatim (BSD-2-Clause; see THIRD_PARTY_LICENSES.md) ──
+
+    private static final Map MAX_SEVERITY_EQ1 = Map.of(0, 1, 1, 4, 2, 5);
+    private static final Map MAX_SEVERITY_EQ2 = Map.of(0, 1, 1, 2);
+    private static final Map> MAX_SEVERITY_EQ3EQ6 = Map.of(
+            0, Map.of(0, 7, 1, 6),
+            1, Map.of(0, 8, 1, 8),
+            2, Map.of(1, 10));
+    private static final Map MAX_SEVERITY_EQ4 = Map.of(0, 6, 1, 5, 2, 4);
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Vector.java b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Vector.java
new file mode 100644
index 00000000..b1ab65eb
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/CvssV4Vector.java
@@ -0,0 +1,108 @@
+package com.salkcoding.oswl.service.cvss;
+
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Set;
+
+/**
+ * Parsed CVSS v4.0 metrics from a vector string
+ * (e.g. {@code CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N}).
+ *
+ * 
Holds the 11 required Base metrics plus whichever optional Threat (E) / Environmental
+ * (CR/IR/AR/M*) metrics the vector supplies — CVSS v4.0's Base Score is simply what this same
+ * scoring algorithm computes when those optional metrics are absent/"X" (see
+ * {@link CvssV4Calculator}), so one parser and one calculator path cover both. Supplemental
+ * metrics (S/AU/R/V/RE/U) are accepted for a valid parse but never affect scoring — CVSS itself
+ * defines them as informational only.
+ */
+final class CvssV4Vector {
+
+    private static final Set REQUIRED_BASE_METRICS =
+            Set.of("AV", "AC", "AT", "PR", "UI", "VC", "VI", "VA", "SC", "SI", "SA");
+
+    /** Metric code → allowed values (order irrelevant here, just membership). First value listed is never special. */
+    private static final Map> ALLOWED_VALUES = Map.ofEntries(
+            Map.entry("AV", Set.of("N", "A", "L", "P")),
+            Map.entry("AC", Set.of("L", "H")),
+            Map.entry("AT", Set.of("N", "P")),
+            Map.entry("PR", Set.of("N", "L", "H")),
+            Map.entry("UI", Set.of("N", "P", "A")),
+            Map.entry("VC", Set.of("H", "L", "N")),
+            Map.entry("VI", Set.of("H", "L", "N")),
+            Map.entry("VA", Set.of("H", "L", "N")),
+            Map.entry("SC", Set.of("H", "L", "N")),
+            Map.entry("SI", Set.of("H", "L", "N")),
+            Map.entry("SA", Set.of("H", "L", "N")),
+            Map.entry("E", Set.of("X", "A", "P", "U")),
+            Map.entry("CR", Set.of("X", "H", "M", "L")),
+            Map.entry("IR", Set.of("X", "H", "M", "L")),
+            Map.entry("AR", Set.of("X", "H", "M", "L")),
+            Map.entry("MAV", Set.of("X", "N", "A", "L", "P")),
+            Map.entry("MAC", Set.of("X", "L", "H")),
+            Map.entry("MAT", Set.of("X", "N", "P")),
+            Map.entry("MPR", Set.of("X", "N", "L", "H")),
+            Map.entry("MUI", Set.of("X", "N", "P", "A")),
+            Map.entry("MVC", Set.of("X", "H", "L", "N")),
+            Map.entry("MVI", Set.of("X", "H", "L", "N")),
+            Map.entry("MVA", Set.of("X", "H", "L", "N")),
+            Map.entry("MSC", Set.of("X", "H", "L", "N")),
+            Map.entry("MSI", Set.of("X", "S", "H", "L", "N")),
+            Map.entry("MSA", Set.of("X", "S", "H", "L", "N")),
+            Map.entry("S", Set.of("X", "N", "P")),
+            Map.entry("AU", Set.of("X", "N", "Y")),
+            Map.entry("R", Set.of("X", "A", "U", "I")),
+            Map.entry("V", Set.of("X", "D", "C")),
+            Map.entry("RE", Set.of("X", "L", "M", "H")),
+            Map.entry("U", Set.of("X", "Clear", "Green", "Amber", "Red")));
+
+    private final Map metrics;
+
+    private CvssV4Vector(Map metrics) {
+        this.metrics = metrics;
+    }
+
+    /**
+     * @param vector a full vector string, with or without the {@code CVSS:4.0/} prefix
+     * @return the parsed metrics, or {@code null} if the vector is not a well-formed CVSS v4.0
+     *         vector (missing/unknown required metric, unrecognized metric code, or invalid value)
+     */
+    static CvssV4Vector parse(String vector) {
+        if (vector == null || vector.isBlank()) {
+            return null;
+        }
+        String trimmed = vector.strip();
+        if (!trimmed.startsWith("CVSS:4.0/")) {
+            return null;
+        }
+        String body = trimmed.substring(trimmed.indexOf('/') + 1);
+        Map parsed = new HashMap<>();
+        for (String part : body.split("/")) {
+            String[] kv = part.split(":", 2);
+            if (kv.length != 2) {
+                return null;
+            }
+            String metric = kv[0];
+            String value = kv[1];
+            Set allowed = ALLOWED_VALUES.get(metric);
+            if (allowed == null || !allowed.contains(value)) {
+                return null;
+            }
+            parsed.put(metric, value);
+        }
+        if (!parsed.keySet().containsAll(REQUIRED_BASE_METRICS)) {
+            return null;
+        }
+        return new CvssV4Vector(parsed);
+    }
+
+    /** Raw metric value as given in the vector, or {@code null} if absent (never defaulted here). */
+    String raw(String metric) {
+        return metrics.get(metric);
+    }
+
+    CvssV4Vector withOverrides(Map overrides) {
+        Map merged = new HashMap<>(metrics);
+        merged.putAll(overrides);
+        return new CvssV4Vector(merged);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/CvssVectorVersion.java b/src/main/java/com/salkcoding/oswl/service/cvss/CvssVectorVersion.java
new file mode 100644
index 00000000..9359db7e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/CvssVectorVersion.java
@@ -0,0 +1,26 @@
+package com.salkcoding.oswl.service.cvss;
+
+/**
+ * The CVSS version a vector string declares, independent of whether OsWL can score it.
+ * Lets callers distinguish "not a CVSS vector at all" from "a CVSS v4.0 vector we recognize
+ * but don't compute a score for" (see {@link CvssV3Calculator} for why).
+ */
+public enum CvssVectorVersion {
+    V3,
+    V4,
+    UNKNOWN;
+
+    public static CvssVectorVersion detect(String vector) {
+        if (vector == null) {
+            return UNKNOWN;
+        }
+        String trimmed = vector.strip();
+        if (trimmed.startsWith("CVSS:3.0/") || trimmed.startsWith("CVSS:3.1/")) {
+            return V3;
+        }
+        if (trimmed.startsWith("CVSS:4.0/")) {
+            return V4;
+        }
+        return UNKNOWN;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/cvss/EnvironmentalRequirementMapper.java b/src/main/java/com/salkcoding/oswl/service/cvss/EnvironmentalRequirementMapper.java
new file mode 100644
index 00000000..b60af895
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/cvss/EnvironmentalRequirementMapper.java
@@ -0,0 +1,61 @@
+package com.salkcoding.oswl.service.cvss;
+
+import com.salkcoding.oswl.domain.enums.DeploymentProfile;
+import com.salkcoding.oswl.service.cvss.CvssV3Calculator.Requirement;
+
+/**
+ * Maps a project's {@link DeploymentProfile} and a component's runtime scope to the CVSS
+ * Security Requirement metrics (Confidentiality/Integrity/Availability Requirement) used for
+ * the Environmental score.
+ *
+ * 
CVSS itself defines no standard mapping from "how is this product deployed" to these
+ * metrics — that judgment call is explicitly left to the scoring organization. The mapping
+ * below is OsWL's own, chosen so the environmental score reads as "how much would this
+ * vulnerability actually matter here," not a copy of the base score:
+ * 
    
+ *   
  • Non-runtime dependencies (test/dev/build/provided scope) are always {@code LOW} across
+ *       the board — they never ship, so their environmental risk is always lower than their
+ *       base score, mirroring the runtime-scope noise cut used elsewhere in Security Center.
    • 
+ *   
  • {@code SAAS} — a vendor-operated, network-facing, multi-tenant service — rates
+ *       {@code HIGH} on all three: a breach affects customer data in a system the vendor
+ *       directly operates, and downtime is the vendor's own SLA.
    • 
+ *   
  • {@code ON_PREMISE_DISTRIBUTION} — shipped to many customer environments — rates
+ *       {@code HIGH} confidentiality/integrity (wide blast radius if compromised) but only
+ *       {@code MEDIUM} availability, since the vendor doesn't operate the runtime and isn't
+ *       directly on the hook for uptime.
    • 
+ *   
  • {@code INTERNAL_TOOL} rates {@code MEDIUM}/{@code MEDIUM}/{@code LOW} — lower external
+ *       exploit exposure, and an outage is an internal inconvenience rather than a customer
+ *       incident.
    • 
+ *   
  • {@code COMMERCIAL_PRODUCT} (the default) and no profile set both rate {@code MEDIUM}
+ *       across the board — CVSS's own "Not Defined" is defined to behave exactly like
+ *       {@code MEDIUM}, so this is the correct neutral default.
    • 
+ * 

+ */
+public final class EnvironmentalRequirementMapper {
+
+    private EnvironmentalRequirementMapper() {
+    }
+
+    public record Requirements(Requirement confidentiality, Requirement integrity, Requirement availability) {
+        static Requirements of(Requirement all) {
+            return new Requirements(all, all, all);
+        }
+    }
+
+    public static Requirements resolve(DeploymentProfile profile, boolean runtimeScope) {
+        if (!runtimeScope) {
+            return Requirements.of(Requirement.LOW);
+        }
+        if (profile == null) {
+            return Requirements.of(Requirement.MEDIUM);
+        }
+        return switch (profile) {
+            case SAAS -> Requirements.of(Requirement.HIGH);
+            case ON_PREMISE_DISTRIBUTION ->
+                    new Requirements(Requirement.HIGH, Requirement.HIGH, Requirement.MEDIUM);
+            case INTERNAL_TOOL ->
+                    new Requirements(Requirement.MEDIUM, Requirement.MEDIUM, Requirement.LOW);
+            case COMMERCIAL_PRODUCT -> Requirements.of(Requirement.MEDIUM);
+        };
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/diagnostics/DiagnosticsService.java b/src/main/java/com/salkcoding/oswl/service/diagnostics/DiagnosticsService.java
new file mode 100644
index 00000000..ccac2f81
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/diagnostics/DiagnosticsService.java
@@ -0,0 +1,196 @@
+package com.salkcoding.oswl.service.diagnostics;
+
+import com.salkcoding.oswl.auth.entity.UserVcsConnection;
+import com.salkcoding.oswl.auth.repository.UserVcsConnectionRepository;
+import com.salkcoding.oswl.auth.security.EncryptionService;
+import com.salkcoding.oswl.auth.service.SecuritySettingService;
+import com.salkcoding.oswl.client.VcsTokenValidator;
+import com.salkcoding.oswl.domain.entity.ai.AiSetting;
+import com.salkcoding.oswl.dto.AiConnectionTestResult;
+import com.salkcoding.oswl.dto.diagnostics.DiagnosticCheckResult;
+import com.salkcoding.oswl.health.AiProviderHealthIndicator;
+import com.salkcoding.oswl.health.DbHealthIndicator;
+import com.salkcoding.oswl.health.DiskSpaceHealthIndicator;
+import com.salkcoding.oswl.health.EmbeddedSidecarHealthIndicator;
+import com.salkcoding.oswl.health.SnapshotFreshnessHealthIndicator;
+import com.salkcoding.oswl.repository.ai.AiSettingRepository;
+import com.salkcoding.oswl.service.ai.AiAnalysisService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.health.contributor.Health;
+import org.springframework.boot.health.contributor.Status;
+import org.springframework.stereotype.Service;
+import org.springframework.web.client.RestClient;
+
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Self-service diagnostics — reuses the {@code health/} indicators built for the readiness probe
+ * where possible, and adds live outbound/credential checks that a passive readiness probe
+ * deliberately skips (rate limits, latency). Every result is safe to paste into a support
+ * request as-is: no secret, token, or password value is ever placed in a {@code detail} string.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class DiagnosticsService {
+
+    private final DbHealthIndicator dbHealthIndicator;
+    private final DiskSpaceHealthIndicator diskSpaceHealthIndicator;
+    private final AiProviderHealthIndicator aiProviderHealthIndicator;
+    private final EmbeddedSidecarHealthIndicator embeddedSidecarHealthIndicator;
+    private final SnapshotFreshnessHealthIndicator snapshotFreshnessHealthIndicator;
+
+    private final AiSettingRepository aiSettingRepository;
+    private final AiAnalysisService aiAnalysisService;
+    private final SecuritySettingService securitySettingService;
+    private final UserVcsConnectionRepository vcsConnectionRepository;
+    private final VcsTokenValidator vcsTokenValidator;
+    private final EncryptionService encryptionService;
+
+    @Value("${oswl.airgapped.enabled:false}")
+    private boolean airgapped;
+
+    private static final Duration PROBE_CONNECT_TIMEOUT = Duration.ofSeconds(3);
+    private static final Duration PROBE_READ_TIMEOUT = Duration.ofSeconds(5);
+
+    public List runAll(Long userId) {
+        List results = new ArrayList<>();
+        results.add(fromHealth("db", "Database", dbHealthIndicator::health));
+        results.add(fromHealth("disk", "Disk space", diskSpaceHealthIndicator::health));
+        results.add(fromHealth("sidecar", "Embedded AI sidecar", embeddedSidecarHealthIndicator::health));
+        results.add(airgapped ? fromHealth("snapshot", "Air-gapped snapshot freshness", snapshotFreshnessHealthIndicator::health)
+                : new DiagnosticCheckResult("snapshot", "Air-gapped snapshot freshness", "SKIPPED", "Air-gapped mode disabled", 0));
+        results.add(aiCheck());
+        results.add(smtpCheck());
+        results.addAll(vcsChecks(userId));
+        results.add(outboundProbe("osv", "OSV API", "https://api.osv.dev/v1/vulns/GHSA-jfh8-c2jp-5v3q"));
+        results.add(outboundProbe("depsdev", "deps.dev API", "https://api.deps.dev/v3/systems/npm/packages/left-pad"));
+        results.add(outboundProbe("epss", "FIRST.org EPSS API", "https://api.first.org/data/v1/epss?cve=CVE-1900-0001"));
+        results.add(outboundProbe("kev", "CISA KEV catalog",
+                "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"));
+        return results;
+    }
+
+    // ── Health-indicator reuse ───────────────────────────────────────────
+
+    private DiagnosticCheckResult fromHealth(String id, String label, java.util.function.Supplier probe) {
+        long start = System.currentTimeMillis();
+        try {
+            Health health = probe.get();
+            long tookMs = System.currentTimeMillis() - start;
+            return new DiagnosticCheckResult(id, label, mapStatus(health.getStatus()), formatDetails(health.getDetails()), tookMs);
+        } catch (Exception e) {
+            long tookMs = System.currentTimeMillis() - start;
+            log.warn("[Diagnostics] {} check threw: {}", id, e.getMessage());
+            return new DiagnosticCheckResult(id, label, "DOWN", safeMessage(e), tookMs);
+        }
+    }
+
+    private static String mapStatus(Status status) {
+        if (Status.UP.equals(status)) return "UP";
+        if (Status.DOWN.equals(status) || Status.OUT_OF_SERVICE.equals(status)) return "DOWN";
+        return "UNKNOWN";
+    }
+
+    private static String formatDetails(Map details) {
+        if (details == null || details.isEmpty()) return "";
+        StringBuilder sb = new StringBuilder();
+        details.forEach((k, v) -> {
+            if (!sb.isEmpty()) sb.append(", ");
+            sb.append(k).append('=').append(v);
+        });
+        return sb.toString();
+    }
+
+    // ── AI provider (live probe — free model-list call, no tokens burned) ──
+
+    private DiagnosticCheckResult aiCheck() {
+        long start = System.currentTimeMillis();
+        if (airgapped) {
+            return new DiagnosticCheckResult("ai", "AI provider", "SKIPPED", "Air-gapped mode — AI providers are not probed", 0);
+        }
+        AiSetting active = aiSettingRepository.findByActiveTrue().orElse(null);
+        if (active == null) {
+            return new DiagnosticCheckResult("ai", "AI provider", "SKIPPED", "No AI provider configured", 0);
+        }
+        AiConnectionTestResult result = aiAnalysisService.testConnectionDetailed(active);
+        long tookMs = System.currentTimeMillis() - start;
+        String label = "AI provider (" + active.getProvider() + ")";
+        return new DiagnosticCheckResult("ai", label, !result.success() ? "DOWN"
+                : result.hint() != null && !result.hint().isBlank() ? "UNKNOWN" : "UP", result.message(), tookMs);
+    }
+
+    // ── SMTP ─────────────────────────────────────────────────────────────
+
+    private DiagnosticCheckResult smtpCheck() {
+        long start = System.currentTimeMillis();
+        try {
+            securitySettingService.testStoredMailConnection();
+            return new DiagnosticCheckResult("smtp", "SMTP", "UP", "Connection succeeded", System.currentTimeMillis() - start);
+        } catch (IllegalStateException e) {
+            return new DiagnosticCheckResult("smtp", "SMTP", "SKIPPED", e.getMessage(), 0);
+        } catch (Exception e) {
+            return new DiagnosticCheckResult("smtp", "SMTP", "DOWN", safeMessage(e), System.currentTimeMillis() - start);
+        }
+    }
+
+    // ── VCS token validity — the current user's own connections ────────────
+
+    private List vcsChecks(Long userId) {
+        List connections = userId != null
+                ? vcsConnectionRepository.findByUserIdAndActiveTrue(userId)
+                : List.of();
+        if (connections.isEmpty()) {
+            return List.of(new DiagnosticCheckResult("vcs", "VCS tokens", "SKIPPED", "No connected VCS integrations", 0));
+        }
+        List checks = new ArrayList<>();
+        for (UserVcsConnection conn : connections) {
+            long start = System.currentTimeMillis();
+            String id = "vcs-" + conn.getProvider().name().toLowerCase();
+            String label = "VCS · " + conn.getProvider().name();
+            try {
+                String token = encryptionService.decrypt(conn.getAccessTokenEncrypted());
+                vcsTokenValidator.validate(conn.getProvider(), conn.getServerUrl(), token, conn.getVcsUsername());
+                checks.add(new DiagnosticCheckResult(id, label, "UP", "Token is valid", System.currentTimeMillis() - start));
+            } catch (IllegalStateException e) {
+                checks.add(new DiagnosticCheckResult(id, label, "DOWN", e.getMessage(), System.currentTimeMillis() - start));
+            } catch (Exception e) {
+                checks.add(new DiagnosticCheckResult(id, label, "DOWN", "Token could not be decrypted or verified", System.currentTimeMillis() - start));
+            }
+        }
+        return checks;
+    }
+
+    // ── Outbound threat-intel source reachability ──────────────────────────
+
+    private DiagnosticCheckResult outboundProbe(String id, String label, String url) {
+        if (airgapped) {
+            return new DiagnosticCheckResult(id, label, "SKIPPED", "Air-gapped mode — no outbound calls are attempted", 0);
+        }
+        long start = System.currentTimeMillis();
+        var requestFactory = new org.springframework.http.client.SimpleClientHttpRequestFactory();
+        requestFactory.setConnectTimeout(PROBE_CONNECT_TIMEOUT);
+        requestFactory.setReadTimeout(PROBE_READ_TIMEOUT);
+        RestClient client = RestClient.builder().requestFactory(requestFactory).build();
+        try {
+            // A usable API response is required; transport reachability alone is insufficient.
+            client.get().uri(url).retrieve().toBodilessEntity();
+            return new DiagnosticCheckResult(id, label, "UP", "Reachable", System.currentTimeMillis() - start);
+        } catch (org.springframework.web.client.HttpStatusCodeException httpError) {
+            return new DiagnosticCheckResult(id, label, "DOWN", "HTTP " + httpError.getStatusCode().value(),
+                    System.currentTimeMillis() - start);
+        } catch (Exception e) {
+            return new DiagnosticCheckResult(id, label, "DOWN", safeMessage(e), System.currentTimeMillis() - start);
+        }
+    }
+
+    private static String safeMessage(Exception e) {
+        String msg = e.getMessage();
+        return msg != null && !msg.isBlank() ? msg : e.getClass().getSimpleName();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/gate/GatePolicyService.java b/src/main/java/com/salkcoding/oswl/service/gate/GatePolicyService.java
new file mode 100644
index 00000000..974b1bf2
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/gate/GatePolicyService.java
@@ -0,0 +1,452 @@
+package com.salkcoding.oswl.service.gate;
+import com.salkcoding.oswl.service.policy.PolicyService;
+
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.policy.PolicyException;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.domain.enums.LicenseStatus;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionTargetType;
+import com.salkcoding.oswl.domain.enums.Reachability;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.dto.gate.GateResultDto;
+import com.salkcoding.oswl.dto.gate.GateResultDto.Thresholds;
+import com.salkcoding.oswl.dto.gate.GateResultDto.Violation;
+import com.salkcoding.oswl.dto.gate.GateResultDto.Coverage;
+import com.salkcoding.oswl.domain.enums.ScanStatus;
+import com.salkcoding.oswl.exception.ConflictException;
+import com.salkcoding.oswl.domain.entity.scan.ScanFinding;
+import com.salkcoding.oswl.domain.enums.ScanFindingType;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanFindingRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+
+/**
+ * Evaluates a scan against configurable security-gate thresholds for CI / PR gating.
+ *
+ * Reuses the existing enrichment data (severity, KEV, EPSS, license policy status) and
+ * the previous completed scan as the baseline for "new vulnerability" detection — no new
+ * scanning or persistence. Deferred/ignored components are treated as accepted exceptions
+ * and never fail the gate, and so are findings covered by an approved, unexpired
+ * {@link PolicyException}.
+ *
+ * Threshold resolution order is request override → {@link PolicyService} org/team/project
+ * policy hierarchy → {@code oswl.gate.*} instance defaults.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class GatePolicyService {
+
+    private final ProjectRepository projectRepository;
+    private final ScanResultRepository scanResultRepository;
+    private final ScanComponentRepository scanComponentRepository;
+    private final ScanFindingRepository scanFindingRepository;
+    private final LibraryRepository libraryRepository;
+    private final PolicyService policyService;
+    /** Null in plain-Mockito unit tests (no Spring context) — every use is guarded. */
+    private final OswlMetrics oswlMetrics;
+
+    @Value("${oswl.gate.fail-on-severity:HIGH}")
+    private String defaultFailOnSeverity;
+    @Value("${oswl.gate.fail-on-kev:true}")
+    private boolean defaultFailOnKev;
+    @Value("${oswl.gate.fail-on-epss:0.5}")
+    private double defaultFailOnEpss;
+    @Value("${oswl.gate.fail-on-license-violation:true}")
+    private boolean defaultFailOnLicenseViolation;
+    @Value("${oswl.gate.only-new:true}")
+    private boolean defaultOnlyNew;
+    @Value("${oswl.gate.only-reachable:false}")
+    private boolean defaultOnlyReachable;
+    @Value("${oswl.gate.fail-on-secrets:false}")
+    private boolean defaultFailOnSecrets;
+
+    /**
+     * Per-request overrides; null fields fall back to the org/team/project policy hierarchy
+     * ({@link PolicyService}), and fields the hierarchy also leaves null fall through to the
+     * configured {@code oswl.gate.*} instance defaults.
+     */
+    public record GateOptions(
+            Long scanId,
+            String failOnSeverity,
+            Boolean failOnKev,
+            Double failOnEpss,
+            Boolean failOnLicenseViolation,
+            Boolean onlyNew,
+            Boolean onlyReachable,
+            Boolean failOnSecrets) {
+        public static GateOptions defaults() {
+            return new GateOptions(null, null, null, null, null, null, null, null);
+        }
+    }
+
+    @Transactional(readOnly = true)
+    public GateResultDto evaluate(Long projectId, GateOptions options) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+
+        // Tier 2 of the resolution order — org/team/project policy hierarchy.
+        // Fields the hierarchy leaves null (no policy row, or policy exists but doesn't set
+        // that field) fall through to the oswl.gate.* instance defaults below.
+        GateOptions policyOptions = policyService.resolveGateOptions(projectId);
+
+        RiskLevel failOnSeverity = parseSeverity(firstNonNull(
+                options.failOnSeverity(), policyOptions.failOnSeverity(), defaultFailOnSeverity));
+        boolean failOnKev = firstNonNull(options.failOnKev(), policyOptions.failOnKev(), defaultFailOnKev);
+        double failOnEpss = firstNonNull(options.failOnEpss(), policyOptions.failOnEpss(), defaultFailOnEpss);
+        boolean failOnLicense = firstNonNull(options.failOnLicenseViolation(),
+                policyOptions.failOnLicenseViolation(), defaultFailOnLicenseViolation);
+        boolean onlyNew = firstNonNull(options.onlyNew(), policyOptions.onlyNew(), defaultOnlyNew);
+        boolean onlyReachable = firstNonNull(options.onlyReachable(), policyOptions.onlyReachable(), defaultOnlyReachable);
+        boolean failOnSecrets = firstNonNull(options.failOnSecrets(), policyOptions.failOnSecrets(), defaultFailOnSecrets);
+
+        List activeExceptions = policyService.findActiveExceptions(projectId);
+
+        Thresholds thresholds = new Thresholds(
+                failOnSeverity.name(), failOnKev, failOnEpss >= 0 ? failOnEpss : null, failOnLicense, failOnSecrets);
+
+        // Resolve the scan to gate: explicit id, else latest completed
+        ScanResult scan;
+        if (options.scanId() != null) {
+            scan = scanResultRepository.findByIdAndProjectId(options.scanId(), projectId)
+                    .orElseThrow(() -> new IllegalArgumentException("Scan not found: " + options.scanId()));
+        } else {
+            scan = scanResultRepository.findRecentCompleted(projectId, 1).stream()
+                    .findFirst()
+                    .orElseThrow(() -> new ConflictException(
+                            "Project has no completed scan to gate on"));
+        }
+
+        // Baseline = most recent completed scan before this one (for new-vuln detection)
+        ScanResult baseline = scanResultRepository.findRecentCompleted(projectId, 10).stream()
+                .filter(s -> !s.getId().equals(scan.getId()))
+                .findFirst()
+                .orElse(null);
+        // Load the baseline components once — both key sets are derived from the same rows
+        // (the fetch-joined query is heavy, so calling it twice doubled the baseline cost).
+        List baselineComponents = baseline != null
+                ? scanComponentRepository.findByScanResultId(baseline.getId())
+                : List.of();
+        Set baselineVulnKeys = collectVulnKeys(baselineComponents);
+        Set baselineLicenseKeys = collectLicenseViolationKeys(baselineComponents);
+        Set baselineMaliciousKeys = collectMaliciousKeys(baselineComponents);
+
+        List components = scanComponentRepository.findByScanResultId(scan.getId());
+
+        List violations = new ArrayList<>();
+        long unanalysed = components.stream().filter(c -> !c.getLibrary().isVulnerabilitiesAnalyzed()).count();
+        boolean scanCompleted = scan.getStatus() == ScanStatus.COMPLETED;
+        boolean detailsAvailable = !scan.isArchived();
+        boolean scannersComplete = !scanFindingRepository.hasIncompleteScanner(scan.getId(), projectId);
+        Coverage coverage = new Coverage(components.size(), unanalysed, scanCompleted, detailsAvailable,
+                scanCompleted && detailsAvailable && unanalysed == 0 && scannersComplete);
+        if (!coverage.complete()) {
+            violations.add(new Violation("COVERAGE", "INCOMPLETE_ANALYSIS", "scan", "UNKNOWN", null, false,
+                    "Cannot establish complete stored lookup coverage: scanCompleted=" + scanCompleted
+                            + ", detailsAvailable=" + detailsAvailable + ", unanalysedComponents=" + unanalysed
+                            + ", scannersComplete=" + scannersComplete,
+                    false));
+        }
+        int evaluated = 0;
+        int newVulnCount = 0;
+
+        for (ScanComponent sc : components) {
+            // Accepted exceptions never fail the gate
+            if (sc.isDeferred() || sc.isIgnored()) continue;
+            Library lib = sc.getLibrary();
+            String coord = lib.getName() + "@" + (lib.getVersion() != null ? lib.getVersion() : "");
+
+            // Confirmed-malicious packages (OSV MAL- advisories) block unconditionally —
+            // severity/KEV/EPSS thresholds and onlyNew/onlyReachable do not apply. The only release
+            // valve is an approved policy exception (waiver).
+            if (lib.isMalicious()
+                    && !isWaived(activeExceptions, PolicyExceptionTargetType.MALICIOUS, null, coord)) {
+                boolean isNew = !baselineMaliciousKeys.contains(coord + "|MALICIOUS");
+                evaluated++;
+                if (isNew) newVulnCount++;
+                violations.add(new Violation(
+                        "MALICIOUS", lib.getName(), coord, "CRITICAL", null, false,
+                        "package confirmed malicious (OSV MAL- advisory)", isNew));
+            }
+
+            // Opt-in reference filtering excludes UNKNOWN CVE findings; it is not a safety proof.
+            // Both bytecode references and supported source imports qualify. License/malware
+            // findings are independent of this filter. The default evaluates UNKNOWN as well.
+            boolean reachabilityGatePasses = !onlyReachable || sc.getReachability() == Reachability.REACHABLE;
+
+            if (reachabilityGatePasses) {
+                for (Cve cve : lib.getCves()) {
+                    if (cve.getSeverity() == null) continue;
+                    String vulnId = cve.getCveId() != null ? cve.getCveId() : cve.getGhsaId();
+                    if (vulnId == null) continue;
+                    boolean isNew = !baselineVulnKeys.contains(coord + "|" + vulnId);
+                    if (onlyNew && !isNew) continue;
+                    if (isWaived(activeExceptions, PolicyExceptionTargetType.CVE, vulnId, coord)) continue;
+                    evaluated++;
+                    if (isNew) newVulnCount++;
+
+                    List reasons = new ArrayList<>();
+                    boolean sevFail = cve.getSeverity().ordinal() <= failOnSeverity.ordinal()
+                            && cve.getSeverity() != RiskLevel.NONE;
+                    if (sevFail) reasons.add("severity " + cve.getSeverity() + " ≥ " + failOnSeverity.name());
+                    if (failOnKev && Boolean.TRUE.equals(cve.getKevListed())) reasons.add("CISA KEV listed");
+                    if (failOnEpss >= 0 && cve.getEpssScore() != null && cve.getEpssScore() >= failOnEpss) {
+                        reasons.add(String.format("EPSS %.3f ≥ %.3f", cve.getEpssScore(), failOnEpss));
+                    }
+                    if (!reasons.isEmpty()) {
+                        violations.add(new Violation(
+                                "CVE", vulnId, coord, cve.getSeverity().name(),
+                                cve.getEpssScore(), Boolean.TRUE.equals(cve.getKevListed()),
+                                String.join("; ", reasons), isNew));
+                    }
+                }
+            }
+
+            // License policy violation (RESTRICTED)
+            if (failOnLicense && lib.getLicenseStatus() == LicenseStatus.RESTRICTED) {
+                String licKey = coord + "|LICENSE";
+                boolean isNew = !baselineLicenseKeys.contains(licKey);
+                boolean waived = isWaived(activeExceptions, PolicyExceptionTargetType.LICENSE, null, coord);
+                if ((!onlyNew || isNew) && !waived) {
+                    evaluated++;
+                    if (isNew) newVulnCount++;
+                    violations.add(new Violation(
+                            "LICENSE",
+                            lib.getLicenseName() != null ? lib.getLicenseName() : "Unknown",
+                            coord, "RESTRICTED", null, false,
+                            "license policy violation (RESTRICTED)", isNew));
+                }
+            }
+        }
+
+        // Secret findings — CRITICAL/HIGH severity findings only; MEDIUM/LOW never block.
+        if (failOnSecrets) {
+            Set baselineSecretKeys = baseline != null
+                    ? collectSecretKeys(baseline.getId(), projectId)
+                    : Set.of();
+            for (ScanFinding finding : scanFindingRepository.findByScanResultIdAndProjectId(scan.getId(), projectId)) {
+                if (finding.getType() != ScanFindingType.SECRET) continue;
+                if (finding.getSeverity() != RiskLevel.CRITICAL && finding.getSeverity() != RiskLevel.HIGH) continue;
+                String key = secretFindingKey(finding);
+                boolean isNew = !baselineSecretKeys.contains(key);
+                if (onlyNew && !isNew) continue;
+                evaluated++;
+                if (isNew) newVulnCount++;
+                violations.add(new Violation(
+                        "SECRET", finding.getRuleId(), finding.getFilePath(),
+                        finding.getSeverity().name(), null, false,
+                        finding.getDescription() + (finding.getLineNumber() != null
+                                ? " (line " + finding.getLineNumber() + ")" : ""),
+                        isNew));
+            }
+        }
+
+        // Most severe first
+        violations.sort(Comparator.comparingInt(GatePolicyService::violationRank));
+
+        boolean passed = violations.isEmpty();
+        String baselineVersion = baseline != null
+                ? (baseline.getVersion() != null ? baseline.getVersion() : "prev-scan")
+                : "(none)";
+        String scanVersion = scan.getVersion() != null ? scan.getVersion() : "-";
+        String summary = buildSummary(passed, violations, onlyNew);
+        String comment = buildComment(project.getName(), scanVersion, baselineVersion,
+                passed, thresholds, onlyNew, onlyReachable, violations, summary);
+
+        log.info("[Gate] projectId={} scanId={} passed={} violations={} evaluated={} newVulns={} onlyReachable={}",
+                projectId, scan.getId(), passed, violations.size(), evaluated, newVulnCount, onlyReachable);
+        if (oswlMetrics != null) {
+            oswlMetrics.recordGateEvaluation(passed);
+        }
+
+        return new GateResultDto(
+                passed, passed ? 0 : 1,
+                project.getName(), scan.getId(), scanVersion, baselineVersion,
+                onlyNew, onlyReachable, thresholds, evaluated, newVulnCount, violations,
+                summary, comment, null, coverage);
+    }
+
+    // ── Baseline key collection ──────────────────────────────────────────
+
+    private Set collectVulnKeys(List components) {
+        Set keys = new HashSet<>();
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            String coord = lib.getName() + "@" + (lib.getVersion() != null ? lib.getVersion() : "");
+            for (Cve cve : lib.getCves()) {
+                String vulnId = cve.getCveId() != null ? cve.getCveId() : cve.getGhsaId();
+                if (vulnId != null) keys.add(coord + "|" + vulnId);
+            }
+        }
+        return keys;
+    }
+
+    private Set collectLicenseViolationKeys(List components) {
+        Set keys = new HashSet<>();
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            if (lib.getLicenseStatus() == LicenseStatus.RESTRICTED) {
+                String coord = lib.getName() + "@" + (lib.getVersion() != null ? lib.getVersion() : "");
+                keys.add(coord + "|LICENSE");
+            }
+        }
+        return keys;
+    }
+
+    private Set collectMaliciousKeys(List components) {
+        Set keys = new HashSet<>();
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            if (lib.isMalicious()) {
+                String coord = lib.getName() + "@" + (lib.getVersion() != null ? lib.getVersion() : "");
+                keys.add(coord + "|MALICIOUS");
+            }
+        }
+        return keys;
+    }
+
+    private Set collectSecretKeys(Long scanResultId, Long projectId) {
+        Set keys = new HashSet<>();
+        for (ScanFinding f : scanFindingRepository.findByScanResultIdAndProjectId(scanResultId, projectId)) {
+            if (f.getType() == ScanFindingType.SECRET) keys.add(secretFindingKey(f));
+        }
+        return keys;
+    }
+
+    /** Same secret at the same location across scans — file path + rule id + value fingerprint. */
+    private static String secretFindingKey(ScanFinding f) {
+        return f.getFilePath() + "|" + f.getRuleId() + "|" + f.getFingerprint();
+    }
+
+    // ── Formatting ───────────────────────────────────────────────────────
+
+    private static int violationRank(Violation v) {
+        if ("COVERAGE".equals(v.type())) return -2;
+        if ("MALICIOUS".equals(v.type())) return -1;
+        if ("SECRET".equals(v.type())) return 0;
+        if ("LICENSE".equals(v.type())) return 5;
+        return switch (v.severity()) {
+            case "CRITICAL" -> 0;
+            case "HIGH" -> 1;
+            case "MEDIUM" -> 2;
+            case "LOW" -> 3;
+            default -> 4;
+        };
+    }
+
+    private String buildSummary(boolean passed, List violations, boolean onlyNew) {
+        if (passed) {
+            return onlyNew
+                    ? "Security gate passed — no new blocking vulnerabilities or license violations."
+                    : "Security gate passed — no blocking vulnerabilities or license violations.";
+        }
+        long mal = violations.stream().filter(v -> "MALICIOUS".equals(v.type())).count();
+        long cve = violations.stream().filter(v -> "CVE".equals(v.type())).count();
+        long lic = violations.stream().filter(v -> "LICENSE".equals(v.type())).count();
+        long sec = violations.stream().filter(v -> "SECRET".equals(v.type())).count();
+        String malPart = mal > 0 ? mal + " confirmed-malicious package(s), " : "";
+        String secPart = sec > 0 ? sec + " secret finding(s), " : "";
+        String coveragePart = violations.stream().anyMatch(v -> "COVERAGE".equals(v.type()))
+                ? "incomplete analysis coverage, " : "";
+        return "Security gate failed — " + coveragePart + malPart + secPart + cve + " vulnerability finding(s) and "
+                + lic + " license violation(s) breach the policy.";
+    }
+
+    private String buildComment(String projectName, String scanVersion, String baselineVersion,
+                                boolean passed, Thresholds t, boolean onlyNew, boolean onlyReachable,
+                                List violations, String summary) {
+        StringBuilder md = new StringBuilder();
+        md.append(passed ? "## ✅ OsWL Security Gate — Passed\n\n" : "## ❌ OsWL Security Gate — Failed\n\n");
+        md.append(summary).append("\n\n");
+        md.append("**Project:** ").append(projectName)
+          .append(" · **Version:** ").append(scanVersion)
+          .append(" · **Baseline:** ").append(baselineVersion)
+          .append(" · **Scope:** ").append(onlyNew ? "new findings only" : "all findings").append("\n\n");
+        md.append("**Policy:** fail on severity ≥ ").append(t.failOnSeverity());
+        if (t.failOnKev()) md.append(", KEV-listed");
+        if (t.failOnEpss() != null) md.append(String.format(", EPSS ≥ %.2f", t.failOnEpss()));
+        if (t.failOnLicenseViolation()) md.append(", license violations");
+        if (t.failOnSecrets()) md.append(", secrets (CRITICAL/HIGH)");
+        if (onlyReachable) md.append(", referenced libraries only (bytecode/source imports; UNKNOWN excluded, execution not proven)");
+        md.append("\n\n");
+
+        if (!violations.isEmpty()) {
+            md.append("| Type | ID | Component | Severity | EPSS | KEV | New | Reason |\n");
+            md.append("|------|----|-----------|----------|------|-----|-----|--------|\n");
+            for (Violation v : violations) {
+                md.append("| ").append(v.type())
+                  .append(" | ").append(v.id())
+                  .append(" | `").append(v.component()).append("`")
+                  .append(" | ").append(v.severity())
+                  .append(" | ").append(v.epss() != null ? String.format("%.3f", v.epss()) : "—")
+                  .append(" | ").append(v.kev() ? "yes" : "—")
+                  .append(" | ").append(v.isNew() ? "yes" : "—")
+                  .append(" | ").append(v.reason())
+                  .append(" |\n");
+            }
+            md.append("\n");
+        }
+        md.append("Generated by OsWL security gate.");
+        return md.toString();
+    }
+
+    private RiskLevel parseSeverity(String s) {
+        try {
+            return RiskLevel.valueOf(s.trim().toUpperCase());
+        } catch (Exception e) {
+            return RiskLevel.HIGH;
+        }
+    }
+
+    // ── Waivers ────────────────────────────────────────────
+
+    /**
+     * True when an active, approved exception covers this finding: an {@code ALL}-scoped
+     * exception matches every finding on its target project; a {@code CVE}/{@code LICENSE}
+     * exception matches only that finding type. A {@code componentCoordinate} narrows either
+     * to a single component; a {@code targetId} (on non-{@code ALL} exceptions) narrows further
+     * to a single CVE/GHSA id.
+     */
+    private boolean isWaived(List exceptions, PolicyExceptionTargetType findingType,
+                             String findingId, String coord) {
+        for (PolicyException ex : exceptions) {
+            if (ex.getTargetType() != PolicyExceptionTargetType.ALL && ex.getTargetType() != findingType) continue;
+            if (ex.getComponentCoordinate() != null && !ex.getComponentCoordinate().equals(coord)) continue;
+            if (ex.getTargetType() != PolicyExceptionTargetType.ALL
+                    && ex.getTargetId() != null && !ex.getTargetId().equals(findingId)) continue;
+            return true;
+        }
+        return false;
+    }
+
+    // ── Tiered default resolution ────────────────────────────────────────
+
+    private static String firstNonNull(String request, String policy, String instanceDefault) {
+        return request != null ? request : policy != null ? policy : instanceDefault;
+    }
+
+    private static boolean firstNonNull(Boolean request, Boolean policy, boolean instanceDefault) {
+        return request != null ? request : policy != null ? policy : instanceDefault;
+    }
+
+    private static double firstNonNull(Double request, Double policy, double instanceDefault) {
+        return request != null ? request : policy != null ? policy : instanceDefault;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/PrGateService.java b/src/main/java/com/salkcoding/oswl/service/gate/PrGateService.java
similarity index 81%
rename from src/main/java/com/salkcoding/oswl/service/PrGateService.java
rename to src/main/java/com/salkcoding/oswl/service/gate/PrGateService.java
index 3e21d8e9..8c3e59b6 100644
--- a/src/main/java/com/salkcoding/oswl/service/PrGateService.java
+++ b/src/main/java/com/salkcoding/oswl/service/gate/PrGateService.java
@@ -1,11 +1,13 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.gate;
+import com.salkcoding.oswl.service.vcs.GitHubService;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.dto.gate.GateRequest;
 import com.salkcoding.oswl.dto.gate.GateRequest.GitHubTarget;
 import com.salkcoding.oswl.dto.gate.GateResultDto;
 import com.salkcoding.oswl.dto.gate.GateResultDto.GitHubResult;
-import com.salkcoding.oswl.service.GatePolicyService.GateOptions;
+import com.salkcoding.oswl.service.gate.GatePolicyService.GateOptions;
+import com.salkcoding.oswl.service.notification.WebhookNotificationService;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
@@ -25,6 +27,7 @@ public class PrGateService {
     private final GatePolicyService gatePolicyService;
     private final GitHubService gitHubService;
     private final AuditLogService auditLogService;
+    private final WebhookNotificationService webhookNotificationService;
 
     public GateResultDto evaluateAndPublish(Long projectId, GateRequest request) {
         GateOptions options = new GateOptions(
@@ -33,7 +36,9 @@ public GateResultDto evaluateAndPublish(Long projectId, GateRequest request) {
                 request != null ? request.failOnKev() : null,
                 request != null ? request.failOnEpss() : null,
                 request != null ? request.failOnLicenseViolation() : null,
-                request != null ? request.onlyNew() : null);
+                request != null ? request.onlyNew() : null,
+                request != null ? request.onlyReachable() : null,
+                request != null ? request.failOnSecrets() : null);
 
         GateResultDto result = gatePolicyService.evaluate(projectId, options);
 
@@ -42,6 +47,15 @@ public GateResultDto evaluateAndPublish(Long projectId, GateRequest request) {
                 "scanId=" + result.scanId() + " passed=" + result.passed()
                         + " violations=" + result.violations().size());
 
+        if (!result.passed()) {
+            try {
+                webhookNotificationService.sendGateFailure(projectId, result);
+            } catch (Exception e) {
+                log.error("[Gate] Webhook notification failed for projectId={}: {}",
+                        projectId, e.getMessage());
+            }
+        }
+
         GitHubTarget gh = request != null ? request.github() : null;
         if (gh == null || gh.token() == null || gh.owner() == null || gh.repo() == null) {
             return result;
@@ -84,8 +98,8 @@ private GateResultDto withGitHub(GateResultDto result, GitHubTarget gh, Long pro
         GitHubResult ghResult = new GitHubResult(commentPosted, commentUrl, checkRunPosted, checkRunUrl, error);
         return new GateResultDto(
                 result.passed(), result.exitCode(), result.projectName(), result.scanId(),
-                result.scanVersion(), result.baselineVersion(), result.onlyNew(),
+                result.scanVersion(), result.baselineVersion(), result.onlyNew(), result.onlyReachable(),
                 result.thresholds(), result.evaluatedCount(), result.newVulnerabilityCount(),
-                result.violations(), result.summary(), result.commentMarkdown(), ghResult);
+                result.violations(), result.summary(), result.commentMarkdown(), ghResult, result.coverage());
     }
 }
diff --git a/src/main/java/com/salkcoding/oswl/service/git/GitCloneExecutor.java b/src/main/java/com/salkcoding/oswl/service/git/GitCloneExecutor.java
index 3976eecd..f549c112 100644
--- a/src/main/java/com/salkcoding/oswl/service/git/GitCloneExecutor.java
+++ b/src/main/java/com/salkcoding/oswl/service/git/GitCloneExecutor.java
@@ -47,6 +47,9 @@ public class GitCloneExecutor {
     @Value("${oswl.quick-import.allow-build-exec:false}")
     private boolean allowBuildExec;
 
+    @Value("${oswl.clone.include-source:false}")
+    private boolean includeSource;
+
     /**
      * @param credentials {@code null} for anonymous HTTPS clone (public repositories).
      */
@@ -54,7 +57,7 @@ public void clone(String repositoryUrl, GitCloneCredentials credentials, String
                       Path targetDir, String jobId) throws Exception {
         Path askpass = credentials != null ? writeAskpassScript() : null;
         try {
-            if (sparseEnabled && !allowBuildExec) {
+            if (sparseEnabled && !allowBuildExec && !includeSource) {
                 try {
                     cloneSparse(repositoryUrl, branch, targetDir, jobId, askpass, credentials);
                     return;
@@ -76,7 +79,7 @@ public void clone(String repositoryUrl, GitCloneCredentials credentials, String
         }
     }
 
-    /** Plain shallow clone — the pre-A4 behavior, kept for build-exec mode and as fallback. */
+    /** Plain shallow clone — the original behavior, kept for build-exec mode and as fallback. */
     private void cloneFull(String repositoryUrl, String branch, Path targetDir, String jobId,
                            Path askpass, GitCloneCredentials credentials) throws Exception {
         List cmd = gitBase();
diff --git a/src/main/java/com/salkcoding/oswl/service/iacscan/IacRule.java b/src/main/java/com/salkcoding/oswl/service/iacscan/IacRule.java
new file mode 100644
index 00000000..5ea3aca2
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/iacscan/IacRule.java
@@ -0,0 +1,9 @@
+package com.salkcoding.oswl.service.iacscan;
+
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+
+import java.util.regex.Pattern;
+
+/** One line-matched IaC misconfiguration rule, scoped to a single file kind. */
+record IacRule(String id, String description, RiskLevel severity, IacTargetKind targetKind, Pattern pattern) {
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/iacscan/IacScanner.java b/src/main/java/com/salkcoding/oswl/service/iacscan/IacScanner.java
new file mode 100644
index 00000000..a46617d4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/iacscan/IacScanner.java
@@ -0,0 +1,161 @@
+package com.salkcoding.oswl.service.iacscan;
+
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.domain.enums.ScanFindingType;
+import com.salkcoding.oswl.dto.scan.ScanFindingCandidate;
+import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.lang.NonNull;
+import org.springframework.stereotype.Service;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.FileVisitResult;
+import java.nio.file.Files;
+import java.nio.file.LinkOption;
+import java.nio.file.Path;
+import java.nio.file.SimpleFileVisitor;
+import java.nio.file.attribute.BasicFileAttributes;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Terraform / Kubernetes manifest / Dockerfile misconfiguration scanner over a Quick Import
+ * clone. Line-based heuristic rules — not a full HCL/YAML semantic analysis
+ * (that would need a real parser); the goal is to catch the most common, highest-signal
+ * misconfigurations without false-negatives-by-omission on the common cases.
+ */
+@Slf4j
+@Service
+public class IacScanner {
+
+    private static final long MAX_FILE_BYTES = 1_000_000L;
+    private static final int MAX_FINDINGS = 300;
+
+    private static final List RULES = List.of(
+            new IacRule("tf-public-s3-acl", "S3 bucket ACL grants public read/write access",
+                    RiskLevel.HIGH, IacTargetKind.TERRAFORM,
+                    Pattern.compile("acl\\s*=\\s*\"public-read")),
+            new IacRule("tf-open-security-group", "Security group ingress open to 0.0.0.0/0",
+                    RiskLevel.HIGH, IacTargetKind.TERRAFORM,
+                    Pattern.compile("cidr_blocks\\s*=\\s*\\[\\s*\"0\\.0\\.0\\.0/0\"")),
+            new IacRule("tf-hardcoded-secret", "Hardcoded credential literal in a Terraform resource",
+                    RiskLevel.MEDIUM, IacTargetKind.TERRAFORM,
+                    Pattern.compile("(?i)\\b(secret|password|access_key)\\s*=\\s*\"[^\"$]{8,}\"")),
+
+            new IacRule("k8s-privileged-container", "Container runs in privileged mode",
+                    RiskLevel.CRITICAL, IacTargetKind.KUBERNETES,
+                    Pattern.compile("privileged:\\s*true")),
+            new IacRule("k8s-host-network", "Pod uses the host's network namespace",
+                    RiskLevel.HIGH, IacTargetKind.KUBERNETES,
+                    Pattern.compile("hostNetwork:\\s*true")),
+            new IacRule("k8s-run-as-root", "Container explicitly runs as UID 0 (root)",
+                    RiskLevel.HIGH, IacTargetKind.KUBERNETES,
+                    Pattern.compile("runAsUser:\\s*0\\b")),
+            new IacRule("k8s-allow-privilege-escalation", "Container allows privilege escalation",
+                    RiskLevel.HIGH, IacTargetKind.KUBERNETES,
+                    Pattern.compile("allowPrivilegeEscalation:\\s*true")),
+
+            new IacRule("dockerfile-add-remote-url", "ADD fetches a remote URL without integrity verification",
+                    RiskLevel.MEDIUM, IacTargetKind.DOCKERFILE,
+                    Pattern.compile("^\\s*ADD\\s+https?://", Pattern.CASE_INSENSITIVE)),
+            new IacRule("dockerfile-latest-tag", "Base image pinned to the mutable :latest tag",
+                    RiskLevel.LOW, IacTargetKind.DOCKERFILE,
+                    Pattern.compile("^\\s*FROM\\s+\\S+:latest\\b", Pattern.CASE_INSENSITIVE))
+    );
+
+    private static final Pattern DOCKERFILE_USER = Pattern.compile("^\\s*USER\\s+\\S+", Pattern.CASE_INSENSITIVE);
+
+    public List scan(Path root) {
+        List findings = new ArrayList<>();
+        try {
+            Files.walkFileTree(root, new SimpleFileVisitor<>() {
+                @Override
+                public FileVisitResult preVisitDirectory(@NonNull Path dir, @NonNull BasicFileAttributes attrs) {
+                    if (findings.size() >= MAX_FINDINGS) return FileVisitResult.TERMINATE;
+                    if (!dir.equals(root) && ManifestCollectRules.SKIP_DIRS.contains(dir.getFileName().toString())) {
+                        return FileVisitResult.SKIP_SUBTREE;
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+
+                @Override
+                public FileVisitResult visitFile(@NonNull Path file, @NonNull BasicFileAttributes attrs) {
+                    if (findings.size() >= MAX_FINDINGS) return FileVisitResult.TERMINATE;
+                    try {
+                        scanFile(root, file, attrs, findings);
+                    } catch (Exception e) {
+                        log.debug("[IacScan] skip file '{}': {}", file, e.getMessage());
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+            });
+        } catch (IOException e) {
+            log.warn("[IacScan] walk error under '{}': {}", root, e.getMessage());
+        }
+        return findings;
+    }
+
+    private void scanFile(Path root, Path file, BasicFileAttributes attrs, List findings) throws IOException {
+        if (!attrs.isRegularFile() || attrs.size() == 0 || attrs.size() > MAX_FILE_BYTES) return;
+        IacTargetKind kind = classify(file);
+        if (kind == null) return;
+
+        Path fileReal = file.toRealPath(LinkOption.NOFOLLOW_LINKS);
+        if (!fileReal.startsWith(root)) return;
+        String relPath = root.relativize(fileReal).toString().replace('\\', '/');
+        List lines = Files.readAllLines(fileReal, StandardCharsets.UTF_8);
+
+        if (kind == IacTargetKind.KUBERNETES && !looksLikeK8sManifest(lines)) return;
+
+        boolean sawUserInstruction = false;
+        for (int i = 0; i < lines.size(); i++) {
+            String line = lines.get(i);
+            for (IacRule rule : RULES) {
+                if (rule.targetKind() != kind) continue;
+                Matcher m = rule.pattern().matcher(line);
+                if (m.find()) {
+                    findings.add(new ScanFindingCandidate(
+                            ScanFindingType.IAC, rule.id(), rule.severity(), relPath, i + 1, rule.description(), null));
+                    if (findings.size() >= MAX_FINDINGS) return;
+                }
+            }
+            if (kind == IacTargetKind.DOCKERFILE && DOCKERFILE_USER.matcher(line).find()) {
+                sawUserInstruction = true;
+            }
+        }
+
+        if (kind == IacTargetKind.DOCKERFILE && !sawUserInstruction) {
+            findings.add(new ScanFindingCandidate(
+                    ScanFindingType.IAC, "dockerfile-runs-as-root",
+                    RiskLevel.MEDIUM, relPath, 1,
+                    "No USER instruction — the container runs as root by default", null));
+        }
+    }
+
+    private static IacTargetKind classify(Path file) {
+        String name = file.getFileName().toString();
+        String lower = name.toLowerCase();
+        if (lower.endsWith(".tf")) return IacTargetKind.TERRAFORM;
+        if (lower.equals("dockerfile") || lower.startsWith("dockerfile.") || lower.endsWith(".dockerfile")) {
+            return IacTargetKind.DOCKERFILE;
+        }
+        if (lower.endsWith(".yaml") || lower.endsWith(".yml")) return IacTargetKind.KUBERNETES;
+        return null;
+    }
+
+    /** Avoids false positives on non-k8s YAML (CI workflows, Helm values, etc.). */
+    private static boolean looksLikeK8sManifest(List lines) {
+        boolean hasApiVersion = false;
+        boolean hasKind = false;
+        for (String line : lines) {
+            String trimmed = line.strip();
+            if (trimmed.startsWith("apiVersion:")) hasApiVersion = true;
+            if (trimmed.startsWith("kind:")) hasKind = true;
+            if (hasApiVersion && hasKind) return true;
+        }
+        return false;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/iacscan/IacTargetKind.java b/src/main/java/com/salkcoding/oswl/service/iacscan/IacTargetKind.java
new file mode 100644
index 00000000..485c14ca
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/iacscan/IacTargetKind.java
@@ -0,0 +1,5 @@
+package com.salkcoding.oswl.service.iacscan;
+
+enum IacTargetKind {
+    TERRAFORM, KUBERNETES, DOCKERFILE
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/CloneCleanupService.java b/src/main/java/com/salkcoding/oswl/service/ingest/CloneCleanupService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/CloneCleanupService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/CloneCleanupService.java
index 50f0bf5e..c84b5bd0 100644
--- a/src/main/java/com/salkcoding/oswl/service/CloneCleanupService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/CloneCleanupService.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import com.salkcoding.oswl.service.git.CloneRootPathGuard;
 import jakarta.annotation.PostConstruct;
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/CondaPypiMappingService.java b/src/main/java/com/salkcoding/oswl/service/ingest/CondaPypiMappingService.java
new file mode 100644
index 00000000..32c19734
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/CondaPypiMappingService.java
@@ -0,0 +1,72 @@
+package com.salkcoding.oswl.service.ingest;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import java.io.InputStream;
+import java.util.HashMap;
+import java.util.Iterator;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Conda package name → PyPI project name, for the subset of conda packages that are just a
+ * Python project repackaged for conda (numpy, requests, django, ...). A hit means the package
+ * can be queried through OSV's PyPI ecosystem exactly like a real PyPI dependency; a miss means
+ * it's very likely a native (non-Python) library, which is why those are left
+ * conspicuously {@code UNKNOWN} rather than guessed at.
+ *
+ * 
Backed by a bundled snapshot of {@code regro/cf-graph-countyfair}'s
+ * {@code mappings/pypi/grayskull_pypi_mapping.json} — the same file conda-forge's own tooling
+ * uses to generate PRs, and small enough (~1.8MB) to ship in the jar rather than fetch at
+ * runtime. It is a point-in-time snapshot, not a live lookup: a brand-new PyPI repackage won't
+ * resolve until this file is refreshed from upstream.
+ */
+@Slf4j
+@Service
+public class CondaPypiMappingService {
+
+    private static final String RESOURCE_PATH = "/conda/grayskull-pypi-mapping.json";
+
+    private final Map condaNameToPypiName;
+
+    public CondaPypiMappingService() {
+        this.condaNameToPypiName = load();
+    }
+
+    private static Map load() {
+        Map map = new HashMap<>();
+        try (InputStream in = CondaPypiMappingService.class.getResourceAsStream(RESOURCE_PATH)) {
+            if (in == null) {
+                log.warn("[CondaPypiMapping] Bundled mapping resource {} not found — every conda package will be treated as unmapped (UNKNOWN)", RESOURCE_PATH);
+                return Map.of();
+            }
+            JsonNode root = new ObjectMapper().readTree(in);
+            // The outer JSON key is not a reliable name (some entries are keyed by an opaque
+            // hash, not conda_name/pypi_name) — always read the fields, never the key.
+            for (Iterator it = root.elements(); it.hasNext(); ) {
+                JsonNode entry = it.next();
+                String condaName = entry.path("conda_name").asText(null);
+                String pypiName = entry.path("pypi_name").asText(null);
+                if (condaName != null && !condaName.isBlank() && pypiName != null && !pypiName.isBlank()) {
+                    map.putIfAbsent(condaName.toLowerCase(Locale.ROOT), pypiName);
+                }
+            }
+        } catch (Exception e) {
+            log.warn("[CondaPypiMapping] Failed to load {}: {}", RESOURCE_PATH, e.getMessage());
+            return Map.of();
+        }
+        log.info("[CondaPypiMapping] Loaded {} conda→PyPI name mappings", map.size());
+        return map;
+    }
+
+    /** Returns the PyPI project name for a conda package name, or {@code null} if it's not a known Python repackage. */
+    public String resolvePypiName(String condaName) {
+        if (condaName == null) {
+            return null;
+        }
+        return condaNameToPypiName.get(condaName.toLowerCase(Locale.ROOT));
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/DependencyManifestParserService.java b/src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestParserService.java
similarity index 51%
rename from src/main/java/com/salkcoding/oswl/service/DependencyManifestParserService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestParserService.java
index 7195eed3..2d2f8693 100644
--- a/src/main/java/com/salkcoding/oswl/service/DependencyManifestParserService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestParserService.java
@@ -1,34 +1,25 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
+import com.salkcoding.oswl.service.ingest.parser.*;
 import com.fasterxml.jackson.databind.JsonNode;
-import com.fasterxml.jackson.databind.ObjectMapper;
 import com.salkcoding.oswl.dto.scan.ScanPayload;
-import com.salkcoding.oswl.service.git.CloneRootPathGuard;
 import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
-import org.jspecify.annotations.NonNull;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.stereotype.Service;
 import org.w3c.dom.Document;
 import org.w3c.dom.Element;
-import org.w3c.dom.NodeList;
 
 import javax.xml.parsers.DocumentBuilderFactory;
 import java.io.File;
 import java.io.IOException;
 import java.nio.charset.Charset;
 import java.nio.charset.StandardCharsets;
-import java.nio.file.FileVisitResult;
 import java.nio.file.Files;
-import java.nio.file.LinkOption;
 import java.nio.file.Path;
-import java.nio.file.SimpleFileVisitor;
-import java.nio.file.attribute.BasicFileAttributes;
-import java.util.ArrayDeque;
 import java.util.ArrayList;
 import java.util.Comparator;
-import java.util.Deque;
 import java.util.HashMap;
 import java.util.HashSet;
 import java.util.LinkedHashMap;
@@ -51,6 +42,7 @@
 public class DependencyManifestParserService {
 
     private final MavenBomVersionResolver bomVersionResolver;
+    private final CondaPypiMappingService condaPypiMappingService;
 
     /**
      * SECURITY: executing mvnw/gradlew/dotnet from a cloned repository runs arbitrary repo
@@ -60,10 +52,19 @@ public class DependencyManifestParserService {
     @Value("${oswl.quick-import.allow-build-exec:false}")
     private boolean allowBuildExec;
 
-    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
     /** Console tools (mvnw, gradlew, npm) write human-readable output in the OS console codepage (e.g. MS949 on Korean Windows). */
     private static final Charset CONSOLE_CHARSET = Charset.forName(System.getProperty("native.encoding", "UTF-8"));
-    private static final Set MANIFEST_SKIP_DIRS = ManifestCollectRules.SKIP_DIRS;
+
+    /**
+     * Every ecosystem tag this parser can emit on a {@code ComponentPayload}. Kept as an explicit
+     * set (rather than derived from the literals scattered through the per-format parsers) so a
+     * regression test can assert each tag is covered by the OSV ecosystem mapping — a tag missing
+     * there would silently report "no vulnerabilities" for the whole ecosystem.
+     */
+    public static final Set EMITTED_ECOSYSTEMS = Set.of(
+            "MAVEN", "NPM", "PYPI", "GO", "CARGO", "NUGET", "RUBYGEMS", "COMPOSER",
+            "CONAN", "VCPKG", "SUBMODULE", "VENDORED", "COCOAPODS", "CONDA");
+
     public record ParseResult(String ecosystem, List components) {}
 
     private record GradleComponent(String name, String version, List> paths) {}
@@ -76,9 +77,9 @@ public ParseResult parseDependencies(Path cloneDir, String repoName) {
     }
 
     /**
-     * @param manifestProgress optional D3 callback receiving {@code (processedManifests, totalManifests)}
-     *                         as each manifest group is handled — the A3 index knows the full
-     *                         manifest count up front, so the caller can interpolate continuous
+     * @param manifestProgress optional callback receiving {@code (processedManifests, totalManifests)}
+     *                         as each manifest group is handled — the manifest index knows the
+     *                         full manifest count up front, so the caller can interpolate continuous
      *                         progress. Parsing must never fail because of reporting, so callback
      *                         exceptions are swallowed at debug level.
      */
@@ -88,12 +89,12 @@ public ParseResult parseDependencies(Path cloneDir, String repoName,
         Set seen = new LinkedHashSet<>();
         List ecosystems = new ArrayList<>();
 
-        // A3: walk the tree exactly once; every manifest lookup below hits this index.
+        // walk the tree exactly once; every manifest lookup below hits this index.
         ManifestIndex index = buildIndex(cloneDir);
         log.debug("[DependencyParser] Manifest index built for '{}': {} basenames, {} suffixes",
                 repoName, index.byFileName().size(), index.bySuffix().size());
 
-        // D3: progress denominator = every distinct indexed manifest; numerator = the ones
+        // progress denominator = every distinct indexed manifest; numerator = the ones
         // actually processed below (fallback groups skipped because a lock file already
         // resolved the ecosystem simply never count — the caller clamps monotonically).
         Set indexedManifests = new HashSet<>();
@@ -313,6 +314,83 @@ public ParseResult parseDependencies(Path cloneDir, String repoName,
             report.accept(List.of(lock));
         }
 
+        // ── C/C++: vcpkg.json ─────────────────────────────────────────────────
+        for (Path vcpkg : indexByNames(index, "vcpkg.json", "vcpkg-configuration.json")) {
+            String fn = vcpkg.getFileName().toString();
+            List vcpkgComps = "vcpkg.json".equals(fn)
+                    ? parseVcpkgJson(vcpkg.getParent(), repoName)
+                    : parseVcpkgConfigurationJson(vcpkg.getParent(), repoName);
+            if (vcpkgComps != null && !vcpkgComps.isEmpty()) {
+                if (!ecosystems.contains("VCPKG")) ecosystems.add("VCPKG");
+                mergeComponents(allComps, seen, vcpkgComps, "VCPKG");
+            }
+            report.accept(List.of(vcpkg));
+        }
+
+        // ── C/C++: git submodules (.gitmodules + git ls-tree pinned SHA) ───────
+        for (Path gitmodules : indexByNames(index, ".gitmodules")) {
+            List subComps = parseGitSubmodules(gitmodules.getParent(), repoName);
+            if (subComps != null && !subComps.isEmpty()) {
+                if (!ecosystems.contains("SUBMODULE")) ecosystems.add("SUBMODULE");
+                mergeComponents(allComps, seen, subComps, "SUBMODULE");
+            }
+            report.accept(List.of(gitmodules));
+        }
+
+        // ── C/C++: vendored dependencies in CMakeLists.txt ──────────────────────
+        for (Path cmake : indexByNames(index, "CMakeLists.txt")) {
+            List vendoredComps = parseCMakeLists(cmake.getParent(), repoName);
+            if (vendoredComps != null && !vendoredComps.isEmpty()) {
+                if (!ecosystems.contains("VENDORED")) ecosystems.add("VENDORED");
+                mergeComponents(allComps, seen, vendoredComps, "VENDORED");
+            }
+            report.accept(List.of(cmake));
+        }
+
+        // ── iOS/macOS: Podfile.lock (CocoaPods) ─────────────────────────────────
+        for (Path lock : indexByNames(index, "Podfile.lock")) {
+            List podComps = parsePodfileLock(lock.getParent(), repoName);
+            if (podComps != null && !podComps.isEmpty()) {
+                if (!ecosystems.contains("COCOAPODS")) ecosystems.add("COCOAPODS");
+                mergeComponents(allComps, seen, podComps, "COCOAPODS");
+            }
+            report.accept(List.of(lock));
+        }
+
+        // ── Data science: conda-lock.yml (Conda) ────────────────────────────────
+        for (Path lock : indexByNames(index, "conda-lock.yml")) {
+            List condaComps = parseCondaLock(lock.getParent(), repoName);
+            if (condaComps != null && !condaComps.isEmpty()) {
+                for (ScanPayload.ComponentPayload c : condaComps) {
+                    if (!ecosystems.contains(c.getEcosystem())) ecosystems.add(c.getEcosystem());
+                }
+                mergeComponents(allComps, seen, condaComps, "CONDA");
+            }
+            report.accept(List.of(lock));
+        }
+
+        // ── Data science: pixi.lock (pixi/Conda) ────────────────────────────────
+        for (Path lock : indexByNames(index, "pixi.lock")) {
+            List pixiComps = parsePixiLock(lock.getParent(), repoName);
+            if (pixiComps != null && !pixiComps.isEmpty()) {
+                for (ScanPayload.ComponentPayload c : pixiComps) {
+                    if (!ecosystems.contains(c.getEcosystem())) ecosystems.add(c.getEcosystem());
+                }
+                mergeComponents(allComps, seen, pixiComps, "CONDA");
+            }
+            report.accept(List.of(lock));
+        }
+
+        // ── Container: explicitly version-pinned OS packages in Dockerfile ──────
+        for (Path dockerfile : indexByNames(index, "Dockerfile")) {
+            List osComps = parseDockerfile(dockerfile, repoName);
+            if (osComps != null && !osComps.isEmpty()) {
+                if (!ecosystems.contains("OS_PACKAGE")) ecosystems.add("OS_PACKAGE");
+                mergeComponents(allComps, seen, osComps, "OS_PACKAGE");
+            }
+            report.accept(List.of(dockerfile));
+        }
+
         if (allComps.isEmpty()) {
             log.warn("[DependencyParser] No recognized manifests in '{}' — empty component list.", repoName);
             return new ParseResult("UNKNOWN", List.of());
@@ -324,89 +402,24 @@ public ParseResult parseDependencies(Path cloneDir, String repoName,
 
     /** Returns text content of the first direct child element with the given tag name, or null. */
     private String getDirectChildText(Element parent, String tag) {
-        Element c = getDirectChild(parent, tag);
-        return c != null ? c.getTextContent().trim() : null;
+        return new MavenPomParser(bomVersionResolver).getDirectChildText(parent, tag);
     }
 
     /** Returns the first direct child element with the given tag name, or null. */
     private Element getDirectChild(Element parent, String tag) {
-        NodeList nl = parent.getChildNodes();
-        for (int i = 0; i < nl.getLength(); i++) {
-            if (nl.item(i) instanceof Element e && tag.equals(e.getTagName())) return e;
-        }
-        return null;
+        return new MavenPomParser(bomVersionResolver).getDirectChild(parent, tag);
     }
 
     /** Resolves ${prop} placeholders against the given property map. Returns unchanged if unresolved. */
     private String resolveProp(String raw, Map props) {
-        if (raw == null || !raw.contains("${")) return raw;
-        Matcher m = Pattern.compile("\\$\\{([^}]+)}").matcher(raw);
-        StringBuilder sb = new StringBuilder();
-        while (m.find()) {
-            String key = m.group(1);
-            String val = props.get(key);
-            m.appendReplacement(sb, Matcher.quoteReplacement(val != null ? val : m.group(0)));
-        }
-        m.appendTail(sb);
-        return sb.toString();
+        return new MavenPomParser(bomVersionResolver).resolveProp(raw, props);
     }
 
     // ── Multi-manifest helpers ─────────────────────────────────────────────
 
     /** Parses a single {@code pom.xml}'s direct dependencies, tagging non-runtime scope (test/provided/system). */
     private List parseSingleMavenPom(Path pomFile, Path projectDir, String repoName) {
-        List comps = new ArrayList<>();
-        try {
-            DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
-            dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
-            dbf.setNamespaceAware(false);
-            Document doc = dbf.newDocumentBuilder().parse(pomFile.toFile());
-            doc.getDocumentElement().normalize();
-            Element project = doc.getDocumentElement();
-            Map props = new HashMap<>();
-            String projectVersion = getDirectChildText(project, "version");
-            Element parent = getDirectChild(project, "parent");
-            if (parent != null) {
-                String parentVersion = getDirectChildText(parent, "version");
-                if (projectVersion == null) projectVersion = parentVersion;
-                String parentGroup = getDirectChildText(parent, "groupId");
-                if (parentGroup != null) props.put("project.parent.groupId", parentGroup);
-                if (parentVersion != null) props.put("project.parent.version", parentVersion);
-            }
-            if (projectVersion != null) {
-                props.put("project.version", projectVersion);
-                props.put("version", projectVersion);
-                props.put("pom.version", projectVersion);
-            }
-            Element properties = getDirectChild(project, "properties");
-            if (properties != null) {
-                NodeList children = properties.getChildNodes();
-                for (int i = 0; i < children.getLength(); i++) {
-                    if (children.item(i) instanceof Element pe) {
-                        props.put(pe.getTagName(), pe.getTextContent().trim());
-                    }
-                }
-            }
-            Element depsRoot = getDirectChild(project, "dependencies");
-            if (depsRoot == null) return comps;
-            NodeList deps = depsRoot.getChildNodes();
-            for (int i = 0; i < deps.getLength(); i++) {
-                if (!(deps.item(i) instanceof Element dep) || !"dependency".equals(dep.getTagName())) continue;
-                String groupId    = resolveProp(getDirectChildText(dep, "groupId"), props);
-                String artifactId = resolveProp(getDirectChildText(dep, "artifactId"), props);
-                String version    = resolveProp(getDirectChildText(dep, "version"), props);
-                String scope      = getDirectChildText(dep, "scope");
-                if (groupId == null || artifactId == null) continue;
-                // Non-runtime scopes are tagged (not dropped) so the UI can badge and default-filter them.
-                comps.add(buildComponent(groupId + ":" + artifactId, version, "MAVEN")
-                        .withScope(normalizeMavenScope(scope)));
-            }
-            log.debug("[DependencyParser][Maven] Parsed {} deps from {}", comps.size(), pomFile);
-            comps = bomVersionResolver.enrichComponentVersions(projectDir, comps);
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Maven] Failed to parse {}: {}", pomFile, e.getMessage());
-        }
-        return comps;
+        return new MavenPomParser(bomVersionResolver).parseSingleMavenPom(pomFile, projectDir, repoName);
     }
 
     /**
@@ -467,7 +480,7 @@ private List runMvnDependencyList(Path dir, String
     }
 
     /**
-     * Single-walk manifest index over the clone tree (A3). Built once per
+     * Single-walk manifest index over the clone tree. Built once per
      * {@link #parseDependencies} call; all per-ecosystem manifest lookups read
      * from it instead of re-walking the tree.
      *
@@ -475,9 +488,7 @@ private List runMvnDependencyList(Path dir, String
      * @param byFileName basename → paths (e.g. "pom.xml"), each list sorted by path string
      * @param bySuffix   suffix → paths (e.g. ".csproj"), each list sorted by path string
      */
-    private record ManifestIndex(Path root,
-                                 Map> byFileName,
-                                 Map> bySuffix) {}
+
 
     /**
      * Walks the tree under {@code root} exactly once and indexes every file whose
@@ -487,90 +498,22 @@ private record ManifestIndex(Path root,
      * iteration order is deterministic.
      */
     private ManifestIndex buildIndex(Path root) {
-        Map> byFileName = new HashMap<>();
-        Map> bySuffix = new HashMap<>();
-        final Path rootReal;
-        try {
-            rootReal = new CloneRootPathGuard(root).root();
-        } catch (IOException e) {
-            log.warn("[DependencyParser] buildIndex: invalid clone root '{}': {}", root, e.getMessage());
-            return new ManifestIndex(root, byFileName, bySuffix);
-        }
-        try {
-            Files.walkFileTree(rootReal, new SimpleFileVisitor<>() {
-                @Override
-                public FileVisitResult preVisitDirectory(@NonNull Path dir, @NonNull BasicFileAttributes attrs) {
-                    if (!dir.equals(rootReal)) {
-                        Path rel = rootReal.relativize(dir);
-                        for (int i = 0; i < rel.getNameCount(); i++) {
-                            if (MANIFEST_SKIP_DIRS.contains(rel.getName(i).toString())) {
-                                return FileVisitResult.SKIP_SUBTREE;
-                            }
-                        }
-                    }
-                    return FileVisitResult.CONTINUE;
-                }
-
-                @Override
-                public FileVisitResult visitFile(@NonNull Path file, @NonNull BasicFileAttributes attrs) {
-                    try {
-                        Path fileReal = file.toRealPath(LinkOption.NOFOLLOW_LINKS);
-                        if (!fileReal.startsWith(rootReal)) {
-                            return FileVisitResult.CONTINUE;
-                        }
-                        Path rel = rootReal.relativize(fileReal);
-                        for (int i = 0; i < rel.getNameCount() - 1; i++) {
-                            if (MANIFEST_SKIP_DIRS.contains(rel.getName(i).toString())) {
-                                return FileVisitResult.CONTINUE;
-                            }
-                        }
-                        String name = fileReal.getFileName().toString();
-                        if (ManifestCollectRules.EXACT_FILE_NAMES.contains(name)) {
-                            byFileName.computeIfAbsent(name, k -> new ArrayList<>()).add(fileReal);
-                        }
-                        for (String suffix : ManifestCollectRules.FILE_SUFFIXES) {
-                            if (name.endsWith(suffix)) {
-                                bySuffix.computeIfAbsent(suffix, k -> new ArrayList<>()).add(fileReal);
-                            }
-                        }
-                    } catch (IOException e) {
-                        log.debug("[DependencyParser] skip file '{}': {}", file, e.getMessage());
-                    }
-                    return FileVisitResult.CONTINUE;
-                }
-            });
-        } catch (IOException e) {
-            log.warn("[DependencyParser] buildIndex error under '{}': {}", root, e.getMessage());
-        }
-        Comparator byPath = Comparator.comparing(Path::toString);
-        byFileName.values().forEach(paths -> paths.sort(byPath));
-        bySuffix.values().forEach(paths -> paths.sort(byPath));
-        return new ManifestIndex(rootReal, byFileName, bySuffix);
+        return new ManifestDiscovery().buildIndex(root);
     }
 
     /** Returns indexed paths for the given exact basenames, merged and sorted by path string. */
     private List indexByNames(ManifestIndex index, String... fileNames) {
-        List result = new ArrayList<>();
-        for (String name : fileNames) {
-            result.addAll(index.byFileName().getOrDefault(name, List.of()));
-        }
-        result.sort(Comparator.comparing(Path::toString));
-        return result;
+        return new ManifestDiscovery().indexByNames(index, fileNames);
     }
 
     /** Returns indexed paths whose basename ends with {@code suffix} (already path-sorted). */
     private List indexBySuffix(ManifestIndex index, String suffix) {
-        return index.bySuffix().getOrDefault(suffix, List.of());
+        return new ManifestDiscovery().indexBySuffix(index, suffix);
     }
 
     /** Mirrors the legacy {@code Files.walk(dir, 8)} depth limit on top of the shared index. */
     private boolean hasCsprojFiles(ManifestIndex index) {
-        for (Path p : indexBySuffix(index, ".csproj")) {
-            if (index.root().relativize(p).getNameCount() <= 8) {
-                return true;
-            }
-        }
-        return false;
+        return new ManifestDiscovery().hasCsprojFiles(index);
     }
 
     /** Merges {@code src} into {@code target}, deduplicating on name+version+ecosystem. */
@@ -593,56 +536,7 @@ private void mergeComponents(List target,
      * Maven ecosystem components (Gradle uses Maven coordinates).
      */
     private List parseVersionCatalogs(Path dir, String repoName, ManifestIndex index) {
-        List comps = new ArrayList<>();
-        List catalogs = new ArrayList<>();
-        // Original logic used Files.walk(dir, 3); keep that depth limit on top of the shared index.
-        for (Path p : indexBySuffix(index, ".versions.toml")) {
-            if (index.root().relativize(p).getNameCount() <= 3) {
-                catalogs.add(p);
-            }
-        }
-        if (catalogs.isEmpty()) { log.debug("[DependencyParser][Gradle] No *.versions.toml in '{}'", repoName); return comps; }
-        for (Path catalog : catalogs) {
-            try {
-                List lines = Files.readAllLines(catalog, StandardCharsets.UTF_8);
-                Map versions = new LinkedHashMap<>();
-                boolean inVersions = false, inLibraries = false;
-                for (String rawLine : lines) {
-                    String line = rawLine.trim();
-                    if (line.isEmpty() || line.startsWith("#")) continue;
-                    if (line.equals("[versions]"))  { inVersions = true;  inLibraries = false; continue; }
-                    if (line.equals("[libraries]")) { inLibraries = true; inVersions = false;  continue; }
-                    if (line.startsWith("["))       { inVersions = false; inLibraries = false; continue; }
-                    if (inVersions) {
-                        Matcher vm = Pattern.compile("^([\\w.\\-]+)\\s*=\\s*[\"']([^\"']+)[\"']").matcher(line);
-                        if (vm.find()) versions.put(vm.group(1), vm.group(2));
-                    } else if (inLibraries) {
-                        // Short form: alias = "group:artifact:version"
-                        Matcher shortM = Pattern.compile(
-                                "^[\\w.\\-]+\\s*=\\s*[\"']([\\w.\\-]+:[\\w.\\-]+):([\\w.+\\-]+)[\"']").matcher(line);
-                        if (shortM.find()) { comps.add(buildComponent(shortM.group(1), shortM.group(2), "MAVEN")); continue; }
-                        // Table form: alias = { module = "g:a", version.ref = "key" | version = "x" }
-                        Matcher tableM = Pattern.compile("^[\\w.\\-]+\\s*=\\s*\\{(.+)\\}").matcher(line);
-                        if (tableM.find()) {
-                            String body = tableM.group(1);
-                            Matcher modM = Pattern.compile("module\\s*=\\s*[\"']([\\w.\\-]+:[\\w.\\-]+)[\"']").matcher(body);
-                            if (modM.find()) {
-                                String module = modM.group(1); String version = null;
-                                Matcher vRefM = Pattern.compile("version\\.ref\\s*=\\s*[\"']([\\w.\\-]+)[\"']").matcher(body);
-                                Matcher vM    = Pattern.compile("(? runNpmPackageLockOnly(Path dir, Strin
 
     /** Parse package-lock.json — supports lockfileVersion 1 (npm 5/6), 2 and 3 (npm 7+). */
     private List parseNpmLock(Path dir, String repoName) {
-        try {
-            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("package-lock.json").toFile());
-            List comps = new ArrayList<>();
-            Set seen = new LinkedHashSet<>();
-
-            if (root.has("packages")) {
-                // lockfileVersion 2/3 (npm 7+): "packages" → { "node_modules/x": { version, ... } }
-                root.path("packages").properties().forEach(e -> {
-                    String pkgPath = e.getKey();
-                    if (pkgPath.isEmpty()) return; // skip root entry
-                    String name = pkgPath.startsWith("node_modules/")
-                            ? pkgPath.substring("node_modules/".length())
-                            : pkgPath;
-                    String version = e.getValue().path("version").asText(null);
-                    if (name.isBlank() || version == null || version.isBlank()) return;
-                    if (seen.add(name + ":" + version)) {
-                        comps.add(buildComponent(name, version, "NPM"));
-                    }
-                });
-            } else if (root.has("dependencies")) {
-                // lockfileVersion 1 (npm 5/6): flat + nested "dependencies" tree
-                Deque> queue = new ArrayDeque<>(root.path("dependencies").properties());
-                while (!queue.isEmpty()) {
-                    Map.Entry entry = queue.poll();
-                    String name    = entry.getKey();
-                    JsonNode val   = entry.getValue();
-                    String version = val.path("version").asText(null);
-                    if (version != null && !version.isBlank() && seen.add(name + ":" + version)) {
-                        comps.add(buildComponent(name, version, "NPM"));
-                    }
-                    if (val.has("dependencies")) {
-                        queue.addAll(val.path("dependencies").properties());
-                    }
-                }
-            }
-            log.info("[DependencyParser][npm] Parsed {} components from package-lock.json in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][npm] Failed to parse package-lock.json for '{}': {}", repoName, e.getMessage());
-            return null;
-        }
+        return new NpmManifestParser().parseNpmLock(dir, repoName);
     }
 
     /** Fallback: parse package.json declared deps only (no transitive). */
     private ParseResult parseNpmPackageJson(Path dir, String repoName) {
-        List comps = new ArrayList<>();
-        try {
-            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("package.json").toFile());
-            JsonNode deps    = root.path("dependencies");
-            JsonNode devDeps = root.path("devDependencies");
-
-            addNpmDeps(comps, deps, null);
-            addNpmDeps(comps, devDeps, "dev");
-            log.info("[DependencyParser][npm] Parsed {} components from package.json in '{}'", comps.size(), repoName);
-        } catch (Exception e) {
-            log.error("[DependencyParser][npm] Failed to parse package.json: {}", e.getMessage());
-        }
-        return new ParseResult("NPM", comps);
+        return new NpmManifestParser().parseNpmPackageJson(dir, repoName);
     }
 
     private void addNpmDeps(List comps, JsonNode depsNode, String scope) {
-        if (depsNode == null || depsNode.isMissingNode()) return;
-        depsNode.properties().forEach(entry -> {
-            String name    = entry.getKey();
-            String version = entry.getValue().asText().replaceAll("^[~^>=<]+ *", "");
-            comps.add(buildComponent(name, version, "NPM").withScope(scope));
-        });
+        new NpmManifestParser().addNpmDeps(comps, depsNode, scope);
     }
 
     /**
@@ -774,44 +611,7 @@ private void addNpmDeps(List comps, JsonNode depsN
      * multiple resolved versions — we keep all distinct (name, version) pairs.
      */
     private List parseYarnLock(Path dir, String repoName) {
-        try {
-            List lines = Files.readAllLines(dir.resolve("yarn.lock"), StandardCharsets.UTF_8);
-            List comps = new ArrayList<>();
-            Set seen = new LinkedHashSet<>();
-            List pendingNames = new ArrayList<>();
-            for (String raw : lines) {
-                if (raw.isEmpty() || raw.startsWith("#")) continue;
-                // Header: starts at column 0 and ends with ':'
-                if (!Character.isWhitespace(raw.charAt(0)) && raw.endsWith(":")) {
-                    pendingNames.clear();
-                    String header = raw.substring(0, raw.length() - 1);
-                    for (String desc : header.split(",")) {
-                        String d = desc.trim();
-                        if (d.startsWith("\"") && d.endsWith("\"")) d = d.substring(1, d.length() - 1);
-                        // Strip @version: name is everything before the last '@' (but keep leading '@' for scoped)
-                        int at = d.lastIndexOf('@');
-                        if (at <= 0) continue;
-                        pendingNames.add(d.substring(0, at));
-                    }
-                } else if (!pendingNames.isEmpty() && raw.startsWith("  version")) {
-                    Matcher m = Pattern.compile("version[:\\s]+\"?([^\"\\s]+)\"?").matcher(raw);
-                    if (m.find()) {
-                        String version = m.group(1);
-                        for (String name : pendingNames) {
-                            if (seen.add(name + ":" + version)) {
-                                comps.add(buildComponent(name, version, "NPM"));
-                            }
-                        }
-                    }
-                    pendingNames.clear();
-                }
-            }
-            log.info("[DependencyParser][npm] Parsed {} components from yarn.lock in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][npm] Failed to parse yarn.lock for '{}': {}", repoName, e.getMessage());
-            return null;
-        }
+        return new NpmManifestParser().parseYarnLock(dir, repoName);
     }
 
     /**
@@ -819,35 +619,7 @@ private List parseYarnLock(Path dir, String repoNa
      * {@code /name@version} or {@code 'name@version'}) and older v5 ({@code /name/version}).
      */
     private List parsePnpmLock(Path dir, String repoName) {
-        try {
-            List lines = Files.readAllLines(dir.resolve("pnpm-lock.yaml"), StandardCharsets.UTF_8);
-            List comps = new ArrayList<>();
-            Set seen = new LinkedHashSet<>();
-            boolean inSection = false;
-            // Modern pnpm v6+: '@scope/pkg@1.2.3':  or  /@scope/pkg@1.2.3:
-            // Older pnpm v5  : /@scope/pkg/1.2.3:   or  /pkg/1.2.3:
-            Pattern modern = Pattern.compile("^\\s{2}'?/?((?:@[^@/'\\s]+/)?[^@/'\\s]+)@([^()'\\s]+?)(?:\\([^)]+\\))?'?:\\s*$");
-            Pattern legacy = Pattern.compile("^\\s{2}/((?:@[^/]+/)?[^/]+)/([0-9][^/_'\\s]+)(?:_[^:'\\s]*)?:\\s*$");
-            for (String line : lines) {
-                if (line.startsWith("packages:") || line.startsWith("snapshots:")) { inSection = true; continue; }
-                if (inSection && !line.isEmpty() && !Character.isWhitespace(line.charAt(0))) { inSection = false; }
-                if (!inSection) continue;
-                Matcher m = modern.matcher(line);
-                if (!m.matches()) m = legacy.matcher(line);
-                if (m.matches()) {
-                    String name = m.group(1);
-                    String version = m.group(2);
-                    if (seen.add(name + ":" + version)) {
-                        comps.add(buildComponent(name, version, "NPM"));
-                    }
-                }
-            }
-            log.info("[DependencyParser][npm] Parsed {} components from pnpm-lock.yaml in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][npm] Failed to parse pnpm-lock.yaml for '{}': {}", repoName, e.getMessage());
-            return null;
-        }
+        return new NpmManifestParser().parsePnpmLock(dir, repoName);
     }
 
     /**
@@ -1049,235 +821,37 @@ private ParseResult parseGradleStatic(Path dir, String repoName) {
 
     // Python: requirements.txt fallback (lock files are handled in parseDependencies)
     private ParseResult parsePython(Path dir, String repoName) {
-        List comps = parseRequirementsFile(dir.resolve("requirements.txt"), repoName);
-        return new ParseResult("PYPI", comps != null ? comps : List.of());
+        return new PythonManifestParser().parsePython(dir, repoName);
     }
 
     private List parseRequirementsFile(Path reqFile, String repoName) {
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        try {
-            if (!Files.isRegularFile(reqFile)) {
-                return List.of();
-            }
-            for (String rawLine : Files.readAllLines(reqFile, StandardCharsets.UTF_8)) {
-                addPythonRequirementLine(rawLine, seen, comps);
-            }
-            log.info("[DependencyParser][Python] Parsed {} components from {} in '{}'",
-                    comps.size(), reqFile.getFileName(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Python] Failed to parse {}: {}", reqFile, e.getMessage());
-            return null;
-        }
+        return new PythonManifestParser().parseRequirementsFile(reqFile, repoName);
     }
 
     /**
      * Parses {@code [project].dependencies} from {@code pyproject.toml} when no lock file is present.
      */
     private List parsePyprojectToml(Path tomlFile, String repoName) {
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        try {
-            List lines = Files.readAllLines(tomlFile, StandardCharsets.UTF_8);
-            boolean inProject = false;
-            boolean inDepsArray = false;
-            for (String rawLine : lines) {
-                String line = rawLine.trim();
-                if (line.isEmpty() || line.startsWith("#")) {
-                    continue;
-                }
-                if (line.startsWith("[") && line.endsWith("]")) {
-                    inProject = line.equals("[project]");
-                    inDepsArray = false;
-                    continue;
-                }
-                if (!inProject) {
-                    continue;
-                }
-                if (line.startsWith("dependencies") && line.contains("[")) {
-                    inDepsArray = true;
-                    int open = line.indexOf('[');
-                    int close = line.indexOf(']');
-                    if (close > open) {
-                        String inline = line.substring(open + 1, close).trim();
-                        if (!inline.isBlank()) {
-                            for (String part : inline.split(",")) {
-                                addPythonRequirementLine(stripQuotes(part.trim()), seen, comps);
-                            }
-                        }
-                        inDepsArray = !line.endsWith("]");
-                    }
-                    continue;
-                }
-                if (inDepsArray) {
-                    if (line.equals("]")) {
-                        inDepsArray = false;
-                        continue;
-                    }
-                    String dep = line;
-                    if (dep.endsWith(",")) {
-                        dep = dep.substring(0, dep.length() - 1).trim();
-                    }
-                    if (dep.equals("]")) {
-                        inDepsArray = false;
-                        continue;
-                    }
-                    addPythonRequirementLine(stripQuotes(dep), seen, comps);
-                }
-            }
-            log.info("[DependencyParser][Python] Parsed {} components from {} in '{}'",
-                    comps.size(), tomlFile.getFileName(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Python] Failed to parse pyproject.toml {}: {}", tomlFile, e.getMessage());
-            return null;
-        }
+        return new PythonManifestParser().parsePyprojectToml(tomlFile, repoName);
     }
 
     private void addPythonRequirementLine(
             String rawLine, Set seen, List comps) {
-        String line = rawLine.trim();
-        if (line.isEmpty() || line.startsWith("#") || line.startsWith("-")) {
-            return;
-        }
-        int hash = line.indexOf('#');
-        if (hash >= 0) {
-            line = line.substring(0, hash).trim();
-        }
-        int semi = line.indexOf(';');
-        if (semi >= 0) {
-            line = line.substring(0, semi).trim();
-        }
-        if (line.isEmpty()) {
-            return;
-        }
-        Pattern fullForm = Pattern.compile(
-                "^([A-Za-z0-9][\\w.\\-]*?)(?:\\[[^]]*])?\\s*(===|==|>=|<=|~=|!=|<|>)\\s*([0-9][^\\s,;#]*)");
-        Pattern bareName = Pattern.compile("^([A-Za-z0-9][\\w.\\-]*?)(?:\\[[^]]*])?\\s*$");
-        String name = null;
-        String version = null;
-        Matcher m = fullForm.matcher(line);
-        if (m.find()) {
-            name = m.group(1);
-            version = m.group(3);
-        } else {
-            Matcher b = bareName.matcher(line);
-            if (b.matches()) {
-                name = b.group(1);
-            }
-        }
-        if (name == null || name.isBlank()) {
-            return;
-        }
-        if (seen.add(name + ":" + (version != null ? version : ""))) {
-            comps.add(buildComponent(name, version, "PYPI"));
-        }
+        new PythonManifestParser().addPythonRequirementLine(rawLine, seen, comps);
     }
 
     private static String stripQuotes(String s) {
-        if ((s.startsWith("\"") && s.endsWith("\"")) || (s.startsWith("'") && s.endsWith("'"))) {
-            return s.substring(1, s.length() - 1);
-        }
-        return s;
+        return PythonManifestParser.stripQuotes(s);
     }
 
     /** Static Cargo.toml fallback when Cargo.lock is absent. */
     private List parseCargoToml(Path dir, String repoName) {
-        // Static Cargo.toml — handles inline string form and table form:
-        //   foo = "1.0"
-        //   foo = { version = "1.0", features = [...] }
-        //   foo = { git = "..." }   (no version → skip)
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        try {
-            List lines = Files.readAllLines(dir.resolve("Cargo.toml"), StandardCharsets.UTF_8);
-            boolean inDeps = false;
-            // Inline-string form: foo = "1.2.3-rc1+build"
-            Pattern inlineP = Pattern.compile("^([\\w\\-]+)\\s*=\\s*[\"']([\\w.+\\-]+)[\"']\\s*$");
-            // Table form: foo = { version = "1.2.3", ... }
-            Pattern tableP  = Pattern.compile("^([\\w\\-]+)\\s*=\\s*\\{[^}]*\\bversion\\s*=\\s*[\"']([\\w.+\\-]+)[\"']");
-            // Sub-table header: [dependencies.foo]
-            Pattern subHeaderP = Pattern.compile("^\\[(?:dev-|build-)?dependencies\\.([\\w\\-]+)]");
-            String pendingSubName = null;
-            Pattern verLineP = Pattern.compile("^version\\s*=\\s*[\"']([\\w.+\\-]+)[\"']");
-            for (String rawLine : lines) {
-                String trimmed = rawLine.trim();
-                if (trimmed.isEmpty() || trimmed.startsWith("#")) continue;
-                // Section headers
-                if (trimmed.startsWith("[")) {
-                    if (trimmed.equals("[dependencies]") || trimmed.equals("[dev-dependencies]")
-                            || trimmed.equals("[build-dependencies]")) {
-                        inDeps = true;
-                        pendingSubName = null;
-                        continue;
-                    }
-                    Matcher sh = subHeaderP.matcher(trimmed);
-                    if (sh.find()) {
-                        pendingSubName = sh.group(1);
-                        inDeps = false;
-                        continue;
-                    }
-                    inDeps = false;
-                    pendingSubName = null;
-                    continue;
-                }
-                if (inDeps) {
-                    Matcher t = tableP.matcher(trimmed);
-                    if (t.find()) {
-                        if (seen.add(t.group(1))) comps.add(buildComponent(t.group(1), t.group(2), "CARGO"));
-                        continue;
-                    }
-                    Matcher i = inlineP.matcher(trimmed);
-                    if (i.find()) {
-                        if (seen.add(i.group(1))) comps.add(buildComponent(i.group(1), i.group(2), "CARGO"));
-                    }
-                } else if (pendingSubName != null) {
-                    Matcher v = verLineP.matcher(trimmed);
-                    if (v.find()) {
-                        if (seen.add(pendingSubName)) comps.add(buildComponent(pendingSubName, v.group(1), "CARGO"));
-                        pendingSubName = null;
-                    }
-                }
-            }
-            log.info("[DependencyParser][Cargo] Parsed {} components from Cargo.toml in '{}'", comps.size(), repoName);
-        } catch (Exception e) {
-            log.error("[DependencyParser][Cargo] Failed to parse Cargo.toml: {}", e.getMessage());
-        }
-        return comps;
+        return new CargoManifestParser().parseCargoToml(dir, repoName);
     }
 
     /** go.mod fallback when go.sum is absent. */
     private List parseGoModDeclared(Path dir, String repoName) {
-        // go.mod fallback — we trim each line first, so both block and single patterns
-        // match against the trimmed text.
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        try {
-            List lines = Files.readAllLines(dir.resolve("go.mod"), StandardCharsets.UTF_8);
-            boolean inRequire = false;
-            // "require module v1.2.3" (single) and inside a require( … ) block "module v1.2.3"
-            Pattern single = Pattern.compile("^require\\s+(\\S+)\\s+(v\\S+)");
-            Pattern entry  = Pattern.compile("^(\\S+)\\s+(v\\S+)");
-            for (String rawLine : lines) {
-                // Strip end-of-line comments (e.g. "// indirect") before parsing.
-                String t = rawLine;
-                int idx = t.indexOf("//");
-                if (idx >= 0) t = t.substring(0, idx);
-                t = t.trim();
-                if (t.isEmpty()) continue;
-                if (t.startsWith("require (")) { inRequire = true; continue; }
-                if (inRequire && t.equals(")"))                         { inRequire = false; continue; }
-                Matcher m = inRequire ? entry.matcher(t) : single.matcher(t);
-                if (m.find() && seen.add(m.group(1))) {
-                    comps.add(buildComponent(m.group(1), m.group(2), "GO"));
-                }
-            }
-            log.info("[DependencyParser][Go] Parsed {} components from go.mod in '{}'", comps.size(), repoName);
-        } catch (Exception e) {
-            log.error("[DependencyParser][Go] Failed to parse go.mod: {}", e.getMessage());
-        }
-        return comps;
+        return new GoManifestParser().parseGoModDeclared(dir, repoName);
     }
 
     // ── Lock-file & new-ecosystem parsers ──────────────────────────────────
@@ -1287,26 +861,7 @@ private List parseGoModDeclared(Path dir, String r
      * (poetry.lock, uv.lock, Cargo.lock).
      */
     private List parseTomlPackageLock(Path lockFile, String ecosystem, String repoName) {
-        try {
-            String content = Files.readString(lockFile, StandardCharsets.UTF_8);
-            String[] blocks = content.split("\\[\\[package\\]\\]");
-            List comps = new ArrayList<>();
-            Pattern nameP = Pattern.compile("\\bname\\s*=\\s*\"([^\"]+)\"");
-            Pattern verP  = Pattern.compile("\\bversion\\s*=\\s*\"([^\"]+)\"");
-            for (int i = 1; i < blocks.length; i++) {
-                Matcher nm = nameP.matcher(blocks[i]);
-                Matcher vm = verP.matcher(blocks[i]);
-                if (nm.find() && vm.find()) {
-                    comps.add(buildComponent(nm.group(1), vm.group(1), ecosystem));
-                }
-            }
-            log.info("[DependencyParser][{}] Parsed {} components from {} in '{}'",
-                    ecosystem, comps.size(), lockFile.getFileName(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser] Failed to parse {}: {}", lockFile.getFileName(), e.getMessage());
-            return null;
-        }
+        return new CargoManifestParser().parseTomlPackageLock(lockFile, ecosystem, repoName);
     }
 
     /**
@@ -1314,28 +869,7 @@ private List parseTomlPackageLock(Path lockFile, S
      * deduplicating across sections (a package in both lists is kept only once).
      */
     private List parsePipfileLock(Path dir, String repoName) {
-        try {
-            JsonNode root = new ObjectMapper().readTree(dir.resolve("Pipfile.lock").toFile());
-            List comps = new ArrayList<>();
-            Set seen = new LinkedHashSet<>();
-            for (String section : new String[]{"default", "develop"}) {
-                JsonNode deps = root.path(section);
-                if (deps.isMissingNode()) continue;
-                String scope = "develop".equals(section) ? "dev" : null;
-                deps.properties().forEach(e -> {
-                    String name = e.getKey();
-                    String ver  = e.getValue().path("version").asText("").replaceAll("^==", "");
-                    if (!name.isBlank() && !ver.isBlank() && seen.add(name + ":" + ver)) {
-                        comps.add(buildComponent(name, ver, "PYPI").withScope(scope));
-                    }
-                });
-            }
-            log.info("[DependencyParser][Python] Parsed {} components from Pipfile.lock in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Python] Failed to parse Pipfile.lock: {}", e.getMessage());
-            return null;
-        }
+        return new PythonManifestParser().parsePipfileLock(dir, repoName);
     }
 
     /**
@@ -1343,47 +877,11 @@ private List parsePipfileLock(Path dir, String rep
      * De-duplicates by module path to get one entry per dependency.
      */
     private List parseGoSum(Path dir, String repoName) {
-        try {
-            Set seen = new LinkedHashSet<>();
-            List comps = new ArrayList<>();
-            Pattern p = Pattern.compile("^(\\S+)\\s+(v[^\\s/]+)(?:/go\\.mod)?\\s");
-            for (String line : Files.readAllLines(dir.resolve("go.sum"), StandardCharsets.UTF_8)) {
-                Matcher m = p.matcher(line);
-                if (m.find() && seen.add(m.group(1))) {
-                    comps.add(buildComponent(m.group(1), m.group(2), "GO"));
-                }
-            }
-            log.info("[DependencyParser][Go] Parsed {} components from go.sum in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Go] Failed to parse go.sum: {}", e.getMessage());
-            return null;
-        }
+        return new GoManifestParser().parseGoSum(dir, repoName);
     }
 
     private List parseNuGetLockFile(Path dir, String repoName) {
-        try {
-            JsonNode root = new ObjectMapper().readTree(dir.resolve("packages.lock.json").toFile());
-            Set seen = new LinkedHashSet<>();
-            List comps = new ArrayList<>();
-            JsonNode deps = root.path("dependencies");
-            if (!deps.isMissingNode()) {
-                deps.properties().forEach(fw ->
-                    fw.getValue().properties().forEach(pkg -> {
-                        String name = pkg.getKey();
-                        String ver  = pkg.getValue().path("resolved").asText(null);
-                        if (name != null && ver != null && !ver.isBlank() && seen.add(name)) {
-                            comps.add(buildComponent(name, ver, "NUGET"));
-                        }
-                    })
-                );
-            }
-            log.info("[DependencyParser][NuGet] Parsed {} components from packages.lock.json in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][NuGet] Failed to parse packages.lock.json: {}", e.getMessage());
-            return null;
-        }
+        return new NugetManifestParser().parseNuGetLockFile(dir, repoName);
     }
 
     /**
@@ -1455,168 +953,44 @@ private Path findDotNetListTarget(ManifestIndex index) {
     }
 
     private List parseDotNetListJson(String json, String repoName) {
-        try {
-            JsonNode root = OBJECT_MAPPER.readTree(json);
-            Set seen = new LinkedHashSet<>();
-            List comps = new ArrayList<>();
-            for (JsonNode project : root.path("projects")) {
-                for (JsonNode fw : project.path("frameworks")) {
-                    for (String section : new String[]{"topLevelPackages", "transitivePackages"}) {
-                        for (JsonNode pkg : fw.path(section)) {
-                            String id = pkg.path("id").asText(null);
-                            String ver = pkg.path("resolvedVersion").asText(null);
-                            if (id == null || id.isBlank() || ver == null || ver.isBlank()) {
-                                continue;
-                            }
-                            if (seen.add(id + ":" + ver)) {
-                                comps.add(buildComponent(id, ver, "NUGET"));
-                            }
-                        }
-                    }
-                }
-            }
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][NuGet] Failed to parse dotnet list JSON for '{}': {}", repoName, e.getMessage());
-            return List.of();
-        }
+        return new NugetManifestParser().parseDotNetListJson(json, repoName);
     }
 
     /** Standalone entry point (no shared index): builds a one-off index for {@code dir}. */
     private ParseResult parseNuGetStatic(Path dir, String repoName) {
-        return parseNuGetStatic(dir, repoName, buildIndex(dir));
+        return new NugetManifestParser().parseNuGetStatic(dir, repoName);
     }
 
     private ParseResult parseNuGetStatic(Path dir, String repoName, ManifestIndex index) {
-        Set seen = new LinkedHashSet<>();
-        List comps = new ArrayList<>();
-        Map propsVersions = buildNuGetPropsVersionIndex(index);
-        try {
-            DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
-            dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
-            dbf.setNamespaceAware(false);
-            for (Path props : indexByNames(index, "Directory.Packages.props")) {
-                mergeDirectoryPackageVersions(dbf, props, propsVersions);
-            }
-            List targets = new ArrayList<>();
-            targets.addAll(indexBySuffix(index, ".csproj"));
-            targets.addAll(indexByNames(index, "packages.config"));
-            for (Path f : targets) {
-                try {
-                    Document doc = dbf.newDocumentBuilder().parse(f.toFile());
-                    if (f.getFileName().toString().equals("packages.config")) {
-                        mergeNuGetPackageConfig(doc, seen, comps);
-                    } else {
-                        mergeNuGetCsproj(doc, seen, comps, propsVersions);
-                    }
-                } catch (Exception ignored) {}
-            }
-            log.info("[DependencyParser][NuGet] Parsed {} components from {} manifest file(s) in '{}'",
-                    comps.size(), targets.size(), repoName);
-        } catch (Exception e) {
-            log.error("[DependencyParser][NuGet] Failed to parse .csproj/packages.config: {}", e.getMessage());
-        }
-        return new ParseResult("NUGET", comps);
+        return new NugetManifestParser().parseNuGetStatic(dir, repoName, index);
     }
 
     private Map buildNuGetPropsVersionIndex(ManifestIndex index) {
-        Map propsIndex = new LinkedHashMap<>();
-        Pattern propVersion = Pattern.compile("<([\\w.]+)>\\s*([\\d][^<]*)\\s*");
-        for (Path props : indexBySuffix(index, ".props")) {
-            try {
-                String content = Files.readString(props, StandardCharsets.UTF_8);
-                Matcher m = propVersion.matcher(content);
-                while (m.find()) {
-                    String key = m.group(1);
-                    String val = m.group(2).trim();
-                    if (!val.isBlank() && !val.contains("$(")) {
-                        propsIndex.putIfAbsent(key, val);
-                    }
-                }
-            } catch (Exception e) {
-                log.debug("[DependencyParser][NuGet] props scan failed for {}: {}", props, e.getMessage());
-            }
-        }
-        return propsIndex;
+        return new NugetManifestParser().buildNuGetPropsVersionIndex(index);
     }
 
     private void mergeDirectoryPackageVersions(
             DocumentBuilderFactory dbf, Path propsFile, Map propsVersions) {
-        try {
-            Document doc = dbf.newDocumentBuilder().parse(propsFile.toFile());
-            NodeList versions = doc.getElementsByTagName("PackageVersion");
-            for (int i = 0; i < versions.getLength(); i++) {
-                Element el = (Element) versions.item(i);
-                String id = el.getAttribute("Include");
-                String ver = el.getAttribute("Version");
-                if (!id.isBlank() && !ver.isBlank()) {
-                    propsVersions.put(id, resolveNuGetProperty(ver, propsVersions));
-                }
-            }
-        } catch (Exception e) {
-            log.debug("[DependencyParser][NuGet] Directory.Packages.props parse failed: {}", e.getMessage());
-        }
+        new NugetManifestParser().mergeDirectoryPackageVersions(dbf, propsFile, propsVersions);
     }
 
     private void mergeNuGetCsproj(
             Document doc, Set seen, List comps,
             Map propsVersions) {
-        NodeList refs = doc.getElementsByTagName("PackageReference");
-        for (int i = 0; i < refs.getLength(); i++) {
-            Element ref = (Element) refs.item(i);
-            if ("Remove".equalsIgnoreCase(ref.getAttribute("Update"))) {
-                continue;
-            }
-            String name = firstNonBlank(ref.getAttribute("Include"), ref.getAttribute("Update"));
-            if (name.isBlank() || name.contains("@(")) {
-                continue;
-            }
-            String ver = firstNonBlank(
-                    ref.getAttribute("Version"),
-                    getDirectChildText(ref, "Version"));
-            ver = resolveNuGetProperty(ver, propsVersions);
-            if (propsVersions.containsKey(name) && (ver == null || ver.isBlank() || ver.startsWith("$("))) {
-                ver = propsVersions.get(name);
-            }
-            String key = name + ":" + (ver != null ? ver : "");
-            if (seen.add(key)) {
-                comps.add(buildComponent(name, ver == null || ver.isBlank() ? null : ver, "NUGET"));
-            }
-        }
+        new NugetManifestParser().mergeNuGetCsproj(doc, seen, comps, propsVersions);
     }
 
     private void mergeNuGetPackageConfig(
             Document doc, Set seen, List comps) {
-        NodeList refs = doc.getElementsByTagName("package");
-        for (int i = 0; i < refs.getLength(); i++) {
-            Element ref = (Element) refs.item(i);
-            String name = firstNonBlank(ref.getAttribute("id"), ref.getAttribute("Include"));
-            String ver = firstNonBlank(ref.getAttribute("version"), ref.getAttribute("Version"));
-            if (!name.isBlank() && seen.add(name + ":" + ver)) {
-                comps.add(buildComponent(name, ver.isBlank() ? null : ver, "NUGET"));
-            }
-        }
+        new NugetManifestParser().mergeNuGetPackageConfig(doc, seen, comps);
     }
 
     private String resolveNuGetProperty(String raw, Map propsVersions) {
-        if (raw == null || raw.isBlank()) {
-            return raw;
-        }
-        Matcher m = Pattern.compile("\\$\\(([^)]+)\\)").matcher(raw.trim());
-        if (!m.matches()) {
-            return raw.trim();
-        }
-        String resolved = propsVersions.get(m.group(1));
-        return resolved != null ? resolved : raw.trim();
+        return new NugetManifestParser().resolveNuGetProperty(raw, propsVersions);
     }
 
     private static String firstNonBlank(String... values) {
-        for (String v : values) {
-            if (v != null && !v.isBlank()) {
-                return v.trim();
-            }
-        }
-        return "";
+        return NugetManifestParser.firstNonBlank(values);
     }
 
     private boolean isCommandOnPath(String command) {
@@ -1633,41 +1007,7 @@ private boolean isCommandOnPath(String command) {
     }
 
     private List parseGemfileLock(Path dir, String repoName) {
-        try {
-            Set seen = new LinkedHashSet<>();
-            List comps = new ArrayList<>();
-            boolean inSpecs = false;
-            Pattern specLine = Pattern.compile("^ {4}([A-Za-z0-9_.\\-]+)\\s+\\(([^)]+)\\)");
-            for (String line : Files.readAllLines(dir.resolve("Gemfile.lock"), StandardCharsets.UTF_8)) {
-                if (line.equals("  specs:")) { inSpecs = true; continue; }
-                if (inSpecs && !line.startsWith(" ") && !line.isEmpty()) { inSpecs = false; continue; }
-                if (!inSpecs) {
-                    continue;
-                }
-                Matcher m = specLine.matcher(line);
-                if (!m.find()) {
-                    continue;
-                }
-                String name = m.group(1);
-                String version = m.group(2).trim();
-                if (version.startsWith(">=") || version.startsWith(">")
-                        || version.startsWith("<") || version.startsWith("~>")
-                        || version.startsWith("!=") || version.startsWith("=")) {
-                    continue;
-                }
-                if (!version.matches("[0-9].*")) {
-                    continue;
-                }
-                if (seen.add(name + ":" + version)) {
-                    comps.add(buildComponent(name, version, "RUBYGEMS"));
-                }
-            }
-            log.info("[DependencyParser][Ruby] Parsed {} components from Gemfile.lock in '{}'", comps.size(), repoName);
-            return comps;
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Ruby] Failed to parse Gemfile.lock: {}", e.getMessage());
-            return null;
-        }
+        return new RubyLockParser().parseGemfileLock(dir, repoName);
     }
 
     /**
@@ -1676,48 +1016,29 @@ private List parseGemfileLock(Path dir, String rep
      * {@code vendor/package} form so the purl becomes {@code pkg:composer//@}.
      */
     private List parseComposerLock(Path dir, String repoName) {
-        try {
-            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("composer.lock").toFile());
-            return parseComposerLockJson(root, repoName);
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Composer] Failed to parse composer.lock for '{}': {}", repoName, e.getMessage());
-            return null;
-        }
+        return new ComposerLockParser().parseComposerLock(dir, repoName);
     }
 
     private List parseComposerLockJson(JsonNode root, String repoName) {
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        addComposerPackages(comps, seen, root.path("packages"), null);
-        addComposerPackages(comps, seen, root.path("packages-dev"), "dev");
-        log.info("[DependencyParser][Composer] Parsed {} components from composer.lock in '{}'", comps.size(), repoName);
-        return comps;
+        return new ComposerLockParser().parseComposerLockJson(root, repoName);
     }
 
     private void addComposerPackages(List comps, Set seen,
                                      JsonNode packages, String scope) {
-        if (packages == null || !packages.isArray()) {
-            return;
-        }
-        for (JsonNode pkg : packages) {
-            String name    = pkg.path("name").asText(null);
-            String version = normalizeComposerVersion(pkg.path("version").asText(null));
-            if (name == null || name.isBlank() || version == null || version.isBlank()) {
-                continue;
-            }
-            if (seen.add(name + ":" + version)) {
-                comps.add(buildComponent(name, version, "COMPOSER").withScope(scope));
-            }
-        }
+        new ComposerLockParser().addComposerPackages(comps, seen, packages, scope);
+    }
+
+    /**
+     * Reads a composer.lock package's {@code license} array (SPDX ids). deps.dev does not support
+     * the COMPOSER system, so this manifest field is the only license source for PHP packages.
+     */
+    private static List extractComposerLicenses(JsonNode pkg) {
+        return ComposerLockParser.extractComposerLicenses(pkg);
     }
 
     /** Strips the optional leading "v" from a composer version (composer normalizes v1.2.3 → 1.2.3). */
     private static String normalizeComposerVersion(String version) {
-        if (version != null && version.length() > 1
-                && version.charAt(0) == 'v' && Character.isDigit(version.charAt(1))) {
-            return version.substring(1);
-        }
-        return version;
+        return ComposerLockParser.normalizeComposerVersion(version);
     }
 
     /**
@@ -1727,102 +1048,264 @@ private static String normalizeComposerVersion(String version) {
      * {@code name} and {@code version} parts are kept (OSV ecosystem "ConanCenter" uses plain names).
      */
     private List parseConanLock(Path dir, String repoName) {
-        try {
-            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("conan.lock").toFile());
-            return parseConanLockJson(root, repoName);
-        } catch (Exception e) {
-            log.warn("[DependencyParser][Conan] Failed to parse conan.lock for '{}': {}", repoName, e.getMessage());
-            return null;
-        }
+        return new ConanLockParser().parseConanLock(dir, repoName);
     }
 
     private List parseConanLockJson(JsonNode root, String repoName) {
-        List comps = new ArrayList<>();
-        Set seen = new LinkedHashSet<>();
-        if (root.has("graph_lock")) {
-            root.path("graph_lock").path("nodes").properties().forEach(e ->
-                    addConanRef(comps, seen, e.getValue().path("ref").asText(null), null));
-        } else {
-            addConanRefs(comps, seen, root.path("requires"), null);
-            addConanRefs(comps, seen, root.path("build_requires"), "dev");
-        }
-        log.info("[DependencyParser][Conan] Parsed {} components from conan.lock in '{}'", comps.size(), repoName);
-        return comps;
+        return new ConanLockParser().parseConanLockJson(root, repoName);
     }
 
     private void addConanRefs(List comps, Set seen,
                               JsonNode refs, String scope) {
-        if (refs == null || !refs.isArray()) {
-            return;
-        }
-        for (JsonNode ref : refs) {
-            addConanRef(comps, seen, ref.asText(null), scope);
-        }
+        new ConanLockParser().addConanRefs(comps, seen, refs, scope);
     }
 
     private void addConanRef(List comps, Set seen,
                              String ref, String scope) {
-        if (ref == null || ref.isBlank()) {
-            return;
-        }
-        String r = ref.trim();
-        int hash = r.indexOf('#');
-        if (hash >= 0) {
-            r = r.substring(0, hash); // strip #revision%timestamp
-        }
-        int at = r.indexOf('@');
-        if (at >= 0) {
-            r = r.substring(0, at); // strip @user/channel
-        }
-        int slash = r.indexOf('/');
-        if (slash <= 0 || slash == r.length() - 1) {
-            return;
-        }
-        String name    = r.substring(0, slash).trim();
-        String version = r.substring(slash + 1).trim();
-        if (name.isBlank() || version.isBlank()) {
-            return;
-        }
-        if (seen.add(name + ":" + version)) {
-            comps.add(buildComponent(name, version, "CONAN").withScope(scope));
-        }
+        new ConanLockParser().addConanRef(comps, seen, ref, scope);
+    }
+
+    /**
+     * Matches a top-level {@code PODS:} entry line in a {@code Podfile.lock}, e.g.
+     * {@code "  - Alamofire (5.6.4)"} or {@code "  - GoogleUtilities/Environment (7.11.0):"}.
+     * Exactly 2 spaces of indentation — 4-space lines are a pod's own sub-dependencies, not
+     * separate locked entries, and are intentionally not matched.
+     */
+
+
+    /**
+     * Parses {@code Podfile.lock}'s {@code PODS:} section. A subspec entry (e.g.
+     * {@code "GoogleUtilities/AppDelegateSwizzler (7.11.0)"}) is folded into its base pod
+     * ({@code GoogleUtilities}) — subspecs aren't separately published, so podspec resolution
+     * only ever needs the base pod name.
+     */
+    private List parsePodfileLock(Path dir, String repoName) {
+        return new CocoaPodsLockParser().parsePodfileLock(dir, repoName);
+    }
+
+    private List parsePodfileLockLines(List lines, String repoName) {
+        return new CocoaPodsLockParser().parsePodfileLockLines(lines, repoName);
+    }
+
+    /**
+     * Parses {@code conda-lock.yml}. Each entry's {@code manager} field says whether it was
+     * installed via conda or pip: {@code pip} entries are already real PyPI names, and
+     * {@code conda} entries are looked up in {@link CondaPypiMappingService} — a hit means the
+     * package is a Python project repackaged for conda (gets real OSV PyPI coverage under the
+     * mapped name); a miss almost always means a native (non-Python) library, tagged
+     * {@code CONDA} and left for the caller's existing "no OSV mapping" guard to render as
+     * {@code UNKNOWN} rather than a false "no vulnerabilities".
+     */
+    private List parseCondaLock(Path dir, String repoName) {
+        return new CondaLockParser(condaPypiMappingService).parseCondaLock(dir, repoName);
+    }
+
+    private List parseCondaLockYaml(Map root, String repoName) {
+        return new CondaLockParser(condaPypiMappingService).parseCondaLockYaml(root, repoName);
+    }
+
+    /** SnakeYAML returns scalars as their inferred Java type (String/Integer/Double/Boolean) — normalize to String. */
+    private static String yamlString(Object value) {
+        return CondaLockParser.yamlString(value);
+    }
+
+    /**
+     * Parses {@code pixi.lock}. Packages are grouped per environment and per platform; each
+     * entry is either a {@code conda:} package URL (name/version derived from the filename,
+     * then run through the same conda→PyPI mapping as conda-lock.yml) or a {@code pypi:}
+     * entry carrying explicit {@code name}/{@code version} fields.
+     */
+    private List parsePixiLock(Path dir, String repoName) {
+        return new CondaLockParser(condaPypiMappingService).parsePixiLock(dir, repoName);
+    }
+
+    private List parsePixiLockYaml(Map root, String repoName) {
+        return new CondaLockParser(condaPypiMappingService).parsePixiLockYaml(root, repoName);
+    }
+
+    /**
+     * Parses a {@code conda list --explicit} spec: comment headers, an {@code @EXPLICIT}
+     * marker, then one conda package URL per line. Each URL's filename yields the pinned
+     * name/version; the conda→PyPI mapping applies exactly as for conda-lock.yml.
+     */
+    private List parseCondaExplicitLines(List lines, String repoName) {
+        return new CondaLockParser(condaPypiMappingService).parseCondaExplicitLines(lines, repoName);
     }
 
     /**
-     * Parses an uploaded raw lock file (composer.lock / conan.lock), detected by content shape.
+     * Derives (name, version) from a conda package URL or filename, e.g.
+     * {@code "…/linux-64/openssl-3.1.1-hd590300_1.conda"} → {@code ["openssl", "3.1.1"]}.
+     * Filenames are {@code name-version-build}; names may contain '-' but versions and build
+     * strings never do, so the split happens from the right.
+     */
+    private static String[] parseCondaPackageNameVersion(String urlOrFilename) {
+        return CondaLockParser.parseCondaPackageNameVersion(urlOrFilename);
+    }
+
+    /**
+     * Parses an uploaded raw lock file (composer.lock / conan.lock / Podfile.lock /
+     * conda-lock.yml / pixi.lock / a `conda list --explicit` spec), detected by content shape.
      * Used by the SBOM-upload import path. Returns {@code null} when the content is not a
      * recognized lock file so the caller can fall back to CycloneDX SBOM parsing.
      */
     public List parseUploadedLockFile(byte[] content, String label) {
+        return new UploadedLockFileParser(condaPypiMappingService).parseUploadedLockFile(content, label);
+    }
+
+    /** composer.lock shape: "packages" array plus a composer-only marker key. */
+    private static boolean isComposerLockJson(JsonNode root) {
+        return UploadedLockFileParser.isComposerLockJson(root);
+    }
+
+    /** conan.lock shape: Conan 1.x "graph_lock", or Conan 2.x flat "requires" array + "version". */
+    private static boolean isConanLockJson(JsonNode root) {
+        return UploadedLockFileParser.isConanLockJson(root);
+    }
+
+    // ── C/C++ manifest parsers ─────────────────────────────────────────────
+
+    /**
+     * Parses {@code vcpkg.json} manifest dependencies. Dependency entries may be plain names,
+     * objects with a {@code name} and optional {@code version>=} constraint, or feature objects.
+     * Only the declared name and best-effort version are emitted (vcpkg.json is not a lock file).
+     */
+    private List parseVcpkgJson(Path dir, String repoName) {
+        return new NativeManifestParser().parseVcpkgJson(dir, repoName);
+    }
+
+    /**
+     * Parses {@code vcpkg-configuration.json}. The file mainly describes registries, but it can
+     * contain named registry packages with versions. Best-effort parse: any object with both
+     * {@code name} and a version-ish field is emitted.
+     */
+    private List parseVcpkgConfigurationJson(Path dir, String repoName) {
+        return new NativeManifestParser().parseVcpkgConfigurationJson(dir, repoName);
+    }
+
+    private void extractVcpkgRegistryPackages(JsonNode node, Set seen, List comps) {
+        new NativeManifestParser().extractVcpkgRegistryPackages(node, seen, comps);
+    }
+
+    private void extractVcpkgRegistryPackage(JsonNode obj, Set seen, List comps) {
+        new NativeManifestParser().extractVcpkgRegistryPackage(obj, seen, comps);
+    }
+
+    /**
+     * Parses {@code .gitmodules}: for each submodule runs {@code git ls-tree HEAD }
+     * to capture the pinned commit SHA. Submodules whose SHA cannot be resolved are skipped.
+     */
+    private List parseGitSubmodules(Path dir, String repoName) {
+        Path gitmodules = dir.resolve(".gitmodules");
+        if (!Files.isRegularFile(gitmodules)) return List.of();
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
         try {
-            String head = new String(content, 0, Math.min(content.length, 200), StandardCharsets.UTF_8)
-                    .stripLeading();
-            if (!head.startsWith("{")) {
-                return null;
-            }
-            JsonNode root = OBJECT_MAPPER.readTree(content);
-            if (isComposerLockJson(root)) {
-                return parseComposerLockJson(root, label);
+            List lines = Files.readAllLines(gitmodules, StandardCharsets.UTF_8);
+            String currentName = null;
+            String currentPath = null;
+            Pattern sectionP = Pattern.compile("^\\s*\\[submodule\\s+\"([^\"]+)\"\\s*]\\s*$");
+            Pattern propP = Pattern.compile("^\\s*(\\w+)\\s*=\\s*(.+?)\\s*$");
+            for (String raw : lines) {
+                Matcher sm = sectionP.matcher(raw);
+                if (sm.matches()) {
+                    flushSubmodule(dir, repoName, currentName, currentPath, seen, comps);
+                    currentName = sm.group(1);
+                    currentPath = null;
+                    continue;
+                }
+                Matcher pm = propP.matcher(raw);
+                if (pm.matches() && currentName != null) {
+                    String key = pm.group(1);
+                    String val = pm.group(2);
+                    if ("path".equals(key)) currentPath = val;
+                }
             }
-            if (isConanLockJson(root)) {
-                return parseConanLockJson(root, label);
+            flushSubmodule(dir, repoName, currentName, currentPath, seen, comps);
+            log.info("[DependencyParser][GitSubmodule] Parsed {} components from .gitmodules in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][GitSubmodule] Failed to parse .gitmodules for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    private void flushSubmodule(Path dir, String repoName, String name, String path,
+                                Set seen, List comps) {
+        if (name == null || name.isBlank()) return;
+        String sha = resolveSubmoduleSha(dir, path);
+        if (sha == null || sha.isBlank()) {
+            log.debug("[DependencyParser][GitSubmodule] Skipping '{}' in '{}' — no pinned SHA", name, repoName);
+            return;
+        }
+        if (seen.add(name + ":" + sha)) {
+            comps.add(buildComponent(name, sha, "SUBMODULE"));
+        }
+    }
+
+    private String resolveSubmoduleSha(Path dir, String path) {
+        if (path == null || path.isBlank()) return null;
+        try {
+            List cmd = List.of("git", "ls-tree", "HEAD", path);
+            ProcessBuilder pb = new ProcessBuilder(cmd).directory(dir.toFile()).redirectErrorStream(true);
+            ProcessOutput result = runProcess(pb, 30, TimeUnit.SECONDS, StandardCharsets.UTF_8);
+            if (result.exitCode() != 0 || result.output().isBlank()) return null;
+            // Output format:  commit   
+            for (String line : result.output().split("\\r?\\n")) {
+                String[] parts = line.trim().split("\\s+");
+                if (parts.length >= 3 && "commit".equals(parts[1])) {
+                    return parts[2];
+                }
             }
+            return null;
         } catch (Exception e) {
-            log.debug("[DependencyParser] Uploaded content is not a supported lock file: {}", e.getMessage());
+            log.debug("[DependencyParser][GitSubmodule] git ls-tree failed for '{}': {}", path, e.getMessage());
+            return null;
         }
-        return null;
     }
 
-    /** composer.lock shape: "packages" array plus a composer-only marker key. */
-    private static boolean isComposerLockJson(JsonNode root) {
-        return root.path("packages").isArray()
-                && (root.has("content-hash") || root.has("_readme") || root.has("packages-dev"));
+    /**
+     * Parses {@code CMakeLists.txt} for {@code FetchContent_Declare} and {@code ExternalProject_Add}
+     * declarations that pin a dependency via {@code GIT_REPOSITORY + GIT_TAG} or {@code URL}.
+     * The dependency name is taken from the declaration identifier or the repository/archive basename.
+     */
+    private List parseCMakeLists(Path dir, String repoName) {
+        return new NativeManifestParser().parseCMakeLists(dir, repoName);
     }
 
-    /** conan.lock shape: Conan 1.x "graph_lock", or Conan 2.x flat "requires" array + "version". */
-    private static boolean isConanLockJson(JsonNode root) {
-        return root.has("graph_lock")
-                || (root.path("requires").isArray() && root.has("version"));
+    private void parseCMakeCommand(String content, String command, Set seen,
+                                   List comps) {
+        new NativeManifestParser().parseCMakeCommand(content, command, seen, comps);
+    }
+
+    /**
+     * OS-package inventory from a Dockerfile's base image + explicitly
+     * version-pinned {@code apt-get install}/{@code apk add} packages.
+     * See {@link com.salkcoding.oswl.service.container.DockerfileParser} for scope.
+     */
+    private List parseDockerfile(Path dockerfile, String repoName) {
+        try {
+            String content = Files.readString(dockerfile, StandardCharsets.UTF_8);
+            return new com.salkcoding.oswl.service.container.DockerfileParser().parse(content, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Dockerfile] Failed to parse Dockerfile for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    private String extractCMakeQuotedArg(String body, String key) {
+        return new NativeManifestParser().extractCMakeQuotedArg(body, key);
+    }
+
+    private String cmakeBasenameFromUrl(String url) {
+        return new NativeManifestParser().cmakeBasenameFromUrl(url);
+    }
+
+    private String normalizeGitTag(String tag) {
+        return new NativeManifestParser().normalizeGitTag(tag);
+    }
+
+    private String versionFromArchiveUrl(String url) {
+        return new NativeManifestParser().versionFromArchiveUrl(url);
     }
 
     // ── Helpers ───────────────────────────────────────────────────────────
@@ -1833,12 +1316,7 @@ private ScanPayload.ComponentPayload buildComponent(String name, String version,
 
     /** Normalizes a Maven {@code } to the noise-cut tag; compile/runtime → null (production). */
     private static String normalizeMavenScope(String scope) {
-        if (scope == null || scope.isBlank()) return null;
-        String s = scope.trim().toLowerCase();
-        return switch (s) {
-            case "compile", "runtime", "import" -> null;
-            default -> s; // test, provided, system
-        };
+        return MavenPomParser.normalizeMavenScope(scope);
     }
 
     /** Builds a scan payload from parse results (version label supplied by caller). */
diff --git a/src/main/java/com/salkcoding/oswl/service/DependencyManifestPatcher.java b/src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestPatcher.java
similarity index 97%
rename from src/main/java/com/salkcoding/oswl/service/DependencyManifestPatcher.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestPatcher.java
index ec20f70e..dc98419b 100644
--- a/src/main/java/com/salkcoding/oswl/service/DependencyManifestPatcher.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/DependencyManifestPatcher.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import java.util.Optional;
 import java.util.Set;
@@ -8,7 +8,7 @@
 /**
  * Locates and patches dependency version strings in common manifest / lock files.
  */
-final class DependencyManifestPatcher {
+public final class DependencyManifestPatcher {
 
     private static final Set MANIFEST_FILE_NAMES = Set.of(
             "pom.xml",
@@ -40,7 +40,7 @@ final class DependencyManifestPatcher {
 
     private DependencyManifestPatcher() {}
 
-    static boolean isManifestPath(String path) {
+    public static boolean isManifestPath(String path) {
         if (path == null || path.isBlank()) return false;
         int slash = path.lastIndexOf('/');
         String name = slash >= 0 ? path.substring(slash + 1) : path;
@@ -50,7 +50,7 @@ static boolean isManifestPath(String path) {
     /**
      * @return patched file content, or empty if this file does not declare the library at {@code oldVersion}
      */
-    static Optional patch(String content, String path, String libName, String oldVersion, String newVersion) {
+    public static Optional patch(String content, String path, String libName, String oldVersion, String newVersion) {
         if (content == null || content.isBlank() || oldVersion == null || newVersion == null) {
             return Optional.empty();
         }
diff --git a/src/main/java/com/salkcoding/oswl/service/EnrichmentProgressContext.java b/src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressContext.java
similarity index 92%
rename from src/main/java/com/salkcoding/oswl/service/EnrichmentProgressContext.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressContext.java
index e861df97..addae723 100644
--- a/src/main/java/com/salkcoding/oswl/service/EnrichmentProgressContext.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressContext.java
@@ -1,10 +1,10 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import java.util.function.Consumer;
 import java.util.function.IntConsumer;
 
 /**
- * Thread-scoped channel for live enrichment progress (D2 AI streaming previews, D3 continuous
+ * Thread-scoped channel for live enrichment progress (AI streaming previews, continuous
  * progress). The entry points that know the scan ({@link VulnerabilityEnrichmentService}) open a
  * {@link #scope(Frame)} around their work; the layers that produce progress signals
  * ({@code OpenAiClient} token stream, {@code DepsDevClient} fetch completions,
@@ -19,9 +19,9 @@ public final class EnrichmentProgressContext {
 
     /**
      * @param scanResultId  scan this progress belongs to
-     * @param previewSink   receives raw AI text deltas for the live Quick Import preview (D2)
-     * @param fetchProgress receives the running count of completed deps.dev fetches (D3 data phase)
-     * @param batchProgress receives the running count of processed AI batch items (D2 detail lines)
+     * @param previewSink   receives raw AI text deltas for the live Quick Import preview
+     * @param fetchProgress receives the running count of completed deps.dev fetches (data phase)
+     * @param batchProgress receives the running count of processed AI batch items (detail lines)
      */
     public record Frame(Long scanResultId,
                         Consumer previewSink,
diff --git a/src/main/java/com/salkcoding/oswl/service/EnrichmentProgressHolder.java b/src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressHolder.java
similarity index 86%
rename from src/main/java/com/salkcoding/oswl/service/EnrichmentProgressHolder.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressHolder.java
index b91f0053..7264b47b 100644
--- a/src/main/java/com/salkcoding/oswl/service/EnrichmentProgressHolder.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/EnrichmentProgressHolder.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import org.springframework.stereotype.Component;
 
@@ -10,37 +10,37 @@
 /**
  * In-memory registry for AI enrichment progress (Quick Import live status).
  *
- * 
D3: the enrichment phase owns the 55–100 band of the overall job progress — 55–80 for the
- * data pipeline (deps.dev/OSV fetch completions) and 80–100 for the AI blocks (B2 completion
- * count). Percent is clamped monotonically here so parallel reporters can never move it
- * backwards.
+ * 
The enrichment phase owns the 55–100 band of the overall job progress — 55–80 for the
+ * data pipeline (deps.dev/OSV fetch completions) and 80–100 for the AI blocks (sub-phase
+ * completion count). Percent is clamped monotonically here so parallel reporters can never move
+ * it backwards.
  *
- * 
D2: {@code detailLines} (what was found / batch progress) and {@code aiPreviews} (raw
+ * 
{@code detailLines} (what was found / batch progress) and {@code aiPreviews} (raw
  * free-form model output) are bounded ring buffers — unbounded growth would bloat every SSE
  * frame and leak memory.
  */
 @Component
 public class EnrichmentProgressHolder {
 
-    /** F2 folded posture/trend/diff into one combined-insights block, so 5 blocks became 3. */
+    /** Posture/trend/diff are folded into one combined-insights block, so 5 blocks became 3. */
     public static final int ENRICHMENT_STEPS = 3;
 
     /** Data pipeline (deps.dev fetch) maps to 55–80 of the overall job progress. */
     private static final int DATA_PERCENT_BASE = 55;
     private static final int DATA_PERCENT_SPAN = 25;
-    /** AI blocks (B2 completion count / {@link #ENRICHMENT_STEPS}) map to 80–100. */
+    /** AI blocks (sub-phase completion count / {@link #ENRICHMENT_STEPS}) map to 80–100. */
     private static final int AI_PERCENT_BASE = 80;
     private static final int AI_PERCENT_SPAN = 20;
 
-    /** Rolling AI preview keeps only the tail — older text is dropped (D2 cap). */
+    /** Rolling AI preview keeps only the tail — older text is dropped. */
     private static final int PREVIEW_CHAR_LIMIT = 2_000;
-    /** Detail log keeps only the most recent lines (D2 cap). */
+    /** Detail log keeps only the most recent lines. */
     private static final int DETAIL_LINE_LIMIT = 20;
 
     public enum EnrichmentSubPhase {
         CVE,
         LICENSE,
-        /** F2: posture + security-trend + license-trend + version-diff folded into one call. */
+        /** Posture + security-trend + license-trend + version-diff folded into one call. */
         INSIGHTS
     }
 
@@ -84,8 +84,8 @@ public void setStep(Long scanResultId, EnrichmentSubPhase subPhase, int step, St
     }
 
     /**
-     * D4: records the cache decision (total / cacheHit / toFetch) so the job status can show a
-     * cache badge, and seeds the data-phase progress total (D3). With nothing to fetch the data
+     * Records the cache decision (total / cacheHit / toFetch) so the job status can show a
+     * cache badge, and seeds the data-phase progress total. With nothing to fetch the data
      * phase is effectively instant, so the percent jumps straight to the AI band base.
      */
     public void recordCacheStats(Long scanResultId, int total, int cacheHit, int toFetch) {
@@ -103,7 +103,7 @@ public void recordCacheStats(Long scanResultId, int total, int cacheHit, int toF
     }
 
     /**
-     * D3: a deps.dev fetch completed. {@code fetchedCount} is measured against the
+     * A deps.dev fetch completed. {@code fetchedCount} is measured against the
      * {@link #recordCacheStats} toFetch total; percent is clamped monotonically.
      */
     public void reportDataProgress(Long scanResultId, int fetchedCount) {
@@ -123,7 +123,7 @@ public void reportDataProgress(Long scanResultId, int fetchedCount) {
         fireUpdate(scanResultId);
     }
 
-    /** D2: appends a raw AI output delta to the rolling preview (tail-capped, single entry). */
+    /** Appends a raw AI output delta to the rolling preview (tail-capped, single entry). */
     public void appendPreview(Long scanResultId, String chunk) {
         if (scanResultId == null || chunk == null || chunk.isEmpty()) return;
         snapshots.compute(scanResultId, (id, prev) -> {
@@ -148,7 +148,7 @@ public void appendPreview(Long scanResultId, String chunk) {
     }
 
     /**
-     * D2: appends one line to the detail log (ring buffer — oldest lines drop off).
+     * Appends one line to the detail log (ring buffer — oldest lines drop off).
      * Content rule: library name/version/CVE counts only, never repo URLs or paths.
      */
     public void appendDetail(Long scanResultId, String line) {
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/ImportJobStore.java b/src/main/java/com/salkcoding/oswl/service/ingest/ImportJobStore.java
new file mode 100644
index 00000000..165b27b1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/ImportJobStore.java
@@ -0,0 +1,203 @@
+package com.salkcoding.oswl.service.ingest;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.domain.entity.scan.ImportCoordinator;
+import com.salkcoding.oswl.domain.entity.scan.ImportJob;
+import com.salkcoding.oswl.dto.QuickImportJobStatus;
+import com.salkcoding.oswl.dto.QuickImportJobStatus.Phase;
+import com.salkcoding.oswl.dto.QuickImportMessageKeys;
+import com.salkcoding.oswl.exception.QuickImportDuplicateException;
+import com.salkcoding.oswl.exception.QuickImportQueueFullException;
+import com.salkcoding.oswl.repository.scan.ImportCoordinatorRepository;
+import com.salkcoding.oswl.repository.scan.ImportJobRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import jakarta.annotation.PostConstruct;
+import lombok.RequiredArgsConstructor;
+import org.springframework.jdbc.core.JdbcTemplate;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.time.Duration;
+import java.time.Instant;
+import java.util.HexFormat;
+import java.util.List;
+import java.util.UUID;
+import java.util.Set;
+import java.util.concurrent.ConcurrentHashMap;
+import java.util.function.Supplier;
+
+/** Durable owner/lease/state boundary. Never persists API tokens or repository credentials.
+ * Expired work is terminated, not replayed: clone/ingest side effects are not retry-safe. */
+@Service
+@RequiredArgsConstructor
+public class ImportJobStore {
+    private static final ObjectMapper JSON = new ObjectMapper();
+    private static final Duration LEASE = Duration.ofMinutes(2);
+    private final ImportJobRepository jobs;
+    private final ImportCoordinatorRepository coordinator;
+    private final ScanResultRepository scans;
+    private final JdbcTemplate jdbc;
+    private final String workerId = UUID.randomUUID().toString();
+    private final Set pendingReleases = ConcurrentHashMap.newKeySet();
+
+    @PostConstruct
+    void initialize() {
+        if (!coordinator.existsById(1L)) {
+            try { coordinator.saveAndFlush(new ImportCoordinator()); }
+            catch (org.springframework.dao.DataIntegrityViolationException e) {
+                if (!coordinator.existsById(1L)) throw e;
+            }
+        }
+    }
+    private Instant now() {
+        return jdbc.queryForObject("SELECT CURRENT_TIMESTAMP", (rs, row) -> rs.getTimestamp(1).toInstant());
+    }
+    private void lock() {
+        if (coordinator.lockCoordinator() == null) throw new IllegalStateException("Import coordinator is missing");
+    }
+
+    @Transactional
+    public void reserve(QuickImportJobStatus status, Long owner, String repoKey, int cap, boolean localBatch) {
+        lock();
+        String key = hash(repoKey);
+        if (!localBatch && jobs.countQueued(owner) >= cap) throw new QuickImportQueueFullException(cap);
+        if (!localBatch && jobs.countDuplicate(owner, key) > 0) throw new QuickImportDuplicateException(status.getRepoLabel());
+        Instant now = now();
+        ImportJob job = new ImportJob();
+        job.setJobId(status.getJobId()); job.setOwnerId(owner); job.setRepoKey(key); job.setWorkerId(workerId);
+        job.setCreatedAt(now); job.setLeaseUntil(now.plus(LEASE));
+        write(job, status, now);
+        jobs.save(job);
+    }
+
+    @Transactional
+    public boolean claim(String id, int maxWorkers) {
+        lock();
+        ImportJob job = jobs.lockJob(id).orElse(null);
+        if (job == null || job.isCanceled() || job.getFinishedAt() != null || !workerId.equals(job.getWorkerId())) return false;
+        if (!job.getLeaseUntil().isAfter(now()) || jobs.countByWorkerActiveTrue() >= maxWorkers) return false;
+        if (job.isWorkerActive()) return false;
+        job.setWorkerActive(true);
+        return true;
+    }
+
+    @Transactional
+    public void release(String id) {
+        jobs.lockJob(id).filter(j -> workerId.equals(j.getWorkerId())).ifPresent(j -> j.setWorkerActive(false));
+    }
+
+    public void retryRelease(String id) { pendingReleases.add(id); }
+
+    @Transactional
+    public void publish(QuickImportJobStatus status) {
+        ImportJob job = jobs.lockJob(status.getJobId()).orElse(null);
+        if (job == null || !workerId.equals(job.getWorkerId()) || job.isCanceled()) return;
+        Instant now = now();
+        if (job.getFinishedAt() != null) {
+            // AI status may advance after scan completion, but a terminal phase cannot regress.
+            if (!"DONE".equals(job.getPhase()) || status.getPhase() != Phase.DONE) return;
+        } else if (!job.getLeaseUntil().isAfter(now)) return;
+        if (status.getPhase().ordinal() < Phase.valueOf(job.getPhase()).ordinal()) return;
+        write(job, status, now);
+    }
+
+    @Transactional
+    public boolean cancel(String id, Long owner) {
+        ImportJob job = jobs.lockJob(id).orElse(null);
+        if (job == null || !job.getOwnerId().equals(owner) || job.getFinishedAt() != null) return false;
+        job.setCanceled(true);
+        write(job, decode(job).toBuilder().phase(Phase.FAILED).messageKey(QuickImportMessageKeys.CANCELED)
+                .message(null).messageArgs(List.of()).queuePosition(null).build(), now());
+        return true;
+    }
+
+    @Transactional(readOnly = true)
+    public QuickImportJobStatus read(String id, Long owner) {
+        return jobs.findByJobId(id).filter(j -> j.getOwnerId().equals(owner)).map(this::decode).orElse(null);
+    }
+    @Transactional(readOnly = true)
+    public List list(Long owner) {
+        return jobs.findByOwnerIdOrderByCreatedAtAsc(owner).stream().map(this::decode).toList();
+    }
+
+    @Transactional(readOnly = true)
+    public boolean ownsLease(String id) {
+        Instant now = now();
+        return jobs.findByJobId(id).filter(j -> workerId.equals(j.getWorkerId()) && !j.isCanceled()
+                && j.getFinishedAt() == null && j.getLeaseUntil().isAfter(now)).isPresent();
+    }
+
+    /** Keep the job lock through the short database ingest transaction; recovery/cancel cannot
+     * race the commit. No clone, network call or source traversal belongs inside this callback. */
+    @Transactional
+    public com.salkcoding.oswl.domain.entity.scan.ScanResult fenced(String id,
+            Supplier action) {
+        ImportJob job = jobs.lockJob(id).orElseThrow();
+        if (!workerId.equals(job.getWorkerId()) || job.isCanceled() || job.getFinishedAt() != null
+                || !job.getLeaseUntil().isAfter(now())) throw new IllegalStateException("Import worker lease expired");
+        QuickImportJobStatus prior = decode(job);
+        if (prior.getScanResultId() != null) throw new IllegalStateException("Import scan already committed");
+        var scan = action.get();
+        write(job, prior.toBuilder().scanResultId(scan.getId()).build(), now());
+        return scan;
+    }
+
+    @Transactional(readOnly = true)
+    public boolean hasActiveSourceScan(Long scanId) {
+        Instant current = now();
+        return jobs.findByWorkerActiveTrue().stream().anyMatch(job -> job.getLeaseUntil().isAfter(current)
+                && scanId.equals(decode(job).getScanResultId()));
+    }
+
+    @Transactional(readOnly = true)
+    public int activeWorkers() { return Math.toIntExact(jobs.countByWorkerActiveTrue()); }
+
+    @Transactional
+    public void maintain() {
+        lock();
+        Set releasing = Set.copyOf(pendingReleases);
+        releasing.forEach(this::release);
+        // Clear retries only after commit: a transient DB failure must not leak a live
+        // worker slot indefinitely while this process continues renewing its leases.
+        if (!releasing.isEmpty()) org.springframework.transaction.support.TransactionSynchronizationManager
+                .registerSynchronization(new org.springframework.transaction.support.TransactionSynchronization() {
+                    @Override public void afterCommit() { pendingReleases.removeAll(releasing); }
+                });
+        Instant now = now();
+        jobs.renew(workerId, now, now.plus(LEASE));
+        for (String expired : jobs.findExpiredJobIds(now)) {
+            ImportJob job = jobs.lockJob(expired).orElseThrow();
+            if (job.getLeaseUntil().isAfter(now)) continue;
+            QuickImportJobStatus snapshot = decode(job);
+            var scan = snapshot.getScanResultId() == null ? null : scans.lockForSourceWrite(snapshot.getScanResultId()).orElse(null);
+            boolean completed = scan != null && scan.getStatus() == com.salkcoding.oswl.domain.enums.ScanStatus.COMPLETED;
+            if (scan != null && !completed && jobs.findActiveJobs().stream().noneMatch(active ->
+                    active.getLeaseUntil().isAfter(now) && scan.getId().equals(decode(active).getScanResultId()))) {
+                scan.fail("Import worker lease expired before analysis completed");
+                scans.save(scan);
+            }
+            if (job.getFinishedAt() == null) write(job, snapshot.toBuilder().phase(completed ? Phase.DONE : Phase.FAILED)
+                    .messageKey(completed ? QuickImportMessageKeys.IMPORT_COMPLETE : "interrupted")
+                    .message(null).error(null).messageArgs(List.of(String.valueOf(snapshot.getComponentCount())))
+                    .queuePosition(null).build(), now);
+        }
+        jobs.releaseExpiredWorkers(now);
+        jobs.deleteFinishedBefore(now.minus(Duration.ofMinutes(30)));
+    }
+
+    private void write(ImportJob job, QuickImportJobStatus status, Instant now) {
+        job.setPhase(status.getPhase().name());
+        try { job.setSnapshotJson(JSON.writeValueAsString(status.toBuilder().apiToken(null).build())); }
+        catch (Exception e) { throw new IllegalStateException("Cannot serialize import status", e); }
+        if (job.getFinishedAt() == null && (status.getPhase() == Phase.DONE || status.getPhase() == Phase.FAILED)) job.setFinishedAt(now);
+    }
+    private QuickImportJobStatus decode(ImportJob job) {
+        try { return JSON.readValue(job.getSnapshotJson(), QuickImportJobStatus.class); }
+        catch (Exception e) { throw new IllegalStateException("Cannot read import status", e); }
+    }
+    private static String hash(String key) {
+        try { return HexFormat.of().formatHex(MessageDigest.getInstance("SHA-256").digest(key.getBytes(StandardCharsets.UTF_8))); }
+        catch (java.security.NoSuchAlgorithmException e) { throw new IllegalStateException(e); }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ManifestArchiveService.java b/src/main/java/com/salkcoding/oswl/service/ingest/ManifestArchiveService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/ManifestArchiveService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/ManifestArchiveService.java
index 551d263a..6eed8921 100644
--- a/src/main/java/com/salkcoding/oswl/service/ManifestArchiveService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/ManifestArchiveService.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import com.salkcoding.oswl.exception.InvalidRequestException;
 import lombok.extern.slf4j.Slf4j;
diff --git a/src/main/java/com/salkcoding/oswl/service/ManifestPatchInfo.java b/src/main/java/com/salkcoding/oswl/service/ingest/ManifestPatchInfo.java
similarity index 89%
rename from src/main/java/com/salkcoding/oswl/service/ManifestPatchInfo.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/ManifestPatchInfo.java
index 7b0df9fa..ee0624e5 100644
--- a/src/main/java/com/salkcoding/oswl/service/ManifestPatchInfo.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/ManifestPatchInfo.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 /**
  * Describes which manifest file was patched during a version-bump PR.
diff --git a/src/main/java/com/salkcoding/oswl/service/MavenBomVersionResolver.java b/src/main/java/com/salkcoding/oswl/service/ingest/MavenBomVersionResolver.java
similarity index 89%
rename from src/main/java/com/salkcoding/oswl/service/MavenBomVersionResolver.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/MavenBomVersionResolver.java
index b4e25316..45095d94 100644
--- a/src/main/java/com/salkcoding/oswl/service/MavenBomVersionResolver.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/MavenBomVersionResolver.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import com.salkcoding.oswl.dto.scan.ScanPayload;
 import lombok.extern.slf4j.Slf4j;
@@ -11,6 +11,7 @@
 
 import javax.xml.parsers.DocumentBuilderFactory;
 import java.io.ByteArrayInputStream;
+import java.io.IOException;
 import java.nio.charset.StandardCharsets;
 import java.nio.file.Files;
 import java.nio.file.Path;
@@ -58,6 +59,10 @@ public class MavenBomVersionResolver {
             "\\s*\\(?[\"']([\\w.\\-]+:[\\w.\\-]+)(?::([\\w.+\\-]+))?[\"']",
             Pattern.CASE_INSENSITIVE);
     private static final Pattern PROP_REF = Pattern.compile("\\$\\{([^}]+)}");
+    private static final Pattern RICH_VERSION = Pattern.compile(
+            "\\s*\\)?\\s*\\{\\s*version\\s*\\{\\s*(?:strictly|require|prefer)\\s*\\(\\s*[\"']([^\"']+)[\"']");
+    private static final Pattern PLATFORM_BOM = Pattern.compile(
+            "(?:enforcedPlatform|platform)\\s*\\(\\s*[\"']([^\"']+)[\"']\\s*\\)");
 
     private final RestClient restClient;
     private final PomFetcher pomFetcher;
@@ -82,6 +87,7 @@ public Map buildVersionIndex(Path projectDir) {
         try {
             mergeVersionCatalogs(projectDir, index);
             mergeGradleProperties(projectDir, index);
+            mergeGradleConstraints(projectDir, index);
             mergeGradleBomHints(projectDir, index);
             mergeMavenPomHints(projectDir, index);
         } catch (Exception e) {
@@ -260,6 +266,8 @@ private void mergeGradleBomHints(Path projectDir, Map index) {
                     resolveMavenBomCoordinate(kotlinBom.group(1), gradleVars)
                             .ifPresent(bomCoords::add);
                 }
+                Matcher platform = PLATFORM_BOM.matcher(content);
+                while (platform.find()) resolveMavenBomCoordinate(platform.group(1), gradleVars).ifPresent(bomCoords::add);
             } catch (Exception e) {
                 log.debug("[BOM] Failed to read {}: {}", file, e.getMessage());
             }
@@ -429,7 +437,7 @@ private void mergeManagedVersionsFromPom(
         try {
             Document doc = parseXml(pomBytes.get());
             Element project = doc.getDocumentElement();
-            Map props = extractProperties(project);
+            Map props = effectiveProperties(project, new HashSet<>(), 0);
 
             Element parent = directChild(project, "parent");
             if (parent != null) {
@@ -514,6 +522,28 @@ private Map extractProperties(Element project) {
         return props;
     }
 
+    private Map effectiveProperties(Element project, Set visited, int depth) {
+        Map props = new HashMap<>();
+        Element parent = directChild(project, "parent");
+        if (parent != null && depth < MAX_BOM_DEPTH) {
+            String g = text(directChild(parent, "groupId"));
+            String a = text(directChild(parent, "artifactId"));
+            String v = text(directChild(parent, "version"));
+            if (g != null && a != null && v != null && !isUnresolvedPlaceholder(v) && visited.add(g + ":" + a + ":" + v)) {
+                try {
+                    Optional bytes = pomFetcher.fetch(g, a, v);
+                    if (bytes.isPresent()) props.putAll(effectiveProperties(parseXml(bytes.get()).getDocumentElement(), visited, depth + 1));
+                } catch (Exception e) {
+                    log.debug("[BOM] Parent properties unavailable for {}:{}:{}", g, a, v);
+                }
+            }
+        }
+        props.putAll(extractProperties(project));
+        String version = text(directChild(project, "version"));
+        if (version != null) { props.put("project.version", version); props.put("pom.version", version); }
+        return props;
+    }
+
     private String resolveProp(String raw, Map props) {
         if (raw == null || !raw.contains("${")) {
             return raw;
@@ -526,7 +556,14 @@ private String resolveProp(String raw, Map props) {
             m.appendReplacement(sb, Matcher.quoteReplacement(val != null ? val : m.group(0)));
         }
         m.appendTail(sb);
-        return sb.toString();
+        String resolved = sb.toString();
+        for (int i = 0; i < MAX_BOM_DEPTH && resolved.contains("${"); i++) {
+            Matcher nested = PROP_REF.matcher(resolved);
+            String next = nested.replaceAll(match -> Matcher.quoteReplacement(props.getOrDefault(match.group(1), match.group(0))));
+            if (next.equals(resolved)) break;
+            resolved = next;
+        }
+        return resolved;
     }
 
     private Element directChild(Element parent, String tag) {
@@ -584,7 +621,7 @@ private static void put(Map index, String groupArtifact, String
     }
 
     private static void put(Map index, String groupId, String artifactId, String version) {
-        if (groupId == null || artifactId == null || version == null || version.isBlank()) {
+        if (groupId == null || artifactId == null || version == null || version.isBlank() || isUnresolvedPlaceholder(version)) {
             return;
         }
         index.putIfAbsent(groupId + ":" + artifactId, version);
@@ -641,6 +678,27 @@ public List parseGradleDeclaredWithBom(Path projec
         return comps;
     }
 
+    private void mergeGradleConstraints(Path projectDir, Map index) {
+        Map variables = buildGradleVariableContext(projectDir);
+        for (Path file : findGradleBuildFiles(projectDir)) {
+            try {
+                String content = Files.readString(file, StandardCharsets.UTF_8);
+                Matcher dependency = GRADLE_DEP.matcher(content);
+                while (dependency.find()) {
+                    Matcher rich = RICH_VERSION.matcher(content).region(dependency.end(), content.length());
+                    if (rich.lookingAt()) {
+                        String version = resolveGradleExpression(rich.group(1), variables);
+                        if (version != null && version.matches("[0-9]+(?:\\.[0-9]+)*(?:-[A-Za-z0-9.-]+)?")) {
+                            put(index, dependency.group(2), version);
+                        }
+                    }
+                }
+            } catch (IOException e) {
+                log.debug("[BOM] Gradle constraints unavailable in {}", file);
+            }
+        }
+    }
+
     /** Maps a Gradle configuration keyword to a dependency scope for noise-cut filtering. */
     private static String gradleConfigScope(String configuration) {
         if (configuration == null) return null;
diff --git a/src/main/java/com/salkcoding/oswl/service/QuickImportService.java b/src/main/java/com/salkcoding/oswl/service/ingest/QuickImportService.java
similarity index 84%
rename from src/main/java/com/salkcoding/oswl/service/QuickImportService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/QuickImportService.java
index bf939d6a..afd94311 100644
--- a/src/main/java/com/salkcoding/oswl/service/QuickImportService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/QuickImportService.java
@@ -1,4 +1,10 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
+import com.salkcoding.oswl.service.apikey.IssuedApiKey;
+import com.salkcoding.oswl.service.scan.ScanTimingRecorder;
+import com.salkcoding.oswl.service.project.ProjectService;
+import com.salkcoding.oswl.service.apikey.ProjectCliKeyPolicyService;
+import com.salkcoding.oswl.service.vcs.GitHubService;
+import com.salkcoding.oswl.service.apikey.ApiKeyService;
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
@@ -13,8 +19,8 @@
 import com.salkcoding.oswl.auth.repository.UserVcsConnectionRepository;
 import com.salkcoding.oswl.auth.security.EncryptionService;
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.ScanStatus;
 import com.salkcoding.oswl.dto.QuickImportJobStatus;
 import com.salkcoding.oswl.dto.QuickImportJobStatus.Phase;
@@ -24,7 +30,7 @@
 import com.salkcoding.oswl.exception.QuickImportQueueFullException;
 import com.salkcoding.oswl.dto.QuickImportRepoDto;
 import com.salkcoding.oswl.dto.scan.ScanPayload;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
@@ -104,6 +110,9 @@ public class QuickImportService {
     private final ApiKeyService apiKeyService;
     private final ScanIngestService scanIngestService;
     private final ScanResultRepository scanResultRepository;
+    private final ImportJobStore durableJobs;
+    private final org.springframework.core.env.Environment environment;
+    private final ConcurrentHashMap publishedPhases = new ConcurrentHashMap<>();
     private final GitHubService gitHubService;
     private final BitbucketCloudClient bitbucketCloudClient;
     private final EnrichmentProgressHolder enrichmentProgressHolder;
@@ -111,11 +120,16 @@ public class QuickImportService {
     private final DependencyManifestParserService dependencyManifestParserService;
     private final ScanTimingRecorder scanTimingRecorder;
     private final CloneCleanupService cloneCleanupService;
+    private final com.salkcoding.oswl.service.secretscan.SecretIacScanService secretIacScanService;
+    private final com.salkcoding.oswl.service.reachability.SourceReachabilityService sourceReachabilityService;
+    /** Null in plain-Mockito unit tests (no Spring context) — every use is guarded. */
+    private final com.salkcoding.oswl.service.metrics.OswlMetrics oswlMetrics;
 
     /** In-memory job tracker. Entries are removed after 30 minutes by {@link #evictExpiredJobs()}. */
     private final ConcurrentHashMap jobs = new ConcurrentHashMap<>();
     /** Tracks job creation times for TTL-based eviction. */
     private final ConcurrentHashMap jobCreatedAt = new ConcurrentHashMap<>();
+    private final ConcurrentHashMap jobFinishedAt = new ConcurrentHashMap<>();
     /** Job owner — used to prevent cross-user status polling (IDOR). */
     private final ConcurrentHashMap jobOwners = new ConcurrentHashMap<>();
     /** Tracks whether the full API token was already returned once on DONE. */
@@ -125,7 +139,7 @@ public class QuickImportService {
     /** FIFO queue waiting for a worker slot. */
     private final Deque pendingQueue = new java.util.concurrent.ConcurrentLinkedDeque<>();
     private final AtomicInteger runningImports = new AtomicInteger(0);
-    private final Object dispatchLock = new Object();
+    private final ConcurrentHashMap streamOwners = new ConcurrentHashMap<>();
     private final ConcurrentHashMap> jobEmitters = new ConcurrentHashMap<>();
     /** jobId → normalized repoUrl#branch, used to reject duplicate concurrent imports. */
     private final ConcurrentHashMap jobRepoKeys = new ConcurrentHashMap<>();
@@ -137,10 +151,10 @@ public class QuickImportService {
      */
     private final java.util.Set canceledJobs = ConcurrentHashMap.newKeySet();
 
-    /** scanResultId → jobId, so enrichment progress events can find the owning job for SSE pushes (D3). */
+    /** scanResultId → jobId, so enrichment progress events can find the owning job for SSE pushes. */
     private final ConcurrentHashMap jobIdByScanResultId = new ConcurrentHashMap<>();
     /**
-     * Per-job SSE throttle for high-frequency progress updates (D3): [lastSentAtMs, lastSentPercent].
+     * Per-job SSE throttle for high-frequency progress updates: [lastSentAtMs, lastSentPercent].
      * Phase transitions always notify immediately (via {@link #patchJob}); only the continuous
      * in-phase progress path is throttled to one frame per 500ms unless the percent advanced.
      */
@@ -153,6 +167,11 @@ public class QuickImportService {
     @PostConstruct
     void registerEnrichmentProgressListener() {
         enrichmentProgressHolder.setUpdateListener(this::onEnrichmentProgress);
+        if (oswlMetrics != null) {
+            // Registered once against the live queue/counter objects — the gauges read current
+            // state at scrape time, so no per-job meter churn.
+            oswlMetrics.registerQuickImportGauges(pendingQueue::size, runningImports::get);
+        }
     }
 
     private void onEnrichmentProgress(Long scanResultId) {
@@ -164,7 +183,7 @@ private void onEnrichmentProgress(Long scanResultId) {
     }
 
     /**
-     * D3: continuous in-phase progress (e.g. manifests parsed N/M). Percent is clamped
+     * Continuous in-phase progress (e.g. manifests parsed N/M). Percent is clamped
      * monotonically per job and SSE pushes are throttled; HTTP polls read the stored value.
      */
     private void reportJobProgress(String jobId, int percent) {
@@ -217,6 +236,8 @@ public String startImport(String repoUrl, String branch, Long userId) {
      * so all jobs can be scheduled at once; concurrency is still limited by {@code max-concurrent}.
      */
     public List startBatchImport(List repoUrls, Long userId) {
+        if (environment != null && !environment.acceptsProfiles(org.springframework.core.env.Profiles.of("local", "test", "uitest")))
+            throw new IllegalStateException("Batch admission bypass is limited to local fixtures");
         List jobIds = new ArrayList<>(repoUrls.size());
         for (String repoUrl : repoUrls) {
             jobIds.add(startImportInternal(repoUrl, null, userId, true));
@@ -224,7 +245,7 @@ public List startBatchImport(List repoUrls, Long userId) {
         return jobIds;
     }
 
-    private String startImportInternal(String repoUrl, String branch, Long userId, boolean bypassQueueCap) {
+    private synchronized String startImportInternal(String repoUrl, String branch, Long userId, boolean bypassQueueCap) {
         if (!bypassQueueCap) {
             int userQueued = countUserQueuedJobs(userId);
             if (userQueued >= maxQueuedPerUser) {
@@ -237,7 +258,7 @@ private String startImportInternal(String repoUrl, String branch, Long userId, b
         String repoLabel = extractRepoLabel(repoUrl);
         int queuePosition = pendingQueue.size() + runningImports.get() + 1;
 
-        jobs.put(jobId, baseJobBuilder(jobId)
+        QuickImportJobStatus initial = baseJobBuilder(jobId)
                 .phase(Phase.QUEUED)
                 .message(null)
                 .messageKey(null)
@@ -246,7 +267,9 @@ private String startImportInternal(String repoUrl, String branch, Long userId, b
                 .queuePosition(queuePosition)
                 .percent(0)
                 .startedAtEpochMs(System.currentTimeMillis())
-                .build());
+                .build();
+        if (durableJobs != null) durableJobs.reserve(initial, userId, importKey(repoUrl, branch), maxQueuedPerUser, bypassQueueCap);
+        jobs.put(jobId, initial);
         jobCreatedAt.put(jobId, Instant.now());
         jobOwners.put(jobId, userId);
         userJobIds.computeIfAbsent(userId, id -> new CopyOnWriteArrayList<>()).add(jobId);
@@ -295,6 +318,10 @@ private static String importKey(String repoUrl, String branch) {
     }
 
     public List listJobsForUser(Long userId) {
+        if (durableJobs != null) return durableJobs.list(userId).stream()
+                .map(snapshot -> jobs.containsKey(snapshot.getJobId())
+                        ? sanitizeApiToken(snapshot.getJobId(), resolveJobStatus(snapshot.getJobId())) : snapshot)
+                .filter(java.util.Objects::nonNull).toList();
         CopyOnWriteArrayList ids = userJobIds.get(userId);
         if (ids == null || ids.isEmpty()) return List.of();
         return ids.stream()
@@ -304,12 +331,14 @@ public List listJobsForUser(Long userId) {
     }
 
     public QuickImportJobsResponse listJobsSnapshot(Long userId) {
+        List statuses = listJobsForUser(userId);
         return QuickImportJobsResponse.builder()
-                .jobs(listJobsForUser(userId))
-                .activeSlotsUsed(runningImports.get())
+                .jobs(statuses)
+                .activeSlotsUsed(durableJobs == null ? runningImports.get() : durableJobs.activeWorkers())
                 .maxConcurrentSlots(maxConcurrentImports)
-                .userQueuedCount(countUserQueuedJobs(userId))
-                .userRunningCount(countUserRunningJobs(userId))
+                .userQueuedCount((int) statuses.stream().filter(j -> j.getPhase() == Phase.QUEUED).count())
+                .userRunningCount((int) statuses.stream().filter(j -> j.getPhase() != Phase.QUEUED
+                        && j.getPhase() != Phase.DONE && j.getPhase() != Phase.FAILED).count())
                 .maxQueuedSlots(maxQueuedPerUser)
                 .build();
     }
@@ -318,6 +347,7 @@ public SseEmitter subscribeJobStream(String jobId, Long userId) {
         if (!isJobOwner(jobId, userId)) {
             throw new IllegalArgumentException("Job not found");
         }
+        streamOwners.put(jobId, userId);
         SseEmitter emitter = new SseEmitter(Duration.ofMinutes(30).toMillis());
         jobEmitters.computeIfAbsent(jobId, k -> new CopyOnWriteArrayList<>()).add(emitter);
         emitter.onCompletion(() -> removeEmitter(jobId, emitter));
@@ -326,7 +356,7 @@ public SseEmitter subscribeJobStream(String jobId, Long userId) {
         try {
             // SSE follows the same reveal-once policy as HTTP polling: the full apiToken
             // is delivered only on the first DONE frame, then masked.
-            QuickImportJobStatus status = sanitizeApiToken(jobId, resolveJobStatus(jobId));
+            QuickImportJobStatus status = getJobStatus(jobId, userId);
             emitter.send(SseEmitter.event().name("job-update").data(status, MediaType.APPLICATION_JSON));
         } catch (Exception e) {
             emitter.completeWithError(e);
@@ -335,10 +365,14 @@ public SseEmitter subscribeJobStream(String jobId, Long userId) {
     }
 
     private void dispatchQueue() {
-        synchronized (dispatchLock) {
+        synchronized (this) {
             while (runningImports.get() < maxConcurrentImports && !pendingQueue.isEmpty()) {
                 PendingImport task = pendingQueue.poll();
                 if (task == null) break;
+                if (durableJobs != null && !durableJobs.claim(task.jobId(), maxConcurrentImports)) {
+                    if (durableJobs.ownsLease(task.jobId())) { pendingQueue.addFirst(task); break; }
+                    continue;
+                }
                 runningImports.incrementAndGet();
                 refreshQueuePositions();
                 Thread.ofVirtual().name("quick-import-" + task.jobId()).start(() -> executeImport(task));
@@ -371,6 +405,13 @@ private void executeImport(PendingImport task) {
         } finally {
             // canceledJobs is intentionally NOT cleared here — it must survive until the job is
             // evicted so late background writes and status polling stay blocked.
+            if (durableJobs != null) {
+                try { durableJobs.release(jobId); }
+                catch (Exception e) {
+                    durableJobs.retryRelease(jobId);
+                    log.warn("[QuickImport] Slot release deferred to maintenance for {}", jobId);
+                }
+            }
             runningImports.decrementAndGet();
             refreshQueuePositions();
             dispatchQueue();
@@ -382,10 +423,14 @@ private void executeImport(PendingImport task) {
      * running jobs stop at the next phase boundary (a long clone finishes first).
      * Returns false when the job is unknown, not owned by the user, or already finished.
      */
-    public boolean cancelJob(String jobId, Long requestingUserId) {
+    public synchronized boolean cancelJob(String jobId, Long requestingUserId) {
         if (requestingUserId == null || !isJobOwner(jobId, requestingUserId)) return false;
         QuickImportJobStatus status = jobs.get(jobId);
-        if (status == null) return false;
+        if (durableJobs != null && !durableJobs.cancel(jobId, requestingUserId)) return false;
+        if (status == null) {
+            auditLogService.log("QUICK_IMPORT.CANCEL", "PROJECT", null, null, "jobId=" + jobId + " remote=true");
+            return durableJobs != null;
+        }
         Phase phase = status.getPhase();
         if (phase == Phase.DONE || phase == Phase.FAILED) return false;
 
@@ -418,7 +463,7 @@ private void writeCanceledStatus(String jobId, QuickImportJobStatus prev) {
     }
 
     private void throwIfCanceled(String jobId) {
-        if (canceledJobs.contains(jobId)) {
+        if (canceledJobs.contains(jobId) || (durableJobs != null && !durableJobs.ownsLease(jobId))) {
             throw new ImportCanceledException();
         }
     }
@@ -431,17 +476,29 @@ public QuickImportJobStatus getJobStatus(String jobId, Long requestingUserId) {
         if (requestingUserId == null || !isJobOwner(jobId, requestingUserId)) {
             return null;
         }
+        if (!jobs.containsKey(jobId) && durableJobs != null) return durableJobs.read(jobId, requestingUserId);
         return sanitizeApiToken(jobId, resolveJobStatus(jobId));
     }
 
     private boolean isJobOwner(String jobId, Long userId) {
         Long owner = jobOwners.get(jobId);
-        return owner != null && owner.equals(userId);
+        return owner != null && owner.equals(userId)
+                || durableJobs != null && durableJobs.read(jobId, userId) != null;
     }
 
-    private QuickImportJobStatus resolveJobStatus(String jobId) {
+    private synchronized QuickImportJobStatus resolveJobStatus(String jobId) {
         QuickImportJobStatus job = jobs.get(jobId);
         if (job == null) return null;
+        if (durableJobs != null) {
+            QuickImportJobStatus persisted = durableJobs.read(jobId, jobOwners.get(jobId));
+            if (persisted != null && (persisted.getPhase() == Phase.FAILED
+                    || persisted.getPhase() == Phase.DONE && job.getPhase() != Phase.DONE)) {
+                jobs.put(jobId, persisted);
+                jobFinishedAt.putIfAbsent(jobId, Instant.now());
+                if (persisted.getPhase() == Phase.FAILED) canceledJobs.add(jobId);
+                return persisted;
+            }
+        }
 
         // Canceled jobs keep their stored terminal status — never resurrect ENRICHING → DONE.
         if (canceledJobs.contains(jobId)) {
@@ -461,7 +518,7 @@ private QuickImportJobStatus resolveJobStatus(String jobId) {
                         if (sr.getStatus() == ScanStatus.COMPLETED) {
                             // The CVE/license data pipeline is done — the job is DONE even though
                             // AI enrichment (aiStatus) may still be PENDING/RUNNING in the
-                            // background (D1: AI no longer blocks scan/job completion).
+                            // background — AI no longer blocks scan/job completion.
                             int count = current.getComponentCount() != null ? current.getComponentCount() : 0;
                             QuickImportJobStatus done = current.toBuilder()
                                     .phase(Phase.DONE)
@@ -490,7 +547,7 @@ private QuickImportJobStatus resolveJobStatus(String jobId) {
                         }
                         QuickImportJobStatus.QuickImportJobStatusBuilder enriching = current.toBuilder();
                         if (enrich != null) {
-                            // D3: the holder reports absolute 55–100 progress; clamp against the
+                            // the holder reports absolute 55–100 progress; clamp against the
                             // stored percent so a stale poll/SSE race can never move it backwards.
                             int jobPercent = current.getPercent() != null ? current.getPercent() : 0;
                             enriching.message(enrich.message())
@@ -514,8 +571,8 @@ private QuickImportJobStatus resolveJobStatus(String jobId) {
         // UI can flip "AI summary generating" -> done without the job itself changing phase again.
         if (current.getPhase() == Phase.DONE && current.getScanResultId() != null
                 && !isTerminalAiStatus(current.getAiStatus())) {
-            // D2: AI previews/detail lines keep streaming after DONE (D1 moved AI past the
-            // data pipeline), so merge the live snapshot while AI is still running.
+            // AI previews/detail lines keep streaming after DONE (AI completion no longer gates
+            // the job's own DONE transition), so merge the live snapshot while AI is still running.
             EnrichmentProgressHolder.Snapshot enrich =
                     enrichmentProgressHolder.getSnapshot(current.getScanResultId());
             return scanResultRepository.findById(current.getScanResultId())
@@ -841,7 +898,7 @@ private void runImport(String jobId, String repoUrl, String branch, Long userId)
             advanceJob(jobId, Phase.PARSING, null, null, null, null, null, null, null);
 
             long parseStartMs = System.currentTimeMillis();
-            // D3: manifest N/M progress fills the PARSING band (20–40).
+            // manifest N/M progress fills the PARSING band (20–40).
             DependencyManifestParserService.ParseResult deps =
                     dependencyManifestParserService.parseDependencies(cloneDir, parsed.owner + "/" + parsed.repo,
                             (done, total) -> reportJobProgress(jobId,
@@ -865,9 +922,20 @@ private void runImport(String jobId, String repoUrl, String branch, Long userId)
 
             String scanVersion = branch != null && !branch.isBlank() ? branch : "default";
             ScanPayload payload = dependencyManifestParserService.buildScanPayload(deps, scanVersion);
+            var sourceRun = new java.util.concurrent.atomic.AtomicReference();
             long ingestStartMs = System.currentTimeMillis();
             try {
-                scanResult = scanIngestService.ingest(project.getId(), payload);
+                throwIfCanceled(jobId);
+                scanResult = durableJobs != null
+                        ? durableJobs.fenced(jobId, () -> {
+                            ScanResult submitted = scanIngestService.ingest(project.getId(), payload);
+                            sourceRun.set(secretIacScanService.markPending(submitted.getId()));
+                            return submitted;
+                        })
+                        : scanIngestService.ingest(project.getId(), payload);
+                Long persistedScanId = scanResult.getId();
+                patchJobQuiet(jobId, b -> b.scanResultId(persistedScanId));
+                if (durableJobs != null) durableJobs.publish(jobs.get(jobId));
             } catch (Exception ingestEx) {
                 // The project will appear on the Projects page with a "No scan data" indicator.
                 // The user can re-import to retry.
@@ -892,6 +960,18 @@ private void runImport(String jobId, String repoUrl, String branch, Long userId)
                     project.getId().toString(), scanVersion,
                     "source=quick-import scanId=" + scanResult.getId());
 
+            // 6b. Secret / IaC misconfiguration scan — runs while the clone still exists,
+            // best-effort only, never fails the import.
+            throwIfCanceled(jobId);
+            boolean findingsStored = secretIacScanService.scanAndPersist(cloneDir, scanResult.getId(), sourceRun.get());
+
+            // Source references use available checkout files without executing repository code.
+            throwIfCanceled(jobId);
+            if (findingsStored) {
+                sourceReachabilityService.analyzeAndPersist(cloneDir, scanResult.getId());
+                secretIacScanService.completeSourceScan(scanResult.getId(), sourceRun.get());
+            }
+
             // 7. Wait for async enrichment (vulnerability analysis + AI) ──
             advanceJob(jobId, Phase.ENRICHING, project.getId(), project.getName(),
                     keyResult.token, keyResult.isNew,
@@ -1090,8 +1170,8 @@ private void advanceJob(String jobId, Phase phase,
                           String apiToken, Boolean newApiKey,
                           String ecosystem, Integer componentCount,
                           Long scanResultId) {
-        QuickImportJobStatus prev = jobs.getOrDefault(jobId,
-                baseJobBuilder(jobId).phase(Phase.QUEUED).build());
+        QuickImportJobStatus prev = jobs.get(jobId);
+        if (prev == null || prev.getPhase() == Phase.DONE || prev.getPhase() == Phase.FAILED) return;
         if (scanResultId != null) {
             jobIdByScanResultId.put(scanResultId, jobId);
         }
@@ -1123,8 +1203,8 @@ private void failJob(String jobId, String messageKey, List messageArgs,
                          String apiToken, Boolean newApiKey,
                          String ecosystem, Integer componentCount,
                          Long scanResultId) {
-        QuickImportJobStatus prev = jobs.getOrDefault(jobId,
-                baseJobBuilder(jobId).phase(Phase.QUEUED).build());
+        QuickImportJobStatus prev = jobs.get(jobId);
+        if (prev == null || prev.getPhase() == Phase.DONE || prev.getPhase() == Phase.FAILED) return;
         patchJob(jobId, b -> {
             b.phase(Phase.FAILED)
                     .message(null)
@@ -1171,7 +1251,7 @@ private static String classifyFailureKey(Throwable t) {
         return QuickImportMessageKeys.UNEXPECTED;
     }
 
-    private void patchJob(String jobId, Consumer patch) {
+    private synchronized void patchJob(String jobId, Consumer patch) {
         // Once canceled, ignore any further status writes from the background worker so the
         // terminal canceled state cannot be overwritten (e.g. a clone finishing after cancel).
         if (canceledJobs.contains(jobId)) {
@@ -1183,14 +1263,14 @@ private void patchJob(String jobId, Consumer patch) {
+    private synchronized void patchJobQuiet(String jobId, Consumer patch) {
         if (canceledJobs.contains(jobId)) {
             return;
         }
-        QuickImportJobStatus prev = jobs.getOrDefault(jobId,
-                baseJobBuilder(jobId).phase(Phase.QUEUED).build());
+        QuickImportJobStatus prev = jobs.get(jobId);
+        if (prev == null || prev.getPhase() == Phase.DONE || prev.getPhase() == Phase.FAILED) return;
         QuickImportJobStatus.QuickImportJobStatusBuilder builder = prev.toBuilder();
         patch.accept(builder);
         builder.activeSlotsUsed(runningImports.get())
@@ -1235,7 +1315,7 @@ private int countUserRunningJobs(Long userId) {
         return count;
     }
 
-    private void refreshQueuePositions() {
+    private synchronized void refreshQueuePositions() {
         int position = runningImports.get() + 1;
         for (PendingImport pending : pendingQueue) {
             QuickImportJobStatus job = jobs.get(pending.jobId());
@@ -1255,7 +1335,7 @@ private void refreshQueuePositions() {
     }
 
     /**
-     * Phase-entry percents (D3). Each phase owns a band that in-phase progress signals fill:
+     * Phase-entry percents. Each phase owns a band that in-phase progress signals fill:
      * CLONING 5–20, PARSING 20–40 (manifests N/M), SCANNING 40–55, ENRICHING 55–100
      * (data fetch 55–80 via EnrichmentProgressHolder, AI blocks 80–100).
      */
@@ -1282,6 +1362,13 @@ private static String extractRepoLabel(String repoUrl) {
     }
 
     private void notifyJobUpdate(String jobId) {
+        QuickImportJobStatus stored = jobs.get(jobId);
+        if (stored != null && (stored.getPhase() == Phase.DONE || stored.getPhase() == Phase.FAILED))
+            jobFinishedAt.putIfAbsent(jobId, Instant.now());
+        if (durableJobs != null && stored != null && publishedPhases.get(jobId) != stored.getPhase()) {
+            durableJobs.publish(stored);
+            publishedPhases.put(jobId, stored.getPhase());
+        }
         CopyOnWriteArrayList emitters = jobEmitters.get(jobId);
         if (emitters == null || emitters.isEmpty()) return;
         Long owner = jobOwners.get(jobId);
@@ -1302,24 +1389,69 @@ private void notifyJobUpdate(String jobId) {
 
     private void removeEmitter(String jobId, SseEmitter emitter) {
         CopyOnWriteArrayList list = jobEmitters.get(jobId);
-        if (list != null) list.remove(emitter);
+        if (list != null) {
+            list.remove(emitter);
+            if (list.isEmpty() && jobEmitters.remove(jobId, list)) streamOwners.remove(jobId);
+        }
+    }
+
+    public void maintainDurableJobs() {
+        sendStreamHeartbeats();
+        if (durableJobs == null) return;
+        for (String id : List.copyOf(jobs.keySet())) {
+            QuickImportJobStatus cached = jobs.get(id);
+            if (cached == null || cached.getPhase() == Phase.FAILED
+                    || cached.getPhase() == Phase.DONE && isTerminalAiStatus(cached.getAiStatus())) continue;
+            QuickImportJobStatus status = resolveJobStatus(id);
+            if (status != null) durableJobs.publish(status);
+        }
+        for (var entry : streamOwners.entrySet()) {
+            if (jobs.containsKey(entry.getKey())) continue;
+            QuickImportJobStatus status = durableJobs.read(entry.getKey(), entry.getValue());
+            for (SseEmitter emitter : jobEmitters.getOrDefault(entry.getKey(), new CopyOnWriteArrayList<>())) {
+                try {
+                    if (status == null) emitter.complete();
+                    else emitter.send(SseEmitter.event().name("job-update").data(status, MediaType.APPLICATION_JSON));
+                } catch (Exception e) { removeEmitter(entry.getKey(), emitter); }
+            }
+        }
+        dispatchQueue();
+    }
+
+    /** Keeps healthy SSE connections distinguishable from stalled proxies without polling job state. */
+    private void sendStreamHeartbeats() {
+        for (var entry : jobEmitters.entrySet()) {
+            for (SseEmitter emitter : entry.getValue()) {
+                try {
+                    emitter.send(SseEmitter.event().name("heartbeat").data("ok"));
+                } catch (Exception e) {
+                    removeEmitter(entry.getKey(), emitter);
+                }
+            }
+        }
     }
 
-    /** Removes jobs older than 30 minutes from memory. Runs every 5 minutes. */
+    /** Retains active work; terminal snapshots expire relative to completion, not admission. */
     @Scheduled(fixedDelay = 5, timeUnit = TimeUnit.MINUTES)
-    public void evictExpiredJobs() {
+    public synchronized void evictExpiredJobs() {
         Instant cutoff = Instant.now().minus(Duration.ofMinutes(30));
-        jobCreatedAt.entrySet().removeIf(entry -> {
-            if (entry.getValue().isBefore(cutoff)) {
-                purgeJobFromMemory(entry.getKey());
-                return true;
+        jobs.forEach((id, status) -> {
+            if (status.getPhase() == Phase.DONE || status.getPhase() == Phase.FAILED) {
+                jobFinishedAt.putIfAbsent(id, Instant.now());
             }
-            return false;
+        });
+        jobFinishedAt.entrySet().removeIf(entry -> {
+            if (!entry.getValue().isBefore(cutoff)) return false;
+            purgeJobFromMemory(entry.getKey());
+            jobCreatedAt.remove(entry.getKey());
+            return true;
         });
     }
 
     /** Drops all in-memory references for a job (status, SSE, per-user index). */
     private void purgeJobFromMemory(String jobId) {
+        publishedPhases.remove(jobId);
+        streamOwners.remove(jobId);
         disposeJobEmitters(jobId);
         Long ownerId = jobOwners.get(jobId);
         if (ownerId != null) {
diff --git a/src/main/java/com/salkcoding/oswl/service/SbomImportService.java b/src/main/java/com/salkcoding/oswl/service/ingest/SbomImportService.java
similarity index 93%
rename from src/main/java/com/salkcoding/oswl/service/SbomImportService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/SbomImportService.java
index a3995289..af88339f 100644
--- a/src/main/java/com/salkcoding/oswl/service/SbomImportService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/SbomImportService.java
@@ -1,13 +1,15 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
+import com.salkcoding.oswl.service.project.ProjectService;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
 
 import com.github.packageurl.PackageURL;
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.scan.ScanPayload;
 import com.salkcoding.oswl.dto.scan.ScanPayload.ComponentPayload;
 import com.salkcoding.oswl.exception.InvalidRequestException;
-import com.salkcoding.oswl.repository.ProjectRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.cyclonedx.exception.ParseException;
@@ -29,7 +31,8 @@
  * {@link ScanIngestService} pipeline as Quick Import / CLI scans, so storage and async
  * enrichment behave identically.
  *
- * Raw lock files (composer.lock / conan.lock) are also accepted: they are parsed with
+ * Raw lock files (composer.lock / conan.lock / Podfile.lock / conda-lock.yml / pixi.lock /
+ * a `conda list --explicit` spec) are also accepted: they are parsed with
  * {@link DependencyManifestParserService} and imported through the same pipeline.
  *
  * Components without a purl, or with a purl type outside the supported ecosystems, are
@@ -72,7 +75,8 @@ public SbomImportResult importSbom(Long projectId, String projectName, String ve
             throw new InvalidRequestException("SBOM file exceeds the 20 MB limit");
         }
 
-        // Raw lock-file upload (composer.lock / conan.lock) — manifest parser, same ingest pipeline.
+        // Raw lock-file upload (composer.lock / conan.lock / Podfile.lock / conda formats) —
+        // manifest parser, same ingest pipeline.
         List lockComponents =
                 dependencyManifestParserService.parseUploadedLockFile(content, "sbom-upload");
         if (lockComponents != null) {
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanApiCredentialThrottleService.java b/src/main/java/com/salkcoding/oswl/service/ingest/ScanApiCredentialThrottleService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/ScanApiCredentialThrottleService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/ScanApiCredentialThrottleService.java
index b2bb0bac..a43d7ce5 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanApiCredentialThrottleService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/ScanApiCredentialThrottleService.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
 
 import com.salkcoding.oswl.exception.TooManyRequestsException;
 import lombok.extern.slf4j.Slf4j;
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanIngestService.java b/src/main/java/com/salkcoding/oswl/service/ingest/ScanIngestService.java
similarity index 66%
rename from src/main/java/com/salkcoding/oswl/service/ScanIngestService.java
rename to src/main/java/com/salkcoding/oswl/service/ingest/ScanIngestService.java
index a6886df4..4a77a055 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanIngestService.java
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/ScanIngestService.java
@@ -1,20 +1,22 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.ingest;
+import com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService;
+import com.salkcoding.oswl.service.apikey.ProjectCliKeyPolicyService;
 
-import com.salkcoding.oswl.domain.entity.DependencyPath;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.scan.DependencyPath;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.LicenseStatus;
 import com.salkcoding.oswl.dto.scan.ScanPayload;
-import com.salkcoding.oswl.repository.DependencyPathRepository;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.scan.DependencyPathRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
-import org.springframework.dao.DataIntegrityViolationException;
 import org.springframework.data.jpa.repository.JpaRepository;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
@@ -42,9 +44,13 @@ public class ScanIngestService {
     private final ScanComponentRepository         scanComponentRepository;
     private final DependencyPathRepository        dependencyPathRepository;
     private final LibraryRepository               libraryRepository;
+    private final com.salkcoding.oswl.repository.vulnerability.LibraryCatalogRepository libraryCatalogRepository;
     private final ProjectRepository               projectRepository;
     private final VulnerabilityEnrichmentService  enrichmentService;
     private final ProjectCliKeyPolicyService      projectCliKeyPolicyService;
+    /** Null in plain-Mockito unit tests (no Spring context) — every use is guarded. */
+    private final OswlMetrics                     oswlMetrics;
+    private final ImportJobStore importJobs;
 
     /**
      * Persists the scan payload and kicks off async enrichment.
@@ -55,7 +61,7 @@ public class ScanIngestService {
      */
     @Transactional
     public ScanResult ingest(Long projectId, ScanPayload payload) {
-        Project project = projectRepository.findById(projectId)
+        Project project = projectRepository.lockForScanIngest(projectId)
                 .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
 
         projectCliKeyPolicyService.assertScanIngestAllowed(projectId);
@@ -66,13 +72,26 @@ public ScanResult ingest(Long projectId, ScanPayload payload) {
         ScanResult scanResult;
         boolean rescan = false;
         if (incomingVersion != null) {
-            var existingOpt = scanResultRepository.findByProjectIdAndVersion(projectId, incomingVersion);
+            var existingOpt = scanResultRepository.lockForRescan(projectId, incomingVersion);
             if (existingOpt.isPresent()) {
                 rescan = true;
                 ScanResult existing = existingOpt.get();
-                existing.getComponents().clear();
-                existing.resetForRescan();
-                scanResult = existing;
+                if (importJobs.hasActiveSourceScan(existing.getId()))
+                    throw new com.salkcoding.oswl.exception.ConflictException("This scan version is still being inspected; retry after it finishes");
+                if (existing.getStatus() != com.salkcoding.oswl.domain.enums.ScanStatus.COMPLETED
+                        || existing.getAiStatus() == com.salkcoding.oswl.domain.enums.AiEnrichmentStatus.PENDING
+                        || existing.getAiStatus() == com.salkcoding.oswl.domain.enums.AiEnrichmentStatus.RUNNING
+                        || existing.getFindings().stream().anyMatch(f -> "source-scan-pending".equals(f.getRuleId()))) {
+                    // An interrupted process has no reliable completion signal. Keep its
+                    // result isolated so a retry works and a delayed worker cannot overwrite it.
+                    scanResult = scanResultRepository.save(ScanResult.builder()
+                            .project(project).version(incomingVersion).build());
+                } else {
+                    existing.getComponents().clear();
+                    existing.getFindings().clear();
+                    existing.resetForRescan();
+                    scanResult = existing;
+                }
             } else {
                 scanResult = scanResultRepository.save(ScanResult.builder()
                         .project(project)
@@ -92,7 +111,7 @@ public ScanResult ingest(Long projectId, ScanPayload payload) {
         scanResult.startScanning();
         scanResultRepository.save(scanResult);
 
-        // Save ScanComponents — resolve all Library rows with one bulk query first (A6)
+        // Save ScanComponents — resolve all Library rows with one bulk query first
         if (payload.getComponents() != null && !payload.getComponents().isEmpty()) {
             Map librariesByKey = resolveLibraries(payload.getComponents());
 
@@ -131,6 +150,7 @@ public ScanResult ingest(Long projectId, ScanPayload payload) {
             // Chunked bulk save — ScanComponents first so DependencyPaths can reference their IDs
             saveInChunks(scanComponentRepository, scanComponents);
             saveInChunks(dependencyPathRepository, dependencyPaths);
+            recordComponentsIngested(payload.getComponents());
         }
 
         log.info("[ScanIngest] projectId={} scanId={} version={} components={} rescan={} status=SCANNING — enrichment pending",
@@ -198,55 +218,48 @@ private Map resolveLibraries(List e : distinctByKey.entrySet()) {
+            List manifestLicenses = e.getValue().getLicenses();
+            if (manifestLicenses == null || manifestLicenses.isEmpty()) {
+                continue;
+            }
+            Library library = resolved.get(e.getKey());
+            if (library == null || (library.getLicenseName() != null && !library.getLicenseName().isBlank())) {
+                continue;
+            }
+            library.updateLicense(String.join(" AND ", manifestLicenses), manifestLicenses, LicenseStatus.UNKNOWN);
+            libraryRepository.save(library);
+        }
         return resolved;
     }
 
-    /**
-     * Inserts the missing Library rows in one saveAll(). When a concurrent ingest commits the same
-     * (name, version, ecosystem) first, the unique constraint violation is caught and each row goes
-     * through the original per-row save + re-read fallback, so the winner's row is reused (once)
-     * instead of failing the scan with a 500.
-     */
+    /** Native conflict handling leaves the surrounding scan transaction and JPA session usable. */
     private List createLibraries(Map missingByKey) {
         List missing = missingByKey.entrySet().stream()
-                .map(e -> Library.builder()
-                        .name(e.getValue().getName())
-                        .version(e.getValue().getVersion())
-                        .ecosystem(e.getKey().ecosystem())
-                        .licenseStatus(LicenseStatus.UNKNOWN)
-                        .build())
+                .map(e -> Library.builder().name(e.getValue().getName()).version(e.getValue().getVersion())
+                        .ecosystem(e.getKey().ecosystem()).licenseStatus(LicenseStatus.UNKNOWN).build()).toList();
+        libraryCatalogRepository.ensurePresent(missing);
+        return libraryRepository.findByNameIn(missing.stream().map(Library::getName).distinct().toList()).stream()
+                .filter(library -> missingByKey.containsKey(new LibraryKey(library.getName(), library.getVersion(), library.getEcosystem())))
                 .toList();
-        try {
-            libraryRepository.saveAll(missing);
-            return missing;
-        } catch (DataIntegrityViolationException duplicate) {
-            List created = new ArrayList<>(missingByKey.size());
-            for (Map.Entry e : missingByKey.entrySet()) {
-                created.add(createLibrary(e.getValue(), e.getKey().ecosystem()));
-            }
-            return created;
-        }
     }
 
-    /**
-     * Inserts the Library row. When a concurrent ingest commits the same
-     * (name, version, ecosystem) first, the unique constraint violation is caught
-     * and the winner's row is re-read (once) instead of failing the scan with a 500.
-     * The IDENTITY key makes the INSERT execute (and fail) right at save().
-     */
-    private Library createLibrary(ScanPayload.ComponentPayload cp, String eco) {
-        try {
-            return libraryRepository.save(Library.builder()
-                    .name(cp.getName())
-                    .version(cp.getVersion())
-                    .ecosystem(eco)
-                    .licenseStatus(LicenseStatus.UNKNOWN)
-                    .build());
-        } catch (DataIntegrityViolationException duplicate) {
-            return libraryRepository
-                    .findByNameAndVersionAndEcosystem(cp.getName(), cp.getVersion(), eco)
-                    .orElseThrow(() -> duplicate);
+    /** Per-ecosystem ingest counter — one increment per ecosystem per scan, not per component. */
+    private void recordComponentsIngested(List components) {
+        if (oswlMetrics == null) {
+            return;
+        }
+        Map countByEcosystem = new HashMap<>();
+        for (ScanPayload.ComponentPayload cp : components) {
+            if (cp.getEcosystem() != null) {
+                countByEcosystem.merge(cp.getEcosystem(), 1, Integer::sum);
+            }
         }
+        countByEcosystem.forEach(oswlMetrics::recordComponentsIngested);
     }
 
     /** Persists in fixed-size chunks so a large payload does not build one giant saveAll() batch. */
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/CargoManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CargoManifestParser.java
new file mode 100644
index 00000000..f551b305
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CargoManifestParser.java
@@ -0,0 +1,105 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+
+@Slf4j
+public class CargoManifestParser {
+
+    public List parseCargoToml(Path dir, String repoName) {
+        // Static Cargo.toml — handles inline string form and table form:
+        //   foo = "1.0"
+        //   foo = { version = "1.0", features = [...] }
+        //   foo = { git = "..." }   (no version → skip)
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        try {
+            List lines = Files.readAllLines(dir.resolve("Cargo.toml"), StandardCharsets.UTF_8);
+            boolean inDeps = false;
+            // Inline-string form: foo = "1.2.3-rc1+build"
+            Pattern inlineP = Pattern.compile("^([\\w\\-]+)\\s*=\\s*[\"']([\\w.+\\-]+)[\"']\\s*$");
+            // Table form: foo = { version = "1.2.3", ... }
+            Pattern tableP  = Pattern.compile("^([\\w\\-]+)\\s*=\\s*\\{[^}]*\\bversion\\s*=\\s*[\"']([\\w.+\\-]+)[\"']");
+            // Sub-table header: [dependencies.foo]
+            Pattern subHeaderP = Pattern.compile("^\\[(?:dev-|build-)?dependencies\\.([\\w\\-]+)]");
+            String pendingSubName = null;
+            Pattern verLineP = Pattern.compile("^version\\s*=\\s*[\"']([\\w.+\\-]+)[\"']");
+            for (String rawLine : lines) {
+                String trimmed = rawLine.trim();
+                if (trimmed.isEmpty() || trimmed.startsWith("#")) continue;
+                // Section headers
+                if (trimmed.startsWith("[")) {
+                    if (trimmed.equals("[dependencies]") || trimmed.equals("[dev-dependencies]")
+                            || trimmed.equals("[build-dependencies]")) {
+                        inDeps = true;
+                        pendingSubName = null;
+                        continue;
+                    }
+                    Matcher sh = subHeaderP.matcher(trimmed);
+                    if (sh.find()) {
+                        pendingSubName = sh.group(1);
+                        inDeps = false;
+                        continue;
+                    }
+                    inDeps = false;
+                    pendingSubName = null;
+                    continue;
+                }
+                if (inDeps) {
+                    Matcher t = tableP.matcher(trimmed);
+                    if (t.find()) {
+                        if (seen.add(t.group(1))) comps.add(buildComponent(t.group(1), t.group(2), "CARGO"));
+                        continue;
+                    }
+                    Matcher i = inlineP.matcher(trimmed);
+                    if (i.find()) {
+                        if (seen.add(i.group(1))) comps.add(buildComponent(i.group(1), i.group(2), "CARGO"));
+                    }
+                } else if (pendingSubName != null) {
+                    Matcher v = verLineP.matcher(trimmed);
+                    if (v.find()) {
+                        if (seen.add(pendingSubName)) comps.add(buildComponent(pendingSubName, v.group(1), "CARGO"));
+                        pendingSubName = null;
+                    }
+                }
+            }
+            log.info("[DependencyParser][Cargo] Parsed {} components from Cargo.toml in '{}'", comps.size(), repoName);
+        } catch (Exception e) {
+            log.error("[DependencyParser][Cargo] Failed to parse Cargo.toml: {}", e.getMessage());
+        }
+        return comps;
+    }
+
+    public List parseTomlPackageLock(Path lockFile, String ecosystem, String repoName) {
+        try {
+            String content = Files.readString(lockFile, StandardCharsets.UTF_8);
+            String[] blocks = content.split("\\[\\[package\\]\\]");
+            List comps = new ArrayList<>();
+            Pattern nameP = Pattern.compile("\\bname\\s*=\\s*\"([^\"]+)\"");
+            Pattern verP  = Pattern.compile("\\bversion\\s*=\\s*\"([^\"]+)\"");
+            for (int i = 1; i < blocks.length; i++) {
+                Matcher nm = nameP.matcher(blocks[i]);
+                Matcher vm = verP.matcher(blocks[i]);
+                if (nm.find() && vm.find()) {
+                    comps.add(buildComponent(nm.group(1), vm.group(1), ecosystem));
+                }
+            }
+            log.info("[DependencyParser][{}] Parsed {} components from {} in '{}'",
+                    ecosystem, comps.size(), lockFile.getFileName(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser] Failed to parse {}: {}", lockFile.getFileName(), e.getMessage());
+            return null;
+        }
+    }
+
+    public static String stripQuotes(String s) { return PythonManifestParser.stripQuotes(s); }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/CocoaPodsLockParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CocoaPodsLockParser.java
new file mode 100644
index 00000000..5d6091bc
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CocoaPodsLockParser.java
@@ -0,0 +1,56 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import org.yaml.snakeyaml.*;
+
+@Slf4j
+public class CocoaPodsLockParser {
+    private static final Pattern PODFILE_TOP_LEVEL_POD =
+            Pattern.compile("^ {2}- ([A-Za-z0-9_.+-]+)(?:/[A-Za-z0-9_.+-]+)?\\s+\\(([^)]+)\\):?\\s*$");
+
+    public List parsePodfileLock(Path dir, String repoName) {
+        try {
+            List lines = Files.readAllLines(dir.resolve("Podfile.lock"), StandardCharsets.UTF_8);
+            return parsePodfileLockLines(lines, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][CocoaPods] Failed to parse Podfile.lock for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parsePodfileLockLines(List lines, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        boolean inPods = false;
+        for (String line : lines) {
+            if (!inPods) {
+                if (line.strip().equals("PODS:")) inPods = true;
+                continue;
+            }
+            if (!line.isEmpty() && !Character.isWhitespace(line.charAt(0))) {
+                break; // reached the next top-level section (DEPENDENCIES:, SPEC REPOS:, ...)
+            }
+            Matcher m = PODFILE_TOP_LEVEL_POD.matcher(line);
+            if (!m.matches()) continue;
+            String name = m.group(1);
+            String version = m.group(2).trim();
+            // A pod pinned to a git ref/branch/podspec path has no released version here
+            // (e.g. "MyPod (from `https://github.com/...`, branch `main`)") — skip it rather
+            // than feed a non-existent version into the Specs trunk lookup.
+            if (!version.matches("[0-9][0-9A-Za-z.+-]*")) continue;
+            if (seen.add(name + ":" + version)) {
+                comps.add(buildComponent(name, version, "COCOAPODS"));
+            }
+        }
+        log.info("[DependencyParser][CocoaPods] Parsed {} components from Podfile.lock in '{}'", comps.size(), repoName);
+        return comps;
+    }
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/ComposerLockParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ComposerLockParser.java
new file mode 100644
index 00000000..83bb6307
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ComposerLockParser.java
@@ -0,0 +1,79 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.util.*;
+import java.util.regex.*;
+import org.yaml.snakeyaml.*;
+
+@Slf4j
+public class ComposerLockParser {
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    public List parseComposerLock(Path dir, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("composer.lock").toFile());
+            return parseComposerLockJson(root, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Composer] Failed to parse composer.lock for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parseComposerLockJson(JsonNode root, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        addComposerPackages(comps, seen, root.path("packages"), null);
+        addComposerPackages(comps, seen, root.path("packages-dev"), "dev");
+        log.info("[DependencyParser][Composer] Parsed {} components from composer.lock in '{}'", comps.size(), repoName);
+        return comps;
+    }
+
+    public void addComposerPackages(List comps, Set seen,
+                                     JsonNode packages, String scope) {
+        if (packages == null || !packages.isArray()) {
+            return;
+        }
+        for (JsonNode pkg : packages) {
+            String name    = pkg.path("name").asText(null);
+            String version = normalizeComposerVersion(pkg.path("version").asText(null));
+            if (name == null || name.isBlank() || version == null || version.isBlank()) {
+                continue;
+            }
+            if (seen.add(name + ":" + version)) {
+                comps.add(buildComponent(name, version, "COMPOSER")
+                        .withScope(scope)
+                        .withLicenses(extractComposerLicenses(pkg)));
+            }
+        }
+    }
+
+    public static List extractComposerLicenses(JsonNode pkg) {
+        JsonNode license = pkg.path("license");
+        if (!license.isArray() || license.isEmpty()) {
+            return null;
+        }
+        List licenses = new ArrayList<>();
+        for (JsonNode entry : license) {
+            String value = entry.asText(null);
+            if (value != null && !value.isBlank()) {
+                licenses.add(value.strip());
+            }
+        }
+        return licenses.isEmpty() ? null : licenses;
+    }
+
+    public static String normalizeComposerVersion(String version) {
+        if (version != null && version.length() > 1
+                && version.charAt(0) == 'v' && Character.isDigit(version.charAt(1))) {
+            return version.substring(1);
+        }
+        return version;
+    }
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/ConanLockParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ConanLockParser.java
new file mode 100644
index 00000000..cdc64cdd
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ConanLockParser.java
@@ -0,0 +1,80 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.util.*;
+import java.util.regex.*;
+import org.yaml.snakeyaml.*;
+
+@Slf4j
+public class ConanLockParser {
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    public List parseConanLock(Path dir, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("conan.lock").toFile());
+            return parseConanLockJson(root, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Conan] Failed to parse conan.lock for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parseConanLockJson(JsonNode root, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        if (root.has("graph_lock")) {
+            root.path("graph_lock").path("nodes").properties().forEach(e ->
+                    addConanRef(comps, seen, e.getValue().path("ref").asText(null), null));
+        } else {
+            addConanRefs(comps, seen, root.path("requires"), null);
+            addConanRefs(comps, seen, root.path("build_requires"), "dev");
+        }
+        log.info("[DependencyParser][Conan] Parsed {} components from conan.lock in '{}'", comps.size(), repoName);
+        return comps;
+    }
+
+    public void addConanRefs(List comps, Set seen,
+                              JsonNode refs, String scope) {
+        if (refs == null || !refs.isArray()) {
+            return;
+        }
+        for (JsonNode ref : refs) {
+            addConanRef(comps, seen, ref.asText(null), scope);
+        }
+    }
+
+    public void addConanRef(List comps, Set seen,
+                             String ref, String scope) {
+        if (ref == null || ref.isBlank()) {
+            return;
+        }
+        String r = ref.trim();
+        int hash = r.indexOf('#');
+        if (hash >= 0) {
+            r = r.substring(0, hash); // strip #revision%timestamp
+        }
+        int at = r.indexOf('@');
+        if (at >= 0) {
+            r = r.substring(0, at); // strip @user/channel
+        }
+        int slash = r.indexOf('/');
+        if (slash <= 0 || slash == r.length() - 1) {
+            return;
+        }
+        String name    = r.substring(0, slash).trim();
+        String version = r.substring(slash + 1).trim();
+        if (name.isBlank() || version.isBlank()) {
+            return;
+        }
+        if (seen.add(name + ":" + version)) {
+            comps.add(buildComponent(name, version, "CONAN").withScope(scope));
+        }
+    }
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/CondaLockParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CondaLockParser.java
new file mode 100644
index 00000000..3cfde609
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/CondaLockParser.java
@@ -0,0 +1,160 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.CondaPypiMappingService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import org.yaml.snakeyaml.*;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
+
+@Slf4j
+@RequiredArgsConstructor
+public class CondaLockParser {
+    private final CondaPypiMappingService condaPypiMappingService;
+
+    public List parseCondaLock(Path dir, String repoName) {
+        try (var reader = Files.newBufferedReader(dir.resolve("conda-lock.yml"), StandardCharsets.UTF_8)) {
+            Object parsed = new Yaml(new SafeConstructor(new LoaderOptions())).load(reader);
+            if (!(parsed instanceof Map root)) {
+                return null;
+            }
+            return parseCondaLockYaml(root, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Conda] Failed to parse conda-lock.yml for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parseCondaLockYaml(Map root, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        Object packagesObj = root.get("package");
+        if (packagesObj instanceof List packages) {
+            for (Object pkgObj : packages) {
+                if (!(pkgObj instanceof Map pkg)) continue;
+                String name = yamlString(pkg.get("name"));
+                String version = yamlString(pkg.get("version"));
+                String manager = yamlString(pkg.get("manager"));
+                if (name == null || name.isBlank() || version == null || version.isBlank()) continue;
+                if (!seen.add(name.toLowerCase(Locale.ROOT) + ":" + version)) continue;
+
+                if ("pip".equalsIgnoreCase(manager)) {
+                    comps.add(buildComponent(name, version, "PYPI"));
+                    continue;
+                }
+                String pypiName = condaPypiMappingService.resolvePypiName(name);
+                comps.add(pypiName != null
+                        ? buildComponent(pypiName, version, "PYPI")
+                        : buildComponent(name, version, "CONDA"));
+            }
+        }
+        log.info("[DependencyParser][Conda] Parsed {} components from conda-lock.yml in '{}'", comps.size(), repoName);
+        return comps;
+    }
+
+    public static String yamlString(Object value) {
+        return value == null ? null : String.valueOf(value);
+    }
+
+    public List parsePixiLock(Path dir, String repoName) {
+        try (var reader = Files.newBufferedReader(dir.resolve("pixi.lock"), StandardCharsets.UTF_8)) {
+            Object parsed = new Yaml(new SafeConstructor(new LoaderOptions())).load(reader);
+            if (!(parsed instanceof Map root)) {
+                return null;
+            }
+            return parsePixiLockYaml(root, repoName);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Conda] Failed to parse pixi.lock for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parsePixiLockYaml(Map root, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        if (root.get("environments") instanceof Map environments) {
+            for (Object envObj : environments.values()) {
+                if (!(envObj instanceof Map env)) continue;
+                if (!(env.get("packages") instanceof Map byPlatform)) continue;
+                for (Object listObj : byPlatform.values()) {
+                    if (!(listObj instanceof List entries)) continue;
+                    for (Object entryObj : entries) {
+                        if (!(entryObj instanceof Map entry)) continue;
+                        String name = null;
+                        String version = null;
+                        boolean pypi = entry.get("pypi") != null;
+                        if (pypi) {
+                            name = yamlString(entry.get("name"));
+                            version = yamlString(entry.get("version"));
+                        } else if (entry.get("conda") != null) {
+                            String[] nv = parseCondaPackageNameVersion(yamlString(entry.get("conda")));
+                            if (nv != null) {
+                                name = nv[0];
+                                version = nv[1];
+                            }
+                        }
+                        if (name == null || name.isBlank() || version == null || version.isBlank()) continue;
+                        if (!seen.add(name.toLowerCase(Locale.ROOT) + ":" + version)) continue;
+                        if (pypi) {
+                            comps.add(buildComponent(name, version, "PYPI"));
+                            continue;
+                        }
+                        String pypiName = condaPypiMappingService.resolvePypiName(name);
+                        comps.add(pypiName != null
+                                ? buildComponent(pypiName, version, "PYPI")
+                                : buildComponent(name, version, "CONDA"));
+                    }
+                }
+            }
+        }
+        log.info("[DependencyParser][Conda] Parsed {} components from pixi.lock in '{}'", comps.size(), repoName);
+        return comps;
+    }
+
+    public List parseCondaExplicitLines(List lines, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        for (String line : lines) {
+            String url = line.strip();
+            if (url.isEmpty() || url.startsWith("#") || url.startsWith("@")) continue;
+            String[] nv = parseCondaPackageNameVersion(url);
+            if (nv == null) continue;
+            if (!seen.add(nv[0].toLowerCase(Locale.ROOT) + ":" + nv[1])) continue;
+            String pypiName = condaPypiMappingService.resolvePypiName(nv[0]);
+            comps.add(pypiName != null
+                    ? buildComponent(pypiName, nv[1], "PYPI")
+                    : buildComponent(nv[0], nv[1], "CONDA"));
+        }
+        log.info("[DependencyParser][Conda] Parsed {} components from explicit spec in '{}'", comps.size(), repoName);
+        return comps;
+    }
+
+    public static String[] parseCondaPackageNameVersion(String urlOrFilename) {
+        if (urlOrFilename == null) return null;
+        String filename = urlOrFilename;
+        int slash = filename.lastIndexOf('/');
+        if (slash >= 0) filename = filename.substring(slash + 1);
+        if (filename.endsWith(".conda")) {
+            filename = filename.substring(0, filename.length() - ".conda".length());
+        } else if (filename.endsWith(".tar.bz2")) {
+            filename = filename.substring(0, filename.length() - ".tar.bz2".length());
+        } else {
+            return null;
+        }
+        int lastDash = filename.lastIndexOf('-');
+        if (lastDash <= 0) return null;
+        int prevDash = filename.lastIndexOf('-', lastDash - 1);
+        if (prevDash <= 0) return null;
+        String name = filename.substring(0, prevDash);
+        String version = filename.substring(prevDash + 1, lastDash);
+        if (name.isEmpty() || version.isEmpty() || !Character.isDigit(version.charAt(0))) return null;
+        return new String[]{name, version};
+    }
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/GoManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/GoManifestParser.java
new file mode 100644
index 00000000..e25f5dcc
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/GoManifestParser.java
@@ -0,0 +1,67 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+
+@Slf4j
+public class GoManifestParser {
+
+    public List parseGoModDeclared(Path dir, String repoName) {
+        // go.mod fallback — we trim each line first, so both block and single patterns
+        // match against the trimmed text.
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        try {
+            List lines = Files.readAllLines(dir.resolve("go.mod"), StandardCharsets.UTF_8);
+            boolean inRequire = false;
+            // "require module v1.2.3" (single) and inside a require( … ) block "module v1.2.3"
+            Pattern single = Pattern.compile("^require\\s+(\\S+)\\s+(v\\S+)");
+            Pattern entry  = Pattern.compile("^(\\S+)\\s+(v\\S+)");
+            for (String rawLine : lines) {
+                // Strip end-of-line comments (e.g. "// indirect") before parsing.
+                String t = rawLine;
+                int idx = t.indexOf("//");
+                if (idx >= 0) t = t.substring(0, idx);
+                t = t.trim();
+                if (t.isEmpty()) continue;
+                if (t.startsWith("require (")) { inRequire = true; continue; }
+                if (inRequire && t.equals(")"))                         { inRequire = false; continue; }
+                Matcher m = inRequire ? entry.matcher(t) : single.matcher(t);
+                if (m.find() && seen.add(m.group(1))) {
+                    comps.add(buildComponent(m.group(1), m.group(2), "GO"));
+                }
+            }
+            log.info("[DependencyParser][Go] Parsed {} components from go.mod in '{}'", comps.size(), repoName);
+        } catch (Exception e) {
+            log.error("[DependencyParser][Go] Failed to parse go.mod: {}", e.getMessage());
+        }
+        return comps;
+    }
+
+    public List parseGoSum(Path dir, String repoName) {
+        try {
+            Set seen = new LinkedHashSet<>();
+            List comps = new ArrayList<>();
+            Pattern p = Pattern.compile("^(\\S+)\\s+(v[^\\s/]+)(?:/go\\.mod)?\\s");
+            for (String line : Files.readAllLines(dir.resolve("go.sum"), StandardCharsets.UTF_8)) {
+                Matcher m = p.matcher(line);
+                if (m.find() && seen.add(m.group(1))) {
+                    comps.add(buildComponent(m.group(1), m.group(2), "GO"));
+                }
+            }
+            log.info("[DependencyParser][Go] Parsed {} components from go.sum in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Go] Failed to parse go.sum: {}", e.getMessage());
+            return null;
+        }
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestDiscovery.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestDiscovery.java
new file mode 100644
index 00000000..b6f07ff1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestDiscovery.java
@@ -0,0 +1,96 @@
+package com.salkcoding.oswl.service.ingest.parser;
+import com.salkcoding.oswl.service.git.CloneRootPathGuard;
+import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
+import org.jspecify.annotations.NonNull;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.file.attribute.BasicFileAttributes;
+import java.io.IOException;
+import java.util.*;
+@Slf4j
+public class ManifestDiscovery {
+    private static final Set MANIFEST_SKIP_DIRS = ManifestCollectRules.SKIP_DIRS;
+    public ManifestIndex buildIndex(Path root) {
+        Map> byFileName = new HashMap<>();
+        Map> bySuffix = new HashMap<>();
+        final Path rootReal;
+        try {
+            rootReal = new CloneRootPathGuard(root).root();
+        } catch (IOException e) {
+            log.warn("[DependencyParser] buildIndex: invalid clone root '{}': {}", root, e.getMessage());
+            return new ManifestIndex(root, byFileName, bySuffix);
+        }
+        try {
+            Files.walkFileTree(rootReal, new SimpleFileVisitor<>() {
+                @Override
+                public FileVisitResult preVisitDirectory(@NonNull Path dir, @NonNull BasicFileAttributes attrs) {
+                    if (!dir.equals(rootReal)) {
+                        Path rel = rootReal.relativize(dir);
+                        for (int i = 0; i < rel.getNameCount(); i++) {
+                            if (MANIFEST_SKIP_DIRS.contains(rel.getName(i).toString())) {
+                                return FileVisitResult.SKIP_SUBTREE;
+                            }
+                        }
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+
+                @Override
+                public FileVisitResult visitFile(@NonNull Path file, @NonNull BasicFileAttributes attrs) {
+                    try {
+                        Path fileReal = file.toRealPath(LinkOption.NOFOLLOW_LINKS);
+                        if (!fileReal.startsWith(rootReal)) {
+                            return FileVisitResult.CONTINUE;
+                        }
+                        Path rel = rootReal.relativize(fileReal);
+                        for (int i = 0; i < rel.getNameCount() - 1; i++) {
+                            if (MANIFEST_SKIP_DIRS.contains(rel.getName(i).toString())) {
+                                return FileVisitResult.CONTINUE;
+                            }
+                        }
+                        String name = fileReal.getFileName().toString();
+                        if (ManifestCollectRules.EXACT_FILE_NAMES.contains(name)) {
+                            byFileName.computeIfAbsent(name, k -> new ArrayList<>()).add(fileReal);
+                        }
+                        for (String suffix : ManifestCollectRules.FILE_SUFFIXES) {
+                            if (name.endsWith(suffix)) {
+                                bySuffix.computeIfAbsent(suffix, k -> new ArrayList<>()).add(fileReal);
+                            }
+                        }
+                    } catch (IOException e) {
+                        log.debug("[DependencyParser] skip file '{}': {}", file, e.getMessage());
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+            });
+        } catch (IOException e) {
+            log.warn("[DependencyParser] buildIndex error under '{}': {}", root, e.getMessage());
+        }
+        Comparator byPath = Comparator.comparing(Path::toString);
+        byFileName.values().forEach(paths -> paths.sort(byPath));
+        bySuffix.values().forEach(paths -> paths.sort(byPath));
+        return new ManifestIndex(rootReal, byFileName, bySuffix);
+    }
+
+    public List indexByNames(ManifestIndex index, String... fileNames) {
+        List result = new ArrayList<>();
+        for (String name : fileNames) {
+            result.addAll(index.byFileName().getOrDefault(name, List.of()));
+        }
+        result.sort(Comparator.comparing(Path::toString));
+        return result;
+    }
+
+    public List indexBySuffix(ManifestIndex index, String suffix) {
+        return index.bySuffix().getOrDefault(suffix, List.of());
+    }
+
+    public boolean hasCsprojFiles(ManifestIndex index) {
+        for (Path p : indexBySuffix(index, ".csproj")) {
+            if (index.root().relativize(p).getNameCount() <= 8) {
+                return true;
+            }
+        }
+        return false;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestIndex.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestIndex.java
new file mode 100644
index 00000000..fc1b5c2e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/ManifestIndex.java
@@ -0,0 +1,5 @@
+package com.salkcoding.oswl.service.ingest.parser;
+import java.nio.file.Path;
+import java.util.List;
+import java.util.Map;
+public record ManifestIndex(Path root, Map> byFileName, Map> bySuffix) {}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/MavenPomParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/MavenPomParser.java
new file mode 100644
index 00000000..62203600
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/MavenPomParser.java
@@ -0,0 +1,111 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.MavenBomVersionResolver;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.util.*;
+import java.util.regex.*;
+import org.w3c.dom.*;
+import javax.xml.parsers.DocumentBuilderFactory;
+
+@Slf4j
+@RequiredArgsConstructor
+public class MavenPomParser {
+    private final MavenBomVersionResolver bomVersionResolver;
+
+    public String getDirectChildText(Element parent, String tag) {
+        Element c = getDirectChild(parent, tag);
+        return c != null ? c.getTextContent().trim() : null;
+    }
+
+    public Element getDirectChild(Element parent, String tag) {
+        NodeList nl = parent.getChildNodes();
+        for (int i = 0; i < nl.getLength(); i++) {
+            if (nl.item(i) instanceof Element e && tag.equals(e.getTagName())) return e;
+        }
+        return null;
+    }
+
+    public String resolveProp(String raw, Map props) {
+        if (raw == null || !raw.contains("${")) return raw;
+        Matcher m = Pattern.compile("\\$\\{([^}]+)}").matcher(raw);
+        StringBuilder sb = new StringBuilder();
+        while (m.find()) {
+            String key = m.group(1);
+            String val = props.get(key);
+            m.appendReplacement(sb, Matcher.quoteReplacement(val != null ? val : m.group(0)));
+        }
+        m.appendTail(sb);
+        return sb.toString();
+    }
+
+    public List parseSingleMavenPom(Path pomFile, Path projectDir, String repoName) {
+        List comps = new ArrayList<>();
+        try {
+            DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
+            dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
+            dbf.setNamespaceAware(false);
+            Document doc = dbf.newDocumentBuilder().parse(pomFile.toFile());
+            doc.getDocumentElement().normalize();
+            Element project = doc.getDocumentElement();
+            Map props = new HashMap<>();
+            String projectVersion = getDirectChildText(project, "version");
+            Element parent = getDirectChild(project, "parent");
+            if (parent != null) {
+                String parentVersion = getDirectChildText(parent, "version");
+                if (projectVersion == null) projectVersion = parentVersion;
+                String parentGroup = getDirectChildText(parent, "groupId");
+                if (parentGroup != null) props.put("project.parent.groupId", parentGroup);
+                if (parentVersion != null) props.put("project.parent.version", parentVersion);
+            }
+            if (projectVersion != null) {
+                props.put("project.version", projectVersion);
+                props.put("version", projectVersion);
+                props.put("pom.version", projectVersion);
+            }
+            Element properties = getDirectChild(project, "properties");
+            if (properties != null) {
+                NodeList children = properties.getChildNodes();
+                for (int i = 0; i < children.getLength(); i++) {
+                    if (children.item(i) instanceof Element pe) {
+                        props.put(pe.getTagName(), pe.getTextContent().trim());
+                    }
+                }
+            }
+            Element depsRoot = getDirectChild(project, "dependencies");
+            if (depsRoot == null) return comps;
+            NodeList deps = depsRoot.getChildNodes();
+            for (int i = 0; i < deps.getLength(); i++) {
+                if (!(deps.item(i) instanceof Element dep) || !"dependency".equals(dep.getTagName())) continue;
+                String groupId    = resolveProp(getDirectChildText(dep, "groupId"), props);
+                String artifactId = resolveProp(getDirectChildText(dep, "artifactId"), props);
+                String version    = resolveProp(getDirectChildText(dep, "version"), props);
+                String scope      = getDirectChildText(dep, "scope");
+                if (groupId == null || artifactId == null) continue;
+                // Non-runtime scopes are tagged (not dropped) so the UI can badge and default-filter them.
+                comps.add(buildComponent(groupId + ":" + artifactId, version, "MAVEN")
+                        .withScope(normalizeMavenScope(scope)));
+            }
+            log.debug("[DependencyParser][Maven] Parsed {} deps from {}", comps.size(), pomFile);
+            comps = bomVersionResolver.enrichComponentVersions(projectDir, comps);
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Maven] Failed to parse {}: {}", pomFile, e.getMessage());
+        }
+        return comps;
+    }
+
+    public static String normalizeMavenScope(String scope) {
+        if (scope == null || scope.isBlank()) return null;
+        String s = scope.trim().toLowerCase();
+        return switch (s) {
+            case "compile", "runtime", "import" -> null;
+            default -> s; // test, provided, system
+        };
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/NativeManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NativeManifestParser.java
new file mode 100644
index 00000000..b72b233e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NativeManifestParser.java
@@ -0,0 +1,190 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import org.w3c.dom.*;
+
+@Slf4j
+public class NativeManifestParser {
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    public List parseVcpkgJson(Path dir, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("vcpkg.json").toFile());
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+            JsonNode deps = root.path("dependencies");
+            if (deps.isArray()) {
+                for (JsonNode dep : deps) {
+                    String name = null;
+                    String version = null;
+                    if (dep.isTextual()) {
+                        name = dep.asText(null);
+                    } else if (dep.isObject()) {
+                        name = dep.path("name").asText(null);
+                        if (dep.has("version>=")) {
+                            version = dep.path("version>=").asText(null);
+                        } else if (dep.has("version")) {
+                            version = dep.path("version").asText(null);
+                        } else if (dep.has("baseline")) {
+                            version = dep.path("baseline").asText(null);
+                        }
+                    }
+                    if (name == null || name.isBlank()) continue;
+                    name = name.trim();
+                    version = (version != null && !version.isBlank()) ? version.trim() : null;
+                    if (seen.add(name + ":" + (version != null ? version : ""))) {
+                        comps.add(buildComponent(name, version, "VCPKG"));
+                    }
+                }
+            }
+            log.info("[DependencyParser][vcpkg] Parsed {} components from vcpkg.json in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][vcpkg] Failed to parse vcpkg.json for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parseVcpkgConfigurationJson(Path dir, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("vcpkg-configuration.json").toFile());
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+            extractVcpkgRegistryPackages(root, seen, comps);
+            log.info("[DependencyParser][vcpkg] Parsed {} components from vcpkg-configuration.json in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][vcpkg] Failed to parse vcpkg-configuration.json for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public void extractVcpkgRegistryPackages(JsonNode node, Set seen, List comps) {
+        if (node == null || node.isMissingNode()) return;
+        if (node.isArray()) {
+            for (JsonNode item : node) {
+                extractVcpkgRegistryPackage(item, seen, comps);
+                extractVcpkgRegistryPackages(item, seen, comps);
+            }
+        } else if (node.isObject()) {
+            extractVcpkgRegistryPackage(node, seen, comps);
+            node.fields().forEachRemaining(e -> extractVcpkgRegistryPackages(e.getValue(), seen, comps));
+        }
+    }
+
+    public void extractVcpkgRegistryPackage(JsonNode obj, Set seen, List comps) {
+        if (!obj.isObject()) return;
+        String name = obj.path("name").asText(null);
+        if (name == null || name.isBlank()) return;
+        String version = null;
+        for (String key : new String[]{"version", "baseline", "version>="}) {
+            if (obj.has(key)) {
+                version = obj.path(key).asText(null);
+                if (version != null && !version.isBlank()) break;
+            }
+        }
+        String v = (version != null && !version.isBlank()) ? version.trim() : null;
+        if (seen.add(name + ":" + (v != null ? v : ""))) {
+            comps.add(buildComponent(name, v, "VCPKG"));
+        }
+    }
+
+    public List parseCMakeLists(Path dir, String repoName) {
+        Path cmake = dir.resolve("CMakeLists.txt");
+        if (!Files.isRegularFile(cmake)) return List.of();
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        try {
+            String content = Files.readString(cmake, StandardCharsets.UTF_8);
+            // Normalize line continuations and remove CMake comments
+            content = content.replaceAll("\\\\\\r?\\n", " ");
+            content = content.replaceAll("#[^\\n]*", " ");
+            parseCMakeCommand(content, "FetchContent_Declare", seen, comps);
+            parseCMakeCommand(content, "ExternalProject_Add", seen, comps);
+            log.info("[DependencyParser][CMake] Parsed {} components from CMakeLists.txt in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][CMake] Failed to parse CMakeLists.txt for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public void parseCMakeCommand(String content, String command, Set seen,
+                                   List comps) {
+        // Match command(ident ... ) allowing nested parentheses one level deep.
+        Pattern cmdP = Pattern.compile(
+                "\\b" + Pattern.quote(command) + "\\s*\\(\\s*([A-Za-z0-9_\\-]+)\\s+((?:[^()]|\\([^()]*\\))*)\\)",
+                Pattern.CASE_INSENSITIVE);
+        Matcher m = cmdP.matcher(content);
+        while (m.find()) {
+            String ident = m.group(1);
+            String body = m.group(2);
+            String gitRepo = extractCMakeQuotedArg(body, "GIT_REPOSITORY");
+            String gitTag = extractCMakeQuotedArg(body, "GIT_TAG");
+            String url = extractCMakeQuotedArg(body, "URL");
+            String name = cmakeBasenameFromUrl(gitRepo != null ? gitRepo : url);
+            if (name == null) name = ident;
+            String version = null;
+            if (gitTag != null && !gitTag.isBlank()) {
+                version = normalizeGitTag(gitTag);
+            } else if (url != null && !url.isBlank()) {
+                version = versionFromArchiveUrl(url);
+            }
+            if (version == null || version.isBlank()) continue;
+            if (seen.add(name + ":" + version)) {
+                comps.add(buildComponent(name, version, "VENDORED"));
+            }
+        }
+    }
+
+    public String extractCMakeQuotedArg(String body, String key) {
+        Pattern p = Pattern.compile(
+                "\\b" + Pattern.quote(key) + "\\s+\"([^\"]*)\"",
+                Pattern.CASE_INSENSITIVE);
+        Matcher m = p.matcher(body);
+        return m.find() ? m.group(1) : null;
+    }
+
+    public String cmakeBasenameFromUrl(String url) {
+        if (url == null || url.isBlank()) return null;
+        String trimmed = url.replaceAll("\\.git$", "");
+        int slash = trimmed.lastIndexOf('/');
+        if (slash < 0) return trimmed;
+        String base = trimmed.substring(slash + 1);
+        return base.isBlank() ? null : base;
+    }
+
+    public String normalizeGitTag(String tag) {
+        if (tag == null) return null;
+        String t = tag.trim();
+        if (t.startsWith("v") && t.length() > 1 && Character.isDigit(t.charAt(1))) {
+            return t.substring(1);
+        }
+        return t;
+    }
+
+    public String versionFromArchiveUrl(String url) {
+        if (url == null || url.isBlank()) return null;
+        String base = cmakeBasenameFromUrl(url);
+        if (base == null) return null;
+        // Strip common archive suffixes and look for a version tail: name-1.2.3.tar.gz
+        String withoutExt = base.replaceAll("\\.(tar\\.gz|tar\\.bz2|tar\\.xz|zip|tgz|tbz2|txz)$", "");
+        int dash = withoutExt.lastIndexOf('-');
+        if (dash > 0 && dash < withoutExt.length() - 1) {
+            String candidate = withoutExt.substring(dash + 1);
+            if (candidate.matches("[0-9].*")) return candidate;
+        }
+        return null;
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/NpmManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NpmManifestParser.java
new file mode 100644
index 00000000..eb48bcfa
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NpmManifestParser.java
@@ -0,0 +1,162 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService.ParseResult;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+
+@Slf4j
+public class NpmManifestParser {
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    public List parseNpmLock(Path dir, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("package-lock.json").toFile());
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+
+            if (root.has("packages")) {
+                // lockfileVersion 2/3 (npm 7+): "packages" → { "node_modules/x": { version, ... } }
+                root.path("packages").properties().forEach(e -> {
+                    String pkgPath = e.getKey();
+                    if (pkgPath.isEmpty()) return; // skip root entry
+                    String name = pkgPath.startsWith("node_modules/")
+                            ? pkgPath.substring("node_modules/".length())
+                            : pkgPath;
+                    String version = e.getValue().path("version").asText(null);
+                    if (name.isBlank() || version == null || version.isBlank()) return;
+                    if (seen.add(name + ":" + version)) {
+                        comps.add(buildComponent(name, version, "NPM"));
+                    }
+                });
+            } else if (root.has("dependencies")) {
+                // lockfileVersion 1 (npm 5/6): flat + nested "dependencies" tree
+                Deque> queue = new ArrayDeque<>(root.path("dependencies").properties());
+                while (!queue.isEmpty()) {
+                    Map.Entry entry = queue.poll();
+                    String name    = entry.getKey();
+                    JsonNode val   = entry.getValue();
+                    String version = val.path("version").asText(null);
+                    if (version != null && !version.isBlank() && seen.add(name + ":" + version)) {
+                        comps.add(buildComponent(name, version, "NPM"));
+                    }
+                    if (val.has("dependencies")) {
+                        queue.addAll(val.path("dependencies").properties());
+                    }
+                }
+            }
+            log.info("[DependencyParser][npm] Parsed {} components from package-lock.json in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][npm] Failed to parse package-lock.json for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public ParseResult parseNpmPackageJson(Path dir, String repoName) {
+        List comps = new ArrayList<>();
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(dir.resolve("package.json").toFile());
+            JsonNode deps    = root.path("dependencies");
+            JsonNode devDeps = root.path("devDependencies");
+
+            addNpmDeps(comps, deps, null);
+            addNpmDeps(comps, devDeps, "dev");
+            log.info("[DependencyParser][npm] Parsed {} components from package.json in '{}'", comps.size(), repoName);
+        } catch (Exception e) {
+            log.error("[DependencyParser][npm] Failed to parse package.json: {}", e.getMessage());
+        }
+        return new ParseResult("NPM", comps);
+    }
+
+    public void addNpmDeps(List comps, JsonNode depsNode, String scope) {
+        if (depsNode == null || depsNode.isMissingNode()) return;
+        depsNode.properties().forEach(entry -> {
+            String name    = entry.getKey();
+            String version = entry.getValue().asText().replaceAll("^[~^>=<]+ *", "");
+            comps.add(buildComponent(name, version, "NPM").withScope(scope));
+        });
+    }
+
+    public List parseYarnLock(Path dir, String repoName) {
+        try {
+            List lines = Files.readAllLines(dir.resolve("yarn.lock"), StandardCharsets.UTF_8);
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+            List pendingNames = new ArrayList<>();
+            for (String raw : lines) {
+                if (raw.isEmpty() || raw.startsWith("#")) continue;
+                // Header: starts at column 0 and ends with ':'
+                if (!Character.isWhitespace(raw.charAt(0)) && raw.endsWith(":")) {
+                    pendingNames.clear();
+                    String header = raw.substring(0, raw.length() - 1);
+                    for (String desc : header.split(",")) {
+                        String d = desc.trim();
+                        if (d.startsWith("\"") && d.endsWith("\"")) d = d.substring(1, d.length() - 1);
+                        // Strip @version: name is everything before the last '@' (but keep leading '@' for scoped)
+                        int at = d.lastIndexOf('@');
+                        if (at <= 0) continue;
+                        pendingNames.add(d.substring(0, at));
+                    }
+                } else if (!pendingNames.isEmpty() && raw.startsWith("  version")) {
+                    Matcher m = Pattern.compile("version[:\\s]+\"?([^\"\\s]+)\"?").matcher(raw);
+                    if (m.find()) {
+                        String version = m.group(1);
+                        for (String name : pendingNames) {
+                            if (seen.add(name + ":" + version)) {
+                                comps.add(buildComponent(name, version, "NPM"));
+                            }
+                        }
+                    }
+                    pendingNames.clear();
+                }
+            }
+            log.info("[DependencyParser][npm] Parsed {} components from yarn.lock in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][npm] Failed to parse yarn.lock for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parsePnpmLock(Path dir, String repoName) {
+        try {
+            List lines = Files.readAllLines(dir.resolve("pnpm-lock.yaml"), StandardCharsets.UTF_8);
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+            boolean inSection = false;
+            // Modern pnpm v6+: '@scope/pkg@1.2.3':  or  /@scope/pkg@1.2.3:
+            // Older pnpm v5  : /@scope/pkg/1.2.3:   or  /pkg/1.2.3:
+            Pattern modern = Pattern.compile("^\\s{2}'?/?((?:@[^@/'\\s]+/)?[^@/'\\s]+)@([^()'\\s]+?)(?:\\([^)]+\\))?'?:\\s*$");
+            Pattern legacy = Pattern.compile("^\\s{2}/((?:@[^/]+/)?[^/]+)/([0-9][^/_'\\s]+)(?:_[^:'\\s]*)?:\\s*$");
+            for (String line : lines) {
+                if (line.startsWith("packages:") || line.startsWith("snapshots:")) { inSection = true; continue; }
+                if (inSection && !line.isEmpty() && !Character.isWhitespace(line.charAt(0))) { inSection = false; }
+                if (!inSection) continue;
+                Matcher m = modern.matcher(line);
+                if (!m.matches()) m = legacy.matcher(line);
+                if (m.matches()) {
+                    String name = m.group(1);
+                    String version = m.group(2);
+                    if (seen.add(name + ":" + version)) {
+                        comps.add(buildComponent(name, version, "NPM"));
+                    }
+                }
+            }
+            log.info("[DependencyParser][npm] Parsed {} components from pnpm-lock.yaml in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][npm] Failed to parse pnpm-lock.yaml for '{}': {}", repoName, e.getMessage());
+            return null;
+        }
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/NugetManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NugetManifestParser.java
new file mode 100644
index 00000000..c9fe19b4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/NugetManifestParser.java
@@ -0,0 +1,220 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService.ParseResult;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import org.w3c.dom.*;
+import javax.xml.parsers.DocumentBuilderFactory;
+
+@Slf4j
+public class NugetManifestParser {
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    public List parseNuGetLockFile(Path dir, String repoName) {
+        try {
+            JsonNode root = new ObjectMapper().readTree(dir.resolve("packages.lock.json").toFile());
+            Set seen = new LinkedHashSet<>();
+            List comps = new ArrayList<>();
+            JsonNode deps = root.path("dependencies");
+            if (!deps.isMissingNode()) {
+                deps.properties().forEach(fw ->
+                    fw.getValue().properties().forEach(pkg -> {
+                        String name = pkg.getKey();
+                        String ver  = pkg.getValue().path("resolved").asText(null);
+                        if (name != null && ver != null && !ver.isBlank() && seen.add(name)) {
+                            comps.add(buildComponent(name, ver, "NUGET"));
+                        }
+                    })
+                );
+            }
+            log.info("[DependencyParser][NuGet] Parsed {} components from packages.lock.json in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][NuGet] Failed to parse packages.lock.json: {}", e.getMessage());
+            return null;
+        }
+    }
+
+    public List parseDotNetListJson(String json, String repoName) {
+        try {
+            JsonNode root = OBJECT_MAPPER.readTree(json);
+            Set seen = new LinkedHashSet<>();
+            List comps = new ArrayList<>();
+            for (JsonNode project : root.path("projects")) {
+                for (JsonNode fw : project.path("frameworks")) {
+                    for (String section : new String[]{"topLevelPackages", "transitivePackages"}) {
+                        for (JsonNode pkg : fw.path(section)) {
+                            String id = pkg.path("id").asText(null);
+                            String ver = pkg.path("resolvedVersion").asText(null);
+                            if (id == null || id.isBlank() || ver == null || ver.isBlank()) {
+                                continue;
+                            }
+                            if (seen.add(id + ":" + ver)) {
+                                comps.add(buildComponent(id, ver, "NUGET"));
+                            }
+                        }
+                    }
+                }
+            }
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][NuGet] Failed to parse dotnet list JSON for '{}': {}", repoName, e.getMessage());
+            return List.of();
+        }
+    }
+
+    public ParseResult parseNuGetStatic(Path dir, String repoName, ManifestIndex index) {
+        Set seen = new LinkedHashSet<>();
+        List comps = new ArrayList<>();
+        Map propsVersions = buildNuGetPropsVersionIndex(index);
+        try {
+            DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
+            dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
+            dbf.setNamespaceAware(false);
+            for (Path props : new ManifestDiscovery().indexByNames(index, "Directory.Packages.props")) {
+                mergeDirectoryPackageVersions(dbf, props, propsVersions);
+            }
+            List targets = new ArrayList<>();
+            targets.addAll(new ManifestDiscovery().indexBySuffix(index, ".csproj"));
+            targets.addAll(new ManifestDiscovery().indexByNames(index, "packages.config"));
+            for (Path f : targets) {
+                try {
+                    Document doc = dbf.newDocumentBuilder().parse(f.toFile());
+                    if (f.getFileName().toString().equals("packages.config")) {
+                        mergeNuGetPackageConfig(doc, seen, comps);
+                    } else {
+                        mergeNuGetCsproj(doc, seen, comps, propsVersions);
+                    }
+                } catch (Exception ignored) {}
+            }
+            log.info("[DependencyParser][NuGet] Parsed {} components from {} manifest file(s) in '{}'",
+                    comps.size(), targets.size(), repoName);
+        } catch (Exception e) {
+            log.error("[DependencyParser][NuGet] Failed to parse .csproj/packages.config: {}", e.getMessage());
+        }
+        return new ParseResult("NUGET", comps);
+    }
+
+    public ParseResult parseNuGetStatic(Path dir, String repoName) {
+        return parseNuGetStatic(dir, repoName, new ManifestDiscovery().buildIndex(dir));
+    }
+
+    public Map buildNuGetPropsVersionIndex(ManifestIndex index) {
+        Map propsIndex = new LinkedHashMap<>();
+        Pattern propVersion = Pattern.compile("<([\\w.]+)>\\s*([\\d][^<]*)\\s*");
+        for (Path props : new ManifestDiscovery().indexBySuffix(index, ".props")) {
+            try {
+                String content = Files.readString(props, StandardCharsets.UTF_8);
+                Matcher m = propVersion.matcher(content);
+                while (m.find()) {
+                    String key = m.group(1);
+                    String val = m.group(2).trim();
+                    if (!val.isBlank() && !val.contains("$(")) {
+                        propsIndex.putIfAbsent(key, val);
+                    }
+                }
+            } catch (Exception e) {
+                log.debug("[DependencyParser][NuGet] props scan failed for {}: {}", props, e.getMessage());
+            }
+        }
+        return propsIndex;
+    }
+
+    public void mergeDirectoryPackageVersions(
+            DocumentBuilderFactory dbf, Path propsFile, Map propsVersions) {
+        try {
+            Document doc = dbf.newDocumentBuilder().parse(propsFile.toFile());
+            NodeList versions = doc.getElementsByTagName("PackageVersion");
+            for (int i = 0; i < versions.getLength(); i++) {
+                Element el = (Element) versions.item(i);
+                String id = el.getAttribute("Include");
+                String ver = el.getAttribute("Version");
+                if (!id.isBlank() && !ver.isBlank()) {
+                    propsVersions.put(id, resolveNuGetProperty(ver, propsVersions));
+                }
+            }
+        } catch (Exception e) {
+            log.debug("[DependencyParser][NuGet] Directory.Packages.props parse failed: {}", e.getMessage());
+        }
+    }
+
+    public void mergeNuGetCsproj(
+            Document doc, Set seen, List comps,
+            Map propsVersions) {
+        NodeList refs = doc.getElementsByTagName("PackageReference");
+        for (int i = 0; i < refs.getLength(); i++) {
+            Element ref = (Element) refs.item(i);
+            if ("Remove".equalsIgnoreCase(ref.getAttribute("Update"))) {
+                continue;
+            }
+            String name = firstNonBlank(ref.getAttribute("Include"), ref.getAttribute("Update"));
+            if (name.isBlank() || name.contains("@(")) {
+                continue;
+            }
+            String ver = firstNonBlank(
+                    ref.getAttribute("Version"),
+                    getDirectChildText(ref, "Version"));
+            ver = resolveNuGetProperty(ver, propsVersions);
+            if (propsVersions.containsKey(name) && (ver == null || ver.isBlank() || ver.startsWith("$("))) {
+                ver = propsVersions.get(name);
+            }
+            String key = name + ":" + (ver != null ? ver : "");
+            if (seen.add(key)) {
+                comps.add(buildComponent(name, ver == null || ver.isBlank() ? null : ver, "NUGET"));
+            }
+        }
+    }
+
+    public void mergeNuGetPackageConfig(
+            Document doc, Set seen, List comps) {
+        NodeList refs = doc.getElementsByTagName("package");
+        for (int i = 0; i < refs.getLength(); i++) {
+            Element ref = (Element) refs.item(i);
+            String name = firstNonBlank(ref.getAttribute("id"), ref.getAttribute("Include"));
+            String ver = firstNonBlank(ref.getAttribute("version"), ref.getAttribute("Version"));
+            if (!name.isBlank() && seen.add(name + ":" + ver)) {
+                comps.add(buildComponent(name, ver.isBlank() ? null : ver, "NUGET"));
+            }
+        }
+    }
+
+    public String resolveNuGetProperty(String raw, Map propsVersions) {
+        if (raw == null || raw.isBlank()) {
+            return raw;
+        }
+        Matcher m = Pattern.compile("\\$\\(([^)]+)\\)").matcher(raw.trim());
+        if (!m.matches()) {
+            return raw.trim();
+        }
+        String resolved = propsVersions.get(m.group(1));
+        return resolved != null ? resolved : raw.trim();
+    }
+
+    public static String firstNonBlank(String... values) {
+        for (String v : values) {
+            if (v != null && !v.isBlank()) {
+                return v.trim();
+            }
+        }
+        return "";
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+    private String getDirectChildText(Element parent, String tag) {
+        NodeList children = parent.getChildNodes();
+        for (int i = 0; i < children.getLength(); i++) {
+            if (children.item(i) instanceof Element child && tag.equals(child.getTagName()))
+                return child.getTextContent().trim();
+        }
+        return null;
+    }
+
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/PythonManifestParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/PythonManifestParser.java
new file mode 100644
index 00000000..953fc7fe
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/PythonManifestParser.java
@@ -0,0 +1,175 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import com.salkcoding.oswl.service.ingest.DependencyManifestParserService.ParseResult;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+
+@Slf4j
+public class PythonManifestParser {
+
+    public ParseResult parsePython(Path dir, String repoName) {
+        List comps = parseRequirementsFile(dir.resolve("requirements.txt"), repoName);
+        return new ParseResult("PYPI", comps != null ? comps : List.of());
+    }
+
+    public List parseRequirementsFile(Path reqFile, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        try {
+            if (!Files.isRegularFile(reqFile)) {
+                return List.of();
+            }
+            for (String rawLine : Files.readAllLines(reqFile, StandardCharsets.UTF_8)) {
+                addPythonRequirementLine(rawLine, seen, comps);
+            }
+            log.info("[DependencyParser][Python] Parsed {} components from {} in '{}'",
+                    comps.size(), reqFile.getFileName(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Python] Failed to parse {}: {}", reqFile, e.getMessage());
+            return null;
+        }
+    }
+
+    public List parsePyprojectToml(Path tomlFile, String repoName) {
+        List comps = new ArrayList<>();
+        Set seen = new LinkedHashSet<>();
+        try {
+            List lines = Files.readAllLines(tomlFile, StandardCharsets.UTF_8);
+            boolean inProject = false;
+            boolean inDepsArray = false;
+            for (String rawLine : lines) {
+                String line = rawLine.trim();
+                if (line.isEmpty() || line.startsWith("#")) {
+                    continue;
+                }
+                if (line.startsWith("[") && line.endsWith("]")) {
+                    inProject = line.equals("[project]");
+                    inDepsArray = false;
+                    continue;
+                }
+                if (!inProject) {
+                    continue;
+                }
+                if (line.startsWith("dependencies") && line.contains("[")) {
+                    inDepsArray = true;
+                    int open = line.indexOf('[');
+                    int close = line.indexOf(']');
+                    if (close > open) {
+                        String inline = line.substring(open + 1, close).trim();
+                        if (!inline.isBlank()) {
+                            for (String part : inline.split(",")) {
+                                addPythonRequirementLine(stripQuotes(part.trim()), seen, comps);
+                            }
+                        }
+                        inDepsArray = !line.endsWith("]");
+                    }
+                    continue;
+                }
+                if (inDepsArray) {
+                    if (line.equals("]")) {
+                        inDepsArray = false;
+                        continue;
+                    }
+                    String dep = line;
+                    if (dep.endsWith(",")) {
+                        dep = dep.substring(0, dep.length() - 1).trim();
+                    }
+                    if (dep.equals("]")) {
+                        inDepsArray = false;
+                        continue;
+                    }
+                    addPythonRequirementLine(stripQuotes(dep), seen, comps);
+                }
+            }
+            log.info("[DependencyParser][Python] Parsed {} components from {} in '{}'",
+                    comps.size(), tomlFile.getFileName(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Python] Failed to parse pyproject.toml {}: {}", tomlFile, e.getMessage());
+            return null;
+        }
+    }
+
+    public void addPythonRequirementLine(
+            String rawLine, Set seen, List comps) {
+        String line = rawLine.trim();
+        if (line.isEmpty() || line.startsWith("#") || line.startsWith("-")) {
+            return;
+        }
+        int hash = line.indexOf('#');
+        if (hash >= 0) {
+            line = line.substring(0, hash).trim();
+        }
+        int semi = line.indexOf(';');
+        if (semi >= 0) {
+            line = line.substring(0, semi).trim();
+        }
+        if (line.isEmpty()) {
+            return;
+        }
+        Pattern fullForm = Pattern.compile(
+                "^([A-Za-z0-9][\\w.\\-]*?)(?:\\[[^]]*])?\\s*(===|==|>=|<=|~=|!=|<|>)\\s*([0-9][^\\s,;#]*)");
+        Pattern bareName = Pattern.compile("^([A-Za-z0-9][\\w.\\-]*?)(?:\\[[^]]*])?\\s*$");
+        String name = null;
+        String version = null;
+        Matcher m = fullForm.matcher(line);
+        if (m.find()) {
+            name = m.group(1);
+            version = m.group(3);
+        } else {
+            Matcher b = bareName.matcher(line);
+            if (b.matches()) {
+                name = b.group(1);
+            }
+        }
+        if (name == null || name.isBlank()) {
+            return;
+        }
+        if (seen.add(name + ":" + (version != null ? version : ""))) {
+            comps.add(buildComponent(name, version, "PYPI"));
+        }
+    }
+
+    public static String stripQuotes(String s) {
+        if ((s.startsWith("\"") && s.endsWith("\"")) || (s.startsWith("'") && s.endsWith("'"))) {
+            return s.substring(1, s.length() - 1);
+        }
+        return s;
+    }
+
+    public List parsePipfileLock(Path dir, String repoName) {
+        try {
+            JsonNode root = new ObjectMapper().readTree(dir.resolve("Pipfile.lock").toFile());
+            List comps = new ArrayList<>();
+            Set seen = new LinkedHashSet<>();
+            for (String section : new String[]{"default", "develop"}) {
+                JsonNode deps = root.path(section);
+                if (deps.isMissingNode()) continue;
+                String scope = "develop".equals(section) ? "dev" : null;
+                deps.properties().forEach(e -> {
+                    String name = e.getKey();
+                    String ver  = e.getValue().path("version").asText("").replaceAll("^==", "");
+                    if (!name.isBlank() && !ver.isBlank() && seen.add(name + ":" + ver)) {
+                        comps.add(buildComponent(name, ver, "PYPI").withScope(scope));
+                    }
+                });
+            }
+            log.info("[DependencyParser][Python] Parsed {} components from Pipfile.lock in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Python] Failed to parse Pipfile.lock: {}", e.getMessage());
+            return null;
+        }
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/RubyLockParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/RubyLockParser.java
new file mode 100644
index 00000000..d9d5780a
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/RubyLockParser.java
@@ -0,0 +1,54 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+
+@Slf4j
+public class RubyLockParser {
+
+    public List parseGemfileLock(Path dir, String repoName) {
+        try {
+            Set seen = new LinkedHashSet<>();
+            List comps = new ArrayList<>();
+            boolean inSpecs = false;
+            Pattern specLine = Pattern.compile("^ {4}([A-Za-z0-9_.\\-]+)\\s+\\(([^)]+)\\)");
+            for (String line : Files.readAllLines(dir.resolve("Gemfile.lock"), StandardCharsets.UTF_8)) {
+                if (line.equals("  specs:")) { inSpecs = true; continue; }
+                if (inSpecs && !line.startsWith(" ") && !line.isEmpty()) { inSpecs = false; continue; }
+                if (!inSpecs) {
+                    continue;
+                }
+                Matcher m = specLine.matcher(line);
+                if (!m.find()) {
+                    continue;
+                }
+                String name = m.group(1);
+                String version = m.group(2).trim();
+                if (version.startsWith(">=") || version.startsWith(">")
+                        || version.startsWith("<") || version.startsWith("~>")
+                        || version.startsWith("!=") || version.startsWith("=")) {
+                    continue;
+                }
+                if (!version.matches("[0-9].*")) {
+                    continue;
+                }
+                if (seen.add(name + ":" + version)) {
+                    comps.add(buildComponent(name, version, "RUBYGEMS"));
+                }
+            }
+            log.info("[DependencyParser][Ruby] Parsed {} components from Gemfile.lock in '{}'", comps.size(), repoName);
+            return comps;
+        } catch (Exception e) {
+            log.warn("[DependencyParser][Ruby] Failed to parse Gemfile.lock: {}", e.getMessage());
+            return null;
+        }
+    }
+
+    private ScanPayload.ComponentPayload buildComponent(String name, String version, String ecosystem) {
+        return ScanPayload.ComponentPayload.create(name, version, ecosystem, "Direct", List.of());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/UploadedLockFileParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/UploadedLockFileParser.java
new file mode 100644
index 00000000..a0daa73c
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/UploadedLockFileParser.java
@@ -0,0 +1,75 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import com.salkcoding.oswl.service.ingest.CondaPypiMappingService;
+import lombok.RequiredArgsConstructor;
+import org.yaml.snakeyaml.*;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
+@Slf4j
+@RequiredArgsConstructor
+public class UploadedLockFileParser {
+    private final CondaPypiMappingService condaPypiMappingService;
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+    public List parseUploadedLockFile(byte[] content, String label) {
+        try {
+            String text = new String(content, StandardCharsets.UTF_8);
+            String head = text.substring(0, Math.min(text.length(), 200)).stripLeading();
+            if (head.startsWith("{")) {
+                JsonNode root = OBJECT_MAPPER.readTree(content);
+                if (isComposerLockJson(root)) {
+                    return new ComposerLockParser().parseComposerLockJson(root, label);
+                }
+                if (isConanLockJson(root)) {
+                    return new ConanLockParser().parseConanLockJson(root, label);
+                }
+                return null;
+            }
+            // XML — the caller's CycloneDX path handles it.
+            if (head.startsWith("<")) {
+                return null;
+            }
+            // Podfile.lock is YAML-shaped but parsed line-wise, same as the repo-walk parser.
+            if (head.startsWith("PODS:")) {
+                return new CocoaPodsLockParser().parsePodfileLockLines(text.lines().toList(), label);
+            }
+            // `conda list --explicit` spec file: comment headers, an @EXPLICIT marker, then
+            // one package URL per line. It has no stable filename, so content shape is the
+            // only way it can arrive here.
+            List lines = text.lines().toList();
+            if (lines.stream().anyMatch(l -> l.strip().equals("@EXPLICIT"))) {
+                return new CondaLockParser(condaPypiMappingService).parseCondaExplicitLines(lines, label);
+            }
+            // YAML lock files: pixi.lock (environments → per-platform package URLs) or
+            // conda-lock.yml (flat "package" list).
+            Object parsed = new Yaml(new SafeConstructor(new LoaderOptions())).load(text);
+            if (parsed instanceof Map root) {
+                if (root.containsKey("environments")) {
+                    return new CondaLockParser(condaPypiMappingService).parsePixiLockYaml(root, label);
+                }
+                if (root.get("package") instanceof List) {
+                    return new CondaLockParser(condaPypiMappingService).parseCondaLockYaml(root, label);
+                }
+            }
+        } catch (Exception e) {
+            log.debug("[DependencyParser] Uploaded content is not a supported lock file: {}", e.getMessage());
+        }
+        return null;
+    }
+
+    public static boolean isComposerLockJson(JsonNode root) {
+        return root.path("packages").isArray()
+                && (root.has("content-hash") || root.has("_readme") || root.has("packages-dev"));
+    }
+
+    public static boolean isConanLockJson(JsonNode root) {
+        return root.has("graph_lock")
+                || (root.path("requires").isArray() && root.has("version"));
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ingest/parser/VersionCatalogParser.java b/src/main/java/com/salkcoding/oswl/service/ingest/parser/VersionCatalogParser.java
new file mode 100644
index 00000000..868f47bc
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/ingest/parser/VersionCatalogParser.java
@@ -0,0 +1,70 @@
+package com.salkcoding.oswl.service.ingest.parser;
+
+import com.salkcoding.oswl.dto.scan.ScanPayload;
+import lombok.extern.slf4j.Slf4j;
+import java.nio.file.*;
+import java.nio.charset.StandardCharsets;
+import java.util.*;
+import java.util.regex.*;
+import org.w3c.dom.*;
+
+@Slf4j
+public class VersionCatalogParser {
+
+    public List parseVersionCatalogs(Path dir, String repoName, ManifestIndex index) {
+        List comps = new ArrayList<>();
+        List catalogs = new ArrayList<>();
+        // Original logic used Files.walk(dir, 3); keep that depth limit on top of the shared index.
+        for (Path p : new ManifestDiscovery().indexBySuffix(index, ".versions.toml")) {
+            if (index.root().relativize(p).getNameCount() <= 3) {
+                catalogs.add(p);
+            }
+        }
+        if (catalogs.isEmpty()) { log.debug("[DependencyParser][Gradle] No *.versions.toml in '{}'", repoName); return comps; }
+        for (Path catalog : catalogs) {
+            try {
+                List lines = Files.readAllLines(catalog, StandardCharsets.UTF_8);
+                Map versions = new LinkedHashMap<>();
+                boolean inVersions = false, inLibraries = false;
+                for (String rawLine : lines) {
+                    String line = rawLine.trim();
+                    if (line.isEmpty() || line.startsWith("#")) continue;
+                    if (line.equals("[versions]"))  { inVersions = true;  inLibraries = false; continue; }
+                    if (line.equals("[libraries]")) { inLibraries = true; inVersions = false;  continue; }
+                    if (line.startsWith("["))       { inVersions = false; inLibraries = false; continue; }
+                    if (inVersions) {
+                        Matcher vm = Pattern.compile("^([\\w.\\-]+)\\s*=\\s*[\"']([^\"']+)[\"']").matcher(line);
+                        if (vm.find()) versions.put(vm.group(1), vm.group(2));
+                    } else if (inLibraries) {
+                        // Short form: alias = "group:artifact:version"
+                        Matcher shortM = Pattern.compile(
+                                "^[\\w.\\-]+\\s*=\\s*[\"']([\\w.\\-]+:[\\w.\\-]+):([\\w.+\\-]+)[\"']").matcher(line);
+                        if (shortM.find()) { comps.add(buildComponent(shortM.group(1), shortM.group(2), "MAVEN")); continue; }
+                        // Table form: alias = { module = "g:a", version.ref = "key" | version = "x" }
+                        Matcher tableM = Pattern.compile("^[\\w.\\-]+\\s*=\\s*\\{(.+)\\}").matcher(line);
+                        if (tableM.find()) {
+                            String body = tableM.group(1);
+                            Matcher modM = Pattern.compile("module\\s*=\\s*[\"']([\\w.\\-]+:[\\w.\\-]+)[\"']").matcher(body);
+                            if (modM.find()) {
+                                String module = modM.group(1); String version = null;
+                                Matcher vRefM = Pattern.compile("version\\.ref\\s*=\\s*[\"']([\\w.\\-]+)[\"']").matcher(body);
+                                Matcher vM    = Pattern.compile("(? policyCache = new ConcurrentHashMap<>();
+    private final Cache policyCache = Caffeine.newBuilder()
+            .expireAfterWrite(Duration.ofHours(1))
+            .maximumSize(2_000)
+            .recordStats()
+            .build();
 
-    private final Map reasonCache = new ConcurrentHashMap<>();
+    private final Cache reasonCache = Caffeine.newBuilder()
+            .expireAfterWrite(Duration.ofHours(1))
+            .maximumSize(2_000)
+            .recordStats()
+            .build();
 
 
 
@@ -120,13 +130,13 @@ public void init() {
 
 
 
-    /** Reloads the in-memory map from the database. */
+    /** Reloads the Caffeine caches from the database. */
 
     public void refreshCache() {
 
-        policyCache.clear();
+        policyCache.invalidateAll();
 
-        reasonCache.clear();
+        reasonCache.invalidateAll();
 
         licensePolicyRepository.findAll()
 
@@ -144,8 +154,20 @@ public void refreshCache() {
 
                 });
 
-        log.info("[LicensePolicyService] Cache loaded with {} entries", policyCache.size());
+        log.info("[LicensePolicyService] Cache loaded with {} entries", policyCache.estimatedSize());
+
+    }
+
 
+
+    /**
+     * Drops and rebuilds the local caches. Called by the invalidation poller when another
+     * instance changed the policy. Eviction alone is not enough here: {@link #classify}
+     * treats a cache miss as UNKNOWN instead of loading through, so the caches must be
+     * repopulated immediately.
+     */
+    public void evictLocalCache() {
+        refreshCache();
     }
 
 
@@ -162,7 +184,7 @@ public String policyReason(String spdxExpression) {
 
         String baseId = extractBaseSpdxId(spdxExpression.trim());
 
-        String reason = reasonCache.get(baseId.toUpperCase());
+        String reason = reasonCache.getIfPresent(baseId.toUpperCase());
 
         if (reason != null) return reason;
 
@@ -274,7 +296,7 @@ public LicenseStatus classify(String spdxExpression) {
 
 
 
-        LicenseStatus status = policyCache.get(baseId.toUpperCase());
+        LicenseStatus status = policyCache.getIfPresent(baseId.toUpperCase());
 
         return status != null ? status : LicenseStatus.UNKNOWN;
 
@@ -427,6 +449,12 @@ private LicensePolicyPageResponse toPageResponse(Page page,
                detailExpr = "#newStatus.name()")
 
     public LicensePolicyEntryDto updateEntry(String spdxId, LicenseStatus newStatus) {
+        return upsertEntry(spdxId, newStatus, null);
+    }
+
+    /** Same as {@link #updateEntry}, plus a reason — used by config import. */
+    @Transactional
+    public LicensePolicyEntryDto upsertEntry(String spdxId, LicenseStatus newStatus, String reason) {
 
         LicensePolicyEntry entry = licensePolicyRepository.findBySpdxId(spdxId)
 
@@ -442,11 +470,17 @@ public LicensePolicyEntryDto updateEntry(String spdxId, LicenseStatus newStatus)
 
                 });
 
-        entry.updateStatus(newStatus, null);
+        entry.updateStatus(newStatus, reason);
 
         LicensePolicyEntry saved = licensePolicyRepository.save(entry);
 
-        policyCache.put(saved.getSpdxId().toUpperCase(), newStatus);
+        String cacheKey = saved.getSpdxId().toUpperCase();
+
+        policyCache.put(cacheKey, newStatus);
+
+        reasonCache.invalidate(cacheKey);
+
+        cacheInvalidationService.bump(CacheInvalidationService.LICENSE_POLICY);
 
         return toDto(saved);
 
diff --git a/src/main/java/com/salkcoding/oswl/service/LicenseService.java b/src/main/java/com/salkcoding/oswl/service/license/LicenseService.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/service/LicenseService.java
rename to src/main/java/com/salkcoding/oswl/service/license/LicenseService.java
index d8861b5c..747f702d 100644
--- a/src/main/java/com/salkcoding/oswl/service/LicenseService.java
+++ b/src/main/java/com/salkcoding/oswl/service/license/LicenseService.java
@@ -1,8 +1,8 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.license;
 
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.LicenseStatus;
 import com.salkcoding.oswl.dto.LicenseConflictDto;
 import com.salkcoding.oswl.dto.LicenseContextDto;
@@ -10,9 +10,9 @@
 import com.salkcoding.oswl.dto.LicenseReviewItemDto;
 import com.salkcoding.oswl.dto.LicenseRowDto;
 import com.salkcoding.oswl.dto.VersionSummaryDto;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import com.salkcoding.oswl.service.ai.AiAnalysisService;
 import com.salkcoding.oswl.service.ai.AiResponseSanitizer;
 import com.salkcoding.oswl.util.VersionOrder;
diff --git a/src/main/java/com/salkcoding/oswl/service/manifest/ManifestCollectRules.java b/src/main/java/com/salkcoding/oswl/service/manifest/ManifestCollectRules.java
index 4478879a..5261e7a0 100644
--- a/src/main/java/com/salkcoding/oswl/service/manifest/ManifestCollectRules.java
+++ b/src/main/java/com/salkcoding/oswl/service/manifest/ManifestCollectRules.java
@@ -9,7 +9,7 @@
 
 /**
  * Single source of truth for which project files the CLI should upload and
- * which directories {@link com.salkcoding.oswl.service.DependencyManifestParserService}
+ * which directories {@link com.salkcoding.oswl.service.ingest.DependencyManifestParserService}
  * skips when walking manifests.
  *
  * 
Serialized to {@code /scripts/manifest-rules.json} for shell clients.

@@ -37,6 +37,11 @@ private ManifestCollectRules() {}
             "packages.lock.json", "packages.config", "Directory.Packages.props",
             "Gemfile.lock",
             "composer.lock", "conan.lock",
+            "vcpkg.json", "vcpkg-configuration.json",
+            ".gitmodules", "CMakeLists.txt",
+            "Podfile.lock",
+            "conda-lock.yml", "pixi.lock",
+            "Dockerfile",
             "mvnw", "mvnw.cmd", "gradlew", "gradlew.bat",
             "global.json", "nuget.config");
 
diff --git a/src/main/java/com/salkcoding/oswl/service/metrics/OswlMetrics.java b/src/main/java/com/salkcoding/oswl/service/metrics/OswlMetrics.java
new file mode 100644
index 00000000..ce6f5f35
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/metrics/OswlMetrics.java
@@ -0,0 +1,118 @@
+package com.salkcoding.oswl.service.metrics;
+
+import io.micrometer.core.instrument.Gauge;
+import io.micrometer.core.instrument.MeterRegistry;
+import io.micrometer.core.instrument.Timer;
+import org.springframework.stereotype.Component;
+
+import java.util.Locale;
+import java.util.concurrent.TimeUnit;
+import java.util.function.Supplier;
+
+/**
+ * Central home for OsWL business metrics exposed via {@code /actuator/prometheus}.
+ *
+ * Keeping every metric name and tag in one typed facade so instrumentation sites stay
+ * one-liners and tag cardinality stays bounded — no project ids, repo URLs, or component
+ * names ever appear as tag values. All metric names carry the {@code oswl.} prefix.
+ */
+@Component
+public class OswlMetrics {
+
+    /** {@link #recordExternalApiCall} outcome when the call completed normally. */
+    public static final String OUTCOME_SUCCESS = "success";
+    /** {@link #recordExternalApiCall} outcome when the call failed for a non-rate-limit reason. */
+    public static final String OUTCOME_FAILURE = "failure";
+    /** {@link #recordExternalApiCall} outcome when the upstream answered with a rate-limit status. */
+    public static final String OUTCOME_RATE_LIMITED = "ratelimited";
+
+    private final MeterRegistry registry;
+
+    /** Guards against double gauge registration (gauges hold strong references to their suppliers). */
+    private volatile boolean quickImportGaugesRegistered;
+
+    public OswlMetrics(MeterRegistry registry) {
+        this.registry = registry;
+    }
+
+    /**
+     * End-to-end scan pipeline duration, tagged by {@code outcome=completed|failed}.
+     * The percentile histogram is published so Grafana can compute p95/p99 server-side.
+     */
+    public void recordScanDuration(long durationMs, String outcome) {
+        Timer.builder("oswl.scan.duration")
+                .description("End-to-end scan pipeline duration")
+                .tag("outcome", outcome)
+                .publishPercentileHistogram(true)
+                .register(registry)
+                .record(Math.max(0, durationMs), TimeUnit.MILLISECONDS);
+    }
+
+    /** Components persisted by one scan ingest, tagged by lowercase {@code ecosystem}. */
+    public void recordComponentsIngested(String ecosystem, int count) {
+        if (count <= 0) {
+            return;
+        }
+        registry.counter("oswl.components.ingested.total",
+                "ecosystem", normalize(ecosystem)).increment(count);
+    }
+
+    /**
+     * Registers the Quick Import queue gauges exactly once, reading straight from the live
+     * queue/counter objects — no per-job meter registration, so nothing leaks with job churn.
+     */
+    public void registerQuickImportGauges(Supplier pendingQueueDepth, Supplier runningImports) {
+        if (quickImportGaugesRegistered) {
+            return;
+        }
+        synchronized (this) {
+            if (quickImportGaugesRegistered) {
+                return;
+            }
+            Gauge.builder("oswl.quickimport.queue.depth", pendingQueueDepth, s -> s.get().doubleValue())
+                    .description("Quick Import jobs waiting for a worker slot")
+                    .register(registry);
+            Gauge.builder("oswl.quickimport.running", runningImports, s -> s.get().doubleValue())
+                    .description("Quick Import jobs currently running")
+                    .register(registry);
+            quickImportGaugesRegistered = true;
+        }
+    }
+
+    /** One recorded AI call: call count, prompt/completion tokens, and estimated USD cost. */
+    public void recordAiUsage(String provider, int promptTokens, int completionTokens, double costUsd) {
+        String p = normalize(provider);
+        registry.counter("oswl.ai.calls.total", "provider", p).increment();
+        if (promptTokens > 0) {
+            registry.counter("oswl.ai.tokens.total", "provider", p, "direction", "in").increment(promptTokens);
+        }
+        if (completionTokens > 0) {
+            registry.counter("oswl.ai.tokens.total", "provider", p, "direction", "out").increment(completionTokens);
+        }
+        if (costUsd > 0) {
+            registry.counter("oswl.ai.cost.usd.total", "provider", p).increment(costUsd);
+        }
+    }
+
+    /** One security-gate evaluation, tagged by {@code outcome=pass|fail}. */
+    public void recordGateEvaluation(boolean passed) {
+        registry.counter("oswl.gate.evaluations.total",
+                "outcome", passed ? "pass" : "fail").increment();
+    }
+
+    /**
+     * One outbound call to an external data source, tagged by {@code source}
+     * (depsdev, osv, epss, kev, github-advisory, nvd) and {@code outcome}
+     * ({@value #OUTCOME_SUCCESS}|{@value #OUTCOME_FAILURE}|{@value #OUTCOME_RATE_LIMITED}).
+     */
+    public void recordExternalApiCall(String source, String outcome) {
+        registry.counter("oswl.external.api.calls.total",
+                "source", source, "outcome", outcome).increment();
+    }
+
+    private static String normalize(String tagValue) {
+        return tagValue == null || tagValue.isBlank()
+                ? "unknown"
+                : tagValue.strip().toLowerCase(Locale.ROOT);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebPushService.java b/src/main/java/com/salkcoding/oswl/service/notification/WebPushService.java
new file mode 100644
index 00000000..224d6e87
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebPushService.java
@@ -0,0 +1,161 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.auth.enums.Permission;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.security.*;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.notification.*;
+import com.salkcoding.oswl.dto.api.*;
+import com.salkcoding.oswl.exception.InvalidRequestException;
+import com.salkcoding.oswl.repository.notification.*;
+import com.salkcoding.oswl.repository.project.*;
+import lombok.RequiredArgsConstructor;
+import org.springframework.context.MessageSource;
+import org.springframework.data.domain.PageRequest;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.time.LocalDateTime;
+import java.util.*;
+
+@Service @RequiredArgsConstructor
+public class WebPushService {
+    private final WebPushSubscriptionRepository subscriptions;
+    private final WebPushDeliveryRepository deliveries;
+    private final UserRepository users;
+    private final ProjectMemberRepository members;
+    private final ProjectRepository projects;
+    private final EncryptionService encryption;
+    private final WebPushTransport transport;
+    private final AuditLogService audit;
+    private final MessageSource messages;
+    private final com.salkcoding.oswl.repository.DatabaseMutationLockRepository mutationLocks;
+    private final ObjectMapper mapper=new ObjectMapper();
+
+    @Transactional(readOnly=true)
+    public WebPushStatus status() {
+        var principal=current();
+        List result=new ArrayList<>();
+        for(var sub:subscriptions.findByUserId(principal.getUserId())) {
+            try {var value=decode(sub); result.add(new WebPushStatus.Subscription(sub.getId(),sub.getEndpointHash(),value.newHighRisk(),value.gateFailure(),sub.getExpiresAt(),sub.getExpiresAt().isAfter(LocalDateTime.now())));}
+            catch(Exception ignored) { /* An unreadable expired key is not exposed to the browser. */ }
+        }
+        boolean enabled=transport.enabled() && principal.hasPermission(Permission.SECURITY_CENTER_VIEW);
+        return new WebPushStatus(enabled,enabled?transport.publicKey():"",result);
+    }
+
+    @Transactional
+    public Long subscribe(WebPushSubscriptionRequest request) {
+        var principal=current();
+        if (!principal.hasPermission(Permission.SECURITY_CENTER_VIEW)) throw new AccessDeniedException("Security Center permission required");
+        if (!transport.enabled()) throw new InvalidRequestException("Browser push is not configured or is disabled offline");
+        transport.validate(request);
+        lockMutations();
+        cleanup();
+        try {
+            String hash=HexFormat.of().formatHex(MessageDigest.getInstance("SHA-256").digest(request.endpoint().getBytes(StandardCharsets.UTF_8)));
+            var existing=subscriptions.findByEndpointHash(hash);
+            if (existing.isPresent() && !existing.get().getUserId().equals(principal.getUserId())) throw new AccessDeniedException("This browser subscription belongs to another account; unsubscribe in the browser first");
+            if (existing.isEmpty() && (subscriptions.countByUserId(principal.getUserId())>=10 || subscriptions.count()>=1000)) throw new InvalidRequestException("Browser subscription limit reached");
+            var sub=existing.orElseGet(()->WebPushSubscription.builder().userId(principal.getUserId()).endpointHash(hash).build());
+            sub.setEncryptedSubscription(encryption.encrypt(mapper.writeValueAsString(request)));
+            sub.setExpiresAt(LocalDateTime.now().plusDays(30));
+            Long id=subscriptions.saveAndFlush(sub).getId();
+            audit.log("WEB_PUSH.SUBSCRIBE","WEB_PUSH",id.toString(),null,"subscription preferences updated");
+            return id;
+        } catch (AccessDeniedException|InvalidRequestException e) {throw e;}
+        catch(Exception e) {throw new InvalidRequestException("Unable to save browser subscription");}
+    }
+
+    @Transactional
+    public void unsubscribe(Long id) {
+        lockMutations();
+        var sub=subscriptions.findById(id).orElse(null);
+        if (sub==null) return;
+        if (!sub.getUserId().equals(current().getUserId())) throw new AccessDeniedException("Subscription owner required");
+        deliveries.deleteBySubscriptionId(id); subscriptions.delete(sub);
+        audit.log("WEB_PUSH.UNSUBSCRIBE","WEB_PUSH",id.toString(),null,null);
+    }
+
+    @Transactional
+    public void enqueue(Long projectId,String type,String eventKey) {
+        if (!transport.enabled() || projectId==null || eventKey==null || !Set.of("NEW_HIGH_RISK","GATE_FAILURE").contains(type)) return;
+        lockMutations();
+        for(var sub:subscriptions.findAll(PageRequest.of(0,1000))) {
+            if (sub.getExpiresAt().isBefore(LocalDateTime.now()) || !canRead(sub.getUserId(),projectId)) continue;
+            WebPushSubscriptionRequest prefs;
+            try { prefs=decode(sub); } catch (InvalidRequestException ignored) { continue; }
+            if (!selected(prefs,type) || deliveries.existsBySubscriptionIdAndEventKey(sub.getId(),eventKey)) continue;
+            deliveries.save(WebPushDelivery.builder().subscriptionId(sub.getId()).projectId(projectId).eventType(type).eventKey(eventKey)
+                    .nextAttempt(LocalDateTime.now()).expiresAt(LocalDateTime.now().plusDays(1)).build());
+        }
+    }
+
+    @Transactional(readOnly=true)
+    public List due() {return deliveries.findByFinishedFalseAndNextAttemptBeforeOrderByIdAsc(LocalDateTime.now(),PageRequest.of(0,10)).stream().map(WebPushDelivery::getId).toList();}
+
+    @Transactional
+    public WebPushAttempt prepare(Long id) {
+        lockMutations();
+        var delivery=deliveries.findById(id).orElse(null);
+        if (delivery==null || delivery.isFinished() || delivery.getNextAttempt().isAfter(LocalDateTime.now())) return null;
+        if (delivery.getAttempts()>=3) {delivery.setFinished(true);return null;}
+        var sub=subscriptions.findById(delivery.getSubscriptionId()).orElse(null);
+        if (sub==null || sub.getExpiresAt().isBefore(LocalDateTime.now()) || delivery.getExpiresAt().isBefore(LocalDateTime.now()) || !canRead(sub.getUserId(),delivery.getProjectId())) {
+            delivery.setFinished(true); return null;
+        }
+        try {
+            var prefs=decode(sub);
+            if (!selected(prefs,delivery.getEventType())) {delivery.setFinished(true);return null;}
+            String message=messages.getMessage("webPush.event."+delivery.getEventType(),null,Locale.forLanguageTag(prefs.locale()));
+            String payload=mapper.writeValueAsString(Map.of("title","OsWL","body",message,"url","/projects/"+delivery.getProjectId()+"/security-center","tag",delivery.getEventKey()));
+            delivery.setAttempts(delivery.getAttempts()+1);
+            delivery.setNextAttempt(LocalDateTime.now().plusMinutes(5));
+            return new WebPushAttempt(id,prefs,payload);
+        } catch(Exception e) {delivery.setFinished(true);return null;}
+    }
+
+    @Transactional
+    public void complete(Long id,int status) {
+        lockMutations();
+        var delivery=deliveries.findById(id).orElse(null); if(delivery==null)return;
+        delivery.setLastStatus(status);
+        delivery.setFinished((status>=200 && status<300) || status==404 || status==410 || delivery.getAttempts()>=3);
+        if(status==404 || status==410) {
+            subscriptions.findById(delivery.getSubscriptionId()).ifPresent(s->s.setExpiresAt(LocalDateTime.now()));
+        }
+        audit.log("WEB_PUSH.DELIVERY","WEB_PUSH",id.toString(),null,"status="+status+", attempt="+delivery.getAttempts());
+    }
+
+    @Transactional public void cleanup() {
+        lockMutations();
+        var now=LocalDateTime.now();
+        deliveries.deleteByExpiresAtBefore(now);
+        for(var sub:subscriptions.findByExpiresAtBefore(now)) {
+            deliveries.deleteBySubscriptionId(sub.getId());
+            subscriptions.delete(sub);
+        }
+    }
+    private void lockMutations() { mutationLocks.lock(com.salkcoding.oswl.repository.DatabaseMutationLockRepository.WEB_PUSH); }
+    private WebPushSubscriptionRequest decode(WebPushSubscription sub) {
+        try{return mapper.readValue(encryption.decrypt(sub.getEncryptedSubscription()),WebPushSubscriptionRequest.class);}
+        catch(Exception e){throw new InvalidRequestException("Stored browser subscription is unreadable");}
+    }
+    private boolean selected(WebPushSubscriptionRequest prefs,String type) {return "NEW_HIGH_RISK".equals(type)?prefs.newHighRisk():prefs.gateFailure();}
+    private boolean canRead(Long userId,Long projectId) {
+        var project=projects.findById(projectId).orElse(null);
+        if(project==null || project.getDeletedAt()!=null) return false;
+        var user=users.findById(userId).orElse(null);
+        if(user==null || !user.isEnabled() || user.isMustChangePassword())return false;
+        return user.isSystemAdmin() || (members.existsByProjectIdAndUserId(projectId,userId) && user.getRoleTemplates().stream().anyMatch(r->r.getPermissions().contains(Permission.SECURITY_CENTER_VIEW)));
+    }
+    private OswlUserPrincipal current() {
+        var auth=SecurityContextHolder.getContext().getAuthentication();
+        if(auth==null || !auth.isAuthenticated() || !(auth.getPrincipal() instanceof OswlUserPrincipal principal) || !principal.isEnabled())throw new AccessDeniedException("Signed-in account required");
+        return principal;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebPushTransport.java b/src/main/java/com/salkcoding/oswl/service/notification/WebPushTransport.java
new file mode 100644
index 00000000..16ad825f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebPushTransport.java
@@ -0,0 +1,60 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.salkcoding.oswl.dto.api.WebPushSubscriptionRequest;
+import com.salkcoding.oswl.exception.InvalidRequestException;
+import com.salkcoding.oswl.security.OutboundUrlValidator;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+import java.net.URI;
+import java.net.http.*;
+import java.nio.charset.StandardCharsets;
+import java.time.Duration;
+import java.util.*;
+
+@Service @RequiredArgsConstructor
+public class WebPushTransport {
+    private final OutboundUrlValidator validator;
+    @Value("${OSWL_WEB_PUSH_PUBLIC_KEY:}") private String publicKey;
+    @Value("${OSWL_WEB_PUSH_PRIVATE_KEY:}") private String privateKey;
+    @Value("${OSWL_WEB_PUSH_SUBJECT:}") private String subject;
+    @Value("${oswl.airgapped.enabled:false}") private boolean airgapped;
+    private final HttpClient http = HttpClient.newBuilder().connectTimeout(Duration.ofSeconds(5)).followRedirects(HttpClient.Redirect.NEVER).build();
+    public boolean enabled() { return !airgapped && !publicKey.isBlank() && !privateKey.isBlank() && !subject.isBlank(); }
+    public String publicKey() { return enabled() ? publicKey : ""; }
+
+    public void validate(WebPushSubscriptionRequest request) {
+        try {
+            URI uri=URI.create(request.endpoint());
+            String host=uri.getHost();
+            if (request.endpoint().length()>2048 || !"https".equals(uri.getScheme()) || uri.getUserInfo()!=null || uri.getFragment()!=null || uri.getPort()!=-1
+                    || host==null || !(Set.of("fcm.googleapis.com","updates.push.services.mozilla.com","web.push.apple.com").contains(host)
+                    || host.endsWith(".push.apple.com"))) throw new IllegalArgumentException();
+            byte[] key=Base64.getUrlDecoder().decode(request.p256dh());
+            if (key.length!=65 || key[0]!=4 || Base64.getUrlDecoder().decode(request.auth()).length!=16
+                    || !Set.of("en","ko","ja").contains(request.locale())) throw new IllegalArgumentException();
+            validator.validateHttpUrl(request.endpoint());
+        } catch (Exception e) { throw new InvalidRequestException("Invalid or unsupported browser push subscription"); }
+    }
+
+    public int send(WebPushSubscriptionRequest subscription,String payload) throws Exception {
+        if (!enabled()) return 503;
+        validate(subscription);
+        if (java.security.Security.getProvider("BC")==null) java.security.Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
+        var notification=new nl.martijndwars.webpush.Notification(subscription.endpoint(),subscription.p256dh(),subscription.auth(),payload.getBytes(StandardCharsets.UTF_8),3600);
+        var prepared=new PreparedPush(publicKey,privateKey,subject).prepare(notification);
+        URI target=URI.create(prepared.getUrl());
+        if(!target.getHost().equals(URI.create(subscription.endpoint()).getHost())) throw new IllegalStateException("Push destination changed");
+        var request=HttpRequest.newBuilder(target).timeout(Duration.ofSeconds(10));
+        prepared.getHeaders().forEach(request::header);
+        request.POST(HttpRequest.BodyPublishers.ofByteArray(prepared.getBody()));
+        return http.send(request.build(),HttpResponse.BodyHandlers.discarding()).statusCode();
+    }
+
+    private static final class PreparedPush extends nl.martijndwars.webpush.AbstractPushService {
+        PreparedPush(String publicKey,String privateKey,String subject) throws java.security.GeneralSecurityException {super(publicKey,privateKey,subject);}
+        nl.martijndwars.webpush.HttpRequest prepare(nl.martijndwars.webpush.Notification notification) throws Exception {
+            return prepareRequest(notification,nl.martijndwars.webpush.Encoding.AES128GCM);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebPushWorker.java b/src/main/java/com/salkcoding/oswl/service/notification/WebPushWorker.java
new file mode 100644
index 00000000..b830d26e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebPushWorker.java
@@ -0,0 +1,24 @@
+package com.salkcoding.oswl.service.notification;
+import lombok.RequiredArgsConstructor;
+import net.javacrumbs.shedlock.spring.annotation.SchedulerLock;
+import org.springframework.scheduling.annotation.Scheduled;
+import org.springframework.stereotype.Service;
+@Service @RequiredArgsConstructor
+public class WebPushWorker {
+    private final WebPushService service;
+    private final WebPushTransport transport;
+    @Scheduled(fixedDelayString="${oswl.web-push.poll-ms:30000}")
+    @SchedulerLock(name="webPushDelivery",lockAtMostFor="PT5M",lockAtLeastFor="PT1S")
+    public void deliver() {
+        if(!transport.enabled())return;
+        service.cleanup();
+        for(Long id:service.due()) {
+            var attempt=service.prepare(id); if(attempt==null)continue;
+            int status=0;
+            try{status=transport.send(attempt.subscription(),attempt.payload());}
+            catch(InterruptedException e){Thread.currentThread().interrupt();return;}
+            catch(Exception ignored){ /* Only status and attempt counts enter audit logs. */ }
+            service.complete(id,status);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebhookClient.java b/src/main/java/com/salkcoding/oswl/service/notification/WebhookClient.java
new file mode 100644
index 00000000..9071789f
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebhookClient.java
@@ -0,0 +1,142 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.salkcoding.oswl.domain.entity.notification.WebhookDelivery;
+import com.salkcoding.oswl.domain.enums.WebhookDeliveryStatus;
+import com.salkcoding.oswl.domain.enums.WebhookEventType;
+import com.salkcoding.oswl.repository.notification.WebhookDeliveryRepository;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Component;
+import org.springframework.transaction.annotation.Propagation;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.net.URI;
+import java.net.http.HttpClient;
+import java.net.http.HttpRequest;
+import java.net.http.HttpResponse;
+import java.nio.charset.StandardCharsets;
+import java.time.Duration;
+
+/**
+ * Sends JSON payloads to an incoming webhook URL with retry.
+ * Every attempt is persisted so failures are visible in the UI.
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class WebhookClient {
+
+    private static final int MAX_RETRIES = 3;
+    private static final long INITIAL_BACKOFF_MS = 1_000;
+    private static final int CONNECT_TIMEOUT_SECONDS = 10;
+    private static final int READ_TIMEOUT_SECONDS = 30;
+
+    private final WebhookDeliveryRepository webhookDeliveryRepository;
+    private final HttpClient httpClient = HttpClient.newBuilder()
+            .connectTimeout(Duration.ofSeconds(CONNECT_TIMEOUT_SECONDS))
+            .build();
+
+    public record DeliveryOutcome(boolean success, int lastHttpStatus, String lastError) {}
+
+    /**
+     * Sends the payload with exponential-backoff retries. A row is written for each
+     * attempt so the history shows transient failures as well as the final outcome.
+     * Runs in a fresh transaction so delivery history is recorded even when the caller
+     * is read-only or rolls back.
+     */
+    @Transactional(propagation = Propagation.REQUIRES_NEW)
+    public DeliveryOutcome send(String url, String payload, WebhookEventType eventType,
+                                Long projectId, String projectName, String referenceId) {
+        DeliveryOutcome outcome = null;
+        for (int attempt = 0; attempt <= MAX_RETRIES; attempt++) {
+            outcome = trySend(url, payload, eventType, projectId, projectName, referenceId, attempt);
+            if (outcome.success) {
+                return outcome;
+            }
+            if (attempt < MAX_RETRIES) {
+                long backoff = INITIAL_BACKOFF_MS * (1L << attempt);
+                log.debug("[Webhook] Retrying {} in {} ms (attempt {} failed)", eventType, backoff, attempt);
+                try {
+                    Thread.sleep(backoff);
+                } catch (InterruptedException e) {
+                    Thread.currentThread().interrupt();
+                    return outcome;
+                }
+            }
+        }
+        return outcome != null ? outcome : new DeliveryOutcome(false, 0, "No attempts made");
+    }
+
+    private DeliveryOutcome trySend(String url, String payload, WebhookEventType eventType,
+                                    Long projectId, String projectName, String referenceId,
+                                    int attempt) {
+        int status = 0;
+        String error = null;
+        try {
+            HttpRequest request = HttpRequest.newBuilder()
+                    .uri(URI.create(url))
+                    .header("Content-Type", "application/json")
+                    .POST(HttpRequest.BodyPublishers.ofString(payload, StandardCharsets.UTF_8))
+                    .timeout(Duration.ofSeconds(READ_TIMEOUT_SECONDS))
+                    .build();
+
+            HttpResponse response = httpClient.send(request,
+                    HttpResponse.BodyHandlers.ofString(StandardCharsets.UTF_8));
+            status = response.statusCode();
+
+            if (status >= 200 && status < 300) {
+                recordDelivery(eventType, projectId, projectName, referenceId,
+                        WebhookDeliveryStatus.SUCCESS, status, null, attempt, payload);
+                log.info("[Webhook] {} delivered successfully (status={})", eventType, status);
+                return new DeliveryOutcome(true, status, null);
+            }
+            error = "HTTP " + status;
+            if (response.body() != null && !response.body().isBlank()) {
+                error += ": " + truncate(response.body(), 200);
+            }
+        } catch (IllegalArgumentException e) {
+            error = "Invalid URL: " + e.getMessage();
+        } catch (java.net.http.HttpTimeoutException e) {
+            error = "Request timed out";
+        } catch (java.io.IOException e) {
+            error = "Connection failed: " + e.getMessage();
+        } catch (InterruptedException e) {
+            Thread.currentThread().interrupt();
+            error = "Interrupted";
+        } catch (Exception e) {
+            error = e.getClass().getSimpleName() + ": " + e.getMessage();
+        }
+
+        recordDelivery(eventType, projectId, projectName, referenceId,
+                WebhookDeliveryStatus.FAILED, status == 0 ? null : status, error, attempt, payload);
+        log.warn("[Webhook] {} delivery failed (attempt={}, status={}): {}",
+                eventType, attempt, status, error);
+        return new DeliveryOutcome(false, status, error);
+    }
+
+    private void recordDelivery(WebhookEventType eventType, Long projectId, String projectName,
+                                String referenceId, WebhookDeliveryStatus status, Integer httpStatus,
+                                String error, int attempt, String payload) {
+        try {
+            WebhookDelivery delivery = WebhookDelivery.builder()
+                    .eventType(eventType)
+                    .projectId(projectId)
+                    .projectName(truncate(projectName, 160))
+                    .referenceId(truncate(referenceId, 40))
+                    .status(status)
+                    .httpStatus(httpStatus)
+                    .errorMessage(truncate(error, 500))
+                    .retryCount(attempt)
+                    .payloadSummary(truncate(payload, 500))
+                    .build();
+            webhookDeliveryRepository.save(delivery);
+        } catch (Exception e) {
+            log.error("[Webhook] Failed to persist delivery history: {}", e.getMessage());
+        }
+    }
+
+    private static String truncate(String s, int max) {
+        if (s == null) return null;
+        return s.length() <= max ? s : s.substring(0, max) + "…";
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebhookMessageBuilder.java b/src/main/java/com/salkcoding/oswl/service/notification/WebhookMessageBuilder.java
new file mode 100644
index 00000000..d066aa2a
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebhookMessageBuilder.java
@@ -0,0 +1,135 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.databind.node.ArrayNode;
+import com.fasterxml.jackson.databind.node.ObjectNode;
+import com.salkcoding.oswl.domain.enums.WebhookProvider;
+import lombok.RequiredArgsConstructor;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Component;
+
+import java.util.List;
+
+/**
+ * Builds Slack/Teams incoming-webhook payloads. Messages contain a short summary
+ * plus a deep link back to OsWL when {@code oswl.public-url} is configured.
+ */
+@Component
+@RequiredArgsConstructor
+public class WebhookMessageBuilder {
+
+    private static final int MAX_SUMMARY_LINES = 10;
+    private static final int MAX_LINE_LENGTH = 300;
+
+    private final ObjectMapper objectMapper;
+
+    @Value("${oswl.public-url:}")
+    private String publicUrl;
+
+    /**
+     * Builds a provider-specific JSON payload.
+     */
+    public String buildPayload(WebhookProvider provider, String title, List summaryLines,
+                               String deepLinkPath) {
+        String deepLink = buildDeepLink(deepLinkPath);
+        return switch (provider) {
+            case SLACK -> buildSlackPayload(title, summaryLines, deepLink);
+            case TEAMS -> buildTeamsPayload(title, summaryLines, deepLink);
+        };
+    }
+
+    private String buildSlackPayload(String title, List summaryLines, String deepLink) {
+        ObjectNode root = objectMapper.createObjectNode();
+        root.put("text", title);
+
+        ArrayNode blocks = root.putArray("blocks");
+        ObjectNode header = blocks.addObject();
+        header.put("type", "header");
+        ObjectNode headerText = header.putObject("text");
+        headerText.put("type", "plain_text");
+        headerText.put("text", title);
+        headerText.put("emoji", true);
+
+        StringBuilder body = new StringBuilder();
+        int count = 0;
+        for (String line : summaryLines) {
+            if (count >= MAX_SUMMARY_LINES) {
+                body.append("…");
+                break;
+            }
+            String trimmed = line.length() > MAX_LINE_LENGTH
+                    ? line.substring(0, MAX_LINE_LENGTH) + "…"
+                    : line;
+            body.append(trimmed).append("\n");
+            count++;
+        }
+
+        ObjectNode section = blocks.addObject();
+        section.put("type", "section");
+        ObjectNode sectionText = section.putObject("text");
+        sectionText.put("type", "mrkdwn");
+        sectionText.put("text", body.toString().stripTrailing());
+
+        if (deepLink != null && !deepLink.isBlank()) {
+            ObjectNode actions = blocks.addObject();
+            actions.put("type", "section");
+            ObjectNode linkText = actions.putObject("text");
+            linkText.put("type", "mrkdwn");
+            linkText.put("text", "<" + deepLink + "|Open in OsWL>");
+        }
+
+        return root.toString();
+    }
+
+    private String buildTeamsPayload(String title, List summaryLines, String deepLink) {
+        ObjectNode card = objectMapper.createObjectNode();
+        card.put("@type", "MessageCard");
+        card.put("@context", "https://schema.org/extensions");
+        card.put("themeColor", "D94638");
+        card.put("summary", title);
+
+        ArrayNode sections = card.putArray("sections");
+        ObjectNode mainSection = sections.addObject();
+        mainSection.put("activityTitle", title);
+
+        StringBuilder facts = new StringBuilder();
+        int count = 0;
+        for (String line : summaryLines) {
+            if (count >= MAX_SUMMARY_LINES) {
+                facts.append("…");
+                break;
+            }
+            String trimmed = line.length() > MAX_LINE_LENGTH
+                    ? line.substring(0, MAX_LINE_LENGTH) + "…"
+                    : line;
+            facts.append(trimmed).append("\n\n");
+            count++;
+        }
+        mainSection.put("text", facts.toString().stripTrailing());
+
+        if (deepLink != null && !deepLink.isBlank()) {
+            ArrayNode potentialAction = card.putArray("potentialAction");
+            ObjectNode action = potentialAction.addObject();
+            action.put("@type", "OpenUri");
+            action.put("name", "Open in OsWL");
+            ArrayNode targets = action.putArray("targets");
+            ObjectNode target = targets.addObject();
+            target.put("os", "default");
+            target.put("uri", deepLink);
+        }
+
+        return card.toString();
+    }
+
+    private String buildDeepLink(String path) {
+        if (publicUrl == null || publicUrl.isBlank()) {
+            return null;
+        }
+        String base = publicUrl.replaceAll("/+$", "");
+        String p = path != null ? path : "";
+        if (p.startsWith("/")) {
+            p = p.substring(1);
+        }
+        return base + "/" + p;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebhookNotificationService.java b/src/main/java/com/salkcoding/oswl/service/notification/WebhookNotificationService.java
new file mode 100644
index 00000000..354c20d1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebhookNotificationService.java
@@ -0,0 +1,189 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.vulnerability.CveAlert;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.notification.WebhookSetting;
+import com.salkcoding.oswl.domain.enums.WebhookEventType;
+import com.salkcoding.oswl.dto.gate.GateResultDto;
+import com.salkcoding.oswl.service.notification.WebhookSettingService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import java.util.List;
+
+/**
+ * Sends Slack/Teams webhook notifications for security events.
+ * Each event type can be toggled independently in the webhook settings.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class WebhookNotificationService {
+
+    private final WebhookSettingService webhookSettingService;
+    private final WebhookMessageBuilder messageBuilder;
+    private final WebhookClient webhookClient;
+    private final AuditLogService auditLogService;
+    private final WebPushService webPushService;
+
+    // ── New CVE alerts ───────────────────────────────────────────────────
+
+    public void sendNewCveAlert(Project project, List alerts) {
+        var highRisk=alerts.stream().filter(a->a.getSeverity()==com.salkcoding.oswl.domain.enums.RiskLevel.HIGH || a.getSeverity()==com.salkcoding.oswl.domain.enums.RiskLevel.CRITICAL).toList();
+        if (!highRisk.isEmpty()) {
+            try {webPushService.enqueue(project.getId(),"NEW_HIGH_RISK","CVE:"+highRisk.getFirst().getId());}
+            catch(Exception e) {log.warn("[WebPush] Could not queue new vulnerability notification for projectId={}",project.getId());}
+        }
+        WebhookSetting setting = webhookSettingService.getSetting();
+        if (!shouldNotify(setting, WebhookEventType.NEW_CVE)) {
+            return;
+        }
+        String url = webhookSettingService.getDecryptedUrl();
+        if (url == null || url.isBlank()) {
+            log.warn("[Webhook] NEW_CVE notification skipped — URL not configured");
+            return;
+        }
+
+        String title = "OsWL — " + alerts.size() + " new vulnerabilit"
+                + (alerts.size() == 1 ? "y" : "ies") + " detected in " + project.getName();
+        List lines = alerts.stream()
+                .map(a -> "• " + a.getVulnId()
+                        + (a.getCveId() != null && !a.getCveId().equals(a.getVulnId())
+                                ? " (" + a.getCveId() + ")" : "")
+                        + " — " + a.getLibraryName() + " " + nullSafe(a.getLibraryVersion())
+                        + (a.getFixVersion() != null ? " — fix: " + a.getFixVersion() : ""))
+                .limit(10)
+                .toList();
+
+        String payload = messageBuilder.buildPayload(setting.getProvider(), title, lines,
+                "/projects/" + project.getId() + "/security-center");
+        sendAndAudit(url, payload, WebhookEventType.NEW_CVE, project,
+                alerts.isEmpty() ? null : alerts.getFirst().getId().toString());
+    }
+
+    // ── Gate failure ─────────────────────────────────────────────────────
+
+    public void sendGateFailure(Long projectId, GateResultDto result) {
+        try {webPushService.enqueue(projectId,"GATE_FAILURE","GATE:"+result.scanId());}
+        catch(Exception e) {log.warn("[WebPush] Could not queue gate notification for projectId={}",projectId);}
+        WebhookSetting setting = webhookSettingService.getSetting();
+        if (!shouldNotify(setting, WebhookEventType.GATE_FAILURE)) {
+            return;
+        }
+        String url = webhookSettingService.getDecryptedUrl();
+        if (url == null || url.isBlank()) {
+            log.warn("[Webhook] GATE_FAILURE notification skipped — URL not configured");
+            return;
+        }
+
+        String title = "OsWL — Security gate failed for " + result.projectName();
+        List lines = List.of(
+                "Project: " + result.projectName(),
+                "Version: " + nullSafe(result.scanVersion()),
+                "Evaluated: " + result.evaluatedCount() + " component(s)",
+                "New vulnerabilities: " + result.newVulnerabilityCount(),
+                "Violations: " + result.violations().size(),
+                "Thresholds — severity ≥ " + result.thresholds().failOnSeverity()
+                        + ", KEV=" + result.thresholds().failOnKev()
+                        + ", EPSS≥" + result.thresholds().failOnEpss()
+                        + ", license=" + result.thresholds().failOnLicenseViolation()
+        );
+
+        Project project = projectId != null ? Project.builder().id(projectId).name(result.projectName()).build() : null;
+        String payload = messageBuilder.buildPayload(setting.getProvider(), title, lines,
+                projectId != null ? "/projects/" + projectId + "/security-center" : null);
+        sendAndAudit(url, payload, WebhookEventType.GATE_FAILURE, project,
+                result.scanId() != null ? result.scanId().toString() : null);
+    }
+
+    // ── Scan failure ─────────────────────────────────────────────────────
+
+    public void sendScanFailure(Long projectId, String projectName, Long scanId, String reason) {
+        WebhookSetting setting = webhookSettingService.getSetting();
+        if (!shouldNotify(setting, WebhookEventType.SCAN_FAILURE)) {
+            return;
+        }
+        String url = webhookSettingService.getDecryptedUrl();
+        if (url == null || url.isBlank()) {
+            log.warn("[Webhook] SCAN_FAILURE notification skipped — URL not configured");
+            return;
+        }
+
+        String title = "OsWL — Scan failed" + (projectName != null ? " for " + projectName : "");
+        List lines = List.of(
+                "Project: " + nullSafe(projectName),
+                "Scan ID: " + scanId,
+                "Reason: " + nullSafe(reason)
+        );
+
+        Project project = projectId != null ? Project.builder().id(projectId).name(projectName).build() : null;
+        String payload = messageBuilder.buildPayload(setting.getProvider(), title, lines,
+                projectId != null ? "/projects/" + projectId + "/scan-history" : null);
+        sendAndAudit(url, payload, WebhookEventType.SCAN_FAILURE, project,
+                scanId != null ? scanId.toString() : null);
+    }
+
+    // ── Waiver expiry imminent ───────────────────────────────────────────
+
+    public void sendWaiverExpiryImminent(Project project, List componentSummaries) {
+        WebhookSetting setting = webhookSettingService.getSetting();
+        if (!shouldNotify(setting, WebhookEventType.WAIVER_EXPIRY)) {
+            return;
+        }
+        String url = webhookSettingService.getDecryptedUrl();
+        if (url == null || url.isBlank()) {
+            log.warn("[Webhook] WAIVER_EXPIRY notification skipped — URL not configured");
+            return;
+        }
+
+        String title = "OsWL — Waiver(s) expiring soon in " + project.getName();
+        List lines = componentSummaries.stream().limit(10).toList();
+
+        String payload = messageBuilder.buildPayload(setting.getProvider(), title, lines,
+                "/projects/" + project.getId() + "/security-center");
+        sendAndAudit(url, payload, WebhookEventType.WAIVER_EXPIRY, project, null);
+    }
+
+    // ── Internal helpers ─────────────────────────────────────────────────
+
+    private boolean shouldNotify(WebhookSetting setting, WebhookEventType eventType) {
+        if (!setting.isConfigured()) {
+            return false;
+        }
+        return switch (eventType) {
+            case NEW_CVE -> setting.isNotifyNewCve();
+            case GATE_FAILURE -> setting.isNotifyGateFailure();
+            case SCAN_FAILURE -> setting.isNotifyScanFailure();
+            case WAIVER_EXPIRY -> setting.isNotifyWaiverExpiry();
+        };
+    }
+
+    private void sendAndAudit(String url, String payload, WebhookEventType eventType,
+                              Project project, String referenceId) {
+        Long projectId = project != null ? project.getId() : null;
+        String projectName = project != null ? project.getName() : null;
+
+        WebhookClient.DeliveryOutcome outcome = webhookClient.send(
+                url, payload, eventType, projectId, projectName, referenceId);
+
+        if (outcome.success()) {
+            auditLogService.logAnonymous("[system]", "WEBHOOK.SENT", "PROJECT",
+                    projectId != null ? projectId.toString() : "-",
+                    projectName != null ? projectName : "-",
+                    "event=" + eventType + " ref=" + nullSafe(referenceId));
+        } else {
+            auditLogService.logAnonymous("[system]", "WEBHOOK.FAILED", "PROJECT",
+                    projectId != null ? projectId.toString() : "-",
+                    projectName != null ? projectName : "-",
+                    "event=" + eventType + " ref=" + nullSafe(referenceId)
+                            + " status=" + outcome.lastHttpStatus()
+                            + " error=" + nullSafe(outcome.lastError()));
+        }
+    }
+
+    private static String nullSafe(String s) {
+        return s != null ? s : "-";
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/notification/WebhookSettingService.java b/src/main/java/com/salkcoding/oswl/service/notification/WebhookSettingService.java
new file mode 100644
index 00000000..6f7c809d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/notification/WebhookSettingService.java
@@ -0,0 +1,135 @@
+package com.salkcoding.oswl.service.notification;
+
+import com.salkcoding.oswl.auth.security.EncryptionService;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.notification.WebhookSetting;
+import com.salkcoding.oswl.domain.enums.WebhookProvider;
+import com.salkcoding.oswl.exception.OutboundUrlBlockedException;
+import com.salkcoding.oswl.repository.notification.WebhookSettingRepository;
+import com.github.benmanes.caffeine.cache.Cache;
+import com.github.benmanes.caffeine.cache.Caffeine;
+import com.salkcoding.oswl.security.OutboundUrlValidator;
+import com.salkcoding.oswl.service.config.CacheInvalidationService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.time.Duration;
+
+/**
+ * Persistence and validation for the single-row webhook settings.
+ * The incoming webhook URL is encrypted at rest using the same AES-256-GCM
+ * mechanism as VCS tokens and mail passwords.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class WebhookSettingService {
+
+    private static final String CACHE_KEY = "current";
+
+    private final WebhookSettingRepository webhookSettingRepository;
+    private final EncryptionService encryptionService;
+    private final OutboundUrlValidator outboundUrlValidator;
+    private final AuditLogService auditLogService;
+    private final CacheInvalidationService cacheInvalidationService;
+
+    private final Cache webhookSettingCache = Caffeine.newBuilder()
+            .expireAfterWrite(Duration.ofMinutes(5))
+            .maximumSize(10)
+            .recordStats()
+            .build();
+
+    @Value("${oswl.airgapped.enabled:false}")
+    private boolean airgapped;
+
+    @Transactional(readOnly = true)
+    public WebhookSetting getSetting() {
+        WebhookSetting cached = webhookSettingCache.getIfPresent(CACHE_KEY);
+        if (cached != null) {
+            return cached;
+        }
+        WebhookSetting setting = webhookSettingRepository.findFirstByOrderByIdAsc()
+                .orElseGet(() -> WebhookSetting.builder()
+                        .provider(WebhookProvider.SLACK)
+                        .enabled(false)
+                        .build());
+        webhookSettingCache.put(CACHE_KEY, setting);
+        return setting;
+    }
+
+    /**
+     * Returns the decrypted webhook URL, or null when not configured.
+     * Callers must treat the result as a secret.
+     */
+    @Transactional(readOnly = true)
+    public String getDecryptedUrl() {
+        WebhookSetting setting = getSetting();
+        if (setting.getWebhookUrl() == null || setting.getWebhookUrl().isBlank()) {
+            return null;
+        }
+        try {
+            return encryptionService.decrypt(setting.getWebhookUrl());
+        } catch (Exception e) {
+            log.error("[Webhook] Stored URL could not be decrypted — re-save webhook settings.");
+            return null;
+        }
+    }
+
+    @Transactional
+    public void save(WebhookProvider provider, String urlPlain, boolean enabled,
+                     boolean notifyNewCve, boolean notifyGateFailure,
+                     boolean notifyScanFailure, boolean notifyWaiverExpiry) {
+        WebhookSetting setting = webhookSettingRepository.findFirstByOrderByIdAsc()
+                .orElseGet(() -> WebhookSetting.builder().build());
+
+        String normalized = normalizeUrl(urlPlain);
+        if (normalized != null && !normalized.isBlank()) {
+            validateUrl(normalized);
+        }
+
+        String encryptedUrl = (urlPlain != null && !urlPlain.isBlank())
+                ? encryptionService.encrypt(normalized)
+                : setting.getWebhookUrl();
+
+        setting.update(provider, encryptedUrl, enabled,
+                notifyNewCve, notifyGateFailure, notifyScanFailure, notifyWaiverExpiry);
+        webhookSettingRepository.save(setting);
+        webhookSettingCache.invalidate(CACHE_KEY);
+        cacheInvalidationService.bump(CacheInvalidationService.WEBHOOK_SETTINGS);
+
+        auditLogService.log("WEBHOOK.SETTINGS_UPDATE", "EXTERNAL_SETTING", "webhook", null,
+                "provider=" + provider + " enabled=" + enabled
+                        + " newCve=" + notifyNewCve + " gate=" + notifyGateFailure
+                        + " scan=" + notifyScanFailure + " waiver=" + notifyWaiverExpiry);
+    }
+
+    /** Drops the local cache; called by the invalidation poller when another instance changed the settings. */
+    public void evictLocalCache() {
+        webhookSettingCache.invalidateAll();
+    }
+
+    private void validateUrl(String url) {
+        try {
+            if (airgapped) {
+                outboundUrlValidator.validateInternalHttpUrl(url);
+            } else {
+                outboundUrlValidator.validateHttpUrl(url);
+            }
+        } catch (OutboundUrlBlockedException e) {
+            throw new IllegalArgumentException(e.getMessage());
+        }
+    }
+
+    private static String normalizeUrl(String url) {
+        if (url == null) return null;
+        String u = url.strip();
+        if (u.isEmpty()) return u;
+        if (!u.startsWith("http://") && !u.startsWith("https://")) {
+            u = "https://" + u;
+        }
+        return u;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/org/ExecutiveSummaryService.java b/src/main/java/com/salkcoding/oswl/service/org/ExecutiveSummaryService.java
new file mode 100644
index 00000000..4eb9c7b8
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/org/ExecutiveSummaryService.java
@@ -0,0 +1,30 @@
+package com.salkcoding.oswl.service.org;
+
+import com.salkcoding.oswl.auth.enums.Permission;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.dto.OrgProjectRiskDto;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+import org.springframework.ui.Model;
+import java.time.LocalDateTime;
+import java.util.List;
+
+@Service
+@RequiredArgsConstructor
+public class ExecutiveSummaryService {
+    private final OrgDashboardService dashboard;
+    private final AuditLogService audit;
+    public void populate(Model model) {
+        var auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth == null || !(auth.getPrincipal() instanceof OswlUserPrincipal principal) || !principal.hasPermission(Permission.ORG_DASHBOARD_VIEW))
+            throw new AccessDeniedException("Organization dashboard permission required");
+        dashboard.populateModel(model);
+        @SuppressWarnings("unchecked") var rows = (List) model.getAttribute("projectRows");
+        model.addAttribute("priorityProjects", rows.stream().filter(OrgProjectRiskDto::isScanned).limit(5).toList());
+        model.addAttribute("generatedAt", LocalDateTime.now().format(java.time.format.DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm")));
+        audit.log("ORG_SUMMARY.VIEW", "ORG_DASHBOARD", null, null, "organization risk summary");
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/OrgDashboardService.java b/src/main/java/com/salkcoding/oswl/service/org/OrgDashboardService.java
similarity index 67%
rename from src/main/java/com/salkcoding/oswl/service/OrgDashboardService.java
rename to src/main/java/com/salkcoding/oswl/service/org/OrgDashboardService.java
index 7d70e6c4..ac0604cf 100644
--- a/src/main/java/com/salkcoding/oswl/service/OrgDashboardService.java
+++ b/src/main/java/com/salkcoding/oswl/service/org/OrgDashboardService.java
@@ -1,13 +1,11 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.org;
 
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.OrgProjectRiskDto;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
@@ -21,8 +19,10 @@
 import java.util.ArrayList;
 import java.util.Comparator;
 import java.util.HashMap;
+import java.util.HashSet;
 import java.util.List;
 import java.util.Map;
+import java.util.Set;
 
 /**
  * Organization-wide portfolio roll-up for the admin dashboard.
@@ -41,7 +41,8 @@ public class OrgDashboardService {
 
     private final ProjectRepository       projectRepository;
     private final ScanResultRepository    scanResultRepository;
-    private final ScanComponentRepository scanComponentRepository;
+    private final LibraryRepository       libraryRepository;
+    private final com.salkcoding.oswl.service.scan.ScanSummaryReader summaryReader;
 
     private static final DateTimeFormatter DATE = DateTimeFormatter.ofPattern("yyyy.MM.dd");
 
@@ -49,17 +50,54 @@ public class OrgDashboardService {
     public void populateModel(Model model) {
         List projects = projectRepository.findAllByDeletedAtIsNullOrderByCreatedAtDesc();
 
+        // All completed scans of every project in one query, grouped per project (scannedAt
+        // DESC within each project) — the trend walk needs the full per-project history, not
+        // just the latest scan, so this is a real batch rather than a latest-per-project query.
+        Map> completedByProject = new HashMap<>();
+        for (Project project : projects) {
+            completedByProject.put(project.getId(), new ArrayList<>());
+        }
+        if (!projects.isEmpty()) {
+            List projectIds = projects.stream().map(Project::getId).toList();
+            for (ScanResult scan : scanResultRepository.findCompletedByProjectIdIn(projectIds)) {
+                completedByProject.get(scan.getProject().getId()).add(scan);
+            }
+        }
+
         // Latest completed scan per project (null when the project was never scanned)
         Map latestScanByProject = new HashMap<>();
-        Map> completedByProject = new HashMap<>();
         for (Project project : projects) {
-            List completed = scanResultRepository.findCompletedByProjectId(project.getId());
-            completedByProject.put(project.getId(), completed);
+            List completed = completedByProject.get(project.getId());
             if (!completed.isEmpty()) {
                 latestScanByProject.put(project.getId(), completed.getFirst());
             }
         }
 
+        // Per-project scans in ascending order for the trend's as-of walk
+        Map> scansAscByProject = new HashMap<>();
+        for (Project project : projects) {
+            List asc = new ArrayList<>(completedByProject.get(project.getId()));
+            asc.sort(Comparator.comparing(ScanResult::getScannedAt,
+                    Comparator.nullsLast(Comparator.naturalOrder())));
+            scansAscByProject.put(project.getId(), asc);
+        }
+
+        // Aggregate only scans referenced by the latest posture or a weekly trend bucket.
+        Set aggregateScanIds = new HashSet<>();
+        latestScanByProject.values().forEach(scan -> aggregateScanIds.add(scan.getId()));
+        LocalDate today = LocalDate.now();
+        for (int i = trendWeeks - 1; i >= 0; i--) {
+            LocalDateTime bucketEndExclusive = today.minusWeeks(i).plusDays(1).atStartOfDay();
+            for (Project project : projects) {
+                ScanResult asOf = latestScanAtOrBefore(scansAscByProject.get(project.getId()),
+                        bucketEndExclusive);
+                if (asOf != null) aggregateScanIds.add(asOf.getId());
+            }
+        }
+        List selectedScans = completedByProject.values().stream().flatMap(List::stream)
+                .filter(scan -> aggregateScanIds.contains(scan.getId())).toList();
+        Map postureByScanId = loadPosture(selectedScans);
+
         // ── Org-wide posture totals + worst-project ranking ──────────────
         int secCritical = 0, secHigh = 0, secMedium = 0, secLow = 0, secUnscored = 0;
         int licViolations = 0, licWarnings = 0, licUnknown = 0, licPermitted = 0;
@@ -77,10 +115,10 @@ public void populateModel(Model model) {
                 continue;
             }
 
-            List components = scanComponentRepository.findByScanResultId(latest.getId());
-            int[] sec = aggregateSecurity(components);
-            int[] lic = aggregateLicense(components);
-            int[] kev = aggregateKev(components);
+            Posture posture = postureByScanId.getOrDefault(latest.getId(), new Posture());
+            int[] sec = posture.security;
+            int[] lic = posture.licenses;
+            int[] kev = posture.kev;
 
             secCritical += sec[0]; secHigh   += sec[1]; secMedium += sec[2];
             secLow      += sec[3]; secUnscored += sec[4];
@@ -129,7 +167,31 @@ public void populateModel(Model model) {
         model.addAttribute("kevUnaddressed", kevUnaddressed);
         model.addAttribute("projectRows", rows);
 
-        addTrendModel(model, projects, completedByProject);
+        addTrendModel(model, projects, scansAscByProject, postureByScanId);
+    }
+
+    private static final class Posture {
+        final int[] security = new int[5];
+        final int[] licenses = new int[4];
+        final int[] kev = new int[2];
+    }
+
+    private Map loadPosture(List scans) {
+        Map result = new HashMap<>();
+        if (scans.isEmpty()) return result;
+        summaryReader.read(scans).forEach((id, summary) -> {
+            Posture posture = new Posture();
+            System.arraycopy(summary.security(), 0, posture.security, 0, 5);
+            System.arraycopy(summary.licenses(), 0, posture.licenses, 0, 4);
+            result.put(id, posture);
+        });
+        List scanIds = scans.stream().filter(scan -> !scan.isArchived()).map(ScanResult::getId).toList();
+        if (scanIds.isEmpty()) return result;
+        for (Object[] row : libraryRepository.countPortfolioKev(scanIds)) {
+            result.get((Long) row[0]).kev[0] = Math.toIntExact(((Number) row[1]).longValue());
+            result.get((Long) row[0]).kev[1] = Math.toIntExact(((Number) row[2]).longValue());
+        }
+        return result;
     }
 
     // ── Org-wide vulnerability trend (weekly buckets) ────────────────────
@@ -140,7 +202,8 @@ public void populateModel(Model model) {
      * Same severity bucketing as {@link RiskTrendService}.
      */
     private void addTrendModel(Model model, List projects,
-                               Map> completedByProject) {
+                               Map> scansAscByProject,
+                               Map postureByScanId) {
         List  labels      = new ArrayList<>();
         List trCritical  = new ArrayList<>();
         List trHigh      = new ArrayList<>();
@@ -148,15 +211,6 @@ private void addTrendModel(Model model, List projects,
         List trLow       = new ArrayList<>();
         List trUnscored  = new ArrayList<>();
 
-        // Per-project scans in ascending order for the as-of walk
-        Map> scansAscByProject = new HashMap<>();
-        for (Project project : projects) {
-            List asc = new ArrayList<>(completedByProject.get(project.getId()));
-            asc.sort(Comparator.comparing(ScanResult::getScannedAt,
-                    Comparator.nullsLast(Comparator.naturalOrder())));
-            scansAscByProject.put(project.getId(), asc);
-        }
-
         // Severity counts are computed once per distinct scan actually used by a bucket
         Map secCountsByScanId = new HashMap<>();
 
@@ -172,7 +226,7 @@ private void addTrendModel(Model model, List projects,
                         bucketEndExclusive);
                 if (asOf == null) continue;
                 int[] sec = secCountsByScanId.computeIfAbsent(asOf.getId(),
-                        scanId -> aggregateSecurity(scanComponentRepository.findByScanResultId(scanId)));
+                        scanId -> postureByScanId.getOrDefault(scanId, new Posture()).security);
                 c += sec[0]; h += sec[1]; m += sec[2]; l += sec[3]; n += sec[4];
             }
             trCritical.add(c); trHigh.add(h); trMedium.add(m); trLow.add(l); trUnscored.add(n);
@@ -196,51 +250,4 @@ private ScanResult latestScanAtOrBefore(List scansAsc, LocalDateTime
         return chosen;
     }
 
-    // ── Aggregations (mirrors RiskTrendService / ComplianceReportService) ─
-
-    private int[] aggregateSecurity(List components) {
-        int c = 0, h = 0, m = 0, l = 0, n = 0;
-        for (ScanComponent sc : components) {
-            for (Cve cve : sc.getLibrary().getCves()) {
-                if (cve.getSeverity() == null) { n++; continue; }
-                switch (cve.getSeverity()) {
-                    case CRITICAL -> c++;
-                    case HIGH     -> h++;
-                    case MEDIUM   -> m++;
-                    case LOW      -> l++;
-                    case NONE     -> n++;
-                    default       -> {}
-                }
-            }
-        }
-        return new int[]{c, h, m, l, n};
-    }
-
-    private int[] aggregateLicense(List components) {
-        int violations = 0, warnings = 0, unknown = 0, permitted = 0;
-        for (ScanComponent sc : components) {
-            switch (sc.getLibrary().getLicenseStatus()) {
-                case RESTRICTED -> violations++;
-                case CAUTION    -> warnings++;
-                case UNKNOWN    -> unknown++;
-                default         -> permitted++;
-            }
-        }
-        return new int[]{violations, warnings, unknown, permitted};
-    }
-
-    /** [0] = total KEV-listed CVEs, [1] = KEV-listed CVEs on un-triaged (not reviewed/deferred) components. */
-    private int[] aggregateKev(List components) {
-        int total = 0, unaddressed = 0;
-        for (ScanComponent sc : components) {
-            boolean triaged = sc.isDeferred() || sc.isReviewed();
-            for (Cve cve : sc.getLibrary().getCves()) {
-                if (Boolean.TRUE.equals(cve.getKevListed())) {
-                    total++;
-                    if (!triaged) unaddressed++;
-                }
-            }
-        }
-        return new int[]{total, unaddressed};
-    }
 }
diff --git a/src/main/java/com/salkcoding/oswl/service/org/TeamBootstrapRunner.java b/src/main/java/com/salkcoding/oswl/service/org/TeamBootstrapRunner.java
new file mode 100644
index 00000000..85fce038
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/org/TeamBootstrapRunner.java
@@ -0,0 +1,27 @@
+package com.salkcoding.oswl.service.org;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.context.event.ApplicationReadyEvent;
+import org.springframework.context.ApplicationListener;
+import org.springframework.core.annotation.Order;
+import org.springframework.stereotype.Component;
+
+/**
+ * Guarantees the organization/team skeleton exists on ddl-auto deployments (local H2).
+ * Flyway-managed deployments get the same rows from the schema migration; both paths are
+ * idempotent and converge on: one organization, one "Default" team, no team-less projects.
+ */
+@Slf4j
+@Component
+@Order(41)
+@RequiredArgsConstructor
+public class TeamBootstrapRunner implements ApplicationListener {
+
+    private final TeamService teamService;
+
+    @Override
+    public void onApplicationEvent(ApplicationReadyEvent event) {
+        teamService.ensureDefaults();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/org/TeamService.java b/src/main/java/com/salkcoding/oswl/service/org/TeamService.java
new file mode 100644
index 00000000..a6bc1bb7
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/org/TeamService.java
@@ -0,0 +1,339 @@
+package com.salkcoding.oswl.service.org;
+
+import com.salkcoding.oswl.auth.entity.User;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.controller.spec.TeamControllerSpec;
+import com.salkcoding.oswl.domain.entity.org.Organization;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.entity.org.TeamMember;
+import com.salkcoding.oswl.domain.enums.TeamMemberRole;
+import com.salkcoding.oswl.dto.TeamMemberDto;
+import com.salkcoding.oswl.dto.TeamSummaryDto;
+import com.salkcoding.oswl.repository.org.OrganizationRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.org.TeamMemberRepository;
+import com.salkcoding.oswl.repository.org.TeamRepository;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.List;
+import java.util.Map;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+
+/**
+ * Team management inside the single-organization hierarchy
+ * (Organization → Team → Project, teams nested at most two levels).
+ *
+ * Team membership grants access to every project of the team (OR-ed with direct project
+ * membership in {@link ProjectAccessService}). Managing the hierarchy itself requires the
+ * global {@code TEAM_MANAGE} permission or SYSTEM_ADMIN, enforced at the controller.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class TeamService {
+
+    /** Name of the built-in team that absorbs pre-hierarchy projects. Never deletable. */
+    public static final String DEFAULT_TEAM_NAME = "Default";
+    /** Name of the single organization row of this deployment. */
+    public static final String DEFAULT_ORGANIZATION_NAME = "Default Organization";
+
+    private final OrganizationRepository organizationRepository;
+    private final TeamRepository teamRepository;
+    private final TeamMemberRepository teamMemberRepository;
+    private final ProjectRepository projectRepository;
+    private final UserRepository userRepository;
+    private final AuditLogService auditLogService;
+
+    // ── Bootstrap ────────────────────────────────────────────────────────
+
+    /**
+     * Guarantees the single organization and its "Default" team exist, and folds any
+     * team-less project into the Default team. Idempotent — mirrors what the schema
+     * migration does in SQL for Flyway-managed deployments, so ddl-auto deployments
+     * (local H2) end up in the same state.
+     *
+     * @return the Default team
+     */
+    @Transactional
+    public Team ensureDefaults() {
+        Organization org = organizationRepository.findFirstByOrderByIdAsc()
+                .orElseGet(() -> organizationRepository.save(
+                        Organization.builder().name(DEFAULT_ORGANIZATION_NAME).build()));
+        Team defaultTeam = teamRepository.findByName(DEFAULT_TEAM_NAME)
+                .orElseGet(() -> teamRepository.save(Team.builder()
+                        .organization(org)
+                        .name(DEFAULT_TEAM_NAME)
+                        .description("Projects created before teams were introduced.")
+                        .build()));
+        int folded = projectRepository.assignTeamWhereNull(defaultTeam);
+        if (folded > 0) {
+            log.info("[Team] Folded {} team-less project(s) into the Default team", folded);
+        }
+        return defaultTeam;
+    }
+
+    // ── Team CRUD ────────────────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public List listTeams() {
+        return teamRepository.findAllByOrderByNameAsc().stream()
+                .map(this::toSummary)
+                .collect(Collectors.toList());
+    }
+
+    @Transactional
+    public TeamSummaryDto createTeam(String name, String description, Long parentTeamId) {
+        String trimmed = requireName(name);
+        if (teamRepository.existsByName(trimmed)) {
+            throw new IllegalArgumentException("A team with this name already exists.");
+        }
+        Organization org = organizationRepository.findFirstByOrderByIdAsc()
+                .orElseThrow(() -> new IllegalStateException("Organization is not initialized."));
+        Team parent = resolveParent(parentTeamId);
+        Team saved = teamRepository.save(Team.builder()
+                .organization(org)
+                .name(trimmed)
+                .description(trimToNull(description))
+                .parent(parent)
+                .build());
+        auditLogService.log("TEAM.CREATE", "TEAM", saved.getId().toString(), saved.getName(),
+                parent != null ? "parent=" + parent.getName() : null);
+        log.info("[Team] Created id={} name='{}'", saved.getId(), saved.getName());
+        return toSummary(saved);
+    }
+
+    @Transactional
+    public TeamSummaryDto updateTeam(Long teamId, String name, String description, Long parentTeamId) {
+        Team team = getTeam(teamId);
+        String trimmed = requireName(name);
+        if (!trimmed.equals(team.getName()) && teamRepository.existsByName(trimmed)) {
+            throw new IllegalArgumentException("A team with this name already exists.");
+        }
+        if (isDefaultTeam(team) && !DEFAULT_TEAM_NAME.equals(trimmed)) {
+            throw new IllegalArgumentException("The Default team cannot be renamed.");
+        }
+        Team parent = resolveParent(parentTeamId);
+        if (parent != null) {
+            if (parent.getId().equals(team.getId())) {
+                throw new IllegalArgumentException("A team cannot be its own parent.");
+            }
+            if (!teamRepository.findByParentId(team.getId()).isEmpty()) {
+                // Team already has children — giving it a parent would create a third level.
+                throw new IllegalArgumentException("A team with child teams cannot be nested under another team.");
+            }
+        }
+        team.update(trimmed, trimToNull(description), parent);
+        teamRepository.save(team);
+        auditLogService.log("TEAM.UPDATE", "TEAM", team.getId().toString(), team.getName(),
+                parent != null ? "parent=" + parent.getName() : "parent=null");
+        log.info("[Team] Updated id={} name='{}'", team.getId(), team.getName());
+        return toSummary(team);
+    }
+
+    /**
+     * Deletes a team: its projects move to the Default team (so team members of Default
+     * keep things visible and no project ends up orphaned), child teams are detached to
+     * top level, and memberships go with the team.
+     */
+    @Transactional
+    public void deleteTeam(Long teamId) {
+        Team team = getTeam(teamId);
+        if (isDefaultTeam(team)) {
+            throw new IllegalArgumentException("The Default team cannot be deleted.");
+        }
+        Team defaultTeam = teamRepository.findByName(DEFAULT_TEAM_NAME)
+                .orElseThrow(() -> new IllegalStateException("Default team is missing."));
+        int moved = projectRepository.reassignTeam(team, defaultTeam);
+        for (Team child : teamRepository.findByParentId(team.getId())) {
+            child.clearParent();
+            teamRepository.save(child);
+        }
+        teamMemberRepository.deleteByTeamId(team.getId());
+        teamRepository.delete(team);
+        auditLogService.log("TEAM.DELETE", "TEAM", teamId.toString(), team.getName(),
+                "projectsMovedToDefault=" + moved);
+        log.info("[Team] Deleted id={} name='{}' projectsMoved={}", teamId, team.getName(), moved);
+    }
+
+    // ── Membership ───────────────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public List listMembers(Long teamId) {
+        getTeam(teamId);
+        List members = teamMemberRepository.findByTeamIdOrderByCreatedAtAsc(teamId);
+        Map usersById = userRepository.findAllById(
+                        members.stream().map(TeamMember::getUserId).toList()).stream()
+                .collect(Collectors.toMap(User::getId, Function.identity()));
+        return members.stream()
+                .map(m -> {
+                    User user = usersById.get(m.getUserId());
+                    return TeamMemberDto.builder()
+                            .userId(m.getUserId())
+                            .displayName(user != null ? user.getDisplayName() : "?")
+                            .email(user != null ? user.getEmail() : "-")
+                            .role(m.getRole().name())
+                            .build();
+                })
+                .collect(Collectors.toList());
+    }
+
+    @Transactional
+    public void addMember(Long teamId, Long userId, TeamMemberRole role) {
+        Team team = getTeam(teamId);
+        User user = userRepository.findById(userId)
+                .orElseThrow(() -> new IllegalArgumentException("User not found: " + userId));
+        if (teamMemberRepository.existsByTeamIdAndUserId(teamId, userId)) {
+            throw new IllegalArgumentException("The user is already a member of this team.");
+        }
+        teamMemberRepository.save(TeamMember.builder()
+                .team(team)
+                .userId(userId)
+                .role(role != null ? role : TeamMemberRole.MEMBER)
+                .build());
+        auditLogService.log("TEAM.MEMBER_ADD", "TEAM", teamId.toString(), team.getName(),
+                "user=" + user.getEmail() + " role=" + (role != null ? role : TeamMemberRole.MEMBER));
+        log.info("[Team] Added userId={} to teamId={}", userId, teamId);
+    }
+
+    @Transactional
+    public void updateMemberRole(Long teamId, Long userId, TeamMemberRole role) {
+        if (role == null) {
+            throw new IllegalArgumentException("Role is required.");
+        }
+        TeamMember member = teamMemberRepository.findByTeamIdAndUserId(teamId, userId)
+                .orElseThrow(() -> new IllegalArgumentException("The user is not a member of this team."));
+        member.changeRole(role);
+        teamMemberRepository.save(member);
+        auditLogService.log("TEAM.MEMBER_ROLE", "TEAM", teamId.toString(), member.getTeam().getName(),
+                "userId=" + userId + " role=" + role);
+        log.info("[Team] Set role={} for userId={} in teamId={}", role, userId, teamId);
+    }
+
+    @Transactional
+    public void removeMember(Long teamId, Long userId) {
+        TeamMember member = teamMemberRepository.findByTeamIdAndUserId(teamId, userId)
+                .orElseThrow(() -> new IllegalArgumentException("The user is not a member of this team."));
+        teamMemberRepository.delete(member);
+        auditLogService.log("TEAM.MEMBER_REMOVE", "TEAM", teamId.toString(), member.getTeam().getName(),
+                "userId=" + userId);
+        log.info("[Team] Removed userId={} from teamId={}", userId, teamId);
+    }
+
+    // ── Project assignment ───────────────────────────────────────────────
+
+    /** The built-in Default team, or null when the bootstrap has not run yet. */
+    @Transactional(readOnly = true)
+    public Team findDefaultTeam() {
+        return teamRepository.findByName(DEFAULT_TEAM_NAME).orElse(null);
+    }
+
+    /** Active projects currently assigned to the team (team detail view). */
+    @Transactional(readOnly = true)
+    public List listTeamProjects(Long teamId) {
+        getTeam(teamId);
+        return projectRepository.findAllByTeamIdAndDeletedAtIsNullOrderByCreatedAtDesc(teamId).stream()
+                .map(p -> new TeamControllerSpec.TeamProjectDto(p.getId(), p.getName()))
+                .collect(Collectors.toList());
+    }
+
+    /** Moves a project under a team. Both teams' member grants shift accordingly. */
+    @Transactional
+    public void assignProjectToTeam(Long projectId, Long teamId) {
+        Project project = projectRepository.findByIdAndDeletedAtIsNull(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        Team team = getTeam(teamId);
+        project.assignTeam(team);
+        projectRepository.save(project);
+        auditLogService.log("PROJECT.TEAM_ASSIGN", "PROJECT", projectId.toString(), project.getName(),
+                "team=" + team.getName());
+        log.info("[Team] Assigned projectId={} to teamId={}", projectId, teamId);
+    }
+
+    /** Removes a project from its team (project keeps only direct member grants). */
+    @Transactional
+    public void unassignProject(Long projectId) {
+        Project project = projectRepository.findByIdAndDeletedAtIsNull(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        String previousTeam = project.getTeam() != null ? project.getTeam().getName() : null;
+        project.assignTeam(null);
+        projectRepository.save(project);
+        auditLogService.log("PROJECT.TEAM_ASSIGN", "PROJECT", projectId.toString(), project.getName(),
+                "team=null (was " + previousTeam + ")");
+        log.info("[Team] Unassigned projectId={} from team='{}'", projectId, previousTeam);
+    }
+
+    /** Enabled users for the member picker — id, display name and email only. */
+    @Transactional(readOnly = true)
+    public List userDirectory() {
+        return userRepository.findAll().stream()
+                .filter(User::isEnabled)
+                .map(u -> TeamMemberDto.builder()
+                        .userId(u.getId())
+                        .displayName(u.getDisplayName())
+                        .email(u.getEmail())
+                        .build())
+                .collect(Collectors.toList());
+    }
+
+    // ── Internal ─────────────────────────────────────────────────────────
+
+    private Team getTeam(Long teamId) {
+        return teamRepository.findById(teamId)
+                .orElseThrow(() -> new IllegalArgumentException("Team not found: " + teamId));
+    }
+
+    private boolean isDefaultTeam(Team team) {
+        return DEFAULT_TEAM_NAME.equals(team.getName());
+    }
+
+    private String requireName(String name) {
+        if (name == null || name.isBlank()) {
+            throw new IllegalArgumentException("Team name is required.");
+        }
+        String trimmed = name.trim();
+        if (trimmed.length() > 200) {
+            throw new IllegalArgumentException("Team name must not exceed 200 characters.");
+        }
+        return trimmed;
+    }
+
+    private Team resolveParent(Long parentTeamId) {
+        if (parentTeamId == null) {
+            return null;
+        }
+        Team parent = getTeam(parentTeamId);
+        if (parent.getParent() != null) {
+            // Two levels max — a nested team cannot have children of its own.
+            throw new IllegalArgumentException("Teams can only be nested two levels deep.");
+        }
+        return parent;
+    }
+
+    private static String trimToNull(String value) {
+        if (value == null || value.isBlank()) {
+            return null;
+        }
+        String trimmed = value.trim();
+        return trimmed.length() > 1000 ? trimmed.substring(0, 1000) : trimmed;
+    }
+
+    private TeamSummaryDto toSummary(Team team) {
+        Team parent = team.getParent();
+        return TeamSummaryDto.builder()
+                .id(team.getId())
+                .name(team.getName())
+                .description(team.getDescription())
+                .parentTeamId(parent != null ? parent.getId() : null)
+                .parentTeamName(parent != null ? parent.getName() : null)
+                .memberCount(teamMemberRepository.countByTeamId(team.getId()))
+                .projectCount(projectRepository.countByTeamIdAndDeletedAtIsNull(team.getId()))
+                .defaultTeam(isDefaultTeam(team))
+                .build();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/policy/PolicyService.java b/src/main/java/com/salkcoding/oswl/service/policy/PolicyService.java
new file mode 100644
index 00000000..6eabfccb
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/policy/PolicyService.java
@@ -0,0 +1,661 @@
+package com.salkcoding.oswl.service.policy;
+
+import com.salkcoding.oswl.aop.Auditable;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.org.Organization;
+import com.salkcoding.oswl.domain.entity.policy.Policy;
+import com.salkcoding.oswl.domain.entity.policy.PolicyException;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionStatus;
+import com.salkcoding.oswl.domain.enums.PolicyExceptionTargetType;
+import com.salkcoding.oswl.domain.enums.PolicyScopeType;
+import com.salkcoding.oswl.dto.policy.*;
+import com.salkcoding.oswl.exception.OutboundUrlBlockedException;
+import com.salkcoding.oswl.repository.org.OrganizationRepository;
+import com.salkcoding.oswl.repository.policy.PolicyExceptionRepository;
+import com.salkcoding.oswl.repository.policy.PolicyRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.org.TeamRepository;
+import com.salkcoding.oswl.security.OutboundUrlValidator;
+import com.salkcoding.oswl.service.gate.GatePolicyService.GateOptions;
+import com.salkcoding.oswl.service.git.GitCloneCredentials;
+import com.salkcoding.oswl.service.git.GitCloneExecutor;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.yaml.snakeyaml.LoaderOptions;
+import org.yaml.snakeyaml.Yaml;
+import org.yaml.snakeyaml.constructor.SafeConstructor;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.time.LocalDateTime;
+import java.util.*;
+
+/**
+ * Manages Policy-as-Code rows and resolves the effective gate thresholds for a project.
+ *
+ * Resolution order is organization → team → project. An explicit field on a lower level
+ * overrides the same field from a higher level unless a higher level has locked it.
+ * When no policy row exists, {@link #resolveGateOptions(Long)} returns an all-null
+ * {@link GateOptions} so {@link GatePolicyService} falls back to its {@code @Value} defaults.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class PolicyService {
+
+    private final PolicyRepository policyRepository;
+    private final PolicyExceptionRepository policyExceptionRepository;
+    private final OrganizationRepository organizationRepository;
+    private final TeamRepository teamRepository;
+    private final ProjectRepository projectRepository;
+    private final AuditLogService auditLogService;
+    private final GitCloneExecutor gitCloneExecutor;
+    private final OutboundUrlValidator outboundUrlValidator;
+
+    private static final String YAML_GATE_KEY = "gate";
+
+    /**
+     * Loader for user-supplied policy YAML (import + GitOps sync). {@code SafeConstructor}
+     * restricts deserialization to plain Java types (Map/List/String/Number/Boolean/Date) —
+     * the default {@link Yaml} constructor allows YAML type tags to instantiate arbitrary
+     * classes on the classpath, which is a known remote-code-execution vector for
+     * attacker-controlled YAML.
+     */
+    private static final Yaml SAFE_YAML = new Yaml(new SafeConstructor(new LoaderOptions()));
+
+    // ── CRUD ─────────────────────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public List findAll() {
+        return policyRepository.findAllByOrderByCreatedAtDesc().stream()
+                .map(this::toDto)
+                .toList();
+    }
+
+    @Transactional(readOnly = true)
+    public PolicyDto findById(Long id) {
+        return toDto(policyRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Policy not found: " + id)));
+    }
+
+    @Transactional(readOnly = true)
+    public PolicyDto findByScope(PolicyScopeType scopeType, Long scopeId) {
+        return toDto(findPolicyByScope(scopeType, scopeId)
+                .orElseThrow(() -> new IllegalArgumentException(
+                        "Policy not found for " + scopeType + "=" + scopeId)));
+    }
+
+    /** Populates the scope selector in the policy editor UI. */
+    @Transactional(readOnly = true)
+    public PolicyScopeOptionsDto getScopeOptions() {
+        PolicyScopeOptionsDto.Option organization = organizationRepository.findAll().stream()
+                .findFirst()
+                .map(o -> new PolicyScopeOptionsDto.Option(o.getId(), o.getName()))
+                .orElse(null);
+        List teams = teamRepository.findAll().stream()
+                .map(t -> new PolicyScopeOptionsDto.Option(t.getId(), t.getName()))
+                .sorted(Comparator.comparing(PolicyScopeOptionsDto.Option::name))
+                .toList();
+        List projects = projectRepository.findAllByDeletedAtIsNullOrderByCreatedAtDesc().stream()
+                .map(p -> new PolicyScopeOptionsDto.Option(p.getId(), p.getName()))
+                .toList();
+        return new PolicyScopeOptionsDto(organization, teams, projects);
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY.CREATE", targetType = "POLICY",
+               targetIdExpr = "#result.id.toString()", targetNameExpr = "#result.name")
+    public PolicyDto create(PolicyRequest request) {
+        validateScope(request.scopeType(), request.scopeId());
+        assertNoExistingPolicy(request.scopeType(), request.scopeId());
+        Policy policy = buildPolicy(request);
+        return toDto(policyRepository.save(policy));
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY.UPDATE", targetType = "POLICY",
+               targetIdExpr = "#id.toString()", targetNameExpr = "#result.name")
+    public PolicyDto update(Long id, PolicyRequest request) {
+        Policy policy = policyRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Policy not found: " + id));
+        validateScope(request.scopeType(), request.scopeId());
+        if (!matchesExistingScope(policy, request.scopeType(), request.scopeId())) {
+            assertNoExistingPolicy(request.scopeType(), request.scopeId());
+            policy = policy.toBuilder()
+                    .scope(request.scopeType())
+                    .organization(resolveOrganization(request.scopeType(), request.scopeId()))
+                    .team(resolveTeam(request.scopeType(), request.scopeId()))
+                    .project(resolveProject(request.scopeType(), request.scopeId()))
+                    .build();
+        }
+        policy.update(request.name(), request.description(), request.locked(), request.enabled(),
+                request.failOnSeverity(), request.failOnKev(), request.failOnEpss(),
+                request.failOnLicenseViolation(), request.onlyNew(),
+                request.onlyReachable(), request.failOnSecrets());
+        return toDto(policy);
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY.DELETE", targetType = "POLICY",
+               targetIdExpr = "#id.toString()", targetNameExpr = "#result.name", when = Auditable.When.BEFORE)
+    public PolicyDto delete(Long id) {
+        Policy policy = policyRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Policy not found: " + id));
+        policyRepository.delete(policy);
+        return toDto(policy);
+    }
+
+    // ── Effective policy / gate options ──────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public EffectivePolicyDto getEffectivePolicy(Long projectId) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        PolicyHierarchy h = loadHierarchy(project);
+        GateOptions merged = merge(h);
+        return EffectivePolicyDto.builder()
+                .projectId(projectId)
+                .organizationPolicy(h.org().map(this::toDto).orElse(null))
+                .teamPolicy(h.team().map(this::toDto).orElse(null))
+                .projectPolicy(h.project().map(this::toDto).orElse(null))
+                .failOnSeverity(merged.failOnSeverity())
+                .failOnKev(merged.failOnKev())
+                .failOnEpss(merged.failOnEpss())
+                .failOnLicenseViolation(merged.failOnLicenseViolation())
+                .onlyNew(merged.onlyNew())
+                .onlyReachable(merged.onlyReachable())
+                .failOnSecrets(merged.failOnSecrets())
+                .build();
+    }
+
+    /**
+     * Returns a {@link GateOptions} populated with the effective policy values.
+     * Fields that are not defined by any policy in the hierarchy remain null so that
+     * {@link GatePolicyService} can fall back to its {@code @Value} defaults.
+     */
+    @Transactional(readOnly = true)
+    public GateOptions resolveGateOptions(Long projectId) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        return merge(loadHierarchy(project));
+    }
+
+    // ── YAML export / import ─────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public String exportEffectiveAsYaml(Long projectId) {
+        EffectivePolicyDto effective = getEffectivePolicy(projectId);
+        Map root = new LinkedHashMap<>();
+        root.put("name", "effective-policy");
+        root.put("description", "Effective policy for project " + projectId);
+        root.put("locked", false);
+        root.put("enabled", true);
+        root.put(YAML_GATE_KEY, toYamlMap(effective));
+        return new Yaml().dump(root);
+    }
+
+    @Transactional(readOnly = true)
+    public String exportAllAsYaml() {
+        List> policies = findAll().stream()
+                .map(this::toYamlMap)
+                .toList();
+        Map root = new LinkedHashMap<>();
+        root.put("policies", policies);
+        return new Yaml().dump(root);
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY.IMPORT", targetType = "POLICY",
+               targetIdExpr = "'bulk'", targetNameExpr = "'YAML import'")
+    public List importFromYaml(String yaml) {
+        Object parsed = SAFE_YAML.load(yaml);
+        if (!(parsed instanceof Map map)) {
+            throw new IllegalArgumentException("YAML must contain a map.");
+        }
+        List result = new ArrayList<>();
+        Object policies = map.get("policies");
+        if (policies instanceof List list) {
+            for (Object item : list) {
+                result.add(importSingle(item));
+            }
+        } else {
+            result.add(importSingle(parsed));
+        }
+        return result;
+    }
+
+    // ── GitOps sync ──────────────────────────────────────────────────────
+
+    @Transactional
+    @Auditable(action = "POLICY.GITOPS_SYNC", targetType = "PROJECT",
+               targetIdExpr = "#request.projectId().toString()",
+               targetNameExpr = "#result.name")
+    public PolicyDto syncFromGitRepository(PolicyGitOpsRequest request) {
+        Project project = projectRepository.findById(request.projectId())
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + request.projectId()));
+        if (request.repositoryUrl() == null || request.repositoryUrl().isBlank()) {
+            throw new IllegalArgumentException("Repository URL is required.");
+        }
+        // SSRF guard: repositoryUrl is attacker-controllable (any project member with
+        // POLICY_MANAGE can trigger this), so it must go through the same loopback/private-
+        // network/cloud-metadata block as every other user-supplied outbound URL in the app.
+        try {
+            outboundUrlValidator.validateHttpUrl(request.repositoryUrl());
+        } catch (OutboundUrlBlockedException e) {
+            throw new IllegalArgumentException(e.getMessage());
+        }
+        Path tempDir = createTempDir();
+        try {
+            GitCloneCredentials creds = (request.accessToken() != null && !request.accessToken().isBlank())
+                    ? new GitCloneCredentials("x-access-token", request.accessToken())
+                    : null;
+            gitCloneExecutor.clone(request.repositoryUrl(), creds, request.branch(), tempDir,
+                    "policy-gitops-" + project.getId());
+            Path policyFile = tempDir.resolve(".oswl/policy.yaml");
+            if (!Files.exists(policyFile)) {
+                throw new IllegalArgumentException("Repository does not contain .oswl/policy.yaml");
+            }
+            String yaml = Files.readString(policyFile);
+            PolicyDto imported = importSingle(SAFE_YAML.load(yaml));
+            PolicyRequest projectScoped = new PolicyRequest(
+                    PolicyScopeType.PROJECT, project.getId(), imported.getName(), imported.getDescription(),
+                    imported.isLocked(), imported.isEnabled(), imported.getFailOnSeverity(),
+                    imported.getFailOnKev(), imported.getFailOnEpss(), imported.getFailOnLicenseViolation(),
+                    imported.getOnlyNew(), imported.getOnlyReachable(), imported.getFailOnSecrets());
+            return saveOrUpdateScoped(projectScoped);
+        } catch (Exception e) {
+            log.error("[PolicyGitOps] Failed to sync projectId={} from {}: {}",
+                    project.getId(), request.repositoryUrl(), e.getMessage());
+            throw new RuntimeException("GitOps policy sync failed: " + e.getMessage(), e);
+        } finally {
+            deleteQuietly(tempDir);
+        }
+    }
+
+    // ── Exceptions (waivers) ─────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public List listExceptions(Long projectId) {
+        return policyExceptionRepository.findByProjectIdOrderByCreatedAtDesc(projectId).stream()
+                .map(this::toDto)
+                .toList();
+    }
+
+    /**
+     * Approved, unexpired exceptions for a project — the set {@link GatePolicyService}
+     * checks a violation against before letting it fail the gate.
+     */
+    @Transactional(readOnly = true)
+    public List findActiveExceptions(Long projectId) {
+        LocalDateTime now = LocalDateTime.now();
+        return policyExceptionRepository
+                .findByProjectIdAndStatusOrderByCreatedAtDesc(projectId, PolicyExceptionStatus.APPROVED).stream()
+                .filter(ex -> ex.getExpiry().isAfter(now))
+                .toList();
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY_EXCEPTION.REQUEST", targetType = "PROJECT",
+               targetIdExpr = "#request.projectId().toString()", targetNameExpr = "#result.reason")
+    public PolicyExceptionDto requestException(PolicyExceptionRequest request, Long requesterUserId, String requesterName) {
+        Project project = projectRepository.findById(request.projectId())
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + request.projectId()));
+        if (request.reason() == null || request.reason().isBlank()) {
+            throw new IllegalArgumentException("A reason is required.");
+        }
+        if (request.expiry() == null || !request.expiry().isAfter(LocalDateTime.now())) {
+            throw new IllegalArgumentException("Expiry must be a future date.");
+        }
+        PolicyException exception = PolicyException.builder()
+                .project(project)
+                .requesterUserId(requesterUserId)
+                .requesterName(requesterName)
+                .reason(request.reason())
+                .expiry(request.expiry())
+                .targetType(request.targetType() != null ? request.targetType() : PolicyExceptionTargetType.ALL)
+                .targetId(request.targetId())
+                .componentCoordinate(request.componentCoordinate())
+                .build();
+        return toDto(policyExceptionRepository.save(exception));
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY_EXCEPTION.APPROVE", targetType = "POLICY_EXCEPTION",
+               targetIdExpr = "#id.toString()", targetNameExpr = "#result.reason")
+    public PolicyExceptionDto approveException(Long id, Long approverUserId, String approverName) {
+        PolicyException exception = policyExceptionRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Policy exception not found: " + id));
+        exception.approve(approverUserId, approverName);
+        return toDto(exception);
+    }
+
+    @Transactional
+    @Auditable(action = "POLICY_EXCEPTION.REVOKE", targetType = "POLICY_EXCEPTION",
+               targetIdExpr = "#id.toString()", targetNameExpr = "#result.reason")
+    public PolicyExceptionDto revokeException(Long id) {
+        PolicyException exception = policyExceptionRepository.findById(id)
+                .orElseThrow(() -> new IllegalArgumentException("Policy exception not found: " + id));
+        exception.revoke();
+        return toDto(exception);
+    }
+
+    private PolicyExceptionDto toDto(PolicyException e) {
+        return PolicyExceptionDto.builder()
+                .id(e.getId())
+                .projectId(e.getProject().getId())
+                .requesterUserId(e.getRequesterUserId())
+                .requesterName(e.getRequesterName())
+                .approverUserId(e.getApproverUserId())
+                .approverName(e.getApproverName())
+                .reason(e.getReason())
+                .expiry(e.getExpiry())
+                .status(e.getStatus())
+                .targetType(e.getTargetType())
+                .targetId(e.getTargetId())
+                .componentCoordinate(e.getComponentCoordinate())
+                .createdAt(e.getCreatedAt())
+                .updatedAt(e.getUpdatedAt())
+                .approvedAt(e.getApprovedAt())
+                .revokedAt(e.getRevokedAt())
+                .build();
+    }
+
+    // ── Internal helpers ─────────────────────────────────────────────────
+
+    private PolicyDto saveOrUpdateScoped(PolicyRequest request) {
+        Optional existing = findPolicyByScope(request.scopeType(), request.scopeId());
+        if (existing.isPresent()) {
+            return update(existing.get().getId(), request);
+        }
+        return create(request);
+    }
+
+    private PolicyDto importSingle(Object parsed) {
+        if (!(parsed instanceof Map map)) {
+            throw new IllegalArgumentException("Each policy must be a YAML map.");
+        }
+        PolicyScopeType scopeType = parseScopeType(getString(map, "scope"));
+        Long scopeId = parseLong(getString(map, "scopeId"));
+        if (scopeType == null || scopeId == null) {
+            throw new IllegalArgumentException("Policy YAML must contain 'scope' and 'scopeId'.");
+        }
+        Map gate = map.get(YAML_GATE_KEY) instanceof Map m ? m : map;
+        PolicyRequest request = new PolicyRequest(
+                scopeType,
+                scopeId,
+                getString(map, "name"),
+                getString(map, "description"),
+                Boolean.TRUE.equals(map.get("locked")),
+                !Boolean.FALSE.equals(map.get("enabled")),
+                getString(gate, "failOnSeverity"),
+                (Boolean) gate.get("failOnKev"),
+                (Double) gate.get("failOnEpss"),
+                (Boolean) gate.get("failOnLicenseViolation"),
+                (Boolean) gate.get("onlyNew"),
+                (Boolean) gate.get("onlyReachable"),
+                (Boolean) gate.get("failOnSecrets")
+        );
+        return saveOrUpdateScoped(request);
+    }
+
+    private Policy buildPolicy(PolicyRequest request) {
+        return Policy.builder()
+                .scope(request.scopeType())
+                .organization(resolveOrganization(request.scopeType(), request.scopeId()))
+                .team(resolveTeam(request.scopeType(), request.scopeId()))
+                .project(resolveProject(request.scopeType(), request.scopeId()))
+                .name(request.name())
+                .description(request.description())
+                .locked(request.locked())
+                .enabled(request.enabled())
+                .failOnSeverity(request.failOnSeverity())
+                .failOnKev(request.failOnKev())
+                .failOnEpss(request.failOnEpss())
+                .failOnLicenseViolation(request.failOnLicenseViolation())
+                .onlyNew(request.onlyNew())
+                .onlyReachable(request.onlyReachable())
+                .failOnSecrets(request.failOnSecrets())
+                .build();
+    }
+
+    private Optional findPolicyByScope(PolicyScopeType scopeType, Long scopeId) {
+        return switch (scopeType) {
+            case ORGANIZATION -> policyRepository.findByOrganizationId(scopeId);
+            case TEAM -> policyRepository.findByTeamId(scopeId);
+            case PROJECT -> policyRepository.findByProjectId(scopeId);
+        };
+    }
+
+    private void assertNoExistingPolicy(PolicyScopeType scopeType, Long scopeId) {
+        if (findPolicyByScope(scopeType, scopeId).isPresent()) {
+            throw new IllegalStateException(
+                    "A policy already exists for " + scopeType + "=" + scopeId + ". Use update instead.");
+        }
+    }
+
+    private void validateScope(PolicyScopeType scopeType, Long scopeId) {
+        if (scopeType == null || scopeId == null) {
+            throw new IllegalArgumentException("Scope type and scope id are required.");
+        }
+        switch (scopeType) {
+            case ORGANIZATION -> organizationRepository.findById(scopeId)
+                    .orElseThrow(() -> new IllegalArgumentException("Organization not found: " + scopeId));
+            case TEAM -> teamRepository.findById(scopeId)
+                    .orElseThrow(() -> new IllegalArgumentException("Team not found: " + scopeId));
+            case PROJECT -> projectRepository.findById(scopeId)
+                    .orElseThrow(() -> new IllegalArgumentException("Project not found: " + scopeId));
+        }
+    }
+
+    private boolean matchesExistingScope(Policy policy, PolicyScopeType scopeType, Long scopeId) {
+        return policy.getScope() == scopeType && scopeId.equals(switch (scopeType) {
+            case ORGANIZATION -> policy.getOrganization() != null ? policy.getOrganization().getId() : null;
+            case TEAM -> policy.getTeam() != null ? policy.getTeam().getId() : null;
+            case PROJECT -> policy.getProject() != null ? policy.getProject().getId() : null;
+        });
+    }
+
+    private Organization resolveOrganization(PolicyScopeType scopeType, Long scopeId) {
+        return scopeType == PolicyScopeType.ORGANIZATION
+                ? organizationRepository.findById(scopeId).orElse(null)
+                : null;
+    }
+
+    private Team resolveTeam(PolicyScopeType scopeType, Long scopeId) {
+        return scopeType == PolicyScopeType.TEAM
+                ? teamRepository.findById(scopeId).orElse(null)
+                : null;
+    }
+
+    private Project resolveProject(PolicyScopeType scopeType, Long scopeId) {
+        return scopeType == PolicyScopeType.PROJECT
+                ? projectRepository.findById(scopeId).orElse(null)
+                : null;
+    }
+
+    private PolicyHierarchy loadHierarchy(Project project) {
+        Organization org = resolveOrganizationFor(project);
+        Optional orgPolicy = org != null ? policyRepository.findByOrganizationId(org.getId()) : Optional.empty();
+        Optional teamPolicy = project.getTeam() != null
+                ? policyRepository.findByTeamId(project.getTeam().getId())
+                : Optional.empty();
+        Optional projectPolicy = policyRepository.findByProjectId(project.getId());
+        return new PolicyHierarchy(orgPolicy, teamPolicy, projectPolicy);
+    }
+
+    private Organization resolveOrganizationFor(Project project) {
+        if (project.getTeam() != null && project.getTeam().getOrganization() != null) {
+            return project.getTeam().getOrganization();
+        }
+        return organizationRepository.findAll().stream().findFirst().orElse(null);
+    }
+
+    private GateOptions merge(PolicyHierarchy h) {
+        MutableGate m = new MutableGate();
+        applyLevel(h.org(), m);
+        applyLevel(h.team(), m);
+        applyLevel(h.project(), m);
+        return new GateOptions(null, m.failOnSeverity, m.failOnKev, m.failOnEpss,
+                m.failOnLicenseViolation, m.onlyNew, m.onlyReachable, m.failOnSecrets);
+    }
+
+    private void applyLevel(Optional policyOpt, MutableGate m) {
+        policyOpt.filter(Policy::isEnabled).ifPresent(policy -> {
+            applyField(policy.getFailOnSeverity(), "severity", policy.isLocked(), m);
+            applyField(policy.getFailOnKev(), "kev", policy.isLocked(), m);
+            applyField(policy.getFailOnEpss(), "epss", policy.isLocked(), m);
+            applyField(policy.getFailOnLicenseViolation(), "license", policy.isLocked(), m);
+            applyField(policy.getOnlyNew(), "onlyNew", policy.isLocked(), m);
+            applyField(policy.getOnlyReachable(), "onlyReachable", policy.isLocked(), m);
+            applyField(policy.getFailOnSecrets(), "failOnSecrets", policy.isLocked(), m);
+        });
+    }
+
+    private void applyField(Object value, String field, boolean locked, MutableGate m) {
+        if (value == null) {
+            return;
+        }
+        if (!m.locked.contains(field)) {
+            switch (field) {
+                case "severity" -> m.failOnSeverity = (String) value;
+                case "kev" -> m.failOnKev = (Boolean) value;
+                case "epss" -> m.failOnEpss = (Double) value;
+                case "license" -> m.failOnLicenseViolation = (Boolean) value;
+                case "onlyNew" -> m.onlyNew = (Boolean) value;
+                case "onlyReachable" -> m.onlyReachable = (Boolean) value;
+                case "failOnSecrets" -> m.failOnSecrets = (Boolean) value;
+            }
+        }
+        if (locked) {
+            m.locked.add(field);
+        }
+    }
+
+    private PolicyDto toDto(Policy policy) {
+        Long scopeId = switch (policy.getScope()) {
+            case ORGANIZATION -> policy.getOrganization() != null ? policy.getOrganization().getId() : null;
+            case TEAM -> policy.getTeam() != null ? policy.getTeam().getId() : null;
+            case PROJECT -> policy.getProject() != null ? policy.getProject().getId() : null;
+        };
+        String scopeName = switch (policy.getScope()) {
+            case ORGANIZATION -> policy.getOrganization() != null ? policy.getOrganization().getName() : null;
+            case TEAM -> policy.getTeam() != null ? policy.getTeam().getName() : null;
+            case PROJECT -> policy.getProject() != null ? policy.getProject().getName() : null;
+        };
+        return PolicyDto.builder()
+                .id(policy.getId())
+                .scope(policy.getScope())
+                .scopeId(scopeId)
+                .scopeName(scopeName)
+                .name(policy.getName())
+                .description(policy.getDescription())
+                .locked(policy.isLocked())
+                .enabled(policy.isEnabled())
+                .failOnSeverity(policy.getFailOnSeverity())
+                .failOnKev(policy.getFailOnKev())
+                .failOnEpss(policy.getFailOnEpss())
+                .failOnLicenseViolation(policy.getFailOnLicenseViolation())
+                .onlyNew(policy.getOnlyNew())
+                .onlyReachable(policy.getOnlyReachable())
+                .failOnSecrets(policy.getFailOnSecrets())
+                .createdAt(policy.getCreatedAt())
+                .updatedAt(policy.getUpdatedAt())
+                .build();
+    }
+
+    private Map toYamlMap(EffectivePolicyDto effective) {
+        Map gate = new LinkedHashMap<>();
+        if (effective.getFailOnSeverity() != null) gate.put("failOnSeverity", effective.getFailOnSeverity());
+        gate.put("failOnKev", effective.isFailOnKev());
+        if (effective.getFailOnEpss() != null) gate.put("failOnEpss", effective.getFailOnEpss());
+        gate.put("failOnLicenseViolation", effective.isFailOnLicenseViolation());
+        gate.put("onlyNew", effective.isOnlyNew());
+        if (effective.getOnlyReachable() != null) gate.put("onlyReachable", effective.getOnlyReachable());
+        if (effective.getFailOnSecrets() != null) gate.put("failOnSecrets", effective.getFailOnSecrets());
+        return gate;
+    }
+
+    private Map toYamlMap(PolicyDto dto) {
+        Map root = new LinkedHashMap<>();
+        root.put("scope", dto.getScope().name());
+        root.put("scopeId", dto.getScopeId());
+        root.put("name", dto.getName());
+        root.put("description", dto.getDescription());
+        root.put("locked", dto.isLocked());
+        root.put("enabled", dto.isEnabled());
+        Map gate = new LinkedHashMap<>();
+        if (dto.getFailOnSeverity() != null) gate.put("failOnSeverity", dto.getFailOnSeverity());
+        if (dto.getFailOnKev() != null) gate.put("failOnKev", dto.getFailOnKev());
+        if (dto.getFailOnEpss() != null) gate.put("failOnEpss", dto.getFailOnEpss());
+        if (dto.getFailOnLicenseViolation() != null) gate.put("failOnLicenseViolation", dto.getFailOnLicenseViolation());
+        if (dto.getOnlyNew() != null) gate.put("onlyNew", dto.getOnlyNew());
+        if (dto.getOnlyReachable() != null) gate.put("onlyReachable", dto.getOnlyReachable());
+        if (dto.getFailOnSecrets() != null) gate.put("failOnSecrets", dto.getFailOnSecrets());
+        root.put(YAML_GATE_KEY, gate);
+        return root;
+    }
+
+    private String getString(Map map, String key) {
+        Object value = map.get(key);
+        return value != null ? value.toString() : null;
+    }
+
+    private Long parseLong(String s) {
+        if (s == null || s.isBlank()) return null;
+        try {
+            return Long.valueOf(s);
+        } catch (NumberFormatException e) {
+            throw new IllegalArgumentException("Invalid numeric value: " + s);
+        }
+    }
+
+    private PolicyScopeType parseScopeType(String s) {
+        if (s == null || s.isBlank()) return null;
+        try {
+            return PolicyScopeType.valueOf(s.toUpperCase());
+        } catch (IllegalArgumentException e) {
+            throw new IllegalArgumentException("Invalid scope: " + s);
+        }
+    }
+
+    private Path createTempDir() {
+        try {
+            return Files.createTempDirectory("oswl-policy-gitops-");
+        } catch (Exception e) {
+            throw new RuntimeException("Could not create temporary directory", e);
+        }
+    }
+
+    private void deleteQuietly(Path dir) {
+        try {
+            if (dir == null || !Files.exists(dir)) return;
+            Files.walk(dir)
+                    .sorted(Comparator.reverseOrder())
+                    .forEach(p -> {
+                        try {
+                            Files.deleteIfExists(p);
+                        } catch (Exception ignored) {
+                        }
+                    });
+        } catch (Exception e) {
+            log.warn("[PolicyGitOps] Could not clean up temp dir {}: {}", dir, e.getMessage());
+        }
+    }
+
+    private record PolicyHierarchy(Optional org, Optional team, Optional project) {}
+
+    private static class MutableGate {
+        String failOnSeverity;
+        Boolean failOnKev;
+        Double failOnEpss;
+        Boolean failOnLicenseViolation;
+        Boolean onlyNew;
+        Boolean onlyReachable;
+        Boolean failOnSecrets;
+        final Set locked = new HashSet<>();
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ProjectAccessService.java b/src/main/java/com/salkcoding/oswl/service/project/ProjectAccessService.java
similarity index 69%
rename from src/main/java/com/salkcoding/oswl/service/ProjectAccessService.java
rename to src/main/java/com/salkcoding/oswl/service/project/ProjectAccessService.java
index eb42c7b3..870f8a83 100644
--- a/src/main/java/com/salkcoding/oswl/service/ProjectAccessService.java
+++ b/src/main/java/com/salkcoding/oswl/service/project/ProjectAccessService.java
@@ -1,12 +1,13 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.project;
 
 import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ProjectMember;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.project.ProjectMember;
 import com.salkcoding.oswl.domain.enums.ProjectMemberRole;
 import com.salkcoding.oswl.exception.ForbiddenException;
-import com.salkcoding.oswl.repository.ProjectMemberRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
+import com.salkcoding.oswl.repository.project.ProjectMemberRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.org.TeamMemberRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.core.Authentication;
@@ -14,11 +15,22 @@
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
+import java.util.ArrayList;
+import java.util.LinkedHashSet;
 import java.util.List;
+import java.util.Set;
 
 /**
- * Project-scoped access control. System administrators bypass membership checks.
- * All other users must be listed in {@code project_members} for the target project.
+ * Single entry point for project-scoped access control.
+ *
+ * Resolution order (first match wins, all grants are OR-ed):
+ * 
    
+ *   
  1. SYSTEM_ADMIN — bypasses every membership check.
    2. 
+ *   
  2. Team role — the user is a {@code team_members} row of the team that owns the project.
    3. 
+ *   
  3. Project membership — the user has a direct {@code project_members} row.
    4. 
+ * 

+ * Team grants and direct project memberships are additive, so pre-hierarchy
+ * {@code project_members} rows keep granting exactly the same access as before.
  */
 @Slf4j
 @Service
@@ -27,6 +39,7 @@ public class ProjectAccessService {
 
     private final ProjectMemberRepository projectMemberRepository;
     private final ProjectRepository projectRepository;
+    private final TeamMemberRepository teamMemberRepository;
 
     @Transactional(readOnly = true)
     public boolean canViewProject(Long projectId) {
@@ -37,7 +50,15 @@ public boolean canViewProject(Long projectId) {
         if (principal.isSystemAdmin()) {
             return true;
         }
-        return projectMemberRepository.existsByProjectIdAndUserId(projectId, principal.getUserId());
+        return hasProjectAccess(projectId, principal.getUserId());
+    }
+
+    /** Team grant OR direct project membership for the given user. */
+    private boolean hasProjectAccess(Long projectId, Long userId) {
+        if (teamMemberRepository.existsTeamGrantForProject(projectId, userId)) {
+            return true;
+        }
+        return projectMemberRepository.existsByProjectIdAndUserId(projectId, userId);
     }
 
     @Transactional(readOnly = true)
@@ -58,7 +79,7 @@ public void assertCanSubmitScan(Long projectId, Long userId) {
         if (current != null && current.isSystemAdmin()) {
             return;
         }
-        if (!projectMemberRepository.existsByProjectIdAndUserId(projectId, userId)) {
+        if (!hasProjectAccess(projectId, userId)) {
             log.warn("[ProjectACL] Denied scan submit projectId={} userId={}", projectId, userId);
             throw new ForbiddenException("You do not have access to submit scans for this project.");
         }
@@ -75,7 +96,11 @@ public List accessibleProjectIds() {
                     .map(Project::getId)
                     .toList();
         }
-        return projectMemberRepository.findProjectIdsByUserId(principal.getUserId());
+        // Direct project memberships ∪ projects owned by any team the user belongs to.
+        Set ids = new LinkedHashSet<>(
+                projectMemberRepository.findProjectIdsByUserId(principal.getUserId()));
+        ids.addAll(projectRepository.findProjectIdsByTeamMembership(principal.getUserId()));
+        return new ArrayList<>(ids);
     }
 
     @Transactional
diff --git a/src/main/java/com/salkcoding/oswl/service/ProjectMemberBootstrapRunner.java b/src/main/java/com/salkcoding/oswl/service/project/ProjectMemberBootstrapRunner.java
similarity index 88%
rename from src/main/java/com/salkcoding/oswl/service/ProjectMemberBootstrapRunner.java
rename to src/main/java/com/salkcoding/oswl/service/project/ProjectMemberBootstrapRunner.java
index 02b2e17d..f6542707 100644
--- a/src/main/java/com/salkcoding/oswl/service/ProjectMemberBootstrapRunner.java
+++ b/src/main/java/com/salkcoding/oswl/service/project/ProjectMemberBootstrapRunner.java
@@ -1,7 +1,7 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.project;
 
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.repository.ProjectRepository;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.boot.context.event.ApplicationReadyEvent;
diff --git a/src/main/java/com/salkcoding/oswl/service/ProjectService.java b/src/main/java/com/salkcoding/oswl/service/project/ProjectService.java
similarity index 77%
rename from src/main/java/com/salkcoding/oswl/service/ProjectService.java
rename to src/main/java/com/salkcoding/oswl/service/project/ProjectService.java
index 6224a99f..ea39fbf6 100644
--- a/src/main/java/com/salkcoding/oswl/service/ProjectService.java
+++ b/src/main/java/com/salkcoding/oswl/service/project/ProjectService.java
@@ -1,17 +1,21 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.project;
+import com.salkcoding.oswl.service.org.TeamService;
 
 import com.salkcoding.oswl.auth.enums.VcsProvider;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ProjectVersion;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.project.ProjectVersion;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.DeploymentProfile;
 import com.salkcoding.oswl.domain.enums.ImportSource;
 import com.salkcoding.oswl.domain.enums.ProjectMemberRole;
+import com.salkcoding.oswl.domain.enums.ScanStatus;
 import com.salkcoding.oswl.dto.ProjectSummaryDto;
 import com.salkcoding.oswl.dto.TrashProjectDto;
-import com.salkcoding.oswl.repository.CveAlertRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ProjectVersionRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.CveAlertRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.project.ProjectVersionRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.aop.Auditable;
 import lombok.RequiredArgsConstructor;
@@ -22,8 +26,9 @@
 import java.time.LocalDate;
 import java.time.temporal.ChronoUnit;
 import java.time.format.DateTimeFormatter;
+import java.util.HashMap;
 import java.util.List;
-import java.util.Set;
+import java.util.Map;
 import java.util.stream.Collectors;
 
 @Slf4j
@@ -37,6 +42,9 @@ public class ProjectService {
     private final AuditLogService auditLogService;
     private final ProjectAccessService projectAccessService;
     private final CveAlertRepository cveAlertRepository;
+    private final LibraryRepository libraryRepository;
+    private final TeamService teamService;
+    private final com.salkcoding.oswl.service.scan.ScanSummaryReader summaryReader;
 
     @Transactional(readOnly = true)
     public List findAll() {
@@ -47,8 +55,28 @@ public List findAll() {
         java.util.Map alertCounts = cveAlertRepository
                 .countUnacknowledgedByProjectIds(accessible).stream()
                 .collect(Collectors.toMap(row -> (Long) row[0], row -> (Long) row[1]));
-        return projectRepository.findAllByDeletedAtIsNullAndIdInOrderByCreatedAtDesc(accessible).stream()
-                .map(p -> toSummary(p, alertCounts.getOrDefault(p.getId(), 0L)))
+
+        List projects = projectRepository.findAllByDeletedAtIsNullAndIdInOrderByCreatedAtDesc(accessible);
+        if (projects.isEmpty()) {
+            return List.of();
+        }
+
+        // Batched in place of one findLatestByProjectId() call per project — see
+        // ScanResultRepository.findLatestByProjectIds() for why a tie on scannedAt is harmless here.
+        Map latestScanByProjectId = new HashMap<>();
+        for (ScanResult scan : scanResultRepository.findLatestByProjectIds(accessible)) {
+            latestScanByProjectId.putIfAbsent(scan.getProject().getId(), scan);
+        }
+
+        var summaries = summaryReader.read(latestScanByProjectId.values().stream()
+                .filter(scan -> scan.getStatus() == ScanStatus.COMPLETED).toList());
+
+        return projects.stream()
+                .map(p -> {
+                    ScanResult latest = latestScanByProjectId.get(p.getId());
+                    return toSummary(p, latest, alertCounts.getOrDefault(p.getId(), 0L),
+                            latest == null ? null : summaries.get(latest.getId()));
+                })
                 .collect(Collectors.toList());
     }
 
@@ -68,9 +96,8 @@ public void acknowledgeCveAlerts(Long projectId) {
 
     @Transactional(readOnly = true)
     public List findTrash() {
-        var accessible = Set.copyOf(projectAccessService.accessibleProjectIds());
         return projectRepository.findAllByDeletedAtIsNotNullOrderByDeletedAtAsc().stream()
-                .filter(p -> accessible.contains(p.getId()))
+                .filter(p -> projectAccessService.canViewProject(p.getId()))
                 .map(this::toTrash)
                 .collect(Collectors.toList());
     }
@@ -91,6 +118,7 @@ public Project create(String name) {
         Project project = Project.builder()
                 .name(name)
                 .createdByUserId(creatorId)
+                .team(teamService.findDefaultTeam())
                 .build();
         Project saved = projectRepository.save(project);
         if (creatorId != null) {
@@ -121,7 +149,8 @@ public Project upsertFromGitHub(VcsProvider provider, String owner, String repo,
         boolean isNewProject = projectRepository.findByGithubRepo(repoKey).isEmpty();
         Project project = projectRepository.findByGithubRepo(repoKey)
                 .orElseGet(() -> projectRepository.save(
-                        Project.builder().name(repoKey).createdByUserId(createdByUserId).build()
+                        Project.builder().name(repoKey).createdByUserId(createdByUserId)
+                                .team(teamService.findDefaultTeam()).build()
                 ));
 
         // 2. Create branch-level version row on first import of this branch
@@ -199,9 +228,8 @@ public void permanentDelete(Long id) {
 
     @Transactional
     public void permanentDeleteAll() {
-        var accessible = Set.copyOf(projectAccessService.accessibleProjectIds());
         List trash = projectRepository.findAllByDeletedAtIsNotNullOrderByDeletedAtAsc().stream()
-                .filter(p -> accessible.contains(p.getId()))
+                .filter(p -> projectAccessService.canViewProject(p.getId()))
                 .toList();
         trash.forEach(p -> auditLogService.log("PROJECT.PERMANENT_DELETE", "PROJECT",
                 p.getId().toString(), p.getName(), "bulk=all"));
@@ -240,11 +268,16 @@ public void restoreSelected(List ids) {
 
     private static final DateTimeFormatter IMPORT_FMT = DateTimeFormatter.ofPattern("yyyy.MM.dd HH:mm");
 
-    private ProjectSummaryDto toSummary(Project project, long newCveAlerts) {
+    private ProjectSummaryDto toSummary(Project project, ScanResult latestScan, long newCveAlerts,
+            com.salkcoding.oswl.service.scan.ScanSummaryReader.Summary summary) {
         String importedAt = project.getImportedAt() != null
                 ? project.getImportedAt().format(IMPORT_FMT)
                 : null;
 
+        Long teamId = project.getTeam() != null ? project.getTeam().getId() : null;
+        String teamName = project.getTeam() != null ? project.getTeam().getName() : null;
+        java.util.List tags = project.tagList();
+
         // Build the display string: "owner/repo#latestBranch" when available
         String githubDisplayRepo = project.getGithubRepo() != null
                 ? project.getGithubRepo()
@@ -254,12 +287,8 @@ private ProjectSummaryDto toSummary(Project project, long newCveAlerts) {
                 ? project.getVcsProvider().name()
                 : null;
 
-        // Get the most recent scan regardless of status so we can display in-progress and
-        // failed states on the project card (not just COMPLETED scans).
-        var latestScanOpt = scanResultRepository.findLatestByProjectId(project.getId());
-
         // No scan at all → truly unsaved / zombie project
-        if (latestScanOpt.isEmpty()) {
+        if (latestScan == null) {
             return ProjectSummaryDto.builder()
                     .id(project.getId())
                     .name(project.getName())
@@ -271,16 +300,18 @@ private ProjectSummaryDto toSummary(Project project, long newCveAlerts) {
                     .projectUuid(project.getProjectUuid())
                     .scanStatus(null)
                     .newCveAlerts(newCveAlerts)
+                    .teamId(teamId)
+                    .teamName(teamName)
+                    .tags(tags)
                     .build();
         }
 
-        var latestScan = latestScanOpt.get();
         var status = latestScan.getStatus();
 
         // For completed scans: aggregate full security/license data
-        if (status == com.salkcoding.oswl.domain.enums.ScanStatus.COMPLETED) {
-            int[] sec = aggregateSecurity(latestScan);
-            int[] lic = aggregateLicense(latestScan);
+        if (status == ScanStatus.COMPLETED) {
+            int[] sec = summary.security();
+            int[] lic = summary.licenses();
             String lastScanned = latestScan.getScannedAt() != null
                     ? latestScan.getScannedAt().toLocalDate().toString().replace("-", ".")
                     : "-";
@@ -299,6 +330,9 @@ private ProjectSummaryDto toSummary(Project project, long newCveAlerts) {
                     .projectUuid(project.getProjectUuid())
                     .scanStatus(status.name())
                     .newCveAlerts(newCveAlerts)
+                    .teamId(teamId)
+                    .teamName(teamName)
+                    .tags(tags)
                     .build();
         }
 
@@ -315,40 +349,12 @@ private ProjectSummaryDto toSummary(Project project, long newCveAlerts) {
                 .projectUuid(project.getProjectUuid())
                 .scanStatus(status.name())
                 .newCveAlerts(newCveAlerts)
+                .teamId(teamId)
+                .teamName(teamName)
+                .tags(tags)
                 .build();
     }
 
-    private int[] aggregateSecurity(com.salkcoding.oswl.domain.entity.ScanResult scan) {
-        int critical = 0, high = 0, medium = 0, low = 0, none = 0;
-        for (var comp : scan.getComponents()) {
-            for (var cve : comp.getLibrary().getCves()) {
-                if (cve.getSeverity() == null) continue;
-                switch (cve.getSeverity()) {
-                    case CRITICAL -> critical++;
-                    case HIGH     -> high++;
-                    case MEDIUM   -> medium++;
-                    case LOW      -> low++;
-                    case NONE     -> none++;
-                    default       -> {}
-                }
-            }
-        }
-        return new int[]{critical, high, medium, low, none};
-    }
-
-    private int[] aggregateLicense(com.salkcoding.oswl.domain.entity.ScanResult scan) {
-        int critical = 0, high = 0, unknown = 0, low = 0;
-        for (var comp : scan.getComponents()) {
-            switch (comp.getLibrary().getLicenseStatus()) {
-                case RESTRICTED -> critical++;
-                case CAUTION      -> high++;
-                case UNKNOWN   -> unknown++;
-                default        -> low++;
-            }
-        }
-        return new int[]{critical, high, unknown, low};
-    }
-
     @Transactional
     public void updateDeploymentProfile(Long projectId, DeploymentProfile profile) {
         Project project = projectRepository.findById(projectId)
@@ -359,6 +365,27 @@ public void updateDeploymentProfile(Long projectId, DeploymentProfile profile) {
                 String.valueOf(projectId), project.getName(), profile.name());
     }
 
+    /**
+     * Replaces the project's free-form tag labels (comma-separated, max 500 chars stored).
+     * Tags are display/filter metadata only — they do not affect access control.
+     */
+    @Transactional
+    public void updateTags(Long projectId, String tags) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        String normalized = tags == null ? null : tags.trim();
+        if (normalized != null && normalized.isEmpty()) {
+            normalized = null;
+        }
+        if (normalized != null && normalized.length() > 500) {
+            throw new IllegalArgumentException("Tags must not exceed 500 characters.");
+        }
+        project.updateTags(normalized);
+        projectRepository.save(project);
+        auditLogService.log("PROJECT.TAGS_UPDATE", "PROJECT",
+                String.valueOf(projectId), project.getName(), normalized);
+    }
+
     private static final DateTimeFormatter DELETED_FMT = DateTimeFormatter.ofPattern("yyyy.MM.dd");
 
     private TrashProjectDto toTrash(Project project) {
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/CallGraphAnalyzer.java b/src/main/java/com/salkcoding/oswl/service/reachability/CallGraphAnalyzer.java
new file mode 100644
index 00000000..52e49452
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/CallGraphAnalyzer.java
@@ -0,0 +1,462 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.domain.enums.Reachability;
+import lombok.extern.slf4j.Slf4j;
+import org.objectweb.asm.*;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.jar.JarEntry;
+import java.util.jar.JarInputStream;
+import java.util.stream.Stream;
+
+/**
+ * Builds a class reference graph from project bytecode and decides whether a
+ * vulnerable library package/class is reachable.
+ *
+ * 
The analyzer walks every {@code .class} file under a given root (directory or
+ * JAR). It records, for each class, every internal class name it references through
+ * inheritance, fields, methods, annotations, and method instructions. A library is
+ * considered reachable if any class in the project bytecode references at least one
+ * class whose internal name starts with one of the supplied library prefixes.

+ */
+@Slf4j
+@Component
+public class CallGraphAnalyzer {
+
+    /** How many project-class -> library-class references to keep as displayable evidence. */
+    private static final int MAX_EVIDENCE = 5;
+
+    /** One concrete reference the analyzer found: our class X calls/extends/uses library class Y. */
+    public record ReferenceEvidence(String referencingClass, String referencedClass) {}
+
+    /** {@link Reachability} plus the evidence backing a REACHABLE verdict (empty otherwise). */
+    public record AnalysisResult(Reachability reachability, List evidence) {
+        static AnalysisResult of(Reachability reachability) {
+            return new AnalysisResult(reachability, List.of());
+        }
+    }
+
+    /**
+     * Analyzes the bytecode under {@code projectBytecodeRoot} for references to any
+     * class prefix in {@code libraryClassPrefixes}.
+     *
+     * @param projectBytecodeRoot directory or JAR containing project class files;
+     *                            may be null or non-existent
+     * @param libraryClassPrefixes internal class-name prefixes (e.g. "org/springframework/core/")
+     * @return REACHABLE (with up to {@value #MAX_EVIDENCE} evidence entries) if a reference is
+     *         found, NOT_REACHABLE if the root was read but no reference was found, UNKNOWN if
+     *         the root is missing/unreadable
+     */
+    public AnalysisResult analyze(Path projectBytecodeRoot, Set libraryClassPrefixes) {
+        if (projectBytecodeRoot == null || !Files.exists(projectBytecodeRoot)) {
+            return AnalysisResult.of(Reachability.UNKNOWN);
+        }
+        if (libraryClassPrefixes == null || libraryClassPrefixes.isEmpty()) {
+            return AnalysisResult.of(Reachability.UNKNOWN);
+        }
+
+        List evidence = new ArrayList<>();
+        boolean[] anyClassRead = {false};
+        try {
+            if (Files.isDirectory(projectBytecodeRoot)) {
+                walkDirectory(projectBytecodeRoot, libraryClassPrefixes, evidence, anyClassRead);
+            } else {
+                walkJar(projectBytecodeRoot, libraryClassPrefixes, evidence, anyClassRead);
+            }
+        } catch (IOException e) {
+            log.warn("[Reachability] Failed to read bytecode root {}: {}",
+                    projectBytecodeRoot, e.getMessage());
+            return AnalysisResult.of(Reachability.UNKNOWN);
+        }
+
+        if (!anyClassRead[0]) {
+            return AnalysisResult.of(Reachability.UNKNOWN);
+        }
+        if (evidence.isEmpty()) {
+            return AnalysisResult.of(Reachability.NOT_REACHABLE);
+        }
+        log.debug("[Reachability] Found {} reference(s), e.g. {}", evidence.size(), evidence.getFirst());
+        return new AnalysisResult(Reachability.REACHABLE, evidence);
+    }
+
+    private void walkDirectory(Path root, Set libraryClassPrefixes,
+                               List evidence, boolean[] anyClassRead) throws IOException {
+        try (Stream stream = Files.walk(root)) {
+            for (Path path : stream.toList()) {
+                if (evidence.size() >= MAX_EVIDENCE) break;
+                if (Files.isRegularFile(path) && path.toString().endsWith(".class")) {
+                    try (InputStream in = Files.newInputStream(path)) {
+                        collectClassEvidence(in, libraryClassPrefixes, evidence);
+                        anyClassRead[0] = true;
+                    } catch (IOException e) {
+                        log.debug("[Reachability] Skipping unreadable class file {}: {}",
+                                path, e.getMessage());
+                    }
+                }
+            }
+        }
+    }
+
+    private void walkJar(Path jar, Set libraryClassPrefixes,
+                         List evidence, boolean[] anyClassRead) throws IOException {
+        try (InputStream fileIn = Files.newInputStream(jar);
+             JarInputStream jarIn = new JarInputStream(fileIn)) {
+            JarEntry entry;
+            while ((entry = jarIn.getNextJarEntry()) != null) {
+                if (evidence.size() >= MAX_EVIDENCE) break;
+                if (!entry.isDirectory() && entry.getName().endsWith(".class")) {
+                    try {
+                        collectClassEvidence(jarIn, libraryClassPrefixes, evidence);
+                        anyClassRead[0] = true;
+                    } catch (IOException e) {
+                        log.debug("[Reachability] Skipping unreadable jar entry {}: {}",
+                                entry.getName(), e.getMessage());
+                    }
+                }
+            }
+        }
+    }
+
+    /**
+     * Parses one class file, collects everything it references, and — if any reference matches
+     * a library prefix — records which of the project's own classes did the referencing. Unlike
+     * the merged-set approach this replaced, this is what actually lets a REACHABLE verdict point
+     * at a specific "class X in your code uses class Y in the vulnerable library" fact instead of
+     * just asserting a boolean.
+     */
+    private void collectClassEvidence(InputStream in, Set libraryClassPrefixes,
+                                      List evidence) throws IOException {
+        ClassReader reader = new ClassReader(in);
+        String ownClass = reader.getClassName();
+        Set referenced = new LinkedHashSet<>();
+        ReferenceVisitor visitor = new ReferenceVisitor(referenced);
+        reader.accept(visitor, ClassReader.SKIP_FRAMES);
+
+        for (String ref : referenced) {
+            if (evidence.size() >= MAX_EVIDENCE) break;
+            for (String prefix : libraryClassPrefixes) {
+                if (ref.startsWith(prefix)) {
+                    evidence.add(new ReferenceEvidence(toDisplayName(ownClass), toDisplayName(ref)));
+                    break;
+                }
+            }
+        }
+    }
+
+    private static String toDisplayName(String internalName) {
+        return internalName == null ? null : internalName.replace('/', '.');
+    }
+
+    /**
+     * ASM visitor that records every internal class name referenced by a class.
+     */
+    private static class ReferenceVisitor extends ClassVisitor {
+
+        private final Set referenced;
+
+        ReferenceVisitor(Set referenced) {
+            super(Opcodes.ASM9);
+            this.referenced = referenced;
+        }
+
+        @Override
+        public void visit(int version, int access, String name, String signature,
+                          String superName, String[] interfaces) {
+            add(superName);
+            if (interfaces != null) {
+                for (String iface : interfaces) {
+                    add(iface);
+                }
+            }
+            if (signature != null) {
+                addSignatureTypes(signature);
+            }
+        }
+
+        @Override
+        public AnnotationVisitor visitAnnotation(String descriptor, boolean visible) {
+            addDescriptor(descriptor);
+            return new AnnotationReferenceVisitor(referenced);
+        }
+
+        @Override
+        public FieldVisitor visitField(int access, String name, String descriptor,
+                                       String signature, Object value) {
+            addDescriptor(descriptor);
+            if (signature != null) {
+                addSignatureTypes(signature);
+            }
+            return new FieldReferenceVisitor(referenced);
+        }
+
+        @Override
+        public MethodVisitor visitMethod(int access, String name, String descriptor,
+                                         String signature, String[] exceptions) {
+            addDescriptor(descriptor);
+            if (exceptions != null) {
+                for (String ex : exceptions) {
+                    add(ex);
+                }
+            }
+            if (signature != null) {
+                addSignatureTypes(signature);
+            }
+            return new MethodReferenceVisitor(referenced);
+        }
+
+        private void add(String internalName) {
+            if (internalName != null && !internalName.startsWith("java/")
+                    && !internalName.startsWith("javax/")
+                    && !internalName.startsWith("jdk/")
+                    && !internalName.startsWith("sun/")
+                    && !internalName.startsWith("com/sun/")) {
+                referenced.add(internalName);
+            }
+        }
+
+        private void addDescriptor(String descriptor) {
+            if (descriptor == null) return;
+            Type type = Type.getType(descriptor);
+            addType(type);
+        }
+
+        private void addType(Type type) {
+            if (type == null) return;
+            switch (type.getSort()) {
+                case Type.OBJECT -> add(type.getInternalName());
+                case Type.ARRAY -> addType(type.getElementType());
+                case Type.METHOD -> {
+                    addType(type.getReturnType());
+                    for (Type arg : type.getArgumentTypes()) {
+                        addType(arg);
+                    }
+                }
+            }
+        }
+
+        private void addSignatureTypes(String signature) {
+            if (signature == null) return;
+            // Best-effort extraction of class names from generic signatures.
+            // L; is the JVM descriptor form used inside signatures.
+            int i = 0;
+            while ((i = signature.indexOf('L', i)) != -1) {
+                int end = signature.indexOf(';', i);
+                if (end == -1) break;
+                String internal = signature.substring(i + 1, end);
+                // Skip generic type variables () and primitive arrays
+                if (!internal.startsWith("<") && !internal.isEmpty()) {
+                    add(internal);
+                }
+                i = end + 1;
+            }
+        }
+    }
+
+    private static class MethodReferenceVisitor extends MethodVisitor {
+
+        private final Set referenced;
+
+        MethodReferenceVisitor(Set referenced) {
+            super(Opcodes.ASM9);
+            this.referenced = referenced;
+        }
+
+        @Override
+        public void visitTypeInsn(int opcode, String type) {
+            add(type);
+        }
+
+        @Override
+        public void visitFieldInsn(int opcode, String owner, String name, String descriptor) {
+            add(owner);
+            addDescriptor(descriptor);
+        }
+
+        @Override
+        public void visitMethodInsn(int opcode, String owner, String name,
+                                    String descriptor, boolean isInterface) {
+            add(owner);
+            addDescriptor(descriptor);
+        }
+
+        @Override
+        public void visitInvokeDynamicInsn(String name, String descriptor,
+                                           Handle bootstrapMethodHandle,
+                                           Object... bootstrapMethodArguments) {
+            addDescriptor(descriptor);
+            if (bootstrapMethodHandle != null) {
+                add(bootstrapMethodHandle.getOwner());
+                addDescriptor(bootstrapMethodHandle.getDesc());
+            }
+            for (Object arg : bootstrapMethodArguments) {
+                if (arg instanceof Handle h) {
+                    add(h.getOwner());
+                    addDescriptor(h.getDesc());
+                } else if (arg instanceof Type t) {
+                    addType(t);
+                }
+            }
+        }
+
+        @Override
+        public void visitLdcInsn(Object value) {
+            if (value instanceof Type t) {
+                addType(t);
+            }
+        }
+
+        @Override
+        public void visitMultiANewArrayInsn(String descriptor, int numDimensions) {
+            addDescriptor(descriptor);
+        }
+
+        @Override
+        public AnnotationVisitor visitAnnotationDefault() {
+            return new AnnotationReferenceVisitor(referenced);
+        }
+
+        @Override
+        public AnnotationVisitor visitAnnotation(String descriptor, boolean visible) {
+            addDescriptor(descriptor);
+            return new AnnotationReferenceVisitor(referenced);
+        }
+
+        @Override
+        public AnnotationVisitor visitParameterAnnotation(int parameter, String descriptor,
+                                                           boolean visible) {
+            addDescriptor(descriptor);
+            return new AnnotationReferenceVisitor(referenced);
+        }
+
+        @Override
+        public void visitLocalVariable(String name, String descriptor, String signature,
+                                       Label start, Label end, int index) {
+            addDescriptor(descriptor);
+            if (signature != null) {
+                addSignatureTypes(signature);
+            }
+        }
+
+        @Override
+        public void visitTryCatchBlock(Label start, Label end, Label handler, String type) {
+            add(type);
+        }
+
+        private void add(String internalName) {
+            CallGraphAnalyzer.addTo(referenced, internalName);
+        }
+
+        private void addDescriptor(String descriptor) {
+            CallGraphAnalyzer.addDescriptorTo(referenced, descriptor);
+        }
+
+        private void addType(Type type) {
+            CallGraphAnalyzer.addTypeTo(referenced, type);
+        }
+
+        private void addSignatureTypes(String signature) {
+            CallGraphAnalyzer.addSignatureTypesTo(referenced, signature);
+        }
+    }
+
+    private static class FieldReferenceVisitor extends FieldVisitor {
+
+        private final Set referenced;
+
+        FieldReferenceVisitor(Set referenced) {
+            super(Opcodes.ASM9);
+            this.referenced = referenced;
+        }
+
+        @Override
+        public AnnotationVisitor visitAnnotation(String descriptor, boolean visible) {
+            CallGraphAnalyzer.addDescriptorTo(referenced, descriptor);
+            return new AnnotationReferenceVisitor(referenced);
+        }
+    }
+
+    private static class AnnotationReferenceVisitor extends AnnotationVisitor {
+
+        private final Set referenced;
+
+        AnnotationReferenceVisitor(Set referenced) {
+            super(Opcodes.ASM9);
+            this.referenced = referenced;
+        }
+
+        @Override
+        public void visit(String name, Object value) {
+            if (value instanceof Type t) {
+                CallGraphAnalyzer.addTypeTo(referenced, t);
+            }
+        }
+
+        @Override
+        public void visitEnum(String name, String descriptor, String value) {
+            CallGraphAnalyzer.addDescriptorTo(referenced, descriptor);
+        }
+
+        @Override
+        public AnnotationVisitor visitAnnotation(String name, String descriptor) {
+            CallGraphAnalyzer.addDescriptorTo(referenced, descriptor);
+            return this;
+        }
+
+        @Override
+        public AnnotationVisitor visitArray(String name) {
+            return this;
+        }
+    }
+
+    // Helper methods shared across nested visitors.
+    private static void addTo(Set referenced, String internalName) {
+        if (internalName != null && !internalName.startsWith("java/")
+                && !internalName.startsWith("javax/")
+                && !internalName.startsWith("jdk/")
+                && !internalName.startsWith("sun/")
+                && !internalName.startsWith("com/sun/")) {
+            referenced.add(internalName);
+        }
+    }
+
+    private static void addDescriptorTo(Set referenced, String descriptor) {
+        if (descriptor == null) return;
+        addTypeTo(referenced, Type.getType(descriptor));
+    }
+
+    private static void addTypeTo(Set referenced, Type type) {
+        if (type == null) return;
+        switch (type.getSort()) {
+            case Type.OBJECT -> addTo(referenced, type.getInternalName());
+            case Type.ARRAY -> addTypeTo(referenced, type.getElementType());
+            case Type.METHOD -> {
+                addTypeTo(referenced, type.getReturnType());
+                for (Type arg : type.getArgumentTypes()) {
+                    addTypeTo(referenced, arg);
+                }
+            }
+        }
+    }
+
+    private static void addSignatureTypesTo(Set referenced, String signature) {
+        if (signature == null) return;
+        int i = 0;
+        while ((i = signature.indexOf('L', i)) != -1) {
+            int end = signature.indexOf(';', i);
+            if (end == -1) break;
+            String internal = signature.substring(i + 1, end);
+            if (!internal.startsWith("<") && !internal.isEmpty()) {
+                addTo(referenced, internal);
+            }
+            i = end + 1;
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/LibraryPackageMapper.java b/src/main/java/com/salkcoding/oswl/service/reachability/LibraryPackageMapper.java
new file mode 100644
index 00000000..4416bfca
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/LibraryPackageMapper.java
@@ -0,0 +1,176 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import lombok.extern.slf4j.Slf4j;
+
+import java.util.HashSet;
+import java.util.Locale;
+import java.util.Map;
+import java.util.Set;
+
+/**
+ * Derives likely internal class-name prefixes for a scanned component so the
+ * call-graph analyzer can check whether the project bytecode references it.
+ *
+ * 
For Maven/Gradle coordinates such as {@code org.springframework:spring-core},
+ * the analyzer checks prefixes like {@code org/springframework/core/} and
+ * {@code org/springframework/}. For ecosystems where package naming cannot be
+ * inferred, an empty set is returned, which causes the reachability result to be
+ * {@code UNKNOWN}.

+ */
+@Slf4j
+public final class LibraryPackageMapper {
+
+    private LibraryPackageMapper() {
+    }
+
+    /**
+     * A handful of well-known PyPI distribution names whose top-level importable module doesn't
+     * follow the normal "lowercase, hyphens to underscores" rule — either because it predates PEP
+     * naming conventions (Pillow -> PIL, PyYAML -> yaml), because the PyPI name is a suffixed
+     * variant of a shared top-level namespace (opencv-contrib-python -> cv2, google-cloud-storage
+     * -> google), or because the two names have historically diverged (beautifulsoup4 -> bs4).
+     * Not exhaustive — this only needs to cover common cases; anything missing here still gets a
+     * (possibly wrong) guess from the normal-rule fallback, and a wrong guess just costs an UNKNOWN
+     * or a missed REACHABLE, not an incorrect one, since evidence is only recorded on an actual
+     * source match.
+     */
+    private static final Map PYPI_IMPORT_NAME_OVERRIDES = Map.ofEntries(
+            Map.entry("pillow", "PIL"),
+            Map.entry("pyyaml", "yaml"),
+            Map.entry("beautifulsoup4", "bs4"),
+            Map.entry("scikit-learn", "sklearn"),
+            Map.entry("opencv-python", "cv2"),
+            Map.entry("opencv-contrib-python", "cv2"),
+            Map.entry("opencv-python-headless", "cv2"),
+            Map.entry("protobuf", "google"),
+            Map.entry("grpcio", "grpc"),
+            Map.entry("python-dotenv", "dotenv"),
+            Map.entry("python-dateutil", "dateutil"),
+            Map.entry("python-jose", "jose"),
+            Map.entry("python-multipart", "multipart"),
+            Map.entry("python-json-logger", "pythonjsonlogger"),
+            Map.entry("msgpack-python", "msgpack"),
+            Map.entry("attrs", "attr"),
+            Map.entry("deprecated", "deprecated"),
+            Map.entry("pyjwt", "jwt"),
+            Map.entry("pymysql", "pymysql"),
+            Map.entry("psycopg2-binary", "psycopg2"),
+            Map.entry("mysql-connector-python", "mysql"),
+            Map.entry("google-cloud-storage", "google"),
+            Map.entry("google-cloud-bigquery", "google"),
+            Map.entry("google-api-python-client", "googleapiclient"),
+            Map.entry("websocket-client", "websocket"),
+            Map.entry("pycryptodome", "Crypto"),
+            Map.entry("djangorestframework", "rest_framework"),
+            Map.entry("django-rest-framework", "rest_framework"));
+
+    /**
+     * Returns candidate internal class-name prefixes for the given component.
+     *
+     * @param component the scan component (must provide library name and ecosystem)
+     * @return non-null set of prefixes ending with '/', may be empty
+     */
+    public static Set map(ScanComponent component) {
+        if (component == null || component.getLibrary() == null) {
+            return Set.of();
+        }
+        String ecosystem = component.getLibrary().getEcosystem();
+        String name = component.getLibrary().getName();
+        if (ecosystem == null || name == null || name.isBlank()) {
+            return Set.of();
+        }
+
+        return switch (ecosystem.toUpperCase(Locale.ROOT)) {
+            case "MAVEN", "GRADLE" -> mapMavenOrGradle(name);
+            default -> Set.of();
+        };
+    }
+
+    /**
+     * Returns candidate top-level import/require names for the given component — the source-level
+     * analog of {@link #map}, used by {@link SourceReferenceAnalyzer} for ecosystems that have no
+     * compiled bytecode to inspect. Unlike Maven/Gradle's hierarchical class prefixes, Python and
+     * npm packages are referenced by a single top-level module/package name, so this returns
+     * whole candidate names rather than prefixes.
+     *
+     * @return non-null set of candidate names, may be empty for ecosystems this doesn't cover
+     */
+    public static Set mapImportNames(ScanComponent component) {
+        if (component == null || component.getLibrary() == null) {
+            return Set.of();
+        }
+        return mapImportNames(component.getLibrary().getEcosystem(), component.getLibrary().getName());
+    }
+
+    public static Set mapImportNames(String ecosystem, String name) {
+        if (ecosystem == null || name == null || name.isBlank()) {
+            return Set.of();
+        }
+
+        return switch (ecosystem.toUpperCase(Locale.ROOT)) {
+            case "PYPI" -> mapPypi(name);
+            case "NPM" -> mapNpm(name);
+            default -> Set.of();
+        };
+    }
+
+    private static Set mapPypi(String distributionName) {
+        String trimmed = distributionName.trim();
+        if (trimmed.isEmpty()) {
+            return Set.of();
+        }
+        Set names = new HashSet<>();
+        String override = PYPI_IMPORT_NAME_OVERRIDES.get(trimmed.toLowerCase(Locale.ROOT));
+        if (override != null) {
+            names.add(override);
+        }
+        // Normal-rule guess: PyPI distribution names are conventionally lowercased with hyphens,
+        // while the importable module is lowercase with underscores (or, often, identical).
+        names.add(trimmed.toLowerCase(Locale.ROOT).replace('-', '_'));
+        names.add(trimmed);
+        return names;
+    }
+
+    private static Set mapNpm(String packageName) {
+        String trimmed = packageName.trim();
+        // npm package names are, without exception, exactly what's imported/required — including
+        // the "@scope/name" form for scoped packages — so no name-mangling guesswork is needed.
+        return trimmed.isEmpty() ? Set.of() : Set.of(trimmed);
+    }
+
+    private static Set mapMavenOrGradle(String coordinate) {
+        // Coordinate format: groupId:artifactId, e.g. org.springframework:spring-core
+        String[] parts = coordinate.split(":");
+        if (parts.length < 2) {
+            return Set.of();
+        }
+        String groupId = parts[0].trim();
+        String artifactId = parts[1].trim();
+        if (groupId.isBlank() || artifactId.isBlank()) {
+            return Set.of();
+        }
+
+        Set prefixes = new HashSet<>();
+        String groupPath = groupId.replace('.', '/');
+
+        // Most specific: groupId/artifactId-with-dashes-kept/
+        prefixes.add(groupPath + "/" + artifactId + "/");
+
+        // ArtifactId often becomes a sub-package of the group, e.g. org/springframework/core
+        // for spring-core. Add a prefix matching "groupId/artifactId-without-suffix/".
+        String[] groupSegments = groupId.split("\\.");
+        String lastGroupSegment = groupSegments[groupSegments.length - 1];
+        if (artifactId.startsWith(lastGroupSegment + "-")) {
+            String subPackage = artifactId.substring(lastGroupSegment.length() + 1).replace('-', '/');
+            if (!subPackage.isBlank()) {
+                prefixes.add(groupPath + "/" + subPackage + "/");
+            }
+        }
+
+        // Fallback to the whole group path.
+        prefixes.add(groupPath + "/");
+
+        return prefixes;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/ReachabilityService.java b/src/main/java/com/salkcoding/oswl/service/reachability/ReachabilityService.java
new file mode 100644
index 00000000..3108e603
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/ReachabilityService.java
@@ -0,0 +1,73 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.enums.Reachability;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+
+import java.nio.file.Path;
+import java.util.Set;
+
+/**
+ * Orchestrates bytecode reachability analysis for a single scan component.
+ *
+ * 
The project bytecode root is configured server-side via
+ * {@code oswl.reachability.bytecode-root}. The path is resolved against the
+ * project UUID so each project has an isolated subdirectory. When no root is
+ * configured or the directory does not exist, analysis returns {@code UNKNOWN}.

+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class ReachabilityService {
+
+    private final CallGraphAnalyzer callGraphAnalyzer;
+
+    @Value("${oswl.reachability.bytecode-root:}")
+    private String bytecodeRoot;
+
+    /**
+     * Determines the reachability of the given component from the project bytecode.
+     *
+     * @param component the component to analyze
+     * @return REACHABLE (with evidence), NOT_REACHABLE, or UNKNOWN
+     */
+    public CallGraphAnalyzer.AnalysisResult analyze(ScanComponent component) {
+        if (component == null || component.getLibrary() == null) {
+            return CallGraphAnalyzer.AnalysisResult.of(Reachability.UNKNOWN);
+        }
+
+        Set prefixes = LibraryPackageMapper.map(component);
+        if (prefixes.isEmpty()) {
+            log.debug("[Reachability] No class prefixes for component {} (ecosystem {})",
+                    component.getLibrary().getName(), component.getLibrary().getEcosystem());
+            return CallGraphAnalyzer.AnalysisResult.of(Reachability.UNKNOWN);
+        }
+
+        Path root = resolveBytecodeRoot(component);
+        if (root == null) {
+            log.debug("[Reachability] No bytecode root configured for component {}",
+                    component.getLibrary().getName());
+            return CallGraphAnalyzer.AnalysisResult.of(Reachability.UNKNOWN);
+        }
+
+        CallGraphAnalyzer.AnalysisResult result = callGraphAnalyzer.analyze(root, prefixes);
+        log.info("[Reachability] component={} prefixes={} root={} result={} evidence={}",
+                component.getLibrary().getName(), prefixes, root, result.reachability(), result.evidence());
+        return result;
+    }
+
+    private Path resolveBytecodeRoot(ScanComponent component) {
+        if (bytecodeRoot == null || bytecodeRoot.isBlank()) {
+            return null;
+        }
+        Project project = component.getScanResult() != null ? component.getScanResult().getProject() : null;
+        if (project == null || project.getProjectUuid() == null) {
+            return Path.of(bytecodeRoot.trim());
+        }
+        return Path.of(bytecodeRoot.trim(), project.getProjectUuid());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/SourceImportSyntax.java b/src/main/java/com/salkcoding/oswl/service/reachability/SourceImportSyntax.java
new file mode 100644
index 00000000..ea765561
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/SourceImportSyntax.java
@@ -0,0 +1,102 @@
+package com.salkcoding.oswl.service.reachability;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.LinkedHashSet;
+import java.util.Set;
+
+/** Lexical filtering prevents examples in comments/strings from becoming reference evidence.
+ * This is a static syntax subset, never a runtime reachability proof. */
+final class SourceImportSyntax {
+    private SourceImportSyntax() {}
+    private record Token(String text, boolean literal) {}
+
+    static String pythonCode(String text) {
+        StringBuilder code = new StringBuilder(text);
+        for (int i = 0; i < text.length();) {
+            char c = text.charAt(i);
+            if (c == '#') {
+                while (i < text.length() && text.charAt(i) != '\n') code.setCharAt(i++, ' ');
+            } else if (c == '\'' || c == '"') {
+                boolean triple = i + 2 < text.length() && text.charAt(i+1) == c && text.charAt(i+2) == c;
+                int width = triple ? 3 : 1;
+                int start = i; i += width;
+                while (i < text.length()) {
+                    if (text.charAt(i) == '\\') { i = Math.min(i + 2, text.length()); continue; }
+                    if (text.charAt(i) == c && (!triple || i+2 < text.length() && text.charAt(i+1) == c && text.charAt(i+2) == c)) {
+                        i += width; break;
+                    }
+                    i++;
+                }
+                for (int j = start; j < i; j++) if (code.charAt(j) != '\n') code.setCharAt(j, ' ');
+            } else i++;
+        }
+        return code.toString();
+    }
+
+    static Set javascriptSpecifiers(String text) {
+        List tokens = new ArrayList<>();
+        for (int i = 0; i < text.length();) {
+            char c = text.charAt(i);
+            if (Character.isWhitespace(c)) { i++; continue; }
+            if (c == '/' && i+1 < text.length() && text.charAt(i+1) == '/') {
+                i += 2; while (i < text.length() && text.charAt(i) != '\n') i++; continue;
+            }
+            if (c == '/' && i+1 < text.length() && text.charAt(i+1) == '*') {
+                int end = text.indexOf("*/", i+2); i = end < 0 ? text.length() : end+2; continue;
+            }
+            if (c == '/') {
+                // Treat a slash-delimited span conservatively as a regex literal. Ambiguous
+                // division expressions may lose evidence, but regex examples must not add it.
+                int end = i + 1;
+                boolean inClass = false;
+                for (; end < text.length() && text.charAt(end) != '\n'; end++) {
+                    char next = text.charAt(end);
+                    if (next == '\\') { end++; continue; }
+                    if (next == '[') inClass = true;
+                    if (next == ']') inClass = false;
+                    if (next == '/' && !inClass) break;
+                }
+                if (end < text.length() && text.charAt(end) == '/') {
+                    tokens.add(new Token("", true)); i = end + 1; continue;
+                }
+            }
+            if (c == '\'' || c == '"' || c == '`') {
+                char quote = c; StringBuilder value = new StringBuilder(); i++;
+                boolean escaped = false;
+                while (i < text.length() && text.charAt(i) != quote) {
+                    if (text.charAt(i) == '\\' && i+1 < text.length()) { escaped = true; i += 2; }
+                    else value.append(text.charAt(i++));
+                }
+                boolean closed = i < text.length(); i = Math.min(i+1, text.length());
+                // Escaped module names and template expressions need more analysis.
+                tokens.add(new Token(closed && !escaped && quote != '`' ? value.toString() : "", true));
+            } else if (Character.isJavaIdentifierStart(c)) {
+                int start = i++; while (i < text.length() && Character.isJavaIdentifierPart(text.charAt(i))) i++;
+                tokens.add(new Token(text.substring(start, i), false));
+            } else { tokens.add(new Token(String.valueOf(c), false)); i++; }
+        }
+        Set found = new LinkedHashSet<>();
+        for (int i = 0; i < tokens.size(); i++) {
+            Token token = tokens.get(i);
+            if (token.literal() || i > 0 && tokens.get(i-1).text().equals(".")) continue;
+            if (token.text().equals("require") || token.text().equals("import")) {
+                if (i+3 < tokens.size() && tokens.get(i+1).text().equals("(") && tokens.get(i+2).literal()
+                        && tokens.get(i+3).text().equals(")")) found.add(tokens.get(i+2).text());
+                if (token.text().equals("import") && i+1 < tokens.size() && tokens.get(i+1).literal())
+                    found.add(tokens.get(i+1).text());
+            }
+            if (token.text().equals("import") || token.text().equals("export")) {
+                for (int j = i+1; j+1 < tokens.size() && j < i+100; j++) {
+                    String part = tokens.get(j).text();
+                    if (part.equals(";") || part.equals("import") || part.equals("export")) break;
+                    if (!tokens.get(j).literal() && part.equals("from") && tokens.get(j+1).literal()) {
+                        found.add(tokens.get(j+1).text()); break;
+                    }
+                }
+            }
+        }
+        found.remove("");
+        return found;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityService.java b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityService.java
new file mode 100644
index 00000000..234dd2eb
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityService.java
@@ -0,0 +1,41 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.domain.enums.Reachability;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import java.nio.file.Path;
+
+/** Runs file analysis without holding a database transaction. */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SourceReachabilityService {
+    private final SourceReferenceAnalyzer sourceReferenceAnalyzer;
+    private final SourceReachabilityStore store;
+
+    public void analyzeAndPersist(Path cloneDir, Long scanResultId) {
+        try {
+            long loadStarted = System.nanoTime();
+            var candidates = store.candidates(scanResultId);
+            long loadMillis = (System.nanoTime() - loadStarted) / 1_000_000;
+            if (candidates.isEmpty()) return;
+            boolean transactionDuringFiles = org.springframework.transaction.support.TransactionSynchronizationManager.isActualTransactionActive();
+            var index = sourceReferenceAnalyzer.index(cloneDir);
+            var updates = candidates.stream().map(candidate -> {
+                var result = index.match(candidate.language(), candidate.names());
+                return new SourceReachabilityStore.Update(candidate.id(), result,
+                        index.description(candidate.language(), result.reachability() == Reachability.REACHABLE, candidate.names().isEmpty()));
+            }).toList();
+            long saveStarted = System.nanoTime();
+            for (int offset = 0; offset < updates.size(); offset += 200)
+                store.save(updates.subList(offset, Math.min(offset + 200, updates.size())));
+            long saveMillis = (System.nanoTime() - saveStarted) / 1_000_000;
+            log.info("[Reachability][Source] scanId={} components={} files={} bytes={} durationMs={} limitations={} loadMs={} saveMs={} transactionDuringFiles={}",
+                    scanResultId, updates.size(), index.files(), index.bytesRead(), index.elapsedMillis(), index.limitations(),
+                    loadMillis, saveMillis, transactionDuringFiles);
+        } catch (Exception e) {
+            log.warn("[Reachability][Source] scanId={} analysis failed: {}", scanResultId, e.getMessage());
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityStore.java b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityStore.java
new file mode 100644
index 00000000..5b2b3689
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReachabilityStore.java
@@ -0,0 +1,35 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.List;
+import java.util.Set;
+
+@Service
+@RequiredArgsConstructor
+public class SourceReachabilityStore {
+    private final ScanComponentRepository repository;
+    public record Candidate(Long id, SourceReferenceAnalyzer.Language language, Set names) {}
+    public record Update(Long id, SourceReferenceAnalyzer.AnalysisResult result, String analysis) {}
+
+    @Transactional(readOnly = true)
+    public List candidates(Long scanId) {
+        return repository.findSourceCandidates(scanId).stream().map(row -> new Candidate(row.getId(),
+                "PYPI".equalsIgnoreCase(row.getEcosystem()) ? SourceReferenceAnalyzer.Language.PYTHON
+                        : SourceReferenceAnalyzer.Language.JAVASCRIPT,
+                LibraryPackageMapper.mapImportNames(row.getEcosystem(), row.getName()))).toList();
+    }
+
+    @Transactional
+    public void save(List updates) {
+        for (Update update : updates) {
+            String evidence = update.result().evidence().stream()
+                    .map(e -> e.referencingFile() + " -> import " + e.importedName())
+                    .collect(java.util.stream.Collectors.joining("\n"));
+            repository.updateSourceAnalysis(update.id(), update.result().reachability(),
+                    evidence.isBlank() ? null : evidence, update.analysis());
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/reachability/SourceReferenceAnalyzer.java b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReferenceAnalyzer.java
new file mode 100644
index 00000000..e18da3a4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reachability/SourceReferenceAnalyzer.java
@@ -0,0 +1,200 @@
+package com.salkcoding.oswl.service.reachability;
+
+import com.salkcoding.oswl.domain.enums.Reachability;
+import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Component;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.LinkedHashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+import java.nio.file.FileVisitResult;
+import java.nio.file.SimpleFileVisitor;
+import java.nio.file.attribute.BasicFileAttributes;
+import java.util.Map;
+import java.util.EnumMap;
+import java.util.HashMap;
+import java.util.HashSet;
+
+/** Indexes bounded source references once per repository. References do not prove runtime execution. */
+@Slf4j
+@Component
+public class SourceReferenceAnalyzer {
+
+    private static final int MAX_EVIDENCE = 5;
+    private static final long MAX_FILE_BYTES = 2 * 1024 * 1024L;
+
+    private static final Set PY_EXTENSIONS = Set.of(".py");
+    private static final Set JS_EXTENSIONS = Set.of(".js", ".jsx", ".mjs", ".cjs", ".ts", ".tsx");
+
+    // "import X", "import X.Y.Z", "import X as x", "import X, Y, Z" — captures the whole
+    // comma-separated tail so mergeImportTail can split it (a single regex can't repeat-capture).
+    private static final Pattern PY_IMPORT_LINE = Pattern.compile("(?m)^[\\t ]*import[\\t ]+(.+)$");
+    // "from X import Y" / "from X.Y import Z" — a leading '.' (relative import) is excluded by
+    // requiring the first character to be a letter or underscore.
+    private static final Pattern PY_FROM_LINE = Pattern.compile("(?m)^[\\t ]*from[\\t ]+([A-Za-z_][\\w.]*)[\\t ]+import[\\t ]");
+
+    public record ReferenceEvidence(String referencingFile, String importedName) {}
+
+    public record AnalysisResult(Reachability reachability, List evidence) {
+        static AnalysisResult of(Reachability reachability) {
+            return new AnalysisResult(reachability, List.of());
+        }
+    }
+
+    public enum Language { PYTHON, JAVASCRIPT }
+    public record Index(Map>> references,
+                        Map files, Set limitations,
+                        long bytesRead, long elapsedMillis) {
+        public AnalysisResult match(Language language, Set candidates) {
+            List found = candidates.stream()
+                    .flatMap(name -> references.getOrDefault(language, Map.of()).getOrDefault(name, List.of()).stream())
+                    .limit(MAX_EVIDENCE).toList();
+            // Static absence cannot prove runtime unreachability: dynamic/transitive imports
+            // and distribution-name guesses remain outside this analysis.
+            return found.isEmpty() ? AnalysisResult.of(Reachability.UNKNOWN)
+                    : new AnalysisResult(Reachability.REACHABLE, found);
+        }
+        public String description(Language language, boolean matched, boolean missingMapping) {
+            int count = files.getOrDefault(language, 0);
+            String reason = matched ? "REFERENCE_FOUND" : missingMapping ? "NO_PACKAGE_MAPPING"
+                    : count == 0 ? "NO_LANGUAGE_FILES" : "ABSENCE_NOT_PROVEN";
+            return new com.salkcoding.oswl.dto.scan.SourceAnalysisDetails(language.name(), count, bytesRead,
+                    matched ? (language == Language.PYTHON ? "HEURISTIC_REFERENCE" : "STATIC_REFERENCE") : "UNKNOWN",
+                    !limitations.isEmpty(), reason, limitations.stream().sorted().toList()).toJson();
+        }
+    }
+
+    public Index index(Path root) { return index(root, 20_000, 64L * 1024 * 1024, 30_000); }
+    public Index index(Path root, int maxFiles, long maxBytes, long maxMillis) {
+        long started = System.nanoTime();
+        Map>> refs = new EnumMap<>(Language.class);
+        Map counts = new EnumMap<>(Language.class);
+        Set limitations = new HashSet<>();
+        long[] bytes = {0}; int[] visited = {0};
+        if (root == null || !Files.isDirectory(root)) limitations.add("NO_SOURCE_ROOT");
+        else try {
+            Files.walkFileTree(root, new SimpleFileVisitor<>() {
+                private boolean exhausted() {
+                    if (Thread.currentThread().isInterrupted() || (System.nanoTime()-started)/1_000_000 >= maxMillis) {
+                        limitations.add("TIME_LIMIT"); return true;
+                    }
+                    if (++visited[0] > maxFiles) { limitations.add("FILE_LIMIT"); return true; }
+                    return false;
+                }
+                @Override public FileVisitResult preVisitDirectory(Path dir, BasicFileAttributes attrs) {
+                    if (exhausted()) return FileVisitResult.TERMINATE;
+                    return !dir.equals(root) && ManifestCollectRules.SKIP_DIRS.contains(dir.getFileName().toString())
+                            ? FileVisitResult.SKIP_SUBTREE : FileVisitResult.CONTINUE;
+                }
+                @Override public FileVisitResult visitFile(Path path, BasicFileAttributes attrs) {
+                    if (exhausted()) return FileVisitResult.TERMINATE;
+                    String ext = extensionOf(path);
+                    Language language = PY_EXTENSIONS.contains(ext) ? Language.PYTHON
+                            : JS_EXTENSIONS.contains(ext) ? Language.JAVASCRIPT : null;
+                    if (language == null) return FileVisitResult.CONTINUE;
+                    if (!attrs.isRegularFile()) { limitations.add("NON_REGULAR_FILE"); return FileVisitResult.CONTINUE; }
+                    if (attrs.size() > MAX_FILE_BYTES) { limitations.add("OVERSIZE_FILE"); return FileVisitResult.CONTINUE; }
+                    if (bytes[0] + attrs.size() > maxBytes) { limitations.add("BYTE_LIMIT"); return FileVisitResult.TERMINATE; }
+                    try (var input = Files.newInputStream(path)) {
+                        byte[] data = input.readNBytes((int) MAX_FILE_BYTES + 1);
+                        if (data.length > MAX_FILE_BYTES || bytes[0] + data.length > maxBytes) {
+                            limitations.add("BYTE_LIMIT"); return FileVisitResult.TERMINATE;
+                        }
+                        bytes[0] += data.length;
+                        String content = StandardCharsets.UTF_8.newDecoder().decode(java.nio.ByteBuffer.wrap(data)).toString();
+                        counts.merge(language, 1, Integer::sum);
+                        Set imports = language == Language.PYTHON ? extractPythonImports(content) : extractJsImports(content);
+                        String relative = root.relativize(path).toString().replace('\\', '/');
+                        Map> perLanguage = refs.computeIfAbsent(language, key -> new HashMap<>());
+                        for (String name : imports) {
+                            List evidence = perLanguage.computeIfAbsent(name, key -> new ArrayList<>());
+                            if (evidence.size() < MAX_EVIDENCE) evidence.add(new ReferenceEvidence(relative, name));
+                        }
+                    } catch (IOException e) { limitations.add("UNREADABLE_FILE"); }
+                    return FileVisitResult.CONTINUE;
+                }
+                @Override public FileVisitResult visitFileFailed(Path path, IOException error) {
+                    limitations.add("UNREADABLE_PATH"); return FileVisitResult.CONTINUE;
+                }
+            });
+        } catch (IOException | SecurityException e) { limitations.add("INCOMPLETE_WALK"); }
+        Map>> immutable = new EnumMap<>(Language.class);
+        refs.forEach((language, values) -> {
+            Map> copy = new HashMap<>();
+            values.forEach((name, evidence) -> copy.put(name, List.copyOf(evidence)));
+            immutable.put(language, Map.copyOf(copy));
+        });
+        return new Index(Map.copyOf(immutable), Map.copyOf(counts), Set.copyOf(limitations), bytes[0],
+                (System.nanoTime()-started)/1_000_000);
+    }
+    /** Compatibility entry point. Ecosystem-aware callers use Index.match. */
+    public AnalysisResult analyze(Path root, Set candidates) {
+        if (candidates == null || candidates.isEmpty()) return AnalysisResult.of(Reachability.UNKNOWN);
+        Index index = index(root);
+        for (Language language : Language.values()) {
+            AnalysisResult result = index.match(language, candidates);
+            if (result.reachability() == Reachability.REACHABLE) return result;
+        }
+        return AnalysisResult.of(Reachability.UNKNOWN);
+    }
+
+    private static String extensionOf(Path path) {
+        String name = path.getFileName().toString();
+        int dot = name.lastIndexOf('.');
+        return dot < 0 ? "" : name.substring(dot).toLowerCase(java.util.Locale.ROOT);
+    }
+
+    private static Set extractPythonImports(String content) {
+        content = SourceImportSyntax.pythonCode(content);
+        Set names = new LinkedHashSet<>();
+        Matcher importMatcher = PY_IMPORT_LINE.matcher(content);
+        while (importMatcher.find()) {
+            for (String entry : importMatcher.group(1).split(",")) {
+                String moduleRef = entry.strip().split("\\s+as\\s+")[0].strip();
+                addTopLevel(names, moduleRef);
+            }
+        }
+        Matcher fromMatcher = PY_FROM_LINE.matcher(content);
+        while (fromMatcher.find()) {
+            addTopLevel(names, fromMatcher.group(1));
+        }
+        return names;
+    }
+
+    private static void addTopLevel(Set names, String dottedModule) {
+        if (dottedModule == null || dottedModule.isEmpty()) return;
+        int dot = dottedModule.indexOf('.');
+        String top = dot < 0 ? dottedModule : dottedModule.substring(0, dot);
+        if (!top.isEmpty() && (Character.isLetter(top.charAt(0)) || top.charAt(0) == '_')) {
+            names.add(top);
+        }
+    }
+
+    private static Set extractJsImports(String content) {
+        Set names = new LinkedHashSet<>();
+        for (String specifier : SourceImportSyntax.javascriptSpecifiers(content)) addNpmTopLevel(names, specifier);
+        return names;
+    }
+
+    private static void addNpmTopLevel(Set names, String specifier) {
+        if (specifier == null || specifier.isEmpty()) return;
+        // Relative ("./x", "../x") and absolute ("/x") specifiers are project-local, not packages.
+        if (specifier.startsWith(".") || specifier.startsWith("/")) return;
+        String[] segments = specifier.split("/");
+        if (segments.length == 0) return;
+        String top = segments[0].startsWith("@") && segments.length > 1
+                ? segments[0] + "/" + segments[1]
+                : segments[0];
+        if (!top.isEmpty()) {
+            names.add(top);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ComplianceReportService.java b/src/main/java/com/salkcoding/oswl/service/reporting/ComplianceReportService.java
similarity index 92%
rename from src/main/java/com/salkcoding/oswl/service/ComplianceReportService.java
rename to src/main/java/com/salkcoding/oswl/service/reporting/ComplianceReportService.java
index 7fefb8a8..e08cd520 100644
--- a/src/main/java/com/salkcoding/oswl/service/ComplianceReportService.java
+++ b/src/main/java/com/salkcoding/oswl/service/reporting/ComplianceReportService.java
@@ -1,16 +1,16 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.reporting;
 
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.ComplianceReportDto;
 import com.salkcoding.oswl.dto.ComplianceReportDto.KevRow;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
diff --git a/src/main/java/com/salkcoding/oswl/service/reporting/ReportBrandingService.java b/src/main/java/com/salkcoding/oswl/service/reporting/ReportBrandingService.java
new file mode 100644
index 00000000..a8092701
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/reporting/ReportBrandingService.java
@@ -0,0 +1,52 @@
+package com.salkcoding.oswl.service.reporting;
+
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.reporting.ReportBrandingSettings;
+import com.salkcoding.oswl.repository.reporting.ReportBrandingSettingsRepository;
+import com.salkcoding.oswl.util.LogoImageNormalizer;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+/** Persistence for the single-row report branding settings (logo, company name, header, cover page). */
+@Service
+@RequiredArgsConstructor
+public class ReportBrandingService {
+
+    /** ~500KB base64 ceiling — generous for a logo, small enough to keep the report page light. */
+    private static final int MAX_LOGO_DATA_URI_LENGTH = 500_000;
+
+    private final ReportBrandingSettingsRepository reportBrandingSettingsRepository;
+    private final AuditLogService auditLogService;
+
+    @Transactional(readOnly = true)
+    public ReportBrandingSettings getSettings() {
+        return reportBrandingSettingsRepository.findFirstByOrderByIdAsc()
+                .orElseGet(() -> ReportBrandingSettings.builder().build());
+    }
+
+    @Transactional
+    public void save(String companyName, String logoDataUri, String headerText, boolean showCoverPage) {
+        if (logoDataUri != null && !logoDataUri.isBlank()) {
+            if (!logoDataUri.startsWith("data:image/")) {
+                throw new IllegalArgumentException("Logo must be an image data URI");
+            }
+            if (logoDataUri.length() > MAX_LOGO_DATA_URI_LENGTH) {
+                throw new IllegalArgumentException("Logo image is too large");
+            }
+            // Decode + downscale at save time: logos render at a few dozen CSS pixels, so the
+            // stored copy is capped to keep every report page and mail light.
+            logoDataUri = LogoImageNormalizer.normalize(logoDataUri);
+        }
+
+        ReportBrandingSettings settings = reportBrandingSettingsRepository.findFirstByOrderByIdAsc()
+                .orElseGet(() -> ReportBrandingSettings.builder().build());
+        settings.update(companyName, logoDataUri, headerText, showCoverPage);
+        reportBrandingSettingsRepository.save(settings);
+
+        auditLogService.log("REPORT_BRANDING.UPDATE", "EXTERNAL_SETTING", "report-branding", null,
+                "companyName=" + (companyName != null && !companyName.isBlank())
+                        + " logo=" + (logoDataUri != null && !logoDataUri.isBlank())
+                        + " showCoverPage=" + showCoverPage);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/RiskTrendService.java b/src/main/java/com/salkcoding/oswl/service/reporting/RiskTrendService.java
similarity index 80%
rename from src/main/java/com/salkcoding/oswl/service/RiskTrendService.java
rename to src/main/java/com/salkcoding/oswl/service/reporting/RiskTrendService.java
index b346d566..b4379bc4 100644
--- a/src/main/java/com/salkcoding/oswl/service/RiskTrendService.java
+++ b/src/main/java/com/salkcoding/oswl/service/reporting/RiskTrendService.java
@@ -1,12 +1,12 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.reporting;
 
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.VersionSummaryDto;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import com.salkcoding.oswl.service.ai.AiResponseSanitizer;
 import com.salkcoding.oswl.util.VersionOrder;
 import lombok.RequiredArgsConstructor;
@@ -31,6 +31,7 @@ public class RiskTrendService {
     private final ProjectRepository    projectRepository;
     private final ScanResultRepository scanResultRepository;
     private final LibraryRepository    libraryRepository;
+    private final com.salkcoding.oswl.service.scan.ScanSummaryReader summaryReader;
 
     /**
      * @param scanId the scan the user selected in the version dropdown; null means "latest".
@@ -113,10 +114,10 @@ public void populateModel(Long projectId, Long scanId, Model model) {
         List licUnknown     = new ArrayList<>();
         List licPermitted   = new ArrayList<>();
 
+        var summaries = summaryReader.read(scansAsc);
         for (ScanResult scan : scansAsc) {
-            List libs = libraryRepository.findByScanResultIdWithCves(scan.getId());
-            int[] sec = aggregateSecurity(libs);
-            int[] lic = aggregateLicense(libs);
+            int[] sec = summaries.get(scan.getId()).security();
+            int[] lic = summaries.get(scan.getId()).licenses();
 
             versions.add(scan.getVersion() != null ? scan.getVersion() : "?");
             secCritical.add(sec[0]);
@@ -130,18 +131,17 @@ public void populateModel(Long projectId, Long scanId, Model model) {
             licPermitted.add(lic[3]);
         }
 
-        List latestLibs = libraryRepository.findByScanResultIdWithCves(latest.getId());
-        int[] latestSec = aggregateSecurity(latestLibs);
-        int[] latestLic = aggregateLicense(latestLibs);
+        int[] latestSec = summaries.get(latest.getId()).security();
+        int[] latestLic = summaries.get(latest.getId()).licenses();
         int currentSecIssues = latestSec[0] + latestSec[1] + latestSec[2] + latestSec[3] + latestSec[4];
         int currentLicIssues = latestLic[0] + latestLic[1] + latestLic[2] + latestLic[3];
 
         int secDelta = 0;
         int licDelta = 0;
         if (scansDesc.size() >= 2) {
-            List prevLibs = libraryRepository.findByScanResultIdWithCves(scansDesc.get(1).getId());
-            int[] prevSec = aggregateSecurity(prevLibs);
-            int[] prevLic = aggregateLicense(prevLibs);
+            var previous = summaries.get(scansDesc.get(1).getId());
+            int[] prevSec = previous.security();
+            int[] prevLic = previous.licenses();
             secDelta = currentSecIssues - (prevSec[0] + prevSec[1] + prevSec[2] + prevSec[3] + prevSec[4]);
             licDelta = currentLicIssues - (prevLic[0] + prevLic[1] + prevLic[2] + prevLic[3]);
         }
@@ -166,37 +166,6 @@ public void populateModel(Long projectId, Long scanId, Model model) {
         model.addAttribute("chartLicPermitted",   licPermitted);
     }
 
-    private int[] aggregateSecurity(List libraries) {
-        int c = 0, h = 0, m = 0, l = 0, n = 0;
-        for (Library lib : libraries) {
-            for (var cve : lib.getCves()) {
-                if (cve.getSeverity() == null) continue;
-                switch (cve.getSeverity()) {
-                    case CRITICAL -> c++;
-                    case HIGH     -> h++;
-                    case MEDIUM   -> m++;
-                    case LOW      -> l++;
-                    case NONE     -> n++;
-                    default       -> {}
-                }
-            }
-        }
-        return new int[]{c, h, m, l, n};
-    }
-
-    private int[] aggregateLicense(List libraries) {
-        int c = 0, h = 0, u = 0, l = 0;
-        for (Library lib : libraries) {
-            switch (lib.getLicenseStatus()) {
-                case RESTRICTED -> c++;
-                case CAUTION      -> h++;
-                case UNKNOWN   -> u++;
-                default        -> l++;
-            }
-        }
-        return new int[]{c, h, u, l};
-    }
-
     private void addEmptyChartData(Model model) {
         model.addAttribute("projectVersion",         "-");
         model.addAttribute("insightVersion",        null);
diff --git a/src/main/java/com/salkcoding/oswl/service/SarifExportService.java b/src/main/java/com/salkcoding/oswl/service/reporting/SarifExportService.java
similarity index 91%
rename from src/main/java/com/salkcoding/oswl/service/SarifExportService.java
rename to src/main/java/com/salkcoding/oswl/service/reporting/SarifExportService.java
index 501f20a1..1c4df554 100644
--- a/src/main/java/com/salkcoding/oswl/service/SarifExportService.java
+++ b/src/main/java/com/salkcoding/oswl/service/reporting/SarifExportService.java
@@ -1,19 +1,21 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.reporting;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
 
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.node.ArrayNode;
 import com.fasterxml.jackson.databind.node.ObjectNode;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import com.salkcoding.oswl.exception.ConflictException;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Value;
@@ -76,7 +78,7 @@ public SarifFile export(Long projectId) {
         ArrayNode runs = sarif.putArray("runs");
         ObjectNode run = runs.addObject();
 
-        // E7: in air-gapped mode, stamp the run with the vulnerability-definition cutoff date
+        // in air-gapped mode, stamp the run with the vulnerability-definition cutoff date
         // (oldest sourceAsOf across imported snapshot sources) so exported reports carry the
         // same "analyzed against definitions as of YYYY-MM-DD" provenance as the UI.
         if (airgapped) {
@@ -90,7 +92,7 @@ public SarifFile export(Long projectId) {
         ObjectNode driver = run.putObject("tool").putObject("driver");
         driver.put("name", "OsWL");
         driver.put("informationUri", "https://github.com/SalkCoding/Oswl");
-        driver.put("version", "1.0.4");
+        driver.put("version", "1.0.5.1");
         ArrayNode rules = driver.putArray("rules");
 
         ArrayNode results = run.putArray("results");
diff --git a/src/main/java/com/salkcoding/oswl/service/SbomExportService.java b/src/main/java/com/salkcoding/oswl/service/reporting/SbomExportService.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/service/SbomExportService.java
rename to src/main/java/com/salkcoding/oswl/service/reporting/SbomExportService.java
index 7a55dc02..26984028 100644
--- a/src/main/java/com/salkcoding/oswl/service/SbomExportService.java
+++ b/src/main/java/com/salkcoding/oswl/service/reporting/SbomExportService.java
@@ -1,17 +1,19 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.reporting;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
 
 import com.github.packageurl.MalformedPackageURLException;
 import com.github.packageurl.PackageURL;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import com.salkcoding.oswl.exception.ConflictException;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.cyclonedx.Version;
@@ -128,11 +130,11 @@ private SbomFile doExport(Long projectId, Format format, boolean vex) {
     // ── Bom assembly ─────────────────────────────────────────────────────
 
     /**
-     * E7: in air-gapped mode, stamps the oldest snapshot {@code sourceAsOf} into
+     * In air-gapped mode, stamps the oldest snapshot {@code sourceAsOf} into
      * {@code metadata.properties} as {@code oswl:definition-as-of} (ISO date), so a consumer
      * can tell which upstream-data date the results were analyzed against. Applies to both
      * SBOM and VEX exports. Adds nothing when not air-gapped or when no source has
-     * provenance yet, leaving the output byte-identical to the pre-E7 behavior.
+     * provenance yet, leaving the output byte-identical to the original behavior.
      */
     private void addDefinitionAsOf(Metadata metadata) {
         if (!airgapped) return;
diff --git a/src/main/java/com/salkcoding/oswl/service/ComponentDetailService.java b/src/main/java/com/salkcoding/oswl/service/scan/ComponentDetailService.java
similarity index 85%
rename from src/main/java/com/salkcoding/oswl/service/ComponentDetailService.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ComponentDetailService.java
index 6ed1122b..a75059a7 100644
--- a/src/main/java/com/salkcoding/oswl/service/ComponentDetailService.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ComponentDetailService.java
@@ -1,4 +1,8 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
+import com.salkcoding.oswl.service.project.ProjectAccessService;
+import com.salkcoding.oswl.service.vcs.GitLabService;
+import com.salkcoding.oswl.service.vcs.GitHubService;
+import com.salkcoding.oswl.service.vcs.BitbucketService;
 
 import com.salkcoding.oswl.auth.entity.UserVcsConnection;
 import com.salkcoding.oswl.auth.enums.VcsProvider;
@@ -8,11 +12,12 @@
 import com.salkcoding.oswl.auth.service.AuditLogService;
 import com.salkcoding.oswl.client.EpssClient;
 import com.salkcoding.oswl.client.KevCatalogService;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.DependencyPath;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.scan.DependencyPath;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.enums.DeploymentProfile;
 import com.salkcoding.oswl.domain.enums.LicenseStatus;
 import com.salkcoding.oswl.dto.CreatePrRequest;
 import com.salkcoding.oswl.dto.CveDto;
@@ -21,15 +26,19 @@
 import com.salkcoding.oswl.exception.AiSummaryException;
 import com.salkcoding.oswl.exception.AiSummaryFailureReason;
 import com.salkcoding.oswl.exception.InvalidRequestException;
-import com.salkcoding.oswl.repository.CveRepository;
-import com.salkcoding.oswl.repository.DependencyPathRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
+import com.salkcoding.oswl.repository.vulnerability.CveRepository;
+import com.salkcoding.oswl.repository.scan.DependencyPathRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
 import com.salkcoding.oswl.service.ai.AiAnalysisService;
 import com.salkcoding.oswl.service.ai.AiPreferencesService;
 import com.salkcoding.oswl.service.ai.AiStructuredSummary;
 import com.salkcoding.oswl.service.ai.AiLanguageContext;
 import com.salkcoding.oswl.service.ai.AiUsageContext;
+import com.salkcoding.oswl.service.cvss.CvssV3Calculator;
+import com.salkcoding.oswl.service.cvss.CvssV4Calculator;
+import com.salkcoding.oswl.service.cvss.CvssVectorVersion;
+import com.salkcoding.oswl.service.cvss.EnvironmentalRequirementMapper;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.security.core.Authentication;
@@ -44,7 +53,7 @@
 import java.util.ArrayList;
 import java.util.List;
 import java.util.Map;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import java.util.stream.Collectors;
 import java.util.stream.IntStream;
 
@@ -55,7 +64,7 @@ public class ComponentDetailService {
 
     private final ProjectRepository              projectRepository;
     private final ScanComponentRepository         scanComponentRepository;
-    private final com.salkcoding.oswl.repository.ScanResultRepository scanResultRepository;
+    private final com.salkcoding.oswl.repository.scan.ScanResultRepository scanResultRepository;
     private final DependencyPathRepository         dependencyPathRepository;
     private final AuditLogService                  auditLogService;
     private final GitHubService                    gitHubService;
@@ -148,6 +157,8 @@ public CveDto regenerateCveAiSummary(Long projectId, Long componentId, Long cveD
                 .epssScore(cve.getEpssScore())
                 .kevListed(cve.getKevListed())
                 .cveDbId(cve.getId())
+                .environmentalScore(computeEnvironmentalScore(
+                        cve.getCvss3Vector(), project.getDeploymentProfile(), sc.isRuntimeScope()))
                 .build();
     }
 
@@ -171,6 +182,9 @@ public void populateModel(Long projectId, Long componentId, Model model) {
         model.addAttribute("componentId", componentId);
 
         model.addAttribute("componentName", lib.getName());
+        model.addAttribute("vulnerabilitiesAnalyzed", lib.isVulnerabilitiesAnalyzed());
+        model.addAttribute("vulnerabilityLookupOutcomes", lib.getVulnerabilityLookupOutcomes());
+        model.addAttribute("vulnerabilityLookupAt", lib.getVulnerabilityLookupAt());
         model.addAttribute("componentVersion", lib.getVersion() != null ? lib.getVersion() : "-");
         model.addAttribute("reviewed", sc.isReviewed());
         model.addAttribute("patchability", patchabilityLabel(lib.computePatchability()));
@@ -192,6 +206,14 @@ public void populateModel(Long projectId, Long componentId, Model model) {
         model.addAttribute("dependencyInfo", sc.getDependencyInfo() != null ? sc.getDependencyInfo() : "-");
         model.addAttribute("ecosystem", lib.getEcosystem());
 
+        // Reachability verdict + the evidence backing a REACHABLE one (one
+        // "yourClass -> libraryClass" line per list entry; empty for NOT_REACHABLE/UNKNOWN).
+        model.addAttribute("reachability", sc.getReachability() != null ? sc.getReachability().name() : "UNKNOWN");
+        model.addAttribute("reachabilityAnalysis", com.salkcoding.oswl.dto.scan.SourceAnalysisDetails.fromJson(sc.getReachabilityAnalysis()));
+        model.addAttribute("reachabilityEvidence", sc.getReachabilityEvidence() != null
+                ? List.of(sc.getReachabilityEvidence().split("\n"))
+                : List.of());
+
         // Full dependency path tree (may be empty for scans created before this feature was introduced)
         List pathDtos = buildPathDtos(
                 dependencyPathRepository.findByScanComponentIdOrderByPathIndexAsc(sc.getId()),
@@ -237,7 +259,7 @@ public void populateModel(Long projectId, Long componentId, Model model) {
         model.addAttribute("typosquatRisk", lib.isTyposquatRisk());
         model.addAttribute("typosquatReason", lib.getTyposquatReason());
 
-        // Jira integration (#10): existing linked issue, if any
+        // Jira integration: existing linked issue, if any
         model.addAttribute("jiraIssueKey", sc.getJiraIssueKey());
         model.addAttribute("jiraIssueUrl", sc.getJiraIssueUrl());
 
@@ -267,7 +289,7 @@ public void populateModel(Long projectId, Long componentId, Model model) {
                         .ghsaId(c.getGhsaId())
                         .title(c.getTitle())
                         .severity(c.getSeverity() != null ? c.getSeverity().name() : "NONE")
-                        .cvssScore(c.getCvssScore() != null ? c.getCvssScore() : 0.0)
+                        .cvssScore(resolveCvssScore(c))
                         .cvss3Vector(c.getCvss3Vector())
                         .cweId(c.getCweId())
                         .summary(c.getSummary())
@@ -278,11 +300,53 @@ public void populateModel(Long projectId, Long componentId, Model model) {
                         .epssScore(c.getEpssScore())
                         .kevListed(c.getKevListed())
                         .cveDbId(c.getId())
+                        .environmentalScore(computeEnvironmentalScore(
+                                c.getCvss3Vector(), project.getDeploymentProfile(), sc.isRuntimeScope()))
                         .build())
                 .collect(Collectors.toList());
         model.addAttribute("cves", cveDtos);
     }
 
+    /**
+     * The CVE's displayed score — the score reported directly by the data source (deps.dev/NVD/
+     * GitHub Advisory) when present, falling back to computing the CVSS Base Score from the
+     * stored vector (v3.x via {@link CvssV3Calculator}, v4.0 via {@link CvssV4Calculator}) so a
+     * CVE that supplied a vector without an accompanying score still shows one. {@code 0.0} when
+     * neither is available (no CVSS data at all).
+     */
+    private double resolveCvssScore(Cve c) {
+        if (c.getCvssScore() != null) {
+            return c.getCvssScore();
+        }
+        String vector = c.getCvss3Vector();
+        Double fromVector = switch (CvssVectorVersion.detect(vector)) {
+            case V3 -> CvssV3Calculator.baseScore(vector);
+            case V4 -> CvssV4Calculator.baseScore(vector);
+            case UNKNOWN -> null;
+        };
+        return fromVector != null ? fromVector : 0.0;
+    }
+
+    /**
+     * CVSS Environmental score for one CVE — {@code null} when the CVE has no
+     * recognized CVSS vector at all. Dispatches to {@link CvssV3Calculator} or
+     * {@link CvssV4Calculator} depending on which version the stored vector declares.
+     */
+    private Double computeEnvironmentalScore(String cvssVector, DeploymentProfile deploymentProfile,
+                                             boolean runtimeScope) {
+        if (cvssVector == null || cvssVector.isBlank()) {
+            return null;
+        }
+        var req = EnvironmentalRequirementMapper.resolve(deploymentProfile, runtimeScope);
+        return switch (CvssVectorVersion.detect(cvssVector)) {
+            case V3 -> CvssV3Calculator.environmentalScore(
+                    cvssVector, req.confidentiality(), req.integrity(), req.availability());
+            case V4 -> CvssV4Calculator.environmentalScore(
+                    cvssVector, req.confidentiality(), req.integrity(), req.availability());
+            case UNKNOWN -> null;
+        };
+    }
+
     private String patchabilityLabel(com.salkcoding.oswl.domain.enums.Patchability p) {
         return switch (p) {
             case PATCHABLE     -> "patchable";
@@ -465,6 +529,19 @@ public Map createPullRequest(Long projectId, Long componentId,
         Project project = projectRepository.findById(projectId)
                 .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
 
+        return createPullRequest(sc, project, req, userId, githubToken);
+    }
+
+    /**
+     * PR creation with the component and project already loaded — the batch path passes its
+     * pre-loaded entities in so the per-component loop doesn't re-run the component/project
+     * lookups for every candidate.
+     */
+    private Map createPullRequest(ScanComponent sc, Project project,
+                                                  CreatePrRequest req, Long userId, String githubToken) {
+        Long projectId = project.getId();
+        Long componentId = sc.getId();
+
         VcsProvider provider = project.getVcsProvider();
         if (provider == null) {
             throw new IllegalStateException("This project is not connected to a VCS repository. (CLI imports do not support PR creation.)");
@@ -584,7 +661,7 @@ public Map createBatchPullRequests(Long projectId, String baseBr
             row.put("targetVersion", lib.resolvePrTargetVersion());
             try {
                 CreatePrRequest req = CreatePrRequest.ofBranch(baseBranch);
-                Map result = createPullRequest(projectId, sc.getId(), req, userId, githubToken);
+                Map result = createPullRequest(sc, project, req, userId, githubToken);
                 row.put("success", true);
                 row.put("prUrl", result.get("prUrl"));
                 created++;
diff --git a/src/main/java/com/salkcoding/oswl/service/scan/ScanArchivingService.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanArchivingService.java
new file mode 100644
index 00000000..93c465e4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanArchivingService.java
@@ -0,0 +1,158 @@
+package com.salkcoding.oswl.service.scan;
+
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.dto.scan.ScanArchiveExportDto;
+import com.salkcoding.oswl.dto.scan.ScanArchiveResult;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.DependencyPathRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.util.VersionOrder;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.stream.Collectors;
+import com.salkcoding.oswl.domain.entity.scan.DependencyPath;
+
+/**
+ * Retention policy for old scans — a project's {@code scan_components}/{@code dependency_paths}
+ * rows grow without bound over time, so the oldest completed scans beyond a per-project retain
+ * count have their component/CVE detail deleted, keeping only the aggregate severity/license
+ * counts on {@link ScanResult} itself (see {@link ScanResult#archive}).
+ *
+ * Manually triggered only (no scheduler) — deleting scan detail is not something to run
+ * automatically without an operator deciding the retain count for their own audit/compliance
+ * needs first.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class ScanArchivingService {
+
+    private final ProjectRepository projectRepository;
+    private final ScanResultRepository scanResultRepository;
+    private final ScanComponentRepository scanComponentRepository;
+    private final DependencyPathRepository dependencyPathRepository;
+    private final AuditLogService auditLogService;
+    private final ScanSummaryReader summaryReader;
+
+    @Value("${oswl.archive.retain-scans-per-project:20}")
+    private int defaultRetainCount;
+
+    /** Archives {@code projectId}'s completed scans beyond the default retain count. */
+    @Transactional
+    public ScanArchiveResult archiveProject(Long projectId) {
+        return archiveProject(projectId, defaultRetainCount);
+    }
+
+    /**
+     * Full component/CVE/dependency-path detail for every not-yet-archived scan that {@link
+     * #archiveProject(Long, int)} would delete the detail of, at the given retain count.
+     * Read-only — call this before archiving to keep a copy, since archiving cannot be undone.
+     */
+    @Transactional(readOnly = true)
+    public List exportPendingArchive(Long projectId) {
+        return exportPendingArchive(projectId, defaultRetainCount);
+    }
+
+    @Transactional(readOnly = true)
+    public List exportPendingArchive(Long projectId, int retainCount) {
+        if (retainCount < 1) {
+            retainCount = defaultRetainCount;
+        }
+        if (!projectRepository.existsById(projectId)) {
+            throw new IllegalArgumentException("Project not found: " + projectId);
+        }
+        List completed = new ArrayList<>(scanResultRepository.findCompletedByProjectId(projectId));
+        VersionOrder.sortDesc(completed);
+
+        List export = new ArrayList<>();
+        for (int i = retainCount; i < completed.size(); i++) {
+            ScanResult scan = completed.get(i);
+            if (scan.isArchived()) continue;
+            export.add(exportOneScan(scan));
+        }
+        return export;
+    }
+
+    @Transactional
+    public ScanArchiveResult archiveProject(Long projectId, int retainCount) {
+        if (retainCount < 1) {
+            retainCount = defaultRetainCount;
+        }
+        if (!projectRepository.existsById(projectId)) {
+            throw new IllegalArgumentException("Project not found: " + projectId);
+        }
+        List completed = new ArrayList<>(scanResultRepository.findCompletedByProjectId(projectId));
+        VersionOrder.sortDesc(completed);
+
+        int archivedNow = 0;
+        for (int i = retainCount; i < completed.size(); i++) {
+            ScanResult scan = completed.get(i);
+            if (scan.isArchived()) continue;
+            archiveOneScan(scan);
+            archivedNow++;
+        }
+
+        if (archivedNow > 0) {
+            auditLogService.log("SCAN.ARCHIVE", "PROJECT", projectId.toString(), null,
+                    "archivedNow=" + archivedNow + " retainCount=" + retainCount);
+            log.info("[ScanArchiving] projectId={} archived {} scan(s), retaining the {} most recent",
+                    projectId, archivedNow, retainCount);
+        }
+        return new ScanArchiveResult(projectId, retainCount, completed.size(), archivedNow);
+    }
+
+    private void archiveOneScan(ScanResult scan) {
+        long componentCount = scanComponentRepository.countByScanResultId(scan.getId());
+        var summary = summaryReader.read(List.of(scan)).get(scan.getId());
+        int[] security = summary.security();
+        int[] license = summary.licenses();
+        scan.archive(Math.toIntExact(componentCount), security, license);
+        scanResultRepository.save(scan);
+
+        if (componentCount > 0) {
+            dependencyPathRepository.deleteByScanResultId(scan.getId());
+        }
+        scanComponentRepository.deleteByScanResultId(scan.getId());
+    }
+
+    private ScanArchiveExportDto exportOneScan(ScanResult scan) {
+        List components = scanComponentRepository.findByScanResultId(scan.getId());
+        Map> paths = dependencyPathRepository.findByScanResultId(scan.getId()).stream()
+                .collect(Collectors.groupingBy(path -> path.getScanComponent().getId()));
+        List componentDtos = components.stream()
+                .map(component -> toComponentExport(component, paths.getOrDefault(component.getId(), List.of())))
+                .toList();
+        return new ScanArchiveExportDto(scan.getId(), scan.getVersion(), scan.getScannedAt(), componentDtos);
+    }
+
+    private ScanArchiveExportDto.ComponentExportDto toComponentExport(ScanComponent comp, List paths) {
+        Library lib = comp.getLibrary();
+        List cveDtos = lib.getCves().stream()
+                .map(cve -> new ScanArchiveExportDto.CveExportDto(
+                        cve.getCveId(),
+                        cve.getSeverity() != null ? cve.getSeverity().name() : null,
+                        cve.getCvssScore(), cve.getEpssScore(), cve.getKevListed(), cve.getFixVersion()))
+                .toList();
+        List> dependencyPaths = paths.stream()
+                .map(path -> path.getPathNodes().stream()
+                        .map(node -> node.getName() + "@" + node.getVersion())
+                        .toList())
+                .toList();
+        return new ScanArchiveExportDto.ComponentExportDto(
+                lib.getName(), lib.getVersion(), lib.getEcosystem(),
+                lib.getLicenseStatus() != null ? lib.getLicenseStatus().name() : null,
+                lib.getLicenseName(), cveDtos, dependencyPaths);
+    }
+
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanFailureMarker.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanFailureMarker.java
similarity index 70%
rename from src/main/java/com/salkcoding/oswl/service/ScanFailureMarker.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ScanFailureMarker.java
index 9c017228..329fe470 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanFailureMarker.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanFailureMarker.java
@@ -1,6 +1,7 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.notification.WebhookNotificationService;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
@@ -23,16 +24,25 @@ public class ScanFailureMarker {
 
     private final ScanResultRepository    scanResultRepository;
     private final ScanStatusEmitterRegistry scanStatusEmitterRegistry;
+    private final WebhookNotificationService webhookNotificationService;
 
     @Transactional(propagation = Propagation.REQUIRES_NEW)
     public void markFailed(Long scanResultId, String reason) {
         scanResultRepository.findById(scanResultId).ifPresent(scan -> {
             Long projectId = scan.getProject().getId(); // capture inside tx (LAZY)
+            String projectName = scan.getProject().getName();
             scan.fail(reason);
             scanResultRepository.save(scan);
             TransactionSynchronizationManager.registerSynchronization(new TransactionSynchronization() {
                 @Override public void afterCommit() {
                     scanStatusEmitterRegistry.notifyStatus(projectId, "FAILED");
+                    try {
+                        webhookNotificationService.sendScanFailure(projectId, projectName,
+                                scanResultId, reason);
+                    } catch (Exception e) {
+                        log.error("[Enrich] Webhook notification failed for scanId={}: {}",
+                                scanResultId, e.getMessage());
+                    }
                 }
             });
         });
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanHistoryService.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanHistoryService.java
similarity index 80%
rename from src/main/java/com/salkcoding/oswl/service/ScanHistoryService.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ScanHistoryService.java
index 77726a36..0e71b061 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanHistoryService.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanHistoryService.java
@@ -1,13 +1,13 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ProjectVersion;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.project.ProjectVersion;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.ScanHistoryRowDto;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ProjectVersionRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.project.ProjectVersionRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
@@ -89,9 +89,16 @@ public void populateModel(Long projectId, Model model) {
                             .status(s.getStatus().name())
                             .scannedAt(s.getScannedAt() != null
                                     ? s.getScannedAt().format(DISPLAY_FMT) : "-")
-                            .componentCount(componentCount)
+                            .componentCount(s.isArchived()
+                                    ? (s.getArchivedComponentCount() != null ? s.getArchivedComponentCount() : 0)
+                                    : componentCount)
                             .errorMessage(s.getErrorMessage())
                             .importSource(importSource)
+                            .archived(s.isArchived())
+                            .archivedSecurityCritical(s.getArchivedSecurityCritical())
+                            .archivedSecurityHigh(s.getArchivedSecurityHigh())
+                            .archivedLicenseCritical(s.getArchivedLicenseCritical())
+                            .archivedLicenseHigh(s.getArchivedLicenseHigh())
                             .build();
                 })
                 .toList();
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanStatusEmitterRegistry.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanStatusEmitterRegistry.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/service/ScanStatusEmitterRegistry.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ScanStatusEmitterRegistry.java
index efc75586..4bc42737 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanStatusEmitterRegistry.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanStatusEmitterRegistry.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Component;
diff --git a/src/main/java/com/salkcoding/oswl/service/scan/ScanSummaryReader.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanSummaryReader.java
new file mode 100644
index 00000000..3ffbf26e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanSummaryReader.java
@@ -0,0 +1,48 @@
+package com.salkcoding.oswl.service.scan;
+
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/** One CVE per distinct library and one license outcome per distinct library in a scan.
+ * Live scans reflect current shared library metadata; archived scans retain their saved totals. */
+@Service
+@RequiredArgsConstructor
+public class ScanSummaryReader {
+    private final LibraryRepository libraries;
+    public record Summary(int[] security, int[] licenses) {}
+
+    @Transactional(readOnly = true)
+    public Map read(List scans) {
+        Map result = new HashMap<>();
+        for (ScanResult scan : scans) result.put(scan.getId(), scan.isArchived() ? archived(scan)
+                : new Summary(new int[5], new int[4]));
+        List live = scans.stream().filter(s -> !s.isArchived()).map(ScanResult::getId).toList();
+        if (live.isEmpty()) return result;
+        for (Object[] row : libraries.countSecurityByScanIds(live)) {
+            int slot = switch (String.valueOf(row[1])) {
+                case "CRITICAL" -> 0; case "HIGH" -> 1; case "MEDIUM" -> 2; case "LOW" -> 3; default -> 4;
+            };
+            result.get((Long) row[0]).security()[slot] += Math.toIntExact(((Number) row[2]).longValue());
+        }
+        for (Object[] row : libraries.countLicensesByScanIds(live)) {
+            int slot = switch (String.valueOf(row[1])) {
+                case "RESTRICTED" -> 0; case "CAUTION" -> 1; case "PERMITTED" -> 3; default -> 2;
+            };
+            result.get((Long) row[0]).licenses()[slot] += Math.toIntExact(((Number) row[2]).longValue());
+        }
+        return result;
+    }
+    private static Summary archived(ScanResult s) {
+        return new Summary(new int[]{n(s.getArchivedSecurityCritical()), n(s.getArchivedSecurityHigh()),
+                n(s.getArchivedSecurityMedium()), n(s.getArchivedSecurityLow()), n(s.getArchivedSecurityUnscored())},
+                new int[]{n(s.getArchivedLicenseCritical()), n(s.getArchivedLicenseHigh()),
+                        n(s.getArchivedLicenseMedium()), n(s.getArchivedLicenseLow())});
+    }
+    private static int n(Integer value) { return value == null ? 0 : value; }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanTimingRecorder.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanTimingRecorder.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/service/ScanTimingRecorder.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ScanTimingRecorder.java
index 217481f0..758a3a78 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanTimingRecorder.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanTimingRecorder.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
 import org.springframework.stereotype.Component;
 
diff --git a/src/main/java/com/salkcoding/oswl/service/ScanVersionDiffAnalyzer.java b/src/main/java/com/salkcoding/oswl/service/scan/ScanVersionDiffAnalyzer.java
similarity index 74%
rename from src/main/java/com/salkcoding/oswl/service/ScanVersionDiffAnalyzer.java
rename to src/main/java/com/salkcoding/oswl/service/scan/ScanVersionDiffAnalyzer.java
index 4a7410d0..c7e34066 100644
--- a/src/main/java/com/salkcoding/oswl/service/ScanVersionDiffAnalyzer.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/ScanVersionDiffAnalyzer.java
@@ -1,10 +1,10 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
-import com.salkcoding.oswl.domain.entity.ScanComponent;
+import com.salkcoding.oswl.dto.scan.VersionDiffComponent;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import com.salkcoding.oswl.dto.VersionDiffRowDto;
 import com.salkcoding.oswl.dto.VersionDiffRowDto.ChangeType;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
 import lombok.RequiredArgsConstructor;
 import org.springframework.stereotype.Service;
 
@@ -22,8 +22,8 @@ public record DiffResult(
             List rows, String threatDetails) {}
 
     public DiffResult compare(Long fromScanId, Long toScanId) {
-        Map> fromMap = buildMap(fromScanId);
-        Map> toMap   = buildMap(toScanId);
+        Map> fromMap = buildMap(fromScanId);
+        Map> toMap   = buildMap(toScanId);
 
         List rows = new ArrayList<>();
         Set allNames = new LinkedHashSet<>();
@@ -35,8 +35,8 @@ public DiffResult compare(Long fromScanId, Long toScanId) {
         for (String name : allNames) {
             // Compare per (name, version) so a library present in several versions
             // (e.g. diamond dependencies) is never collapsed into a single row.
-            Map fromByVersion = byVersion(fromMap.get(name));
-            Map toByVersion   = byVersion(toMap.get(name));
+            Map fromByVersion = byVersion(fromMap.get(name));
+            Map toByVersion   = byVersion(toMap.get(name));
 
             Set allVersions = new LinkedHashSet<>();
             allVersions.addAll(fromByVersion.keySet());
@@ -45,8 +45,8 @@ public DiffResult compare(Long fromScanId, Long toScanId) {
             List removedVersions = new ArrayList<>();
             List addedVersions   = new ArrayList<>();
             for (String version : allVersions) {
-                ScanComponent fromComp = fromByVersion.get(version);
-                ScanComponent toComp   = toByVersion.get(version);
+                VersionDiffComponent fromComp = fromByVersion.get(version);
+                VersionDiffComponent toComp   = toByVersion.get(version);
                 if (fromComp != null && toComp != null) {
                     // Same name+version in both scans — only a severity change is notable.
                     if (isNewThreat(fromComp, toComp)) {
@@ -62,8 +62,8 @@ public DiffResult compare(Long fromScanId, Long toScanId) {
 
             // One from-only version replaced by one to-only version → version change.
             if (removedVersions.size() == 1 && addedVersions.size() == 1) {
-                ScanComponent fromComp = fromByVersion.get(removedVersions.get(0));
-                ScanComponent toComp   = toByVersion.get(addedVersions.get(0));
+                VersionDiffComponent fromComp = fromByVersion.get(removedVersions.get(0));
+                VersionDiffComponent toComp   = toByVersion.get(addedVersions.get(0));
                 if (isNewThreat(fromComp, toComp)) {
                     rows.add(diffRow(fromComp, toComp, ChangeType.NEW_THREAT));
                     newThreat++;
@@ -79,8 +79,8 @@ public DiffResult compare(Long fromScanId, Long toScanId) {
                 removed++;
             }
             for (String version : addedVersions) {
-                ScanComponent toComp = toByVersion.get(version);
-                if (toComp.getLibrary().highestSeverity() != RiskLevel.NONE) {
+                VersionDiffComponent toComp = toByVersion.get(version);
+                if (toComp.highestSeverity() != RiskLevel.NONE) {
                     rows.add(diffRow(null, toComp, ChangeType.NEW_THREAT));
                     newThreat++;
                 } else {
@@ -94,21 +94,21 @@ public DiffResult compare(Long fromScanId, Long toScanId) {
     }
 
     /** True when the to-scan component is a new or more severe threat than the from-scan one. */
-    private static boolean isNewThreat(ScanComponent fromComp, ScanComponent toComp) {
-        RiskLevel fromRisk = fromComp.getLibrary().highestSeverity();
-        RiskLevel toRisk   = toComp.getLibrary().highestSeverity();
+    private static boolean isNewThreat(VersionDiffComponent fromComp, VersionDiffComponent toComp) {
+        RiskLevel fromRisk = fromComp.highestSeverity();
+        RiskLevel toRisk   = toComp.highestSeverity();
         return (toRisk != RiskLevel.NONE)
                 && (fromRisk == RiskLevel.NONE || toRisk.ordinal() < fromRisk.ordinal());
     }
 
-    private static VersionDiffRowDto diffRow(ScanComponent fromComp, ScanComponent toComp, ChangeType type) {
+    private static VersionDiffRowDto diffRow(VersionDiffComponent fromComp, VersionDiffComponent toComp, ChangeType type) {
         return VersionDiffRowDto.builder()
                 .fromName(fromComp != null ? fromComp.getName() : null)
                 .fromVersion(fromComp != null ? fromComp.getVersion() : null)
-                .fromRiskLevel(fromComp != null ? fromComp.getLibrary().highestSeverity().name() : null)
+                .fromRiskLevel(fromComp != null ? fromComp.highestSeverity().name() : null)
                 .toName(toComp != null ? toComp.getName() : null)
                 .toVersion(toComp != null ? toComp.getVersion() : null)
-                .toRiskLevel(toComp != null ? toComp.getLibrary().highestSeverity().name() : null)
+                .toRiskLevel(toComp != null ? toComp.highestSeverity().name() : null)
                 .changeType(type)
                 .build();
     }
@@ -136,19 +136,19 @@ private static String buildThreatDetails(List rows) {
         return threatDetails.toString().strip();
     }
 
-    private Map> buildMap(Long scanId) {
-        return scanComponentRepository.findByScanResultId(scanId).stream()
+    private Map> buildMap(Long scanId) {
+        return scanComponentRepository.findVersionDiffComponents(scanId).stream()
                 .collect(java.util.stream.Collectors.groupingBy(
-                        sc -> sc.getLibrary().getName(),
+                        VersionDiffComponent::getName,
                         LinkedHashMap::new,
                         java.util.stream.Collectors.toList()));
     }
 
     /** Components of one library name keyed by version; the first row wins on exact duplicates. */
-    private static Map byVersion(List components) {
+    private static Map byVersion(List components) {
         if (components == null) return Map.of();
-        Map map = new LinkedHashMap<>();
-        for (ScanComponent sc : components) {
+        Map map = new LinkedHashMap<>();
+        for (VersionDiffComponent sc : components) {
             map.putIfAbsent(sc.getVersion() != null ? sc.getVersion() : "", sc);
         }
         return map;
diff --git a/src/main/java/com/salkcoding/oswl/service/VersionDiffService.java b/src/main/java/com/salkcoding/oswl/service/scan/VersionDiffService.java
similarity index 95%
rename from src/main/java/com/salkcoding/oswl/service/VersionDiffService.java
rename to src/main/java/com/salkcoding/oswl/service/scan/VersionDiffService.java
index f780fd6b..1a4a5dbd 100644
--- a/src/main/java/com/salkcoding/oswl/service/VersionDiffService.java
+++ b/src/main/java/com/salkcoding/oswl/service/scan/VersionDiffService.java
@@ -1,11 +1,11 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.scan;
 
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.dto.VersionDiffRowDto;
 import com.salkcoding.oswl.dto.VersionSummaryDto;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import com.salkcoding.oswl.service.ai.AiAnalysisService;
 import com.salkcoding.oswl.service.ai.AiResponseSanitizer;
 import com.salkcoding.oswl.service.ai.AiLanguageContext;
diff --git a/src/main/java/com/salkcoding/oswl/service/scim/ScimProvisioningService.java b/src/main/java/com/salkcoding/oswl/service/scim/ScimProvisioningService.java
new file mode 100644
index 00000000..d9e01f75
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/scim/ScimProvisioningService.java
@@ -0,0 +1,511 @@
+package com.salkcoding.oswl.service.scim;
+import com.salkcoding.oswl.service.org.TeamService;
+
+import com.salkcoding.oswl.auth.entity.RoleTemplate;
+import com.salkcoding.oswl.auth.entity.User;
+import com.salkcoding.oswl.auth.enums.Permission;
+import com.salkcoding.oswl.auth.repository.RoleTemplateRepository;
+import com.salkcoding.oswl.auth.repository.UserRepository;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.org.Team;
+import com.salkcoding.oswl.domain.entity.org.TeamMember;
+import com.salkcoding.oswl.domain.enums.ScimGroupMapping;
+import com.salkcoding.oswl.domain.enums.TeamMemberRole;
+import com.salkcoding.oswl.dto.TeamSummaryDto;
+import com.salkcoding.oswl.dto.scim.*;
+import com.salkcoding.oswl.repository.org.TeamMemberRepository;
+import com.salkcoding.oswl.repository.org.TeamRepository;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.security.crypto.password.PasswordEncoder;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.time.LocalDateTime;
+import java.time.ZoneOffset;
+import java.time.format.DateTimeFormatter;
+import java.util.*;
+import java.util.stream.Collectors;
+
+/**
+ * SCIM 2.0 user and group provisioning service.
+ *
+ * SCIM groups are mapped either to {@link Team} or {@link RoleTemplate} based on
+ * {@code oswl.scim.group-mapping}. Group membership changes are reflected immediately
+ * in the chosen OsWL authorization model.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class ScimProvisioningService {
+
+    private static final String USER_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:User";
+    private static final String GROUP_SCHEMA = "urn:ietf:params:scim:schemas:core:2.0:Group";
+    private static final String LIST_SCHEMA = "urn:ietf:params:scim:api:messages:2.0:ListResponse";
+    private static final String ERROR_SCHEMA = "urn:ietf:params:scim:api:messages:2.0:Error";
+
+    private final UserRepository userRepository;
+    private final RoleTemplateRepository roleTemplateRepository;
+    private final TeamRepository teamRepository;
+    private final TeamMemberRepository teamMemberRepository;
+    private final TeamService teamService;
+    private final AuditLogService auditLogService;
+    private final PasswordEncoder passwordEncoder;
+
+    @Value("${oswl.scim.group-mapping:TEAM}")
+    private ScimGroupMapping groupMapping;
+
+    // ── Users ────────────────────────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public ScimUser getUser(Long id) {
+        User user = findUserOrThrow(id);
+        return toScimUser(user);
+    }
+
+    @Transactional(readOnly = true)
+    public ScimListResponse listUsers(String filter, int startIndex, int count) {
+        List users = filterUsers(filter);
+        int total = users.size();
+        int from = Math.max(0, startIndex - 1);
+        int to = Math.min(users.size(), from + count);
+        List resources = users.subList(from, to).stream()
+                .map(this::toScimUser)
+                .collect(Collectors.toList());
+        return ScimListResponse.builder()
+                .schemas(List.of(LIST_SCHEMA))
+                .totalResults(total)
+                .startIndex(startIndex)
+                .itemsPerPage(resources.size())
+                .resources(resources)
+                .build();
+    }
+
+    @Transactional
+    public ScimUser createUser(ScimUser request) {
+        String email = normalizeEmail(request);
+        if (userRepository.existsByEmail(email)) {
+            throw new IllegalArgumentException("User already exists: " + email);
+        }
+        String displayName = request.getDisplayName() != null ? request.getDisplayName()
+                : (request.getName() != null && request.getName().getFormatted() != null)
+                        ? request.getName().getFormatted()
+                        : email.substring(0, email.indexOf('@'));
+        boolean active = request.getActive() != null && request.getActive();
+        User user = User.builder()
+                .email(email)
+                .passwordHash(passwordEncoder.encode("scim-provisioned-" + System.currentTimeMillis()))
+                .displayName(displayName)
+                .isSystemAdmin(false)
+                .enabled(active)
+                .mustChangePassword(false)
+                .build();
+        User saved = userRepository.save(user);
+        log.info("[SCIM] Created user id={} email='{}' active={}", saved.getId(), email, active);
+        auditLogService.log("SCIM.USER_CREATE", "USER", saved.getId().toString(), email,
+                "active=" + active);
+        return toScimUser(saved);
+    }
+
+    @Transactional
+    public ScimUser updateUser(Long id, ScimUser request) {
+        User user = findUserOrThrow(id);
+        String email = normalizeEmail(request);
+        if (!email.equals(user.getEmail()) && userRepository.existsByEmail(email)) {
+            throw new IllegalArgumentException("Email already in use: " + email);
+        }
+        user.setEmail(email);
+        if (request.getDisplayName() != null) {
+            user.setDisplayName(request.getDisplayName());
+        } else if (request.getName() != null && request.getName().getFormatted() != null) {
+            user.setDisplayName(request.getName().getFormatted());
+        }
+        if (request.getActive() != null) {
+            user.setEnabled(request.getActive());
+        }
+        log.info("[SCIM] Updated user id={} email='{}'", user.getId(), email);
+        auditLogService.log("SCIM.USER_UPDATE", "USER", id.toString(), email, "active=" + user.isEnabled());
+        return toScimUser(user);
+    }
+
+    @Transactional
+    public ScimUser patchUser(Long id, ScimPatchRequest request) {
+        User user = findUserOrThrow(id);
+        for (ScimPatchOperation op : request.getOperations()) {
+            applyUserPatch(user, op);
+        }
+        log.info("[SCIM] Patched user id={} active={}", id, user.isEnabled());
+        auditLogService.log("SCIM.USER_UPDATE", "USER", id.toString(), user.getEmail(), "patched");
+        return toScimUser(user);
+    }
+
+    @Transactional
+    public void deactivateUser(Long id) {
+        User user = findUserOrThrow(id);
+        if (user.isSystemAdmin()) {
+            throw new IllegalStateException("System administrator cannot be deactivated via SCIM.");
+        }
+        user.setEnabled(false);
+        log.info("[SCIM] Deactivated user id={} email='{}'", id, user.getEmail());
+        auditLogService.log("SCIM.USER_DEACTIVATE", "USER", id.toString(), user.getEmail(), "source=SCIM");
+    }
+
+    // ── Groups ───────────────────────────────────────────────────────────────
+
+    @Transactional(readOnly = true)
+    public ScimGroup getGroup(Long id) {
+        if (groupMapping == ScimGroupMapping.ROLE_TEMPLATE) {
+            RoleTemplate template = roleTemplateRepository.findById(id)
+                    .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+            return toScimGroup(template);
+        }
+        Team team = teamRepository.findById(id)
+                .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+        return toScimGroup(team);
+    }
+
+    @Transactional(readOnly = true)
+    public ScimListResponse listGroups() {
+        List resources;
+        if (groupMapping == ScimGroupMapping.ROLE_TEMPLATE) {
+            resources = roleTemplateRepository.findAll().stream()
+                    .map(this::toScimGroup)
+                    .collect(Collectors.toList());
+        } else {
+            resources = teamRepository.findAllByOrderByNameAsc().stream()
+                    .map(this::toScimGroup)
+                    .collect(Collectors.toList());
+        }
+        return ScimListResponse.builder()
+                .schemas(List.of(LIST_SCHEMA))
+                .totalResults(resources.size())
+                .startIndex(1)
+                .itemsPerPage(resources.size())
+                .resources(resources)
+                .build();
+    }
+
+    @Transactional
+    public ScimGroup createGroup(ScimGroup request) {
+        String name = request.getDisplayName();
+        if (name == null || name.isBlank()) {
+            throw new IllegalArgumentException("Group displayName is required.");
+        }
+        if (groupMapping == ScimGroupMapping.ROLE_TEMPLATE) {
+            if (roleTemplateRepository.existsByName(name)) {
+                throw new IllegalArgumentException("Role template already exists: " + name);
+            }
+            RoleTemplate template = RoleTemplate.builder()
+                    .name(name)
+                    .description("SCIM-provisioned role template")
+                    .isBuiltIn(false)
+                    .permissions(EnumSet.noneOf(Permission.class))
+                    .build();
+            RoleTemplate saved = roleTemplateRepository.save(template);
+            syncRoleTemplateMembers(saved, request.getMembers());
+            log.info("[SCIM] Created role-template group id={} name='{}'", saved.getId(), name);
+            auditLogService.log("SCIM.GROUP_CREATE", "ROLE_TEMPLATE", saved.getId().toString(), name, "source=SCIM");
+            return toScimGroup(saved);
+        }
+        TeamSummaryDto created = teamService.createTeam(name, "SCIM-provisioned team", null);
+        Team team = teamRepository.findById(created.getId())
+                .orElseThrow(() -> new IllegalStateException("Created team not found: " + created.getId()));
+        syncTeamMembers(team, request.getMembers());
+        log.info("[SCIM] Created team group id={} name='{}'", team.getId(), name);
+        auditLogService.log("SCIM.GROUP_CREATE", "TEAM", team.getId().toString(), name, "source=SCIM");
+        return toScimGroup(team);
+    }
+
+    @Transactional
+    public ScimGroup updateGroup(Long id, ScimGroup request) {
+        if (groupMapping == ScimGroupMapping.ROLE_TEMPLATE) {
+            RoleTemplate template = roleTemplateRepository.findById(id)
+                    .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+            if (request.getDisplayName() != null && !request.getDisplayName().isBlank()) {
+                template.setName(request.getDisplayName());
+            }
+            syncRoleTemplateMembers(template, request.getMembers());
+            log.info("[SCIM] Updated role-template group id={}", id);
+            auditLogService.log("SCIM.GROUP_UPDATE", "ROLE_TEMPLATE", id.toString(), template.getName(), "source=SCIM");
+            return toScimGroup(template);
+        }
+        Team team = teamRepository.findById(id)
+                .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+        if (request.getDisplayName() != null && !request.getDisplayName().isBlank()) {
+            teamService.updateTeam(id, request.getDisplayName(), team.getDescription(), null);
+            team = teamRepository.findById(id)
+                    .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+        }
+        syncTeamMembers(team, request.getMembers());
+        log.info("[SCIM] Updated team group id={}", id);
+        auditLogService.log("SCIM.GROUP_UPDATE", "TEAM", id.toString(), team.getName(), "source=SCIM");
+        return toScimGroup(team);
+    }
+
+    @Transactional
+    public ScimGroup patchGroup(Long id, ScimPatchRequest request) {
+        ScimGroup current = getGroup(id);
+        for (ScimPatchOperation op : request.getOperations()) {
+            if ("replace".equalsIgnoreCase(op.getOp()) && "members".equals(op.getPath())) {
+                current.setMembers(parseMembers(op.getValue()));
+            } else if ("add".equalsIgnoreCase(op.getOp()) && op.getPath() == null && op.getValue() instanceof Map map) {
+                Object members = map.get("members");
+                if (members instanceof List list) {
+                    List additions = parseMembers(list);
+                    List merged = new ArrayList<>(current.getMembers() != null ? current.getMembers() : List.of());
+                    merged.addAll(additions);
+                    current.setMembers(merged);
+                }
+            }
+        }
+        return updateGroup(id, current);
+    }
+
+    @Transactional
+    public void deleteGroup(Long id) {
+        if (groupMapping == ScimGroupMapping.ROLE_TEMPLATE) {
+            RoleTemplate template = roleTemplateRepository.findById(id)
+                    .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+            if (template.isBuiltIn()) {
+                throw new IllegalStateException("Built-in role templates cannot be deleted via SCIM.");
+            }
+            roleTemplateRepository.delete(template);
+            log.info("[SCIM] Deleted role-template group id={} name='{}'", id, template.getName());
+            auditLogService.log("SCIM.GROUP_DELETE", "ROLE_TEMPLATE", id.toString(), template.getName(), "source=SCIM");
+        } else {
+            Team team = teamRepository.findById(id)
+                    .orElseThrow(() -> new NoSuchElementException("Group not found: " + id));
+            teamService.deleteTeam(id);
+            log.info("[SCIM] Deleted team group id={} name='{}'", id, team.getName());
+            auditLogService.log("SCIM.GROUP_DELETE", "TEAM", id.toString(), team.getName(), "source=SCIM");
+        }
+    }
+
+    // ── Helpers ──────────────────────────────────────────────────────────────
+
+    private User findUserOrThrow(Long id) {
+        return userRepository.findById(id)
+                .orElseThrow(() -> new NoSuchElementException("User not found: " + id));
+    }
+
+    private String normalizeEmail(ScimUser request) {
+        String userName = request.getUserName();
+        if (userName == null || userName.isBlank()) {
+            if (request.getEmails() != null && !request.getEmails().isEmpty()) {
+                userName = request.getEmails().get(0).getValue();
+            }
+        }
+        if (userName == null || userName.isBlank() || !userName.contains("@")) {
+            throw new IllegalArgumentException("userName or email is required.");
+        }
+        return userName.trim().toLowerCase();
+    }
+
+    private List filterUsers(String filter) {
+        List all = userRepository.findAll();
+        if (filter == null || filter.isBlank()) {
+            return all;
+        }
+        // Support simple filter: userName eq "value"
+        String lower = filter.toLowerCase();
+        if (lower.startsWith("username eq ")) {
+            String value = stripQuotes(filter.substring("username eq ".length()).trim());
+            return all.stream()
+                    .filter(u -> u.getEmail().equalsIgnoreCase(value))
+                    .collect(Collectors.toList());
+        }
+        return all;
+    }
+
+    private String stripQuotes(String s) {
+        if (s.length() >= 2 && s.startsWith("\"") && s.endsWith("\"")) {
+            return s.substring(1, s.length() - 1);
+        }
+        return s;
+    }
+
+    private void applyUserPatch(User user, ScimPatchOperation op) {
+        if (!"replace".equalsIgnoreCase(op.getOp())) {
+            return;
+        }
+        if ("active".equals(op.getPath())) {
+            setUserActive(user, op.getValue());
+        } else if (op.getPath() == null && op.getValue() instanceof Map map) {
+            Object active = map.get("active");
+            if (active != null) {
+                setUserActive(user, active);
+            }
+        }
+    }
+
+    private void setUserActive(User user, Object value) {
+        if (value instanceof Boolean b) {
+            user.setEnabled(b);
+        } else if (value instanceof String s) {
+            user.setEnabled(Boolean.parseBoolean(s));
+        }
+    }
+
+    private void syncTeamMembers(Team team, List members) {
+        if (members == null) {
+            return;
+        }
+        Set desiredUserIds = members.stream()
+                .map(m -> parseUserId(m.getValue()))
+                .filter(Objects::nonNull)
+                .collect(Collectors.toSet());
+
+        List existing = teamMemberRepository.findByTeamIdOrderByCreatedAtAsc(team.getId());
+        Set existingUserIds = existing.stream().map(TeamMember::getUserId).collect(Collectors.toSet());
+
+        for (Long userId : desiredUserIds) {
+            if (!existingUserIds.contains(userId)) {
+                teamMemberRepository.save(TeamMember.builder()
+                        .team(team)
+                        .userId(userId)
+                        .role(TeamMemberRole.MEMBER)
+                        .build());
+                auditLogService.log("SCIM.GROUP_MEMBER_ADD", "TEAM", team.getId().toString(),
+                        team.getName(), "userId=" + userId);
+            }
+        }
+        for (TeamMember member : existing) {
+            if (!desiredUserIds.contains(member.getUserId())) {
+                teamMemberRepository.delete(member);
+                auditLogService.log("SCIM.GROUP_MEMBER_REMOVE", "TEAM", team.getId().toString(),
+                        team.getName(), "userId=" + member.getUserId());
+            }
+        }
+    }
+
+    private void syncRoleTemplateMembers(RoleTemplate template, List members) {
+        if (members == null) {
+            return;
+        }
+        Set desiredUserIds = members.stream()
+                .map(m -> parseUserId(m.getValue()))
+                .filter(Objects::nonNull)
+                .collect(Collectors.toSet());
+
+        List existing = roleTemplateRepository.findUserIdsByTemplateId(template.getId()).stream()
+                .map(userRepository::findById)
+                .filter(Optional::isPresent)
+                .map(Optional::get)
+                .collect(Collectors.toList());
+        Set existingUserIds = existing.stream().map(User::getId).collect(Collectors.toSet());
+
+        for (Long userId : desiredUserIds) {
+            if (!existingUserIds.contains(userId)) {
+                User user = userRepository.findById(userId)
+                        .orElseThrow(() -> new NoSuchElementException("User not found: " + userId));
+                user.getRoleTemplates().add(template);
+                auditLogService.log("SCIM.GROUP_MEMBER_ADD", "ROLE_TEMPLATE", template.getId().toString(),
+                        template.getName(), "userId=" + userId);
+            }
+        }
+        for (User user : existing) {
+            if (!desiredUserIds.contains(user.getId())) {
+                user.getRoleTemplates().remove(template);
+                auditLogService.log("SCIM.GROUP_MEMBER_REMOVE", "ROLE_TEMPLATE", template.getId().toString(),
+                        template.getName(), "userId=" + user.getId());
+            }
+        }
+    }
+
+    private Long parseUserId(String value) {
+        if (value == null || value.isBlank()) {
+            return null;
+        }
+        try {
+            return Long.parseLong(value);
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    private List parseMembers(Object value) {
+        if (value instanceof List list) {
+            return list.stream()
+                    .filter(m -> m instanceof Map)
+                    .map(m -> (Map) m)
+                    .map(m -> ScimMember.builder()
+                            .value(String.valueOf(m.get("value")))
+                            .display(m.get("display") != null ? String.valueOf(m.get("display")) : null)
+                            .build())
+                    .collect(Collectors.toList());
+        }
+        return List.of();
+    }
+
+    private ScimUser toScimUser(User user) {
+        return ScimUser.builder()
+                .id(user.getId().toString())
+                .userName(user.getEmail())
+                .displayName(user.getDisplayName())
+                .active(user.isEnabled())
+                .emails(List.of(ScimEmail.builder()
+                        .value(user.getEmail())
+                        .type("work")
+                        .primary(true)
+                        .build()))
+                .schemas(List.of(USER_SCHEMA))
+                .meta(ScimMeta.builder()
+                        .resourceType("User")
+                        .created(formatInstant(user.getCreatedAt()))
+                        .lastModified(formatInstant(user.getUpdatedAt()))
+                        .location("/scim/v2/Users/" + user.getId())
+                        .build())
+                .build();
+    }
+
+    private ScimGroup toScimGroup(Team team) {
+        List members = teamMemberRepository.findByTeamIdOrderByCreatedAtAsc(team.getId());
+        List scimMembers = members.stream()
+                .map(m -> ScimMember.builder()
+                        .value(m.getUserId().toString())
+                        .type("User")
+                        .build())
+                .collect(Collectors.toList());
+        return ScimGroup.builder()
+                .id(team.getId().toString())
+                .displayName(team.getName())
+                .members(scimMembers)
+                .schemas(List.of(GROUP_SCHEMA))
+                .meta(ScimMeta.builder()
+                        .resourceType("Group")
+                        .created(formatInstant(team.getCreatedAt()))
+                        .location("/scim/v2/Groups/" + team.getId())
+                        .build())
+                .build();
+    }
+
+    private ScimGroup toScimGroup(RoleTemplate template) {
+        List userIds = roleTemplateRepository.findUserIdsByTemplateId(template.getId());
+        List scimMembers = userIds.stream()
+                .map(id -> ScimMember.builder()
+                        .value(id.toString())
+                        .type("User")
+                        .build())
+                .collect(Collectors.toList());
+        return ScimGroup.builder()
+                .id(template.getId().toString())
+                .displayName(template.getName())
+                .members(scimMembers)
+                .schemas(List.of(GROUP_SCHEMA))
+                .meta(ScimMeta.builder()
+                        .resourceType("Group")
+                        .created(formatInstant(template.getCreatedAt()))
+                        .lastModified(formatInstant(template.getUpdatedAt()))
+                        .location("/scim/v2/Groups/" + template.getId())
+                        .build())
+                .build();
+    }
+
+    private String formatInstant(LocalDateTime dateTime) {
+        if (dateTime == null) {
+            return null;
+        }
+        return dateTime.atOffset(ZoneOffset.UTC).format(DateTimeFormatter.ISO_INSTANT);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/CustomRuleScanner.java b/src/main/java/com/salkcoding/oswl/service/secretscan/CustomRuleScanner.java
new file mode 100644
index 00000000..6a33fbb2
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/CustomRuleScanner.java
@@ -0,0 +1,76 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.salkcoding.oswl.domain.enums.*;
+import com.salkcoding.oswl.dto.scan.ScanFindingCandidate;
+import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.*;
+import java.nio.file.attribute.BasicFileAttributes;
+import java.io.IOException;
+import java.time.Duration;
+import java.util.*;
+
+@Service
+@RequiredArgsConstructor
+public class CustomRuleScanner {
+    private final CustomScanRuleService service;
+
+    public List scan(Path directory) {
+        List rules;
+        try { rules = service.compiled(); }
+        catch (RuntimeException e) { return List.of(incomplete("custom-scan-incomplete")); }
+        if (rules.isEmpty()) return List.of();
+        var findings = new ArrayList();
+        long deadline = System.nanoTime() + Duration.ofSeconds(5).toNanos();
+        long[] bytes = {0}; int[] files = {0}; boolean[] incomplete = {false};
+        try {
+            Path root = directory.toRealPath();
+            Files.walkFileTree(root, new SimpleFileVisitor<>() {
+                private boolean exhausted() { return System.nanoTime() >= deadline || findings.size() >= 300 || bytes[0] > 16_000_000 || files[0] > 2000 || Thread.currentThread().isInterrupted(); }
+                @Override public FileVisitResult preVisitDirectory(Path dir, BasicFileAttributes attrs) {
+                    if (exhausted()) { incomplete[0] = true; return FileVisitResult.TERMINATE; }
+                    return !dir.equals(root) && ManifestCollectRules.SKIP_DIRS.contains(dir.getFileName().toString()) ? FileVisitResult.SKIP_SUBTREE : FileVisitResult.CONTINUE;
+                }
+                @Override public FileVisitResult visitFile(Path file, BasicFileAttributes attrs) throws IOException {
+                    if (exhausted()) { incomplete[0] = true; return FileVisitResult.TERMINATE; }
+                    if (!attrs.isRegularFile() || Files.isSymbolicLink(file)) return FileVisitResult.CONTINUE;
+                    files[0]++;
+                    var applicable = rules.stream().filter(r -> file.getFileName().toString().toLowerCase(Locale.ROOT).endsWith(r.rule().fileSuffix().toLowerCase(Locale.ROOT))).toList();
+                    if (applicable.isEmpty()) return FileVisitResult.CONTINUE;
+                    if (attrs.size() > 1_000_000) { incomplete[0] = true; return FileVisitResult.CONTINUE; }
+                    byte[] content;
+                    try (var in = Files.newInputStream(file, LinkOption.NOFOLLOW_LINKS)) { content = in.readNBytes(1_000_001); }
+                    bytes[0] += content.length;
+                    if (content.length > 1_000_000 || exhausted()) { incomplete[0] = true; return FileVisitResult.TERMINATE; }
+                    String text;
+                    try { text = StandardCharsets.UTF_8.newDecoder().decode(java.nio.ByteBuffer.wrap(content)).toString(); }
+                    catch (java.nio.charset.CharacterCodingException e) { incomplete[0] = true; return FileVisitResult.CONTINUE; }
+                    if (text.indexOf('\0') >= 0) { incomplete[0] = true; return FileVisitResult.CONTINUE; }
+                    String[] lines = text.split("\\R", -1);
+                    for (int i = 0; i < lines.length; i++) {
+                        if (lines[i].length() > 8192) { incomplete[0] = true; continue; }
+                        for (var compiled : applicable) {
+                            if (exhausted()) { incomplete[0] = true; return FileVisitResult.TERMINATE; }
+                            if (compiled.pattern().matcher(lines[i]).find()) {
+                                var rule = compiled.rule();
+                                findings.add(new ScanFindingCandidate(rule.type(), "custom-" + rule.id() + "@" + compiled.revision(), rule.severity(),
+                                        root.relativize(file).toString().replace('\\','/'), i + 1, rule.description(), null));
+                            }
+                        }
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+                @Override public FileVisitResult visitFileFailed(Path file, IOException e) { incomplete[0] = true; return FileVisitResult.CONTINUE; }
+            });
+        } catch (IOException e) { incomplete[0] = true; }
+        if (incomplete[0]) findings.add(incomplete("custom-scan-incomplete@" + rules.getFirst().revision()));
+        return List.copyOf(findings);
+    }
+
+    private static ScanFindingCandidate incomplete(String ruleId) {
+        return new ScanFindingCandidate(ScanFindingType.IAC, ruleId, RiskLevel.HIGH, ".", null,
+                "Custom rule scan incomplete: rules or input could not be read, or a scan limit was reached", null);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/CustomScanRuleService.java b/src/main/java/com/salkcoding/oswl/service/secretscan/CustomScanRuleService.java
new file mode 100644
index 00000000..1cca3e3d
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/CustomScanRuleService.java
@@ -0,0 +1,83 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.salkcoding.oswl.dto.scan.CustomRuleSet;
+import com.fasterxml.jackson.core.type.TypeReference;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.google.re2j.Pattern;
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.scan.CustomRuleConfiguration;
+import com.salkcoding.oswl.dto.scan.CustomScanRule;
+import com.salkcoding.oswl.exception.InvalidRequestException;
+import com.salkcoding.oswl.repository.scan.CustomRuleConfigurationRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.security.access.AccessDeniedException;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.*;
+
+@Service
+@RequiredArgsConstructor
+public class CustomScanRuleService {
+    private final CustomRuleConfigurationRepository repository;
+    private final AuditLogService audit;
+    private final ObjectMapper mapper = new ObjectMapper();
+    public record CompiledRule(CustomScanRule rule, Pattern pattern, long revision) {}
+
+    @Transactional(readOnly = true)
+    public CustomRuleSet read() { requireAdmin(); return current(); }
+
+    @Transactional
+    public CustomRuleSet publish(CustomRuleSet request) {
+        requireAdmin();
+        validate(request.rules());
+        var existing = repository.findById(1L);
+        long revision = existing.map(CustomRuleConfiguration::getRevision).orElse(-1L);
+        if (request.revision() != revision) throw new org.springframework.web.server.ResponseStatusException(org.springframework.http.HttpStatus.CONFLICT, "Rule configuration changed; reload before publishing");
+        try {
+            String json = mapper.writeValueAsString(request.rules());
+            var config = existing.orElseGet(() -> CustomRuleConfiguration.create(json));
+            config.replace(json);
+            var saved = repository.saveAndFlush(config);
+            audit.log("SCAN_RULES.PUBLISH", "SCAN_RULES", "1", null, "revision=" + saved.getRevision() + ", rules=" + request.rules().size());
+            return new CustomRuleSet(saved.getRevision(), List.copyOf(request.rules()));
+        } catch (org.springframework.dao.OptimisticLockingFailureException | org.springframework.dao.DataIntegrityViolationException e) {
+            throw new org.springframework.web.server.ResponseStatusException(org.springframework.http.HttpStatus.CONFLICT, "Rule configuration changed; reload before publishing");
+        } catch (com.fasterxml.jackson.core.JsonProcessingException e) { throw new InvalidRequestException("Invalid rule configuration"); }
+    }
+
+    @Transactional(readOnly = true)
+    public List compiled() {
+        var set = current(); validate(set.rules());
+        return set.rules().stream().map(r -> new CompiledRule(r, Pattern.compile(r.regex()), set.revision())).toList();
+    }
+
+    private CustomRuleSet current() {
+        return repository.findById(1L).map(c -> {
+            try { return new CustomRuleSet(c.getRevision(), mapper.readValue(c.getRulesJson(), new TypeReference>() {})); }
+            catch (Exception e) { throw new IllegalStateException("Stored custom rule configuration is invalid"); }
+        }).orElse(new CustomRuleSet(-1, List.of()));
+    }
+
+    static void validate(List rules) {
+        if (rules == null || rules.size() > 32) throw new InvalidRequestException("At most 32 custom rules are allowed");
+        Set ids = new HashSet<>();
+        for (var r : rules) {
+            if (r == null || r.id() == null || !r.id().matches("[a-z0-9-]{1,60}") || !ids.add(r.id())
+                    || r.type() == null || r.severity() == null || r.description() == null || r.description().isBlank()
+                    || r.description().length() > 400 || r.regex() == null || r.regex().isBlank() || r.regex().length() > 256
+                    || r.fileSuffix() == null || !r.fileSuffix().matches("[A-Za-z0-9_.-]{1,30}"))
+                throw new InvalidRequestException("Invalid custom rule fields or duplicate rule id");
+            try {
+                Pattern pattern = Pattern.compile(r.regex());
+                if (pattern.programSize() > 2048 || pattern.matcher("").find()) throw new IllegalArgumentException();
+            } catch (Exception e) { throw new InvalidRequestException("Rule regex is invalid, too complex or matches empty text"); }
+        }
+    }
+
+    private static void requireAdmin() {
+        var auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth == null || !auth.isAuthenticated() || auth.getAuthorities().stream().noneMatch(a -> a.getAuthority().equals("ROLE_SYSTEM_ADMIN")))
+            throw new AccessDeniedException("System administrator required");
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/SecretIacScanService.java b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretIacScanService.java
new file mode 100644
index 00000000..2c7775a2
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretIacScanService.java
@@ -0,0 +1,90 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.salkcoding.oswl.domain.entity.scan.ScanFinding;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.domain.enums.ScanFindingType;
+import com.salkcoding.oswl.dto.scan.ScanFindingCandidate;
+import com.salkcoding.oswl.repository.scan.ScanFindingRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.iacscan.IacScanner;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * Orchestrates the secret + IaC misconfiguration scan against a Quick Import clone and
+ * persists the results. Runs synchronously right after the scan is ingested, while the clone
+ * directory still exists — before {@code CloneCleanupService} deletes it. Never re-clones or
+ * keeps its own copy of the working tree.
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SecretIacScanService {
+
+    private final SecretScanner secretScanner;
+    private final IacScanner iacScanner;
+    private final CustomRuleScanner customRuleScanner;
+    private final ScanFindingRepository scanFindingRepository;
+    private final ScanResultRepository scanResultRepository;
+    private final SourceFindingStore findingStore;
+
+    @Value("${oswl.secretscan.enabled:true}")
+    private boolean enabled;
+
+    /**
+     * Scans {@code cloneDir} and persists findings against {@code scanResultId}. Never throws —
+     * a scanner failure is logged and swallowed so it cannot fail the Quick Import job itself.
+     */
+    public boolean scanAndPersist(Path cloneDir, Long scanResultId) { return scanAndPersist(cloneDir, scanResultId, null); }
+
+    public boolean scanAndPersist(Path cloneDir, Long scanResultId, Long pendingId) {
+        if (!enabled) return true;
+        try {
+            List candidates = new ArrayList<>();
+            collect(candidates, () -> secretScanner.scan(cloneDir), ScanFindingType.SECRET, "secret");
+            collect(candidates, () -> iacScanner.scan(cloneDir), ScanFindingType.IAC, "iac");
+            collect(candidates, () -> customRuleScanner.scan(cloneDir), ScanFindingType.IAC, "custom");
+
+
+            if (!findingStore.persist(scanResultId, pendingId, candidates)) return false;
+
+            long secretCount = candidates.stream().filter(c -> c.type() == ScanFindingType.SECRET).count();
+            long iacCount = candidates.size() - secretCount;
+            log.info("[SecretIacScan] scanResultId={} persisted {} findings ({} secret, {} iac)",
+                    scanResultId, candidates.size(), secretCount, iacCount);
+            return true;
+        } catch (Exception e) {
+            log.warn("[SecretIacScan] scan failed for scanResultId={}: {}", scanResultId, e.getMessage(), e);
+            return false;
+        }
+    }
+
+    /** Called inside fenced ingest, before enrichment can start after commit. */
+    @org.springframework.transaction.annotation.Transactional(propagation = org.springframework.transaction.annotation.Propagation.MANDATORY)
+    public Long markPending(Long scanId) {
+        return scanFindingRepository.saveAndFlush(ScanFinding.builder().scanResult(scanResultRepository.getReferenceById(scanId))
+                .type(ScanFindingType.IAC).ruleId("source-scan-pending")
+                .severity(com.salkcoding.oswl.domain.enums.RiskLevel.HIGH).filePath(".")
+                .description("Source inspection has not completed").build()).getId();
+    }
+
+    @org.springframework.transaction.annotation.Transactional
+    public void completeSourceScan(Long scanId, Long pendingId) { if (pendingId != null) scanFindingRepository.deleteSourceScanPending(scanId, pendingId); }
+
+    private void collect(List results, java.util.function.Supplier> scan,
+                         ScanFindingType type, String scanner) {
+        try { results.addAll(scan.get()); }
+        catch (RuntimeException e) {
+            log.warn("[SecretIacScan] {} scanner failed; retaining other findings", scanner);
+            results.add(new ScanFindingCandidate(type, scanner + "-scan-incomplete",
+                    com.salkcoding.oswl.domain.enums.RiskLevel.HIGH, ".", null,
+                    "Scan incomplete: the scanner could not inspect all inputs", null));
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/SecretRule.java b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretRule.java
new file mode 100644
index 00000000..7043540e
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretRule.java
@@ -0,0 +1,16 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+
+import java.util.regex.Pattern;
+
+/** One compiled entry of {@code secretscan/secret-rules.json}. */
+public record SecretRule(String id, String description, RiskLevel severity, Pattern pattern) {
+
+    /** Jackson-deserializable shape of a rule as it appears in the JSON resource, pre-compilation. */
+    public record RawRule(String id, String description, String severity, String regex) {
+        SecretRule compile() {
+            return new SecretRule(id, description, RiskLevel.valueOf(severity.toUpperCase()), Pattern.compile(regex));
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/SecretScanner.java b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretScanner.java
new file mode 100644
index 00000000..b34bbf91
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/SecretScanner.java
@@ -0,0 +1,190 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.domain.enums.ScanFindingType;
+import com.salkcoding.oswl.dto.scan.ScanFindingCandidate;
+import com.salkcoding.oswl.service.manifest.ManifestCollectRules;
+import jakarta.annotation.PostConstruct;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.core.io.ClassPathResource;
+import org.springframework.lang.NonNull;
+import org.springframework.stereotype.Service;
+
+import java.io.BufferedReader;
+import java.io.IOException;
+import java.io.InputStreamReader;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.FileVisitResult;
+import java.nio.file.Files;
+import java.nio.file.LinkOption;
+import java.nio.file.Path;
+import java.nio.file.SimpleFileVisitor;
+import java.nio.file.attribute.BasicFileAttributes;
+import java.security.MessageDigest;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Regex + entropy secret scanner over a Quick Import clone.
+ *
+ * Never persists the matched value — callers only ever see the rule id, description and a
+ * SHA-256 fingerprint of the match, derived here and never reversible back to the secret.
+ */
+@Slf4j
+@Service
+public class SecretScanner {
+
+    private static final String RULES_RESOURCE = "secretscan/secret-rules.json";
+    private static final long MAX_FILE_BYTES = 1_000_000L;
+    private static final int MAX_FINDINGS = 300;
+    private static final double ENTROPY_THRESHOLD = 4.0;
+
+    private static final Set BINARY_EXTENSIONS = Set.of(
+            ".png", ".jpg", ".jpeg", ".gif", ".ico", ".bmp", ".webp", ".pdf",
+            ".zip", ".tar", ".gz", ".7z", ".rar", ".jar", ".war", ".class",
+            ".so", ".dll", ".dylib", ".exe", ".bin", ".woff", ".woff2", ".ttf",
+            ".eot", ".mp3", ".mp4", ".avi", ".mov", ".db", ".sqlite");
+
+    private static final Pattern ENTROPY_CANDIDATE = Pattern.compile(
+            "(?i)\\b(?:key|token|secret|api[_-]?key)\\s*[:=]\\s*['\"]([A-Za-z0-9+/_=-]{20,100})['\"]");
+
+    private List rules = List.of();
+
+    @PostConstruct
+    void loadRules() {
+        try (var in = new ClassPathResource(RULES_RESOURCE).getInputStream()) {
+            ObjectMapper mapper = new ObjectMapper();
+            SecretRule.RawRule[] raw = mapper.readValue(in, SecretRule.RawRule[].class);
+            List compiled = new ArrayList<>();
+            for (SecretRule.RawRule r : raw) {
+                compiled.add(r.compile());
+            }
+            this.rules = List.copyOf(compiled);
+            log.info("[SecretScan] Loaded {} secret rules", rules.size());
+        } catch (Exception e) {
+            log.warn("[SecretScan] Failed to load {}: {} — secret scanning disabled", RULES_RESOURCE, e.getMessage());
+            this.rules = List.of();
+        }
+    }
+
+    /** Scans every text file under {@code root} (already a verified real path) for secrets. */
+    public List scan(Path root) {
+        List findings = new ArrayList<>();
+        if (rules.isEmpty()) return findings;
+        try {
+            Files.walkFileTree(root, new SimpleFileVisitor<>() {
+                @Override
+                public FileVisitResult preVisitDirectory(@NonNull Path dir, @NonNull BasicFileAttributes attrs) {
+                    if (findings.size() >= MAX_FINDINGS) return FileVisitResult.TERMINATE;
+                    if (!dir.equals(root) && ManifestCollectRules.SKIP_DIRS.contains(dir.getFileName().toString())) {
+                        return FileVisitResult.SKIP_SUBTREE;
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+
+                @Override
+                public FileVisitResult visitFile(@NonNull Path file, @NonNull BasicFileAttributes attrs) {
+                    if (findings.size() >= MAX_FINDINGS) return FileVisitResult.TERMINATE;
+                    try {
+                        scanFile(root, file, attrs, findings);
+                    } catch (Exception e) {
+                        log.debug("[SecretScan] skip file '{}': {}", file, e.getMessage());
+                    }
+                    return FileVisitResult.CONTINUE;
+                }
+            });
+        } catch (IOException e) {
+            log.warn("[SecretScan] walk error under '{}': {}", root, e.getMessage());
+        }
+        return findings;
+    }
+
+    private void scanFile(Path root, Path file, BasicFileAttributes attrs, List findings) throws IOException {
+        if (!attrs.isRegularFile() || attrs.size() == 0 || attrs.size() > MAX_FILE_BYTES) return;
+        String name = file.getFileName().toString().toLowerCase();
+        for (String ext : BINARY_EXTENSIONS) {
+            if (name.endsWith(ext)) return;
+        }
+        Path fileReal = file.toRealPath(LinkOption.NOFOLLOW_LINKS);
+        if (!fileReal.startsWith(root)) return;
+        String relPath = root.relativize(fileReal).toString().replace('\\', '/');
+
+        try (BufferedReader reader = new BufferedReader(
+                new InputStreamReader(Files.newInputStream(fileReal), StandardCharsets.UTF_8))) {
+            String line;
+            int lineNo = 0;
+            while ((line = reader.readLine()) != null) {
+                lineNo++;
+                if (line.indexOf('\0') >= 0) return; // binary content slipped past the extension check
+                Set matchedRuleIds = new HashSet<>();
+                for (SecretRule rule : rules) {
+                    Matcher m = rule.pattern().matcher(line);
+                    if (m.find()) {
+                        matchedRuleIds.add(rule.id());
+                        findings.add(new ScanFindingCandidate(
+                                ScanFindingType.SECRET, rule.id(), rule.severity(),
+                                relPath, lineNo, rule.description(), fingerprint(m.group())));
+                        if (findings.size() >= MAX_FINDINGS) return;
+                    }
+                }
+                checkEntropy(line, relPath, lineNo, matchedRuleIds, findings);
+                if (findings.size() >= MAX_FINDINGS) return;
+            }
+        }
+    }
+
+    private void checkEntropy(String line, String relPath, int lineNo, Set alreadyMatched,
+                               List findings) {
+        Matcher m = ENTROPY_CANDIDATE.matcher(line);
+        if (!m.find()) return;
+        String value = m.group(1);
+        if (isLikelyPlaceholder(value)) return;
+        double entropy = shannonEntropy(value);
+        if (entropy < ENTROPY_THRESHOLD) return;
+        findings.add(new ScanFindingCandidate(
+                ScanFindingType.SECRET, "generic-high-entropy-string", RiskLevel.MEDIUM,
+                relPath, lineNo, "High-entropy string assigned to a key/token/secret-like field", fingerprint(value)));
+    }
+
+    private static boolean isLikelyPlaceholder(String value) {
+        String lower = value.toLowerCase();
+        return lower.contains("example") || lower.contains("changeme") || lower.contains("placeholder")
+                || lower.contains("dummy") || lower.contains("xxxx") || lower.contains("${") || lower.contains("{{")
+                || lower.chars().distinct().count() <= 2;
+    }
+
+    private static double shannonEntropy(String s) {
+        int[] counts = new int[256];
+        for (int i = 0; i < s.length(); i++) {
+            counts[s.charAt(i) & 0xFF]++;
+        }
+        double entropy = 0.0;
+        int len = s.length();
+        for (int count : counts) {
+            if (count == 0) continue;
+            double p = (double) count / len;
+            entropy -= p * (Math.log(p) / Math.log(2));
+        }
+        return entropy;
+    }
+
+    /** First 12 hex chars of SHA-256(value) — never reversible back to the value. */
+    static String fingerprint(String value) {
+        try {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            byte[] hash = digest.digest(value.getBytes(StandardCharsets.UTF_8));
+            StringBuilder hex = new StringBuilder();
+            for (int i = 0; i < 6; i++) {
+                hex.append(String.format("%02x", hash[i]));
+            }
+            return hex.toString();
+        } catch (Exception e) {
+            return null;
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/secretscan/SourceFindingStore.java b/src/main/java/com/salkcoding/oswl/service/secretscan/SourceFindingStore.java
new file mode 100644
index 00000000..d8b9beb4
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/secretscan/SourceFindingStore.java
@@ -0,0 +1,27 @@
+package com.salkcoding.oswl.service.secretscan;
+
+import com.salkcoding.oswl.domain.entity.scan.ScanFinding;
+import com.salkcoding.oswl.dto.scan.ScanFindingCandidate;
+import com.salkcoding.oswl.repository.scan.*;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import java.util.List;
+
+@Service
+@RequiredArgsConstructor
+public class SourceFindingStore {
+    private final ScanResultRepository scans;
+    private final ScanFindingRepository findings;
+
+    @Transactional
+    public boolean persist(Long scanId, Long pendingId, List candidates) {
+        var scan = scans.lockForSourceWrite(scanId).orElseThrow();
+        if (pendingId != null && findings.findById(pendingId)
+                .filter(f -> f.getScanResult().getId().equals(scanId) && "source-scan-pending".equals(f.getRuleId())).isEmpty()) return false;
+        findings.saveAll(candidates.stream().map(c -> ScanFinding.builder().scanResult(scan).type(c.type())
+                .ruleId(c.ruleId()).severity(c.severity()).filePath(c.filePath()).lineNumber(c.lineNumber())
+                .description(c.description()).fingerprint(c.fingerprint()).build()).toList());
+        return true;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/AirgappedSnapshotService.java b/src/main/java/com/salkcoding/oswl/service/snapshot/AirgappedSnapshotService.java
similarity index 65%
rename from src/main/java/com/salkcoding/oswl/service/AirgappedSnapshotService.java
rename to src/main/java/com/salkcoding/oswl/service/snapshot/AirgappedSnapshotService.java
index 16620ee2..4d5a2db2 100644
--- a/src/main/java/com/salkcoding/oswl/service/AirgappedSnapshotService.java
+++ b/src/main/java/com/salkcoding/oswl/service/snapshot/AirgappedSnapshotService.java
@@ -1,28 +1,31 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.snapshot;
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.node.ObjectNode;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.SnapshotEntry;
-import com.salkcoding.oswl.domain.entity.SnapshotMeta;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.snapshot.SnapshotEntry;
+import com.salkcoding.oswl.domain.entity.snapshot.SnapshotMeta;
+import com.salkcoding.oswl.domain.enums.CveSource;
 import com.salkcoding.oswl.exception.InvalidRequestException;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.SnapshotEntryRepository;
-import com.salkcoding.oswl.repository.SnapshotMetaRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.snapshot.SnapshotEntryRepository;
+import com.salkcoding.oswl.repository.snapshot.SnapshotMetaRepository;
 import com.fasterxml.jackson.core.type.TypeReference;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
+import org.springframework.transaction.PlatformTransactionManager;
+import org.springframework.transaction.support.TransactionTemplate;
+import jakarta.persistence.EntityManager;
+import java.nio.file.Files;
+import java.nio.file.Path;
 
-import java.io.BufferedReader;
-import java.io.ByteArrayInputStream;
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
 import java.io.InputStream;
-import java.io.InputStreamReader;
 import java.nio.charset.StandardCharsets;
 import java.security.MessageDigest;
 import java.security.NoSuchAlgorithmException;
@@ -52,13 +55,13 @@
  * ({@code OsvClient}, {@code DepsDevClient}, {@code EpssClient}, {@code KevCatalogService}).
  *
  * 
A bundle is a zip of JSONL files, one per source, plus a {@code meta.json} describing
- * provenance (E1). {@code meta.json}'s {@code formatVersion}:
+ * provenance. {@code meta.json}'s {@code formatVersion}:
  * 
    
  *   
  • {@code 2} (current) — {@code bundleId}/{@code mode}/{@code builtAt}/{@code sources[].asOf}/
  *       {@code sources[].origin}/{@code files[].sha256} are read and enforced (checksum mismatch
  *       rejects the whole bundle before any store mutation).
    • 
  *   
  • missing or {@code 1} — legacy bundle: {@code meta.json} content (if present at all) is
- *       ignored beyond format detection, exactly like the pre-E1 behavior, so old exports keep
+ * ignored beyond format detection, exactly like the original behavior, so old exports keep
  *       importing.
    • 
  * 

  *
@@ -72,17 +75,16 @@
  *   
  • {@code epss.jsonl} — {@code {"cveId":"CVE-..","score":0.42}}
    • 
  *   
  • {@code kev.jsonl} — {@code {"cveId":"CVE-.."}}
    • 
  * 
- * A line in any file may carry {@code "_deleted":true} (E2) — in {@link ImportMode#MERGE} this
+ * A line in any file may carry {@code "_deleted":true} — in {@link ImportMode#MERGE} this
  * removes the key instead of upserting it; in {@link ImportMode#REPLACE} it is simply skipped
  * (REPLACE already clears the source first, so there is nothing to delete).
  *
  * 
    Export mirrors the data the (online) instance has already fetched into its Library/CVE
  * tables; components absent from the snapshot resolve as "no data". This makes the export
- * strictly narrower than a bundle built directly from upstream (see the plan's E5/E6 — not yet
- * implemented in this codebase) — {@code meta.json}'s {@code origin} is set to
+ * strictly narrower than a bundle built directly from upstream (building directly from upstream
+ * is not yet implemented in this codebase) — {@code meta.json}'s {@code origin} is set to
  * {@code "derived-from-scan"} for every source to disclose that limitation, most importantly for
- * advisory {@code aliases} (this entity only ever stores one, {@code Cve.cveId} — see L4 in
- * PERFORMANCE-AND-OFFLINE-PLAN.md).
+ * advisory {@code aliases} (this entity only ever stores one, {@code Cve.cveId}).
  */
 @Slf4j
 @Service
@@ -92,16 +94,20 @@ public class AirgappedSnapshotService {
     public static final String SOURCE_OSV = "osv";
     public static final String SOURCE_DEPSDEV_VERSION = "depsdev-version";
     public static final String SOURCE_DEPSDEV_ADVISORY = "depsdev-advisory";
+    public static final String SOURCE_GITHUB_ADVISORY = "github-advisory";
+    public static final String SOURCE_NVD = "nvd";
     public static final String SOURCE_EPSS = "epss";
     public static final String SOURCE_KEV = "kev";
-    /** E6: components a wanted-list included but the {@code oswl-vdb} builder never resolved
+    /** Components a wanted-list included but the {@code oswl-vdb} builder never resolved
      * (upstream had no data, or a range couldn't be confidently evaluated) — never populated by
      * this app's own {@link #exportBundle()}, only by bundles built via the CLI. Kept as an
      * ordinary source (not folded into {@code osv}) so the existing per-source status/import-count
-     * plumbing (E1-E3) surfaces it without any bespoke wiring. */
+     * plumbing surfaces it without any bespoke wiring. */
     public static final String SOURCE_UNRESOLVED = "unresolved";
+    public static final String SOURCE_COCOAPODS_SPECS = "cocoapods-specs";
     public static final List SOURCES = List.of(
-            SOURCE_OSV, SOURCE_DEPSDEV_VERSION, SOURCE_DEPSDEV_ADVISORY, SOURCE_EPSS, SOURCE_KEV, SOURCE_UNRESOLVED);
+            SOURCE_OSV, SOURCE_DEPSDEV_VERSION, SOURCE_DEPSDEV_ADVISORY, SOURCE_GITHUB_ADVISORY,
+            SOURCE_NVD, SOURCE_EPSS, SOURCE_KEV, SOURCE_UNRESOLVED, SOURCE_COCOAPODS_SPECS);
 
     private static final String BUNDLE_FORMAT = "oswl-vdb";
     private static final int CURRENT_FORMAT_VERSION = 2;
@@ -109,31 +115,31 @@ public class AirgappedSnapshotService {
 
     private static final int SAVE_CHUNK_SIZE = 500;
 
-    /** Max decompressed bytes per bundle entry (decompression-bomb guard). */
-    private static final long MAX_ENTRY_BYTES = 200L * 1024 * 1024; // ~200 MB
-    /**
-     * Secondary decompression-bomb guard: rejects an entry whose decompressed size is
-     * disproportionate to its compressed size. Best-effort only — {@link ZipInputStream} does
-     * not reliably expose {@link ZipEntry#getCompressedSize()} for every entry (it depends on
-     * whether the writer stored sizes in the local header vs. a trailing data descriptor), so
-     * this check silently no-ops when the compressed size is unknown; {@link #MAX_ENTRY_BYTES}
-     * is the guarantee that always applies.
-     */
-    private static final double MAX_COMPRESSION_RATIO = 100.0;
-
     private static final Set KNOWN_DATA_FILES =
-            Set.of("osv.jsonl", "depsdev.jsonl", "epss.jsonl", "kev.jsonl", "unresolved.jsonl");
+            Set.of("osv.jsonl", "depsdev.jsonl", "github-advisory.jsonl", "nvd.jsonl",
+                    "epss.jsonl", "kev.jsonl", "unresolved.jsonl", "cocoapods-specs.jsonl");
 
     private final SnapshotEntryRepository snapshotEntryRepository;
     private final SnapshotMetaRepository snapshotMetaRepository;
     private final LibraryRepository libraryRepository;
+    private final PlatformTransactionManager transactionManager;
+    private final EntityManager entityManager;
     /** Local instance (codebase convention — matches DepsDevClient/GitHubService); avoids a bean dependency. */
     private final ObjectMapper objectMapper = new ObjectMapper();
 
     // ── DTO ──────────────────────────────────────────────────────────────
 
-    /** OSV vulnerability entry (mirrors {@code OsvClient.OsvVuln}). */
-    public record SnapshotVuln(String osvId, String cveId, String summary, String fixVersion, String cweId) {}
+    /**
+     * Vulnerability entry stored per component. Originally modelled on {@code OsvClient.OsvVuln},
+     * now also carries severity/CVSS/confidence so it can represent GitHub Advisory and
+     * NVD matches in the same offline JSON array.
+     */
+    public record SnapshotVuln(String osvId, String cveId, String summary, String fixVersion, String cweId,
+                                String severity, Double cvssScore, String cvss3Vector, String matchConfidence) {
+        public SnapshotVuln(String osvId, String cveId, String summary, String fixVersion, String cweId) {
+            this(osvId, cveId, summary, fixVersion, cweId, null, null, null, null);
+        }
+    }
 
     /** deps.dev GetVersion result (mirrors {@code DepsDevClient.VersionInfo}, always resolved). */
     public record SnapshotVersion(List licenses, List advisoryKeys, boolean isDefault,
@@ -146,7 +152,7 @@ public record SnapshotAdvisory(String ghsaId, String title, List aliases
     /**
      * Per-source store status for the admin API. The provenance fields (everything after
      * {@code importedAt}) are null for a source last imported from a v1 (or meta-less) bundle —
-     * new fields on an existing DTO is backward compatible (E1: existing clients simply ignore
+     * new fields on an existing DTO is backward compatible (existing clients simply ignore
      * fields they don't know about).
      */
     public record SourceStatus(String source, long recordCount, LocalDateTime importedAt,
@@ -155,7 +161,7 @@ public record SourceStatus(String source, long recordCount, LocalDateTime import
     /** Import outcome: record count per source. */
     public record SnapshotImportResult(Map sources, int totalRecords, String mode) {}
 
-    /** E2: REPLACE clears each source before writing (pre-E2 behavior); MERGE upserts by key. */
+    /** REPLACE clears each source before writing (original behavior); MERGE upserts by key. */
     public enum ImportMode { REPLACE, MERGE }
 
     /** Parsed {@code meta.json} (v2 only — v1/missing meta never reaches this type, see {@link #parseMetaV2}). */
@@ -164,7 +170,7 @@ private record BundleFileMeta(String sha256, Integer lines) {}
     private record BundleMetaV2(String mode, LocalDateTime builtAt, String bundleId,
                                 Map sources, Map files) {}
 
-    /** One decoded JSONL line: either a normal upsert ({@code deleted=false}) or an E2 delete marker. */
+    /** One decoded JSONL line: either a normal upsert ({@code deleted=false}) or a delete marker. */
     private record ParsedLine(String key, String payload, boolean deleted) {}
 
     // ── Key handling ─────────────────────────────────────────────────────
@@ -183,9 +189,9 @@ public static String componentKey(String ecosystem, String name, String version)
         return normalizeEcosystem(ecosystem) + "|" + name.strip() + "|" + version.strip();
     }
 
-    /** Public so the {@code oswl-vdb} builder (E5) shares this exact normalization instead of a
-     * second, drift-prone copy — see the plan's explicit warning that a normalization mismatch
-     * between the builder and this class makes a bundle import silently unresolvable. */
+    /** Public so the {@code oswl-vdb} builder shares this exact normalization instead of a
+     * second, drift-prone copy — a normalization mismatch between the builder and this class
+     * makes a bundle import silently unresolvable. */
     public static String normalizeEcosystem(String ecosystem) {
         return switch (ecosystem.strip().toLowerCase(Locale.ROOT)) {
             case "maven"             -> "MAVEN";
@@ -195,6 +201,8 @@ public static String normalizeEcosystem(String ecosystem) {
             case "crates.io", "cargo" -> "CARGO";
             case "nuget"             -> "NUGET";
             case "rubygems"          -> "RUBYGEMS";
+            case "packagist", "composer"   -> "COMPOSER";
+            case "conancenter", "conan"    -> "CONAN";
             default                  -> ecosystem.strip().toUpperCase(Locale.ROOT);
         };
     }
@@ -205,7 +213,20 @@ private static boolean isBlank(String s) {
 
     // ── Offline lookups (used by the client fallbacks) ───────────────────
 
-    /** OSV vulns per component key; absent keys mean "no known vulnerabilities". */
+    @Transactional(readOnly = true)
+    public java.util.Optional findCocoaPodsSpec(String name, String version) {
+        String key = componentKey("COCOAPODS", name, version);
+        if (key == null) return java.util.Optional.empty();
+        return java.util.Optional.ofNullable(parsePayloads(SOURCE_COCOAPODS_SPECS, List.of(key),
+                com.salkcoding.oswl.dto.snapshot.CocoaPodsSpec.class).get(key));
+    }
+
+    @Transactional(readOnly = true)
+    public Set findUnresolvedKeys(Collection keys) {
+        return findPayloads(SOURCE_UNRESOLVED, keys).keySet();
+    }
+
+    /** OSV vulns per component key; absent keys are unresolved, unlike a stored empty result. */
     @Transactional(readOnly = true)
     public Map> findOsvVulns(Collection componentKeys) {
         Map> result = new LinkedHashMap<>();
@@ -231,6 +252,30 @@ public Map findAdvisories(Collection ghsaIds)
         return parsePayloads(SOURCE_DEPSDEV_ADVISORY, ghsaIds, SnapshotAdvisory.class);
     }
 
+    /** GitHub Advisory vulnerabilities keyed by component key. */
+    @Transactional(readOnly = true)
+    public Map> findGitHubAdvisoryVulns(Collection componentKeys) {
+        return parseVulnLists(SOURCE_GITHUB_ADVISORY, componentKeys);
+    }
+
+    /** NVD CPE-matched vulnerabilities keyed by component key. */
+    @Transactional(readOnly = true)
+    public Map> findNvdVulns(Collection componentKeys) {
+        return parseVulnLists(SOURCE_NVD, componentKeys);
+    }
+
+    private Map> parseVulnLists(String source, Collection keys) {
+        Map> result = new LinkedHashMap<>();
+        findPayloads(source, keys).forEach((key, payload) -> {
+            try {
+                result.put(key, objectMapper.readValue(payload, new TypeReference<>() {}));
+            } catch (Exception e) {
+                log.warn("[Snapshot] Skipping corrupt {} entry key={}: {}", source, key, e.getMessage());
+            }
+        });
+        return result;
+    }
+
     /** EPSS scores keyed by uppercase CVE id; absent ids are simply omitted (live API semantics). */
     @Transactional(readOnly = true)
     public Map findEpssScores(Collection cveIds) {
@@ -276,7 +321,7 @@ public List status() {
     }
 
     /**
-     * E7: the oldest {@code sourceAsOf} across every source that has ever been imported — the
+     * The oldest {@code sourceAsOf} across every source that has ever been imported — the
      * value staleness is measured against (never {@code builtAt}/{@code importedAt}, which say
      * when the bundle/import happened, not how fresh the upstream data itself is). Null when no
      * source has provenance yet (never imported, or only ever imported from a v1/meta-less bundle).
@@ -291,11 +336,10 @@ public LocalDate oldestSourceAsOf() {
     }
 
     /**
-     * E6: streams every distinct (ecosystem, name, version) this instance has ever scanned, as
-     * JSONL, for an offline site to hand to the {@code oswl-vdb} builder (E5) so it can fetch
+     * Streams every distinct (ecosystem, name, version) this instance has ever scanned, as
+     * JSONL, for an offline site to hand to the {@code oswl-vdb} builder so it can fetch
      * exactly the components that matter instead of a full upstream mirror. Deliberately omits
-     * project names, repository URLs, and paths — see the E6 privacy note in
-     * PERFORMANCE-AND-OFFLINE-PLAN.md; only ecosystem/name/version leave the instance, and those
+     * project names, repository URLs, and paths — only ecosystem/name/version leave the instance, and those
      * are already what any upstream vulnerability API needs to look a component up.
      */
     @Transactional(readOnly = true)
@@ -338,20 +382,19 @@ private  Map parsePayloads(String source, Collection keys,
 
     /**
      * Legacy entry point — always REPLACE, regardless of what {@code meta.json} (if any) says.
-     * Kept byte-for-byte behavior-compatible for existing callers/tests (E2 AC: "REPLACE 모드
-     * 동작이 변경 전과 동일하다"). New callers (the admin controller) should call the 2-arg
+     * Kept byte-for-byte behavior-compatible for existing callers/tests: REPLACE mode's behavior
+     * is unchanged from before. New callers (the admin controller) should call the 2-arg
      * overload with an explicit mode, or {@code null} to let {@code meta.json} decide.
      */
-    @Transactional
     public SnapshotImportResult importBundle(InputStream zipStream) {
         return importBundle(zipStream, ImportMode.REPLACE);
     }
 
     /**
-     * E3: takes the zip as a stream rather than a fully-buffered {@code byte[]} — the caller
+     * Takes the zip as a stream rather than a fully-buffered {@code byte[]} — the caller
      * (the admin controller) passes the multipart upload's own input stream directly, so the
      * compressed upload itself is never buffered whole in memory before this method even starts
-     * (only each decompressed entry is, bounded by {@link #MAX_ENTRY_BYTES}).
+     * (decompressed entries are staged to bounded temporary files by {@link SnapshotBundleStager}).
      *
      * @param requestedMode explicit mode, or {@code null} to resolve from {@code meta.json}'s
      *                      {@code mode} field (falling back to {@link ImportMode#REPLACE} when
@@ -360,74 +403,92 @@ public SnapshotImportResult importBundle(InputStream zipStream) {
      *         bundles only) a SHA-256 mismatch against {@code meta.json} — thrown before any
      *         store mutation, so a corrupt/tampered bundle never touches the existing store.
      */
-    @Transactional
     public SnapshotImportResult importBundle(InputStream zipStream, ImportMode requestedMode) {
-        Map rawFiles = new LinkedHashMap<>();
-        byte[] metaBytes = null;
-        try (ZipInputStream zis = new ZipInputStream(zipStream, StandardCharsets.UTF_8)) {
-            ZipEntry entry;
-            while ((entry = zis.getNextEntry()) != null) {
-                if (entry.isDirectory()) continue;
-                String name = baseName(entry.getName());
-                boolean isMeta = "meta.json".equals(name);
-                if (!isMeta && !KNOWN_DATA_FILES.contains(name)) continue; // ignore unknown entries
-                byte[] content = readEntryBytes(zis, entry);
-                if (isMeta) {
-                    metaBytes = content;
-                } else {
-                    rawFiles.put(name, content);
-                }
-            }
+        try (SnapshotBundleStager staged = new SnapshotBundleStager()) {
+            staged.read(zipStream, KNOWN_DATA_FILES);
+            Map rawFiles = new LinkedHashMap<>(staged.files());
+            Path metaFile = rawFiles.remove("meta.json");
+            if (rawFiles.isEmpty()) throw new InvalidRequestException("Snapshot bundle contains no recognized data files.");
+            BundleMetaV2 meta = metaFile == null ? null : parseMetaV2(Files.readAllBytes(metaFile));
+            if (rawFiles.containsKey("cocoapods-specs.jsonl") && meta == null)
+                throw new InvalidRequestException("CocoaPods specs require a version 2 bundle with checksums");
+            if (meta != null) verifyChecksums(meta, rawFiles);
+            // Validate line budgets before a REPLACE is allowed to delete existing source data.
+            rawFiles.values().forEach(file -> SnapshotBundleStager.forEachLine(file, ignored -> {}));
+            ImportMode mode = requestedMode != null ? requestedMode : resolveModeFromMeta(meta);
+            SnapshotBundleStager.checkInterrupted();
+            TransactionTemplate transaction = new TransactionTemplate(transactionManager);
+            transaction.setTimeout(300);
+            return transaction.execute(status -> applyBundle(rawFiles, meta, mode));
         } catch (IOException e) {
             throw new InvalidRequestException("Snapshot bundle is not a readable zip: " + e.getMessage());
         }
-        if (rawFiles.isEmpty()) {
-            throw new InvalidRequestException(
-                    "Snapshot bundle contains no data files (expected osv.jsonl, depsdev.jsonl, epss.jsonl or kev.jsonl)");
-        }
-
-        BundleMetaV2 meta = metaBytes != null ? parseMetaV2(metaBytes) : null;
-        if (meta != null) {
-            verifyChecksums(meta, rawFiles); // throws before any of the writes below
-        }
-        ImportMode mode = requestedMode != null ? requestedMode : resolveModeFromMeta(meta);
+    }
 
+    private SnapshotImportResult applyBundle(Map rawFiles, BundleMetaV2 meta, ImportMode mode) {
         Map counts = new LinkedHashMap<>();
-        for (Map.Entry rf : rawFiles.entrySet()) {
-            List lines = splitLines(rf.getValue());
+        for (Map.Entry rf : rawFiles.entrySet()) {
+            SnapshotBundleStager.checkInterrupted();
             switch (rf.getKey()) {
+                case "cocoapods-specs.jsonl" -> {
+                    SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_COCOAPODS_SPECS, mode);
+                    int[] lines = {0};
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> {
+                        if (line.isBlank()) return;
+                        if (++lines[0] > 1000) throw new InvalidRequestException("CocoaPods bundle limit is 1000 specs");
+                        try {
+                            var spec = objectMapper.readValue(line, com.salkcoding.oswl.dto.snapshot.CocoaPodsSpec.class);
+                            spec.validate();
+                            buf.add(new ParsedLine(componentKey("COCOAPODS", spec.name(), spec.version()), writeJson(objectMapper.valueToTree(spec)), false));
+                        } catch (InvalidRequestException e) { throw e;
+                        } catch (Exception e) { throw new InvalidRequestException("Malformed CocoaPods spec record"); }
+                    });
+                    counts.merge(SOURCE_COCOAPODS_SPECS, buf.finish(), Integer::sum);
+                    if (snapshotEntryRepository.countBySource(SOURCE_COCOAPODS_SPECS) > 1000)
+                        throw new InvalidRequestException("CocoaPods store limit is 1000 specs");
+                }
                 case "osv.jsonl" -> {
                     SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_OSV, mode);
-                    for (String line : lines) ingestOsvLine(line, buf);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestOsvLine(line, buf));
                     counts.merge(SOURCE_OSV, buf.finish(), Integer::sum);
                 }
                 case "depsdev.jsonl" -> {
                     SourceIngestBuffer versionBuf = new SourceIngestBuffer(SOURCE_DEPSDEV_VERSION, mode);
                     SourceIngestBuffer advisoryBuf = new SourceIngestBuffer(SOURCE_DEPSDEV_ADVISORY, mode);
-                    for (String line : lines) ingestDepsDevLine(line, versionBuf, advisoryBuf);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestDepsDevLine(line, versionBuf, advisoryBuf));
                     counts.merge(SOURCE_DEPSDEV_VERSION, versionBuf.finish(), Integer::sum);
                     counts.merge(SOURCE_DEPSDEV_ADVISORY, advisoryBuf.finish(), Integer::sum);
                 }
+                case "github-advisory.jsonl" -> {
+                    SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_GITHUB_ADVISORY, mode);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestOsvLine(line, buf));
+                    counts.merge(SOURCE_GITHUB_ADVISORY, buf.finish(), Integer::sum);
+                }
+                case "nvd.jsonl" -> {
+                    SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_NVD, mode);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestOsvLine(line, buf));
+                    counts.merge(SOURCE_NVD, buf.finish(), Integer::sum);
+                }
                 case "epss.jsonl" -> {
                     SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_EPSS, mode);
-                    for (String line : lines) ingestEpssLine(line, buf);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestEpssLine(line, buf));
                     counts.merge(SOURCE_EPSS, buf.finish(), Integer::sum);
                 }
                 case "kev.jsonl" -> {
                     SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_KEV, mode);
-                    for (String line : lines) ingestKevLine(line, buf);
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestKevLine(line, buf));
                     counts.merge(SOURCE_KEV, buf.finish(), Integer::sum);
                 }
                 case "unresolved.jsonl" -> {
                     SourceIngestBuffer buf = new SourceIngestBuffer(SOURCE_UNRESOLVED, mode);
-                    for (String line : lines) ingestOsvLine(line, buf); // same {ecosystem,name,version} shape, no "vulns" needed
+                    SnapshotBundleStager.forEachLine(rf.getValue(), line -> ingestOsvLine(line, buf)); // same {ecosystem,name,version} shape, no "vulns" needed
                     counts.merge(SOURCE_UNRESOLVED, buf.finish(), Integer::sum);
                 }
                 default -> { /* unreachable — filtered by KNOWN_DATA_FILES above */ }
             }
         }
 
-        // E2: recordCount is always a fresh count query, never an accumulated delta — a MERGE
+        // recordCount is always a fresh count query, never an accumulated delta — a MERGE
         // over existing keys must not double-count, and a REPLACE's true count is simply "what's
         // there now" regardless of how many lines the bundle had (duplicates within one bundle
         // collapse to one row via the (source, entry_key) unique constraint).
@@ -461,14 +522,9 @@ private static ImportMode resolveModeFromMeta(BundleMetaV2 meta) {
         return ImportMode.REPLACE;
     }
 
-    private static String baseName(String zipEntryName) {
-        int slash = zipEntryName.lastIndexOf('/');
-        return slash >= 0 ? zipEntryName.substring(slash + 1) : zipEntryName;
-    }
-
     /**
-     * E2: buffers one source's entries and flushes every {@link #SAVE_CHUNK_SIZE} rows instead
-     * of accumulating the whole source (let alone every source at once, as the pre-E2/E3 code
+     * Buffers one source's entries and flushes every {@link #SAVE_CHUNK_SIZE} rows instead
+     * of accumulating the whole source (let alone every source at once, as the original code
      * did) in memory before the first write — the proximate cause of L6's OOM risk.
      */
     private final class SourceIngestBuffer {
@@ -507,9 +563,11 @@ private void flush() {
             if (mode == ImportMode.MERGE) {
                 upsertChunk(source, buffer);
             } else {
-                snapshotEntryRepository.saveAll(buffer);
+                List saved = snapshotEntryRepository.saveAll(buffer);
+                snapshotEntryRepository.flush();
+                saved.forEach(entityManager::detach);
             }
-            // E3: chunk-level progress visibility for large imports — total accumulates across
+            // chunk-level progress visibility for large imports — total accumulates across
             // flushes, so this traces how far a multi-minute import has gotten without a separate
             // job-status endpoint.
             log.debug("[Snapshot] {} mode={}: flushed chunk ({} rows so far)", source, mode, total);
@@ -540,7 +598,9 @@ private void upsertChunk(String source, List chunk) {
                             .entryKey(e.getEntryKey()).payload(e.getPayload()).build()
                     : e);
         }
-        snapshotEntryRepository.saveAll(toSave);
+        List saved = snapshotEntryRepository.saveAll(toSave);
+        snapshotEntryRepository.flush();
+        saved.forEach(entityManager::detach);
     }
 
     private void ingestOsvLine(String line, SourceIngestBuffer buffer) {
@@ -560,7 +620,8 @@ private void ingestOsvLine(String line, SourceIngestBuffer buffer) {
             for (JsonNode v : node.path("vulns")) {
                 if (!v.isObject()) continue;
                 vulns.add(new SnapshotVuln(text(v, "osvId"), text(v, "cveId"),
-                        text(v, "summary"), text(v, "fixVersion"), text(v, "cweId")));
+                        text(v, "summary"), text(v, "fixVersion"), text(v, "cweId"),
+                        text(v, "severity"), number(v, "cvssScore"), text(v, "cvss3Vector"), text(v, "matchConfidence")));
             }
             buffer.add(new ParsedLine(key, objectMapper.writeValueAsString(vulns), false));
         } catch (Exception e) {
@@ -655,51 +716,6 @@ private void ingestKevLine(String line, SourceIngestBuffer buffer) {
         }
     }
 
-    /**
-     * Reads one zip entry fully, bounded by {@link #MAX_ENTRY_BYTES} (decompression-bomb guard),
-     * with a best-effort compression-ratio check (see {@link #MAX_COMPRESSION_RATIO}).
-     */
-    private static byte[] readEntryBytes(ZipInputStream zis, ZipEntry entry) throws IOException {
-        ByteArrayOutputStream out = new ByteArrayOutputStream();
-        byte[] buf = new byte[64 * 1024];
-        long total = 0;
-        int n;
-        while ((n = zis.read(buf)) != -1) {
-            total += n;
-            if (total > MAX_ENTRY_BYTES) {
-                throw new InvalidRequestException(
-                        "Snapshot bundle entry '" + entry.getName() + "' exceeds the decompressed size limit ("
-                                + (MAX_ENTRY_BYTES / (1024 * 1024)) + " MB). The bundle may be corrupt or malicious.");
-            }
-            out.write(buf, 0, n);
-        }
-        long compressedSize = entry.getCompressedSize();
-        if (compressedSize > 0 && total > 0) {
-            double ratio = (double) total / (double) compressedSize;
-            if (ratio > MAX_COMPRESSION_RATIO) {
-                throw new InvalidRequestException(
-                        "Snapshot bundle entry '" + entry.getName() + "' has a suspicious compression ratio ("
-                                + Math.round(ratio) + "x) — rejected as a possible decompression bomb.");
-            }
-        }
-        return out.toByteArray();
-    }
-
-    private static List splitLines(byte[] content) {
-        List lines = new ArrayList<>();
-        try (BufferedReader reader = new BufferedReader(
-                new InputStreamReader(new ByteArrayInputStream(content), StandardCharsets.UTF_8))) {
-            String line;
-            while ((line = reader.readLine()) != null) {
-                lines.add(line);
-            }
-        } catch (IOException e) {
-            // Reading from a ByteArrayInputStream cannot actually throw — kept for the checked signature.
-            throw new IllegalStateException(e);
-        }
-        return lines;
-    }
-
     /** Parses {@code meta.json}; returns null for a v1/unversioned bundle (legacy import path). */
     private BundleMetaV2 parseMetaV2(byte[] metaBytes) {
         try {
@@ -750,12 +766,12 @@ private BundleMetaV2 parseMetaV2(byte[] metaBytes) {
      *         mutation. A file listed in {@code meta.json} but absent from this bundle (a
      *         partial/delta bundle covering only some sources) is not an error.
      */
-    private void verifyChecksums(BundleMetaV2 meta, Map rawFiles) {
+    private void verifyChecksums(BundleMetaV2 meta, Map rawFiles) {
         if (meta.files() == null) return;
         meta.files().forEach((filename, fileMeta) -> {
-            byte[] content = rawFiles.get(filename);
+            Path content = rawFiles.get(filename);
             if (content == null || fileMeta.sha256() == null) return;
-            String actual = sha256Hex(content);
+            String actual = SnapshotBundleStager.checksum(content);
             if (!fileMeta.sha256().equalsIgnoreCase(actual)) {
                 throw new InvalidRequestException("Snapshot bundle integrity check failed for '" + filename
                         + "' (expected sha256=" + fileMeta.sha256() + ", got " + actual
@@ -780,92 +796,125 @@ private static String sha256Hex(byte[] content) {
      * (libraries + CVEs). Run on an ONLINE instance, then import on the air-gapped one.
      * Only deps.dev-resolved libraries ({@code isLatestVersion != null}) contribute
      * version records; advisory records and version-record {@code advisoryKeys} are keyed
-     * purely on GHSA-format ids (E4 — no longer gated on whether an advisory record itself
+     * purely on GHSA-format ids — no longer gated on whether an advisory record itself
      * exists, since "does this component have a GHSA id" and "do we have advisory detail for
-     * that id" are independent facts).
+     * that id" are independent facts.
      */
     @Transactional(readOnly = true)
     public byte[] exportBundle() {
-        List libraries = libraryRepository.findAll();
+        long upperId = libraryRepository.findSnapshotUpperId();
+        long afterId = 0;
+        int exportedLibraries = 0;
 
         StringBuilder osv = new StringBuilder();
+        StringBuilder unresolved = new StringBuilder();
+        int unresolvedRecords = 0;
+        StringBuilder githubAdvisory = new StringBuilder();
+        StringBuilder nvd = new StringBuilder();
         StringBuilder depsdev = new StringBuilder();
         Map epss = new LinkedHashMap<>();
         Set kev = new LinkedHashSet<>();
         Map advisories = new LinkedHashMap<>();
         int osvRecords = 0;
+        int githubAdvisoryRecords = 0;
+        int nvdRecords = 0;
         int versionRecords = 0;
 
-        for (Library lib : libraries) {
-            String key = componentKey(lib.getEcosystem(), lib.getName(), lib.getVersion());
-            if (key == null) continue;
-            List cves = lib.getCves();
+        while (afterId < upperId) {
+            List ids = libraryRepository.findSnapshotIds(afterId, upperId,
+                    org.springframework.data.domain.PageRequest.of(0, SAVE_CHUNK_SIZE));
+            if (ids.isEmpty()) break;
+            List libraries = libraryRepository.findByIdInWithCves(ids);
+            exportedLibraries += libraries.size();
+            for (Library lib : libraries) {
+                String key = componentKey(lib.getEcosystem(), lib.getName(), lib.getVersion());
+                if (key == null) continue;
+                List cves = lib.getCves();
+                if (!lib.isVulnerabilitiesAnalyzed()) {
+                    unresolvedRecords += appendVulnLines(unresolved, lib, List.of());
+                }
+
+                // Vulnerability records split by upstream source so the offline clients can each
+                // read the source they were built for. CVEs with no recorded source are treated as
+                // OSV-only for backward compatibility with rows enriched before multi-source tracking.
+                List osvCves = new ArrayList<>();
+                List ghCves = new ArrayList<>();
+                List nvdCves = new ArrayList<>();
+                for (Cve c : cves) {
+                    java.util.Set srcs = c.getSources();
+                    boolean hasSources = srcs != null && !srcs.isEmpty();
+                    if (!hasSources || srcs.contains(CveSource.OSV)) osvCves.add(c);
+                    if (hasSources && srcs.contains(CveSource.GITHUB_ADVISORY)) ghCves.add(c);
+                    if (hasSources && srcs.contains(CveSource.NVD)) nvdCves.add(c);
+                }
+                if (!osvCves.isEmpty() || (lib.getVulnerabilityLookupOutcomes() != null && "RESOLVED".equals(lib.getVulnerabilityLookupOutcomes().get("OSV")))) {
+                    osvRecords += appendVulnLines(osv, lib, osvCves, true);
+                }
+                if (!ghCves.isEmpty() || (lib.getVulnerabilityLookupOutcomes() != null && "RESOLVED".equals(lib.getVulnerabilityLookupOutcomes().get("GITHUB_ADVISORY")))) {
+                    githubAdvisoryRecords += appendVulnLines(githubAdvisory, lib, ghCves);
+                }
+                if (!nvdCves.isEmpty() || (lib.getVulnerabilityLookupOutcomes() != null && "RESOLVED".equals(lib.getVulnerabilityLookupOutcomes().get("NVD")))) {
+                    nvdRecords += appendVulnLines(nvd, lib, nvdCves);
+                }
 
-            // osv.jsonl — only libraries with known vulns; absent key = "no vulnerabilities" offline
-            if (!cves.isEmpty()) {
-                List vulns = cves.stream()
-                        .map(c -> new SnapshotVuln(c.getGhsaId(), c.getCveId(), c.getSummary(),
-                                c.getFixVersion(), c.getCweId()))
+                // depsdev.jsonl version record — only when deps.dev GetVersion resolved.
+                // advisoryKeys includes every GHSA-format id regardless of whether we also have
+                // advisory detail for it — an OSV-only finding with a GHSA alias still belongs in
+                // the version record's key list; the *advisory* record is a separate concern.
+                List advisoryKeys = cves.stream()
+                        .filter(c -> c.getGhsaId() != null && c.getGhsaId().startsWith("GHSA-"))
+                        .map(Cve::getGhsaId)
+                        .distinct()
                         .toList();
-                ObjectNode line = objectMapper.createObjectNode();
-                line.put("ecosystem", lib.getEcosystem());
-                line.put("name", lib.getName());
-                line.put("version", lib.getVersion());
-                line.set("vulns", objectMapper.valueToTree(vulns));
-                osv.append(writeJson(line)).append('\n');
-                osvRecords++;
-            }
+                if (lib.getIsLatestVersion() != null) {
+                    // Prefer the preserved pre-join license list; legacy rows enriched
+                    // before licenseExpressionRaw existed fall back to re-splitting licenseName on
+                    // " AND " (the same lossy heuristic as before, only for rows with no better data).
+                    List licenses = lib.getLicenseExpressionRaw() != null
+                            ? lib.getLicenseExpressionRaw()
+                            : (isBlank(lib.getLicenseName()) ? List.of() : List.of(lib.getLicenseName().split(" AND ")));
+                    SnapshotVersion version = new SnapshotVersion(
+                            licenses,
+                            advisoryKeys,
+                            lib.getIsLatestVersion(),
+                            lib.getDeprecated(),
+                            lib.getLatestVersion(),
+                            lib.getScorecardScore());
+                    ObjectNode line = objectMapper.valueToTree(version);
+                    line.put("type", "version");
+                    line.put("ecosystem", lib.getEcosystem());
+                    line.put("name", lib.getName());
+                    line.put("version", lib.getVersion());
+                    depsdev.append(writeJson(line)).append('\n');
+                    versionRecords++;
+                }
 
-            // depsdev.jsonl version record — only when deps.dev GetVersion resolved.
-            // E4 (L3): advisoryKeys includes every GHSA-format id regardless of whether we also
-            // have advisory detail for it — an OSV-only finding with a GHSA alias still belongs
-            // in the version record's key list; the *advisory* record is a separate concern.
-            List advisoryKeys = cves.stream()
-                    .filter(c -> c.getGhsaId() != null && c.getGhsaId().startsWith("GHSA-"))
-                    .map(Cve::getGhsaId)
-                    .distinct()
-                    .toList();
-            if (lib.getIsLatestVersion() != null) {
-                // E4 (L2): prefer the preserved pre-join license list; legacy rows enriched
-                // before licenseExpressionRaw existed fall back to re-splitting licenseName on
-                // " AND " (the same lossy heuristic as before, only for rows with no better data).
-                List licenses = lib.getLicenseExpressionRaw() != null
-                        ? lib.getLicenseExpressionRaw()
-                        : (isBlank(lib.getLicenseName()) ? List.of() : List.of(lib.getLicenseName().split(" AND ")));
-                SnapshotVersion version = new SnapshotVersion(
-                        licenses,
-                        advisoryKeys,
-                        lib.getIsLatestVersion(),
-                        lib.getDeprecated(),
-                        lib.getLatestVersion(),
-                        lib.getScorecardScore());
-                ObjectNode line = objectMapper.valueToTree(version);
-                line.put("type", "version");
-                line.put("ecosystem", lib.getEcosystem());
-                line.put("name", lib.getName());
-                line.put("version", lib.getVersion());
-                depsdev.append(writeJson(line)).append('\n');
-                versionRecords++;
+                for (Cve c : cves) {
+                    // depsdev.jsonl advisory records (deduped — CVEs are per-library). Still gated on
+                    // hasAdvisoryData: this map specifically means "we have deps.dev advisory detail",
+                    // independent from the version record's advisoryKeys list above.
+                    String ghsaId = c.getGhsaId();
+                    if (ghsaId != null && ghsaId.startsWith("GHSA-") && hasAdvisoryData(c)
+                            && !advisories.containsKey(ghsaId)) {
+                        advisories.put(ghsaId, new SnapshotAdvisory(ghsaId, c.getTitle(),
+                                c.getCveId() != null ? List.of(c.getCveId()) : List.of(),
+                                c.getCvssScore(), c.getCvss3Vector()));
+                    }
+                    // epss.jsonl / kev.jsonl (deduped by CVE id)
+                    if (c.getCveId() != null) {
+                        String cveId = c.getCveId().strip().toUpperCase(Locale.ROOT);
+                        if (c.getEpssScore() != null) epss.putIfAbsent(cveId, c.getEpssScore());
+                        if (Boolean.TRUE.equals(c.getKevListed())) kev.add(cveId);
+                    }
+                }
             }
 
-            for (Cve c : cves) {
-                // depsdev.jsonl advisory records (deduped — CVEs are per-library). Still gated on
-                // hasAdvisoryData: this map specifically means "we have deps.dev advisory detail",
-                // independent from the version record's advisoryKeys list above (E4 instruction 2).
-                String ghsaId = c.getGhsaId();
-                if (ghsaId != null && ghsaId.startsWith("GHSA-") && hasAdvisoryData(c)
-                        && !advisories.containsKey(ghsaId)) {
-                    advisories.put(ghsaId, new SnapshotAdvisory(ghsaId, c.getTitle(),
-                            c.getCveId() != null ? List.of(c.getCveId()) : List.of(),
-                            c.getCvssScore(), c.getCvss3Vector()));
-                }
-                // epss.jsonl / kev.jsonl (deduped by CVE id)
-                if (c.getCveId() != null) {
-                    String cveId = c.getCveId().strip().toUpperCase(Locale.ROOT);
-                    if (c.getEpssScore() != null) epss.putIfAbsent(cveId, c.getEpssScore());
-                    if (Boolean.TRUE.equals(c.getKevListed())) kev.add(cveId);
-                }
+            // Output builders contain values only; release each batch's managed entity graph.
+            for (Library library : libraries) {
+                library.getCves().forEach(entityManager::detach);
+                entityManager.detach(library);
             }
+            afterId = ids.getLast();
         }
 
         for (SnapshotAdvisory advisory : advisories.values()) {
@@ -886,6 +935,16 @@ public byte[] exportBundle() {
         }
 
         String osvContent = osv.toString();
+        Set specKeys = snapshotEntryRepository.findEntryKeysBySource(SOURCE_COCOAPODS_SPECS);
+        if (specKeys.size() > 1000) throw new InvalidRequestException("CocoaPods store limit is 1000 specs");
+        StringBuilder specsContent = new StringBuilder();
+        if (!specKeys.isEmpty()) {
+            for (SnapshotEntry entry : snapshotEntryRepository.findBySourceAndEntryKeyIn(SOURCE_COCOAPODS_SPECS, specKeys)) {
+                specsContent.append(entry.getPayload()).append('\n');
+            }
+        }
+        String githubAdvisoryContent = githubAdvisory.toString();
+        String nvdContent = nvd.toString();
         String depsdevContent = depsdev.toString();
         String epssContent = epssLines.toString();
         String kevContent = kevLines.toString();
@@ -906,13 +965,26 @@ public byte[] exportBundle() {
         meta.put("builder", "oswl-airgapped-export");
         ObjectNode sources = meta.putObject("sources");
         putSourceMeta(sources, SOURCE_OSV, osvRecords, asOf);
+        putSourceMeta(sources, SOURCE_UNRESOLVED, unresolvedRecords, asOf);
+        putSourceMeta(sources, SOURCE_COCOAPODS_SPECS, specKeys.size(), null);
+        snapshotMetaRepository.findById(SOURCE_COCOAPODS_SPECS).ifPresent(saved -> {
+            ObjectNode source = (ObjectNode) sources.get(SOURCE_COCOAPODS_SPECS);
+            if (saved.getSourceAsOf() != null) source.put("asOf", saved.getSourceAsOf().toString());
+            if (saved.getOrigin() != null) source.put("origin", saved.getOrigin());
+        });
         putSourceMeta(sources, SOURCE_DEPSDEV_VERSION, versionRecords, asOf);
         putSourceMeta(sources, SOURCE_DEPSDEV_ADVISORY, advisories.size(), asOf);
+        putSourceMeta(sources, SOURCE_GITHUB_ADVISORY, githubAdvisoryRecords, asOf);
+        putSourceMeta(sources, SOURCE_NVD, nvdRecords, asOf);
         putSourceMeta(sources, SOURCE_EPSS, epss.size(), asOf);
         putSourceMeta(sources, SOURCE_KEV, kev.size(), asOf);
         ObjectNode files = meta.putObject("files");
         putFileMeta(files, "osv.jsonl", osvContent, osvRecords);
+        putFileMeta(files, "unresolved.jsonl", unresolved.toString(), unresolvedRecords);
+        putFileMeta(files, "cocoapods-specs.jsonl", specsContent.toString(), specKeys.size());
         putFileMeta(files, "depsdev.jsonl", depsdevContent, versionRecords + advisories.size());
+        putFileMeta(files, "github-advisory.jsonl", githubAdvisoryContent, githubAdvisoryRecords);
+        putFileMeta(files, "nvd.jsonl", nvdContent, nvdRecords);
         putFileMeta(files, "epss.jsonl", epssContent, epss.size());
         putFileMeta(files, "kev.jsonl", kevContent, kev.size());
 
@@ -921,22 +993,52 @@ public byte[] exportBundle() {
             try (ZipOutputStream zos = new ZipOutputStream(baos, StandardCharsets.UTF_8)) {
                 writeZipEntry(zos, "meta.json", writeJson(meta));
                 writeZipEntry(zos, "osv.jsonl", osvContent);
+                writeZipEntry(zos, "unresolved.jsonl", unresolved.toString());
+                writeZipEntry(zos, "cocoapods-specs.jsonl", specsContent.toString());
                 writeZipEntry(zos, "depsdev.jsonl", depsdevContent);
+                writeZipEntry(zos, "github-advisory.jsonl", githubAdvisoryContent);
+                writeZipEntry(zos, "nvd.jsonl", nvdContent);
                 writeZipEntry(zos, "epss.jsonl", epssContent);
                 writeZipEntry(zos, "kev.jsonl", kevContent);
             }
-            log.info("[Snapshot] Exported offline snapshot bundleId={}: {} libraries, {} osv, {} version records, {} advisories, {} epss, {} kev",
-                    bundleId, libraries.size(), osvRecords, versionRecords, advisories.size(), epss.size(), kev.size());
+            log.info("[Snapshot] Exported offline snapshot bundleId={}: {} libraries, {} osv, {} github-advisory, {} nvd, {} version records, {} advisories, {} epss, {} kev",
+                    bundleId, exportedLibraries, osvRecords, githubAdvisoryRecords, nvdRecords,
+                    versionRecords, advisories.size(), epss.size(), kev.size());
             return baos.toByteArray();
         } catch (IOException e) {
             throw new IllegalStateException("Failed to build snapshot bundle: " + e.getMessage(), e);
         }
     }
 
+    private int appendVulnLines(StringBuilder target, Library lib, List cves) {
+        return appendVulnLines(target, lib, cves, false);
+    }
+
+    private int appendVulnLines(StringBuilder target, Library lib, List cves, boolean osvKeys) {
+        List vulns = cves.stream()
+                .map(c -> new SnapshotVuln(c.getGhsaId(), c.getCveId(), c.getSummary(),
+                        c.getFixVersion(), c.getCweId(),
+                        c.getSeverity() != null ? c.getSeverity().name() : null,
+                        c.getCvssScore(), c.getCvss3Vector(),
+                        c.getMatchConfidence() != null ? c.getMatchConfidence().name() : null))
+                .toList();
+        ObjectNode line = objectMapper.createObjectNode();
+        line.put("ecosystem", lib.getEcosystem());
+        line.put("name", lib.getName());
+        if (osvKeys && "COCOAPODS".equalsIgnoreCase(lib.getEcosystem()) && lib.getSourceRepoUrl() != null) {
+            line.put("ecosystem", "SwiftURL");
+            line.put("name", lib.getSourceRepoUrl());
+        }
+        line.put("version", lib.getVersion());
+        line.set("vulns", objectMapper.valueToTree(vulns));
+        target.append(writeJson(line)).append('\n');
+        return 1;
+    }
+
     private static void putSourceMeta(ObjectNode sources, String source, int records, LocalDate asOf) {
         ObjectNode s = sources.putObject(source);
         s.put("records", records);
-        s.put("asOf", asOf.toString());
+        if (asOf != null) s.put("asOf", asOf.toString());
         s.put("origin", EXPORT_ORIGIN);
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/service/snapshot/SnapshotBundleStager.java b/src/main/java/com/salkcoding/oswl/service/snapshot/SnapshotBundleStager.java
new file mode 100644
index 00000000..3699ca90
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/snapshot/SnapshotBundleStager.java
@@ -0,0 +1,106 @@
+package com.salkcoding.oswl.service.snapshot;
+
+import com.salkcoding.oswl.exception.InvalidRequestException;
+import lombok.extern.slf4j.Slf4j;
+
+import java.io.*;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.*;
+import java.security.*;
+import java.util.*;
+import java.util.function.Consumer;
+import java.util.zip.*;
+
+/** Bounded disk staging; ZIP validation completes before the caller opens a write transaction. */
+@Slf4j
+final class SnapshotBundleStager implements AutoCloseable {
+    private static final long ENTRY_LIMIT = 200L * 1024 * 1024;
+    private static final long BUNDLE_LIMIT = 512L * 1024 * 1024;
+    private static final int LINE_LIMIT = 1024 * 1024;
+    private final Map files = new LinkedHashMap<>();
+    private final List temporaryFiles = new ArrayList<>();
+
+    Map files() { return files; }
+
+    void read(InputStream input, Set known) throws IOException {
+        long bundleBytes = 0;
+        int entries = 0;
+        byte[] buffer = new byte[64 * 1024];
+        try (ZipInputStream zip = new ZipInputStream(input, StandardCharsets.UTF_8)) {
+            ZipEntry entry;
+            while ((entry = zip.getNextEntry()) != null) {
+                checkInterrupted();
+                if (++entries > 128) throw new InvalidRequestException("Snapshot bundle has too many ZIP entries.");
+                String name = entry.getName().substring(entry.getName().lastIndexOf('/') + 1);
+                boolean recognized = !entry.isDirectory() && (name.equals("meta.json") || known.contains(name));
+                Path file = null;
+                if (recognized) {
+                    if (files.containsKey(name)) throw new InvalidRequestException("Duplicate snapshot entry: " + name);
+                    file = Files.createTempFile("oswl-snapshot-", ".stage");
+                    temporaryFiles.add(file);
+                    files.put(name, file);
+                }
+                long entryBytes = 0;
+                try (OutputStream out = file == null ? OutputStream.nullOutputStream() : Files.newOutputStream(file)) {
+                    int n;
+                    while ((n = zip.read(buffer)) != -1) {
+                        checkInterrupted();
+                        entryBytes += n;
+                        bundleBytes += n;
+                        long limit = name.equals("meta.json") ? LINE_LIMIT : ENTRY_LIMIT;
+                        if (entryBytes > limit || bundleBytes > BUNDLE_LIMIT)
+                            throw new InvalidRequestException("Snapshot bundle exceeds the decompressed size limit.");
+                        out.write(buffer, 0, n);
+                    }
+                }
+                long compressed = entry.getCompressedSize();
+                if (compressed > 0 && entryBytes > compressed * 100.0)
+                    throw new InvalidRequestException("Snapshot entry has a suspicious compression ratio: " + name);
+            }
+        }
+    }
+
+    static void forEachLine(Path path, Consumer consumer) {
+        try (Reader reader = new BufferedReader(Files.newBufferedReader(path, StandardCharsets.UTF_8))) {
+            StringBuilder line = new StringBuilder();
+            int c;
+            while ((c = reader.read()) != -1) {
+                if (c == '\n') {
+                    checkInterrupted();
+                    consumer.accept(line.toString());
+                    line.setLength(0);
+                } else {
+                    if (line.length() >= LINE_LIMIT) throw new InvalidRequestException("Snapshot JSON line exceeds the size limit.");
+                    line.append((char) c);
+                }
+            }
+            checkInterrupted();
+            if (!line.isEmpty()) consumer.accept(line.toString());
+        } catch (IOException e) {
+            throw new InvalidRequestException("Cannot read staged snapshot: " + e.getMessage());
+        }
+    }
+
+    static String checksum(Path file) {
+        try (InputStream input = Files.newInputStream(file)) {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            byte[] bytes = new byte[64 * 1024];
+            int n;
+            while ((n = input.read(bytes)) != -1) { checkInterrupted(); digest.update(bytes, 0, n); }
+            return HexFormat.of().formatHex(digest.digest());
+        } catch (IOException | NoSuchAlgorithmException e) {
+            throw new InvalidRequestException("Cannot verify snapshot checksum: " + e.getMessage());
+        }
+    }
+
+    static void checkInterrupted() {
+        if (Thread.currentThread().isInterrupted()) throw new InvalidRequestException("Snapshot import was interrupted.");
+    }
+
+    @Override public void close() {
+        for (Path file : temporaryFiles) {
+            try { Files.deleteIfExists(file); }
+            catch (IOException e) { log.warn("[Snapshot] Cannot remove staging file {}: {}", file, e.getMessage()); }
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/BitbucketService.java b/src/main/java/com/salkcoding/oswl/service/vcs/BitbucketService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/BitbucketService.java
rename to src/main/java/com/salkcoding/oswl/service/vcs/BitbucketService.java
index 69e92e4e..a5e7ea47 100644
--- a/src/main/java/com/salkcoding/oswl/service/BitbucketService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vcs/BitbucketService.java
@@ -1,4 +1,6 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vcs;
+import com.salkcoding.oswl.service.ingest.DependencyManifestPatcher;
+import com.salkcoding.oswl.service.ingest.ManifestPatchInfo;
 
 import com.salkcoding.oswl.client.BitbucketCloudAuth;
 import com.fasterxml.jackson.databind.JsonNode;
diff --git a/src/main/java/com/salkcoding/oswl/service/GitHubService.java b/src/main/java/com/salkcoding/oswl/service/vcs/GitHubService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/GitHubService.java
rename to src/main/java/com/salkcoding/oswl/service/vcs/GitHubService.java
index 394c182d..0007ae7c 100644
--- a/src/main/java/com/salkcoding/oswl/service/GitHubService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vcs/GitHubService.java
@@ -1,4 +1,6 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vcs;
+import com.salkcoding.oswl.service.ingest.DependencyManifestPatcher;
+import com.salkcoding.oswl.service.ingest.ManifestPatchInfo;
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
diff --git a/src/main/java/com/salkcoding/oswl/service/GitLabService.java b/src/main/java/com/salkcoding/oswl/service/vcs/GitLabService.java
similarity index 99%
rename from src/main/java/com/salkcoding/oswl/service/GitLabService.java
rename to src/main/java/com/salkcoding/oswl/service/vcs/GitLabService.java
index 87755fd2..58b9443e 100644
--- a/src/main/java/com/salkcoding/oswl/service/GitLabService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vcs/GitLabService.java
@@ -1,4 +1,6 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vcs;
+import com.salkcoding.oswl.service.ingest.DependencyManifestPatcher;
+import com.salkcoding.oswl.service.ingest.ManifestPatchInfo;
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
diff --git a/src/main/java/com/salkcoding/oswl/service/VcsAuthTokenService.java b/src/main/java/com/salkcoding/oswl/service/vcs/VcsAuthTokenService.java
similarity index 96%
rename from src/main/java/com/salkcoding/oswl/service/VcsAuthTokenService.java
rename to src/main/java/com/salkcoding/oswl/service/vcs/VcsAuthTokenService.java
index e842c0da..52e175ab 100644
--- a/src/main/java/com/salkcoding/oswl/service/VcsAuthTokenService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vcs/VcsAuthTokenService.java
@@ -1,4 +1,5 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vcs;
+import com.salkcoding.oswl.service.SessionCipherService;
 
 import com.salkcoding.oswl.auth.entity.UserVcsConnection;
 import com.salkcoding.oswl.auth.enums.VcsProvider;
diff --git a/src/main/java/com/salkcoding/oswl/service/ContinuousMonitoringService.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/ContinuousMonitoringService.java
similarity index 81%
rename from src/main/java/com/salkcoding/oswl/service/ContinuousMonitoringService.java
rename to src/main/java/com/salkcoding/oswl/service/vulnerability/ContinuousMonitoringService.java
index d43901e2..5a0abebd 100644
--- a/src/main/java/com/salkcoding/oswl/service/ContinuousMonitoringService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/ContinuousMonitoringService.java
@@ -1,4 +1,4 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vulnerability;
 
 import com.salkcoding.oswl.auth.entity.User;
 import com.salkcoding.oswl.auth.repository.UserRepository;
@@ -8,19 +8,20 @@
 import com.salkcoding.oswl.client.OsvClient.OsvQuery;
 import com.salkcoding.oswl.client.OsvClient.OsvResult;
 import com.salkcoding.oswl.client.OsvClient.OsvVuln;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.CveAlert;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.Project;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.service.notification.WebhookNotificationService;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.CveAlert;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
-import com.salkcoding.oswl.repository.CveAlertRepository;
-import com.salkcoding.oswl.repository.CveRepository;
-import com.salkcoding.oswl.repository.ProjectMemberRepository;
-import com.salkcoding.oswl.repository.ProjectRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.CveAlertRepository;
+import com.salkcoding.oswl.repository.vulnerability.CveRepository;
+import com.salkcoding.oswl.repository.project.ProjectMemberRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Service;
@@ -55,6 +56,7 @@ public class ContinuousMonitoringService {
     private final OsvClient osvClient;
     private final MailService mailService;
     private final AuditLogService auditLogService;
+    private final WebhookNotificationService webhookNotificationService;
 
     /** Outcome of one monitoring cycle — logged and returned by the local dev trigger. */
     public record MonitoringSummary(
@@ -65,7 +67,7 @@ public record MonitoringSummary(
             int emailsSent) {}
 
     /** Vulnerability discovered by the nightly re-query that was absent from the stored CVEs. */
-    private record NewVuln(String vulnId, String cveId, String summary, String fixVersion, String cweId) {}
+    private record NewVuln(String vulnId, String cveId, String summary, String fixVersion, String cweId, RiskLevel severity) {}
 
     /**
      * Runs one full monitoring cycle over all active projects.
@@ -133,8 +135,7 @@ public MonitoringSummary runCycle() {
     /**
      * Queries OSV for all libraries in one batch and returns the vulnerabilities that are
      * not yet stored on each library. New findings are persisted as Cve rows immediately
-     * (severity NONE — same as the OSV-only path of the enrichment pipeline; the next full
-     * scan enriches CVSS/severity from deps.dev).
+     * with available OSV severity/CVSS metadata so security notifications can classify them.
      */
     private Map> detectNewVulns(Map librariesById) {
         Map> result = new HashMap<>();
@@ -142,10 +143,18 @@ private Map> detectNewVulns(Map librariesById
 
         List libraries = new ArrayList<>(librariesById.values());
         List queries = libraries.stream()
-                .map(lib -> new OsvQuery(
-                        VulnerabilityEnrichmentService.toOsvEcosystem(lib.getEcosystem()),
-                        lib.getName(),
-                        lib.getVersion()))
+                // COCOAPODS: OSV's SwiftURL ecosystem keys by repository URL, not pod name —
+                // toOsvEcosystem("COCOAPODS") does map to "SwiftURL", but pairing it with the raw
+                // pod name here would silently match nothing every night. Library.sourceRepoUrl
+                // is where the enrichment pipeline stashed the resolved repo URL for exactly this.
+                // A library whose repo URL never resolved (rare) is skipped the same way OsvClient
+                // already skips any query missing a required field.
+                .map(lib -> "COCOAPODS".equalsIgnoreCase(lib.getEcosystem())
+                        ? new OsvQuery("SwiftURL", lib.getSourceRepoUrl(), lib.getVersion())
+                        : new OsvQuery(
+                                VulnerabilityEnrichmentService.toOsvEcosystem(lib.getEcosystem()),
+                                lib.getName(),
+                                lib.getVersion()))
                 .toList();
         List osvResults = osvClient.queryBatch(queries);
 
@@ -171,11 +180,12 @@ private Map> detectNewVulns(Map librariesById
                         .cweId(ov.cweId())
                         .summary(ov.summary())
                         .fixVersion(ov.fixVersion())
-                        .severity(RiskLevel.NONE)
+                        .severity(ov.effectiveSeverity()).cvssScore(ov.cvssScore()).cvss3Vector(ov.cvssVector())
                         .build();
+                cve.addSource(com.salkcoding.oswl.domain.enums.CveSource.OSV);
                 cveRepository.save(cve);
                 library.getCves().add(cve);
-                newVulns.add(new NewVuln(vulnId, ov.cveId(), ov.summary(), ov.fixVersion(), ov.cweId()));
+                newVulns.add(new NewVuln(vulnId, ov.cveId(), ov.summary(), ov.fixVersion(), ov.cweId(), ov.effectiveSeverity()));
                 log.info("[Monitor] New vulnerability {} for {}:{} ({})",
                         vulnId, library.getName(), library.getVersion(), library.getEcosystem());
             }
@@ -213,7 +223,7 @@ private List createAlerts(Project project,
                         .ecosystem(library.getEcosystem())
                         .vulnId(nv.vulnId())
                         .cveId(nv.cveId())
-                        .severity(RiskLevel.NONE)
+                        .severity(nv.severity())
                         .summary(nv.summary())
                         .fixVersion(nv.fixVersion())
                         .build();
@@ -234,6 +244,13 @@ private List createAlerts(Project project,
 
     /** Sends the alert email to every enabled project member; returns the number of emails sent. */
     private int notifyProjectMembers(Project project, List alerts) {
+        try {
+            webhookNotificationService.sendNewCveAlert(project, alerts);
+        } catch (Exception e) {
+            log.error("[Monitor] Webhook notification failed for projectId={}: {}",
+                    project.getId(), e.getMessage());
+        }
+
         List userIds = projectMemberRepository.findUserIdsByProjectId(project.getId());
         List recipients = userRepository.findAllById(userIds).stream()
                 .filter(User::isEnabled)
@@ -264,6 +281,7 @@ private int notifyProjectMembers(Project project, List alerts) {
         auditLogService.logAnonymous("[system]", "MONITOR.ALERT_EMAIL", "PROJECT",
                 project.getId().toString(), project.getName(),
                 "alerts=" + alerts.size() + " recipients=" + recipients.size() + " sent=" + sent);
+
         return sent;
     }
 
diff --git a/src/main/java/com/salkcoding/oswl/service/vulnerability/SavedViewService.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/SavedViewService.java
new file mode 100644
index 00000000..9d33317b
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/SavedViewService.java
@@ -0,0 +1,67 @@
+package com.salkcoding.oswl.service.vulnerability;
+
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.vulnerability.SavedView;
+import com.salkcoding.oswl.dto.SavedViewCreateRequest;
+import com.salkcoding.oswl.dto.SavedViewDto;
+import com.salkcoding.oswl.exception.ForbiddenException;
+import com.salkcoding.oswl.exception.InvalidRequestException;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.vulnerability.SavedViewRepository;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.List;
+
+@Service
+@RequiredArgsConstructor
+public class SavedViewService {
+
+    private final SavedViewRepository savedViewRepository;
+    private final ProjectRepository projectRepository;
+
+    /** Views visible to a user: their own, plus every view another user marked shared. */
+    @Transactional(readOnly = true)
+    public List list(Long projectId, Long userId) {
+        return savedViewRepository.findByProjectIdOrderByCreatedAtDesc(projectId).stream()
+                .filter(v -> v.isShared() || v.getCreatedByUserId().equals(userId))
+                .map(v -> toDto(v, userId))
+                .toList();
+    }
+
+    @Transactional
+    public SavedViewDto create(Long projectId, Long userId, String userName, SavedViewCreateRequest req) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+        SavedView view = SavedView.builder()
+                .project(project)
+                .createdByUserId(userId)
+                .createdByName(userName)
+                .name(req.name())
+                .filtersJson(req.filtersJson())
+                .shared(req.shared())
+                .build();
+        return toDto(savedViewRepository.save(view), userId);
+    }
+
+    @Transactional
+    public void delete(Long projectId, Long viewId, Long userId) {
+        SavedView view = savedViewRepository.findById(viewId)
+                .orElseThrow(() -> new IllegalArgumentException("Saved view not found: " + viewId));
+        if (!view.getProject().getId().equals(projectId)) {
+            throw new InvalidRequestException("Saved view does not belong to this project");
+        }
+        if (!view.getCreatedByUserId().equals(userId)) {
+            throw new ForbiddenException("Only the creator can delete this saved view");
+        }
+        savedViewRepository.delete(view);
+    }
+
+    private SavedViewDto toDto(SavedView v, Long userId) {
+        return new SavedViewDto(
+                v.getId(), v.getName(), v.getFiltersJson(), v.isShared(),
+                v.getCreatedByUserId(), v.getCreatedByName(),
+                v.getCreatedByUserId().equals(userId), v.getCreatedAt());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/vulnerability/SecurityCenterService.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/SecurityCenterService.java
new file mode 100644
index 00000000..8b9d5f21
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/SecurityCenterService.java
@@ -0,0 +1,476 @@
+package com.salkcoding.oswl.service.vulnerability;
+
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.project.Project;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanFinding;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.domain.enums.Patchability;
+import com.salkcoding.oswl.dto.BulkStatusRequest;
+import com.salkcoding.oswl.dto.ComponentRowDto;
+import com.salkcoding.oswl.dto.SecurityCenterRowFilterParams;
+import com.salkcoding.oswl.dto.VersionSummaryDto;
+import com.salkcoding.oswl.dto.scan.ScanFindingRowDto;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.project.ProjectRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanFindingRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
+import com.salkcoding.oswl.service.ai.AiResponseSanitizer;
+import com.salkcoding.oswl.auth.security.OswlUserPrincipal;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.data.domain.Page;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.ui.Model;
+
+import com.salkcoding.oswl.util.VersionOrder;
+
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.List;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SecurityCenterService {
+
+    private final ProjectRepository       projectRepository;
+    private final ScanResultRepository    scanResultRepository;
+    private final ScanComponentRepository scanComponentRepository;
+    private final ScanFindingRepository   scanFindingRepository;
+    private final LibraryRepository       libraryRepository;
+    private final com.salkcoding.oswl.service.scan.ScanSummaryReader summaryReader;
+    private final AuditLogService         auditLogService;
+
+    @Transactional(readOnly = true)
+    public void populateModel(Long projectId, Long scanId, Model model) {
+        populateModel(projectId, scanId, model, true);
+    }
+
+    /**
+     * @param buildRows whether to also construct the full {@code ComponentRowDto} list for the
+     *                  model's {@code components} attribute. {@code print}/{@code export} need
+     *                  every row; {@link #populateIndexModel} only needs the severity/license
+     *                  aggregate counts computed below and fetches its own (paginated) rows
+     *                  afterward — building all 5,000+ DTOs just to immediately discard them was
+     * a meaningful chunk of the pre-pagination render cost.
+     */
+    private void populateModel(Long projectId, Long scanId, Model model, boolean buildRows) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+
+        model.addAttribute("projectId", projectId);
+        model.addAttribute("projectName", project.getName());
+
+        List allScans = new ArrayList<>(scanResultRepository.findCompletedByProjectId(projectId));
+        VersionOrder.sortDesc(allScans);
+
+        ScanResult scan;
+        if (scanId != null) {
+            scan = allScans.stream()
+                    .filter(s -> s.getId().equals(scanId))
+                    .findFirst()
+                    .orElse(allScans.isEmpty() ? null : allScans.getFirst());
+        } else {
+            scan = allScans.isEmpty() ? null : allScans.getFirst();
+        }
+
+        Long activeScanId = scan != null ? scan.getId() : null;
+
+        List scanVersions = allScans.stream()
+                .map(s -> VersionSummaryDto.builder()
+                        .scanId(s.getId())
+                        .version(s.getVersion() != null ? s.getVersion()
+                                : s.getScannedAt().toLocalDate().toString().replace("-", "."))
+                        .scannedAt(s.getScannedAt() != null
+                                ? s.getScannedAt().toLocalDate().toString().replace("-", ".") : "-")
+                        .current(s.getId().equals(activeScanId))
+                        .build())
+                .toList();
+
+        model.addAttribute("scanVersions", scanVersions);
+        model.addAttribute("currentScanId", activeScanId);
+
+        // Add the latest scan's status and ID for the UI polling banner
+        ScanResult latestAny = scanResultRepository.findLatestByProjectId(projectId).orElse(null);
+        model.addAttribute("latestScanId",     latestAny != null ? latestAny.getId() : null);
+        model.addAttribute("latestScanStatus", latestAny != null ? latestAny.getStatus().name() : "NONE");
+        model.addAttribute("hasCompletedScan", scan != null);
+
+        if (scan == null) {
+            addEmptySummary(model);
+            return;
+        }
+
+        model.addAttribute("projectVersion", scan.getVersion() != null ? scan.getVersion() : "-");
+        model.addAttribute("scannedAt", scan.getScannedAt() != null
+                ? scan.getScannedAt().toLocalDate().toString() : "-");
+        // secret/IaC findings from the Quick Import clone scan — the count drives the
+        // summary badge, the row list backs the Findings section (never the matched secret
+        // value itself, only rule id / location / a fingerprint — see ScanFinding).
+        model.addAttribute("secretIacFindingCount", scanFindingRepository.countByScanResultId(scan.getId()));
+        model.addAttribute("secretIacFindings", findings(scan, projectId));
+
+        // Update banner: show when viewing an older scan and a newer completed scan exists
+        ScanResult latestCompleted = allScans.getFirst();
+        if (!scan.getId().equals(latestCompleted.getId())) {
+            String fromVer = scan.getVersion() != null ? scan.getVersion()
+                    : scan.getScannedAt().toLocalDate().toString().replace("-", ".");
+            String toVer = latestCompleted.getVersion() != null ? latestCompleted.getVersion()
+                    : latestCompleted.getScannedAt().toLocalDate().toString().replace("-", ".");
+            model.addAttribute("updateFromVersion", fromVer);
+            model.addAttribute("updateToVersion", toVer);
+            model.addAttribute("updateToScanId", latestCompleted.getId());
+        }
+
+        var summary = summaryReader.read(List.of(scan)).get(scan.getId());
+        int[] security = summary.security();
+        int[] licenses = summary.licenses();
+        model.addAttribute("scanArchived", scan.isArchived());
+        String[] securityNames = {"Critical", "High", "Medium", "Low", "Unscored"};
+        String[] licenseNames = {"Critical", "High", "Medium", "Low"};
+        for (int i = 0; i < security.length; i++) model.addAttribute("security" + securityNames[i], security[i]);
+        for (int i = 0; i < licenses.length; i++) model.addAttribute("license" + licenseNames[i], licenses[i]);
+
+        if (buildRows) {
+            List libraries = libraryRepository.findByScanResultIdWithCves(scan.getId());
+            // Map library.id → ScanComponent for reviewed/ignored flags
+            List scanComponents = scanComponentRepository.findByScanResultId(scan.getId());
+            java.util.Map libToSc = new java.util.HashMap<>();
+            for (ScanComponent sc : scanComponents) {
+                libToSc.put(sc.getLibrary().getId(), sc);
+            }
+
+            // Batch-compute how many distinct projects reference each library across all completed scans
+            List libraryIds = libraries.stream().map(Library::getId).toList();
+            java.util.Map projectCounts = new java.util.HashMap<>();
+            if (!libraryIds.isEmpty()) {
+                for (Object[] row : scanComponentRepository.countDistinctProjectsByLibraryIds(libraryIds)) {
+                    projectCounts.put((Long) row[0], (Long) row[1]);
+                }
+            }
+
+            List rows = new ArrayList<>();
+            for (Library lib : libraries) {
+                ScanComponent sc = libToSc.get(lib.getId());
+                long projCount = projectCounts.getOrDefault(lib.getId(), 0L);
+                rows.add(buildRowDto(lib, sc, projCount));
+            }
+            rows.sort(Comparator
+                    .comparingInt(ComponentRowDto::getSecurityCritical)
+                    .thenComparingInt(ComponentRowDto::getSecurityHigh)
+                    .thenComparingInt(ComponentRowDto::getSecurityMedium)
+                    .thenComparingInt(ComponentRowDto::getSecurityLow)
+                    .reversed()
+                    .thenComparing(ComponentRowDto::getName, String.CASE_INSENSITIVE_ORDER));
+            model.addAttribute("components", rows);
+            model.addAttribute("totalComponentCount", (long) rows.size());
+            model.addAttribute("hasMoreComponents", false);
+        }
+        model.addAttribute("securityPostureInsight", AiResponseSanitizer.sanitizePlainText(scan.getSecurityPostureInsight()));
+        model.addAttribute("aiStatus", scan.getAiStatus().name());
+        model.addAttribute("expiredDeferralCount",
+                scanComponentRepository.countRecentlyExpiredDeferrals(
+                        scan.getId(), java.time.LocalDateTime.now().minusDays(7)));
+    }
+
+    private static final int PAGE_SIZE = 100;
+
+    /**
+     * Interactive Security Center screen: everything {@link #populateModel} computes
+     * (summary cards, findings, scan list — all cheap, in-memory work over the already fetch-joined
+     * library list) plus only the *first page* of the component table, fetched pre-filtered and
+     * pre-sorted from the database instead of building and Thymeleaf-rendering every row up front.
+     * Measured at 5,000 components: the old full-render path took ~15s; {@code print}/{@code export}
+     * keep using {@link #populateModel} unchanged since a PDF/CSV export has no concept of "load more".
+     */
+    @Transactional(readOnly = true)
+    public void populateIndexModel(Long projectId, Long scanId, Model model) {
+        populateModel(projectId, scanId, model, false);
+        Long activeScanId = (Long) model.asMap().get("currentScanId");
+        if (activeScanId == null) {
+            return;
+        }
+        SecurityCenterRowFilterParams defaults = SecurityCenterRowFilterParams.initialPageLoad();
+        Page page = queryRows(projectId, activeScanId, defaults, 0);
+        model.addAttribute("components", page.getContent());
+        model.addAttribute("totalComponentCount", page.getTotalElements());
+        model.addAttribute("hasMoreComponents", page.hasNext());
+    }
+
+    /**
+     * One filtered/sorted/paginated slice of a scan's component table — backs both
+     * {@link #populateIndexModel} (page 0, default filters) and the {@code /rows} AJAX endpoint
+     * that filter changes, sort changes, and "Load more" all call afterward. {@code scanId} is
+     * re-validated against {@code projectId} here (not just at the controller's project-access
+     * check) so a caller can't read another project's component rows by supplying an arbitrary
+     * scan id — the same IDOR concern {@link ScanComponentRepository#findAllByIdInAndProjectId}
+     * guards against for bulk status updates.
+     */
+    @Transactional(readOnly = true)
+    public Page queryRows(Long projectId, Long scanId, SecurityCenterRowFilterParams f, int page) {
+        scanResultRepository.findByIdAndProjectId(scanId, projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Scan " + scanId + " not found in project " + projectId));
+        Page scPage = scanComponentRepository.searchForSecurityCenter(
+                scanId, f.search(), f.hideNonRuntime(),
+                f.reviewed(), f.nonReviewed(), f.ignored(), f.nonIgnored(), f.deferred(),
+                f.reachable(), f.notReachable(), f.unknownReachability(),
+                f.secCritical(), f.secHigh(), f.secMedium(), f.secLow(), f.secUnknown(),
+                f.licRestricted(), f.licCaution(), f.licUnknown(), f.licPermitted(),
+                f.patchable(), f.nonPatchable(), f.patchDeprecated(), f.patchOutdated(), f.patchUpToDate(),
+                org.springframework.data.domain.PageRequest.of(page, PAGE_SIZE, resolveSort(f.sortMode())));
+
+        List content = scPage.getContent();
+        List libraryIds = content.stream().map(sc -> sc.getLibrary().getId()).toList();
+        java.util.Map libsById = libraryIds.isEmpty() ? java.util.Map.of()
+                : libraryRepository.findByIdInWithCves(libraryIds).stream()
+                        .collect(java.util.stream.Collectors.toMap(Library::getId, lib -> lib));
+        java.util.Map projectCounts = new java.util.HashMap<>();
+        if (!libraryIds.isEmpty()) {
+            for (Object[] row : scanComponentRepository.countDistinctProjectsByLibraryIds(libraryIds)) {
+                projectCounts.put((Long) row[0], (Long) row[1]);
+            }
+        }
+
+        List rows = content.stream()
+                .map(sc -> buildRowDto(libsById.get(sc.getLibrary().getId()), sc,
+                        projectCounts.getOrDefault(sc.getLibrary().getId(), 0L)))
+                .toList();
+        return new org.springframework.data.domain.PageImpl<>(rows, scPage.getPageable(), scPage.getTotalElements());
+    }
+
+    private org.springframework.data.domain.Sort resolveSort(String sortMode) {
+        return switch (sortMode == null ? "risk" : sortMode) {
+            case "name" -> org.springframework.data.domain.Sort.by("library.name").ascending();
+            case "license" -> org.springframework.data.domain.Sort
+                    .by(org.springframework.data.domain.Sort.Direction.ASC, "library.licenseSortRank")
+                    .and(org.springframework.data.domain.Sort.by("library.name").ascending());
+            default -> org.springframework.data.domain.Sort
+                    .by(org.springframework.data.domain.Sort.Direction.DESC, "library.riskSortScore")
+                    .and(org.springframework.data.domain.Sort.by("library.name").ascending());
+        };
+    }
+
+    private ComponentRowDto buildRowDto(Library lib, ScanComponent sc, long projCount) {
+        int c = (int) lib.countBySeverity("CRITICAL");
+        int h = (int) lib.countBySeverity("HIGH");
+        int m = (int) lib.countBySeverity("MEDIUM");
+        int lo = (int) lib.countBySeverity("LOW");
+        int n = (int) lib.countBySeverity("NONE");
+
+        boolean reviewed = sc != null && sc.isReviewed();
+        boolean ignored  = sc != null && sc.isIgnored();
+        boolean deferred = sc != null && sc.isDeferred();
+        Long componentId = sc != null ? sc.getId() : null;
+        String reviewedByName = sc != null ? sc.getReviewedByName() : null;
+        String deferredByName = sc != null ? sc.getDeferredByName() : null;
+
+        // Build dependencyInfo: stored string + "· Projects (N)"
+        String depInfo = sc != null ? sc.getDependencyInfo() : null;
+        if (depInfo != null && projCount > 0) {
+            depInfo = depInfo + " · Projects (" + projCount + ")";
+        } else if (depInfo == null && projCount > 0) {
+            depInfo = "Projects (" + projCount + ")";
+        }
+
+        return ComponentRowDto.builder()
+                .id(componentId)
+                .name(lib.getName())
+                .version(lib.getVersion())
+                .dependencyInfo(depInfo)
+                .reviewed(reviewed)
+                .reviewedByName(reviewedByName)
+                .ignored(ignored)
+                .deferred(deferred)
+                .deferredByName(deferredByName)
+                .securityCritical(c)
+                .securityHigh(h)
+                .securityMedium(m)
+                .securityLow(lo)
+                .securityUnscored(n)
+                // fetchedAt stays null when the enrichment pipeline could not query this
+                // library at all (unmapped ecosystem) — the UI must not read zero CVEs as "clean".
+                .vulnerabilitiesAnalyzed(lib.isVulnerabilitiesAnalyzed())
+                .vulnerabilityLookupOutcomes(lib.getVulnerabilityLookupOutcomes())
+                .vulnerabilityLookupAt(lib.getVulnerabilityLookupAt())
+                .patchability(patchabilityLabel(lib.computePatchability()))
+                .licenseStatus(lib.getLicenseStatus().name())
+                .licenseName(lib.getLicenseName())
+                .isLatestVersion(lib.getIsLatestVersion())
+                .deprecated(lib.getDeprecated())
+                .latestVersion(lib.getLatestVersion())
+                .recommendedFixVersion(lib.bestFixVersion())
+                .scope(sc != null ? sc.displayScope() : "runtime")
+                .runtimeScope(sc == null || sc.isRuntimeScope())
+                .reachability(sc != null && sc.getReachability() != null
+                        ? sc.getReachability().name() : "UNKNOWN")
+                .scorecardScore(lib.getScorecardScore())
+                .malicious(lib.isMalicious())
+                .typosquatRisk(lib.isTyposquatRisk())
+                .typosquatReason(lib.getTyposquatReason())
+                .build();
+    }
+
+    @Transactional
+    public void bulkUpdateStatus(Long projectId, BulkStatusRequest req) {
+        String reviewerName = resolveCurrentDisplayName();
+        List comps = scanComponentRepository.findAllByIdInAndProjectId(req.ids(), projectId);
+        for (ScanComponent sc : comps) {
+            if (req.reviewed() != null) sc.markReviewedBy(req.reviewed(), reviewerName);
+            if (req.ignored()  != null) sc.markIgnored(req.ignored());
+        }
+        log.info("[SecurityCenter] bulkUpdateStatus projectId={} ids={} reviewed={} ignored={}",
+                projectId, req.ids(), req.reviewed(), req.ignored());
+        auditLogService.log("COMPONENT.BULK_STATUS_UPDATE", "COMPONENT",
+                projectId.toString(),
+                "[" + req.ids().size() + " components]",
+                "ids=" + req.ids() + " reviewed=" + req.reviewed() + " ignored=" + req.ignored());
+    }
+
+    /** Returns the display name of the currently authenticated user, or "unknown" if unavailable. */
+    private String resolveCurrentDisplayName() {
+        Authentication auth = SecurityContextHolder.getContext().getAuthentication();
+        if (auth != null && auth.getPrincipal() instanceof OswlUserPrincipal p) {
+            return p.getDisplayName();
+        }
+        return auth != null ? auth.getName() : "unknown";
+    }
+
+    // ── Helpers ─────────────────────────────────────────────────────────
+
+    private void addEmptySummary(Model model) {
+        model.addAttribute("hasCompletedScan", false);
+        model.addAttribute("projectVersion", "-");
+        model.addAttribute("latestScanId",     null);
+        model.addAttribute("latestScanStatus", "NONE");
+        model.addAttribute("securityCritical", 0);
+        model.addAttribute("securityHigh", 0);
+        model.addAttribute("securityMedium", 0);
+        model.addAttribute("securityLow", 0);
+        model.addAttribute("licenseCritical", 0);
+        model.addAttribute("licenseHigh", 0);
+        model.addAttribute("licenseMedium", 0);
+        model.addAttribute("licenseLow", 0);
+        model.addAttribute("components", List.of());
+        model.addAttribute("totalComponentCount", 0L);
+        model.addAttribute("hasMoreComponents", false);
+        model.addAttribute("secretIacFindingCount", 0L);
+        model.addAttribute("secretIacFindings", List.of());
+        model.addAttribute("securityPostureInsight", null);
+        model.addAttribute("aiStatus", com.salkcoding.oswl.domain.enums.AiEnrichmentStatus.NOT_APPLICABLE.name());
+    }
+
+    private String patchabilityLabel(Patchability p) {
+        return switch (p) {
+            case PATCHABLE     -> "patchable";
+            case NON_PATCHABLE -> "non-patchable";
+            default            -> "unknown";
+        };
+    }
+
+    /**
+     * Secret/IaC misconfiguration findings for a scan — that specific scan if
+     * {@code scanId} is given, otherwise the latest completed scan. Never includes the matched
+     * secret value, only rule id / location / a fingerprint (already true of {@link ScanFinding}).
+     */
+    @Transactional(readOnly = true)
+    public List findings(Long projectId, Long scanId) {
+        List allScans = new ArrayList<>(scanResultRepository.findCompletedByProjectId(projectId));
+        VersionOrder.sortDesc(allScans);
+        if (allScans.isEmpty()) return List.of();
+
+        ScanResult scan = (scanId != null)
+                ? allScans.stream().filter(s -> s.getId().equals(scanId)).findFirst().orElse(allScans.getFirst())
+                : allScans.getFirst();
+
+        return findings(scan, projectId);
+    }
+
+    /** Same as {@link #findings(Long, Long)} but reuses an already-resolved scan — used by
+     *  {@link #populateModel} so it doesn't have to re-query and re-sort every completed scan. */
+    private List findings(ScanResult scan, Long projectId) {
+        return scanFindingRepository.findByScanResultIdAndProjectId(scan.getId(), projectId).stream()
+                .map(f -> ScanFindingRowDto.builder()
+                        .id(f.getId())
+                        .type(f.getType().name())
+                        .ruleId(f.getRuleId())
+                        .severity(f.getSeverity().name())
+                        .filePath(f.getFilePath())
+                        .lineNumber(f.getLineNumber())
+                        .description(f.getDescription())
+                        .build())
+                .toList();
+    }
+
+    /**
+     * Builds a CSV byte array for the security-center export.
+     * If scanId is provided, exports that specific scan; otherwise uses the latest completed scan.
+     */
+    @Transactional(readOnly = true)
+    public byte[] buildExportCsv(Long projectId, Long scanId) {
+        Project project = projectRepository.findById(projectId)
+                .orElseThrow(() -> new IllegalArgumentException("Project not found: " + projectId));
+
+        List allScans = new ArrayList<>(scanResultRepository.findCompletedByProjectId(projectId));
+        VersionOrder.sortDesc(allScans);
+        if (allScans.isEmpty()) {
+            return ('\uFEFF' + csvHeader()).getBytes(java.nio.charset.StandardCharsets.UTF_8);
+        }
+
+        ScanResult scan = (scanId != null)
+                ? allScans.stream().filter(s -> s.getId().equals(scanId)).findFirst().orElse(allScans.getFirst())
+                : allScans.getFirst();
+
+        List components = scanComponentRepository.findByScanResultId(scan.getId());
+
+        var sb = new StringBuilder();
+        sb.append('\uFEFF').append(csvHeader()).append("\n");
+
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            int c = (int) lib.getCves().stream().filter(v -> v.getSeverity() != null && v.getSeverity().name().equals("CRITICAL")).count();
+            int h = (int) lib.getCves().stream().filter(v -> v.getSeverity() != null && v.getSeverity().name().equals("HIGH")).count();
+            int m = (int) lib.getCves().stream().filter(v -> v.getSeverity() != null && v.getSeverity().name().equals("MEDIUM")).count();
+            int l = (int) lib.getCves().stream().filter(v -> v.getSeverity() != null && v.getSeverity().name().equals("LOW")).count();
+            int n = (int) lib.getCves().stream().filter(v -> v.getSeverity() == null || v.getSeverity().name().equals("UNSCORED")).count();
+
+            sb.append(csvEscape(lib.getName())).append(',')
+              .append(csvEscape(lib.getVersion() != null ? lib.getVersion() : "")).append(',')
+              .append(csvEscape(lib.getEcosystem() != null ? lib.getEcosystem() : "")).append(',')
+              .append(csvEscape(sc.displayScope())).append(',')
+              .append(c).append(',').append(h).append(',').append(m).append(',').append(l).append(',').append(n).append(',')
+              .append(csvEscape(patchabilityLabel(lib.computePatchability()))).append(',')
+              .append(csvEscape(lib.getLicenseName() != null ? lib.getLicenseName() : "")).append(',')
+              .append(csvEscape(lib.getLicenseStatus().name())).append(',')
+              .append(sc.isReviewed() ? "Yes" : "No").append(',')
+              .append(sc.isIgnored()  ? "Yes" : "No").append(',')
+              .append(sc.isDeferred() ? "Yes" : "No").append(',')
+              .append(csvEscape(sc.getDeferralReason() != null ? sc.getDeferralReason() : ""))
+              .append("\n");
+        }
+
+        auditLogService.log("SECURITY_CENTER.EXPORT", "PROJECT",
+                projectId.toString(), project.getName(),
+                "format=csv, scanId=" + (scanId != null ? scanId : scan.getId()));
+
+        return sb.toString().getBytes(java.nio.charset.StandardCharsets.UTF_8);
+    }
+
+    private String csvHeader() {
+        return "Component Name,Version,Ecosystem,Scope,Critical CVEs,High CVEs,Medium CVEs,Low CVEs,Unscored CVEs,Patchability,License,License Status,Reviewed,Ignored,Deferred,Deferral Reason";
+    }
+
+    private String csvEscape(String val) {
+        if (val == null) return "";
+        if (val.contains(",") || val.contains("\"") || val.contains("\n")) {
+            return "\"" + val.replace("\"", "\"\"") + "\"";
+        }
+        return val;
+    }
+}
+
diff --git a/src/main/java/com/salkcoding/oswl/service/SupplyChainHeuristicsService.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/SupplyChainHeuristicsService.java
similarity index 98%
rename from src/main/java/com/salkcoding/oswl/service/SupplyChainHeuristicsService.java
rename to src/main/java/com/salkcoding/oswl/service/vulnerability/SupplyChainHeuristicsService.java
index f608e089..133a1e0e 100644
--- a/src/main/java/com/salkcoding/oswl/service/SupplyChainHeuristicsService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/SupplyChainHeuristicsService.java
@@ -1,6 +1,6 @@
-package com.salkcoding.oswl.service;
+package com.salkcoding.oswl.service.vulnerability;
 
-import com.salkcoding.oswl.domain.entity.Library;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
 import jakarta.annotation.PostConstruct;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.core.io.ClassPathResource;
@@ -18,7 +18,7 @@
 import java.util.Set;
 
 /**
- * Supply-chain name heuristics (roadmap #16): typosquat similarity and lightweight
+ * Supply-chain name heuristics: typosquat similarity and lightweight
  * dependency-confusion detection. Kept separate from {@link VulnerabilityEnrichmentService}
  * so the enrichment pipeline stays slim — everything here is pure in-memory string matching
  * (no network, no DB), cheap enough to re-run on every scan.
diff --git a/src/main/java/com/salkcoding/oswl/service/VulnerabilityEnrichmentService.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/VulnerabilityEnrichmentService.java
similarity index 70%
rename from src/main/java/com/salkcoding/oswl/service/VulnerabilityEnrichmentService.java
rename to src/main/java/com/salkcoding/oswl/service/vulnerability/VulnerabilityEnrichmentService.java
index 302f3565..b164fb36 100644
--- a/src/main/java/com/salkcoding/oswl/service/VulnerabilityEnrichmentService.java
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/VulnerabilityEnrichmentService.java
@@ -1,36 +1,55 @@
-package com.salkcoding.oswl.service;
-
+package com.salkcoding.oswl.service.vulnerability;
+import com.salkcoding.oswl.service.vulnerability.sources.AdvisoryFetchResult;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.ingest.EnrichmentProgressContext;
+import com.salkcoding.oswl.service.scan.ScanVersionDiffAnalyzer;
+import com.salkcoding.oswl.service.scan.ScanTimingRecorder;
+import com.salkcoding.oswl.service.scan.ScanStatusEmitterRegistry;
+import com.salkcoding.oswl.service.scan.ScanFailureMarker;
+import com.salkcoding.oswl.service.license.LicensePolicyService;
+import com.salkcoding.oswl.service.ingest.EnrichmentProgressHolder;
+
+import com.salkcoding.oswl.client.CocoaPodsSpecsClient;
+import com.salkcoding.oswl.client.CpeMatchService;
 import com.salkcoding.oswl.client.DepsDevClient;
 import com.salkcoding.oswl.client.DepsDevClient.AdvisoryInfo;
 import com.salkcoding.oswl.client.DepsDevClient.ComponentKey;
 import com.salkcoding.oswl.client.DepsDevClient.VersionInfo;
 import com.salkcoding.oswl.client.EpssClient;
+import com.salkcoding.oswl.client.GitHubAdvisoryClient;
 import com.salkcoding.oswl.client.KevCatalogService;
+import com.salkcoding.oswl.client.NvdClient;
 import com.salkcoding.oswl.client.OsvClient;
-import com.salkcoding.oswl.domain.entity.Project;
+import com.salkcoding.oswl.domain.entity.project.Project;
 import com.salkcoding.oswl.domain.enums.DeploymentProfile;
 import com.salkcoding.oswl.client.OsvClient.OsvQuery;
 import com.salkcoding.oswl.client.OsvClient.OsvResult;
 import com.salkcoding.oswl.client.OsvClient.OsvVuln;
 import com.salkcoding.oswl.auth.entity.CacheSetting;
 import com.salkcoding.oswl.auth.repository.CacheSettingRepository;
-import com.salkcoding.oswl.domain.entity.Cve;
-import com.salkcoding.oswl.domain.entity.Library;
-import com.salkcoding.oswl.domain.entity.ScanComponent;
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.vulnerability.Cve;
+import com.salkcoding.oswl.domain.entity.vulnerability.Library;
+import com.salkcoding.oswl.domain.entity.scan.ScanComponent;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
+import com.salkcoding.oswl.domain.enums.CveSource;
 import com.salkcoding.oswl.domain.enums.LicenseStatus;
+import com.salkcoding.oswl.domain.enums.MatchConfidence;
 import com.salkcoding.oswl.domain.enums.RiskLevel;
 import com.salkcoding.oswl.domain.enums.ScanStatus;
-import com.salkcoding.oswl.repository.CveRepository;
-import com.salkcoding.oswl.repository.LibraryRepository;
-import com.salkcoding.oswl.repository.ScanComponentRepository;
-import com.salkcoding.oswl.repository.ScanResultRepository;
+import com.salkcoding.oswl.repository.vulnerability.CveRepository;
+import com.salkcoding.oswl.repository.vulnerability.LibraryRepository;
+import com.salkcoding.oswl.repository.scan.ScanComponentRepository;
+import com.salkcoding.oswl.repository.scan.ScanResultRepository;
 import com.salkcoding.oswl.service.ai.AiAnalysisService;
 import com.salkcoding.oswl.service.ai.AiEnrichmentContextBuilder;
 import com.salkcoding.oswl.service.ai.AiResponseSanitizer;
 import com.salkcoding.oswl.service.ai.AiLanguageContext;
 import com.salkcoding.oswl.service.ai.AiStructuredSummary;
 import com.salkcoding.oswl.service.ai.AiUsageContext;
+import com.salkcoding.oswl.service.ai.AiUsageRecorderService;
+import com.salkcoding.oswl.service.reachability.CallGraphAnalyzer;
+import com.salkcoding.oswl.service.reachability.ReachabilityService;
+import com.salkcoding.oswl.service.metrics.OswlMetrics;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.beans.factory.annotation.Qualifier;
@@ -91,20 +110,32 @@ public class VulnerabilityEnrichmentService {
     private final ScanFailureMarker                    scanFailureMarker;
     private final SupplyChainHeuristicsService         supplyChainHeuristicsService;
     private final ScanTimingRecorder                   scanTimingRecorder;
+    private final ReachabilityService                  reachabilityService;
     @Qualifier("virtualThreadExecutor")
     private final Executor                              virtualThreadExecutor;
     /**
-     * i18n for the Quick Import detail lines (D2/D4). Null in plain-Mockito unit tests (no
+     * i18n for the Quick Import detail lines. Null in plain-Mockito unit tests (no
      * Spring context) — every use is guarded, since detail lines are best-effort UX.
      */
     private final MessageSource                        messageSource;
 
-    /** Bounds how many of the 5 independent AI enrichment blocks run concurrently (B2) — protects cloud provider rate limits. */
+    /** Null in plain-Mockito unit tests (no Spring context) — every use is guarded. */
+    private final OswlMetrics                          oswlMetrics;
+
+    /** Null in plain-Mockito unit tests (no Spring context) — every use is guarded. */
+    private final AiUsageRecorderService               aiUsageRecorderService;
+
+    private final GitHubAdvisoryClient                 githubAdvisoryClient;
+    private final NvdClient                            nvdClient;
+    private final CpeMatchService                      cpeMatchService;
+    private final CocoaPodsSpecsClient                 cocoaPodsSpecsClient;
+
+    /** Bounds how many of the 5 independent AI enrichment blocks run concurrently — protects cloud provider rate limits. */
     @Value("${oswl.ai.enrichment.max-parallel-calls:3}")
     private int maxParallelCalls;
 
     /**
-     * TTL (seconds) for deps.dev version metadata on cache-hit libraries (A2). Separate from the
+     * TTL (seconds) for deps.dev version metadata on cache-hit libraries. Separate from the
      * full CVE/license TTL in Cache Settings — version badge data changes slowly, so a cache-hit
      * library refreshed within this window needs no deps.dev GetVersion call at all.
      */
@@ -164,6 +195,7 @@ public void enrich(Long scanResultId) {
                 scan.complete();
                 scan.markAiNotApplicable();
                 scanResultRepository.save(scan);
+                recordScanDuration(timingKey, "completed");
                 scanTimingRecorder.clear(timingKey);
                 runAfterCommit(() -> scanStatusEmitterRegistry.notifyStatus(projectId, "COMPLETED"));
                 return;
@@ -173,7 +205,7 @@ public void enrich(Long scanResultId) {
             List toFetch = filterForFetch(components);
             log.info("[Enrich] scanId={} total={} cacheHit={} toFetch={}",
                     scanResultId, components.size(), components.size() - toFetch.size(), toFetch.size());
-            // D4: surface the cache decision as a Quick Import badge; D3: the toFetch count is
+            // surface the cache decision as a Quick Import badge; the toFetch count is
             // the denominator for data-phase progress (55–80 band).
             enrichmentProgressHolder.recordCacheStats(scanResultId, components.size(),
                     components.size() - toFetch.size(), toFetch.size());
@@ -194,6 +226,10 @@ public void enrich(Long scanResultId) {
             // before this feature existed get backfilled on their next scan.
             applySupplyChainHeuristics(components);
 
+            // Finish component writes before publishing completion. A completed scan may
+            // be reused by a same-version ingest as soon as that status becomes visible.
+            applyReachabilityAnalysis(components);
+
             // Data pipeline done — complete the scan NOW so CVE/license results are visible
             // immediately. AI enrichment (which can take minutes) continues below, deliberately
             // outside this try block, so a failure there can never flip an already-COMPLETED
@@ -206,6 +242,7 @@ public void enrich(Long scanResultId) {
                 scan.markAiNotApplicable();
             }
             scanResultRepository.save(scan);
+
             log.info("[Enrich] scanId={} COMPLETED (data) — total={} fetched={} cached={} aiPending={}",
                     scanResultId, components.size(), toFetch.size(), components.size() - toFetch.size(), aiWillRun);
             runAfterCommit(() -> scanStatusEmitterRegistry.notifyStatus(projectId, "COMPLETED"));
@@ -215,6 +252,7 @@ public void enrich(Long scanResultId) {
             log.info("[Timing] scanId={} FAILED total={} | {}", scanResultId,
                     ScanTimingRecorder.formatSeconds(scanTimingRecorder.totalMs(timingKey)),
                     scanTimingRecorder.summarizePhases(timingKey));
+            recordScanDuration(timingKey, "failed");
             scanTimingRecorder.clear(timingKey);
             enrichmentProgressHolder.remove(scanResultId);
             // Persist FAILED in a fresh REQUIRES_NEW transaction so the status write always
@@ -245,9 +283,17 @@ public void enrich(Long scanResultId) {
         log.info("[Timing] scanId={} total={} | {}", scanResultId,
                 ScanTimingRecorder.formatSeconds(scanTimingRecorder.totalMs(timingKey)),
                 scanTimingRecorder.summarizePhases(timingKey));
+        recordScanDuration(timingKey, "completed");
         scanTimingRecorder.clear(timingKey);
     }
 
+    /** Micrometer scan-duration timer — same total as the [Timing] log line. Guarded for plain-Mockito tests. */
+    private void recordScanDuration(String timingKey, String outcome) {
+        if (oswlMetrics != null) {
+            oswlMetrics.recordScanDuration(scanTimingRecorder.totalMs(timingKey), outcome);
+        }
+    }
+
     /**
      * Runs the action after the surrounding transaction commits, or immediately when there
      * is no active transaction (the pipeline stages commit per repository call, so the
@@ -338,7 +384,7 @@ private LocalDateTime latestCacheClearTime() {
      */
     private boolean needsRefetch(ScanComponent sc, LocalDateTime ttlThreshold, LocalDateTime lastCacheClear) {
         LocalDateTime fetchedAt = sc.getLibrary().getFetchedAt();
-        if (fetchedAt == null) {
+        if (!sc.getLibrary().isVulnerabilitiesAnalyzed()) {
             return true;
         }
         if (lastCacheClear != null && !fetchedAt.isAfter(lastCacheClear)) {
@@ -355,7 +401,7 @@ private void refreshVersionMetadata(List components, String timin
         if (components.isEmpty()) {
             return;
         }
-        // A2: version metadata has its own TTL. Libraries refreshed within the window are skipped
+        // version metadata has its own TTL. Libraries refreshed within the window are skipped
         // entirely — previously every cache hit triggered a deps.dev GetVersion on every scan.
         LocalDateTime threshold = LocalDateTime.now().minusSeconds(versionMetaTtlSeconds);
         List stale = components.stream()
@@ -388,6 +434,10 @@ private void refreshVersionMetadata(List components, String timin
             }
             Library library = stale.get(i).getLibrary();
             library.updateVersionStatus(vi.isDefault(), vi.deprecated(), vi.latestVersion());
+            if (!vi.licenses().isEmpty()) {
+                String expression = String.join(" AND ", vi.licenses());
+                library.updateLicense(expression, vi.licenses(), licensePolicyService.classify(expression));
+            }
             if (vi.scorecardScore() != null) {
                 library.updateScorecardScore(vi.scorecardScore());
             }
@@ -428,6 +478,50 @@ private void applySupplyChainHeuristics(List components) {
         }
     }
 
+    // ── Reachability analysis ────────────────────────────────
+
+    /**
+     * Runs bytecode call-graph reachability analysis for Java components.
+     * Failures are logged and swallowed so they cannot fail the scan.
+     */
+    private void applyReachabilityAnalysis(List components) {
+        if (components == null || components.isEmpty()) {
+            return;
+        }
+        List updated = new ArrayList<>();
+        for (ScanComponent sc : components) {
+            String ecosystem = sc.getLibrary().getEcosystem();
+            if (ecosystem == null) {
+                continue;
+            }
+            String eco = ecosystem.toUpperCase(Locale.ROOT);
+            if (!"MAVEN".equals(eco) && !"GRADLE".equals(eco)) {
+                continue;
+            }
+            try {
+                CallGraphAnalyzer.AnalysisResult result = reachabilityService.analyze(sc);
+                sc.updateReachability(result.reachability(), formatEvidence(result.evidence()));
+                updated.add(sc);
+            } catch (Exception e) {
+                log.warn("[Enrich][Reachability] failed for {} (non-fatal): {}",
+                        sc.getLibrary().getName(), e.getMessage());
+            }
+        }
+        if (!updated.isEmpty()) {
+            scanComponentRepository.saveAll(updated);
+            log.info("[Enrich][Reachability] analyzed {} Java component(s)", updated.size());
+        }
+    }
+
+    private static String formatEvidence(List evidence) {
+        if (evidence == null || evidence.isEmpty()) {
+            return null;
+        }
+        return evidence.stream()
+                .map(e -> e.referencingClass() + " -> " + e.referencedClass())
+                .collect(Collectors.joining("\n"));
+    }
+
     // ── Main pipeline ─────────────────────────────────────────────────────
 
     private void fetchAndPersist(List components, String timingKey,
@@ -441,7 +535,7 @@ private void fetchAndPersist(List components, String timingKey,
                 .toList();
         log.debug("[Enrich] Step1 deps.dev GetVersion batch size={}", keys.size());
         List versionInfos;
-        // D3: the scope routes per-fetch completion counts to the progress holder (55–80 band).
+        // the scope routes per-fetch completion counts to the progress holder (55–80 band).
         try (var ignored = scanTimingRecorder.phase(timingKey, "depsdev");
              var ignoredProgress = EnrichmentProgressContext.scope(new EnrichmentProgressContext.Frame(
                      scanResultId, null,
@@ -470,20 +564,99 @@ private void fetchAndPersist(List components, String timingKey,
             if (ai != null) advisoryMap.put(ai.ghsaId(), ai);
         }
 
-        // Step 3: OSV querybatch (single call for all components)
-        List osvQueries = components.stream()
-                .map(sc -> new OsvQuery(
-                        toOsvEcosystem(sc.getLibrary().getEcosystem()),
-                        sc.getLibrary().getName(),
-                        sc.getLibrary().getVersion()))
-                .toList();
+        // Step 3: OSV querybatch (single call for all components).
+        // An ecosystem with no OSV mapping is passed as a null ecosystem (OsvClient answers it
+        // with an empty, index-aligned placeholder without sending anything upstream). Components
+        // on CPE-applicable ecosystems (Conan, vcpkg, git submodules, vendored C/C++, system
+        // packages) are NOT marked unqueryable here because they are covered by the NVD/CPE path below.
+        List osvQueries = new ArrayList<>(components.size());
+        Set unqueryableLibraryIds = new HashSet<>();
+        Set unmappedEcosystemsWarned = new HashSet<>();
+        Set cpeLibraryIds = new HashSet<>();
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            String ecosystem = lib.getEcosystem();
+            String osvEcosystem;
+            String osvName = lib.getName();
+            boolean cocoaPodsUnresolved = false;
+
+            // COCOAPODS: OSV's SwiftURL ecosystem keys vulnerabilities by repository URL,
+            // not pod name, so the pod has to be resolved to its source repo first. This is a
+            // per-pod lookup (no batch API exists for the Specs trunk), gated the same way every
+            // other external client here is — air-gapped mode returns empty without an HTTP call.
+            if ("COCOAPODS".equalsIgnoreCase(ecosystem)) {
+                var podInfo = cocoaPodsSpecsClient.resolve(lib.getName(), lib.getVersion());
+                if (podInfo.isPresent()) {
+                    osvEcosystem = "SwiftURL";
+                    osvName = podInfo.get().repoUrl();
+                    // Persisted so ContinuousMonitoringService's nightly re-query (which builds
+                    // an OsvQuery straight from the stored Library, with no path back to this
+                    // resolver) can reuse the same repo URL instead of re-resolving or — worse —
+                    // silently querying SwiftURL with the raw pod name, which would always match
+                    // nothing. Same idiom as Library.cpe for the CPE-matched ecosystems.
+                    lib.updateProjectMetadata(null, null, podInfo.get().repoUrl());
+                    if (podInfo.get().license() != null) {
+                        // Stashed now so Step 4's upsertLibraryData (deps.dev doesn't cover
+                        // CocoaPods, so its "no vi" fallback reads straight back from the
+                        // library) picks this up instead of leaving the license unknown.
+                        lib.updateLicense(podInfo.get().license(), List.of(podInfo.get().license()), lib.getLicenseStatus());
+                    }
+                } else {
+                    osvEcosystem = null;
+                    cocoaPodsUnresolved = true;
+                }
+            } else {
+                osvEcosystem = toOsvEcosystem(ecosystem);
+            }
+
+            if (osvEcosystem == null && !isCpeEcosystem(ecosystem)) {
+                unqueryableLibraryIds.add(lib.getId());
+                // A resolution miss for one specific pod/version is an expected outcome (unpublished,
+                // non-GitHub source, air-gapped) — not a mapping bug, so it doesn't get the WARN
+                // reserved for a genuinely unmapped ecosystem.
+                if (!cocoaPodsUnresolved) {
+                    String ecoTag = ecosystem == null ? "null" : ecosystem.toUpperCase(Locale.ROOT);
+                    if (unmappedEcosystemsWarned.add(ecoTag)) {
+                        log.warn("[Enrich] scanId={} ecosystem '{}' has no OSV mapping and no CPE fallback — its components are NOT queried "
+                                + "for vulnerabilities and will be shown as not-analyzed (not 'no vulnerabilities')",
+                                scanResultId, ecoTag);
+                    }
+                }
+            }
+            if (isCpeEcosystem(ecosystem)) {
+                cpeLibraryIds.add(lib.getId());
+            }
+            osvQueries.add(new OsvQuery(osvEcosystem, osvName, lib.getVersion()));
+        }
         log.debug("[Enrich] Step3 OSV querybatch size={}", osvQueries.size());
         List osvResults;
         try (var ignored = scanTimingRecorder.phase(timingKey, "osv")) {
             osvResults = osvClient.queryBatch(osvQueries);
         }
 
+        // Step 3b: GitHub Advisory GraphQL lookups for ecosystems GitHub supports.
+        Map> offlineGhByKey = githubAdvisoryClient.findByComponentKeys(
+                components.stream()
+                        .map(sc -> AirgappedSnapshotService.componentKey(
+                                sc.getLibrary().getEcosystem(), sc.getLibrary().getName(), sc.getLibrary().getVersion()))
+                        .filter(java.util.Objects::nonNull)
+                        .collect(Collectors.toSet()));
+        List> ghAdvisories = fetchGitHubAdvisories(components, offlineGhByKey);
+
+        // Step 3c: NVD CPE lookups for Conan/vcpkg/system packages and other CPE candidates.
+        Map> offlineNvdByKey = nvdClient.findByComponentKeys(
+                components.stream()
+                        .filter(sc -> cpeLibraryIds.contains(sc.getLibrary().getId()))
+                        .map(sc -> AirgappedSnapshotService.componentKey(
+                                sc.getLibrary().getEcosystem(), sc.getLibrary().getName(), sc.getLibrary().getVersion()))
+                        .filter(java.util.Objects::nonNull)
+                        .collect(Collectors.toSet()));
+        List> nvdCves = fetchNvdCves(components, cpeLibraryIds, offlineNvdByKey);
+
         // Step 4: Upsert Library + Cve for each component
+        Set unresolvedSnapshotKeys = osvClient.findUnresolvedComponentKeys(components.stream()
+                .map(sc -> AirgappedSnapshotService.componentKey(sc.getLibrary().getEcosystem(), sc.getLibrary().getName(), sc.getLibrary().getVersion()))
+                .filter(java.util.Objects::nonNull).toList());
         log.debug("[Enrich] Step4 upsert libraries count={}", components.size());
 
         for (int i = 0; i < components.size(); i++) {
@@ -491,9 +664,29 @@ private void fetchAndPersist(List components, String timingKey,
             Library library = sc.getLibrary();
             VersionInfo vi  = i < versionInfos.size() ? versionInfos.get(i) : null;
             OsvResult osvResult = i < osvResults.size() ? osvResults.get(i) : null;
+            var ghResult = ghAdvisories.get(i);
+            var gh = ghResult.findings();
+            var nvdResult = nvdCves.get(i);
+            var nvd = nvdResult.findings();
 
             try {
-                upsertLibraryData(library, vi, osvResult, advisoryMap);
+                boolean osvQueried = !unqueryableLibraryIds.contains(library.getId())
+                        && osvResult != null && osvResult.resolved();
+                var outcomes = new java.util.HashMap<>(java.util.Map.of(
+                        "OSV", osvQueried ? "RESOLVED" : unqueryableLibraryIds.contains(library.getId()) ? "UNSUPPORTED" : "UNAVAILABLE",
+                        "GITHUB_ADVISORY", ghResult.lookupFailed() ? "UNAVAILABLE" : ghResult.queried() ? "RESOLVED" : "NOT_CONFIGURED",
+                        "NVD", nvdResult.lookupFailed() ? "UNAVAILABLE" : nvdResult.queried() ? "RESOLVED" : "UNSUPPORTED"));
+                if (unresolvedSnapshotKeys.contains(AirgappedSnapshotService.componentKey(library.getEcosystem(), library.getName(), library.getVersion()))) {
+                    outcomes.put("SNAPSHOT", "UNAVAILABLE");
+                }
+                library.recordLookupOutcomes(outcomes);
+                upsertLibraryData(library, vi, osvResult, advisoryMap, osvQueried);
+                enrichFromGitHubAdvisory(library, gh);
+                enrichFromNvd(library, nvd);
+                if (!osvQueried && ((ghResult.queried() && !ghResult.lookupFailed()) || (nvdResult.queried() && !nvdResult.lookupFailed()))) {
+                    library.markFetched();
+                    libraryRepository.save(library);
+                }
                 appendFindingDetail(scanResultId, library, detailLocale);
             } catch (Exception e) {
                 log.warn("[VulnerabilityEnrichmentService] Failed to enrich library {}/{}: {}",
@@ -503,7 +696,7 @@ private void fetchAndPersist(List components, String timingKey,
     }
 
     /**
-     * D2: pushes a one-line "what was found" detail to the Quick Import log so the wait reads
+     * Pushes a one-line "what was found" detail to the Quick Import log so the wait reads
      * as work happening. Content is deliberately limited to library name/version and CVE counts
      * — never repo URLs, paths, or anything that could carry a secret.
      */
@@ -517,7 +710,7 @@ private void appendFindingDetail(Long scanResultId, Library library, Locale loca
                 new Object[]{library.getName(), library.getVersion(), cves.size(), critical}, locale));
     }
 
-    /** D2: localized "N/M done" batch progress line (skipped without a Spring MessageSource). */
+    /** Localized "N/M done" batch progress line (skipped without a Spring MessageSource). */
     private void appendBatchProgressDetail(Long scanResultId, String messageKey, int done, int total, Locale locale) {
         if (messageSource == null || total <= 0) return;
         enrichmentProgressHolder.appendDetail(scanResultId,
@@ -538,17 +731,25 @@ private void upsertLibraryData(
             Library library,
             VersionInfo vi,
             OsvResult osvResult,
-            java.util.Map advisoryMap) {
+            java.util.Map advisoryMap,
+            boolean vulnerabilityQueried) {
 
         // License — store the raw SPDX expression as-is so the UI can distinguish
         // "non-standard" (has a name but unrecognised) from "truly unknown" (null/blank).
-        // E4: also keep the pre-join per-license list (licenseExpressionRaw) so an offline
+        // also keep the pre-join per-license list (licenseExpressionRaw) so an offline
         // snapshot export can round-trip a multi-license package exactly, instead of
         // re-splitting licenseName on " AND " (breaks if a license name contains that substring).
-        String rawLicense = null;
+        String rawLicense;
         List licenseList = vi != null ? vi.licenses() : List.of();
         if (!licenseList.isEmpty()) {
             rawLicense = String.join(" AND ", licenseList);
+        } else {
+            // deps.dev gave no answer (unsupported ecosystem — e.g. COMPOSER/CONAN — or a failed
+            // lookup): keep any license the manifest parser already stored on the library
+            // (composer.lock's license field) instead of wiping it with a null.
+            rawLicense = library.getLicenseName();
+            licenseList = library.getLicenseExpressionRaw() != null
+                    ? library.getLicenseExpressionRaw() : List.of();
         }
         LicenseStatus licenseStatus = licensePolicyService.classify(rawLicense);
         log.debug("[Enrich] DB UPDATE Library id={} name={} version={} rawLicense={} licenseStatus={}",
@@ -598,6 +799,7 @@ private void upsertLibraryData(
                     log.debug("[Enrich] DB INSERT Cve (OSV-only) library={}/{} osvId={} cveId={} cweId={} summary={} fixVersion={} malicious={}",
                             library.getName(), library.getVersion(),
                             ov.osvId(), ov.cveId(), ov.cweId(), ov.summary(), ov.fixVersion(), isMalicious);
+                    RiskLevel osvSeverity = ov.effectiveSeverity();
                     Cve cve = Cve.builder()
                             .library(library)
                             .ghsaId(ov.osvId())
@@ -606,8 +808,10 @@ private void upsertLibraryData(
                             .summary(ov.summary())
                             .fixVersion(ov.fixVersion())
                             .title(isMalicious ? "Malicious package (OSV " + ov.osvId() + ")" : null)
-                            .severity(isMalicious ? RiskLevel.CRITICAL : RiskLevel.NONE)
+                            .severity(osvSeverity)
+                            .cvssScore(ov.cvssScore()).cvss3Vector(ov.cvssVector())
                             .build();
+                    cve.addSource(CveSource.OSV);
                     cveRepository.save(cve);
                     library.getCves().add(cve);
                 } else {
@@ -616,10 +820,16 @@ private void upsertLibraryData(
                                     || (ov.cveId() != null && ov.cveId().equals(c.getCveId())))
                             .findFirst()
                             .ifPresent(c -> {
+                                c.mergeSeverity(CveSource.OSV, isMalicious ? RiskLevel.CRITICAL : ov.severity());
+                                c.setCvssScoreIfMissing(ov.cvssScore());
+                                c.setCvss3VectorIfMissing(ov.cvssVector());
                                 if (c.getCweId() == null && ov.cweId() != null) {
                                     c.enrichFromOsv(null, null, ov.cweId());
-                                    cveRepository.save(c);
                                 }
+                                if (isMalicious && c.getSeverity() != RiskLevel.CRITICAL) {
+                                    c.mergeSeverity(CveSource.OSV, RiskLevel.CRITICAL);
+                                }
+                                cveRepository.save(c);
                             });
                     log.debug("[Enrich] SKIP OSV vuln (already present) library={}/{} osvId={} cveId={}",
                             library.getName(), library.getVersion(), ov.osvId(), ov.cveId());
@@ -630,7 +840,12 @@ private void upsertLibraryData(
                     library.getName(), library.getVersion());
         }
 
-        library.markFetched();
+        // Only a library whose ecosystem was actually queried against OSV counts as fetched.
+        // An unqueryable (unmapped) ecosystem leaves fetchedAt null: the row is retried on
+        // every scan (with a WARN) and the UI shows it as not-analyzed rather than clean.
+        if (vulnerabilityQueried) {
+            library.markFetched();
+        }
         log.debug("[Enrich] DB SAVE Library id={} name={} version={}",
                 library.getId(), library.getName(), library.getVersion());
         libraryRepository.save(library);
@@ -642,7 +857,7 @@ private void upsertCve(
             AdvisoryInfo ai,
             OsvResult osvResult) {
 
-        // A6: the scan's libraries arrive with their CVEs fetch-joined (findByScanResultId does
+        // the scan's libraries arrive with their CVEs fetch-joined (findByScanResultId does
         // LEFT JOIN FETCH l.cves), so the existing row is found in memory — no per-CVE SELECT.
         // Mutating the collection instance (rather than a repository-fetched detached copy) also
         // keeps the in-memory list in sync for the OSV dedup below.
@@ -659,12 +874,14 @@ private void upsertCve(
                 Double cvssScore = ai.cvss3Score();
                 RiskLevel severity = cvssToRiskLevel(cvssScore);
                 cve.enrichFromAdvisory(cveId, ai.title(), cvssScore, ai.cvss3Vector(), severity);
+                cve.mergeSeverity(CveSource.DEPS_DEV, severity);
                 cveRepository.save(cve);
             }
             log.debug("[Enrich] DB UPDATE Cve (existing) id={} ghsaId={} cveId={} cvssScore={} severity={}",
                     cve.getId(), cve.getGhsaId(), cve.getCveId(), cve.getCvssScore(), cve.getSeverity());
             findMatchingOsv(osvResult, ghsaId, cve.getCveId()).ifPresent(ov -> {
                 cve.enrichFromOsv(ov.summary(), ov.fixVersion(), ov.cweId());
+                cve.addSource(CveSource.OSV);
                 cveRepository.save(cve);
             });
         } else {
@@ -693,11 +910,160 @@ private void upsertCve(
                     .summary(summary)
                     .fixVersion(fixVersion)
                     .build();
+            newCve.mergeSeverity(CveSource.DEPS_DEV, severity);
             cveRepository.save(newCve);
             library.getCves().add(newCve);
         }
     }
 
+    /**
+     * Ecosystem tags that skip OSV entirely and are queried via the NVD CPE path
+     * (see {@link #fetchNvdCves}) — they intentionally have no {@link #OSV_ECOSYSTEM_MAP}
+     * entry. Exposed for the parser↔mapping regression test, which must treat this set as an
+     * equally valid "queryable" outcome alongside the OSV mapping.
+     */
+    // CONDA: only packages the conda→PyPI mapping couldn't resolve reach this tag at all — a hit
+    // is remapped to PYPI by the parser itself (see DependencyManifestParserService.parseCondaLock),
+    // so everything still tagged CONDA here is (almost always) a native, non-Python library with
+    // no OSV coverage path — the same situation as Conan/vcpkg, so it gets the same CPE fallback.
+    //
+    // SUBMODULE is deliberately absent: DependencyManifestParserService records a pinned git
+    // submodule's "version" as its commit SHA, not a release version, and NVD's CPE lookup is an
+    // exact-string match on that field. Verified against the live NVD API (2026-08-13): a real
+    // version string like "1.1.1k" returns openssl's actual 40 CVEs, but a 40-character commit SHA
+    // in that same field returns a handful of unrelated CVEs from unrelated products/years rather
+    // than an empty result — a false positive, not a miss. Submodule components still get parsed
+    // and listed; they're just left unqueried for vulnerabilities (shown as not-analyzed) until
+    // there's a reliable way to resolve the pinned commit back to a real release version.
+    private static final Set CPE_ECOSYSTEMS = Set.of("CONAN", "VCPKG", "VENDORED", "SYSTEM", "CONDA");
+
+    public static Set cpeEcosystems() {
+        return CPE_ECOSYSTEMS;
+    }
+
+    private static boolean isCpeEcosystem(String ecosystem) {
+        if (ecosystem == null) return false;
+        return CPE_ECOSYSTEMS.contains(ecosystem.strip().toUpperCase(Locale.ROOT));
+    }
+
+    private List> fetchGitHubAdvisories(
+            List components,
+            Map> offlineByKey) {
+        var source = new com.salkcoding.oswl.service.vulnerability.sources.GitHubAdvisorySource(githubAdvisoryClient);
+        List> result = new ArrayList<>(components.size());
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            String key = AirgappedSnapshotService.componentKey(lib.getEcosystem(), lib.getName(), lib.getVersion());
+            var offline = key == null ? List.of() : java.util.Optional.ofNullable(offlineByKey.get(key)).orElse(List.of());
+            var fetched = source.lookup(lib.getEcosystem(), lib.getName(), lib.getVersion(), offline);
+            result.add(new AdvisoryFetchResult<>(fetched.findings(), fetched.lookupFailed(), null,
+                    fetched.queried() || (key != null && offlineByKey.containsKey(key)) || !fetched.findings().isEmpty()));
+        }
+        return result;
+    }
+
+    private List> fetchNvdCves(List components, Set cpeLibraryIds,
+                                                       Map> offlineNvdByKey) {
+        var source = new com.salkcoding.oswl.service.vulnerability.sources.NvdAdvisorySource(nvdClient, cpeMatchService);
+        List> result = new ArrayList<>(components.size());
+        for (ScanComponent sc : components) {
+            Library lib = sc.getLibrary();
+            if (!cpeLibraryIds.contains(lib.getId())) { result.add(new AdvisoryFetchResult<>(List.of(), false, null, false)); continue; }
+            String key = AirgappedSnapshotService.componentKey(lib.getEcosystem(), lib.getName(), lib.getVersion());
+            var offline = key == null ? null : offlineNvdByKey.get(key);
+            var fetched = source.lookup(lib.getName(), lib.getVersion(), offline == null ? null : lib.getCpe(),
+                    offline == null ? List.of() : offline);
+            // Preserve the existing commit contract: failed lookups keep findings but do not change CPE.
+            if (!fetched.lookupFailed() && fetched.matchedCpe() != null && !fetched.matchedCpe().equals(lib.getCpe())) {
+                try {
+                    lib.updateCpe(fetched.matchedCpe());
+                    libraryRepository.save(lib);
+                } catch (Exception e) {
+                    log.warn("[Enrich] NVD CPE persistence failed for {}:{} — {}", lib.getName(), lib.getVersion(), e.getMessage());
+                }
+            }
+            result.add(new AdvisoryFetchResult<>(fetched.findings(), fetched.lookupFailed(), fetched.matchedCpe(), fetched.queried() || offline != null));
+        }
+        return result;
+    }
+
+    private void enrichFromGitHubAdvisory(Library library,
+                                          List advisories) {
+        for (GitHubAdvisoryClient.GitHubAdvisory adv : advisories) {
+            if (adv.ghsaId() == null && adv.cveId() == null) continue;
+            Cve cve = findCveByIds(library, adv.ghsaId(), adv.cveId());
+            if (cve != null) {
+                cve.mergeSeverity(CveSource.GITHUB_ADVISORY, adv.severity());
+                if (adv.cvssScore() != null) cve.setCvssScoreIfMissing(adv.cvssScore());
+                if (adv.cvss3Vector() != null && !adv.cvss3Vector().isBlank()) cve.setCvss3VectorIfMissing(adv.cvss3Vector());
+                if (adv.fixVersion() != null && !adv.fixVersion().isBlank()) cve.setFixVersionIfMissing(adv.fixVersion());
+                if (adv.summary() != null && !adv.summary().isBlank()) cve.setSummaryIfMissing(adv.summary());
+                cveRepository.save(cve);
+            } else {
+                Cve newCve = Cve.builder()
+                        .library(library)
+                        .ghsaId(adv.ghsaId())
+                        .cveId(adv.cveId())
+                        .summary(adv.summary())
+                        .fixVersion(adv.fixVersion())
+                        .severity(adv.severity())
+                        .cvssScore(adv.cvssScore())
+                        .cvss3Vector(adv.cvss3Vector())
+                        .build();
+                newCve.mergeSeverity(CveSource.GITHUB_ADVISORY, adv.severity());
+                cveRepository.save(newCve);
+                library.getCves().add(newCve);
+            }
+        }
+    }
+
+    private void enrichFromNvd(Library library, List nvdCves) {
+        for (NvdClient.NvdCve nvd : nvdCves) {
+            if (nvd.cveId() == null) continue;
+            Cve cve = findCveByIds(library, null, nvd.cveId());
+            if (cve != null) {
+                cve.mergeSeverity(CveSource.NVD, nvd.severity());
+                if (nvd.cvssScore() != null) cve.setCvssScoreIfMissing(nvd.cvssScore());
+                if (nvd.cvss3Vector() != null && !nvd.cvss3Vector().isBlank()) cve.setCvss3VectorIfMissing(nvd.cvss3Vector());
+                if (nvd.description() != null && !nvd.description().isBlank()) cve.setSummaryIfMissing(nvd.description());
+                if (nvd.matchConfidence() != null && cve.getMatchConfidence() == null) {
+                    cve.setMatchConfidence(nvd.matchConfidence());
+                }
+                cveRepository.save(cve);
+            } else {
+                Cve newCve = Cve.builder()
+                        .library(library)
+                        .cveId(nvd.cveId())
+                        .summary(nvd.description())
+                        .severity(nvd.severity())
+                        .cvssScore(nvd.cvssScore())
+                        .cvss3Vector(nvd.cvss3Vector())
+                        .matchConfidence(nvd.matchConfidence())
+                        .build();
+                newCve.mergeSeverity(CveSource.NVD, nvd.severity());
+                cveRepository.save(newCve);
+                library.getCves().add(newCve);
+            }
+        }
+    }
+
+    private Cve findCveByIds(Library library, String ghsaId, String cveId) {
+        if (ghsaId != null) {
+            Cve byGhsa = library.getCves().stream()
+                    .filter(c -> ghsaId.equals(c.getGhsaId()))
+                    .findFirst()
+                    .orElse(null);
+            if (byGhsa != null) return byGhsa;
+        }
+        if (cveId != null) {
+            return library.getCves().stream()
+                    .filter(c -> cveId.equals(c.getCveId()))
+                    .findFirst()
+                    .orElse(null);
+        }
+        return null;
+    }
+
     // ── Helpers ───────────────────────────────────────────────────────────
 
     private String extractCveAlias(List aliases) {
@@ -728,22 +1094,91 @@ public static RiskLevel cvssToRiskLevel(Double score) {
         return RiskLevel.NONE;
     }
 
+    /**
+     * Internal ecosystem tag (uppercase) → OSV ecosystem string. OSV is case-sensitive for
+     * ecosystem values. Every tag the manifest parser can emit MUST have an entry here —
+     * an unmapped tag returns {@code null} (never a silent pass-through of the raw tag,
+     * which OSV would match against nothing and report as "no vulnerabilities").
+     *
+     * 
    C/C++ ecosystems (CONAN, VCPKG, VENDORED) are additionally routed through the NVD CPE
+     * lookup path (see {@link #isCpeEcosystem}), so CONAN components are covered even though OSV's
+     * ConanCenter dataset is currently empty. SUBMODULE is intentionally excluded from that path —
+     * see the comment on {@link #CPE_ECOSYSTEMS}.
+     */
+    private static final Map OSV_ECOSYSTEM_MAP = Map.of(
+            "MAVEN",    "Maven",
+            "NPM",      "npm",
+            "PYPI",     "PyPI",
+            "GO",       "Go",
+            "CARGO",    "crates.io",
+            "NUGET",    "NuGet",
+            "RUBYGEMS", "RubyGems",
+            "COMPOSER",   "Packagist",
+            "CONAN",      "ConanCenter",
+            // COCOAPODS is queryable, but not via a straight name pass-through like every other
+            // row here — OSV's SwiftURL ecosystem keys by repository URL, so the enrichment loop
+            // special-cases COCOAPODS to resolve the pod to a repo URL first. This entry
+            // exists so the ecosystem-mapping regression test recognizes COCOAPODS as covered.
+            "COCOAPODS",  "SwiftURL"
+    );
+
+    /** Internal ecosystem tags that have an OSV mapping — exposed for the parser↔mapping regression test. */
+    public static Set osvMappedEcosystems() {
+        return OSV_ECOSYSTEM_MAP.keySet();
+    }
+
     /**
      * Converts an internal ecosystem name to the OSV ecosystem string.
-     * OSV is case-sensitive for ecosystem values.
+     * Returns {@code null} when the ecosystem has no known OSV mapping — callers must treat
+     * that as "cannot be queried" (WARN + leave the library un-fetched), never as
+     * "no vulnerabilities".
      * Public static — also used by ContinuousMonitoringService for nightly re-queries.
      */
     public static String toOsvEcosystem(String ecosystem) {
-        return switch (ecosystem.toUpperCase()) {
-            case "MAVEN"    -> "Maven";
-            case "NPM"      -> "npm";
-            case "PYPI"     -> "PyPI";
-            case "GO"       -> "Go";
-            case "CARGO"    -> "crates.io";
-            case "NUGET"    -> "NuGet";
-            case "RUBYGEMS" -> "RubyGems";
-            default         -> ecosystem;
-        };
+        if (ecosystem == null) {
+            return null;
+        }
+        String osPackage = osPackageOsvEcosystem(ecosystem);
+        if (osPackage != null) {
+            return osPackage;
+        }
+        return OSV_ECOSYSTEM_MAP.get(ecosystem.strip().toUpperCase(Locale.ROOT));
+    }
+
+    /**
+     * Version-suffixed OS distro ecosystems → exact-cased OSV ecosystem string, or
+     * {@code null} if {@code ecosystem} isn't one of these. {@code Library.ecosystem} is always
+     * stored upper-cased (see {@code ScanIngestService.LibraryKey}), so the exact OSV casing has
+     * to be reconstructed here rather than stored verbatim — split out of {@link #toOsvEcosystem}
+     * so {@code OsvBulkSource} (the air-gapped bundle builder) can reuse the exact same
+     * reconstruction for its per-release bucket names instead of a second, drift-prone copy.
+     *
+     * 
    Deliberately not a blanket "lower-case the suffix" rule — that was tried and is
+     * wrong for Ubuntu: verified live against the real {@code osv-vulnerabilities} GCS bucket
+     * listing (2026-08-13), Debian's and Alpine's suffixes really are case-invariant
+     * ({@code "Debian:11"}, and Alpine's stored {@code "ALPINE:V3.14"} needs exactly its leading
+     * {@code V} lowered to recover {@code "v3.14"}), but Ubuntu's stored suffix carries a literal
+     * {@code "LTS"} marker (e.g. {@code "UBUNTU:22.04:LTS"}, from
+     * {@link com.salkcoding.oswl.service.container.BaseImageEcosystemMapper}) that OSV expects
+     * upper-case — lower-casing it produces {@code "Ubuntu:22.04:lts"}, which 404s against the
+     * bulk bucket (only {@code "Ubuntu:22.04:LTS/"} exists) and silently returns zero results from
+     * the live query API (confirmed case-sensitive), not an error.
+     */
+    public static String osPackageOsvEcosystem(String ecosystem) {
+        if (ecosystem == null) {
+            return null;
+        }
+        String upper = ecosystem.strip().toUpperCase(Locale.ROOT);
+        if (upper.startsWith("ALPINE:")) {
+            return "Alpine:" + upper.substring("ALPINE:".length()).toLowerCase(Locale.ROOT);
+        }
+        if (upper.startsWith("DEBIAN:")) {
+            return "Debian:" + upper.substring("DEBIAN:".length());
+        }
+        if (upper.startsWith("UBUNTU:")) {
+            return "Ubuntu:" + upper.substring("UBUNTU:".length());
+        }
+        return null;
     }
 
     // ── AI enrichment ────────────────────────────────────────────────────
@@ -782,7 +1217,7 @@ private void enrichWithAiBody(ScanResult scan, Long scanResultId) {
         String timingKey = String.valueOf(scanResultId);
         List libs = libraryRepository.findByScanResultIdWithCves(scanResultId);
         List scanComponents = scanComponentRepository.findByScanResultId(scanResultId);
-        // F1: no more unconditional clear-then-recompute here — runCveBatch/runLicenseBatch
+        // no more unconditional clear-then-recompute here — runCveBatch/runLicenseBatch
         // gate each candidate on its content hash and only overwrite the ones that actually
         // need a fresh AI call, so a cache hit (or an AI failure) never blanks an existing
         // summary the user is currently looking at.
@@ -801,7 +1236,7 @@ private void enrichWithAiBody(ScanResult scan, Long scanResultId) {
         // rate limits. AiUsageContext/AiLanguageContext are ThreadLocal — ThreadLocals do not
         // propagate to a new thread, so each task re-opens its own scope from values captured
         // here rather than relying on the scope already open on the calling thread.
-        // F2: posture/security-trend/license-trend/version-diff used to be 4 separate free-form
+        // posture/security-trend/license-trend/version-diff used to be 4 separate free-form
         // calls (5 blocks total with CVE/license) — they're now folded into one combined-insights
         // block, so only 3 blocks run here.
         String branch = scan.getVersion();
@@ -825,8 +1260,8 @@ private void enrichWithAiBody(ScanResult scan, Long scanResultId) {
         CompletableFuture.allOf(cveFuture, licenseFuture, insightsFuture).join();
 
         // The combined-insights block mutates fields on the same `scan` entity that other
-        // enrichment steps might also touch, so — same reasoning as before F2 — it only
-        // returns its result; the merge into `scan` and the single save happen here, on this
+        // enrichment steps might also touch, so — same reasoning as the CVE/license futures — it
+        // only returns its result; the merge into `scan` and the single save happen here, on this
         // thread, after the future has completed.
         CombinedInsightsResult insightsResult = insightsFuture.join();
         String postureInsight = insightsResult != null ? insightsResult.postureInsight() : null;
@@ -854,7 +1289,7 @@ private void enrichWithAiBody(ScanResult scan, Long scanResultId) {
     }
 
     /**
-     * Wraps one of the 5 independent AI enrichment blocks (B2): re-opens the AI usage/language
+     * Wraps one of the 5 independent AI enrichment blocks: re-opens the AI usage/language
      * ThreadLocal scopes on the worker thread, bounds concurrency via {@code concurrencyGate},
      * isolates any failure so one block can never fail the others, and reports progress by
      * completion count rather than a fixed step order (blocks finish out of order once parallel).
@@ -912,7 +1347,7 @@ private int runCveBatch(Long scanResultId, String timingKey, List libs,
                 try (var ignored = scanTimingRecorder.phase(timingKey, "threatintel")) {
                     applyThreatIntel(cvesToSummarize);
                 }
-                // F1: gate each candidate on its content hash — a re-scan that recomputes the
+                // gate each candidate on its content hash — a re-scan that recomputes the
                 // same hash and already has a summary skips the AI call entirely instead of
                 // re-asking a question whose answer cannot have changed.
                 List requests = new ArrayList<>();
@@ -954,9 +1389,10 @@ private int runCveBatch(Long scanResultId, String timingKey, List libs,
                     log.info("[Enrich][AI] CVE batch: {} cache hit(s) skipped, {} to summarize scanId={}",
                             cacheHits, requests.size(), scanResultId);
                 }
+                recordAiCacheOutcomes(cacheHits, requests.size());
                 Map summaries = Map.of();
                 if (!requests.isEmpty()) {
-                    // D2: chunk completions surface as "CVE summaries N/M" detail lines (batch
+                    // chunk completions surface as "CVE summaries N/M" detail lines (batch
                     // output is JSON — it never streams to the raw-text preview).
                     int cveTotal = requests.size();
                     try (var ignored = scanTimingRecorder.phase(timingKey, "ai.cve");
@@ -1000,7 +1436,7 @@ private int runLicenseBatch(Long scanResultId, String timingKey, List l
                 .limit(aiPreferencesService.getLicenseLimit())
                 .toList();
 
-        // F1: gate each candidate on its content hash — a re-scan that recomputes the same hash
+        // gate each candidate on its content hash — a re-scan that recomputes the same hash
         // and already has a summary skips the AI call entirely.
         List licRequests = new ArrayList<>();
         List requestedLibraries = new ArrayList<>();
@@ -1034,6 +1470,7 @@ private int runLicenseBatch(Long scanResultId, String timingKey, List l
             log.info("[Enrich][AI] License batch: {} cache hit(s) skipped, {} to summarize scanId={}",
                     cacheHits, licRequests.size(), scanResultId);
         }
+        recordAiCacheOutcomes(cacheHits, licRequests.size());
 
         int licAiCount = 0;
         if (!licRequests.isEmpty()) {
@@ -1074,12 +1511,12 @@ private record TrendResult(String secInsight, String licInsight) {}
 
     private record VersionDiffResult(String diffInsight, Long fromScanId) {}
 
-    /** F2: posture + security-trend + license-trend + version-diff, now one combined block. */
+    /** Posture + security-trend + license-trend + version-diff, now one combined block. */
     private record CombinedInsightsResult(String postureInsight, TrendResult trendResult, VersionDiffResult diffResult) {}
 
     /**
      * Block 3/3 — posture + security-trend + license-trend + version-diff in a single AI call
-     * (F2; previously 4 separate free-form calls across 3 blocks). Gathers the same inputs the
+     * (previously 4 separate free-form calls across 3 blocks). Gathers the same inputs the
      * 3 former blocks each queried independently — {@code prevScans} (limit 10, for the trend
      * version-label history) also supplies the single immediately-previous scan the diff needs,
      * so this only needs the one query instead of the former two (limit 10 and limit 1).
@@ -1282,7 +1719,7 @@ private void regenerateRecentInsights(boolean force) {
     }
 
     /**
-     * F1: hashes the fields that actually drive the batch CVE prompt — never {@code title}/
+     * Hashes the fields that actually drive the batch CVE prompt — never {@code title}/
      * {@code osvSummary}, since upstream wording tweaks would otherwise invalidate the cache
      * every scan despite the triage answer not changing. Keep this field list in sync with the
      * {@code CveSummaryRequest} construction in {@link #runCveBatch} — a drift here would make
@@ -1300,7 +1737,20 @@ private static String cveContextHash(String severity, double cvssScore, String f
                 epssBucket, Boolean.toString(kevListed), nullToEmpty(deploymentProfile)));
     }
 
-    /** F1: hashes the fields that drive the batch license prompt (see {@link #runLicenseBatch}). */
+    /**
+     * Persists the context-hash cache hit/miss counts of one batch so the hit rate survives
+     * beyond the scan log. Best-effort: stats must never fail an enrichment run.
+     */
+    private void recordAiCacheOutcomes(int hits, int misses) {
+        if (aiUsageRecorderService == null || (hits <= 0 && misses <= 0)) return;
+        try {
+            aiUsageRecorderService.recordCacheOutcomes(hits, misses);
+        } catch (Exception e) {
+            log.debug("[Enrich][AI] Cache outcome recording failed: {}", e.getMessage());
+        }
+    }
+
+    /** Hashes the fields that drive the batch license prompt (see {@link #runLicenseBatch}). */
     private static String licenseContextHash(String licenseName, String licenseStatus, String policyReason,
             String ecosystem, String dependencyType, String latestVersion, String deploymentProfile) {
         return sha256Hex(String.join("|",
diff --git a/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/AdvisoryFetchResult.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/AdvisoryFetchResult.java
new file mode 100644
index 00000000..8e4924ec
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/AdvisoryFetchResult.java
@@ -0,0 +1,9 @@
+package com.salkcoding.oswl.service.vulnerability.sources;
+import java.util.List;
+/** Existing offline findings survive a failed live lookup. An empty result is not proof of safety. */
+public record AdvisoryFetchResult(List findings, boolean lookupFailed, String matchedCpe, boolean queried) {
+    public AdvisoryFetchResult(List findings, boolean lookupFailed, String matchedCpe) {
+        this(findings, lookupFailed, matchedCpe, !findings.isEmpty() || matchedCpe != null);
+    }
+    public AdvisoryFetchResult { findings = List.copyOf(findings); }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/GitHubAdvisorySource.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/GitHubAdvisorySource.java
new file mode 100644
index 00000000..e5aca3b9
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/GitHubAdvisorySource.java
@@ -0,0 +1,29 @@
+package com.salkcoding.oswl.service.vulnerability.sources;
+
+import com.salkcoding.oswl.client.GitHubAdvisoryClient;
+import com.salkcoding.oswl.client.GitHubAdvisoryClient.GitHubAdvisory;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import java.util.ArrayList;
+import java.util.List;
+
+@Slf4j
+@RequiredArgsConstructor
+public class GitHubAdvisorySource {
+    private final GitHubAdvisoryClient client;
+    public AdvisoryFetchResult lookup(String ecosystem, String name, String version,
+            List offline) {
+        List found = new ArrayList<>(offline);
+        boolean failed = false;
+        try {
+            for (GitHubAdvisory advisory : client.findByPackage(ecosystem, name, version)) {
+                if (found.stream().noneMatch(x -> advisory.ghsaId() != null && advisory.ghsaId().equals(x.ghsaId())))
+                    found.add(advisory);
+            }
+        } catch (Exception e) {
+            failed = true;
+            log.warn("[Enrich] GitHub Advisory lookup failed for {}:{} — {}", name, version, e.getMessage());
+        }
+        return new AdvisoryFetchResult<>(found, failed, null, client.canLookup(ecosystem) || !offline.isEmpty());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/NvdAdvisorySource.java b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/NvdAdvisorySource.java
new file mode 100644
index 00000000..f3f4c9f5
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/service/vulnerability/sources/NvdAdvisorySource.java
@@ -0,0 +1,40 @@
+package com.salkcoding.oswl.service.vulnerability.sources;
+
+import com.salkcoding.oswl.client.CpeMatchService;
+import com.salkcoding.oswl.client.NvdClient;
+import com.salkcoding.oswl.client.NvdClient.NvdCve;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Locale;
+
+@Slf4j
+@RequiredArgsConstructor
+public class NvdAdvisorySource {
+    private final NvdClient client;
+    private final CpeMatchService cpeMatch;
+    public AdvisoryFetchResult lookup(String name, String version, String offlineCpe,
+            List offline) {
+        List found = new ArrayList<>(offline);
+        String matchedCpe = offlineCpe;
+        boolean failed = false;
+        if (client.isAirgapped()) return new AdvisoryFetchResult<>(found, false, matchedCpe);
+        if (version == null || version.isBlank()) return new AdvisoryFetchResult<>(found, false, matchedCpe);
+        try {
+            for (var candidate : cpeMatch.inferCpes(name, version)) {
+                String cpe = String.format(Locale.ROOT, "cpe:2.3:a:%s:%s:%s:*:*:*:*:*:*:*",
+                        candidate.vendor(), candidate.product(), candidate.version());
+                List cves = client.findByCpeName(cpe, candidate.confidence());
+                if (matchedCpe == null) matchedCpe = cpe;
+                for (NvdCve cve : cves) {
+                    if (cve.cveId() != null && found.stream().noneMatch(x -> cve.cveId().equals(x.cveId()))) found.add(cve);
+                }
+            }
+        } catch (Exception e) {
+            failed = true;
+            log.warn("[Enrich] NVD CPE lookup failed for {}:{} — {}", name, version, e.getMessage());
+        }
+        return new AdvisoryFetchResult<>(found, failed, matchedCpe);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/util/LogoImageNormalizer.java b/src/main/java/com/salkcoding/oswl/util/LogoImageNormalizer.java
new file mode 100644
index 00000000..ee138e25
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/util/LogoImageNormalizer.java
@@ -0,0 +1,99 @@
+package com.salkcoding.oswl.util;
+
+import javax.imageio.ImageIO;
+import java.awt.Graphics2D;
+import java.awt.RenderingHints;
+import java.awt.image.BufferedImage;
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.util.Base64;
+import java.util.Locale;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Validates and downscales user-supplied logo images (stored as base64 data URIs).
+ * The logos are only ever rendered at a few dozen CSS pixels (report header/cover, mail
+ * templates), so anything beyond {@link #MAX_DIMENSION} on the long edge is wasted bytes
+ * in every report page and mail — the image is decoded, downscaled, and re-encoded at
+ * save time instead of shipping the original multi-megabyte upload to every render.
+ */
+public final class LogoImageNormalizer {
+
+    /** Long-edge cap in pixels — ~3x headroom over the largest render size (76px cover logo). */
+    public static final int MAX_DIMENSION = 256;
+
+    private static final Pattern DATA_URI =
+            Pattern.compile("^data:image/([a-z0-9.+-]+);base64,(.+)$", Pattern.CASE_INSENSITIVE | Pattern.DOTALL);
+
+    private LogoImageNormalizer() {}
+
+    /**
+     * Returns the data URI to persist: the input unchanged when it already fits, otherwise a
+     * downscaled re-encode (PNG when the image has alpha or the source format isn't
+     * re-encodable, JPEG otherwise). Animated formats keep only their first frame once
+     * resized; images small enough to keep are returned byte-identical (animation and
+     * metadata untouched).
+     *
+     * @throws IllegalArgumentException when the string is not a decodable image data URI
+     */
+    public static String normalize(String dataUri) {
+        Matcher m = DATA_URI.matcher(dataUri.strip());
+        if (!m.matches()) {
+            throw new IllegalArgumentException("Logo must be a base64 image data URI");
+        }
+        String subtype = m.group(1).toLowerCase(Locale.ROOT);
+        final byte[] bytes;
+        try {
+            bytes = Base64.getDecoder().decode(m.group(2));
+        } catch (IllegalArgumentException e) {
+            throw new IllegalArgumentException("Logo image data URI is not valid base64", e);
+        }
+        final BufferedImage image;
+        try {
+            image = ImageIO.read(new ByteArrayInputStream(bytes));
+        } catch (Exception e) {
+            throw new IllegalArgumentException("Logo image could not be decoded", e);
+        }
+        if (image == null) {
+            throw new IllegalArgumentException("Logo image could not be decoded");
+        }
+
+        int w = image.getWidth();
+        int h = image.getHeight();
+        if (Math.max(w, h) <= MAX_DIMENSION) {
+            return dataUri;
+        }
+
+        double scale = (double) MAX_DIMENSION / Math.max(w, h);
+        int newW = Math.max(1, (int) Math.round(w * scale));
+        int newH = Math.max(1, (int) Math.round(h * scale));
+
+        boolean keepAlpha = image.getColorModel().hasAlpha() || "png".equals(subtype) || "gif".equals(subtype);
+        BufferedImage scaled = new BufferedImage(newW, newH,
+                keepAlpha ? BufferedImage.TYPE_INT_ARGB : BufferedImage.TYPE_INT_RGB);
+        Graphics2D g = scaled.createGraphics();
+        try {
+            g.setRenderingHint(RenderingHints.KEY_INTERPOLATION, RenderingHints.VALUE_INTERPOLATION_BICUBIC);
+            g.setRenderingHint(RenderingHints.KEY_RENDERING, RenderingHints.VALUE_RENDER_QUALITY);
+            g.setRenderingHint(RenderingHints.KEY_ANTIALIASING, RenderingHints.VALUE_ANTIALIAS_ON);
+            g.drawImage(image, 0, 0, newW, newH, null);
+        } finally {
+            g.dispose();
+        }
+
+        String format = keepAlpha ? "png" : (ImageIO.getImageWritersByFormatName(subtype).hasNext() ? subtype : "png");
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        try {
+            if (!ImageIO.write(scaled, format, out)) {
+                // No writer for the source format — fall back to PNG (always available).
+                format = "png";
+                out.reset();
+                ImageIO.write(scaled, format, out);
+            }
+        } catch (java.io.IOException e) {
+            throw new IllegalArgumentException("Logo image could not be re-encoded", e);
+        }
+        return "data:image/" + format + ";base64," + Base64.getEncoder().encodeToString(out.toByteArray());
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/util/VersionOrder.java b/src/main/java/com/salkcoding/oswl/util/VersionOrder.java
index 7cfa4e17..fe334214 100644
--- a/src/main/java/com/salkcoding/oswl/util/VersionOrder.java
+++ b/src/main/java/com/salkcoding/oswl/util/VersionOrder.java
@@ -1,6 +1,6 @@
 package com.salkcoding.oswl.util;
 
-import com.salkcoding.oswl.domain.entity.ScanResult;
+import com.salkcoding.oswl.domain.entity.scan.ScanResult;
 
 import java.util.Comparator;
 import java.util.List;
diff --git a/src/main/java/com/salkcoding/oswl/vdb/ApkVersionComparator.java b/src/main/java/com/salkcoding/oswl/vdb/ApkVersionComparator.java
new file mode 100644
index 00000000..3ff31c31
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/vdb/ApkVersionComparator.java
@@ -0,0 +1,116 @@
+package com.salkcoding.oswl.vdb;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * Alpine {@code apk} package version comparator — Alpine's OSV advisories carry
+ * only {@code ECOSYSTEM}-typed ranges (no enumerated {@code versions[]}), and apk's version
+ * scheme isn't SemVer, so {@link SimpleVersionComparator} can't be reused for it (Debian/Ubuntu
+ * needed no comparator at all — OSV enumerates their {@code versions[]} directly).
+ *
+ * 
    Grammar handled, in the order apk itself defines it: {@code N(.N)*} numeric segments, an
+ * optional single trailing letter, an optional {@code _suffix[num]} (one of alpha/beta/pre/rc/
+ * cvs/svn/git/hg/p), and an optional {@code -rN} revision. Comparison order:
+ * 
      
+ *   
    1. numeric segments, compared as integers (not strings) left to right
      2. 
+ *   
    2. the trailing letter, if any — absent sorts below present ({@code 1.0 < 1.0a})
      3. 
+ *   
    3. the {@code _suffix}'s rank: alpha < beta < pre < rc < (no suffix) < cvs
+ *       < svn < git < hg < p, then its optional trailing number
      4. 
+ *   
    4. the {@code -rN} revision (defaults to 0 when omitted, so {@code 1.1.1l} and
+ *       {@code 1.1.1l-r0} compare equal)
      5. 
+ * 
    
+ *
+ * 
    Any version this grammar doesn't match throws {@link IllegalArgumentException} — callers
+ * must treat that as "unresolved coverage", never as "not affected", the same contract
+ * {@link SimpleVersionComparator} already uses.
+ */
+final class ApkVersionComparator {
+
+    // The underscore before the suffix word is optional: real OSV advisory data for Alpine
+    // renders e.g. "3.3.3p1-r3" without it (letter directly followed by the suffix's own
+    // number), not apk-tools' own canonical "_p1" form — both must parse to the same suffix.
+    private static final Pattern APK_VERSION = Pattern.compile(
+            "^(?\\d+(?:\\.\\d+)*)"
+                    + "(?:_?(?alpha|beta|pre|rc|cvs|svn|git|hg|p)(?\\d*)"
+                    + "|(?[a-z]))?"
+                    + "(?:-r(?\\d+))?$");
+
+    /** Suffix rank — "no suffix" sits between rc and cvs, per apk's own ordering. */
+    private static final Map SUFFIX_RANK = Map.of(
+            "alpha", 0, "beta", 1, "pre", 2, "rc", 3, "cvs", 5, "svn", 6, "git", 7, "hg", 8, "p", 9);
+    private static final int NO_SUFFIX_RANK = 4;
+
+    private ApkVersionComparator() {}
+
+    /** {@code true} if {@code introduced <= version < fixed} (fixed may be null = unbounded above). */
+    static boolean inRange(String version, String introduced, String fixed) {
+        if (introduced != null && compare(version, introduced) < 0) return false;
+        if (fixed != null && compare(version, fixed) >= 0) return false;
+        return true;
+    }
+
+    static int compare(String a, String b) {
+        Parsed pa = parse(a);
+        Parsed pb = parse(b);
+
+        int numCmp = compareNums(pa.nums, pb.nums);
+        if (numCmp != 0) return numCmp;
+
+        int letterCmp = Integer.compare(
+                pa.letter == null ? -1 : pa.letter,
+                pb.letter == null ? -1 : pb.letter);
+        if (letterCmp != 0) return letterCmp;
+
+        int suffixRankCmp = Integer.compare(pa.suffixRank, pb.suffixRank);
+        if (suffixRankCmp != 0) return suffixRankCmp;
+
+        int suffixNumCmp = Integer.compare(pa.suffixNum, pb.suffixNum);
+        if (suffixNumCmp != 0) return suffixNumCmp;
+
+        return Integer.compare(pa.revision, pb.revision);
+    }
+
+    private static int compareNums(List a, List b) {
+        int n = Math.max(a.size(), b.size());
+        for (int i = 0; i < n; i++) {
+            int va = i < a.size() ? a.get(i) : 0;
+            int vb = i < b.size() ? b.get(i) : 0;
+            int cmp = Integer.compare(va, vb);
+            if (cmp != 0) return cmp;
+        }
+        return 0;
+    }
+
+    private record Parsed(List nums, Character letter, int suffixRank, int suffixNum, int revision) {}
+
+    private static Parsed parse(String version) {
+        String v = version.strip();
+        if (v.startsWith("v") || v.startsWith("V")) v = v.substring(1);
+        Matcher m = APK_VERSION.matcher(v);
+        if (!m.matches()) {
+            throw new IllegalArgumentException("Unparseable apk version: " + version);
+        }
+
+        List nums = new ArrayList<>();
+        for (String seg : m.group("nums").split("\\.")) {
+            nums.add(Integer.parseInt(seg));
+        }
+
+        String letterGroup = m.group("letter");
+        Character letter = letterGroup == null ? null : letterGroup.charAt(0);
+
+        String suffix = m.group("suffix");
+        int suffixRank = suffix == null ? NO_SUFFIX_RANK : SUFFIX_RANK.get(suffix);
+        String suffixNumGroup = m.group("suffixnum");
+        int suffixNum = (suffixNumGroup == null || suffixNumGroup.isEmpty()) ? 0 : Integer.parseInt(suffixNumGroup);
+
+        String revGroup = m.group("rev");
+        int revision = revGroup == null ? 0 : Integer.parseInt(revGroup);
+
+        return new Parsed(nums, letter, suffixRank, suffixNum, revision);
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/vdb/DepsDevSource.java b/src/main/java/com/salkcoding/oswl/vdb/DepsDevSource.java
index c0fbdb7b..7f4ef45d 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/DepsDevSource.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/DepsDevSource.java
@@ -23,8 +23,8 @@
 import java.util.concurrent.TimeUnit;
 
 /**
- * deps.dev version + advisory lookups, targeted at a wanted-list (E6) — deps.dev has no bulk dump
- * (E5.2), so unlike OSV/EPSS/KEV this source is skipped entirely without {@code --wanted}.
+ * deps.dev version + advisory lookups, targeted at a wanted-list — deps.dev has no bulk dump,
+ * so unlike OSV/EPSS/KEV this source is skipped entirely without {@code --wanted}.
  * GetVersion/GetAdvisory shapes and the package-name percent-encoding rules mirror the live
  * {@code DepsDevClient} exactly (kept independent here so this plain-Java CLI has no dependency on
  * the Spring-managed client).
@@ -33,7 +33,7 @@
  * {@code scorecardScore} — each needs 1-2 extra API calls per package (GetPackage / GetProject),
  * which multiplies request count across a wanted-list of possibly thousands of components. The
  * offline snapshot's {@code SnapshotVersion} fields for these are nullable, so this is a
- * completeness/runtime trade-off, not a schema break — see E5's implementation notes.
+ * completeness/runtime trade-off, not a schema break.
  */
 final class DepsDevSource {
 
@@ -56,18 +56,31 @@ record VersionRecord(String ecosystem, String name, String version,
     record AdvisoryRecord(String ghsaId, String title, List aliases,
                            Double cvss3Score, String cvss3Vector) {}
 
-    record Result(List versions, List advisories, int failedVersionLookups) {}
+    record Result(List versions, List advisories, int failedVersionLookups,
+                  Map skippedUnsupportedSystems) {}
 
-    /** systems deps.dev actually supports; anything else in the wanted-list is silently skipped here. */
+    /**
+     * Systems deps.dev actually supports; anything else in the wanted-list is skipped here, and
+     * the skip is counted per system in {@link Result#skippedUnsupportedSystems()} so the reason
+     * ("deps.dev has no data for this system") can be recorded in the bundle's meta.json instead
+     * of the components silently missing from depsdev.jsonl.
+     */
     private static final Set SUPPORTED = Set.of("MAVEN", "NPM", "PYPI", "GO", "NUGET", "CARGO", "RUBYGEMS");
 
     Result fetch(List wanted) {
-        List targets = wanted.stream()
-                .filter(w -> SUPPORTED.contains(w.ecosystem().toUpperCase(java.util.Locale.ROOT)))
-                .toList();
+        Map skippedBySystem = new LinkedHashMap<>();
+        List targets = new ArrayList<>();
+        for (WantedComponent w : wanted) {
+            String system = w.ecosystem().toUpperCase(java.util.Locale.ROOT);
+            if (SUPPORTED.contains(system)) {
+                targets.add(w);
+            } else {
+                skippedBySystem.merge(system, 1, Integer::sum);
+            }
+        }
         System.err.println("[oswl-vdb] deps.dev: querying GetVersion for " + targets.size()
                 + " components (of " + wanted.size() + " wanted, " + (wanted.size() - targets.size())
-                + " on an unsupported deps.dev system)");
+                + " on an unsupported deps.dev system" + (skippedBySystem.isEmpty() ? "" : ": " + skippedBySystem) + ")");
 
         ExecutorService pool = Executors.newFixedThreadPool(CONCURRENCY);
         List> futures = new ArrayList<>(targets.size());
@@ -105,7 +118,7 @@ Result fetch(List wanted) {
                     // one bad advisory id must not fail the whole build
                 }
             }
-            return new Result(versions, advisories, failed);
+            return new Result(versions, advisories, failed, skippedBySystem);
         } finally {
             pool.shutdown();
         }
diff --git a/src/main/java/com/salkcoding/oswl/vdb/EpssSource.java b/src/main/java/com/salkcoding/oswl/vdb/EpssSource.java
index 9a9595fd..e2c05706 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/EpssSource.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/EpssSource.java
@@ -13,7 +13,7 @@
 
 /**
  * FIRST.org EPSS bulk scores CSV (gzip), fetched in full (~350k rows as of 2026) — not scoped to
- * a wanted-list; the plan (E5.2) notes this is the practical alternative to the query API used by
+ * a wanted-list; this is the practical alternative to the query API used by
  * the live {@code EpssClient}, which is per-CVE and unsuitable for a bulk builder.
  *
  * 
    Reconfirmed at implementation time (the plan's own instruction — feeds move):
diff --git a/src/main/java/com/salkcoding/oswl/vdb/GitHubAdvisorySource.java b/src/main/java/com/salkcoding/oswl/vdb/GitHubAdvisorySource.java
new file mode 100644
index 00000000..c7895dab
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/vdb/GitHubAdvisorySource.java
@@ -0,0 +1,81 @@
+package com.salkcoding.oswl.vdb;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.client.GitHubAdvisoryClient;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVuln;
+
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * Builds per-component {@link SnapshotVuln} maps from GitHub Security Advisory GraphQL.
+ * Mirrors the live {@link GitHubAdvisoryClient} semantics: one query per package, then
+ * version-range filtering so only advisories affecting the wanted version are kept.
+ */
+final class GitHubAdvisorySource {
+
+    private final ObjectMapper mapper;
+
+    GitHubAdvisorySource(ObjectMapper mapper) {
+        this.mapper = mapper;
+    }
+
+    record Result(Map> vulnsByComponentKey) {}
+
+    Result fetch(List wanted, String token, String apiBase) {
+        if (token == null || token.isBlank()) {
+            System.err.println("[oswl-vdb] github-advisory: no token configured — skipping");
+            return new Result(Map.of());
+        }
+        GitHubAdvisoryClient client = new GitHubAdvisoryClient(
+                null, false, token, apiBase, Duration.ofSeconds(5), Duration.ofSeconds(20));
+        Map> result = new LinkedHashMap<>();
+        int done = 0;
+        for (WantedComponent w : wanted) {
+            done++;
+            if (done % 50 == 0) {
+                System.err.println("[oswl-vdb] github-advisory: " + done + "/" + wanted.size());
+            }
+            String key = AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
+            if (key == null) continue;
+            try {
+                List advisories =
+                        client.findByPackage(w.ecosystem(), w.name(), w.version());
+                if (advisories.isEmpty()) continue;
+                List vulns = new ArrayList<>(advisories.size());
+                for (GitHubAdvisoryClient.GitHubAdvisory adv : advisories) {
+                    vulns.add(toSnapshotVuln(adv));
+                }
+                result.put(key, vulns);
+            } catch (Exception e) {
+                System.err.println("[oswl-vdb] github-advisory lookup failed for " + w.name() + "@" + w.version()
+                        + ": " + e.getMessage());
+            }
+        }
+        System.err.println("[oswl-vdb] github-advisory: " + result.size() + " component(s) with advisories");
+        return new Result(result);
+    }
+
+    private static SnapshotVuln toSnapshotVuln(GitHubAdvisoryClient.GitHubAdvisory adv) {
+        return new SnapshotVuln(
+                adv.ghsaId(),
+                adv.cveId(),
+                adv.summary(),
+                adv.fixVersion(),
+                null, // GitHub Advisory does not expose CWE in this GraphQL fragment
+                severityName(adv.severity()),
+                adv.cvssScore(),
+                adv.cvss3Vector(),
+                null // GitHub matches are exact package matches, not CPE inference
+        );
+    }
+
+    private static String severityName(RiskLevel severity) {
+        return severity != null && severity != RiskLevel.NONE ? severity.name() : null;
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/vdb/HttpCache.java b/src/main/java/com/salkcoding/oswl/vdb/HttpCache.java
index 9c734220..1dfa25ea 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/HttpCache.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/HttpCache.java
@@ -9,14 +9,18 @@
 import java.nio.file.Path;
 import java.time.Duration;
 import java.time.Instant;
+import java.time.LocalDate;
+import java.time.ZoneOffset;
+import java.time.format.DateTimeFormatter;
+import java.time.format.DateTimeParseException;
 
 /**
- * E5's "재실행 가능성" requirement: caches downloaded upstream bytes under {@code --cache-dir} so a
+ * Caches downloaded upstream bytes under {@code --cache-dir} so a
  * re-run of {@code oswl-vdb build} (e.g. after tweaking {@code --wanted}) doesn't re-download
  * multi-hundred-MB OSV dumps. Entries older than {@link #MAX_AGE} are treated as stale and
  * re-fetched; with no {@code --cache-dir}, every call goes straight to the network.
  *
- * 
    {@code --offline-sources 
    } (E5) uses this same class in {@code offlineOnly} mode: the
+ * 
    {@code --offline-sources 
    } uses this same class in {@code offlineOnly} mode: the
  * directory is treated exactly like a cache dir except a miss is a hard error instead of a
  * network fallback — the whole point is a build that never touches the network. The expected
  * filenames are this class's own cache-key convention, e.g. {@code osv-npm-all.zip},
@@ -43,18 +47,35 @@ final class HttpCache {
         this.offlineOnly = offlineOnly;
     }
 
+    /**
+     * The upstream's own {@code Last-Modified} date, when the caller needs to know how fresh the
+     * fetched content actually is rather than assuming "today" — a bulk dump can sit unchanged
+     * on the server for a long time (verified: OSV's Debian/Ubuntu {@code all.zip} dumps haven't
+     * moved since October 2024, while npm's updates same-day) and a source that just stamps
+     * {@code LocalDate.now()} would silently defeat the air-gapped staleness-warning system.
+     * {@code lastModified} is {@code null} when unavailable (server didn't send the header, or a
+     * cache hit predating this field's introduction with no sidecar file) — callers should treat
+     * that as "freshness unknown", not "fresh".
+     */
+    record FetchResult(byte[] body, LocalDate lastModified) {}
+
     byte[] getOrFetch(String cacheKey, String url) throws IOException, InterruptedException {
+        return getOrFetchWithLastModified(cacheKey, url).body();
+    }
+
+    FetchResult getOrFetchWithLastModified(String cacheKey, String url) throws IOException, InterruptedException {
+        Path sidecar = cacheDir != null ? cacheDir.resolve(cacheKey + ".lastmodified") : null;
         if (cacheDir != null) {
             Path cached = cacheDir.resolve(cacheKey);
             if (Files.isRegularFile(cached)) {
                 if (offlineOnly) {
                     System.err.println("[oswl-vdb] offline-sources hit: " + cacheKey);
-                    return Files.readAllBytes(cached);
+                    return new FetchResult(Files.readAllBytes(cached), readSidecar(sidecar));
                 }
                 Instant mtime = Files.getLastModifiedTime(cached).toInstant();
                 if (Duration.between(mtime, Instant.now()).compareTo(MAX_AGE) < 0) {
                     System.err.println("[oswl-vdb] cache hit: " + cacheKey);
-                    return Files.readAllBytes(cached);
+                    return new FetchResult(Files.readAllBytes(cached), readSidecar(sidecar));
                 }
             }
         }
@@ -77,10 +98,36 @@ byte[] getOrFetch(String cacheKey, String url) throws IOException, InterruptedEx
             throw new IOException("Fetch " + url + " returned HTTP " + response.statusCode());
         }
         byte[] body = response.body();
+        LocalDate lastModified = parseLastModified(response.headers().firstValue("Last-Modified").orElse(null));
         if (cacheDir != null) {
             Files.createDirectories(cacheDir);
             Files.write(cacheDir.resolve(cacheKey), body);
+            if (lastModified != null && sidecar != null) {
+                Files.writeString(sidecar, lastModified.toString());
+            }
+        }
+        return new FetchResult(body, lastModified);
+    }
+
+    private static LocalDate readSidecar(Path sidecar) {
+        if (sidecar == null || !Files.isRegularFile(sidecar)) {
+            return null;
+        }
+        try {
+            return LocalDate.parse(Files.readString(sidecar).strip());
+        } catch (IOException | DateTimeParseException e) {
+            return null;
+        }
+    }
+
+    private static LocalDate parseLastModified(String httpDate) {
+        if (httpDate == null || httpDate.isBlank()) {
+            return null;
+        }
+        try {
+            return LocalDate.parse(httpDate, DateTimeFormatter.RFC_1123_DATE_TIME.withZone(ZoneOffset.UTC));
+        } catch (DateTimeParseException e) {
+            return null;
         }
-        return body;
     }
 }
diff --git a/src/main/java/com/salkcoding/oswl/vdb/NvdSource.java b/src/main/java/com/salkcoding/oswl/vdb/NvdSource.java
new file mode 100644
index 00000000..43fffa26
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/vdb/NvdSource.java
@@ -0,0 +1,96 @@
+package com.salkcoding.oswl.vdb;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.salkcoding.oswl.client.CpeNameMapper;
+import com.salkcoding.oswl.client.NvdClient;
+import com.salkcoding.oswl.domain.enums.RiskLevel;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVuln;
+
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Builds per-component {@link SnapshotVuln} maps from the NVD 2.0 REST API using CPE-based
+ * lookups. Only components on CPE-applicable ecosystems ({@code CONAN}, {@code VCPKG},
+ * {@code SYSTEM}) are queried — package-manager coordinates are covered by OSV/deps.dev/GitHub
+ * Advisory. Matches carry the confidence grade returned by {@link CpeNameMapper} so the UI can
+ * flag low-confidence CPE hits for manual review.
+ */
+final class NvdSource {
+
+    private final ObjectMapper mapper;
+
+    NvdSource(ObjectMapper mapper) {
+        this.mapper = mapper;
+    }
+
+    record Result(Map> vulnsByComponentKey) {}
+
+    Result fetch(List wanted, String apiKey) {
+        NvdClient client = new NvdClient(
+                null, false, apiKey, Duration.ofSeconds(5), Duration.ofSeconds(20));
+        Map> result = new LinkedHashMap<>();
+        int done = 0;
+        for (WantedComponent w : wanted) {
+            done++;
+            if (done % 50 == 0) {
+                System.err.println("[oswl-vdb] nvd: " + done + "/" + wanted.size());
+            }
+            String key = AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
+            if (key == null) continue;
+            if (!isCpeEcosystem(w.ecosystem())) continue;
+            if (w.version() == null || w.version().isBlank()) continue;
+            try {
+                List candidates = CpeNameMapper.infer(w.name(), w.version());
+                List vulns = new ArrayList<>();
+                for (CpeNameMapper.CpeCandidate c : candidates) {
+                    String cpeName = String.format(Locale.ROOT, "cpe:2.3:a:%s:%s:%s:*:*:*:*:*:*:*",
+                            c.vendor(), c.product(), c.version());
+                    List cves = client.findByCpeName(cpeName, c.confidence());
+                    for (NvdClient.NvdCve nvd : cves) {
+                        vulns.add(toSnapshotVuln(nvd));
+                    }
+                }
+                if (!candidates.isEmpty()) {
+                    result.put(key, vulns);
+                }
+            } catch (Exception e) {
+                System.err.println("[oswl-vdb] nvd lookup failed for " + w.name() + "@" + w.version()
+                        + ": " + e.getMessage());
+            }
+        }
+        System.err.println("[oswl-vdb] nvd: " + result.size() + " component(s) with completed queries");
+        return new Result(result);
+    }
+
+    private static SnapshotVuln toSnapshotVuln(NvdClient.NvdCve nvd) {
+        return new SnapshotVuln(
+                null, // OSV-style id — NVD results are CVE-only
+                nvd.cveId(),
+                nvd.description(),
+                null, // NVD CPE lookup does not provide a fix version
+                null, // CWE is not extracted in this path
+                severityName(nvd.severity()),
+                nvd.cvssScore(),
+                nvd.cvss3Vector(),
+                nvd.matchConfidence() != null ? nvd.matchConfidence().name() : null
+        );
+    }
+
+    private static String severityName(RiskLevel severity) {
+        return severity != null && severity != RiskLevel.NONE ? severity.name() : null;
+    }
+
+    private static boolean isCpeEcosystem(String ecosystem) {
+        if (ecosystem == null) return false;
+        return switch (ecosystem.strip().toUpperCase(Locale.ROOT)) {
+            case "CONAN", "VCPKG", "SYSTEM" -> true;
+            default -> false;
+        };
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/vdb/OsvBulkSource.java b/src/main/java/com/salkcoding/oswl/vdb/OsvBulkSource.java
index d20a9be2..0ecbabcf 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/OsvBulkSource.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/OsvBulkSource.java
@@ -2,8 +2,9 @@
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotVuln;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVuln;
+import com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService;
 
 import java.io.ByteArrayInputStream;
 import java.time.LocalDate;
@@ -18,20 +19,51 @@
 
 /**
  * OSV bulk vulnerability dumps (per-ecosystem {@code all.zip} on the public GCS bucket), re-indexed
- * from vuln-unit to component-unit against a wanted-list (E5.3/E6 — full re-indexing without a
- * wanted-list is a combinatorial explosion the plan explicitly rules out).
+ * from vuln-unit to component-unit against a wanted-list — full re-indexing without a
+ * wanted-list is a combinatorial explosion, so it is deliberately out of scope.
  *
  * 
    Coverage: an {@code affected[]} entry is resolved via its enumerated {@code versions[]} list
  * when present (exact match — always reliable), otherwise via a best-effort SEMVER range check
  * ({@link SimpleVersionComparator}) which can fail to parse exotic version strings. Anything
  * neither path can confidently resolve is never silently treated as "not affected" — it's
- * counted in {@link Result#unresolvedComponentCount()} and surfaced in the bundle's
- * {@code meta.json} coverage stats, per the plan's explicit requirement that "no data" and
- * "confirmed clean" must stay distinguishable.
+ * counted in {@code unresolvedKeys} and surfaced in the bundle's {@code meta.json} coverage
+ * stats, per the plan's explicit requirement that "no data" and "confirmed clean" must stay
+ * distinguishable.
+ *
+ * 
    Debian/Ubuntu's bulk dumps are stale — this is a real, currently-unavoidable gap, not a
+ * bug in this class. Verified against the live {@code osv-vulnerabilities} GCS bucket
+ * (2026-08-13): {@code Debian:11/all.zip} and {@code Ubuntu:22.04:LTS/all.zip} both carry an HTTP
+ * {@code Last-Modified} of October 2024 — roughly 22 months old at the time of writing — while
+ * {@code npm/all.zip} updates same-day. A cross-check against OSV's live query API for the exact
+ * same package/version found 53 CVEs online vs. 27 in the bulk dump, and every one of the 26
+ * missing entries turned out to be genuinely absent from the downloaded {@code .json} files
+ * (confirmed by direct inspection, not a parsing miss on this class's part) — i.e. the gap is
+ * OSV's bulk export for these ecosystems having gone stale, not anything resolvable here. The
+ * fetched {@code asOfByBucket} date now reflects the real upstream {@code Last-Modified} (see
+ * {@link HttpCache#getOrFetchWithLastModified}), so the existing air-gapped staleness-warning
+ * system ({@code oswl.airgapped.staleness-warn-days}/{@code staleness-critical-days}) correctly
+ * flags Debian/Ubuntu coverage as critically stale rather than reporting it as current — that
+ * warning is the honest, currently-correct outcome, not something to suppress. Revisit if OSV
+ * resumes publishing fresh Debian/Ubuntu bulk dumps.
  */
 final class OsvBulkSource {
 
-    /** our normalized ecosystem (AirgappedSnapshotService.componentKey's output) -> OSV GCS bucket folder. */
+    /**
+     * our normalized ecosystem (AirgappedSnapshotService.componentKey's output) -> OSV GCS bucket folder.
+     *
+     * 
    CONAN is deliberately absent: as of 2026-08 the OSV GCS bucket has no
+     * {@code ConanCenter/} folder at all (and osv.dev lists zero ConanCenter advisories), so
+     * there is no dump to fetch. Wanted CONAN components therefore fall through to
+     * {@code unresolved.jsonl} — surfaced as "no data" rather than "confirmed clean", which is
+     * the honest state until OSV starts publishing ConanCenter entries. Add the mapping here
+     * once {@code https://storage.googleapis.com/osv-vulnerabilities/ConanCenter/all.zip} exists.
+     *
+     * 
    Debian/Ubuntu (version-suffixed, e.g. {@code "DEBIAN:11"}) aren't listed here — there's
+     * one bucket per release, so a fixed map can't enumerate them. {@link #resolveBucket} handles
+     * those via {@link VulnerabilityEnrichmentService#osPackageOsvEcosystem}, the same
+     * internal↔OSV-casing reconstruction the live per-component query path already uses —
+     * kept as one shared implementation rather than a second hardcoded prefix table here.
+     */
     private static final Map ECOSYSTEM_TO_BUCKET = Map.of(
             "MAVEN", "Maven",
             "NPM", "npm",
@@ -39,7 +71,8 @@ final class OsvBulkSource {
             "GO", "Go",
             "CARGO", "crates.io",
             "NUGET", "NuGet",
-            "RUBYGEMS", "RubyGems"
+            "RUBYGEMS", "RubyGems",
+            "COMPOSER", "Packagist"
     );
 
     private final ObjectMapper mapper;
@@ -48,6 +81,25 @@ final class OsvBulkSource {
         this.mapper = mapper;
     }
 
+    /**
+     * Resolves an internal ecosystem tag to its OSV GCS bucket folder name, or {@code null} if
+     * there's nothing to fetch for it.
+     *
+     * 
    Alpine (like Debian/Ubuntu) isn't in the fixed map above because it's version-suffixed
+     * (one bucket per release, e.g. {@code "ALPINE:V3.14"} -> {@code "Alpine:v3.14"}) — falls
+     * through to {@code osPackageOsvEcosystem} the same way Debian/Ubuntu do. Unlike Debian/
+     * Ubuntu, Alpine's advisories carry no enumerated {@code versions[]}, only {@code ECOSYSTEM}-
+     * typed ranges, so {@link #resolveAffected} compares those with {@link ApkVersionComparator}
+     * instead of leaving them unresolved.
+     */
+    private static String resolveBucket(String ecosystem) {
+        String fixed = ECOSYSTEM_TO_BUCKET.get(ecosystem);
+        if (fixed != null) {
+            return fixed;
+        }
+        return VulnerabilityEnrichmentService.osPackageOsvEcosystem(ecosystem);
+    }
+
     /** {@code unresolvedKeys} (not just a count) so callers can tell resolved from unresolved
      * components — a wanted key that's neither in {@code vulnsByComponentKey} nor
      * {@code unresolvedKeys} was confirmed clean (its package never appeared in the ecosystem's
@@ -61,7 +113,7 @@ Result fetch(List wanted, Set ecosystemFilter, HttpCach
         Map>> byEcosystem = new LinkedHashMap<>();
         for (WantedComponent w : wanted) {
             String eco = AirgappedSnapshotService.normalizeEcosystem(w.ecosystem());
-            if (!ECOSYSTEM_TO_BUCKET.containsKey(eco)) continue;
+            if (resolveBucket(eco) == null) continue;
             if (ecosystemFilter != null && !ecosystemFilter.contains(eco)) continue;
             byEcosystem.computeIfAbsent(eco, e -> new LinkedHashMap<>())
                     .computeIfAbsent(w.name(), n -> new LinkedHashSet<>())
@@ -74,12 +126,29 @@ Result fetch(List wanted, Set ecosystemFilter, HttpCach
 
         for (Map.Entry>> ecoEntry : byEcosystem.entrySet()) {
             String ecosystem = ecoEntry.getKey();
-            String bucket = ECOSYSTEM_TO_BUCKET.get(ecosystem);
+            String bucket = resolveBucket(ecosystem);
             Map> namesWanted = ecoEntry.getValue();
             System.err.println("[oswl-vdb] OSV: fetching " + bucket + "/all.zip for " + namesWanted.size() + " wanted package name(s)");
-            byte[] zipBytes = cache.getOrFetch("osv-" + bucket.replace('/', '_') + "-all.zip",
+            // Debian/Ubuntu bucket names contain ':' (e.g. "Debian:11", "Ubuntu:22.04:LTS"), which
+            // is a reserved character in Windows filenames — sanitize the whole cache key, not
+            // just '/', so this doesn't only work on Linux/Mac dev machines.
+            HttpCache.FetchResult fetched = cache.getOrFetchWithLastModified(
+                    "osv-" + bucket.replaceAll("[^A-Za-z0-9.-]", "_") + "-all.zip",
                     "https://storage.googleapis.com/osv-vulnerabilities/" + bucket + "/all.zip");
-            asOfByBucket.put(ecosystem, LocalDate.now());
+            byte[] zipBytes = fetched.body();
+            // The upstream's own Last-Modified, not "today" — a bulk dump can sit unchanged on
+            // the server for a long time (Debian/Ubuntu's haven't moved since Oct 2024, verified
+            // 2026-08-13, while npm's updates same-day) and stamping "now" here would silently
+            // defeat the air-gapped staleness-warning system for exactly the ecosystems where it
+            // matters most. Falls back to "today" only if the server didn't send the header, with
+            // a visible warning rather than a silent optimistic guess.
+            LocalDate asOf = fetched.lastModified();
+            if (asOf == null) {
+                System.err.println("[oswl-vdb] WARNING: " + bucket + "/all.zip had no Last-Modified header — "
+                        + "assuming today's date for its freshness, which may overstate how current this data is");
+                asOf = LocalDate.now();
+            }
+            asOfByBucket.put(ecosystem, asOf);
 
             int entriesScanned = 0;
             try (ZipInputStream zis = new ZipInputStream(new ByteArrayInputStream(zipBytes))) {
@@ -129,7 +198,7 @@ private void processVulnEntry(byte[] content, String ecosystem, Map enumerated, JsonNode ranges) {
+    private static Boolean resolveAffected(String ecosystem, String version, Set enumerated, JsonNode ranges) {
         if (enumerated != null) {
             return enumerated.contains(version);
         }
         if (!ranges.isArray() || ranges.isEmpty()) {
             return false; // no versions[] and no ranges[] at all -> nothing says this version is affected
         }
+        // Alpine's OSV advisories are ECOSYSTEM-typed ranges only (no enumerated versions[] and
+        // apk's version scheme isn't SemVer/GIT) — everyone else's ECOSYSTEM-typed ranges
+        // (Debian/Ubuntu style) stay unresolved here because they're already resolved via
+        // enumerated versions[] before this method is ever reached for them.
+        boolean isAlpine = ecosystem.startsWith("ALPINE:");
         boolean anyUnresolved = false;
         for (JsonNode range : ranges) {
-            if (!"SEMVER".equals(range.path("type").asText(null))
-                    && !"GIT".equals(range.path("type").asText(null))) {
-                anyUnresolved = true; // ECOSYSTEM-typed ranges (Debian/Alpine style) — not applicable/comparable here
+            String rangeType = range.path("type").asText(null);
+            boolean semverOrGit = "SEMVER".equals(rangeType) || "GIT".equals(rangeType);
+            boolean apkEcosystemRange = isAlpine && "ECOSYSTEM".equals(rangeType);
+            if (!semverOrGit && !apkEcosystemRange) {
+                anyUnresolved = true; // ECOSYSTEM-typed ranges for non-Alpine ecosystems — not comparable here
                 continue;
             }
             String introduced = null;
@@ -170,10 +246,10 @@ private static Boolean resolveAffected(String version, Set enumerated, J
             }
             try {
                 if (fixedBoundaries.isEmpty()) {
-                    if (SimpleVersionComparator.inRange(version, introduced, null)) return true;
+                    if (inRange(apkEcosystemRange, version, introduced, null)) return true;
                 } else {
                     for (String fixed : fixedBoundaries) {
-                        if (SimpleVersionComparator.inRange(version, introduced, fixed)) return true;
+                        if (inRange(apkEcosystemRange, version, introduced, fixed)) return true;
                     }
                 }
             } catch (IllegalArgumentException e) {
@@ -183,6 +259,12 @@ private static Boolean resolveAffected(String version, Set enumerated, J
         return anyUnresolved ? null : false;
     }
 
+    private static boolean inRange(boolean apk, String version, String introduced, String fixed) {
+        return apk
+                ? ApkVersionComparator.inRange(version, introduced, fixed)
+                : SimpleVersionComparator.inRange(version, introduced, fixed);
+    }
+
     private static SnapshotVuln toSnapshotVuln(JsonNode vuln) {
         String osvId = vuln.path("id").asText(null);
         String summary = vuln.path("summary").asText(null);
diff --git a/src/main/java/com/salkcoding/oswl/vdb/PreviousBundleReader.java b/src/main/java/com/salkcoding/oswl/vdb/PreviousBundleReader.java
index 4785228a..22fce913 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/PreviousBundleReader.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/PreviousBundleReader.java
@@ -2,7 +2,7 @@
 
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import com.salkcoding.oswl.service.AirgappedSnapshotService;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService;
 
 import java.io.ByteArrayInputStream;
 import java.io.IOException;
@@ -18,7 +18,7 @@
 import java.util.zip.ZipInputStream;
 
 /**
- * E5 delta mode ({@code --since }): reads a previously built bundle so the
+ * Delta mode ({@code --since }): reads a previously built bundle so the
  * new build can be diffed against it — same key-extraction rules the app's own
  * {@code AirgappedSnapshotService} ingest methods use, kept in sync manually since this is a
  * plain-Java CLI class outside the service's package.
diff --git a/src/main/java/com/salkcoding/oswl/vdb/SimpleVersionComparator.java b/src/main/java/com/salkcoding/oswl/vdb/SimpleVersionComparator.java
index 1c0406eb..92281de3 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/SimpleVersionComparator.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/SimpleVersionComparator.java
@@ -7,9 +7,8 @@
 
 /**
  * Best-effort version comparator for OSV {@code SEMVER}-typed ranges, used only as a fallback when
- * an {@code affected[]} entry has no enumerated {@code versions[]} list (see E5.3 in
- * PERFORMANCE-AND-OFFLINE-PLAN.md — the plan explicitly calls "proper per-ecosystem version
- * comparison" a separate, substantial piece of work).
+ * an {@code affected[]} entry has no enumerated {@code versions[]} list — proper per-ecosystem
+ * version comparison is a separate, substantial piece of work.
  *
  * 
    This is a generic dotted-segment comparator (numeric segments compare numerically, other
  * segments lexicographically; a leading {@code v} is stripped), not a real SemVer/PEP440/
@@ -19,7 +18,7 @@
  * {@link IllegalArgumentException}, which callers must treat as "unresolved coverage", never as
  * "not affected".
  */
-final class SimpleVersionComparator {
+public final class SimpleVersionComparator {
 
     private static final Pattern SEGMENT = Pattern.compile("[0-9]+|[^0-9.+-]+|[.+-]");
 
@@ -32,7 +31,7 @@ static boolean inRange(String version, String introduced, String fixed) {
         return true;
     }
 
-    static int compare(String a, String b) {
+    public static int compare(String a, String b) {
         List sa = tokenize(a);
         List sb = tokenize(b);
         int n = Math.max(sa.size(), sb.size());
diff --git a/src/main/java/com/salkcoding/oswl/vdb/VdbBuildOptions.java b/src/main/java/com/salkcoding/oswl/vdb/VdbBuildOptions.java
index 3555a1a0..108bb940 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/VdbBuildOptions.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/VdbBuildOptions.java
@@ -10,7 +10,7 @@
  * 
    {@code --offline-sources 
    } builds entirely without network access, from a directory
  * pre-populated by an earlier {@code --cache-dir} build run while online (see {@link HttpCache}).
  * It only covers the bulk-dumpable sources (osv/epss/kev) — {@code depsdev} has no bulk dump at
- * all (E5.2) and is always skipped when this flag is set, regardless of {@code --sources}.
+ * all and is always skipped when this flag is set, regardless of {@code --sources}.
  */
 public record VdbBuildOptions(
         Path out,
@@ -19,9 +19,12 @@ public record VdbBuildOptions(
         Set ecosystems,
         Path cacheDir,
         Path since,
-        Path offlineSources
+        Path offlineSources,
+        String githubAdvisoryToken,
+        String githubApiBase,
+        String nvdApiKey
 ) {
-    static final List ALL_SOURCES = List.of("osv", "epss", "kev", "depsdev");
+    static final List ALL_SOURCES = List.of("osv", "epss", "kev", "depsdev", "github-advisory", "nvd");
 
     static VdbBuildOptions parse(List args) {
         Path out = null;
@@ -31,6 +34,9 @@ static VdbBuildOptions parse(List args) {
         Path cacheDir = null;
         Path since = null;
         Path offlineSources = null;
+        String githubAdvisoryToken = System.getenv("OSWL_GITHUB_ADVISORY_TOKEN");
+        String githubApiBase = System.getenv("OSWL_GITHUB_API_BASE");
+        String nvdApiKey = System.getenv("OSWL_NVD_API_KEY");
         String mode = "full";
         for (int i = 0; i < args.size(); i++) {
             String a = args.get(i);
@@ -57,6 +63,9 @@ static VdbBuildOptions parse(List args) {
                 }
                 case "--since" -> { since = Path.of(require(v, "--since")); i++; }
                 case "--offline-sources" -> { offlineSources = Path.of(require(v, "--offline-sources")); i++; }
+                case "--github-advisory-token" -> { githubAdvisoryToken = require(v, "--github-advisory-token"); i++; }
+                case "--github-api-base" -> { githubApiBase = require(v, "--github-api-base"); i++; }
+                case "--nvd-api-key" -> { nvdApiKey = require(v, "--nvd-api-key"); i++; }
                 default -> throw new IllegalArgumentException("Unknown option: " + a);
             }
         }
@@ -75,7 +84,8 @@ static VdbBuildOptions parse(List args) {
             mode = "delta"; // --since implies delta even if --mode wasn't spelled out
         }
         Path finalSince = mode.equals("delta") ? since : null;
-        return new VdbBuildOptions(out, wanted, sources, ecosystems, cacheDir, finalSince, offlineSources);
+        return new VdbBuildOptions(out, wanted, sources, ecosystems, cacheDir, finalSince, offlineSources,
+                githubAdvisoryToken, githubApiBase, nvdApiKey);
     }
 
     boolean isDelta() {
diff --git a/src/main/java/com/salkcoding/oswl/vdb/VdbBuilderCli.java b/src/main/java/com/salkcoding/oswl/vdb/VdbBuilderCli.java
index 49fe5bfa..301daf5d 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/VdbBuilderCli.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/VdbBuilderCli.java
@@ -19,7 +19,7 @@
 import java.util.zip.ZipInputStream;
 
 /**
- * E5: {@code oswl-vdb} — builds/verifies/inspects offline vulnerability-DB (VDB) bundles from
+ * {@code oswl-vdb} — builds/verifies/inspects offline vulnerability-DB (VDB) bundles from
  * live upstream sources (OSV, EPSS, CISA KEV, deps.dev), for import into an air-gapped OsWL
  * instance via {@code POST /api/admin/snapshot/import}.
  *
@@ -32,12 +32,12 @@
  *
  * 
    {@code --mode delta --since } diffs the newly-built full dataset
  * against a previous bundle key-by-key (see {@link PreviousBundleReader}/{@link VdbBundleWriter}):
- * only added/changed lines are written, plus a {@code "_deleted":true} marker (E2's existing
- * convention) for keys the previous bundle had that this build doesn't.
+ * only added/changed lines are written, plus a {@code "_deleted":true} marker (the existing
+ * delete-marker convention) for keys the previous bundle had that this build doesn't.
  *
  * 
    {@code --offline-sources 
    } builds entirely without network access from a directory
  * pre-populated by an earlier {@code --cache-dir} run — see {@link HttpCache}'s offline-only mode.
- * Only covers osv/epss/kev (deps.dev has no bulk dump at all, E5.2, so it's always skipped when
+ * Only covers osv/epss/kev (deps.dev has no bulk dump at all, so it's always skipped when
  * this flag is set).
  */
 public final class VdbBuilderCli {
@@ -111,7 +111,7 @@ private int build(VdbBuildOptions opts) throws Exception {
             System.err.println("[oswl-vdb] --offline-sources " + opts.offlineSources()
                     + " — no network calls will be made; only osv/epss/kev are covered");
             if (effectiveSources.contains("depsdev")) {
-                System.err.println("[oswl-vdb] WARNING: deps.dev has no bulk dump (E5.2), so it cannot be built "
+                System.err.println("[oswl-vdb] WARNING: deps.dev has no bulk dump, so it cannot be built "
                         + "offline — skipping depsdev despite --sources including it.");
                 effectiveSources = new java.util.LinkedHashSet<>(effectiveSources);
                 effectiveSources.remove("depsdev");
@@ -119,14 +119,14 @@ private int build(VdbBuildOptions opts) throws Exception {
         }
         boolean anyFailure = false;
 
-        Map> osvVulns = Map.of();
+        Map> osvVulns = Map.of();
         LocalDate osvAsOf = LocalDate.now();
         java.util.Set osvUnresolvedKeys = java.util.Set.of();
         java.util.Set osvProcessedEcosystems = java.util.Set.of();
         if (effectiveSources.contains("osv")) {
             if (wanted.isEmpty()) {
                 System.err.println("[oswl-vdb] WARNING: --sources includes osv but no --wanted was given — "
-                        + "OSV bulk dumps are vuln-indexed, not component-indexed (E5.3); without a wanted-list "
+                        + "OSV bulk dumps are vuln-indexed, not component-indexed; without a wanted-list "
                         + "there is no safe way to re-index them without a combinatorial explosion. Skipping osv.");
             } else {
                 try {
@@ -147,15 +147,17 @@ private int build(VdbBuildOptions opts) throws Exception {
 
         List depsdevVersions = List.of();
         List depsdevAdvisories = List.of();
+        Map depsdevSkippedSystems = Map.of();
         if (effectiveSources.contains("depsdev")) {
             if (wanted.isEmpty()) {
                 System.err.println("[oswl-vdb] WARNING: --sources includes depsdev but no --wanted was given — "
-                        + "deps.dev has no bulk dump (E5.2), only a per-package API. Skipping depsdev.");
+                        + "deps.dev has no bulk dump, only a per-package API. Skipping depsdev.");
             } else {
                 try {
                     DepsDevSource.Result r = new DepsDevSource(mapper).fetch(wanted);
                     depsdevVersions = r.versions();
                     depsdevAdvisories = r.advisories();
+                    depsdevSkippedSystems = r.skippedUnsupportedSystems();
                     if (r.failedVersionLookups() > 0) {
                         System.err.println("[oswl-vdb] deps.dev: " + r.failedVersionLookups() + " GetVersion lookups failed/not-found");
                     }
@@ -208,6 +210,7 @@ private int build(VdbBuildOptions opts) throws Exception {
         }
 
         new VdbBundleWriter(mapper).write(opts.out(), osvVulns, osvAsOf, depsdevVersions, depsdevAdvisories,
+                depsdevSkippedSystems,
                 epssScores, epssAsOf, kevIds, kevAsOf, unresolvedCount, wantedListInfo, unresolvedComponents, previous);
 
         System.err.println("[oswl-vdb] Wrote " + opts.out() + " (" + (opts.isDelta() ? "delta" : "full") + " mode)"
@@ -223,7 +226,7 @@ private int build(VdbBuildOptions opts) throws Exception {
 
     private record Resolution(int resolvedCount, List unresolved) {}
 
-    /** E6: a wanted component counts as "resolved" if OSV or deps.dev actually produced an answer
+    /** A wanted component counts as "resolved" if OSV or deps.dev actually produced an answer
      * for it — either found vulnerabilities, confirmed none, or resolved a deps.dev version. Only
      * genuinely unresolved (OSV range we couldn't evaluate, deps.dev lookup failed/skipped, or an
      * ecosystem OSV never even fetched a dump for) components are excluded — those are written to
@@ -237,15 +240,15 @@ private static Resolution partitionResolution(List wanted, java
                                       List depsdevVersions) {
         java.util.Set depsdevResolvedKeys = new java.util.HashSet<>();
         for (DepsDevSource.VersionRecord v : depsdevVersions) {
-            String key = com.salkcoding.oswl.service.AirgappedSnapshotService.componentKey(v.ecosystem(), v.name(), v.version());
+            String key = com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.componentKey(v.ecosystem(), v.name(), v.version());
             if (key != null) depsdevResolvedKeys.add(key);
         }
         int resolved = 0;
         List unresolved = new ArrayList<>();
         for (WantedComponent w : wanted) {
-            String key = com.salkcoding.oswl.service.AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
+            String key = com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
             if (key == null) continue;
-            String ecosystem = com.salkcoding.oswl.service.AirgappedSnapshotService.normalizeEcosystem(w.ecosystem());
+            String ecosystem = com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.normalizeEcosystem(w.ecosystem());
             boolean osvResolved = osvVulnKeys.contains(key)
                     || (osvProcessedEcosystems.contains(ecosystem) && !osvUnresolvedKeys.contains(key));
             if (osvResolved || depsdevResolvedKeys.contains(key)) {
diff --git a/src/main/java/com/salkcoding/oswl/vdb/VdbBundleWriter.java b/src/main/java/com/salkcoding/oswl/vdb/VdbBundleWriter.java
index d6b0bf36..ca0d34e0 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/VdbBundleWriter.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/VdbBundleWriter.java
@@ -3,7 +3,7 @@
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.node.ObjectNode;
-import com.salkcoding.oswl.service.AirgappedSnapshotService.SnapshotVuln;
+import com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.SnapshotVuln;
 
 import java.io.IOException;
 import java.nio.charset.StandardCharsets;
@@ -23,14 +23,14 @@
 import java.util.zip.ZipOutputStream;
 
 /**
- * Writes an {@code oswl-vdb} v2 bundle (E1 format) byte-for-byte compatible with what
+ * Writes an {@code oswl-vdb} v2 bundle byte-for-byte compatible with what
  * {@code AirgappedSnapshotService.importBundle()} expects — see that class's Javadoc for the
  * exact JSONL line schemas this mirrors.
  *
- * 
    E5 delta mode: when {@code previous} is given, each file's content is diffed key-by-key
+ * 
    Delta mode: when {@code previous} is given, each file's content is diffed key-by-key
  * against the previous bundle (see {@link PreviousBundleReader}) — only added/changed lines are
  * kept, and keys present in the previous bundle but absent from this build get a
- * {@code "_deleted":true} marker (E2's existing delete-marker convention), instead of writing
+ * {@code "_deleted":true} marker (the existing delete-marker convention), instead of writing
  * every source in full every time.
  */
 final class VdbBundleWriter {
@@ -45,7 +45,7 @@ final class VdbBundleWriter {
         this.mapper = mapper;
     }
 
-    /** E6: recorded in {@code meta.json} only when the build was scoped by {@code --wanted} — a
+    /** Recorded in {@code meta.json} only when the build was scoped by {@code --wanted} — a
      * v1-ignorant reader (or the app's own lenient JsonNode-based meta.json parser) simply never
      * sees these fields when absent, so this is not a schema break. */
     record WantedListInfo(String wantedListId, int wantedCount, int resolvedCount) {}
@@ -53,6 +53,7 @@ record WantedListInfo(String wantedListId, int wantedCount, int resolvedCount) {
     void write(Path out,
                Map> osvByComponentKey, LocalDate osvAsOf,
                List depsdevVersions, List depsdevAdvisories,
+               Map depsdevSkippedUnsupportedSystems,
                Map epssScores, LocalDate epssAsOf,
                java.util.Set kevCveIds, LocalDate kevAsOf,
                int unresolvedComponentCount, WantedListInfo wantedListInfo,
@@ -65,7 +66,7 @@ void write(Path out,
             node.put("ecosystem", w.ecosystem());
             node.put("name", w.name());
             node.put("version", w.version());
-            String key = com.salkcoding.oswl.service.AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
+            String key = com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.componentKey(w.ecosystem(), w.name(), w.version());
             if (key != null) unresolvedByKey.put(key, writeJson(node));
         }
 
@@ -92,7 +93,7 @@ void write(Path out,
             node.putArray("advisoryKeys").addAll(v.advisoryKeys().stream().map(s -> (JsonNode) mapper.valueToTree(s)).toList());
             node.put("isDefault", v.isDefault());
             if (v.deprecated() != null) node.put("deprecated", v.deprecated());
-            String key = com.salkcoding.oswl.service.AirgappedSnapshotService.componentKey(v.ecosystem(), v.name(), v.version());
+            String key = com.salkcoding.oswl.service.snapshot.AirgappedSnapshotService.componentKey(v.ecosystem(), v.name(), v.version());
             if (key != null) depsdevByKey.put(key, writeJson(node));
         }
         for (DepsDevSource.AdvisoryRecord a : depsdevAdvisories) {
@@ -147,12 +148,21 @@ void write(Path out,
         ObjectNode sources = meta.putObject("sources");
         putSourceMeta(sources, "osv", osvByKey.size(), osvAsOf, "osv.dev bulk dump");
         putSourceMeta(sources, "depsdev-version", depsdevVersions.size(), LocalDate.now(), "deps.dev api (wanted-list)");
+        if (!depsdevSkippedUnsupportedSystems.isEmpty()) {
+            // deps.dev covers only 7 systems (GO RUBYGEMS NPM CARGO MAVEN PYPI NUGET) — wanted
+            // components on any other system (e.g. COMPOSER, CONAN) were never queried, so their
+            // absence from depsdev.jsonl means "no data", not "no license/advisories".
+            ObjectNode skipped = ((ObjectNode) sources.get("depsdev-version"))
+                    .putObject("skippedUnsupportedSystems");
+            depsdevSkippedUnsupportedSystems.forEach(skipped::put);
+            skipped.put("_reason", "deps.dev does not support this system — component not queried");
+        }
         putSourceMeta(sources, "depsdev-advisory", depsdevAdvisories.size(), LocalDate.now(), "deps.dev api");
         putSourceMeta(sources, "epss", epssByKey.size(), epssAsOf, "epss current");
         putSourceMeta(sources, "kev", kevByKey.size(), kevAsOf, "cisa kev");
         if (!unresolvedByKey.isEmpty()) {
-            // E6: a distinct source (not folded into osv.jsonl) so the app's existing per-source
-            // status/import-result plumbing (E1/E2/E3) surfaces it automatically — no bespoke
+            // A distinct source (not folded into osv.jsonl) so the app's existing per-source
+            // status/import-result plumbing surfaces it automatically — no bespoke
             // "no data" wiring needed on the import side, just a label on the admin UI (see
             // AirgappedSnapshotService.SOURCE_UNRESOLVED / SnapshotAdminController).
             putSourceMeta(sources, "unresolved", unresolvedByKey.size(), LocalDate.now(),
@@ -164,7 +174,7 @@ void write(Path out,
             coverage.put("note", "These wanted components had at least one OSV range-typed "
                     + "affected[] entry this builder could not confidently evaluate (non-SEMVER "
                     + "range type, or an unparseable version string) — they are NOT necessarily "
-                    + "vulnerability-free, just unresolved. See E5.3 in PERFORMANCE-AND-OFFLINE-PLAN.md.");
+                    + "vulnerability-free, just unresolved.");
         }
         ObjectNode files = meta.putObject("files");
         putFileMeta(files, "osv.jsonl", osvContent, countLines(osvContent));
diff --git a/src/main/java/com/salkcoding/oswl/vdb/WantedComponent.java b/src/main/java/com/salkcoding/oswl/vdb/WantedComponent.java
index 34a3b270..55ec10d5 100644
--- a/src/main/java/com/salkcoding/oswl/vdb/WantedComponent.java
+++ b/src/main/java/com/salkcoding/oswl/vdb/WantedComponent.java
@@ -1,5 +1,5 @@
 package com.salkcoding.oswl.vdb;
 
-/** One (ecosystem, name, version) triple from a wanted-list (E6), as fed to {@code oswl-vdb build --wanted}. */
+/** One (ecosystem, name, version) triple from a wanted-list, as fed to {@code oswl-vdb build --wanted}. */
 public record WantedComponent(String ecosystem, String name, String version) {
 }
diff --git a/src/main/java/com/salkcoding/oswl/web/config/OpenApiConfig.java b/src/main/java/com/salkcoding/oswl/web/config/OpenApiConfig.java
index 98b306d4..53fbdea4 100644
--- a/src/main/java/com/salkcoding/oswl/web/config/OpenApiConfig.java
+++ b/src/main/java/com/salkcoding/oswl/web/config/OpenApiConfig.java
@@ -14,6 +14,7 @@
 public class OpenApiConfig {
 
     private static final String BEARER_SCHEME = "BearerAuth";
+    private static final String SCIM_BEARER_SCHEME = "ScimBearerAuth";
 
     @Bean
     public OpenAPI openAPI() {
@@ -52,6 +53,11 @@ public OpenAPI openAPI() {
                                 .type(SecurityScheme.Type.HTTP)
                                 .scheme("bearer")
                                 .bearerFormat("oswl_")
-                                .description("API key issued via POST /api/projects/{projectId}/keys")));
+                                .description("API key issued via POST /api/projects/{projectId}/keys"))
+                        .addSecuritySchemes(SCIM_BEARER_SCHEME, new SecurityScheme()
+                                .type(SecurityScheme.Type.HTTP)
+                                .scheme("bearer")
+                                .bearerFormat("oswl_")
+                                .description("Dedicated SCIM provisioning token issued via ApiKeyService#issueScimToken")));
     }
 }
diff --git a/src/main/java/com/salkcoding/oswl/web/config/WebMvcConfig.java b/src/main/java/com/salkcoding/oswl/web/config/WebMvcConfig.java
index 9a114f1a..f396069f 100644
--- a/src/main/java/com/salkcoding/oswl/web/config/WebMvcConfig.java
+++ b/src/main/java/com/salkcoding/oswl/web/config/WebMvcConfig.java
@@ -1,6 +1,8 @@
 package com.salkcoding.oswl.web.config;
 
+import com.fasterxml.jackson.databind.ObjectMapper;
 import com.salkcoding.oswl.web.interceptor.ApiKeyAuthInterceptor;
+import com.salkcoding.oswl.web.interceptor.ScimAuthInterceptor;
 import lombok.RequiredArgsConstructor;
 import org.springframework.context.annotation.Bean;
 import org.springframework.context.annotation.Configuration;
@@ -19,6 +21,7 @@
 public class WebMvcConfig implements WebMvcConfigurer {
 
     private final ApiKeyAuthInterceptor apiKeyAuthInterceptor;
+    private final ScimAuthInterceptor scimAuthInterceptor;
 
     // ── i18n configuration ───────────────────────────────────────────────
 
@@ -27,6 +30,11 @@ public class WebMvcConfig implements WebMvcConfigurer {
      * the browser's Accept-Language decides — Korean browsers start in Korean,
      * everything else falls back to English (messages.properties).
      */
+    @Bean
+    public ObjectMapper objectMapper() {
+        return new ObjectMapper();
+    }
+
     @Bean
     public LocaleResolver localeResolver() {
         // No setDefaultLocale: CookieLocaleResolver then honors Accept-Language
@@ -71,5 +79,9 @@ public void addInterceptors(InterceptorRegistry registry) {
                 .addPathPatterns("/api/scan/**")
                 // UI polling endpoint does not require an API key
                 .excludePathPatterns("/api/scan/*/status");
+
+        // Protect SCIM 2.0 provisioning endpoints with a dedicated bearer token scope
+        registry.addInterceptor(scimAuthInterceptor)
+                .addPathPatterns("/scim/v2/**");
     }
 }
diff --git a/src/main/java/com/salkcoding/oswl/web/filter/RequestContextLoggingFilter.java b/src/main/java/com/salkcoding/oswl/web/filter/RequestContextLoggingFilter.java
new file mode 100644
index 00000000..a7c635ee
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/web/filter/RequestContextLoggingFilter.java
@@ -0,0 +1,49 @@
+package com.salkcoding.oswl.web.filter;
+
+import jakarta.servlet.FilterChain;
+import jakarta.servlet.ServletException;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import org.slf4j.MDC;
+import org.springframework.security.authentication.AnonymousAuthenticationToken;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.web.filter.OncePerRequestFilter;
+
+import java.io.IOException;
+import java.util.UUID;
+
+/**
+ * Log correlation: stamps every request with a requestId (also echoed as the
+ * {@code X-Request-Id} response header) and, once authenticated, the current userId — both via
+ * MDC, so every log line for one HTTP request can be tied back together (see logback-spring.xml).
+ * Registered after {@code SecurityContextHolderFilter} (see SecurityConfig) so the authentication
+ * is already resolved from the session by the time userId is read.
+ */
+public class RequestContextLoggingFilter extends OncePerRequestFilter {
+
+    public static final String REQUEST_ID_HEADER = "X-Request-Id";
+    private static final String MDC_REQUEST_ID = "requestId";
+    private static final String MDC_USER_ID = "userId";
+
+    @Override
+    protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain)
+            throws ServletException, IOException {
+        String requestId = UUID.randomUUID().toString();
+        MDC.put(MDC_REQUEST_ID, requestId);
+        response.setHeader(REQUEST_ID_HEADER, requestId);
+
+        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
+        if (authentication != null && authentication.isAuthenticated()
+                && !(authentication instanceof AnonymousAuthenticationToken)) {
+            MDC.put(MDC_USER_ID, authentication.getName());
+        }
+
+        try {
+            filterChain.doFilter(request, response);
+        } finally {
+            MDC.remove(MDC_REQUEST_ID);
+            MDC.remove(MDC_USER_ID);
+        }
+    }
+}
diff --git a/src/main/java/com/salkcoding/oswl/web/interceptor/ApiKeyAuthInterceptor.java b/src/main/java/com/salkcoding/oswl/web/interceptor/ApiKeyAuthInterceptor.java
index 084d9b51..396cd60d 100644
--- a/src/main/java/com/salkcoding/oswl/web/interceptor/ApiKeyAuthInterceptor.java
+++ b/src/main/java/com/salkcoding/oswl/web/interceptor/ApiKeyAuthInterceptor.java
@@ -1,12 +1,12 @@
 package com.salkcoding.oswl.web.interceptor;
 
 import com.salkcoding.oswl.auth.service.AuditLogService;
-import com.salkcoding.oswl.domain.entity.ApiKey;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
 import com.salkcoding.oswl.exception.TooManyRequestsException;
 import com.salkcoding.oswl.exception.UnauthorizedException;
 import com.salkcoding.oswl.security.ClientIpResolver;
-import com.salkcoding.oswl.service.ApiKeyService;
-import com.salkcoding.oswl.service.ScanApiCredentialThrottleService;
+import com.salkcoding.oswl.service.apikey.ApiKeyService;
+import com.salkcoding.oswl.service.ingest.ScanApiCredentialThrottleService;
 import jakarta.servlet.http.HttpServletRequest;
 import jakarta.servlet.http.HttpServletResponse;
 import lombok.NonNull;
diff --git a/src/main/java/com/salkcoding/oswl/web/interceptor/ScimAuthInterceptor.java b/src/main/java/com/salkcoding/oswl/web/interceptor/ScimAuthInterceptor.java
new file mode 100644
index 00000000..f0936fe1
--- /dev/null
+++ b/src/main/java/com/salkcoding/oswl/web/interceptor/ScimAuthInterceptor.java
@@ -0,0 +1,69 @@
+package com.salkcoding.oswl.web.interceptor;
+
+import com.salkcoding.oswl.auth.service.AuditLogService;
+import com.salkcoding.oswl.domain.entity.apikey.ApiKey;
+import com.salkcoding.oswl.domain.enums.ApiKeyScope;
+import com.salkcoding.oswl.security.ClientIpResolver;
+import com.salkcoding.oswl.service.apikey.ApiKeyService;
+import jakarta.servlet.http.HttpServletRequest;
+import jakarta.servlet.http.HttpServletResponse;
+import lombok.NonNull;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Component;
+import org.springframework.web.servlet.HandlerInterceptor;
+
+/**
+ * Validates the Authorization: Bearer header for SCIM 2.0 endpoints.
+ * Only API keys whose scope is {@link ApiKeyScope#SCIM} are accepted.
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class ScimAuthInterceptor implements HandlerInterceptor {
+
+    public static final String ATTR_SCIM_API_KEY = "authenticatedScimApiKey";
+
+    private final ApiKeyService apiKeyService;
+    private final AuditLogService auditLogService;
+    private final ClientIpResolver clientIpResolver;
+
+    @Override
+    public boolean preHandle(@NonNull HttpServletRequest request,
+                             @NonNull HttpServletResponse response,
+                             @NonNull Object handler) throws Exception {
+        String clientIp = clientIpResolver.resolve(request);
+        String authHeader = request.getHeader("Authorization");
+
+        if (authHeader == null || !authHeader.startsWith("Bearer ")) {
+            onScimFailure(clientIp, "MISSING_OR_INVALID_HEADER", request.getRequestURI());
+            response.sendError(HttpServletResponse.SC_UNAUTHORIZED,
+                    "Missing or invalid Authorization header. Use: Authorization: Bearer ");
+            return false;
+        }
+
+        String rawToken = authHeader.substring(7).trim();
+        if (rawToken.isBlank()) {
+            onScimFailure(clientIp, "EMPTY_TOKEN", request.getRequestURI());
+            response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Empty SCIM token");
+            return false;
+        }
+
+        try {
+            ApiKey apiKey = apiKeyService.validateScopedToken(rawToken, ApiKeyScope.SCIM);
+            apiKey.recordUsage();
+            request.setAttribute(ATTR_SCIM_API_KEY, apiKey);
+            return true;
+        } catch (Exception e) {
+            onScimFailure(clientIp, "INVALID_SCIM_TOKEN", request.getRequestURI());
+            log.warn("[ScimAuth] Authentication failed - {}", e.getMessage());
+            response.sendError(HttpServletResponse.SC_UNAUTHORIZED, e.getMessage());
+            return false;
+        }
+    }
+
+    private void onScimFailure(String clientIp, String reason, String path) {
+        auditLogService.logAnonymous("scim-client", "SCIM.AUTH_FAILURE", "SCIM_KEY",
+                null, null, "ip=" + clientIp + " reason=" + reason + " path=" + path);
+    }
+}
diff --git a/src/main/resources/META-INF/THIRD_PARTY_LICENSES.txt b/src/main/resources/META-INF/THIRD_PARTY_LICENSES.txt
index dcd6da33..8a868fdb 100644
--- a/src/main/resources/META-INF/THIRD_PARTY_LICENSES.txt
+++ b/src/main/resources/META-INF/THIRD_PARTY_LICENSES.txt
@@ -1,3 +1,145 @@
+## Vulnerability Data and Bundled Reference Resources
+
+Reviewed 2026-09-07. These notices identify sources; they are not a blanket
+redistribution grant. Source-specific attribution, supplied copyright notices,
+license links and modification history must accompany redistributed records.
+See the distribution's THIRD_PARTY_LICENSES.md for additional context. Existing
+offline bundles/exports are not certified as attribution-complete by this notice.
+
+OSV: https://osv.dev/ and https://google.github.io/osv.dev/data/
+Data rights vary by original advisory source. GitHub Advisory Database, PyPA
+advisory data and Go /data/ use CC-BY 4.0. RustSec defaults to CC0 with CC-BY 4.0
+exceptions for GHSA imports. Ubuntu Security Notices use CC-BY-SA 4.0.
+Preserve source attribution, license URLs and transformation information.
+Debian/Alpine-derived data redistribution terms remain unverified in this review.
+
+GitHub Advisory Database: https://github.com/github/advisory-database
+CC-BY 4.0: https://github.com/github/advisory-database/blob/main/LICENSE.md
+Used directly and through OSV. Credit the database and source contributors.
+PyPA: https://github.com/pypa/advisory-database/blob/main/LICENSE
+Go: https://github.com/golang/vulndb/blob/master/LICENSE
+RustSec: https://github.com/rustsec/advisory-db/blob/main/LICENSE.txt
+Ubuntu: https://github.com/canonical/ubuntu-security-notices/blob/main/LICENSE
+CC-BY: https://creativecommons.org/licenses/by/4.0/
+CC-BY-SA: https://creativecommons.org/licenses/by-sa/4.0/
+ShareAlike applies where required to shared adaptations; these notices do not
+relicense source data under the license of the OsWL application.
+
+NIST National Vulnerability Database: https://nvd.nist.gov/
+This product uses data from the NVD API but is not endorsed or certified by the NVD.
+Consult NIST/NVD and CVE source terms; no blanket CC0 license for all incorporated
+third-party content was established. NVD-specific redistribution terms require
+further verification; referenced publications retain their own rights.
+
+FIRST.org EPSS: https://www.first.org/epss/faq and https://www.first.org/epss/data
+Public score access, attribution requested. Credit FIRST.org EPSS and retain the
+score date/model version when supplied. An explicit blanket license to redistribute
+a commercial score database was not verified; public access is not such a grant.
+
+CISA KEV: https://github.com/cisagov/kev-data/blob/develop/LICENSE
+CC0 1.0. Credit CISA as source for provenance. Linked third-party material and
+CISA/DHS marks are not covered by that dedication; no endorsement is implied.
+
+deps.dev / Google: https://github.com/google/deps.dev#readme
+Generated data: CC-BY 4.0; aggregated data retains original source terms.
+API caching is permitted by the README; Google API terms also apply:
+https://developers.google.com/terms
+Do not treat every registry/advisory field as newly licensed CC-BY data.
+Credit deps.dev and original publishers; retain source/license URLs and changes.
+
+CocoaPods specifications: https://github.com/CocoaPods/Specs#readme
+MIT: https://github.com/CocoaPods/CocoaPods/blob/master/LICENSE
+Retain applicable copyright and permission notices when redistributing substantial
+specification content. Each actual pod's code/binary has its own license.
+
+Bundled Conda-to-PyPI mapping: conda/grayskull-pypi-mapping.json
+Origin: regro/cf-graph-countyfair, now conda-forge/conda-forge-bot-data,
+mappings/pypi/grayskull_pypi_mapping.json. This is distinct from the Grayskull program.
+Copyright (c) 2018, Board of Trustees of Columbia University in the city of New York.
+Copyright (c) 2017, Peter M. Landwehr (Tick-my-feedstocks).
+Copyright (c) 2017, Anthony Scopatz (Rever).
+Copyright (c) 2016 Aaron Meurer, Gil Forsyth (Doctr).
+The full combined upstream License (BSD-style, BSD 3-Clause and MIT notices)
+is included unchanged at META-INF/licenses/conda-forge-bot-data-LICENSE.txt.
+License revision: fd0dfed0d43fbb084f683d2c00473a887b645d69, retrieved 2026-09-07.
+This is not a verified source revision of the bundled JSON. Its original revision
+and any additional upstream-data terms remain to be established.
+
+## Embedded AI Runtime and Models
+
+Runtime binaries and model weights are optional downloads, excluded from the source repository,
+Docker build context and released JAR. The JAR includes this notice and the Apache 2.0 text.
+Inference runs locally. Installation from upstream is a separate network operation.
+
+### Qwen3.5-2B (GGUF)
+
+- **Role:** Default CPU model; replaces the previous Qwen3-1.7B automatic download.
+- **Publisher:** Alibaba Cloud / Qwen team.
+- **Upstream:** https://huggingface.co/Qwen/Qwen3.5-2B
+- **License:** Apache License, Version 2.0; full text below.
+- **Quantization:** Unsloth AI GGUF Q4_K_M. OsWL does not fine-tune or modify the downloaded bytes.
+- **Source revision:** `unsloth/Qwen3.5-2B-GGUF@f6d5376be1edb4d416d56da11e5397a961aca8ae`
+- **File:** `model/Qwen/Qwen3.5-2B-Q4_K_M.gguf`, 1280835840 bytes.
+- **SHA256:** `aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223`
+- **Pinned download:** https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/resolve/f6d5376be1edb4d416d56da11e5397a961aca8ae/Qwen3.5-2B-Q4_K_M.gguf
+
+### Gemma 4 E2B (GGUF)
+
+- **Role:** Optional CPU model, installed manually; replaces Gemma 3 1B in the refreshed local installation.
+- **Publisher:** Google DeepMind.
+- **Upstream:** https://huggingface.co/google/gemma-4-E2B-it
+- **License:** Apache License, Version 2.0, as stated in the Gemma 4 model card and https://ai.google.dev/gemma/apache_2 .
+  This entry is specifically for Gemma 4, not the distinct terms of earlier Gemma releases.
+- **Quantization:** Unsloth AI GGUF Q4_K_M. OsWL does not fine-tune or modify the downloaded bytes.
+- **Source revision:** `unsloth/gemma-4-E2B-it-GGUF@0314792d7f1f7e229411f620751375812bb9faf2`
+- **File:** `model/Gemma/gemma-4-E2B-it-Q4_K_M.gguf`, 3106738272 bytes.
+- **SHA256:** `740185b21d22ceb83a11c3aa62ad5842ef32c70f6096d756bbee85a1e4ec34b8`
+- **Pinned download:** https://huggingface.co/unsloth/gemma-4-E2B-it-GGUF/resolve/0314792d7f1f7e229411f620751375812bb9faf2/gemma-4-E2B-it-Q4_K_M.gguf
+
+Apache 2.0 permits redistribution subject to its conditions, including supplying the license,
+retaining applicable copyright/attribution notices and carrying forward any upstream NOTICE
+content when provided. Preserve the quantization provenance above. Do not represent these weights
+as OsWL-authored or imply endorsement by Qwen, Google or Unsloth.
+
+The old GitHub `models-v1` asset is Qwen3-1.7B and is not the new default.
+A new mirror must be a verified byte-identical copy of the relevant pinned file and accompany
+the license and attribution notices. This change does not publish new model assets.
+Custom/older weights retain their own licenses; these entries do not relicense them.
+
+### llama.cpp
+
+- **Publisher:** The ggml authors.
+- **Source:** https://github.com/ggml-org/llama.cpp
+- **License:** MIT.
+- **Validated local runtime:** b10068, commit `571d0d540`; operators supply an OS/architecture-compatible build in `embedded-ai/llama/`.
+- **Distribution:** Not bundled in the repository or JAR. If packaging runtime binaries separately,
+  preserve this full license and the licenses/notices of all included libraries (for example,
+  an OpenMP runtime); this MIT notice alone does not cover every binary in a vendor archive.
+
+```
+MIT License
+
+Copyright (c) 2023-2026 The ggml authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
 OsWL — Third-Party Software Licenses
 ================================================================================
 This file is bundled inside the OsWL JAR artifact and is also available at
diff --git a/src/main/resources/META-INF/licenses/conda-forge-bot-data-LICENSE.txt b/src/main/resources/META-INF/licenses/conda-forge-bot-data-LICENSE.txt
new file mode 100644
index 00000000..18e0c386
--- /dev/null
+++ b/src/main/resources/META-INF/licenses/conda-forge-bot-data-LICENSE.txt
@@ -0,0 +1,125 @@
+Copyright (c) 2018, Board of Trustees of Columbia University in the
+city of New York.
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+  * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+
+  * Redistributions in binary form must reproduce the above copyright
+    notice, this list of conditions and the following disclaimer in the
+    documentation and/or other materials provided with the distribution.
+
+  * Neither the name of the copyright holder nor the names of its
+    contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY COPYRIGHT HOLDER "AS IS".  COPYRIGHT HOLDER
+EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES AND CONDITIONS, EITHER
+EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS, ADEQUACY OR SUITABILITY
+FOR A PARTICULAR PURPOSE, AND ANY WARRANTIES OF FREEDOM FROM
+INFRINGEMENT OF ANY DOMESTIC OR FOREIGN PATENT, COPYRIGHTS, TRADE
+SECRETS OR OTHER PROPRIETARY RIGHTS OF ANY PARTY.  IN NO EVENT SHALL
+COPYRIGHT HOLDER BE LIABLE TO ANY PARTY FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
+USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+THIS SOFTWARE OR RELATING TO THIS AGREEMENT, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+please email Prof. Simon Billinge at sb2896@columbia.edu with any questions.
+
+
+Tick-my-feedstocks
+BSD 3-Clause License
+
+Copyright (c) 2017, Peter M. Landwehr
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
+Rever
+BSD 3-Clause License
+
+Copyright (c) 2017, Anthony Scopatz
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+* Redistributions of source code must retain the above copyright notice, this
+  list of conditions and the following disclaimer.
+
+* Redistributions in binary form must reproduce the above copyright notice,
+  this list of conditions and the following disclaimer in the documentation
+  and/or other materials provided with the distribution.
+
+* Neither the name of the copyright holder nor the names of its
+  contributors may be used to endorse or promote products derived from
+  this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Doctr
+
+The MIT License (MIT)
+
+Copyright (c) 2016 Aaron Meurer, Gil Forsyth
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
\ No newline at end of file
diff --git a/src/main/resources/ai/prompts.properties b/src/main/resources/ai/prompts.properties
index d0aaa66e..16967fe8 100644
--- a/src/main/resources/ai/prompts.properties
+++ b/src/main/resources/ai/prompts.properties
@@ -13,7 +13,7 @@ params.maxTokens.license.trend=256
 params.maxTokens.version.diff=256
 params.maxTokens.batch.cve=2048
 params.maxTokens.batch.license=1536
-# F2: 4 free-text fields (~2-3 sentences each) in one JSON object instead of 4 separate ~256-budget calls.
+# 4 free-text fields (~2-3 sentences each) in one JSON object instead of 4 separate ~256-budget calls.
 params.maxTokens.insights.combined=900
 
 # ── System (provider-specific overrides fall back to system.default) ───
@@ -42,11 +42,11 @@ security.posture=Project '{projectName}' scan snapshot:\n- Components: {totalCom
 
 version.diff=Project '{projectName}' changed from '{fromVersion}' to '{toVersion}':\n- Added: {added}, Removed: {removed}, Updated: {updated}, New threats: {newThreats}\n\nNotable changes:\n{threatDetails}\n\nIn 2-3 sentences: security impact of this release and the most urgent follow-up.
 
-# F2: posture + security-trend + license-trend + version-diff combined into one JSON call. Used
+# posture + security-trend + license-trend + version-diff combined into one JSON call. Used
 # when a prior completed scan exists (AiPromptTemplateService.combinedInsightsPrompt, hasHistory=true).
 insights.combined.full=Analyze this project scan and respond with ONLY a JSON object — no markdown fences, no text before or after:\n{"posture":"...","securityTrend":"...","licenseTrend":"...","versionDiff":"..."}\n\nEach field is 2-3 sentences of plain prose (no markdown, no lists):\n- posture: overall security posture summary and the single highest-priority action.\n- securityTrend: trend interpretation from the security data below, the biggest new risk if any, and ONE prioritized remediation action.\n- licenseTrend: compliance trend from the license data below, newly risky licenses/components if any, and ONE concrete compliance action.\n- versionDiff: security impact of the version change below and the most urgent follow-up.\n\nProject '{projectName}' scan snapshot:\n- Components: {totalComponents}\n- CVEs — Critical: {critical}, High: {high}, Medium: {medium}, Low: {low}\n- Patchable libraries: {patchableCount}, Non-patchable: {nonPatchableCount}\n- Direct dependencies with Critical/High CVEs: {directCriticalHigh}\nTop issues:\n{topIssues}\n\nAcross versions [{recentVersions}]: security issues {securityDirection} by {securityDelta}; license-risk components {licenseDirection} by {licenseDelta}.\nSecurity change details:\n{secChangeDetails}\nLicense change details:\n{licChangeDetails}\n\nVersion change '{fromVersion}' -> '{toVersion}': Added {added}, Removed {removed}, Updated {updated}, New threats {newThreats}.\nNotable changes:\n{threatDetails}
 
-# F2: reduced schema for a project's first scan (no prior completed scan to trend/diff against) —
+# reduced schema for a project's first scan (no prior completed scan to trend/diff against) —
 # omitting the trend/diff sections stops the model from inventing a "no change" narrative from nothing.
 insights.combined.postureOnly=Analyze this project scan and respond with ONLY a JSON object — no markdown fences, no text before or after:\n{"posture":"..."}\n\nThe field is 2-3 sentences of plain prose (no markdown, no lists): overall security posture summary and the single highest-priority action.\n\nProject '{projectName}' scan snapshot:\n- Components: {totalComponents}\n- CVEs — Critical: {critical}, High: {high}, Medium: {medium}, Low: {low}\n- Patchable libraries: {patchableCount}, Non-patchable: {nonPatchableCount}\n- Direct dependencies with Critical/High CVEs: {directCriticalHigh}\nTop issues:\n{topIssues}
 
@@ -62,7 +62,7 @@ batch.cve.item={index}. id={id} component={component} severity={severity} cvss={
 # compliance on a 1.7B-class model. Toggle: oswl.ai.enrichment.local-simple-schema.
 batch.cve.header.local=For each item below, write a short triage note using ONLY the provided fields.\n\nReturn ONLY a JSON array, exactly one object per item in the same order — no markdown, no extra text:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\nPriority: P0/P1 = fix now (KEV-listed, or Critical/High severity on a direct dependency). P2/P3 = lower urgency (transitive dependency, low EPSS, or informational).\nsummary: one short sentence — what the attacker gains, and name the exact fix version when one is given.\n\nExample:\nInput: id=CVE-2024-1234 severity=CRITICAL kev=yes fixVersion=2.1.0\nOutput: {"id":"CVE-2024-1234","summary":"Remote attacker can execute arbitrary code; upgrade to 2.1.0.","priority":"P0"}\n\nProject deployment context: {deploymentProfile}.\n\nItems:
 
-# F3: cloud-only compact variant — pipe-delimited items instead of a full label per field.
+# cloud-only compact variant — pipe-delimited items instead of a full label per field.
 # Toggle: oswl.ai.enrichment.compact-batch-prompts (LOCAL always uses the labeled format above).
 batch.cve.header.compact=For each item below, produce a triage note using ONLY the provided fields.\n\nEach item is one pipe-delimited line, in this exact order:\nid|component|severity|cvssScore|epss|kevListed|title|osvSummary|fixVersion|cweId|cvssVector|dependencyType|patchability\nA field with no value is left blank between its two pipes.\n\nReturn ONLY a JSON array — no markdown fences, no text before or after:\n[{"id":"...","summary":"impact in one sentence","recommendedAction":"concrete next step","priority":"P0|P1|P2|P3"}]\n\nRules:\n- Emit exactly one object per input line, reusing each id verbatim. Do not merge, reorder, skip, or invent items.\n- Priority: P0 = KEV-listed or trivially exploitable from untrusted input, fix now. P1 = critical/high severity on a reachable direct dependency. P2 = real but mitigated by low EPSS, transitive-only reach, or limited exposure in the project's deployment context (given below). P3 = informational, no practical impact here.\n- summary: the concrete consequence for this component (what an attacker gains), not a restatement of the severity.\n- recommendedAction: name the exact fix version when fixVersion is given; otherwise give a specific mitigation.\n- Keep summary to 120 characters or fewer and recommendedAction to 100 characters or fewer, so the array is not truncated.\n\nProject deployment context: {deploymentProfile}.\n\nItems:
 batch.cve.item.compact={id}|{component}|{severity}|{cvssScore}|{epss}|{kevListed}|{title}|{osvSummary}|{fixVersion}|{cweId}|{cvssVector}|{dependencyType}|{patchability}
@@ -72,6 +72,6 @@ batch.license.header=Assess each license item below using ONLY the provided data
 batch.license.header.local=Assess each license item below using ONLY the provided data.\n\nReturn ONLY a JSON array, exactly one object per item in the same order — no markdown, no extra text:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\nPriority: P0/P1 = must act before shipping (strong copyleft, or needs legal sign-off). P2/P3 = lower urgency (attribution only, or permissive).\nsummary: one short sentence naming the actual obligation and the recommended action (approve, add attribution, review with legal, replace, or isolate).\n\nExample:\nInput: id=L42 license=GPL-3.0 status=RESTRICTED\nOutput: {"id":"L42","summary":"Strong copyleft — replace before distributing, or isolate as a separate process.","priority":"P0"}\n\nDistribution context: {deploymentProfile}.\n\nItems:
 batch.license.item={index}. id={id} license={licenseName} status={licenseStatus} policyReason={policyReason} component={component} ecosystem={ecosystem} dependency={dependencyType} latestVersion={latestVersion}
 
-# F3: cloud-only compact variant (see batch.cve.header.compact above for the rationale).
+# cloud-only compact variant (see batch.cve.header.compact above for the rationale).
 batch.license.header.compact=Assess each license item below using ONLY the provided data — obligations differ sharply between an internal tool, a network service, and distributed software; the project's distribution context is given below.\n\nEach item is one pipe-delimited line, in this exact order:\nid|licenseName|licenseStatus|policyReason|component|ecosystem|dependencyType|latestVersion\nA field with no value is left blank between its two pipes.\n\nReturn ONLY a JSON array — no markdown fences, no text before or after:\n[{"id":"...","summary":"risk in one sentence","recommendedAction":"concrete next step","priority":"P0|P1|P2|P3"}]\n\nRules:\n- Emit exactly one object per input line, reusing each id verbatim. Do not merge, reorder, skip, or invent items.\n- Priority: P0 = obligation that blocks shipping in this context (e.g. strong copyleft in distributed software). P1 = requires legal sign-off before release. P2 = attribution or notice obligation to satisfy. P3 = permissive, no action beyond record-keeping.\n- summary: the actual obligation triggered in this context, not a description of the license family.\n- recommendedAction: one of approve, add attribution, review with legal, replace, or isolate — with the reason.\n- Say explicitly when a license is unrecognised rather than guessing its terms.\n- Keep summary to 120 characters or fewer and recommendedAction to 100 characters or fewer, so the array is not truncated.\n\nDistribution context: {deploymentProfile}.\n\nItems:
 batch.license.item.compact={id}|{licenseName}|{licenseStatus}|{policyReason}|{component}|{ecosystem}|{dependencyType}|{latestVersion}
diff --git a/src/main/resources/ai/prompts_ja.properties b/src/main/resources/ai/prompts_ja.properties
index 3dd3e74e..e3f8245b 100644
--- a/src/main/resources/ai/prompts_ja.properties
+++ b/src/main/resources/ai/prompts_ja.properties
@@ -37,11 +37,11 @@ security.posture=プロジェクト '{projectName}' のスキャン状況:\n- 
 
 version.diff=プロジェクト '{projectName}' '{fromVersion}' → '{toVersion}':\n- 追加 {added}、削除 {removed}、更新 {updated}、新規脅威 {newThreats}\n\n主な変更:\n{threatDetails}\n\n2〜3 文で: このリリースのセキュリティ上の影響と、緊急に必要なフォローアップ。
 
-# F2: posture + セキュリティトレンド + ライセンストレンド + バージョン diff を 1 回の JSON 呼び出しに統合。
+# posture + セキュリティトレンド + ライセンストレンド + バージョン diff を 1 回の JSON 呼び出しに統合。
 # 過去に完了したスキャンがある場合に使用（AiPromptTemplateService.combinedInsightsPrompt, hasHistory=true）。
 insights.combined.full=このプロジェクトのスキャンを分析し、JSON オブジェクトのみで応答してください — マークダウンのコードフェンスや前後の説明は禁止:\n{"posture":"...","securityTrend":"...","licenseTrend":"...","versionDiff":"..."}\n\n各フィールドはマークダウンや箇条書きなしの 2〜3 文の平文です:\n- posture: 全体的なセキュリティポスチャーの要約と最優先の対応 1 つ。\n- securityTrend: 下記のセキュリティデータに基づくトレンドの解釈、あれば最大の新規リスク、優先対応 1 つ。\n- licenseTrend: 下記のライセンスデータに基づくコンプライアンストレンド、あれば新たにリスクのあるライセンス/コンポーネント、具体的な対応 1 つ。\n- versionDiff: 下記のバージョン変更のセキュリティ上の影響と、最も緊急なフォローアップ。\n\nプロジェクト '{projectName}' スキャン状況:\n- コンポーネント数: {totalComponents}\n- CVE — Critical: {critical}、High: {high}、Medium: {medium}、Low: {low}\n- パッチ可能なライブラリ: {patchableCount}、不可: {nonPatchableCount}\n- Critical/High CVE を持つ直接依存: {directCriticalHigh}\n主な問題:\n{topIssues}\n\nバージョン [{recentVersions}] を通じて: セキュリティ問題が {securityDelta} 件 {securityDirection}；ライセンスリスクのあるコンポーネントが {licenseDelta} 件 {licenseDirection}。\nセキュリティ変更の詳細:\n{secChangeDetails}\nライセンス変更の詳細:\n{licChangeDetails}\n\nバージョン変更 '{fromVersion}' → '{toVersion}': 追加 {added}、削除 {removed}、更新 {updated}、新規脅威 {newThreats}。\n主な変更:\n{threatDetails}
 
-# F2: 過去に完了したスキャンがないプロジェクトの初回スキャン用に縮小したスキーマ — trend/diff セクションを
+# 過去に完了したスキャンがないプロジェクトの初回スキャン用に縮小したスキーマ — trend/diff セクションを
 # 省略することで、モデルが根拠なく「変化なし」という説明を作り出すのを防ぐ。
 insights.combined.postureOnly=このプロジェクトのスキャンを分析し、JSON オブジェクトのみで応答してください — マークダウンのコードフェンスや前後の説明は禁止:\n{"posture":"..."}\n\nこのフィールドはマークダウンや箇条書きなしの 2〜3 文の平文です: 全体的なセキュリティポスチャーの要約と最優先の対応 1 つ。\n\nプロジェクト '{projectName}' スキャン状況:\n- コンポーネント数: {totalComponents}\n- CVE — Critical: {critical}、High: {high}、Medium: {medium}、Low: {low}\n- パッチ可能なライブラリ: {patchableCount}、不可: {nonPatchableCount}\n- Critical/High CVE を持つ直接依存: {directCriticalHigh}\n主な問題:\n{topIssues}
 
@@ -53,15 +53,15 @@ batch.cve.item={index}. id={id} component={component} severity={severity} cvss={
 
 batch.cve.header.local=以下の各項目について、提供されたフィールドのみを使って短いトリアージノートを作成してください。\n\nJSON 配列のみを返してください。項目ごとに正確に 1 つのオブジェクト、順序はそのまま — マークダウンや余分な説明は禁止:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\n優先度: P0/P1 = 直ちに対応（KEV 掲載、または直接依存の Critical/High）。P2/P3 = 優先度低（推移的依存、低い EPSS、または参考情報）。\nsummary: 短い1文で — 攻撃者が得るものを書き、fixVersion がある場合はそのバージョンを明記してください。\n\n例:\n入力: id=CVE-2024-1234 severity=CRITICAL kev=yes fixVersion=2.1.0\n出力: {"id":"CVE-2024-1234","summary":"リモート攻撃者が任意コードを実行可能。2.1.0 へアップグレードしてください。","priority":"P0"}\n\nプロジェクトのデプロイ状況: {deploymentProfile}。\n\n項目:
 
-# F3: クラウド専用の圧縮バリアント — フィールドラベルの代わりにパイプ区切りの 1 行。
+# クラウド専用の圧縮バリアント — フィールドラベルの代わりにパイプ区切りの 1 行。
 batch.cve.header.compact=以下の各項目について、提供されたフィールドのみを使ってトリアージノートを作成してください。\n\n各項目は次の順序のパイプ（|）区切りの 1 行です:\nid|component|severity|cvssScore|epss|kevListed|title|osvSummary|fixVersion|cweId|cvssVector|dependencyType|patchability\n値がないフィールドはパイプの間を空欄にします。\n\nJSON 配列のみを返してください — マークダウンのコードフェンスや前後の説明は禁止:\n[{"id":"...","summary":"影響を 1 文で","recommendedAction":"具体的な対応","priority":"P0|P1|P2|P3"}]\n\nルール:\n- 入力行ごとにオブジェクトを正確に 1 つ生成し、id をそのまま使用してください。項目の統合・並べ替え・省略・新規作成はしないでください。\n- 優先度: P0 = KEV 掲載、または信頼できない入力から容易に悪用可能。直ちに対応。P1 = 到達可能な直接依存の Critical/High。P2 = 実在するが、低い EPSS・推移的依存・下記のデプロイ状況での限定的な露出により緩和されている。P3 = 参考情報、実質的な影響なし。\n- summary: 深刻度の言い換えではなく、このコンポーネントで生じる具体的な結果（攻撃者が得るもの）を書いてください。\n- recommendedAction: fixVersion がある場合はそのバージョンを正確に指定し、ない場合は具体的な緩和策を書いてください。\n- 配列が途中で切れないよう、summary は 120 文字以内、recommendedAction は 100 文字以内にしてください。\n\nプロジェクトのデプロイ状況: {deploymentProfile}。\n\n項目:
 batch.cve.item.compact={id}|{component}|{severity}|{cvssScore}|{epss}|{kevListed}|{title}|{osvSummary}|{fixVersion}|{cweId}|{cvssVector}|{dependencyType}|{patchability}
 
-batch.license.header=以下のライセンス項目を提供されたデータのみで評価してください — 社内ツール、ネットワークサービス、配布ソフトウェアでは義務が大きく異なり、このプロジェクトの配布状況は下記に示します。\n\nJSON 配列のみを返してください — マークダウンのコードフェンスや前後の説明は禁止:\n[{"id":"...","summary":"リスクを 1 文で","recommendedAction":"具体的な対応","priority":"P0|P1|P2|P3"}]\n\nルール:\n- 入力項目ごとにオブジェクトを正確に 1 つ生成し、id をそのまま使用してください。項目の統合・並べ替え・省略・新規作成はしないでください。\n- 優先度: P0 = この状況でリリースを妨げる義務（例: 配布ソフトウェアにおける強いコピーレフト）。P1 = リリース前に法務承認が必要。P2 = 帰属表示・告知義務への対応が必要。P3 = 寛容的、記録管理以外の対応は不要。\n- summary: ライセンス系統の説明ではなく、この状況で実際に発生する義務を書いてください。\n- recommendedAction: 承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離 のいずれかを理由とともに示してください。\n- 認識できないライセンスは条項を推測せず、不明である旨を明記してください。\n- 配列が途中で切れないよう、summary は 120 文字以内、recommendedAction は 100 文字以内にしてください。\n\n配布状況: {deploymentProfile}。\n\n項目:
+batch.license.header=以下のライセンス項目を提供されたデータのみで評価してください — 社内ツール、ネットワークサービス、配布ソフトウェアでは義務が大きく異なり、このプロジェクトの配布状況は下記に示します。\n\nJSON 配列のみを返してください — マークダウンのコードフェンスや前後の説明は禁止:\n[{"id":"...","summary":"リスクを 1 文で","recommendedAction":"具体的な対応","priority":"P0|P1|P2|P3"}]\n\nルール:\n- 入力項目ごとにオブジェクトを正確に 1 つ生成し、id をそのまま使用してください。項目の統合・並べ替え・省略・新規作成はしないでください。\n- 優先度: P0 = この状況でリリースを妨げる義務（例: 配布ソフトウェアにおける強いコピーレフト）。P1 = リリース前に法務承認が必要。P2 = 帰属表示・告知義務への対応が必要。P3 = パーミッシブ、記録管理以外の対応は不要。\n- summary: ライセンス系統の説明ではなく、この状況で実際に発生する義務を書いてください。\n- recommendedAction: 承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離 のいずれかを理由とともに示してください。\n- 認識できないライセンスは条項を推測せず、不明である旨を明記してください。\n- 配列が途中で切れないよう、summary は 120 文字以内、recommendedAction は 100 文字以内にしてください。\n\n配布状況: {deploymentProfile}。\n\n項目:
 batch.license.item={index}. id={id} license={licenseName} status={licenseStatus} policyReason={policyReason} component={component} ecosystem={ecosystem} dependency={dependencyType} latestVersion={latestVersion}
 
-# F3: クラウド専用の圧縮バリアント（根拠は上記 batch.cve.header.compact を参照）。
-batch.license.header.compact=以下のライセンス項目を提供されたデータのみで評価してください — 社内ツール、ネットワークサービス、配布ソフトウェアでは義務が大きく異なり、このプロジェクトの配布状況は下記に示します。\n\n各項目は次の順序のパイプ（|）区切りの 1 行です:\nid|licenseName|licenseStatus|policyReason|component|ecosystem|dependencyType|latestVersion\n値がないフィールドはパイプの間を空欄にします。\n\nJSON 配列のみを返してください — マークダウンのコードフェンスや前後の説明は禁止:\n[{"id":"...","summary":"リスクを 1 文で","recommendedAction":"具体的な対応","priority":"P0|P1|P2|P3"}]\n\nルール:\n- 入力行ごとにオブジェクトを正確に 1 つ生成し、id をそのまま使用してください。項目の統合・並べ替え・省略・新規作成はしないでください。\n- 優先度: P0 = この状況でリリースを妨げる義務（例: 配布ソフトウェアにおける強いコピーレフト）。P1 = リリース前に法務承認が必要。P2 = 帰属表示・告知義務への対応が必要。P3 = 寛容的、記録管理以外の対応は不要。\n- summary: ライセンス系統の説明ではなく、この状況で実際に発生する義務を書いてください。\n- recommendedAction: 承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離 のいずれかを理由とともに示してください。\n- 認識できないライセンスは条項を推測せず、不明である旨を明記してください。\n- 配列が途中で切れないよう、summary は 120 文字以内、recommendedAction は 100 文字以内にしてください。\n\n配布状況: {deploymentProfile}。\n\n項目:
+# クラウド専用の圧縮バリアント（根拠は上記 batch.cve.header.compact を参照）。
+batch.license.header.compact=以下のライセンス項目を提供されたデータのみで評価してください — 社内ツール、ネットワークサービス、配布ソフトウェアでは義務が大きく異なり、このプロジェクトの配布状況は下記に示します。\n\n各項目は次の順序のパイプ（|）区切りの 1 行です:\nid|licenseName|licenseStatus|policyReason|component|ecosystem|dependencyType|latestVersion\n値がないフィールドはパイプの間を空欄にします。\n\nJSON 配列のみを返してください — マークダウンのコードフェンスや前後の説明は禁止:\n[{"id":"...","summary":"リスクを 1 文で","recommendedAction":"具体的な対応","priority":"P0|P1|P2|P3"}]\n\nルール:\n- 入力行ごとにオブジェクトを正確に 1 つ生成し、id をそのまま使用してください。項目の統合・並べ替え・省略・新規作成はしないでください。\n- 優先度: P0 = この状況でリリースを妨げる義務（例: 配布ソフトウェアにおける強いコピーレフト）。P1 = リリース前に法務承認が必要。P2 = 帰属表示・告知義務への対応が必要。P3 = パーミッシブ、記録管理以外の対応は不要。\n- summary: ライセンス系統の説明ではなく、この状況で実際に発生する義務を書いてください。\n- recommendedAction: 承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離 のいずれかを理由とともに示してください。\n- 認識できないライセンスは条項を推測せず、不明である旨を明記してください。\n- 配列が途中で切れないよう、summary は 120 文字以内、recommendedAction は 100 文字以内にしてください。\n\n配布状況: {deploymentProfile}。\n\n項目:
 batch.license.item.compact={id}|{licenseName}|{licenseStatus}|{policyReason}|{component}|{ecosystem}|{dependencyType}|{latestVersion}
 
-batch.license.header.local=以下のライセンス項目を提供されたデータのみで評価してください。\n\nJSON 配列のみを返してください。項目ごとに正確に 1 つのオブジェクト、順序はそのまま — マークダウンや余分な説明は禁止:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\n優先度: P0/P1 = リリース前に対応が必要（強いコピーレフト、または法務承認が必要）。P2/P3 = 優先度低（帰属表示のみ、または寛容的）。\nsummary: 実際に発生する義務と推奨対応（承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離）を短い1文で書いてください。\n\n例:\n入力: id=L42 license=GPL-3.0 status=RESTRICTED\n出力: {"id":"L42","summary":"強いコピーレフト — 配布前に置き換えるか、別プロセスとして隔離してください。","priority":"P0"}\n\n配布状況: {deploymentProfile}。\n\n項目:
+batch.license.header.local=以下のライセンス項目を提供されたデータのみで評価してください。\n\nJSON 配列のみを返してください。項目ごとに正確に 1 つのオブジェクト、順序はそのまま — マークダウンや余分な説明は禁止:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\n優先度: P0/P1 = リリース前に対応が必要（強いコピーレフト、または法務承認が必要）。P2/P3 = 優先度低（帰属表示のみ、またはパーミッシブ）。\nsummary: 実際に発生する義務と推奨対応（承認 / 帰属表示の追加 / 法務レビュー / 置き換え / 隔離）を短い1文で書いてください。\n\n例:\n入力: id=L42 license=GPL-3.0 status=RESTRICTED\n出力: {"id":"L42","summary":"強いコピーレフト — 配布前に置き換えるか、別プロセスとして隔離してください。","priority":"P0"}\n\n配布状況: {deploymentProfile}。\n\n項目:
diff --git a/src/main/resources/ai/prompts_ko.properties b/src/main/resources/ai/prompts_ko.properties
index bbab9c9c..5124f14b 100644
--- a/src/main/resources/ai/prompts_ko.properties
+++ b/src/main/resources/ai/prompts_ko.properties
@@ -37,11 +37,11 @@ security.posture=프로젝트 '{projectName}' 스캔 현황:\n- 컴포넌트: {t
 
 version.diff=프로젝트 '{projectName}' '{fromVersion}' → '{toVersion}':\n- 추가 {added}, 제거 {removed}, 업데이트 {updated}, 신규 위협 {newThreats}\n\n주요 변경:\n{threatDetails}\n\n2-3문장: 릴리스 보안 영향과 긴급 후속 조치.
 
-# F2: posture + 보안 트렌드 + 라이선스 트렌드 + 버전 diff를 하나의 JSON 호출로 통합. 이전 완료 스캔이
+# posture + 보안 트렌드 + 라이선스 트렌드 + 버전 diff를 하나의 JSON 호출로 통합. 이전 완료 스캔이
 # 있을 때 사용(AiPromptTemplateService.combinedInsightsPrompt, hasHistory=true).
 insights.combined.full=이 프로젝트 스캔을 분석해 오직 JSON 객체만 응답하세요 — 마크다운 코드펜스나 앞뒤 설명 금지:\n{"posture":"...","securityTrend":"...","licenseTrend":"...","versionDiff":"..."}\n\n각 필드는 마크다운·목록 없이 순수 문장 2-3문장입니다:\n- posture: 전체 보안 포스처 요약과 최우선 조치 1개.\n- securityTrend: 아래 보안 데이터 기반 트렌드 해석, 새로운 주요 위험(있다면), 우선 조치 1개.\n- licenseTrend: 아래 라이선스 데이터 기반 컴플라이언스 트렌드, 새 위험 라이선스/컴포넌트(있다면), 구체 액션 1개.\n- versionDiff: 아래 버전 변경의 보안 영향과 가장 긴급한 후속 조치.\n\n프로젝트 '{projectName}' 스캔 현황:\n- 컴포넌트: {totalComponents}개\n- CVE — Critical: {critical}, High: {high}, Medium: {medium}, Low: {low}\n- 패치 가능 라이브러리: {patchableCount}, 불가: {nonPatchableCount}\n- Critical/High CVE가 있는 직접 의존성: {directCriticalHigh}개\n주요 이슈:\n{topIssues}\n\n버전 [{recentVersions}]에 걸쳐: 보안 이슈 {securityDelta}건 {securityDirection}; 라이선스 위험 컴포넌트 {licenseDelta}건 {licenseDirection}.\n보안 변경 상세:\n{secChangeDetails}\n라이선스 변경 상세:\n{licChangeDetails}\n\n버전 변경 '{fromVersion}' → '{toVersion}': 추가 {added}, 제거 {removed}, 업데이트 {updated}, 신규 위협 {newThreats}.\n주요 변경:\n{threatDetails}
 
-# F2: 이전 완료 스캔이 없는 첫 스캔용 축소 스키마 — trend/diff 섹션을 아예 빼서 모델이 근거 없이
+# 이전 완료 스캔이 없는 첫 스캔용 축소 스키마 — trend/diff 섹션을 아예 빼서 모델이 근거 없이
 # "변화 없음" 서술을 지어내는 것을 막는다.
 insights.combined.postureOnly=이 프로젝트 스캔을 분석해 오직 JSON 객체만 응답하세요 — 마크다운 코드펜스나 앞뒤 설명 금지:\n{"posture":"..."}\n\n이 필드는 마크다운·목록 없이 순수 문장 2-3문장입니다: 전체 보안 포스처 요약과 최우선 조치 1개.\n\n프로젝트 '{projectName}' 스캔 현황:\n- 컴포넌트: {totalComponents}개\n- CVE — Critical: {critical}, High: {high}, Medium: {medium}, Low: {low}\n- 패치 가능 라이브러리: {patchableCount}, 불가: {nonPatchableCount}\n- Critical/High CVE가 있는 직접 의존성: {directCriticalHigh}개\n주요 이슈:\n{topIssues}
 
@@ -53,14 +53,14 @@ batch.cve.item={index}. id={id} component={component} severity={severity} cvss={
 
 batch.cve.header.local=아래 항목마다 제공된 필드만 사용해 짧은 트리아지 노트를 작성하세요.\n\nJSON 배열만 반환하세요. 항목마다 정확히 객체 1개, 순서는 그대로 — 마크다운이나 추가 설명 금지:\n[{"id":"...","summary":"...","priority":"P0|P1|P2|P3"}]\n\n우선순위: P0/P1 = 즉시 조치(KEV 등재, 또는 직접 의존성의 Critical/High). P2/P3 = 낮은 긴급도(전이 의존성, 낮은 EPSS, 또는 참고 수준).\nsummary: 짧은 한 문장 — 공격자가 얻는 것, fixVersion이 있으면 그 버전을 명시하세요.\n\n예시:\n입력: id=CVE-2024-1234 severity=CRITICAL kev=yes fixVersion=2.1.0\n출력: {"id":"CVE-2024-1234","summary":"원격 공격자가 임의 코드를 실행할 수 있음; 2.1.0으로 업그레이드하세요.","priority":"P0"}\n\n프로젝트 배포 맥락: {deploymentProfile}.\n\n항목:
 
-# F3: 클라우드 전용 압축 변형 — 필드 라벨 대신 파이프로 구분된 한 줄.
+# 클라우드 전용 압축 변형 — 필드 라벨 대신 파이프로 구분된 한 줄.
 batch.cve.header.compact=아래 항목마다 제공된 필드만 사용해 트리아지 노트를 작성하세요.\n\n각 항목은 다음 순서의 파이프(|) 구분 한 줄입니다:\nid|component|severity|cvssScore|epss|kevListed|title|osvSummary|fixVersion|cweId|cvssVector|dependencyType|patchability\n값이 없는 필드는 파이프 사이를 비워 둡니다.\n\nJSON 배열만 반환하세요 — 마크다운 코드펜스나 앞뒤 설명 금지:\n[{"id":"...","summary":"영향 한 문장","recommendedAction":"구체 조치","priority":"P0|P1|P2|P3"}]\n\n규칙:\n- 입력 줄마다 정확히 객체 1개를 만들고 id를 그대로 사용하세요. 항목을 합치거나 순서를 바꾸거나 빠뜨리거나 새로 만들지 마세요.\n- 우선순위: P0 = KEV 등재 또는 신뢰할 수 없는 입력으로 쉽게 악용 가능, 즉시 조치. P1 = 도달 가능한 직접 의존성의 Critical/High. P2 = 실재하지만 낮은 EPSS·전이 의존성·아래 제시되는 프로젝트 배포 맥락에서의 제한된 노출로 완화됨. P3 = 참고 수준, 실질적 영향 없음.\n- summary: 심각도를 되풀이하지 말고, 이 컴포넌트에서 발생하는 구체적 결과(공격자가 얻는 것)를 쓰세요.\n- recommendedAction: fixVersion이 있으면 그 버전을 정확히 지목하고, 없으면 구체적 완화 방안을 쓰세요.\n- 배열이 잘리지 않도록 summary는 120자 이내, recommendedAction은 100자 이내로 작성하세요.\n\n프로젝트 배포 맥락: {deploymentProfile}.\n\n항목:
 batch.cve.item.compact={id}|{component}|{severity}|{cvssScore}|{epss}|{kevListed}|{title}|{osvSummary}|{fixVersion}|{cweId}|{cvssVector}|{dependencyType}|{patchability}
 
 batch.license.header=아래 라이선스 항목을 제공된 데이터만으로 평가하세요 — 사내 도구, 네트워크 서비스, 배포되는 소프트웨어는 의무가 크게 다르며, 이 프로젝트의 배포 맥락은 아래에 제시됩니다.\n\nJSON 배열만 반환하세요 — 마크다운 코드펜스나 앞뒤 설명 금지:\n[{"id":"...","summary":"위험 한 문장","recommendedAction":"구체 조치","priority":"P0|P1|P2|P3"}]\n\n규칙:\n- 입력 항목당 정확히 객체 1개를 만들고 id를 그대로 사용하세요. 항목을 합치거나 순서를 바꾸거나 빠뜨리거나 새로 만들지 마세요.\n- 우선순위: P0 = 이 맥락에서 출시를 막는 의무(예: 배포 소프트웨어의 강한 카피레프트). P1 = 출시 전 법무 승인 필요. P2 = 고지·저작권 표시 의무 이행 필요. P3 = 허용적, 기록 관리 외 조치 불필요.\n- summary: 라이선스 계열에 대한 설명이 아니라, 이 맥락에서 실제로 발생하는 의무를 쓰세요.\n- recommendedAction: 승인 / 고지 추가 / 법무 검토 / 교체 / 격리 중 하나를 이유와 함께 제시하세요.\n- 알 수 없는 라이선스는 조건을 추측하지 말고 모른다고 명시하세요.\n- 배열이 잘리지 않도록 summary는 120자 이내, recommendedAction은 100자 이내로 작성하세요.\n\n배포 맥락: {deploymentProfile}.\n\n항목:
 batch.license.item={index}. id={id} license={licenseName} status={licenseStatus} policyReason={policyReason} component={component} ecosystem={ecosystem} dependency={dependencyType} latestVersion={latestVersion}
 
-# F3: 클라우드 전용 압축 변형 (근거는 위 batch.cve.header.compact 참고).
+# 클라우드 전용 압축 변형 (근거는 위 batch.cve.header.compact 참고).
 batch.license.header.compact=아래 라이선스 항목을 제공된 데이터만으로 평가하세요 — 사내 도구, 네트워크 서비스, 배포되는 소프트웨어는 의무가 크게 다르며, 이 프로젝트의 배포 맥락은 아래에 제시됩니다.\n\n각 항목은 다음 순서의 파이프(|) 구분 한 줄입니다:\nid|licenseName|licenseStatus|policyReason|component|ecosystem|dependencyType|latestVersion\n값이 없는 필드는 파이프 사이를 비워 둡니다.\n\nJSON 배열만 반환하세요 — 마크다운 코드펜스나 앞뒤 설명 금지:\n[{"id":"...","summary":"위험 한 문장","recommendedAction":"구체 조치","priority":"P0|P1|P2|P3"}]\n\n규칙:\n- 입력 줄마다 정확히 객체 1개를 만들고 id를 그대로 사용하세요. 항목을 합치거나 순서를 바꾸거나 빠뜨리거나 새로 만들지 마세요.\n- 우선순위: P0 = 이 맥락에서 출시를 막는 의무(예: 배포 소프트웨어의 강한 카피레프트). P1 = 출시 전 법무 승인 필요. P2 = 고지·저작권 표시 의무 이행 필요. P3 = 허용적, 기록 관리 외 조치 불필요.\n- summary: 라이선스 계열에 대한 설명이 아니라, 이 맥락에서 실제로 발생하는 의무를 쓰세요.\n- recommendedAction: 승인 / 고지 추가 / 법무 검토 / 교체 / 격리 중 하나를 이유와 함께 제시하세요.\n- 알 수 없는 라이선스는 조건을 추측하지 말고 모른다고 명시하세요.\n- 배열이 잘리지 않도록 summary는 120자 이내, recommendedAction은 100자 이내로 작성하세요.\n\n배포 맥락: {deploymentProfile}.\n\n항목:
 batch.license.item.compact={id}|{licenseName}|{licenseStatus}|{policyReason}|{component}|{ecosystem}|{dependencyType}|{latestVersion}
 
diff --git a/src/main/resources/application-local.yaml b/src/main/resources/application-local.yaml
index ee16ed2a..328f7010 100644
--- a/src/main/resources/application-local.yaml
+++ b/src/main/resources/application-local.yaml
@@ -4,9 +4,9 @@ spring:
       on-profile: local
 
   datasource:
-    # LOCK_TIMEOUT bumped from H2's 2000ms default: a large offline-snapshot import (E1-E3) does a
+    # LOCK_TIMEOUT bumped from H2's 2000ms default: a large offline-snapshot import does a
     # single bulk delete+insert per source in one transaction, and the default margin proved too
-    # tight under momentary contention from an adjacent request during live E5/E6 testing — this
+    # tight under momentary contention from an adjacent request during live testing — this
     # only widens the wait window when there IS contention, it doesn't change normal-path latency.
     url: jdbc:h2:file:./oswl-db;MODE=PostgreSQL;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;LOCK_TIMEOUT=30000
     driver-class-name: org.h2.Driver
@@ -43,9 +43,9 @@ logging:
   level:
     root: INFO
     com.salkcoding.oswl: INFO
-    com.salkcoding.oswl.service.QuickImportService: DEBUG
-    com.salkcoding.oswl.service.ScanIngestService: INFO
-    com.salkcoding.oswl.service.VulnerabilityEnrichmentService: DEBUG
+    com.salkcoding.oswl.service.ingest.QuickImportService: DEBUG
+    com.salkcoding.oswl.service.ingest.ScanIngestService: DEBUG
+    com.salkcoding.oswl.service.vulnerability.VulnerabilityEnrichmentService: DEBUG
     com.salkcoding.oswl.service.ai: DEBUG
     com.salkcoding.oswl.client: DEBUG
     com.salkcoding.oswl.auth.security: INFO
@@ -58,14 +58,15 @@ logging:
 
 oswl:
   encryption:
-    # Stable local default so VCS tokens survive restarts. Override with OSWL_ENCRYPTION_KEY in .env.
+    # Stable local default so VCS tokens survive restarts. Override with the OSWL_ENCRYPTION_KEY process environment variable.
     # (32-byte key, Base64) — dev-only; never use in production.
     key: ${OSWL_ENCRYPTION_KEY:b3N3bC1sb2NhbC1kZXYtZW5jcnlwdGlvbi1rZXkhITA=}
   ai:
     debug:
       heartbeat-seconds: 10
-      log-prompt-excerpt: true
-      log-response-excerpt: true
-  # encryption.key: set OSWL_ENCRYPTION_KEY in .env (see .env.example). No repo default.
+      # Keep request timing/heartbeat metadata at DEBUG without logging source-derived prompts,
+      # model reasoning, or response bodies. Developers can opt in explicitly when needed.
+      log-prompt-excerpt: ${OSWL_AI_DEBUG_LOG_PROMPT:false}
+      log-response-excerpt: ${OSWL_AI_DEBUG_LOG_RESPONSE:false}
   clone:
     temp-dir: ""
diff --git a/src/main/resources/application-prod.yaml b/src/main/resources/application-prod.yaml
index 8f4cf930..09353ddb 100644
--- a/src/main/resources/application-prod.yaml
+++ b/src/main/resources/application-prod.yaml
@@ -1,11 +1,11 @@
-# Production profile — see docs/Production-Deployment-Checklist.md
+# Production profile — see docs/en/Production-Deployment-Checklist.md
 # Required env: DB_URL, DB_USERNAME, DB_PASSWORD, OSWL_ENCRYPTION_KEY
 # Bind: SERVER_ADDRESS (default 127.0.0.1). Expose via reverse proxy only unless you accept 0.0.0.0 risk.
 
 server:
   address: ${SERVER_ADDRESS:127.0.0.1}
 
-# ── OIDC SSO (roadmap #13) — uncomment and fill in to enable Okta / Entra / any OIDC provider ──
+# ── OIDC SSO — uncomment and fill in to enable Okta / Entra / any OIDC provider ──
 # When configured, a "Sign in with SSO" option appears on /login; the verified email is mapped to
 # an existing OsWL user (provisioning-gated). Leaving this out keeps email + OTP as the only login.
 # spring:
@@ -22,6 +22,30 @@ server:
 #           oidc:
 #             issuer-uri: ${OSWL_OIDC_ISSUER_URI}   # e.g. https://your-tenant.okta.com or https://login.microsoftonline.com//v2.0
 
+# ── SAML 2.0 SSO — uncomment and fill in to enable Okta / Entra ID / AD FS ──
+# When configured, a "Sign in with SSO" option appears on /login; the verified email is mapped
+# to an existing OsWL user, or a disabled account is auto-provisioned for SCIM activation.
+# SP metadata is exposed at /saml2/service-provider-metadata/{registrationId}.
+# spring:
+#   security:
+#     saml2:
+#       relyingparty:
+#         registration:
+#           oswl:
+#             signing.credentials:
+#               - private-key-location: ${OSWL_SAML_SP_PRIVATE_KEY}
+#                 certificate-location: ${OSWL_SAML_SP_CERTIFICATE}
+#             identityprovider:
+#               metadata-uri: ${OSWL_SAML_IDP_METADATA_URL}   # e.g. https://your-tenant.okta.com/app/your-app/sso/saml/metadata
+#               verification.credentials:
+#                 - certificate-location: ${OSWL_SAML_IDP_CERTIFICATE}
+
+# ── SCIM 2.0 provisioning ──
+# Groups pushed by the IdP map to either Team (default) or RoleTemplate.
+# oswl:
+#   scim:
+#     group-mapping: TEAM   # TEAM | ROLE_TEMPLATE
+
 springdoc:
   api-docs:
     enabled: false
@@ -39,10 +63,26 @@ management:
     health:
       enabled: true
       show-details: never
+      # Separate liveness/readiness probes. Liveness covers core infrastructure only;
+      # readiness covers everything an operator needs before routing traffic to this instance.
+      group:
+        liveness:
+          include: ping,db,diskSpace
+          show-details: when-authorized
+        readiness:
+          include: db,diskSpace,snapshotFreshness,aiProvider,embeddedSidecar
+          show-details: when-authorized
     prometheus:
       enabled: true
     info:
       enabled: true
+  health:
+    # Use the custom OsWL DbHealthIndicator / DiskSpaceHealthIndicator instead of the
+    # auto-configured ones, so thresholds and monitored paths match the application config.
+    db:
+      enabled: false
+    diskspace:
+      enabled: false
   prometheus:
     metrics:
       export:
diff --git a/src/main/resources/application.yaml b/src/main/resources/application.yaml
index 77f408a4..0c7792a6 100644
--- a/src/main/resources/application.yaml
+++ b/src/main/resources/application.yaml
@@ -27,14 +27,14 @@ spring:
         # JDBC batching of INSERT/UPDATE statements. NOTE: all entities use GenerationType.IDENTITY,
         # so Hibernate still cannot batch INSERTs (the generated id is needed immediately) — this
         # mainly batches UPDATEs. Moving PKs to sequences would unlock insert batching but is a
-        # migration-risky change tracked separately (roadmap A6).
+        # migration-risky change tracked separately as a backlog item.
         jdbc:
           batch_size: 50
         order_inserts: true
         order_updates: true
 
   flyway:
-    # Opt-in DB migrations (roadmap #13). Disabled by default so existing ddl-auto deploys are unaffected.
+    # Opt-in DB migrations. Disabled by default so existing ddl-auto deploys are unaffected.
     # Enable in production (OSWL_FLYWAY_ENABLED=true) after generating a full baseline; existing schemas
     # are baselined automatically, then versioned migrations under db/migration apply forward.
     enabled: ${OSWL_FLYWAY_ENABLED:false}
@@ -42,6 +42,18 @@ spring:
     baseline-version: 1
     locations: classpath:db/migration
 
+  session:
+    # Horizontal scaling / HA. "none" (default) keeps the single-instance behavior — an
+    # in-memory Tomcat session, fine for a single instance. Set to "jdbc" (OSWL_SESSION_STORE_TYPE=jdbc)
+    # only when running multiple instances behind a load balancer against the same PostgreSQL DB —
+    # requires the spring_session/spring_session_attributes tables (db/migration/V10 or
+    # db/spring_session_and_shedlock.sql) to already exist.
+    store-type: ${OSWL_SESSION_STORE_TYPE:none}
+    jdbc:
+      # Schema is owned by Flyway/ddl-auto reference SQL (V10), never by Spring Session itself —
+      # matches how this project manages every other table.
+      initialize-schema: never
+
 server:
   port: 8080
   # Default 0.0.0.0 for local/docker dev. Production overrides to 127.0.0.1 in application-prod.yaml.
@@ -66,10 +78,26 @@ management:
     health:
       enabled: true
       show-details: never
+      # Separate liveness/readiness probes. Liveness covers core infrastructure only;
+      # readiness covers everything an operator needs before routing traffic to this instance.
+      group:
+        liveness:
+          include: ping,db,diskSpace
+          show-details: when-authorized
+        readiness:
+          include: db,diskSpace,snapshotFreshness,aiProvider,embeddedSidecar
+          show-details: when-authorized
     prometheus:
       enabled: true
     info:
       enabled: true
+  health:
+    # Use the custom OsWL DbHealthIndicator / DiskSpaceHealthIndicator instead of the
+    # auto-configured ones, so thresholds and monitored paths match the application config.
+    db:
+      enabled: false
+    diskspace:
+      enabled: false
   prometheus:
     metrics:
       export:
@@ -78,6 +106,9 @@ management:
 oswl:
   # Default timezone for time-sensitive features (e.g. AI usage tracking). Override with OSWL_TIMEZONE.
   timezone: ${OSWL_TIMEZONE:Asia/Seoul}
+  # Public URL used for deep links in outbound notifications (Slack/Teams webhooks).
+  # Example: https://oswl.company.com. Leave empty to omit deep links.
+  public-url: ${OSWL_PUBLIC_URL:}
   security:
     # When true, OSWL_TD is always sent with Secure (HTTPS-only). Otherwise Secure follows request.isSecure().
     trusted-device-cookie-secure: ${OSWL_TRUSTED_DEVICE_COOKIE_SECURE:false}
@@ -100,6 +131,15 @@ oswl:
     # REQUIRED in production. Generate with: openssl rand -base64 32
     # Set via environment variable: OSWL_ENCRYPTION_KEY
     key: ${OSWL_ENCRYPTION_KEY:}
+  cache:
+    invalidation:
+      # How often each instance polls the cache_invalidation table for version bumps made by
+      # other instances. Worst-case propagation delay of a settings change in a multi-instance
+      # deployment equals this interval.
+      poll-interval-ms: ${OSWL_CACHE_INVALIDATION_POLL_INTERVAL_MS:5000}
+    # TTL for deps.dev version metadata (isLatestVersion / deprecated / latestVersion / scorecard)
+    # on cache-hit libraries. The full CVE/license TTL stays in Cache Settings (DEPS_DEV).
+    version-meta-ttl-seconds: ${OSWL_VERSION_META_TTL_SEC:86400}
   clone:
     # Directory for temporary git clones during Quick Import.
     # Defaults to system temp directory if left blank.
@@ -109,16 +149,35 @@ oswl:
     # mvnw/gradlew need the full source tree. Servers without partial-clone support fall back
     # to a full shallow clone automatically.
     sparse-enabled: ${OSWL_CLONE_SPARSE_ENABLED:true}
+    # Fetch source for reference analysis without authorizing repository build execution.
+    include-source: ${OSWL_CLONE_INCLUDE_SOURCE:false}
   quick-import:
     # When true, Quick Import may execute build tools from the cloned repository
     # (mvnw / gradlew / dotnet) for full transitive dependency resolution.
     # SECURITY: this runs arbitrary repo code on the server — enable only when
     # every imported repository is trusted. Default: false (static manifest parse only).
     allow-build-exec: ${OSWL_QUICK_IMPORT_ALLOW_BUILD_EXEC:false}
-  cache:
-    # TTL for deps.dev version metadata (isLatestVersion / deprecated / latestVersion / scorecard)
-    # on cache-hit libraries. The full CVE/license TTL stays in Cache Settings (DEPS_DEV).
-    version-meta-ttl-seconds: ${OSWL_VERSION_META_TTL_SEC:86400}
+    # Backpressure for concurrent imports. Each job runs on a virtual thread (no platform-thread
+    # pool to exhaust), so these caps exist to bound DB connections, outbound HTTP and disk (clones):
+    # max-concurrent limits simultaneously RUNNING imports globally — keep it below
+    # spring.datasource.hikari.maximum-pool-size (default 10) or imports can starve interactive
+    # requests of DB connections (a startup warning fires when this is violated).
+    max-concurrent: ${OSWL_QUICK_IMPORT_MAX_CONCURRENT:3}
+    # max-queued-per-user caps how many jobs one user may have queued/running at once; beyond it
+    # the API rejects with 429 and a clear message. The TOTAL queue is per-user × user count —
+    # there is no global queue bound, which is acceptable only because running jobs are capped above.
+    max-queued-per-user: ${OSWL_QUICK_IMPORT_MAX_QUEUED_PER_USER:3}
+  secretscan:
+    # Regex + entropy secret scan and Terraform/Kubernetes/Dockerfile misconfiguration scan,
+    # run once per Quick Import against the cloned working tree before it is deleted.
+    # Findings never include the matched secret value — only file path/line/rule id/fingerprint.
+    enabled: ${OSWL_SECRETSCAN_ENABLED:true}
+  archive:
+    # Retention policy for old scans, triggered manually via POST /api/admin/projects/{id}/archive-scans
+    # (SYSTEM_ADMIN only, no scheduler). Scans beyond this count (most recent first) have their
+    # scan_components/dependency_paths rows deleted; only the aggregate severity/license counts
+    # remain on the scan itself. Irreversible.
+    retain-scans-per-project: ${OSWL_ARCHIVE_RETAIN_SCANS:20}
   client:
     # HTTP timeouts for the deps.dev / OSV enrichment clients. Without these, a stalled
     # upstream call previously hung indefinitely and held a deps.dev concurrency permit forever.
@@ -144,6 +203,13 @@ oswl:
     enabled: ${OSWL_MONITORING_ENABLED:true}
     # Spring cron expression (seconds minutes hours day month weekday). Default: 03:00 daily.
     cron: ${OSWL_MONITORING_CRON:0 0 3 * * *}
+  scheduler-lock:
+    # Horizontal scaling / HA. Disabled by default (single-instance behavior:
+    # every @Scheduled job runs locally). Enable (OSWL_SCHEDULER_LOCK_ENABLED=true)
+    # only alongside a multi-instance deployment, so the nightly monitoring / defer-expiry /
+    # trash-cleanup jobs run exactly once per cycle cluster-wide instead of once per instance.
+    # Requires the shedlock table (db/migration/V10 or db/spring_session_and_shedlock.sql).
+    enabled: ${OSWL_SCHEDULER_LOCK_ENABLED:false}
   airgapped:
     # Air-gapped (offline snapshot) mode. When true, vulnerability/threat-intel lookups
     # (OSV, deps.dev, FIRST.org EPSS, CISA KEV) are served from the imported offline
@@ -151,12 +217,12 @@ oswl:
     # Import a snapshot bundle first (POST /api/admin/snapshot/import, SYSTEM_ADMIN only);
     # components absent from the snapshot resolve as "no data" (empty results).
     enabled: ${OSWL_AIRGAPPED_ENABLED:false}
-    # E3: server-path import (POST /api/admin/snapshot/import-from-path) only accepts files
+    # Server-path import (POST /api/admin/snapshot/import-from-path) only accepts files
     # under this directory — a realpath-verified whitelist (CloneRootPathGuard), since arbitrary
     # server-path reads would otherwise be an admin-triggered file-read vulnerability. Blank
     # disables the endpoint entirely (returns 400) — an operator must opt in to a specific path.
     import-dir: ${OSWL_AIRGAPPED_IMPORT_DIR:}
-    # E7: definition-DB staleness thresholds, measured from the oldest per-source "as of" date
+    # Definition-DB staleness thresholds, measured from the oldest per-source "as of" date
     # across the imported snapshot (not builtAt/importedAt — see AirgappedSnapshotService).
     staleness-warn-days: ${OSWL_AIRGAPPED_STALENESS_WARN_DAYS:7}
     staleness-critical-days: ${OSWL_AIRGAPPED_STALENESS_CRITICAL_DAYS:30}
@@ -172,31 +238,39 @@ oswl:
     fail-on-license-violation: ${OSWL_GATE_FAIL_ON_LICENSE_VIOLATION:true}
     # only-new: gate considers only findings absent from the previous completed scan (baseline).
     only-new: ${OSWL_GATE_ONLY_NEW:true}
+    # only-reachable: gate considers only CVEs the call-graph analysis marked REACHABLE (Java
+    # only; other ecosystems have no bytecode to analyze and are always treated as reachable).
+    # Default off — most projects don't have reachability data yet, and filtering on it silently
+    # would hide every finding for an unanalyzed project.
+    only-reachable: ${OSWL_GATE_ONLY_REACHABLE:false}
+    # fail-on-secrets: gate fails when the scan found a CRITICAL/HIGH-severity secret finding.
+    # Default off — turning this on for an existing project can surprise-fail its next CI run.
+    fail-on-secrets: ${OSWL_GATE_FAIL_ON_SECRETS:false}
   ai:
-    # D2: stream free-form AI calls (security posture / trend / version diff) token-by-token
+    # Stream free-form AI calls (security posture / trend / version diff) token-by-token
     # over OpenAI-compatible SSE so the Quick Import panel can show a live preview. Endpoints
     # that reject streaming fall back to the plain non-streaming call automatically; batch
-    # (JSON) calls never stream. Disable to force the pre-D2 behavior everywhere.
+    # (JSON) calls never stream. Disable to force non-streaming behavior everywhere.
     streaming-enabled: ${OSWL_AI_STREAMING_ENABLED:true}
     anthropic:
-      # F4: mark the (per-provider fixed) system prompt as an ephemeral cache breakpoint so
+      # Mark the (per-provider fixed) system prompt as an ephemeral cache breakpoint so
       # repeat calls within Anthropic's cache TTL are billed as cache reads. Disable if a
       # future Anthropic API/beta-header change makes this incompatible with the account.
       prompt-caching-enabled: ${OSWL_ANTHROPIC_PROMPT_CACHING_ENABLED:true}
     embedded:
-      # llama.cpp sidecar: put llama-server(.exe) and .gguf models in this directory.
+      # Sidecar root: llama/ holds the runtime; model/Qwen and model/Gemma hold weights.
       dir: ${OSWL_EMBEDDED_AI_DIR:embedded-ai}
       port: ${OSWL_EMBEDDED_AI_PORT:11435}
       context-size: ${OSWL_EMBEDDED_AI_CONTEXT:8192}
       # -1 = offload as many layers as the build supports (-ngl 999); 0 = CPU only;
       # a positive number pins an explicit layer count (partial offload).
-      gpu-layers: ${OSWL_EMBEDDED_AI_GPU_LAYERS:-1}
-      # 0 = let llama.cpp auto-detect the thread count (no -t flag).
-      threads: ${OSWL_EMBEDDED_AI_THREADS:0}
+      gpu-layers: ${OSWL_EMBEDDED_AI_GPU_LAYERS:0}
+      # One generation/prompt thread by default for shared burstable CPU hosts; 0 = auto.
+      threads: ${OSWL_EMBEDDED_AI_THREADS:1}
       # >1 enables --parallel N --cont-batching so concurrent AI calls aren't serialized
       # on the server. context-size is the TOTAL context, divided across these slots —
       # see the slotContext warning logged at startup if it drops below 2048.
-      parallel-slots: ${OSWL_EMBEDDED_AI_PARALLEL:4}
+      parallel-slots: ${OSWL_EMBEDDED_AI_PARALLEL:1}
       flash-attn: ${OSWL_EMBEDDED_AI_FLASH_ATTN:true}
       # <=0 disables --cache-reuse.
       cache-reuse: ${OSWL_EMBEDDED_AI_CACHE_REUSE:256}
@@ -205,25 +279,18 @@ oswl:
       extra-args: ${OSWL_EMBEDDED_AI_EXTRA_ARGS:}
       # GPU model loading can take longer than the previous fixed 90s wait.
       startup-timeout-seconds: ${OSWL_EMBEDDED_AI_STARTUP_TIMEOUT_SEC:120}
-      # G4: default-model-url/sha256/size-bytes are always a matched set — changing the URL
-      # without updating the SHA256 to match makes every download fail checksum verification
-      # (by design: this is the integrity check, not a bug to work around).
+      # default-model-url/sha256/size-bytes are always a matched set — changing the URL without
+      # updating the SHA256 to match makes every download fail checksum verification (by design:
+      # this is the integrity check, not a bug to work around).
       #
-      # Points at the upstream ggml-org/Qwen3-1.7B-GGUF asset. G2 decided to self-host this on
-      # OsWL's own GitHub Release (tag "models-v1"), but that asset has not been uploaded yet and
-      # the URL 404s, so the self-hosted URL is NOT the default — a default that always fails and
-      # silently leans on a fallback is worse than pointing at the host that actually serves it.
-      # To switch to self-hosting once the asset is uploaded, verify it resolves and override:
-      #   OSWL_EMBEDDED_DEFAULT_MODEL_URL=https://github.com/SalkCoding/Oswl/releases/download/models-v1/qwen3-1.7b-q4_k_m.gguf
-      # The SHA256 below is the upstream file's, so a byte-identical re-host needs no other change.
-      default-model-url: ${OSWL_EMBEDDED_DEFAULT_MODEL_URL:https://huggingface.co/ggml-org/Qwen3-1.7B-GGUF/resolve/main/Qwen3-1.7B-Q4_K_M.gguf}
-      default-model-sha256: ${OSWL_EMBEDDED_DEFAULT_MODEL_SHA256:d2387ca2dbfee2ffabce7120d3770dadca0b293052bc2f0e138fdc940d9bc7b5}
-      default-model-size-bytes: ${OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES:1282439264}
-      # Retried once if the primary URL fails (network error / non-200). Empty by default: with
-      # the primary already pointing upstream there is no second host to fall back to. Set this
-      # to the upstream URL when you override default-model-url with a self-hosted mirror.
+      # Pinned upstream revision. A GitHub mirror may be configured only after uploading
+      # and verifying a byte-identical asset; the old models-v1 asset is a different model.
+      default-model-url: ${OSWL_EMBEDDED_DEFAULT_MODEL_URL:https://huggingface.co/unsloth/Qwen3.5-2B-GGUF/resolve/f6d5376be1edb4d416d56da11e5397a961aca8ae/Qwen3.5-2B-Q4_K_M.gguf}
+      default-model-sha256: ${OSWL_EMBEDDED_DEFAULT_MODEL_SHA256:aaf42c8b7c3cab2bf3d69c355048d4a0ee9973d48f16c731c0520ee914699223}
+      default-model-size-bytes: ${OSWL_EMBEDDED_DEFAULT_MODEL_SIZE_BYTES:1280835840}
+      # Optional byte-identical mirror; no unverified release URL is assumed to exist.
       fallback-model-url: ${OSWL_EMBEDDED_FALLBACK_MODEL_URL:}
-      # G5: prefetches the default model in the background on boot (if none is present yet) so
+      # Prefetches the default model in the background on boot (if none is present yet) so
       # a user who later visits Settings and clicks Start does not hit a surprise 1.2GB download.
       # Download-only — never starts the sidecar or changes the active AI provider on its own.
       # Never attempted in air-gapped mode regardless of this setting (oswl.airgapped.enabled).
@@ -251,7 +318,7 @@ oswl:
       # many split levels, rather than resubmitting the identical prompt unchanged.
       max-retries: ${OSWL_AI_MAX_RETRIES:1}
       # The 5 independent AI enrichment blocks (CVE/license batch, posture, trend, version diff)
-      # run concurrently (B2) — this caps how many run at once, mainly to stay under cloud
+      # run concurrently — this caps how many run at once, mainly to stay under cloud
       # provider rate limits. A local llama-server benefits from --parallel (see embedded.*) up
       # to this same count.
       max-parallel-calls: ${OSWL_AI_MAX_PARALLEL_CALLS:3}
@@ -272,6 +339,13 @@ oswl:
     max-page-size: ${OSWL_AUDIT_MAX_PAGE_SIZE:200}
     # Audit log records older than this many months are automatically deleted
     retention-months: ${OSWL_AUDIT_RETENTION_MONTHS:6}
+    integrity:
+      # When true, the application verifies the audit log hash chain on startup and exits.
+      verify-and-exit: ${OSWL_AUDIT_INTEGRITY_VERIFY_AND_EXIT:false}
+      # Batch size used by the verification API/CLI
+      batch-size: ${OSWL_AUDIT_INTEGRITY_BATCH_SIZE:1000}
 
-# Logs: stdout/stderr only (no logback file appender). Rotate via container/process manager if needed.
+# Logging: see logback-spring.xml. local/test are console-only. prod additionally writes a
+# rotating file under OSWL_LOG_DIR (default ./logs) — OSWL_LOG_JSON=true switches it to
+# structured JSON for SIEM ingestion.
 
diff --git a/src/main/resources/conda/grayskull-pypi-mapping.json b/src/main/resources/conda/grayskull-pypi-mapping.json
new file mode 100644
index 00000000..284e27ba
--- /dev/null
+++ b/src/main/resources/conda/grayskull-pypi-mapping.json
@@ -0,0 +1,71040 @@
+{
+  "0164e082b29777fbc56c2373b68da93d23a29a040787e7f1c65e1562f133": {
+    "conda_name": "django-jsoneditor",
+    "import_name": "jsoneditor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "0164e082b29777fbc56c2373b68da93d23a29a040787e7f1c65e1562f133"
+  },
+  "21cmfast": {
+    "conda_name": "21cmfast",
+    "import_name": "py21cmfast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "21cmfast"
+  },
+  "33162c0a7b28a4d8c83da07bc2b12cee58c120b4a9e8bba31c41c8d35a16": {
+    "conda_name": "vcversioner",
+    "import_name": "vcversioner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "33162c0a7b28a4d8c83da07bc2b12cee58c120b4a9e8bba31c41c8d35a16"
+  },
+  "9e118aa3f6684187e7ba3727864cfd8e8209ad2d4c59b668f1d41e76f241": {
+    "conda_name": "pyelastix",
+    "import_name": "pyelastix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "9e118aa3f6684187e7ba3727864cfd8e8209ad2d4c59b668f1d41e76f241"
+  },
+  "aab": {
+    "conda_name": "aab",
+    "import_name": "aab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aab"
+  },
+  "aadict": {
+    "conda_name": "aadict",
+    "import_name": "aadict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aadict"
+  },
+  "aalto-boss": {
+    "conda_name": "aalto-boss",
+    "import_name": "boss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aalto-boss"
+  },
+  "abc-classroom": {
+    "conda_name": "abc-classroom",
+    "import_name": "abcclassroom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abc-classroom"
+  },
+  "abess": {
+    "conda_name": "abess",
+    "import_name": "abess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abess"
+  },
+  "abi3audit": {
+    "conda_name": "abi3audit",
+    "import_name": "abi3audit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abi3audit"
+  },
+  "abi3info": {
+    "conda_name": "abi3info",
+    "import_name": "abi3info",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abi3info"
+  },
+  "abipy": {
+    "conda_name": "abipy",
+    "import_name": "abipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abipy"
+  },
+  "ablang": {
+    "conda_name": "ablang",
+    "import_name": "ablang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ablang"
+  },
+  "ablang2": {
+    "conda_name": "ablang2",
+    "import_name": "ablang2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ablang2"
+  },
+  "about-time": {
+    "conda_name": "about-time",
+    "import_name": "about_time",
+    "mapping_source": "regro-bot",
+    "pypi_name": "about-time"
+  },
+  "abqpy": {
+    "conda_name": "abqpy",
+    "import_name": "abqpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abqpy"
+  },
+  "absl-py": {
+    "conda_name": "absl-py",
+    "import_name": "absl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "absl-py"
+  },
+  "absolufy-imports": {
+    "conda_name": "absolufy-imports",
+    "import_name": "absolufy_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "absolufy-imports"
+  },
+  "abtem": {
+    "conda_name": "abtem",
+    "import_name": "abtem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abtem"
+  },
+  "abydos": {
+    "conda_name": "abydos",
+    "import_name": "abydos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "abydos"
+  },
+  "academic": {
+    "conda_name": "academic",
+    "import_name": "academic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "academic"
+  },
+  "accelerator-toolbox": {
+    "conda_name": "accelerator-toolbox",
+    "import_name": "at",
+    "mapping_source": "regro-bot",
+    "pypi_name": "accelerator-toolbox"
+  },
+  "access": {
+    "conda_name": "access",
+    "import_name": "access",
+    "mapping_source": "regro-bot",
+    "pypi_name": "access"
+  },
+  "accessible-pygments": {
+    "conda_name": "accessible-pygments",
+    "import_name": "a11y_pygments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "accessible-pygments"
+  },
+  "acgc": {
+    "conda_name": "acgc",
+    "import_name": "acgc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acgc"
+  },
+  "acme-tiny": {
+    "conda_name": "acme-tiny",
+    "import_name": "acme_tiny",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acme-tiny"
+  },
+  "acor": {
+    "conda_name": "acor",
+    "import_name": "acor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acor"
+  },
+  "acquifer": {
+    "conda_name": "acquifer",
+    "import_name": "acquifer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acquifer"
+  },
+  "acquifer-napari": {
+    "conda_name": "acquifer-napari",
+    "import_name": "acquifer_napari_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acquifer-napari"
+  },
+  "acro": {
+    "conda_name": "acro",
+    "import_name": "acro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acro"
+  },
+  "acrv-datasets": {
+    "conda_name": "acrv_datasets",
+    "import_name": "acrv_datasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acrv-datasets"
+  },
+  "acryl-datahub": {
+    "conda_name": "acryl-datahub",
+    "import_name": "datahub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acryl-datahub"
+  },
+  "acsconv": {
+    "conda_name": "acsconv",
+    "import_name": "acsconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acsconv"
+  },
+  "acstools": {
+    "conda_name": "acstools",
+    "import_name": "acstools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "acstools"
+  },
+  "act-atmos": {
+    "conda_name": "act-atmos",
+    "import_name": "act",
+    "mapping_source": "regro-bot",
+    "pypi_name": "act-atmos"
+  },
+  "actflow": {
+    "conda_name": "actflow",
+    "import_name": "ActflowToolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "actflow"
+  },
+  "actions-includes": {
+    "conda_name": "actions-includes",
+    "import_name": "actions_includes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "actions-includes"
+  },
+  "activitysim": {
+    "conda_name": "activitysim",
+    "import_name": "activitysim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "activitysim"
+  },
+  "adagio": {
+    "conda_name": "adagio",
+    "import_name": "triad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adagio"
+  },
+  "adal": {
+    "conda_name": "adal",
+    "import_name": "adal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adal"
+  },
+  "adam-assist": {
+    "conda_name": "adam-assist",
+    "import_name": "adam_assist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adam-assist"
+  },
+  "adam-core": {
+    "conda_name": "adam_core",
+    "import_name": "adam_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adam-core"
+  },
+  "adani": {
+    "conda_name": "adani",
+    "import_name": "adani",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adani"
+  },
+  "adb": {
+    "conda_name": "adb",
+    "import_name": "adb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adb"
+  },
+  "adb-shell": {
+    "conda_name": "adb-shell",
+    "import_name": "adb_shell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adb-shell"
+  },
+  "adc-streaming": {
+    "conda_name": "adc-streaming",
+    "import_name": "adc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adc-streaming"
+  },
+  "addfips": {
+    "conda_name": "addfips",
+    "import_name": "addfips",
+    "mapping_source": "regro-bot",
+    "pypi_name": "addfips"
+  },
+  "addicty": {
+    "conda_name": "addicty",
+    "import_name": "addicty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "addicty"
+  },
+  "adk-agui-middleware": {
+    "conda_name": "adk-agui-middleware",
+    "import_name": "adk_agui_middleware",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adk-agui-middleware"
+  },
+  "adl2pydm": {
+    "conda_name": "adl2pydm",
+    "import_name": "adl2pydm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adl2pydm"
+  },
+  "adlfs": {
+    "conda_name": "adlfs",
+    "import_name": "adlfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adlfs"
+  },
+  "adorn": {
+    "conda_name": "adorn",
+    "import_name": "adorn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adorn"
+  },
+  "ads": {
+    "conda_name": "ads",
+    "import_name": "ads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ads"
+  },
+  "ads2inspire": {
+    "conda_name": "ads2inspire",
+    "import_name": "ads2inspire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ads2inspire"
+  },
+  "adsorption-file-parser": {
+    "conda_name": "adsorption-file-parser",
+    "import_name": "adsorption_file_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adsorption-file-parser"
+  },
+  "adstex": {
+    "conda_name": "adstex",
+    "import_name": "adstex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adstex"
+  },
+  "adtk": {
+    "conda_name": "adtk",
+    "import_name": "adtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adtk"
+  },
+  "advbumpversion": {
+    "conda_name": "advbumpversion",
+    "import_name": "bumpversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "advbumpversion"
+  },
+  "advection": {
+    "conda_name": "advection",
+    "import_name": "advection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "advection"
+  },
+  "adversarial-robustness-toolbox": {
+    "conda_name": "adversarial-robustness-toolbox",
+    "import_name": "art",
+    "mapping_source": "regro-bot",
+    "pypi_name": "adversarial-robustness-toolbox"
+  },
+  "aedat": {
+    "conda_name": "aedat",
+    "import_name": "aedat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aedat"
+  },
+  "aegypti": {
+    "conda_name": "aegypti",
+    "import_name": "aegypti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aegypti"
+  },
+  "aehmc": {
+    "conda_name": "aehmc",
+    "import_name": "aehmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aehmc"
+  },
+  "aemcmc": {
+    "conda_name": "aemcmc",
+    "import_name": "aemcmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aemcmc"
+  },
+  "aeolus": {
+    "conda_name": "aeolus",
+    "import_name": "aeolus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aeolus"
+  },
+  "aeon-neuro": {
+    "conda_name": "aeon-neuro",
+    "import_name": "aeon_neuro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aeon-neuro"
+  },
+  "aerobulk-python": {
+    "conda_name": "aerobulk-python",
+    "import_name": "aerobulk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aerobulk-python"
+  },
+  "aesara-theano-fallback": {
+    "conda_name": "aesara-theano-fallback",
+    "import_name": "aesara_theano_fallback",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aesara-theano-fallback"
+  },
+  "aestream": {
+    "conda_name": "aestream",
+    "import_name": "aestream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aestream"
+  },
+  "aeventkit": {
+    "conda_name": "aeventkit",
+    "import_name": "eventkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aeventkit"
+  },
+  "afar": {
+    "conda_name": "afar",
+    "import_name": "afar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "afar"
+  },
+  "affine": {
+    "conda_name": "affine",
+    "import_name": "affine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "affine"
+  },
+  "affinegap": {
+    "conda_name": "affinegap",
+    "import_name": "affinegap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "affinegap"
+  },
+  "aflow": {
+    "conda_name": "aflow",
+    "import_name": "aflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aflow"
+  },
+  "afscgap": {
+    "conda_name": "afscgap",
+    "import_name": "afscgap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "afscgap"
+  },
+  "afwizard": {
+    "conda_name": "afwizard",
+    "import_name": "afwizard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "afwizard"
+  },
+  "afwizard-library": {
+    "conda_name": "afwizard-library",
+    "import_name": "afwizard_library",
+    "mapping_source": "regro-bot",
+    "pypi_name": "afwizard-library"
+  },
+  "ag-ui-protocol": {
+    "conda_name": "ag-ui-protocol",
+    "import_name": "ag_ui.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ag-ui-protocol"
+  },
+  "agate": {
+    "conda_name": "agate",
+    "import_name": "agate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agate"
+  },
+  "agate-dbf": {
+    "conda_name": "agate-dbf",
+    "import_name": "agatedbf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agate-dbf"
+  },
+  "agate-lookup": {
+    "conda_name": "agate-lookup",
+    "import_name": "agatelookup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agate-lookup"
+  },
+  "agate-remote": {
+    "conda_name": "agate-remote",
+    "import_name": "agateremote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agate-remote"
+  },
+  "agate-stats": {
+    "conda_name": "agate-stats",
+    "import_name": "agatestats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agate-stats"
+  },
+  "agemo": {
+    "conda_name": "agemo",
+    "import_name": "agemo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agemo"
+  },
+  "agentarium": {
+    "conda_name": "agentarium",
+    "import_name": "agentarium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agentarium"
+  },
+  "aggdraw": {
+    "conda_name": "aggdraw",
+    "import_name": "aggdraw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aggdraw"
+  },
+  "aggregate": {
+    "conda_name": "aggregate",
+    "import_name": "aggregate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aggregate"
+  },
+  "agilent-format": {
+    "conda_name": "agilent-format",
+    "import_name": "agilent_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agilent-format"
+  },
+  "agnpy": {
+    "conda_name": "agnpy",
+    "import_name": "agnpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agnpy"
+  },
+  "ago": {
+    "conda_name": "ago",
+    "import_name": "ago",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ago"
+  },
+  "agox": {
+    "conda_name": "agox",
+    "import_name": "agox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "agox"
+  },
+  "ai-traineree": {
+    "conda_name": "ai-traineree",
+    "import_name": "aitraineree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai-traineree"
+  },
+  "ai2-olmo": {
+    "conda_name": "ai2-olmo",
+    "import_name": "olmo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai2-olmo"
+  },
+  "ai2-olmo-core": {
+    "conda_name": "ai2-olmo-core",
+    "import_name": "olmo_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai2-olmo-core"
+  },
+  "ai2-olmo-eval": {
+    "conda_name": "ai2-olmo-eval",
+    "import_name": "olmo_eval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai2-olmo-eval"
+  },
+  "ai21": {
+    "conda_name": "ai21",
+    "import_name": "ai21",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai21"
+  },
+  "ai2thor": {
+    "conda_name": "ai2thor",
+    "import_name": "ai2thor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai2thor"
+  },
+  "ai4s-jobq": {
+    "conda_name": "ai4s-jobq",
+    "import_name": "ai4s",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai4s-jobq"
+  },
+  "ai4ts": {
+    "conda_name": "ai4ts",
+    "import_name": "ai4ts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ai4ts"
+  },
+  "aia-chaser": {
+    "conda_name": "aia-chaser",
+    "import_name": "aia_chaser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aia-chaser"
+  },
+  "aicsimageio": {
+    "conda_name": "aicsimageio",
+    "import_name": "aicsimageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aicsimageio"
+  },
+  "aicspylibczi": {
+    "conda_name": "aicspylibczi",
+    "import_name": "aicspylibczi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aicspylibczi"
+  },
+  "aicssegmentation": {
+    "conda_name": "aicssegmentation",
+    "import_name": "aicssegmentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aicssegmentation"
+  },
+  "aider": {
+    "conda_name": "aider",
+    "import_name": "aider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aider"
+  },
+  "aif360": {
+    "conda_name": "aif360",
+    "import_name": "aif360",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aif360"
+  },
+  "aihwkit": {
+    "conda_name": "aihwkit",
+    "import_name": "aihwkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aihwkit"
+  },
+  "aiida-abinit": {
+    "conda_name": "aiida-abinit",
+    "import_name": "aiida_abinit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-abinit"
+  },
+  "aiida-bigdft": {
+    "conda_name": "aiida-bigdft",
+    "import_name": "aiida_bigdft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-bigdft"
+  },
+  "aiida-castep": {
+    "conda_name": "aiida-castep",
+    "import_name": "aiida_castep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-castep"
+  },
+  "aiida-cp2k": {
+    "conda_name": "aiida-cp2k",
+    "import_name": "aiida_cp2k",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-cp2k"
+  },
+  "aiida-crystal17": {
+    "conda_name": "aiida-crystal17",
+    "import_name": "aiida_crystal17",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-crystal17"
+  },
+  "aiida-cusp": {
+    "conda_name": "aiida-cusp",
+    "import_name": "aiida_cusp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-cusp"
+  },
+  "aiida-dataframe": {
+    "conda_name": "aiida-dataframe",
+    "import_name": "aiida_dataframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-dataframe"
+  },
+  "aiida-gaussian": {
+    "conda_name": "aiida-gaussian",
+    "import_name": "aiida_gaussian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-gaussian"
+  },
+  "aiida-gaussian-datatypes": {
+    "conda_name": "aiida-gaussian-datatypes",
+    "import_name": "aiida_gaussian_datatypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-gaussian-datatypes"
+  },
+  "aiida-optimize": {
+    "conda_name": "aiida-optimize",
+    "import_name": "aiida_optimize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-optimize"
+  },
+  "aiida-orca": {
+    "conda_name": "aiida-orca",
+    "import_name": "aiida_orca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-orca"
+  },
+  "aiida-pseudo": {
+    "conda_name": "aiida-pseudo",
+    "import_name": "aiida_pseudo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-pseudo"
+  },
+  "aiida-tools": {
+    "conda_name": "aiida-tools",
+    "import_name": "aiida_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-tools"
+  },
+  "aiida-vasp": {
+    "conda_name": "aiida-vasp",
+    "import_name": "aiida_vasp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-vasp"
+  },
+  "aiida-wannier90-workflows": {
+    "conda_name": "aiida-wannier90_workflows",
+    "import_name": "aiida_wannier90_workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-wannier90-workflows"
+  },
+  "aiida-yambo": {
+    "conda_name": "aiida-yambo",
+    "import_name": "aiida_yambo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiida-yambo"
+  },
+  "aiidalab": {
+    "conda_name": "aiidalab",
+    "import_name": "aiidalab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiidalab"
+  },
+  "aiidalab-widgets-base": {
+    "conda_name": "aiidalab-widgets-base",
+    "import_name": "aiidalab_widgets_base",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiidalab-widgets-base"
+  },
+  "aimodelshare": {
+    "conda_name": "aimodelshare",
+    "import_name": "aimodelshare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aimodelshare"
+  },
+  "aimrecords": {
+    "conda_name": "aimrecords",
+    "import_name": "aimrecords",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aimrecords"
+  },
+  "aimz": {
+    "conda_name": "aimz",
+    "import_name": "aimz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aimz"
+  },
+  "aio-executor": {
+    "conda_name": "aio-executor",
+    "import_name": "aio_executor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aio-executor"
+  },
+  "aio-pika": {
+    "conda_name": "aio-pika",
+    "import_name": "aio_pika",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aio-pika"
+  },
+  "aioboto3": {
+    "conda_name": "aioboto3",
+    "import_name": "aioboto3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioboto3"
+  },
+  "aioca": {
+    "conda_name": "aioca",
+    "import_name": "aioca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioca"
+  },
+  "aiocache": {
+    "conda_name": "aiocache",
+    "import_name": "aiocache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiocache"
+  },
+  "aiochclient": {
+    "conda_name": "aiochclient",
+    "import_name": "aiochclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiochclient"
+  },
+  "aiocircuitbreaker": {
+    "conda_name": "aiocircuitbreaker",
+    "import_name": "aiocircuitbreaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiocircuitbreaker"
+  },
+  "aioconsole": {
+    "conda_name": "aioconsole",
+    "import_name": "aioconsole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioconsole"
+  },
+  "aiocontextvars": {
+    "conda_name": "aiocontextvars",
+    "import_name": "contextvars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiocontextvars"
+  },
+  "aiocron": {
+    "conda_name": "aiocron",
+    "import_name": "aiocron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiocron"
+  },
+  "aiocsv": {
+    "conda_name": "aiocsv",
+    "import_name": "aiocsv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiocsv"
+  },
+  "aioeasywebdav": {
+    "conda_name": "aioeasywebdav",
+    "import_name": "aioeasywebdav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioeasywebdav"
+  },
+  "aiofile": {
+    "conda_name": "aiofile",
+    "import_name": "aiofile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiofile"
+  },
+  "aioftp": {
+    "conda_name": "aioftp",
+    "import_name": "aioftp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioftp"
+  },
+  "aioguest": {
+    "conda_name": "aioguest",
+    "import_name": "aioguest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioguest"
+  },
+  "aiohappyeyeballs": {
+    "conda_name": "aiohappyeyeballs",
+    "import_name": "aiohappyeyeballs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohappyeyeballs"
+  },
+  "aiohttp-client-cache": {
+    "conda_name": "aiohttp-client-cache",
+    "import_name": "aiohttp_client_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-client-cache"
+  },
+  "aiohttp-debugtoolbar": {
+    "conda_name": "aiohttp-debugtoolbar",
+    "import_name": "aiohttp_debugtoolbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-debugtoolbar"
+  },
+  "aiohttp-devtools": {
+    "conda_name": "aiohttp-devtools",
+    "import_name": "aiohttp_devtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-devtools"
+  },
+  "aiohttp-graphql": {
+    "conda_name": "aiohttp-graphql",
+    "import_name": "aiohttp_graphql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-graphql"
+  },
+  "aiohttp-jinja2": {
+    "conda_name": "aiohttp-jinja2",
+    "import_name": "aiohttp_jinja2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-jinja2"
+  },
+  "aiohttp-retry": {
+    "conda_name": "aiohttp-retry",
+    "import_name": "aiohttp_retry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-retry"
+  },
+  "aiohttp-security": {
+    "conda_name": "aiohttp-security",
+    "import_name": "aiohttp_security",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-security"
+  },
+  "aiohttp-socks": {
+    "conda_name": "aiohttp-socks",
+    "import_name": "aiohttp_socks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-socks"
+  },
+  "aiohttp-sse": {
+    "conda_name": "aiohttp-sse",
+    "import_name": "aiohttp_sse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-sse"
+  },
+  "aiohttp-sse-client": {
+    "conda_name": "aiohttp-sse-client",
+    "import_name": "aiohttp_sse_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-sse-client"
+  },
+  "aiohttp-xmlrpc": {
+    "conda_name": "aiohttp-xmlrpc",
+    "import_name": "aiohttp_xmlrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiohttp-xmlrpc"
+  },
+  "aioinflux": {
+    "conda_name": "aioinflux",
+    "import_name": "aioinflux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioinflux"
+  },
+  "aioitertools": {
+    "conda_name": "aioitertools",
+    "import_name": "aioitertools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioitertools"
+  },
+  "aiokafka": {
+    "conda_name": "aiokafka",
+    "import_name": "aiokafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiokafka"
+  },
+  "aiolimiter": {
+    "conda_name": "aiolimiter",
+    "import_name": "aiolimiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiolimiter"
+  },
+  "aiomcache": {
+    "conda_name": "aiomcache",
+    "import_name": "aiomcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiomcache"
+  },
+  "aiomysql": {
+    "conda_name": "aiomysql",
+    "import_name": "aiomysql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiomysql"
+  },
+  "aionotify": {
+    "conda_name": "aionotify",
+    "import_name": "aionotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aionotify"
+  },
+  "aioopenssl": {
+    "conda_name": "aioopenssl",
+    "import_name": "aioopenssl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioopenssl"
+  },
+  "aiooss2": {
+    "conda_name": "aiooss2",
+    "import_name": "aiooss2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiooss2"
+  },
+  "aiopeewee": {
+    "conda_name": "aiopeewee",
+    "import_name": "aiopeewee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiopeewee"
+  },
+  "aioredis": {
+    "conda_name": "aioredis",
+    "import_name": "aioredis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioredis"
+  },
+  "aioresponses": {
+    "conda_name": "aioresponses",
+    "import_name": "aioresponses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioresponses"
+  },
+  "aioresult": {
+    "conda_name": "aioresult",
+    "import_name": "aioresult",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioresult"
+  },
+  "aioretry": {
+    "conda_name": "aioretry",
+    "import_name": "aioretry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioretry"
+  },
+  "aiormq": {
+    "conda_name": "aiormq",
+    "import_name": "aiormq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiormq"
+  },
+  "aiortc": {
+    "conda_name": "aiortc",
+    "import_name": "aiortc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiortc"
+  },
+  "aiorun": {
+    "conda_name": "aiorun",
+    "import_name": "aiorun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiorun"
+  },
+  "aiorwlock": {
+    "conda_name": "aiorwlock",
+    "import_name": "aiorwlock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiorwlock"
+  },
+  "aiosasl": {
+    "conda_name": "aiosasl",
+    "import_name": "aiosasl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiosasl"
+  },
+  "aioshutil": {
+    "conda_name": "aioshutil",
+    "import_name": "aioshutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioshutil"
+  },
+  "aiosignal": {
+    "conda_name": "aiosignal",
+    "import_name": "aiosignal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiosignal"
+  },
+  "aioslacker": {
+    "conda_name": "aioslacker",
+    "import_name": "aioslacker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioslacker"
+  },
+  "aiosmtpd": {
+    "conda_name": "aiosmtpd",
+    "import_name": "aiosmtpd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiosmtpd"
+  },
+  "aiostream": {
+    "conda_name": "aiostream",
+    "import_name": "aiostream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiostream"
+  },
+  "aiotube": {
+    "conda_name": "aiotube",
+    "import_name": "aiotube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiotube"
+  },
+  "aiowebdav2": {
+    "conda_name": "aiowebdav2",
+    "import_name": "aiowebdav2.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aiowebdav2"
+  },
+  "aioxmpp": {
+    "conda_name": "aioxmpp",
+    "import_name": "aioxmpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aioxmpp"
+  },
+  "aipy": {
+    "conda_name": "aipy",
+    "import_name": "aipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aipy"
+  },
+  "airflow-balancer": {
+    "conda_name": "airflow-balancer",
+    "import_name": "airflow_balancer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-balancer"
+  },
+  "airflow-common-operators": {
+    "conda_name": "airflow-common-operators",
+    "import_name": "airflow_common_operators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-common-operators"
+  },
+  "airflow-config": {
+    "conda_name": "airflow-config",
+    "import_name": "airflow_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-config"
+  },
+  "airflow-dbt": {
+    "conda_name": "airflow-dbt",
+    "import_name": "airflow_dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-dbt"
+  },
+  "airflow-ha": {
+    "conda_name": "airflow-ha",
+    "import_name": "airflow_ha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-ha"
+  },
+  "airflow-priority": {
+    "conda_name": "airflow-priority",
+    "import_name": "airflow_priority.common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-priority"
+  },
+  "airflow-provider-xlsx": {
+    "conda_name": "airflow-provider-xlsx",
+    "import_name": "xlsx_provider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-provider-xlsx"
+  },
+  "airflow-supervisor": {
+    "conda_name": "airflow-supervisor",
+    "import_name": "airflow_supervisor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airflow-supervisor"
+  },
+  "airium": {
+    "conda_name": "airium",
+    "import_name": "airium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airium"
+  },
+  "airportsdata": {
+    "conda_name": "airportsdata",
+    "import_name": "airportsdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "airportsdata"
+  },
+  "aisim": {
+    "conda_name": "aisim",
+    "import_name": "aisim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aisim"
+  },
+  "aisuite": {
+    "conda_name": "aisuite",
+    "import_name": "aisuite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aisuite"
+  },
+  "aixd": {
+    "conda_name": "aixd",
+    "import_name": "aixd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aixd"
+  },
+  "aixd-ara": {
+    "conda_name": "aixd_ara",
+    "import_name": "aixd_ara",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aixd-ara"
+  },
+  "ajc27-freemocap-blender-addon": {
+    "conda_name": "ajc27-freemocap-blender-addon",
+    "import_name": "ajc27_freemocap_blender_addon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ajc27-freemocap-blender-addon"
+  },
+  "ajsonrpc": {
+    "conda_name": "ajsonrpc",
+    "import_name": "ajsonrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ajsonrpc"
+  },
+  "akernel": {
+    "conda_name": "akernel",
+    "import_name": "akernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "akernel"
+  },
+  "akimbo": {
+    "conda_name": "akimbo",
+    "import_name": "akimbo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "akimbo"
+  },
+  "akismet": {
+    "conda_name": "akismet",
+    "import_name": "akismet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "akismet"
+  },
+  "alabaster": {
+    "conda_name": "alabaster",
+    "import_name": "alabaster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alabaster"
+  },
+  "alang": {
+    "conda_name": "alang",
+    "import_name": "alang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alang"
+  },
+  "albucore": {
+    "conda_name": "albucore",
+    "import_name": "albucore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "albucore"
+  },
+  "album": {
+    "conda_name": "album",
+    "import_name": "album",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album"
+  },
+  "album-distributed": {
+    "conda_name": "album-distributed",
+    "import_name": "album",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-distributed"
+  },
+  "album-docker": {
+    "conda_name": "album-docker",
+    "import_name": "album",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-docker"
+  },
+  "album-environments": {
+    "conda_name": "album-environments",
+    "import_name": "album.environments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-environments"
+  },
+  "album-gui": {
+    "conda_name": "album-gui",
+    "import_name": "album.gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-gui"
+  },
+  "album-package": {
+    "conda_name": "album-package",
+    "import_name": "album",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-package"
+  },
+  "album-runner": {
+    "conda_name": "album-runner",
+    "import_name": "album.runner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-runner"
+  },
+  "album-solution-api": {
+    "conda_name": "album-solution-api",
+    "import_name": "album.runner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "album-solution-api"
+  },
+  "alchemlyb": {
+    "conda_name": "alchemlyb",
+    "import_name": "alchemlyb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alchemlyb"
+  },
+  "aldjemy": {
+    "conda_name": "aldjemy",
+    "import_name": "aldjemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aldjemy"
+  },
+  "alembic-utils": {
+    "conda_name": "alembic-utils",
+    "import_name": "alembic_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alembic-utils"
+  },
+  "aleph-alpha-client": {
+    "conda_name": "aleph-alpha-client",
+    "import_name": "aleph_alpha_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aleph-alpha-client"
+  },
+  "alfasim-sdk": {
+    "conda_name": "alfasim-sdk",
+    "import_name": "alfasim_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alfasim-sdk"
+  },
+  "algopy": {
+    "conda_name": "algopy",
+    "import_name": "algopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "algopy"
+  },
+  "algorithms": {
+    "conda_name": "algorithms",
+    "import_name": "algorithms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "algorithms"
+  },
+  "algotom": {
+    "conda_name": "algotom",
+    "import_name": "algotom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "algotom"
+  },
+  "algviz": {
+    "conda_name": "algviz",
+    "import_name": "algviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "algviz"
+  },
+  "alibabacloud-endpoint-util": {
+    "conda_name": "alibabacloud-endpoint-util",
+    "import_name": "alibabacloud_endpoint_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibabacloud-endpoint-util"
+  },
+  "alibabacloud-gateway-spi": {
+    "conda_name": "alibabacloud-gateway-spi",
+    "import_name": "alibabacloud_gateway_spi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibabacloud-gateway-spi"
+  },
+  "alibabacloud-openapi-util": {
+    "conda_name": "alibabacloud-openapi-util",
+    "import_name": "alibabacloud_openapi_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibabacloud-openapi-util"
+  },
+  "alibabacloud-tea": {
+    "conda_name": "alibabacloud-tea",
+    "import_name": "Tea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibabacloud-tea"
+  },
+  "alibabacloud-tea-xml": {
+    "conda_name": "alibabacloud-tea-xml",
+    "import_name": "alibabacloud_tea_xml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibabacloud-tea-xml"
+  },
+  "alibi": {
+    "conda_name": "alibi",
+    "import_name": "alibi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibi"
+  },
+  "alibi-detect": {
+    "conda_name": "alibi-detect",
+    "import_name": "alibi_detect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alibi-detect"
+  },
+  "alive-progress": {
+    "conda_name": "alive-progress",
+    "import_name": "alive_progress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alive-progress"
+  },
+  "aliyun-python-sdk-core": {
+    "conda_name": "aliyun-python-sdk-core",
+    "import_name": "aliyunsdkcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aliyun-python-sdk-core"
+  },
+  "aliyun-python-sdk-core-v3": {
+    "conda_name": "aliyun-python-sdk-core-v3",
+    "import_name": "aliyunsdkcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aliyun-python-sdk-core-v3"
+  },
+  "aliyun-python-sdk-kms": {
+    "conda_name": "aliyun-python-sdk-kms",
+    "import_name": "aliyunsdkkms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aliyun-python-sdk-kms"
+  },
+  "allagash": {
+    "conda_name": "allagash",
+    "import_name": "allagash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "allagash"
+  },
+  "allensdk": {
+    "conda_name": "allensdk",
+    "import_name": "allensdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "allensdk"
+  },
+  "allpairspy": {
+    "conda_name": "allpairspy",
+    "import_name": "allpairspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "allpairspy"
+  },
+  "allthekernels": {
+    "conda_name": "allthekernels",
+    "import_name": "allthekernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "allthekernels"
+  },
+  "aloe": {
+    "conda_name": "aloe",
+    "import_name": "aloe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aloe"
+  },
+  "alpaca-py": {
+    "conda_name": "alpaca-py",
+    "import_name": "alpaca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alpaca-py"
+  },
+  "alpha-shapes": {
+    "conda_name": "alpha-shapes",
+    "import_name": "alpha_shapes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alpha-shapes"
+  },
+  "alpha-vantage": {
+    "conda_name": "alpha_vantage",
+    "import_name": "alpha_vantage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alpha-vantage"
+  },
+  "alphacsc": {
+    "conda_name": "alphacsc",
+    "import_name": "alphacsc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alphacsc"
+  },
+  "alphalens": {
+    "conda_name": "alphalens",
+    "import_name": "alphalens",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alphalens"
+  },
+  "alphalens-reloaded": {
+    "conda_name": "alphalens-reloaded",
+    "import_name": "alphalens",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alphalens-reloaded"
+  },
+  "alphashape": {
+    "conda_name": "alphashape",
+    "import_name": "alphashape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alphashape"
+  },
+  "alphatwirl": {
+    "conda_name": "alphatwirl",
+    "import_name": "alphatwirl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alphatwirl"
+  },
+  "altair-data-server": {
+    "conda_name": "altair_data_server",
+    "import_name": "altair_data_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altair-data-server"
+  },
+  "altair-saver": {
+    "conda_name": "altair_saver",
+    "import_name": "altair_saver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altair-saver"
+  },
+  "altair-tiles": {
+    "conda_name": "altair_tiles",
+    "import_name": "altair_tiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altair-tiles"
+  },
+  "altair-transform": {
+    "conda_name": "altair-transform",
+    "import_name": "altair_transform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altair-transform"
+  },
+  "altair-viewer": {
+    "conda_name": "altair_viewer",
+    "import_name": "altair_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altair-viewer"
+  },
+  "altdphi": {
+    "conda_name": "altdphi",
+    "import_name": "altdphi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altdphi"
+  },
+  "alteryx-open-src-update-checker": {
+    "conda_name": "alteryx-open-src-update-checker",
+    "import_name": "alteryx_open_src_update_checker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alteryx-open-src-update-checker"
+  },
+  "altgraph": {
+    "conda_name": "altgraph",
+    "import_name": "altgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "altgraph"
+  },
+  "alto-dev": {
+    "conda_name": "alto-dev",
+    "import_name": "alto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "alto-dev"
+  },
+  "amara3-iri": {
+    "conda_name": "amara3.iri",
+    "import_name": "amara3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amara3-iri"
+  },
+  "amazon-braket-default-simulator": {
+    "conda_name": "amazon-braket-default-simulator",
+    "import_name": "braket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-braket-default-simulator"
+  },
+  "amazon-braket-ocean-plugin": {
+    "conda_name": "amazon-braket-ocean-plugin",
+    "import_name": "braket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-braket-ocean-plugin"
+  },
+  "amazon-braket-schemas": {
+    "conda_name": "amazon-braket-schemas",
+    "import_name": "braket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-braket-schemas"
+  },
+  "amazon-braket-sdk": {
+    "conda_name": "amazon-braket-sdk",
+    "import_name": "braket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-braket-sdk"
+  },
+  "amazon-codewhisperer-jupyterlab-ext": {
+    "conda_name": "amazon-codewhisperer-jupyterlab-ext",
+    "import_name": "amazon_codewhisperer_jupyterlab_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-codewhisperer-jupyterlab-ext"
+  },
+  "amazon-q-developer-jupyterlab-ext": {
+    "conda_name": "amazon-q-developer-jupyterlab-ext",
+    "import_name": "amazon_q_developer_jupyterlab_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-q-developer-jupyterlab-ext"
+  },
+  "amazon-sagemaker-hyperpod": {
+    "conda_name": "amazon-sagemaker-hyperpod",
+    "import_name": "amazon_sagemaker_hyperpod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-hyperpod"
+  },
+  "amazon-sagemaker-jupyter-ai-q-developer": {
+    "conda_name": "amazon-sagemaker-jupyter-ai-q-developer",
+    "import_name": "amazon_sagemaker_jupyter_ai_q_developer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-jupyter-ai-q-developer"
+  },
+  "amazon-sagemaker-jupyter-scheduler": {
+    "conda_name": "amazon-sagemaker-jupyter-scheduler",
+    "import_name": "amazon_sagemaker_jupyter_scheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-jupyter-scheduler"
+  },
+  "amazon-sagemaker-sql-editor": {
+    "conda_name": "amazon_sagemaker_sql_editor",
+    "import_name": "amazon_sagemaker_sql_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-sql-editor"
+  },
+  "amazon-sagemaker-sql-execution": {
+    "conda_name": "amazon-sagemaker-sql-execution",
+    "import_name": "amazon_sagemaker_sql_execution",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-sql-execution"
+  },
+  "amazon-sagemaker-sql-magic": {
+    "conda_name": "amazon-sagemaker-sql-magic",
+    "import_name": "amazon_sagemaker_sql_magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amazon-sagemaker-sql-magic"
+  },
+  "ambiance": {
+    "conda_name": "ambiance",
+    "import_name": "ambiance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ambiance"
+  },
+  "amep": {
+    "conda_name": "amep",
+    "import_name": "amep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amep"
+  },
+  "amp-atomistics": {
+    "conda_name": "amp-atomistics",
+    "import_name": "amp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amp-atomistics"
+  },
+  "amp-rsl-rl": {
+    "conda_name": "amp-rsl-rl",
+    "import_name": "amp_rsl_rl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amp-rsl-rl"
+  },
+  "ampform": {
+    "conda_name": "ampform",
+    "import_name": "ampform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ampform"
+  },
+  "ampform-dpd": {
+    "conda_name": "ampform-dpd",
+    "import_name": "ampform_dpd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ampform-dpd"
+  },
+  "amplitude-analytics": {
+    "conda_name": "amplitude-analytics",
+    "import_name": "amplitude",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amplitude-analytics"
+  },
+  "amplpy": {
+    "conda_name": "amplpy",
+    "import_name": "amplpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amplpy"
+  },
+  "amply": {
+    "conda_name": "amply",
+    "import_name": "amply",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amply"
+  },
+  "amqp": {
+    "conda_name": "amqp",
+    "import_name": "amqp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amqp"
+  },
+  "amset": {
+    "conda_name": "amset",
+    "import_name": "amset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amset"
+  },
+  "amzn-sagemaker-aiops-jupyterlab-extension": {
+    "conda_name": "amzn-sagemaker-aiops-jupyterlab-extension",
+    "import_name": "amzn_sagemaker_aiops_jupyterlab_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "amzn-sagemaker-aiops-jupyterlab-extension"
+  },
+  "anaconda-ai": {
+    "conda_name": "anaconda-ai",
+    "import_name": "anaconda_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaconda-ai"
+  },
+  "anaconda-assistant-conda": {
+    "conda_name": "anaconda-assistant-conda",
+    "import_name": "anaconda_assistant_conda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaconda-assistant-conda"
+  },
+  "anaconda-assistant-sdk": {
+    "conda_name": "anaconda-assistant-sdk",
+    "import_name": "anaconda_assistant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaconda-assistant-sdk"
+  },
+  "anaconda-auth": {
+    "conda_name": "anaconda-auth",
+    "import_name": "anaconda_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaconda-auth"
+  },
+  "anaconda-catalogs": {
+    "conda_name": "anaconda-catalogs",
+    "import_name": "anaconda_catalogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaconda-catalogs"
+  },
+  "anaflow": {
+    "conda_name": "anaflow",
+    "import_name": "anaflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anaflow"
+  },
+  "analphipy": {
+    "conda_name": "analphipy",
+    "import_name": "analphipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "analphipy"
+  },
+  "analysisstore": {
+    "conda_name": "analysisstore",
+    "import_name": "analysisstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "analysisstore"
+  },
+  "anarcii": {
+    "conda_name": "anarcii",
+    "import_name": "anarcii",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anarcii"
+  },
+  "anchor-annotator": {
+    "conda_name": "anchor-annotator",
+    "import_name": "anchor.command_line",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anchor-annotator"
+  },
+  "anchorboosting": {
+    "conda_name": "anchorboosting",
+    "import_name": "anchorboosting",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anchorboosting"
+  },
+  "andes": {
+    "conda_name": "andes",
+    "import_name": "andes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "andes"
+  },
+  "anemoi-datasets": {
+    "conda_name": "anemoi-datasets",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-datasets"
+  },
+  "anemoi-graphs": {
+    "conda_name": "anemoi-graphs",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-graphs"
+  },
+  "anemoi-inference": {
+    "conda_name": "anemoi-inference",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-inference"
+  },
+  "anemoi-models": {
+    "conda_name": "anemoi-models",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-models"
+  },
+  "anemoi-registry": {
+    "conda_name": "anemoi-registry",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-registry"
+  },
+  "anemoi-transform": {
+    "conda_name": "anemoi-transform",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-transform"
+  },
+  "anemoi-utils": {
+    "conda_name": "anemoi-utils",
+    "import_name": "anemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anemoi-utils"
+  },
+  "anesthetic": {
+    "conda_name": "anesthetic",
+    "import_name": "anesthetic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anesthetic"
+  },
+  "angelcommunity": {
+    "conda_name": "angelcommunity",
+    "import_name": "angel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "angelcommunity"
+  },
+  "anidms": {
+    "conda_name": "anidms",
+    "import_name": "anidms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anidms"
+  },
+  "animatplot": {
+    "conda_name": "animatplot",
+    "import_name": "animatplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "animatplot"
+  },
+  "animatplot-ng": {
+    "conda_name": "animatplot-ng",
+    "import_name": "animatplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "animatplot-ng"
+  },
+  "anndata": {
+    "conda_name": "anndata",
+    "import_name": "anndata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anndata"
+  },
+  "annexremote": {
+    "conda_name": "annexremote",
+    "import_name": "annexremote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "annexremote"
+  },
+  "annotated-types": {
+    "conda_name": "annotated-types",
+    "import_name": "annotated_types",
+    "mapping_source": "regro-bot",
+    "pypi_name": "annotated-types"
+  },
+  "annoy": {
+    "conda_name": "python-annoy",
+    "import_name": "annoy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "annoy"
+  },
+  "annsel": {
+    "conda_name": "annsel",
+    "import_name": "annsel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "annsel"
+  },
+  "ansh": {
+    "conda_name": "ansh",
+    "import_name": "ansh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansh"
+  },
+  "ansi": {
+    "conda_name": "ansi",
+    "import_name": "ansi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansi"
+  },
+  "ansible": {
+    "conda_name": "ansible",
+    "import_name": "ansible_collections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible"
+  },
+  "ansible-base": {
+    "conda_name": "ansible-base",
+    "import_name": "ansible",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-base"
+  },
+  "ansible-bender": {
+    "conda_name": "ansible-bender",
+    "import_name": "ansible_bender",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-bender"
+  },
+  "ansible-compat": {
+    "conda_name": "ansible-compat",
+    "import_name": "ansible_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-compat"
+  },
+  "ansible-core": {
+    "conda_name": "ansible-core",
+    "import_name": "ansible",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-core"
+  },
+  "ansible-kernel": {
+    "conda_name": "ansible-kernel",
+    "import_name": "ansible_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-kernel"
+  },
+  "ansible-lint": {
+    "conda_name": "ansible-lint",
+    "import_name": "ansiblelint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansible-lint"
+  },
+  "ansicolors": {
+    "conda_name": "ansicolors",
+    "import_name": "colors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansicolors"
+  },
+  "ansicon": {
+    "conda_name": "ansicon",
+    "import_name": "ansicon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansicon"
+  },
+  "ansimarkup": {
+    "conda_name": "ansimarkup",
+    "import_name": "ansimarkup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansimarkup"
+  },
+  "ansitable": {
+    "conda_name": "ansitable",
+    "import_name": "ansitable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansitable"
+  },
+  "ansiwrap": {
+    "conda_name": "ansiwrap",
+    "import_name": "ansiwrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansiwrap"
+  },
+  "ansys-api-dbu": {
+    "conda_name": "ansys-api-dbu",
+    "import_name": "ansys.api.dbu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-dbu"
+  },
+  "ansys-api-discovery": {
+    "conda_name": "ansys-api-discovery",
+    "import_name": "ansys.api.discovery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-discovery"
+  },
+  "ansys-api-geometry": {
+    "conda_name": "ansys-api-geometry",
+    "import_name": "ansys.api.geometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-geometry"
+  },
+  "ansys-api-mapdl-v0": {
+    "conda_name": "ansys-api-mapdl-v0",
+    "import_name": "ansys.api.mapdl.v0",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-mapdl-v0"
+  },
+  "ansys-api-mechanical": {
+    "conda_name": "ansys-api-mechanical",
+    "import_name": "ansys.api.mechanical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-mechanical"
+  },
+  "ansys-api-platform-instancemanagement": {
+    "conda_name": "ansys-api-platform-instancemanagement",
+    "import_name": "ansys.api.platform.instancemanagement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-api-platform-instancemanagement"
+  },
+  "ansys-geometry-core": {
+    "conda_name": "ansys-geometry-core",
+    "import_name": "ansys.geometry.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-geometry-core"
+  },
+  "ansys-mapdl-reader": {
+    "conda_name": "ansys-mapdl-reader",
+    "import_name": "ansys.mapdl.reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-mapdl-reader"
+  },
+  "ansys-mechanical-env": {
+    "conda_name": "ansys-mechanical-env",
+    "import_name": "ansys.mechanical.env",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-mechanical-env"
+  },
+  "ansys-platform-instancemanagement": {
+    "conda_name": "ansys-platform-instancemanagement",
+    "import_name": "ansys.platform.instancemanagement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-platform-instancemanagement"
+  },
+  "ansys-pythonnet": {
+    "conda_name": "ansys-pythonnet",
+    "import_name": "pythonnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-pythonnet"
+  },
+  "ansys-rocky-core": {
+    "conda_name": "ansys-rocky-core",
+    "import_name": "ansys.rocky.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-rocky-core"
+  },
+  "ansys-tools-common": {
+    "conda_name": "ansys-tools-common",
+    "import_name": "ansys.tools.common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-tools-common"
+  },
+  "ansys-tools-path": {
+    "conda_name": "ansys-tools-path",
+    "import_name": "ansys.tools.path",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-tools-path"
+  },
+  "ansys-tools-protoc-helper": {
+    "conda_name": "ansys_tools_protoc_helper",
+    "import_name": "ansys.tools.protoc_helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-tools-protoc-helper"
+  },
+  "ansys-tools-visualization-interface": {
+    "conda_name": "ansys-tools-visualization-interface",
+    "import_name": "ansys.tools.visualization_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ansys-tools-visualization-interface"
+  },
+  "antares-client": {
+    "conda_name": "antares-client",
+    "import_name": "antares_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antares-client"
+  },
+  "antiberty": {
+    "conda_name": "antiberty",
+    "import_name": "antiberty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antiberty"
+  },
+  "antimeridian": {
+    "conda_name": "antimeridian",
+    "import_name": "antimeridian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antimeridian"
+  },
+  "antio": {
+    "conda_name": "antio",
+    "import_name": "antio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antio"
+  },
+  "antitesting": {
+    "conda_name": "antitesting",
+    "import_name": "antitesting",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antitesting"
+  },
+  "antmocdata": {
+    "conda_name": "antmocdata",
+    "import_name": "antmocdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antmocdata"
+  },
+  "antropy": {
+    "conda_name": "antropy",
+    "import_name": "antropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antropy"
+  },
+  "antspyx": {
+    "conda_name": "antspyx",
+    "import_name": "ants",
+    "mapping_source": "regro-bot",
+    "pypi_name": "antspyx"
+  },
+  "anuga": {
+    "conda_name": "anuga",
+    "import_name": "anuga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anuga"
+  },
+  "anyconfig": {
+    "conda_name": "anyconfig",
+    "import_name": "anyconfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anyconfig"
+  },
+  "anyioutils": {
+    "conda_name": "anyioutils",
+    "import_name": "anyioutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anyioutils"
+  },
+  "anyjson": {
+    "conda_name": "anyjson",
+    "import_name": "anyjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anyjson"
+  },
+  "anymap": {
+    "conda_name": "anymap",
+    "import_name": "anymap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anymap"
+  },
+  "anyqt": {
+    "conda_name": "anyqt",
+    "import_name": "AnyQt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anyqt"
+  },
+  "anys": {
+    "conda_name": "anys",
+    "import_name": "anys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anys"
+  },
+  "anysqlite": {
+    "conda_name": "anysqlite",
+    "import_name": "anysqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anysqlite"
+  },
+  "anywidget": {
+    "conda_name": "anywidget",
+    "import_name": "anywidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "anywidget"
+  },
+  "aodhclient": {
+    "conda_name": "aodhclient",
+    "import_name": "aodhclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aodhclient"
+  },
+  "aoe2netwrapper": {
+    "conda_name": "aoe2netwrapper",
+    "import_name": "aoe2netwrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aoe2netwrapper"
+  },
+  "ap-features": {
+    "conda_name": "ap_features",
+    "import_name": "ap_features",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ap-features"
+  },
+  "apache-airflow": {
+    "conda_name": "airflow",
+    "import_name": "airflow",
+    "mapping_source": "static",
+    "pypi_name": "apache-airflow"
+  },
+  "apache-airflow-backport-providers-cncf-kubernetes": {
+    "conda_name": "apache-airflow-backport-providers-cncf-kubernetes",
+    "import_name": "airflow.providers.cncf.kubernetes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-backport-providers-cncf-kubernetes"
+  },
+  "apache-airflow-providers-apache-sqoop": {
+    "conda_name": "apache-airflow-providers-apache-sqoop",
+    "import_name": "airflow.providers.apache.sqoop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-apache-sqoop"
+  },
+  "apache-airflow-providers-daskexecutor": {
+    "conda_name": "apache-airflow-providers-daskexecutor",
+    "import_name": "airflow.providers.daskexecutor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-daskexecutor"
+  },
+  "apache-airflow-providers-jira": {
+    "conda_name": "apache-airflow-providers-jira",
+    "import_name": "airflow.providers.jira",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-jira"
+  },
+  "apache-airflow-providers-plexus": {
+    "conda_name": "apache-airflow-providers-plexus",
+    "import_name": "airflow.providers.plexus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-plexus"
+  },
+  "apache-airflow-providers-qubole": {
+    "conda_name": "apache-airflow-providers-qubole",
+    "import_name": "airflow.providers.qubole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-qubole"
+  },
+  "apache-airflow-providers-tabular": {
+    "conda_name": "apache-airflow-providers-tabular",
+    "import_name": "airflow.providers.tabular",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-airflow-providers-tabular"
+  },
+  "apache-flink": {
+    "conda_name": "apache-flink",
+    "import_name": "pyflink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-flink"
+  },
+  "apache-flink-libraries": {
+    "conda_name": "apache-flink-libraries",
+    "import_name": "pyflink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-flink-libraries"
+  },
+  "apache-libcloud": {
+    "conda_name": "apache-libcloud",
+    "import_name": "libcloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-libcloud"
+  },
+  "apache-superset": {
+    "conda_name": "superset",
+    "import_name": "superset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apache-superset"
+  },
+  "apav": {
+    "conda_name": "apav",
+    "import_name": "apav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apav"
+  },
+  "apd": {
+    "conda_name": "apd",
+    "import_name": "apd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apd"
+  },
+  "apeye": {
+    "conda_name": "apeye",
+    "import_name": "apeye",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apeye"
+  },
+  "apeye-core": {
+    "conda_name": "apeye-core",
+    "import_name": "apeye_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apeye-core"
+  },
+  "api-inference-community": {
+    "conda_name": "api-inference-community",
+    "import_name": "api_inference_community",
+    "mapping_source": "regro-bot",
+    "pypi_name": "api-inference-community"
+  },
+  "api2db": {
+    "conda_name": "api2db",
+    "import_name": "api2db",
+    "mapping_source": "regro-bot",
+    "pypi_name": "api2db"
+  },
+  "apipkg": {
+    "conda_name": "apipkg",
+    "import_name": "apipkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apipkg"
+  },
+  "apispec-webframeworks": {
+    "conda_name": "apispec-webframeworks",
+    "import_name": "apispec_webframeworks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apispec-webframeworks"
+  },
+  "aplpy": {
+    "conda_name": "aplpy",
+    "import_name": "aplpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aplpy"
+  },
+  "aplus": {
+    "conda_name": "aplus",
+    "import_name": "aplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aplus"
+  },
+  "apng": {
+    "conda_name": "apng",
+    "import_name": "apng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apng"
+  },
+  "apoc": {
+    "conda_name": "apoc-backend",
+    "import_name": "apoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apoc"
+  },
+  "apollinaire": {
+    "conda_name": "apollinaire",
+    "import_name": "apollinaire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apollinaire"
+  },
+  "app-model": {
+    "conda_name": "app-model",
+    "import_name": "app_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "app-model"
+  },
+  "app-pass": {
+    "conda_name": "app-pass",
+    "import_name": "app_pass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "app-pass"
+  },
+  "appdirs": {
+    "conda_name": "appdirs",
+    "import_name": "appdirs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appdirs"
+  },
+  "apphb": {
+    "conda_name": "apphb",
+    "import_name": "apphb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apphb"
+  },
+  "appium-python-client": {
+    "conda_name": "appium-python-client",
+    "import_name": "appium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appium-python-client"
+  },
+  "applaunchservices": {
+    "conda_name": "applaunchservices",
+    "import_name": "applaunchservices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "applaunchservices"
+  },
+  "applicationinsights": {
+    "conda_name": "applicationinsights",
+    "import_name": "applicationinsights",
+    "mapping_source": "regro-bot",
+    "pypi_name": "applicationinsights"
+  },
+  "appligator": {
+    "conda_name": "appligator",
+    "import_name": "appligator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appligator"
+  },
+  "apply-defaults": {
+    "conda_name": "apply_defaults",
+    "import_name": "apply_defaults",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apply-defaults"
+  },
+  "appmap": {
+    "conda_name": "appmap",
+    "import_name": "appmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appmap"
+  },
+  "appmar": {
+    "conda_name": "appmar",
+    "import_name": "appmar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appmar"
+  },
+  "appmode": {
+    "conda_name": "appmode",
+    "import_name": "appmode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appmode"
+  },
+  "appnope": {
+    "conda_name": "appnope",
+    "import_name": "appnope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appnope"
+  },
+  "appose": {
+    "conda_name": "appose",
+    "import_name": "appose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "appose"
+  },
+  "approxposterior": {
+    "conda_name": "approxposterior",
+    "import_name": "approxposterior",
+    "mapping_source": "regro-bot",
+    "pypi_name": "approxposterior"
+  },
+  "aproc": {
+    "conda_name": "aproc",
+    "import_name": "aproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aproc"
+  },
+  "apsg": {
+    "conda_name": "apsg",
+    "import_name": "apsg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apsg"
+  },
+  "apstools": {
+    "conda_name": "apstools",
+    "import_name": "apstools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apstools"
+  },
+  "apyxl": {
+    "conda_name": "apyxl",
+    "import_name": "apyxl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "apyxl"
+  },
+  "aqme": {
+    "conda_name": "aqme",
+    "import_name": "aqme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aqme"
+  },
+  "arabic-reshaper": {
+    "conda_name": "arabic_reshaper",
+    "import_name": "arabic_reshaper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arabic-reshaper"
+  },
+  "arabica": {
+    "conda_name": "arabica",
+    "import_name": "arabica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arabica"
+  },
+  "arbol": {
+    "conda_name": "arbol",
+    "import_name": "arbol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arbol"
+  },
+  "arby": {
+    "conda_name": "arby",
+    "import_name": "arby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arby"
+  },
+  "arc3o": {
+    "conda_name": "arc3o",
+    "import_name": "arc3o",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arc3o"
+  },
+  "arch": {
+    "conda_name": "arch-py",
+    "import_name": "arch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arch"
+  },
+  "archinfo": {
+    "conda_name": "archinfo",
+    "import_name": "archinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "archinfo"
+  },
+  "archive-path": {
+    "conda_name": "archive-path",
+    "import_name": "archive_path",
+    "mapping_source": "regro-bot",
+    "pypi_name": "archive-path"
+  },
+  "archspec": {
+    "conda_name": "archspec",
+    "import_name": "archspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "archspec"
+  },
+  "arcos-gui": {
+    "conda_name": "arcos-gui",
+    "import_name": "arcos_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arcos-gui"
+  },
+  "arcos4py": {
+    "conda_name": "arcos4py",
+    "import_name": "arcos4py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arcos4py"
+  },
+  "arcosparse": {
+    "conda_name": "arcosparse",
+    "import_name": "arcosparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arcosparse"
+  },
+  "arcplot": {
+    "conda_name": "arcplot",
+    "import_name": "arcplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arcplot"
+  },
+  "arcx": {
+    "conda_name": "arcx",
+    "import_name": "arcx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arcx"
+  },
+  "area": {
+    "conda_name": "area",
+    "import_name": "area",
+    "mapping_source": "regro-bot",
+    "pypi_name": "area"
+  },
+  "area-detector-handlers": {
+    "conda_name": "area-detector-handlers",
+    "import_name": "area_detector_handlers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "area-detector-handlers"
+  },
+  "arelle-release": {
+    "conda_name": "arelle-release",
+    "import_name": "arelle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arelle-release"
+  },
+  "argh": {
+    "conda_name": "argh",
+    "import_name": "argh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argh"
+  },
+  "argilla": {
+    "conda_name": "argilla",
+    "import_name": "argilla",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argilla"
+  },
+  "argo-models": {
+    "conda_name": "argo-models",
+    "import_name": "argo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argo-models"
+  },
+  "argo-workflows": {
+    "conda_name": "argo-workflows",
+    "import_name": "argo_workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argo-workflows"
+  },
+  "argon2-cffi": {
+    "conda_name": "argon2-cffi",
+    "import_name": "argon2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argon2-cffi"
+  },
+  "argon2-cffi-bindings": {
+    "conda_name": "argon2-cffi-bindings",
+    "import_name": "_argon2_cffi_bindings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argon2-cffi-bindings"
+  },
+  "argopandas": {
+    "conda_name": "argopandas",
+    "import_name": "argopandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argopandas"
+  },
+  "argopt": {
+    "conda_name": "argopt",
+    "import_name": "argopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argopt"
+  },
+  "argopy": {
+    "conda_name": "argopy",
+    "import_name": "argopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argopy"
+  },
+  "argos": {
+    "conda_name": "argos",
+    "import_name": "argos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argos"
+  },
+  "argparse-addons": {
+    "conda_name": "argparse-addons",
+    "import_name": "argparse_addons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argparse-addons"
+  },
+  "argparse-dataclass": {
+    "conda_name": "argparse-dataclass",
+    "import_name": "argparse_dataclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argparse-dataclass"
+  },
+  "argparse-manpage-birdtools": {
+    "conda_name": "argparse-manpage-birdtools",
+    "import_name": "build_manpages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "argparse-manpage-birdtools"
+  },
+  "args": {
+    "conda_name": "args",
+    "import_name": "args",
+    "mapping_source": "regro-bot",
+    "pypi_name": "args"
+  },
+  "aria2p": {
+    "conda_name": "aria2p",
+    "import_name": "aria2p",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aria2p"
+  },
+  "arize-phoenix": {
+    "conda_name": "arize-phoenix",
+    "import_name": "phoenix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arize-phoenix"
+  },
+  "arize-phoenix-client": {
+    "conda_name": "arize-phoenix-client",
+    "import_name": "phoenix.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arize-phoenix-client"
+  },
+  "arize-phoenix-evals": {
+    "conda_name": "arize-phoenix-evals",
+    "import_name": "phoenix.evals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arize-phoenix-evals"
+  },
+  "arize-phoenix-otel": {
+    "conda_name": "arize-phoenix-otel",
+    "import_name": "phoenix.otel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arize-phoenix-otel"
+  },
+  "arm-mango": {
+    "conda_name": "arm-mango",
+    "import_name": "mango",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arm-mango"
+  },
+  "arm-pyart": {
+    "conda_name": "arm_pyart",
+    "import_name": "pyart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arm-pyart"
+  },
+  "arm-test-data": {
+    "conda_name": "arm-test-data",
+    "import_name": "arm_test_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arm-test-data"
+  },
+  "arosics": {
+    "conda_name": "arosics",
+    "import_name": "arosics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arosics"
+  },
+  "arrakis-schema": {
+    "conda_name": "python-arrakis-schema",
+    "import_name": "arrakis_schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arrakis-schema"
+  },
+  "array-split": {
+    "conda_name": "array_split",
+    "import_name": "array_split",
+    "mapping_source": "regro-bot",
+    "pypi_name": "array-split"
+  },
+  "array2gif": {
+    "conda_name": "array2gif",
+    "import_name": "array2gif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "array2gif"
+  },
+  "arraykit": {
+    "conda_name": "arraykit",
+    "import_name": "arraykit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arraykit"
+  },
+  "arraylake": {
+    "conda_name": "arraylake",
+    "import_name": "arraylake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arraylake"
+  },
+  "arraylake-client": {
+    "conda_name": "arraylake-client",
+    "import_name": "arraylake_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arraylake-client"
+  },
+  "arraylias": {
+    "conda_name": "arraylias",
+    "import_name": "arraylias",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arraylias"
+  },
+  "arraymap": {
+    "conda_name": "arraymap",
+    "import_name": "arraymap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arraymap"
+  },
+  "artifacts-keyring": {
+    "conda_name": "artifacts-keyring",
+    "import_name": "artifacts_keyring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "artifacts-keyring"
+  },
+  "arviz-base": {
+    "conda_name": "arviz-base",
+    "import_name": "arviz_base",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arviz-base"
+  },
+  "arvpyf": {
+    "conda_name": "arvpyf",
+    "import_name": "arvpyf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arvpyf"
+  },
+  "arxiv-collector": {
+    "conda_name": "arxiv-collector",
+    "import_name": "arxiv_collector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arxiv-collector"
+  },
+  "arxiv-miner": {
+    "conda_name": "arxiv-miner",
+    "import_name": "arxiv_miner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "arxiv-miner"
+  },
+  "asammdf": {
+    "conda_name": "asammdf",
+    "import_name": "asammdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asammdf"
+  },
+  "asap3": {
+    "conda_name": "asap",
+    "import_name": "asap3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asap3"
+  },
+  "asaplib": {
+    "conda_name": "asaplib",
+    "import_name": "asaplib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asaplib"
+  },
+  "ascii-graph": {
+    "conda_name": "ascii_graph",
+    "import_name": "ascii_graph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ascii-graph"
+  },
+  "ascii-magic": {
+    "conda_name": "ascii_magic",
+    "import_name": "ascii_magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ascii-magic"
+  },
+  "asciichartpy": {
+    "conda_name": "asciichartpy",
+    "import_name": "asciichartpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asciichartpy"
+  },
+  "asciietch": {
+    "conda_name": "asciietch",
+    "import_name": "asciietch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asciietch"
+  },
+  "asciimatics": {
+    "conda_name": "asciimatics",
+    "import_name": "asciimatics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asciimatics"
+  },
+  "asciitree": {
+    "conda_name": "asciitree",
+    "import_name": "asciitree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asciitree"
+  },
+  "asdf": {
+    "conda_name": "asdf",
+    "import_name": "asdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf"
+  },
+  "asdf-astropy": {
+    "conda_name": "asdf-astropy",
+    "import_name": "asdf_astropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-astropy"
+  },
+  "asdf-coordinates-schemas": {
+    "conda_name": "asdf-coordinates-schemas",
+    "import_name": "asdf_coordinates_schemas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-coordinates-schemas"
+  },
+  "asdf-standard": {
+    "conda_name": "asdf-standard",
+    "import_name": "asdf_standard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-standard"
+  },
+  "asdf-transform-schemas": {
+    "conda_name": "asdf-transform-schemas",
+    "import_name": "asdf_transform_schemas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-transform-schemas"
+  },
+  "asdf-unit-schemas": {
+    "conda_name": "asdf-unit-schemas",
+    "import_name": "asdf_unit_schemas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-unit-schemas"
+  },
+  "asdf-wcs-schemas": {
+    "conda_name": "asdf-wcs-schemas",
+    "import_name": "asdf_wcs_schemas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdf-wcs-schemas"
+  },
+  "asdfghjkl": {
+    "conda_name": "asdfghjkl",
+    "import_name": "asdl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asdfghjkl"
+  },
+  "ase": {
+    "conda_name": "ase",
+    "import_name": "ase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ase"
+  },
+  "ase-notebook": {
+    "conda_name": "ase-notebook",
+    "import_name": "ase_notebook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ase-notebook"
+  },
+  "asesurfacefinder": {
+    "conda_name": "asesurfacefinder",
+    "import_name": "asesurfacefinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asesurfacefinder"
+  },
+  "asf-enumeration": {
+    "conda_name": "asf_enumeration",
+    "import_name": "asf_enumeration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asf-enumeration"
+  },
+  "asf-tools": {
+    "conda_name": "asf_tools",
+    "import_name": "asf_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asf-tools"
+  },
+  "asfsmd": {
+    "conda_name": "asfsmd",
+    "import_name": "asfsmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asfsmd"
+  },
+  "asgi-correlation-id": {
+    "conda_name": "asgi-correlation-id",
+    "import_name": "asgi_correlation_id",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asgi-correlation-id"
+  },
+  "asgi-csrf": {
+    "conda_name": "asgi-csrf",
+    "import_name": "asgi_csrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asgi-csrf"
+  },
+  "asgi-lifespan": {
+    "conda_name": "asgi-lifespan",
+    "import_name": "asgi_lifespan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asgi-lifespan"
+  },
+  "asgi-logger": {
+    "conda_name": "asgi-logger",
+    "import_name": "asgi_logger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asgi-logger"
+  },
+  "asimov": {
+    "conda_name": "asimov",
+    "import_name": "asimov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asimov"
+  },
+  "asimov-gwdata": {
+    "conda_name": "asimov-gwdata",
+    "import_name": "datafind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asimov-gwdata"
+  },
+  "asitop": {
+    "conda_name": "asitop",
+    "import_name": "asitop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asitop"
+  },
+  "askbot": {
+    "conda_name": "askbot",
+    "import_name": "askbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "askbot"
+  },
+  "asks": {
+    "conda_name": "asks",
+    "import_name": "asks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asks"
+  },
+  "asn1": {
+    "conda_name": "asn1",
+    "import_name": "asn1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asn1"
+  },
+  "asn1crypto": {
+    "conda_name": "asn1crypto",
+    "import_name": "asn1crypto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asn1crypto"
+  },
+  "asp-plot": {
+    "conda_name": "asp-plot",
+    "import_name": "asp_plot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asp-plot"
+  },
+  "asphalt-exceptions": {
+    "conda_name": "asphalt-exceptions",
+    "import_name": "asphalt.exceptions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-exceptions"
+  },
+  "asphalt-mailer": {
+    "conda_name": "asphalt-mailer",
+    "import_name": "asphalt.mailer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-mailer"
+  },
+  "asphalt-mongodb": {
+    "conda_name": "asphalt-mongodb",
+    "import_name": "asphalt.mongodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-mongodb"
+  },
+  "asphalt-py4j": {
+    "conda_name": "asphalt-py4j",
+    "import_name": "asphalt.py4j",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-py4j"
+  },
+  "asphalt-redis": {
+    "conda_name": "asphalt-redis",
+    "import_name": "asphalt.redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-redis"
+  },
+  "asphalt-serialization": {
+    "conda_name": "asphalt-serialization",
+    "import_name": "asphalt.serialization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-serialization"
+  },
+  "asphalt-sqlalchemy": {
+    "conda_name": "asphalt-sqlalchemy",
+    "import_name": "asphalt.sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-sqlalchemy"
+  },
+  "asphalt-templating": {
+    "conda_name": "asphalt-templating",
+    "import_name": "asphalt.templating",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-templating"
+  },
+  "asphalt-web": {
+    "conda_name": "asphalt-web",
+    "import_name": "asphalt.web",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asphalt-web"
+  },
+  "aspy": {
+    "conda_name": "aspy",
+    "import_name": "aspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aspy"
+  },
+  "aspy-refactor-imports": {
+    "conda_name": "aspy.refactor-imports",
+    "import_name": "aspy.refactor_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aspy-refactor-imports"
+  },
+  "asr": {
+    "conda_name": "asr",
+    "import_name": "asr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asr"
+  },
+  "assembly-stats": {
+    "conda_name": "assembly_stats",
+    "import_name": "assembly_stats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "assembly-stats"
+  },
+  "assertpy": {
+    "conda_name": "assertpy",
+    "import_name": "assertpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "assertpy"
+  },
+  "asset": {
+    "conda_name": "asset",
+    "import_name": "asset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asset"
+  },
+  "assist": {
+    "conda_name": "assist",
+    "import_name": "assist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "assist"
+  },
+  "assist-adam-fork": {
+    "conda_name": "assist-adam-fork",
+    "import_name": "assist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "assist-adam-fork"
+  },
+  "assyst": {
+    "conda_name": "assyst",
+    "import_name": "assyst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "assyst"
+  },
+  "ast-decompiler": {
+    "conda_name": "ast-decompiler",
+    "import_name": "ast_decompiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ast-decompiler"
+  },
+  "ast-selector": {
+    "conda_name": "ast-selector",
+    "import_name": "ast_selector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ast-selector"
+  },
+  "astartes": {
+    "conda_name": "astartes",
+    "import_name": "astartes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astartes"
+  },
+  "astcheck": {
+    "conda_name": "astcheck",
+    "import_name": "astcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astcheck"
+  },
+  "asteval": {
+    "conda_name": "asteval",
+    "import_name": "asteval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asteval"
+  },
+  "astmonkey": {
+    "conda_name": "astmonkey",
+    "import_name": "astmonkey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astmonkey"
+  },
+  "astor": {
+    "conda_name": "astor",
+    "import_name": "astor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astor"
+  },
+  "astpretty": {
+    "conda_name": "astpretty",
+    "import_name": "astpretty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astpretty"
+  },
+  "astral": {
+    "conda_name": "astral",
+    "import_name": "astral",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astral"
+  },
+  "astro-datalab": {
+    "conda_name": "astro-datalab",
+    "import_name": "dl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astro-datalab"
+  },
+  "astro-gdt": {
+    "conda_name": "astro-gdt",
+    "import_name": "gdt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astro-gdt"
+  },
+  "astroalign": {
+    "conda_name": "astroalign",
+    "import_name": "astroalign",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroalign"
+  },
+  "astrocats": {
+    "conda_name": "astrocats",
+    "import_name": "astrocats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astrocats"
+  },
+  "astroedu": {
+    "conda_name": "astroedu",
+    "import_name": "astroedu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroedu"
+  },
+  "astroglue": {
+    "conda_name": "astroglue",
+    "import_name": "AstroGlue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroglue"
+  },
+  "astroid": {
+    "conda_name": "astroid",
+    "import_name": "astroid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroid"
+  },
+  "astrolink": {
+    "conda_name": "astrolink",
+    "import_name": "astrolink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astrolink"
+  },
+  "astroml": {
+    "conda_name": "astroml",
+    "import_name": "astroML",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroml"
+  },
+  "astromodels": {
+    "conda_name": "astromodels",
+    "import_name": "astromodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astromodels"
+  },
+  "astronomia": {
+    "conda_name": "astronomia",
+    "import_name": "astronomia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astronomia"
+  },
+  "astroplan": {
+    "conda_name": "astroplan",
+    "import_name": "astroplan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroplan"
+  },
+  "astropy": {
+    "conda_name": "astropy-base",
+    "import_name": "astropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropy"
+  },
+  "astropy-healpix": {
+    "conda_name": "astropy-healpix",
+    "import_name": "astropy_healpix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropy-healpix"
+  },
+  "astropy-helpers": {
+    "conda_name": "astropy-helpers",
+    "import_name": "astropy_helpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropy-helpers"
+  },
+  "astropy-iers-data": {
+    "conda_name": "astropy-iers-data",
+    "import_name": "astropy_iers_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropy-iers-data"
+  },
+  "astropy-sphinx-theme": {
+    "conda_name": "astropy-sphinx-theme",
+    "import_name": "astropy_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropy-sphinx-theme"
+  },
+  "astropydantic": {
+    "conda_name": "astropydantic",
+    "import_name": "astropydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astropydantic"
+  },
+  "astroquery": {
+    "conda_name": "astroquery",
+    "import_name": "astroquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroquery"
+  },
+  "astroscrappy": {
+    "conda_name": "astroscrappy",
+    "import_name": "astroscrappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astroscrappy"
+  },
+  "astrowidgets": {
+    "conda_name": "astrowidgets",
+    "import_name": "astrowidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astrowidgets"
+  },
+  "astsearch": {
+    "conda_name": "astsearch",
+    "import_name": "astsearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astsearch"
+  },
+  "asttokens": {
+    "conda_name": "asttokens",
+    "import_name": "asttokens",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asttokens"
+  },
+  "astunparse": {
+    "conda_name": "astunparse",
+    "import_name": "astunparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "astunparse"
+  },
+  "asv": {
+    "conda_name": "asv",
+    "import_name": "asv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asv"
+  },
+  "asv-bench-memray": {
+    "conda_name": "asv_bench_memray",
+    "import_name": "asv_bench_memray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asv-bench-memray"
+  },
+  "async-dsmz": {
+    "conda_name": "async-dsmz",
+    "import_name": "async_dsmz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "async-dsmz"
+  },
+  "async-exit-stack": {
+    "conda_name": "async-exit-stack",
+    "import_name": "async_exit_stack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "async-exit-stack"
+  },
+  "async-generator": {
+    "conda_name": "async_generator",
+    "import_name": "async_generator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "async-generator"
+  },
+  "async-property": {
+    "conda_name": "async-property",
+    "import_name": "async_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "async-property"
+  },
+  "asyncache": {
+    "conda_name": "asyncache",
+    "import_name": "asyncache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncache"
+  },
+  "asyncclick": {
+    "conda_name": "asyncclick",
+    "import_name": "asyncclick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncclick"
+  },
+  "asyncinit": {
+    "conda_name": "asyncinit",
+    "import_name": "asyncinit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncinit"
+  },
+  "asyncinotify": {
+    "conda_name": "asyncinotify",
+    "import_name": "asyncinotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncinotify"
+  },
+  "asyncio-atexit": {
+    "conda_name": "asyncio-atexit",
+    "import_name": "asyncio_atexit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncio-atexit"
+  },
+  "asyncqt": {
+    "conda_name": "asyncqt",
+    "import_name": "asyncqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncqt"
+  },
+  "asyncssh": {
+    "conda_name": "asyncssh",
+    "import_name": "asyncssh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncssh"
+  },
+  "asyncstdlib": {
+    "conda_name": "asyncstdlib",
+    "import_name": "asyncstdlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncstdlib"
+  },
+  "asynctest": {
+    "conda_name": "asynctest",
+    "import_name": "asynctest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asynctest"
+  },
+  "asyncua": {
+    "conda_name": "asyncua",
+    "import_name": "asyncua",
+    "mapping_source": "regro-bot",
+    "pypi_name": "asyncua"
+  },
+  "atap-widgets": {
+    "conda_name": "atap_widgets",
+    "import_name": "atap_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atap-widgets"
+  },
+  "atdict": {
+    "conda_name": "atdict",
+    "import_name": "atdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atdict"
+  },
+  "atlas-schema": {
+    "conda_name": "atlas-schema",
+    "import_name": "atlas_schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atlas-schema"
+  },
+  "atlasclient": {
+    "conda_name": "atlasclient",
+    "import_name": "atlasclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atlasclient"
+  },
+  "atlassian-python-api": {
+    "conda_name": "atlassian-python-api",
+    "import_name": "atlassian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atlassian-python-api"
+  },
+  "atlite": {
+    "conda_name": "atlite",
+    "import_name": "atlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atlite"
+  },
+  "atom": {
+    "conda_name": "atom",
+    "import_name": "atom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atom"
+  },
+  "atom-ml": {
+    "conda_name": "atom-ml",
+    "import_name": "atom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atom-ml"
+  },
+  "atomap": {
+    "conda_name": "atomap",
+    "import_name": "atomap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomap"
+  },
+  "atomate": {
+    "conda_name": "atomate",
+    "import_name": "atomate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomate"
+  },
+  "atomate2": {
+    "conda_name": "atomate2",
+    "import_name": "atomate2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomate2"
+  },
+  "atomic-counter": {
+    "conda_name": "atomic-counter",
+    "import_name": "atomic_counter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomic-counter"
+  },
+  "atomic-hpc": {
+    "conda_name": "atomic-hpc",
+    "import_name": "atomic_hpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomic-hpc"
+  },
+  "atomicfile": {
+    "conda_name": "atomicfile",
+    "import_name": "atomicfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomicfile"
+  },
+  "atomicwrites": {
+    "conda_name": "atomicwrites",
+    "import_name": "atomicwrites",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomicwrites"
+  },
+  "atomman": {
+    "conda_name": "atomman",
+    "import_name": "atomman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomman"
+  },
+  "atomneb": {
+    "conda_name": "atomneb",
+    "import_name": "atomneb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomneb"
+  },
+  "atomrdf": {
+    "conda_name": "atomrdf",
+    "import_name": "atomrdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atomrdf"
+  },
+  "atpbar": {
+    "conda_name": "atpbar",
+    "import_name": "atpbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atpbar"
+  },
+  "atproto": {
+    "conda_name": "atproto",
+    "import_name": "atproto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atproto"
+  },
+  "atpublic": {
+    "conda_name": "atpublic",
+    "import_name": "public",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atpublic"
+  },
+  "atsas-pipelines": {
+    "conda_name": "atsas-pipelines",
+    "import_name": "atsas_pipelines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atsas-pipelines"
+  },
+  "atsim-potentials": {
+    "conda_name": "atsim-potentials",
+    "import_name": "atsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "atsim-potentials"
+  },
+  "attmap": {
+    "conda_name": "attmap",
+    "import_name": "attmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attmap"
+  },
+  "attrdict": {
+    "conda_name": "attrdict",
+    "import_name": "attrdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attrdict"
+  },
+  "attrdict3": {
+    "conda_name": "attrdict3",
+    "import_name": "attrdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attrdict3"
+  },
+  "attributedict": {
+    "conda_name": "attributedict",
+    "import_name": "attributedict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attributedict"
+  },
+  "attributes-doc": {
+    "conda_name": "attributes-doc",
+    "import_name": "attributes_doc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attributes-doc"
+  },
+  "attrmap": {
+    "conda_name": "attrmap",
+    "import_name": "attrmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attrmap"
+  },
+  "attrs-strict": {
+    "conda_name": "attrs-strict",
+    "import_name": "attrs_strict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attrs-strict"
+  },
+  "attune": {
+    "conda_name": "attune",
+    "import_name": "attune",
+    "mapping_source": "regro-bot",
+    "pypi_name": "attune"
+  },
+  "audio-separator": {
+    "conda_name": "audio-separator",
+    "import_name": "audio_separator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "audio-separator"
+  },
+  "audiogrep": {
+    "conda_name": "audiogrep",
+    "import_name": "audiogrep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "audiogrep"
+  },
+  "audioread": {
+    "conda_name": "audioread",
+    "import_name": "audioread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "audioread"
+  },
+  "auditwheel": {
+    "conda_name": "auditwheel",
+    "import_name": "auditwheel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auditwheel"
+  },
+  "augment-nd": {
+    "conda_name": "augment-nd",
+    "import_name": "augment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "augment-nd"
+  },
+  "augmentor": {
+    "conda_name": "augmentor",
+    "import_name": "Augmentor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "augmentor"
+  },
+  "augurs": {
+    "conda_name": "augurs",
+    "import_name": "augurs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "augurs"
+  },
+  "aurora": {
+    "conda_name": "aurora",
+    "import_name": "aurora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aurora"
+  },
+  "aurora-ssg": {
+    "conda_name": "aurora-ssg",
+    "import_name": "aurora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aurora-ssg"
+  },
+  "aurorafusion": {
+    "conda_name": "aurorafusion",
+    "import_name": "aurora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aurorafusion"
+  },
+  "auroris": {
+    "conda_name": "auroris",
+    "import_name": "auroris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auroris"
+  },
+  "austin-python": {
+    "conda_name": "austin-python",
+    "import_name": "austin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "austin-python"
+  },
+  "authres": {
+    "conda_name": "authres",
+    "import_name": "authres",
+    "mapping_source": "regro-bot",
+    "pypi_name": "authres"
+  },
+  "authzed": {
+    "conda_name": "authzed-py",
+    "import_name": "authzed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "authzed"
+  },
+  "auto-all": {
+    "conda_name": "auto-all",
+    "import_name": "auto_all",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto-all"
+  },
+  "auto-intersphinx": {
+    "conda_name": "auto-intersphinx",
+    "import_name": "auto_intersphinx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto-intersphinx"
+  },
+  "auto-labeling-pipeline": {
+    "conda_name": "auto-labeling-pipeline",
+    "import_name": "auto_labeling_pipeline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto-labeling-pipeline"
+  },
+  "auto-rxn": {
+    "conda_name": "auto_rxn",
+    "import_name": "auto_rxn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto-rxn"
+  },
+  "auto-ts": {
+    "conda_name": "auto-ts",
+    "import_name": "auto_ts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto-ts"
+  },
+  "auto3d": {
+    "conda_name": "auto3d",
+    "import_name": "Auto3D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auto3d"
+  },
+  "autoboost": {
+    "conda_name": "autoboost",
+    "import_name": "autoboost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoboost"
+  },
+  "autobot-ml": {
+    "conda_name": "autobot-ml",
+    "import_name": "autobot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autobot-ml"
+  },
+  "autocfg": {
+    "conda_name": "autocfg",
+    "import_name": "autocfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autocfg"
+  },
+  "autoclick": {
+    "conda_name": "autoclick",
+    "import_name": "autoclick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoclick"
+  },
+  "autocorrect": {
+    "conda_name": "autocorrect",
+    "import_name": "autocorrect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autocorrect"
+  },
+  "autocron": {
+    "conda_name": "autocron",
+    "import_name": "autocron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autocron"
+  },
+  "autodoc-pydantic": {
+    "conda_name": "autodoc-pydantic",
+    "import_name": "sphinxcontrib.autodoc_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autodoc-pydantic"
+  },
+  "autodocsumm": {
+    "conda_name": "autodocsumm",
+    "import_name": "autodocsumm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autodocsumm"
+  },
+  "autoeft": {
+    "conda_name": "autoeft",
+    "import_name": "autoeft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoeft"
+  },
+  "autoesda": {
+    "conda_name": "autoesda",
+    "import_name": "autoesda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoesda"
+  },
+  "autoflake": {
+    "conda_name": "autoflake",
+    "import_name": "autoflake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoflake"
+  },
+  "autogam": {
+    "conda_name": "autogam",
+    "import_name": "autogam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autogam"
+  },
+  "autograd": {
+    "conda_name": "autograd",
+    "import_name": "autograd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autograd"
+  },
+  "autograd-gamma": {
+    "conda_name": "autograd-gamma",
+    "import_name": "autograd_gamma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autograd-gamma"
+  },
+  "autokeras": {
+    "conda_name": "autokeras",
+    "import_name": "autokeras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autokeras"
+  },
+  "autologging": {
+    "conda_name": "autologging",
+    "import_name": "autologging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autologging"
+  },
+  "automan": {
+    "conda_name": "automan",
+    "import_name": "automan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "automan"
+  },
+  "automap": {
+    "conda_name": "automap",
+    "import_name": "automap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "automap"
+  },
+  "automat": {
+    "conda_name": "automat",
+    "import_name": "automat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "automat"
+  },
+  "automesh": {
+    "conda_name": "automesh",
+    "import_name": "automesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "automesh"
+  },
+  "autometrics": {
+    "conda_name": "autometrics",
+    "import_name": "autometrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autometrics"
+  },
+  "autopage": {
+    "conda_name": "autopage",
+    "import_name": "autopage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autopage"
+  },
+  "autopaths": {
+    "conda_name": "autopaths",
+    "import_name": "autopaths",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autopaths"
+  },
+  "autopep8": {
+    "conda_name": "autopep8",
+    "import_name": "autopep8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autopep8"
+  },
+  "autopxd2": {
+    "conda_name": "autopxd2",
+    "import_name": "autopxd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autopxd2"
+  },
+  "autoray": {
+    "conda_name": "autoray",
+    "import_name": "autoray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoray"
+  },
+  "autoreject": {
+    "conda_name": "autoreject",
+    "import_name": "autoreject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoreject"
+  },
+  "autoscraper": {
+    "conda_name": "autoscraper",
+    "import_name": "autoscraper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autoscraper"
+  },
+  "autots": {
+    "conda_name": "autots",
+    "import_name": "autots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autots"
+  },
+  "autovizwidget": {
+    "conda_name": "autovizwidget",
+    "import_name": "autovizwidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "autovizwidget"
+  },
+  "auxiliary": {
+    "conda_name": "auxiliary",
+    "import_name": "auxiliary.nifti.io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "auxiliary"
+  },
+  "av": {
+    "conda_name": "av",
+    "import_name": "av",
+    "mapping_source": "regro-bot",
+    "pypi_name": "av"
+  },
+  "avalanche-lib": {
+    "conda_name": "avalanche-lib",
+    "import_name": "avalanche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avalanche-lib"
+  },
+  "avidaq": {
+    "conda_name": "avidaq",
+    "import_name": "avidaq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avidaq"
+  },
+  "avro": {
+    "conda_name": "avro",
+    "import_name": "avro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avro"
+  },
+  "avro-gen3": {
+    "conda_name": "avro-gen3",
+    "import_name": "avrogen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avro-gen3"
+  },
+  "avro-json-serializer": {
+    "conda_name": "avro-json-serializer",
+    "import_name": "avro_json_serializer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avro-json-serializer"
+  },
+  "avro-python3": {
+    "conda_name": "python-avro",
+    "import_name": "avro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "avro-python3"
+  },
+  "awherepy": {
+    "conda_name": "awherepy",
+    "import_name": "awherepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awherepy"
+  },
+  "awkward0": {
+    "conda_name": "awkward0",
+    "import_name": "awkward0",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awkward0"
+  },
+  "aws-amicleaner": {
+    "conda_name": "aws-amicleaner",
+    "import_name": "amicleaner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-amicleaner"
+  },
+  "aws-cdk-assets": {
+    "conda_name": "aws-cdk.assets",
+    "import_name": "aws_cdk.assets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-assets"
+  },
+  "aws-cdk-aws-acmpca": {
+    "conda_name": "aws-cdk.aws-acmpca",
+    "import_name": "aws_cdk.aws_acmpca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-acmpca"
+  },
+  "aws-cdk-aws-apigateway": {
+    "conda_name": "aws-cdk.aws-apigateway",
+    "import_name": "aws_cdk.aws_apigateway",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-apigateway"
+  },
+  "aws-cdk-aws-applicationautoscaling": {
+    "conda_name": "aws-cdk.aws-applicationautoscaling",
+    "import_name": "aws_cdk.aws_applicationautoscaling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-applicationautoscaling"
+  },
+  "aws-cdk-aws-autoscaling": {
+    "conda_name": "aws-cdk.aws-autoscaling",
+    "import_name": "aws_cdk.aws_autoscaling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-autoscaling"
+  },
+  "aws-cdk-aws-autoscaling-common": {
+    "conda_name": "aws-cdk.aws-autoscaling-common",
+    "import_name": "aws_cdk.aws_autoscaling_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-autoscaling-common"
+  },
+  "aws-cdk-aws-autoscaling-hooktargets": {
+    "conda_name": "aws-cdk.aws-autoscaling-hooktargets",
+    "import_name": "aws_cdk.aws_autoscaling_hooktargets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-autoscaling-hooktargets"
+  },
+  "aws-cdk-aws-batch": {
+    "conda_name": "aws-cdk.aws-batch",
+    "import_name": "aws_cdk.aws_batch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-batch"
+  },
+  "aws-cdk-aws-certificatemanager": {
+    "conda_name": "aws-cdk.aws-certificatemanager",
+    "import_name": "aws_cdk.aws_certificatemanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-certificatemanager"
+  },
+  "aws-cdk-aws-cloudformation": {
+    "conda_name": "aws-cdk.aws-cloudformation",
+    "import_name": "aws_cdk.aws_cloudformation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-cloudformation"
+  },
+  "aws-cdk-aws-cloudfront": {
+    "conda_name": "aws-cdk.aws-cloudfront",
+    "import_name": "aws_cdk.aws_cloudfront",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-cloudfront"
+  },
+  "aws-cdk-aws-cloudwatch": {
+    "conda_name": "aws-cdk.aws-cloudwatch",
+    "import_name": "aws_cdk.aws_cloudwatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-cloudwatch"
+  },
+  "aws-cdk-aws-codebuild": {
+    "conda_name": "aws-cdk.aws-codebuild",
+    "import_name": "aws_cdk.aws_codebuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-codebuild"
+  },
+  "aws-cdk-aws-codecommit": {
+    "conda_name": "aws-cdk.aws-codecommit",
+    "import_name": "aws_cdk.aws_codecommit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-codecommit"
+  },
+  "aws-cdk-aws-codeguruprofiler": {
+    "conda_name": "aws-cdk.aws-codeguruprofiler",
+    "import_name": "aws_cdk.aws_codeguruprofiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-codeguruprofiler"
+  },
+  "aws-cdk-aws-codestarnotifications": {
+    "conda_name": "aws-cdk.aws-codestarnotifications",
+    "import_name": "aws_cdk.aws_codestarnotifications",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-codestarnotifications"
+  },
+  "aws-cdk-aws-cognito": {
+    "conda_name": "aws-cdk.aws-cognito",
+    "import_name": "aws_cdk.aws_cognito",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-cognito"
+  },
+  "aws-cdk-aws-dynamodb": {
+    "conda_name": "aws-cdk.aws-dynamodb",
+    "import_name": "aws_cdk.aws_dynamodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-dynamodb"
+  },
+  "aws-cdk-aws-ec2": {
+    "conda_name": "aws-cdk.aws-ec2",
+    "import_name": "aws_cdk.aws_ec2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-ec2"
+  },
+  "aws-cdk-aws-ecr": {
+    "conda_name": "aws-cdk.aws-ecr",
+    "import_name": "aws_cdk.aws_ecr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-ecr"
+  },
+  "aws-cdk-aws-ecr-assets": {
+    "conda_name": "aws-cdk.aws-ecr-assets",
+    "import_name": "aws_cdk.aws_ecr_assets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-ecr-assets"
+  },
+  "aws-cdk-aws-ecs": {
+    "conda_name": "aws-cdk.aws-ecs",
+    "import_name": "aws_cdk.aws_ecs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-ecs"
+  },
+  "aws-cdk-aws-efs": {
+    "conda_name": "aws-cdk.aws-efs",
+    "import_name": "aws_cdk.aws_efs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-efs"
+  },
+  "aws-cdk-aws-elasticloadbalancing": {
+    "conda_name": "aws-cdk.aws-elasticloadbalancing",
+    "import_name": "aws_cdk.aws_elasticloadbalancing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-elasticloadbalancing"
+  },
+  "aws-cdk-aws-elasticloadbalancingv2": {
+    "conda_name": "aws-cdk.aws-elasticloadbalancingv2",
+    "import_name": "aws_cdk.aws_elasticloadbalancingv2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-elasticloadbalancingv2"
+  },
+  "aws-cdk-aws-events": {
+    "conda_name": "aws-cdk.aws-events",
+    "import_name": "aws_cdk.aws_events",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-events"
+  },
+  "aws-cdk-aws-fsx": {
+    "conda_name": "aws-cdk.aws-fsx",
+    "import_name": "aws_cdk.aws_fsx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-fsx"
+  },
+  "aws-cdk-aws-globalaccelerator": {
+    "conda_name": "aws-cdk.aws-globalaccelerator",
+    "import_name": "aws_cdk.aws_globalaccelerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-globalaccelerator"
+  },
+  "aws-cdk-aws-iam": {
+    "conda_name": "aws-cdk.aws-iam",
+    "import_name": "aws_cdk.aws_iam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-iam"
+  },
+  "aws-cdk-aws-imagebuilder": {
+    "conda_name": "aws-cdk.aws-imagebuilder",
+    "import_name": "aws_cdk.aws_imagebuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-imagebuilder"
+  },
+  "aws-cdk-aws-kinesis": {
+    "conda_name": "aws-cdk.aws-kinesis",
+    "import_name": "aws_cdk.aws_kinesis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-kinesis"
+  },
+  "aws-cdk-aws-kms": {
+    "conda_name": "aws-cdk.aws-kms",
+    "import_name": "aws_cdk.aws_kms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-kms"
+  },
+  "aws-cdk-aws-lambda": {
+    "conda_name": "aws-cdk.aws-lambda",
+    "import_name": "aws_cdk.aws_lambda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-lambda"
+  },
+  "aws-cdk-aws-logs": {
+    "conda_name": "aws-cdk.aws-logs",
+    "import_name": "aws_cdk.aws_logs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-logs"
+  },
+  "aws-cdk-aws-route53": {
+    "conda_name": "aws-cdk.aws-route53",
+    "import_name": "aws_cdk.aws_route53",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-route53"
+  },
+  "aws-cdk-aws-route53-targets": {
+    "conda_name": "aws-cdk.aws-route53-targets",
+    "import_name": "aws_cdk.aws_route53_targets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-route53-targets"
+  },
+  "aws-cdk-aws-s3": {
+    "conda_name": "aws-cdk.aws-s3",
+    "import_name": "aws_cdk.aws_s3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-s3"
+  },
+  "aws-cdk-aws-s3-assets": {
+    "conda_name": "aws-cdk.aws-s3-assets",
+    "import_name": "aws_cdk.aws_s3_assets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-s3-assets"
+  },
+  "aws-cdk-aws-sam": {
+    "conda_name": "aws-cdk.aws-sam",
+    "import_name": "aws_cdk.aws_sam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-sam"
+  },
+  "aws-cdk-aws-secretsmanager": {
+    "conda_name": "aws-cdk.aws-secretsmanager",
+    "import_name": "aws_cdk.aws_secretsmanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-secretsmanager"
+  },
+  "aws-cdk-aws-servicediscovery": {
+    "conda_name": "aws-cdk.aws-servicediscovery",
+    "import_name": "aws_cdk.aws_servicediscovery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-servicediscovery"
+  },
+  "aws-cdk-aws-signer": {
+    "conda_name": "aws-cdk.aws-signer",
+    "import_name": "aws_cdk.aws_signer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-signer"
+  },
+  "aws-cdk-aws-sns": {
+    "conda_name": "aws-cdk.aws-sns",
+    "import_name": "aws_cdk.aws_sns",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-sns"
+  },
+  "aws-cdk-aws-sns-subscriptions": {
+    "conda_name": "aws-cdk.aws-sns-subscriptions",
+    "import_name": "aws_cdk.aws_sns_subscriptions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-sns-subscriptions"
+  },
+  "aws-cdk-aws-sqs": {
+    "conda_name": "aws-cdk.aws-sqs",
+    "import_name": "aws_cdk.aws_sqs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-sqs"
+  },
+  "aws-cdk-aws-ssm": {
+    "conda_name": "aws-cdk.aws-ssm",
+    "import_name": "aws_cdk.aws_ssm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-ssm"
+  },
+  "aws-cdk-aws-stepfunctions": {
+    "conda_name": "aws-cdk.aws-stepfunctions",
+    "import_name": "aws_cdk.aws_stepfunctions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-aws-stepfunctions"
+  },
+  "aws-cdk-core": {
+    "conda_name": "aws-cdk.core",
+    "import_name": "aws_cdk.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-core"
+  },
+  "aws-cdk-custom-resources": {
+    "conda_name": "aws-cdk.custom-resources",
+    "import_name": "aws_cdk.custom_resources",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-custom-resources"
+  },
+  "aws-cdk-cx-api": {
+    "conda_name": "aws-cdk.cx-api",
+    "import_name": "aws_cdk.cx_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-cx-api"
+  },
+  "aws-cdk-region-info": {
+    "conda_name": "aws-cdk.region-info",
+    "import_name": "aws_cdk.region_info",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-cdk-region-info"
+  },
+  "aws-embedded-metrics": {
+    "conda_name": "aws-embedded-metrics",
+    "import_name": "aws_embedded_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-embedded-metrics"
+  },
+  "aws-error-utils": {
+    "conda_name": "aws-error-utils",
+    "import_name": "aws_error_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-error-utils"
+  },
+  "aws-glue-sessions": {
+    "conda_name": "aws-glue-sessions",
+    "import_name": "aws_glue_interactive_sessions_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-glue-sessions"
+  },
+  "aws-lambda-builders": {
+    "conda_name": "aws_lambda_builders",
+    "import_name": "aws_lambda_builders.workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-lambda-builders"
+  },
+  "aws-okta-keyman": {
+    "conda_name": "aws-okta-keyman",
+    "import_name": "aws_okta_keyman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-okta-keyman"
+  },
+  "aws-request-signer": {
+    "conda_name": "aws-request-signer",
+    "import_name": "aws_request_signer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-request-signer"
+  },
+  "aws-requests-auth": {
+    "conda_name": "aws-requests-auth",
+    "import_name": "aws_requests_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-requests-auth"
+  },
+  "aws-s3-access-grants-boto3-plugin": {
+    "conda_name": "aws-s3-access-grants-boto3-plugin",
+    "import_name": "aws_s3_access_grants_boto3_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-s3-access-grants-boto3-plugin"
+  },
+  "aws-s3-cli": {
+    "conda_name": "aws-s3-cli",
+    "import_name": "aws_s3_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-s3-cli"
+  },
+  "aws-sam-cli": {
+    "conda_name": "aws-sam-cli",
+    "import_name": "samcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-sam-cli"
+  },
+  "aws-sam-translator": {
+    "conda_name": "aws-sam-translator",
+    "import_name": "samtranslator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-sam-translator"
+  },
+  "aws-secretsmanager-caching": {
+    "conda_name": "aws_secretsmanager_caching",
+    "import_name": "aws_secretsmanager_caching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-secretsmanager-caching"
+  },
+  "aws-shell": {
+    "conda_name": "aws-shell",
+    "import_name": "awsshell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-shell"
+  },
+  "aws-smus-cicd-cli": {
+    "conda_name": "aws-smus-cicd-cli",
+    "import_name": "smus_cicd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-smus-cicd-cli"
+  },
+  "aws-sso-credential-process": {
+    "conda_name": "aws-sso-credential-process",
+    "import_name": "aws_sso_credential_process",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-sso-credential-process"
+  },
+  "aws-sso-lib": {
+    "conda_name": "aws-sso-lib",
+    "import_name": "aws_sso_lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-sso-lib"
+  },
+  "aws-sso-util": {
+    "conda_name": "aws-sso-util",
+    "import_name": "aws_sso_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-sso-util"
+  },
+  "aws-xray-sdk": {
+    "conda_name": "aws-xray-sdk",
+    "import_name": "aws_xray_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "aws-xray-sdk"
+  },
+  "awscli": {
+    "conda_name": "awscli",
+    "import_name": "awscli.customizations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awscli"
+  },
+  "awscli-cwlogs": {
+    "conda_name": "awscli-cwlogs",
+    "import_name": "cwlogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awscli-cwlogs"
+  },
+  "awscliv2": {
+    "conda_name": "awscliv2",
+    "import_name": "awscliv2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awscliv2"
+  },
+  "awsiotpythonsdk": {
+    "conda_name": "awsiotpythonsdk",
+    "import_name": "AWSIoTPythonSDK",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awsiotpythonsdk"
+  },
+  "awslimitchecker": {
+    "conda_name": "awslimitchecker",
+    "import_name": "awslimitchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awslimitchecker"
+  },
+  "awslogs": {
+    "conda_name": "awslogs",
+    "import_name": "awslogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awslogs"
+  },
+  "awswrangler": {
+    "conda_name": "awswrangler",
+    "import_name": "awswrangler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awswrangler"
+  },
+  "awxkit": {
+    "conda_name": "awxkit",
+    "import_name": "awxkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "awxkit"
+  },
+  "axelrod": {
+    "conda_name": "axelrod",
+    "import_name": "axelrod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "axelrod"
+  },
+  "axial-positional-embedding": {
+    "conda_name": "axial-positional-embedding",
+    "import_name": "axial_positional_embedding",
+    "mapping_source": "regro-bot",
+    "pypi_name": "axial-positional-embedding"
+  },
+  "axisregistry": {
+    "conda_name": "axisregistry",
+    "import_name": "axisregistry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "axisregistry"
+  },
+  "axopy": {
+    "conda_name": "axopy",
+    "import_name": "axopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "axopy"
+  },
+  "azure-cli-telemetry": {
+    "conda_name": "azure-cli-telemetry",
+    "import_name": "azure.cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-cli-telemetry"
+  },
+  "azure-common": {
+    "conda_name": "azure-common",
+    "import_name": "azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-common"
+  },
+  "azure-core": {
+    "conda_name": "azure-core",
+    "import_name": "azure.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-core"
+  },
+  "azure-core-tracing-opentelemetry": {
+    "conda_name": "azure-core-tracing-opentelemetry",
+    "import_name": "azure.core.tracing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-core-tracing-opentelemetry"
+  },
+  "azure-data-tables": {
+    "conda_name": "azure-data-tables",
+    "import_name": "azure.data.tables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-data-tables"
+  },
+  "azure-devops": {
+    "conda_name": "azure-devops",
+    "import_name": "azure.devops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-devops"
+  },
+  "azure-graphrbac": {
+    "conda_name": "azure-graphrbac",
+    "import_name": "azure.graphrbac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-graphrbac"
+  },
+  "azure-identity": {
+    "conda_name": "azure-identity",
+    "import_name": "azure.identity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-identity"
+  },
+  "azure-keyvault-certificates": {
+    "conda_name": "azure-keyvault-certificates",
+    "import_name": "azure.keyvault.certificates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-keyvault-certificates"
+  },
+  "azure-keyvault-secrets": {
+    "conda_name": "azure-keyvault-secrets",
+    "import_name": "azure.keyvault.secrets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-keyvault-secrets"
+  },
+  "azure-mgmt-authorization": {
+    "conda_name": "azure-mgmt-authorization",
+    "import_name": "azure.mgmt.authorization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-authorization"
+  },
+  "azure-mgmt-common": {
+    "conda_name": "azure-mgmt-common",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-common"
+  },
+  "azure-mgmt-containerregistry": {
+    "conda_name": "azure-mgmt-containerregistry",
+    "import_name": "azure.mgmt.containerregistry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-containerregistry"
+  },
+  "azure-mgmt-containerservice": {
+    "conda_name": "azure-mgmt-containerservice",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-containerservice"
+  },
+  "azure-mgmt-core": {
+    "conda_name": "azure-mgmt-core",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-core"
+  },
+  "azure-mgmt-cosmosdb": {
+    "conda_name": "azure-mgmt-cosmosdb",
+    "import_name": "azure.mgmt.cosmosdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-cosmosdb"
+  },
+  "azure-mgmt-network": {
+    "conda_name": "azure-mgmt-network",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-network"
+  },
+  "azure-mgmt-nspkg": {
+    "conda_name": "azure-mgmt-nspkg",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-nspkg"
+  },
+  "azure-mgmt-resource": {
+    "conda_name": "azure-mgmt-resource",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-resource"
+  },
+  "azure-mgmt-storage": {
+    "conda_name": "azure-mgmt-storage",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-storage"
+  },
+  "azure-mgmt-subscription": {
+    "conda_name": "azure-mgmt-subscription",
+    "import_name": "azure.mgmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-mgmt-subscription"
+  },
+  "azure-monitor-opentelemetry-exporter": {
+    "conda_name": "azure-monitor-opentelemetry-exporter",
+    "import_name": "azure.monitor.opentelemetry.exporter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-monitor-opentelemetry-exporter"
+  },
+  "azure-purview-account": {
+    "conda_name": "azure-purview-account",
+    "import_name": "azure.purview.account",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-account"
+  },
+  "azure-purview-administration": {
+    "conda_name": "azure-purview-administration",
+    "import_name": "azure.purview.administration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-administration"
+  },
+  "azure-purview-catalog": {
+    "conda_name": "azure-purview-catalog",
+    "import_name": "azure.purview.catalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-catalog"
+  },
+  "azure-purview-nspkg": {
+    "conda_name": "azure-purview-nspkg",
+    "import_name": "azure.purview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-nspkg"
+  },
+  "azure-purview-scanning": {
+    "conda_name": "azure-purview-scanning",
+    "import_name": "azure.purview.scanning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-scanning"
+  },
+  "azure-purview-workflow": {
+    "conda_name": "azure-purview-workflow",
+    "import_name": "azure.purview.workflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-purview-workflow"
+  },
+  "azure-search-documents": {
+    "conda_name": "azure-search-documents",
+    "import_name": "azure.search.documents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-search-documents"
+  },
+  "azure-servicebus": {
+    "conda_name": "azure-servicebus",
+    "import_name": "azure.servicebus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-servicebus"
+  },
+  "azure-servicemanagement-legacy": {
+    "conda_name": "azure-servicemanagement-legacy",
+    "import_name": "azure.servicemanagement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-servicemanagement-legacy"
+  },
+  "azure-storage": {
+    "conda_name": "azure-storage",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage"
+  },
+  "azure-storage-blob": {
+    "conda_name": "azure-storage-blob",
+    "import_name": "azure.storage.blob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-blob"
+  },
+  "azure-storage-common": {
+    "conda_name": "azure-storage-common",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-common"
+  },
+  "azure-storage-file": {
+    "conda_name": "azure-storage-file",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-file"
+  },
+  "azure-storage-file-datalake": {
+    "conda_name": "azure-storage-file-datalake",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-file-datalake"
+  },
+  "azure-storage-file-share": {
+    "conda_name": "azure-storage-file-share",
+    "import_name": "azure.storage.fileshare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-file-share"
+  },
+  "azure-storage-nspkg": {
+    "conda_name": "azure-storage-nspkg",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-nspkg"
+  },
+  "azure-storage-queue": {
+    "conda_name": "azure-storage-queue",
+    "import_name": "azure.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-storage-queue"
+  },
+  "azure-synapse-artifacts": {
+    "conda_name": "azure-synapse-artifacts",
+    "import_name": "azure.synapse.artifacts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azure-synapse-artifacts"
+  },
+  "azureml": {
+    "conda_name": "azureml",
+    "import_name": "azureml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "azureml"
+  },
+  "b2": {
+    "conda_name": "backblaze-b2",
+    "import_name": "b2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "b2"
+  },
+  "b2sdk": {
+    "conda_name": "b2sdk",
+    "import_name": "b2sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "b2sdk"
+  },
+  "b4msa": {
+    "conda_name": "b4msa",
+    "import_name": "b4msa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "b4msa"
+  },
+  "baal": {
+    "conda_name": "baal",
+    "import_name": "baal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baal"
+  },
+  "bacdive": {
+    "conda_name": "bacdive",
+    "import_name": "bacdive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bacdive"
+  },
+  "backcall": {
+    "conda_name": "backcall",
+    "import_name": "backcall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backcall"
+  },
+  "backends": {
+    "conda_name": "backends",
+    "import_name": "lab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backends"
+  },
+  "backoff": {
+    "conda_name": "backoff",
+    "import_name": "backoff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backoff"
+  },
+  "backpack": {
+    "conda_name": "backpack",
+    "import_name": "backpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backpack"
+  },
+  "backports-abc": {
+    "conda_name": "backports_abc",
+    "import_name": "backports_abc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-abc"
+  },
+  "backports-cached-property": {
+    "conda_name": "backports.cached-property",
+    "import_name": "backports.cached_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-cached-property"
+  },
+  "backports-csv": {
+    "conda_name": "backports.csv",
+    "import_name": "backports.csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-csv"
+  },
+  "backports-entry-points-selectable": {
+    "conda_name": "backports.entry-points-selectable",
+    "import_name": "backports.entry_points_selectable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-entry-points-selectable"
+  },
+  "backports-functools-lru-cache": {
+    "conda_name": "backports.functools_lru_cache",
+    "import_name": "backports.functools_lru_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-functools-lru-cache"
+  },
+  "backports-shutil-get-terminal-size": {
+    "conda_name": "backports.shutil_get_terminal_size",
+    "import_name": "backports.shutil_get_terminal_size",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-shutil-get-terminal-size"
+  },
+  "backports-shutil-which": {
+    "conda_name": "backports.shutil_which",
+    "import_name": "backports.shutil_which",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-shutil-which"
+  },
+  "backports-ssl-match-hostname": {
+    "conda_name": "ssl_match_hostname",
+    "import_name": "backports.ssl_match_hostname",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-ssl-match-hostname"
+  },
+  "backports-strenum": {
+    "conda_name": "backports.strenum",
+    "import_name": "backports.strenum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-strenum"
+  },
+  "backports-test-support": {
+    "conda_name": "backports.test.support",
+    "import_name": "backports.test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-test-support"
+  },
+  "backports-unittest-mock": {
+    "conda_name": "backports.unittest_mock",
+    "import_name": "backports.unittest_mock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-unittest-mock"
+  },
+  "backports-weakref": {
+    "conda_name": "backports.weakref",
+    "import_name": "backports.weakref",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-weakref"
+  },
+  "backports-zoneinfo": {
+    "conda_name": "backports.zoneinfo",
+    "import_name": "zoneinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backports-zoneinfo"
+  },
+  "backstage": {
+    "conda_name": "backstage",
+    "import_name": "backstage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backstage"
+  },
+  "backtrace": {
+    "conda_name": "python-backtrace",
+    "import_name": "backtrace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "backtrace"
+  },
+  "badapted": {
+    "conda_name": "badapted",
+    "import_name": "badapted",
+    "mapping_source": "regro-bot",
+    "pypi_name": "badapted"
+  },
+  "baderkit": {
+    "conda_name": "baderkit",
+    "import_name": "baderkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baderkit"
+  },
+  "badger-opt": {
+    "conda_name": "badger-opt",
+    "import_name": "badger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "badger-opt"
+  },
+  "bagit": {
+    "conda_name": "bagit",
+    "import_name": "bagit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bagit"
+  },
+  "bagit-profile": {
+    "conda_name": "bagit-profile",
+    "import_name": "bagit_profile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bagit-profile"
+  },
+  "bagofholding": {
+    "conda_name": "bagofholding",
+    "import_name": "bagofholding",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bagofholding"
+  },
+  "bahamas": {
+    "conda_name": "bahamas",
+    "import_name": "bahamas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bahamas"
+  },
+  "baikal": {
+    "conda_name": "baikal",
+    "import_name": "baikal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baikal"
+  },
+  "bake-cli": {
+    "conda_name": "bake",
+    "import_name": "bake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bake-cli"
+  },
+  "bakelite": {
+    "conda_name": "bakelite",
+    "import_name": "bakelite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bakelite"
+  },
+  "bamnostic": {
+    "conda_name": "bamnostic",
+    "import_name": "bamnostic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bamnostic"
+  },
+  "banal": {
+    "conda_name": "banal",
+    "import_name": "banal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "banal"
+  },
+  "bandit": {
+    "conda_name": "bandit",
+    "import_name": "bandit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bandit"
+  },
+  "bar-chart-race": {
+    "conda_name": "bar_chart_race",
+    "import_name": "bar_chart_race",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bar-chart-race"
+  },
+  "bareditor": {
+    "conda_name": "bareditor",
+    "import_name": "bareditor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bareditor"
+  },
+  "bargeparse": {
+    "conda_name": "bargeparse",
+    "import_name": "bargeparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bargeparse"
+  },
+  "baron": {
+    "conda_name": "baron",
+    "import_name": "baron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baron"
+  },
+  "barril": {
+    "conda_name": "barril",
+    "import_name": "barril",
+    "mapping_source": "regro-bot",
+    "pypi_name": "barril"
+  },
+  "basal-and-bark": {
+    "conda_name": "basal-and-bark",
+    "import_name": "basal_and_bark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "basal-and-bark"
+  },
+  "base36": {
+    "conda_name": "base36",
+    "import_name": "base36",
+    "mapping_source": "regro-bot",
+    "pypi_name": "base36"
+  },
+  "base58check": {
+    "conda_name": "base58check",
+    "import_name": "base58check",
+    "mapping_source": "regro-bot",
+    "pypi_name": "base58check"
+  },
+  "base64io": {
+    "conda_name": "base64io",
+    "import_name": "base64io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "base64io"
+  },
+  "baseband": {
+    "conda_name": "baseband",
+    "import_name": "baseband",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baseband"
+  },
+  "baseopt": {
+    "conda_name": "baseopt",
+    "import_name": "baseopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baseopt"
+  },
+  "bases": {
+    "conda_name": "bases",
+    "import_name": "bases",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bases"
+  },
+  "bash-completion": {
+    "conda_name": "py-bash-completion",
+    "import_name": "bash_completion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bash-completion"
+  },
+  "bash-kernel": {
+    "conda_name": "bash_kernel",
+    "import_name": "bash_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bash-kernel"
+  },
+  "bashlex": {
+    "conda_name": "bashlex",
+    "import_name": "bashlex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bashlex"
+  },
+  "bashplotlib": {
+    "conda_name": "bashplotlib",
+    "import_name": "bashplotlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bashplotlib"
+  },
+  "basicauth": {
+    "conda_name": "basicauth",
+    "import_name": "basicauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "basicauth"
+  },
+  "basis-set-exchange": {
+    "conda_name": "basis_set_exchange",
+    "import_name": "basis_set_exchange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "basis-set-exchange"
+  },
+  "basisgen": {
+    "conda_name": "basisgen",
+    "import_name": "basisgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "basisgen"
+  },
+  "basyx-python-sdk": {
+    "conda_name": "basyx-python-sdk",
+    "import_name": "basyx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "basyx-python-sdk"
+  },
+  "batanalysis": {
+    "conda_name": "batanalysis",
+    "import_name": "batanalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batanalysis"
+  },
+  "batchspawner": {
+    "conda_name": "batchspawner",
+    "import_name": "batchspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batchspawner"
+  },
+  "batchstats": {
+    "conda_name": "batchstats",
+    "import_name": "batchstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batchstats"
+  },
+  "bathyreq": {
+    "conda_name": "bathyreq",
+    "import_name": "bathyreq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bathyreq"
+  },
+  "batman-package": {
+    "conda_name": "batman-package",
+    "import_name": "batman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batman-package"
+  },
+  "batoid": {
+    "conda_name": "batoid",
+    "import_name": "batoid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batoid"
+  },
+  "batoid-rubin": {
+    "conda_name": "batoid-rubin",
+    "import_name": "batoid_rubin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batoid-rubin"
+  },
+  "batoms-api": {
+    "conda_name": "batoms-api",
+    "import_name": "batoms_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "batoms-api"
+  },
+  "baycomp": {
+    "conda_name": "baycomp",
+    "import_name": "baycomp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "baycomp"
+  },
+  "bayesbay": {
+    "conda_name": "bayesbay",
+    "import_name": "bayesbay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bayesbay"
+  },
+  "bayesfilter": {
+    "conda_name": "bayesfilter",
+    "import_name": "bayesfilter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bayesfilter"
+  },
+  "bayesian-optimization": {
+    "conda_name": "bayesian-optimization",
+    "import_name": "bayes_opt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bayesian-optimization"
+  },
+  "bayesmbar": {
+    "conda_name": "bayesmbar",
+    "import_name": "bayesmbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bayesmbar"
+  },
+  "bayespy": {
+    "conda_name": "bayespy",
+    "import_name": "bayespy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bayespy"
+  },
+  "bbf": {
+    "conda_name": "bbf",
+    "import_name": "bbf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bbf"
+  },
+  "bbii-decon": {
+    "conda_name": "bbii-decon",
+    "import_name": "bbii_decon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bbii-decon"
+  },
+  "bblean": {
+    "conda_name": "bblean",
+    "import_name": "bblean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bblean"
+  },
+  "bc-detect-secrets": {
+    "conda_name": "bc-detect-secrets",
+    "import_name": "detect_secrets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bc-detect-secrets"
+  },
+  "bc-jsonpath-ng": {
+    "conda_name": "bc-jsonpath-ng",
+    "import_name": "bc_jsonpath_ng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bc-jsonpath-ng"
+  },
+  "bc-python-hcl2": {
+    "conda_name": "bc-python-hcl2",
+    "import_name": "hcl2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bc-python-hcl2"
+  },
+  "bcdoc": {
+    "conda_name": "bcdoc",
+    "import_name": "bcdoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bcdoc"
+  },
+  "bcdp": {
+    "conda_name": "bcdp",
+    "import_name": "bcdp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bcdp"
+  },
+  "bcj-cffi": {
+    "conda_name": "bcj-cffi",
+    "import_name": "bcj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bcj-cffi"
+  },
+  "bcpandas": {
+    "conda_name": "bcpandas",
+    "import_name": "bcpandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bcpandas"
+  },
+  "bd261fdff9f6a6e8e28abbb1b007b812b1feb1b6bfaf43191f042f4e1c3c": {
+    "conda_name": "jupyter_pivottablejs",
+    "import_name": "pivottablejs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bd261fdff9f6a6e8e28abbb1b007b812b1feb1b6bfaf43191f042f4e1c3c"
+  },
+  "bdbag": {
+    "conda_name": "bdbag",
+    "import_name": "bdbag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bdbag"
+  },
+  "bdsim": {
+    "conda_name": "bdsim",
+    "import_name": "bdsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bdsim"
+  },
+  "beaker": {
+    "conda_name": "beaker",
+    "import_name": "beaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beaker"
+  },
+  "beam-corset": {
+    "conda_name": "beam-corset",
+    "import_name": "corset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beam-corset"
+  },
+  "beamfit": {
+    "conda_name": "beamfit",
+    "import_name": "beamfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beamfit"
+  },
+  "beamngpy": {
+    "conda_name": "beamngpy",
+    "import_name": "beamngpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beamngpy"
+  },
+  "beancount": {
+    "conda_name": "beancount",
+    "import_name": "beancount",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beancount"
+  },
+  "beangulp": {
+    "conda_name": "beangulp",
+    "import_name": "beangulp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beangulp"
+  },
+  "beanie-batteries-queue": {
+    "conda_name": "beanie-batteries-queue",
+    "import_name": "beanie_batteries_queue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beanie-batteries-queue"
+  },
+  "beanquery": {
+    "conda_name": "beanquery",
+    "import_name": "beanquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beanquery"
+  },
+  "beavers": {
+    "conda_name": "beavers",
+    "import_name": "beavers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beavers"
+  },
+  "bech32": {
+    "conda_name": "bech32",
+    "import_name": "bech32",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bech32"
+  },
+  "bed-reader": {
+    "conda_name": "bed-reader",
+    "import_name": "bed_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bed-reader"
+  },
+  "beem": {
+    "conda_name": "beem",
+    "import_name": "beem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beem"
+  },
+  "beetlesafari": {
+    "conda_name": "beetlesafari",
+    "import_name": "beetlesafari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beetlesafari"
+  },
+  "begins": {
+    "conda_name": "begins",
+    "import_name": "begin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "begins"
+  },
+  "behave-django": {
+    "conda_name": "behave-django",
+    "import_name": "behave_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "behave-django"
+  },
+  "benchling-api-client": {
+    "conda_name": "benchling-api-client",
+    "import_name": "benchling_api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "benchling-api-client"
+  },
+  "benchling-sdk": {
+    "conda_name": "benchling-sdk",
+    "import_name": "benchling_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "benchling-sdk"
+  },
+  "benchmark-4dn": {
+    "conda_name": "benchmark-4dn",
+    "import_name": "Benchmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "benchmark-4dn"
+  },
+  "benchpots": {
+    "conda_name": "benchpots",
+    "import_name": "benchpots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "benchpots"
+  },
+  "beniget": {
+    "conda_name": "beniget",
+    "import_name": "beniget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beniget"
+  },
+  "bentoml": {
+    "conda_name": "bentoml",
+    "import_name": "bentoml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bentoml"
+  },
+  "bermuda": {
+    "conda_name": "bermuda",
+    "import_name": "bermuda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bermuda"
+  },
+  "bert-tensorflow": {
+    "conda_name": "bert-tensorflow",
+    "import_name": "bert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bert-tensorflow"
+  },
+  "bespon": {
+    "conda_name": "bespon",
+    "import_name": "bespon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bespon"
+  },
+  "betamax": {
+    "conda_name": "betamax",
+    "import_name": "betamax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "betamax"
+  },
+  "betamax-matchers": {
+    "conda_name": "betamax-matchers",
+    "import_name": "betamax_matchers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "betamax-matchers"
+  },
+  "betse": {
+    "conda_name": "betse",
+    "import_name": "betse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "betse"
+  },
+  "betsee": {
+    "conda_name": "betsee",
+    "import_name": "betsee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "betsee"
+  },
+  "better-optimize": {
+    "conda_name": "better-optimize",
+    "import_name": "better_optimize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "better-optimize"
+  },
+  "better-setuptools-git-version": {
+    "conda_name": "better-setuptools-git-version",
+    "import_name": "better_setuptools_git_version",
+    "mapping_source": "regro-bot",
+    "pypi_name": "better-setuptools-git-version"
+  },
+  "bettercam": {
+    "conda_name": "bettercam",
+    "import_name": "bettercam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bettercam"
+  },
+  "betterproto": {
+    "conda_name": "betterproto",
+    "import_name": "betterproto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "betterproto"
+  },
+  "bewegung": {
+    "conda_name": "bewegung",
+    "import_name": "bewegung",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bewegung"
+  },
+  "beziers": {
+    "conda_name": "beziers",
+    "import_name": "beziers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "beziers"
+  },
+  "bg-mpl-stylesheets": {
+    "conda_name": "bg-mpl-stylesheets",
+    "import_name": "bg_mpl_stylesheets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bg-mpl-stylesheets"
+  },
+  "bg-space": {
+    "conda_name": "bg-space",
+    "import_name": "bg_space",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bg-space"
+  },
+  "bgcargo": {
+    "conda_name": "bgcargo",
+    "import_name": "bgcArgo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bgcargo"
+  },
+  "bgcargodmqc": {
+    "conda_name": "bgcargodmqc",
+    "import_name": "bgcArgoDMQC",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bgcargodmqc"
+  },
+  "bgzip": {
+    "conda_name": "py-bgzip",
+    "import_name": "bgzip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bgzip"
+  },
+  "bhmm": {
+    "conda_name": "bhmm",
+    "import_name": "bhmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bhmm"
+  },
+  "bias-correction": {
+    "conda_name": "bias_correction",
+    "import_name": "bias_correction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bias-correction"
+  },
+  "bibmanager": {
+    "conda_name": "bibmanager",
+    "import_name": "bibmanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bibmanager"
+  },
+  "bibmon": {
+    "conda_name": "bibmon",
+    "import_name": "bibmon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bibmon"
+  },
+  "bicycleparameters": {
+    "conda_name": "bicycleparameters",
+    "import_name": "bicycleparameters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bicycleparameters"
+  },
+  "bidict": {
+    "conda_name": "bidict",
+    "import_name": "bidict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bidict"
+  },
+  "bids-validator": {
+    "conda_name": "bids-validator",
+    "import_name": "bids_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bids-validator"
+  },
+  "big-fish": {
+    "conda_name": "big-fish",
+    "import_name": "bigfish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "big-fish"
+  },
+  "bigearthnet-common": {
+    "conda_name": "bigearthnet-common",
+    "import_name": "bigearthnet_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bigearthnet-common"
+  },
+  "bigearthnet-encoder": {
+    "conda_name": "bigearthnet-encoder",
+    "import_name": "bigearthnet_encoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bigearthnet-encoder"
+  },
+  "bigearthnet-gdf-builder": {
+    "conda_name": "bigearthnet-gdf-builder",
+    "import_name": "bigearthnet_gdf_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bigearthnet-gdf-builder"
+  },
+  "bigearthnet-patch-interface": {
+    "conda_name": "bigearthnet-patch-interface",
+    "import_name": "bigearthnet_patch_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bigearthnet-patch-interface"
+  },
+  "bigquery-magics": {
+    "conda_name": "bigquery-magics",
+    "import_name": "bigquery_magics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bigquery-magics"
+  },
+  "bilby-tgr": {
+    "conda_name": "bilby_tgr",
+    "import_name": "bilby_tgr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bilby-tgr"
+  },
+  "billiard": {
+    "conda_name": "billiard",
+    "import_name": "billiard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "billiard"
+  },
+  "bimlpa": {
+    "conda_name": "bimlpa",
+    "import_name": "BiMLPA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bimlpa"
+  },
+  "binapy": {
+    "conda_name": "binapy",
+    "import_name": "binapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binapy"
+  },
+  "binary": {
+    "conda_name": "binary",
+    "import_name": "binary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binary"
+  },
+  "binarytree": {
+    "conda_name": "binarytree",
+    "import_name": "binarytree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binarytree"
+  },
+  "bincopy": {
+    "conda_name": "bincopy",
+    "import_name": "bincopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bincopy"
+  },
+  "bindensity": {
+    "conda_name": "bindensity",
+    "import_name": "bindensity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bindensity"
+  },
+  "binlets": {
+    "conda_name": "binlets",
+    "import_name": "binlets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binlets"
+  },
+  "binpacking": {
+    "conda_name": "binpacking",
+    "import_name": "binpacking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binpacking"
+  },
+  "binpickle": {
+    "conda_name": "binpickle",
+    "import_name": "binpickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "binpickle"
+  },
+  "bintrees": {
+    "conda_name": "bintrees",
+    "import_name": "bintrees",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bintrees"
+  },
+  "bio-embeddings-deepblast": {
+    "conda_name": "bio-embeddings-deepblast",
+    "import_name": "deepblast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bio-embeddings-deepblast"
+  },
+  "bio-pyvol": {
+    "conda_name": "bio-pyvol",
+    "import_name": "pyvol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bio-pyvol"
+  },
+  "bioat": {
+    "conda_name": "bioat",
+    "import_name": "bioat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioat"
+  },
+  "biobear": {
+    "conda_name": "biobear",
+    "import_name": "biobear",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biobear"
+  },
+  "biobuddy": {
+    "conda_name": "biobuddy",
+    "import_name": "biobuddy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biobuddy"
+  },
+  "biochar": {
+    "conda_name": "biochar",
+    "import_name": "biochar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biochar"
+  },
+  "biofilm": {
+    "conda_name": "biofilm",
+    "import_name": "biofilm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biofilm"
+  },
+  "bioformats-jar": {
+    "conda_name": "bioformats_jar",
+    "import_name": "bioformats_jar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioformats-jar"
+  },
+  "biogeme": {
+    "conda_name": "biogeme",
+    "import_name": "biogeme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biogeme"
+  },
+  "biogeme-optimization": {
+    "conda_name": "biogeme-optimization",
+    "import_name": "biogeme_optimization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biogeme-optimization"
+  },
+  "bioimageio-core": {
+    "conda_name": "bioimageio.core",
+    "import_name": "bioimageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioimageio-core"
+  },
+  "bioimageio-spec": {
+    "conda_name": "bioimageio.spec",
+    "import_name": "bioimageio.spec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioimageio-spec"
+  },
+  "biolmai": {
+    "conda_name": "biolmai",
+    "import_name": "biolmai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biolmai"
+  },
+  "biopandas": {
+    "conda_name": "biopandas",
+    "import_name": "biopandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biopandas"
+  },
+  "bioregistry": {
+    "conda_name": "bioregistry",
+    "import_name": "bioregistry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioregistry"
+  },
+  "bioservices": {
+    "conda_name": "bioservices",
+    "import_name": "bioservices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bioservices"
+  },
+  "biosphere": {
+    "conda_name": "biosphere",
+    "import_name": "biosphere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "biosphere"
+  },
+  "birch": {
+    "conda_name": "birch",
+    "import_name": "birch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "birch"
+  },
+  "birdhouse-birdy": {
+    "conda_name": "birdy",
+    "import_name": "birdy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "birdhouse-birdy"
+  },
+  "birdhouse-raven": {
+    "conda_name": "raven-wps",
+    "import_name": "raven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "birdhouse-raven"
+  },
+  "birdsong-recognition-dataset": {
+    "conda_name": "birdsong-recognition-dataset",
+    "import_name": "birdsongrec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "birdsong-recognition-dataset"
+  },
+  "bitmath": {
+    "conda_name": "bitmath",
+    "import_name": "bitmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bitmath"
+  },
+  "bitsets": {
+    "conda_name": "bitsets",
+    "import_name": "bitsets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bitsets"
+  },
+  "bitstring": {
+    "conda_name": "bitstring",
+    "import_name": "bitstring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bitstring"
+  },
+  "bitstruct": {
+    "conda_name": "bitstruct",
+    "import_name": "bitstruct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bitstruct"
+  },
+  "bitvector": {
+    "conda_name": "bitvector",
+    "import_name": "BitVector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bitvector"
+  },
+  "bivario": {
+    "conda_name": "bivario",
+    "import_name": "bivario",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bivario"
+  },
+  "bjoern": {
+    "conda_name": "bjoern",
+    "import_name": "bjoern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bjoern"
+  },
+  "blackbook": {
+    "conda_name": "blackbook",
+    "import_name": "blackbook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blackbook"
+  },
+  "blackboxauditing": {
+    "conda_name": "blackboxauditing",
+    "import_name": "BlackBoxAuditing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blackboxauditing"
+  },
+  "blackcellmagic": {
+    "conda_name": "blackcellmagic",
+    "import_name": "blackcellmagic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blackcellmagic"
+  },
+  "blackdoc": {
+    "conda_name": "blackdoc",
+    "import_name": "blackdoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blackdoc"
+  },
+  "blacken-docs": {
+    "conda_name": "blacken-docs",
+    "import_name": "blacken_docs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blacken-docs"
+  },
+  "blackjax": {
+    "conda_name": "blackjax",
+    "import_name": "blackjax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blackjax"
+  },
+  "blacktex": {
+    "conda_name": "blacktex",
+    "import_name": "blacktex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blacktex"
+  },
+  "blake256": {
+    "conda_name": "blake256",
+    "import_name": "blake256",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blake256"
+  },
+  "blark": {
+    "conda_name": "blark",
+    "import_name": "blark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blark"
+  },
+  "blaupause": {
+    "conda_name": "blaupause",
+    "import_name": "blaupause",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blaupause"
+  },
+  "bleak": {
+    "conda_name": "bleak",
+    "import_name": "bleak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bleak"
+  },
+  "bleak-winrt": {
+    "conda_name": "bleak-winrt",
+    "import_name": "bleak_winrt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bleak-winrt"
+  },
+  "blend-modes": {
+    "conda_name": "blend_modes",
+    "import_name": "blend_modes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blend-modes"
+  },
+  "blik": {
+    "conda_name": "blik",
+    "import_name": "blik",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blik"
+  },
+  "blimpy": {
+    "conda_name": "blimpy",
+    "import_name": "blimpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blimpy"
+  },
+  "blinker": {
+    "conda_name": "blinker",
+    "import_name": "blinker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blinker"
+  },
+  "blis": {
+    "conda_name": "cython-blis",
+    "import_name": "blis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blis"
+  },
+  "blitzgsea": {
+    "conda_name": "blitzgsea",
+    "import_name": "blitzgsea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blitzgsea"
+  },
+  "block-tracing": {
+    "conda_name": "block_tracing",
+    "import_name": "block_tracing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "block-tracing"
+  },
+  "blockdiag": {
+    "conda_name": "blockdiag",
+    "import_name": "blockdiag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blockdiag"
+  },
+  "blocked-matrix-utils": {
+    "conda_name": "blocked-matrix-utils",
+    "import_name": "util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blocked-matrix-utils"
+  },
+  "blop": {
+    "conda_name": "blop",
+    "import_name": "blop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blop"
+  },
+  "bloptools": {
+    "conda_name": "bloptools",
+    "import_name": "blop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bloptools"
+  },
+  "blosc": {
+    "conda_name": "python-blosc",
+    "import_name": "blosc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blosc"
+  },
+  "blossalg": {
+    "conda_name": "blossalg",
+    "import_name": "blossom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blossalg"
+  },
+  "bloxs": {
+    "conda_name": "bloxs",
+    "import_name": "bloxs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bloxs"
+  },
+  "blp": {
+    "conda_name": "blp",
+    "import_name": "blp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blp"
+  },
+  "blue": {
+    "conda_name": "blue",
+    "import_name": "blue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blue"
+  },
+  "bluemath-tk": {
+    "conda_name": "bluemath-tk",
+    "import_name": "bluemath_tk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluemath-tk"
+  },
+  "blueqat": {
+    "conda_name": "blueqat",
+    "import_name": "blueqat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blueqat"
+  },
+  "bluesky-adaptive": {
+    "conda_name": "bluesky-adaptive",
+    "import_name": "bluesky_adaptive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-adaptive"
+  },
+  "bluesky-darkframes": {
+    "conda_name": "bluesky-darkframes",
+    "import_name": "bluesky_darkframes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-darkframes"
+  },
+  "bluesky-httpserver": {
+    "conda_name": "bluesky-httpserver",
+    "import_name": "bluesky_httpserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-httpserver"
+  },
+  "bluesky-hwproxy": {
+    "conda_name": "bluesky-hwproxy",
+    "import_name": "bluesky_hwproxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-hwproxy"
+  },
+  "bluesky-kafka": {
+    "conda_name": "bluesky-kafka",
+    "import_name": "bluesky_kafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-kafka"
+  },
+  "bluesky-live": {
+    "conda_name": "bluesky-live",
+    "import_name": "bluesky_live",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-live"
+  },
+  "bluesky-queueserver": {
+    "conda_name": "bluesky-queueserver",
+    "import_name": "bluesky_queueserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-queueserver"
+  },
+  "bluesky-queueserver-api": {
+    "conda_name": "bluesky-queueserver-api",
+    "import_name": "bluesky_queueserver_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-queueserver-api"
+  },
+  "bluesky-widgets": {
+    "conda_name": "bluesky-widgets",
+    "import_name": "bluesky_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bluesky-widgets"
+  },
+  "blueskyapi": {
+    "conda_name": "blueskyapi",
+    "import_name": "blueskyapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blueskyapi"
+  },
+  "blurb": {
+    "conda_name": "blurb",
+    "import_name": "blurb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blurb"
+  },
+  "blurhash": {
+    "conda_name": "blurhash",
+    "import_name": "blurhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "blurhash"
+  },
+  "bmi-geotiff": {
+    "conda_name": "bmi-geotiff",
+    "import_name": "bmi_geotiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bmi-geotiff"
+  },
+  "bmi-tester": {
+    "conda_name": "bmi-tester",
+    "import_name": "bmi_tester",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bmi-tester"
+  },
+  "boa-framework": {
+    "conda_name": "boa-framework",
+    "import_name": "boa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boa-framework"
+  },
+  "boario": {
+    "conda_name": "boario",
+    "import_name": "boario",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boario"
+  },
+  "bodkin": {
+    "conda_name": "bodkin",
+    "import_name": "bodkin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bodkin"
+  },
+  "boilerpy3": {
+    "conda_name": "boilerpy3",
+    "import_name": "boilerpy3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boilerpy3"
+  },
+  "boinor": {
+    "conda_name": "boinor",
+    "import_name": "boinor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boinor"
+  },
+  "bokeh": {
+    "conda_name": "bokeh",
+    "import_name": "bokeh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bokeh"
+  },
+  "bokeh-root-cmd": {
+    "conda_name": "bokeh-root-cmd",
+    "import_name": "bokeh_root_cmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bokeh-root-cmd"
+  },
+  "bokeh-sampledata": {
+    "conda_name": "bokeh_sampledata",
+    "import_name": "bokeh_sampledata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bokeh-sampledata"
+  },
+  "bolt-python": {
+    "conda_name": "bolt-python",
+    "import_name": "bolt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bolt-python"
+  },
+  "boltzmannclean": {
+    "conda_name": "boltzmannclean",
+    "import_name": "boltzmannclean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boltzmannclean"
+  },
+  "boltztrap2": {
+    "conda_name": "boltztrap2",
+    "import_name": "BoltzTraP2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boltztrap2"
+  },
+  "bonsu": {
+    "conda_name": "bonsu",
+    "import_name": "bonsu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bonsu"
+  },
+  "bookstore": {
+    "conda_name": "bookstore",
+    "import_name": "bookstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bookstore"
+  },
+  "boolean-py": {
+    "conda_name": "boolean.py",
+    "import_name": "boolean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boolean-py"
+  },
+  "booleanoperations": {
+    "conda_name": "booleanoperations",
+    "import_name": "booleanOperations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "booleanoperations"
+  },
+  "bootstrap-contrast": {
+    "conda_name": "bootstrap_contrast",
+    "import_name": "bootstrap_contrast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bootstrap-contrast"
+  },
+  "bootstrap-flask": {
+    "conda_name": "bootstrap-flask",
+    "import_name": "flask_bootstrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bootstrap-flask"
+  },
+  "bor": {
+    "conda_name": "bor",
+    "import_name": "bor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bor"
+  },
+  "bordado": {
+    "conda_name": "bordado",
+    "import_name": "bordado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bordado"
+  },
+  "boring-semantic-layer": {
+    "conda_name": "boring-semantic-layer",
+    "import_name": "boring_semantic_layer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boring-semantic-layer"
+  },
+  "borneo": {
+    "conda_name": "borneo",
+    "import_name": "borneo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "borneo"
+  },
+  "borsh-construct": {
+    "conda_name": "borsh-construct",
+    "import_name": "borsh_construct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "borsh-construct"
+  },
+  "boruta": {
+    "conda_name": "boruta_py",
+    "import_name": "boruta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boruta"
+  },
+  "botcity-maestro-sdk": {
+    "conda_name": "botcity-maestro-sdk",
+    "import_name": "botcity.maestro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "botcity-maestro-sdk"
+  },
+  "boto": {
+    "conda_name": "boto",
+    "import_name": "boto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boto"
+  },
+  "boto3": {
+    "conda_name": "boto3",
+    "import_name": "boto3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boto3"
+  },
+  "boto3-type": {
+    "conda_name": "boto3_type",
+    "import_name": "boto3_type",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boto3-type"
+  },
+  "botocore": {
+    "conda_name": "botocore",
+    "import_name": "botocore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "botocore"
+  },
+  "botor": {
+    "conda_name": "botor",
+    "import_name": "botor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "botor"
+  },
+  "boule": {
+    "conda_name": "boule",
+    "import_name": "boule",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boule"
+  },
+  "bounded-pool-executor": {
+    "conda_name": "bounded-pool-executor",
+    "import_name": "bounded_pool_executor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bounded-pool-executor"
+  },
+  "boutdata": {
+    "conda_name": "boutdata",
+    "import_name": "boutdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boutdata"
+  },
+  "boutiques": {
+    "conda_name": "boutiques",
+    "import_name": "boutiques",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boutiques"
+  },
+  "boututils": {
+    "conda_name": "boututils",
+    "import_name": "boututils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boututils"
+  },
+  "bowerstatic": {
+    "conda_name": "bowerstatic",
+    "import_name": "bowerstatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bowerstatic"
+  },
+  "bowler": {
+    "conda_name": "bowler",
+    "import_name": "bowler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bowler"
+  },
+  "bowtie": {
+    "conda_name": "bowtie-py",
+    "import_name": "bowtie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bowtie"
+  },
+  "box-sdk-gen": {
+    "conda_name": "box-sdk-gen",
+    "import_name": "box_sdk_gen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "box-sdk-gen"
+  },
+  "box2d-py": {
+    "conda_name": "box2d-py",
+    "import_name": "Box2D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "box2d-py"
+  },
+  "boxing": {
+    "conda_name": "boxing",
+    "import_name": "boxing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boxing"
+  },
+  "boxlang": {
+    "conda_name": "boxlang",
+    "import_name": "box",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boxlang"
+  },
+  "boxsdk": {
+    "conda_name": "boxsdk",
+    "import_name": "box_sdk_gen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "boxsdk"
+  },
+  "bpack": {
+    "conda_name": "bpack",
+    "import_name": "bpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bpack"
+  },
+  "bpemb": {
+    "conda_name": "bpemb",
+    "import_name": "bpemb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bpemb"
+  },
+  "bpytop": {
+    "conda_name": "bpytop",
+    "import_name": "bpytop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bpytop"
+  },
+  "bqplot-gl": {
+    "conda_name": "bqplot-gl",
+    "import_name": "bqplot_gl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bqplot-gl"
+  },
+  "bqplot-image-gl": {
+    "conda_name": "bqplot-image-gl",
+    "import_name": "bqplot_image_gl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bqplot-image-gl"
+  },
+  "bqplot-linlog": {
+    "conda_name": "bqplot-linlog",
+    "import_name": "bqplot_linlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bqplot-linlog"
+  },
+  "bqscales": {
+    "conda_name": "bqscales",
+    "import_name": "bqscales",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bqscales"
+  },
+  "braceexpand": {
+    "conda_name": "braceexpand",
+    "import_name": "braceexpand",
+    "mapping_source": "regro-bot",
+    "pypi_name": "braceexpand"
+  },
+  "brainbox-ibl": {
+    "conda_name": "brainbox-ibl",
+    "import_name": "brainbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainbox-ibl"
+  },
+  "brainglobe-atlasapi": {
+    "conda_name": "brainglobe-atlasapi",
+    "import_name": "brainglobe_atlasapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainglobe-atlasapi"
+  },
+  "brainglobe-napari-io": {
+    "conda_name": "brainglobe-napari-io",
+    "import_name": "brainglobe_napari_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainglobe-napari-io"
+  },
+  "brainglobe-segmentation": {
+    "conda_name": "brainglobe-segmentation",
+    "import_name": "brainglobe_segmentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainglobe-segmentation"
+  },
+  "brainglobe-space": {
+    "conda_name": "brainglobe-space",
+    "import_name": "brainglobe_space",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainglobe-space"
+  },
+  "brainglobe-utils": {
+    "conda_name": "brainglobe-utils",
+    "import_name": "brainglobe_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainglobe-utils"
+  },
+  "brainreg": {
+    "conda_name": "brainreg",
+    "import_name": "brainreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainreg"
+  },
+  "brainreg-segment": {
+    "conda_name": "brainreg-segment",
+    "import_name": "brainreg_segment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainreg-segment"
+  },
+  "brainrender-napari": {
+    "conda_name": "brainrender-napari",
+    "import_name": "brainrender_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brainrender-napari"
+  },
+  "branca": {
+    "conda_name": "branca",
+    "import_name": "branca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "branca"
+  },
+  "braq": {
+    "conda_name": "braq",
+    "import_name": "braq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "braq"
+  },
+  "bravado": {
+    "conda_name": "bravado",
+    "import_name": "bravado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bravado"
+  },
+  "bravado-core": {
+    "conda_name": "bravado-core",
+    "import_name": "bravado_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bravado-core"
+  },
+  "breadability": {
+    "conda_name": "breadability",
+    "import_name": "breadability",
+    "mapping_source": "regro-bot",
+    "pypi_name": "breadability"
+  },
+  "breathe": {
+    "conda_name": "breathe",
+    "import_name": "breathe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "breathe"
+  },
+  "bregman-learning": {
+    "conda_name": "bregman-learning",
+    "import_name": "bregman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bregman-learning"
+  },
+  "brent-search": {
+    "conda_name": "brent-search",
+    "import_name": "brent_search",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brent-search"
+  },
+  "brian2": {
+    "conda_name": "brian2",
+    "import_name": "brian2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brian2"
+  },
+  "brian2genn": {
+    "conda_name": "brian2genn",
+    "import_name": "brian2genn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brian2genn"
+  },
+  "briefcase": {
+    "conda_name": "briefcase",
+    "import_name": "briefcase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "briefcase"
+  },
+  "brighteyes-ism": {
+    "conda_name": "brighteyes-ism",
+    "import_name": "brighteyes_ism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brighteyes-ism"
+  },
+  "brightway2": {
+    "conda_name": "brightway2",
+    "import_name": "brightway2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brightway2"
+  },
+  "broadbean": {
+    "conda_name": "broadbean",
+    "import_name": "broadbean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "broadbean"
+  },
+  "broh5": {
+    "conda_name": "broh5",
+    "import_name": "broh5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "broh5"
+  },
+  "brokenaxes": {
+    "conda_name": "brokenaxes",
+    "import_name": "brokenaxes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brokenaxes"
+  },
+  "brotli-asgi": {
+    "conda_name": "brotli-asgi",
+    "import_name": "brotli_asgi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brotli-asgi"
+  },
+  "brotlicffi": {
+    "conda_name": "brotlicffi",
+    "import_name": "brotlicffi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brotlicffi"
+  },
+  "brotlipy": {
+    "conda_name": "brotlipy",
+    "import_name": "brotli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brotlipy"
+  },
+  "bruco": {
+    "conda_name": "bruco",
+    "import_name": "bruco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bruco"
+  },
+  "brukerapi": {
+    "conda_name": "brukerapi",
+    "import_name": "brukerapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "brukerapi"
+  },
+  "bsddb3": {
+    "conda_name": "bsddb3",
+    "import_name": "bsddb3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bsddb3"
+  },
+  "bson": {
+    "conda_name": "bson",
+    "import_name": "bson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bson"
+  },
+  "bspline": {
+    "conda_name": "bspline",
+    "import_name": "bspline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bspline"
+  },
+  "bsplines2d": {
+    "conda_name": "bsplines2d",
+    "import_name": "bsplines2d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bsplines2d"
+  },
+  "bssunfold": {
+    "conda_name": "bssunfold",
+    "import_name": "bssunfold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bssunfold"
+  },
+  "bt": {
+    "conda_name": "bt",
+    "import_name": "bt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bt"
+  },
+  "btrees": {
+    "conda_name": "btrees",
+    "import_name": "BTrees",
+    "mapping_source": "regro-bot",
+    "pypi_name": "btrees"
+  },
+  "bubbledet": {
+    "conda_name": "bubbledet",
+    "import_name": "BubbleDet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bubbledet"
+  },
+  "bucketcache": {
+    "conda_name": "bucketcache",
+    "import_name": "bucketcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bucketcache"
+  },
+  "bufrtools": {
+    "conda_name": "bufrtools",
+    "import_name": "bufrtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bufrtools"
+  },
+  "bugsnag": {
+    "conda_name": "bugsnag",
+    "import_name": "bugsnag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bugsnag"
+  },
+  "build": {
+    "conda_name": "python-build",
+    "import_name": "build",
+    "mapping_source": "static",
+    "pypi_name": "build"
+  },
+  "build-capi": {
+    "conda_name": "build-capi",
+    "import_name": "build_capi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "build-capi"
+  },
+  "buildbot": {
+    "conda_name": "buildbot",
+    "import_name": "buildbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot"
+  },
+  "buildbot-console-view": {
+    "conda_name": "buildbot-console-view",
+    "import_name": "buildbot_console_view",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-console-view"
+  },
+  "buildbot-grid-view": {
+    "conda_name": "buildbot-grid-view",
+    "import_name": "buildbot_grid_view",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-grid-view"
+  },
+  "buildbot-pkg": {
+    "conda_name": "buildbot-pkg",
+    "import_name": "buildbot_pkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-pkg"
+  },
+  "buildbot-waterfall-view": {
+    "conda_name": "buildbot-waterfall-view",
+    "import_name": "buildbot_waterfall_view",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-waterfall-view"
+  },
+  "buildbot-worker": {
+    "conda_name": "buildbot-worker",
+    "import_name": "buildbot_worker.util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-worker"
+  },
+  "buildbot-www": {
+    "conda_name": "buildbot-www",
+    "import_name": "buildbot_www",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildbot-www"
+  },
+  "buildingregulariser": {
+    "conda_name": "buildingregulariser",
+    "import_name": "buildingregulariser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildingregulariser"
+  },
+  "buildkite-test-collector": {
+    "conda_name": "buildkite-test-collector",
+    "import_name": "buildkite_test_collector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildkite-test-collector"
+  },
+  "buildver": {
+    "conda_name": "buildver",
+    "import_name": "buildver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "buildver"
+  },
+  "bulk": {
+    "conda_name": "bulk",
+    "import_name": "bulk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bulk"
+  },
+  "bullet": {
+    "conda_name": "bullet-python",
+    "import_name": "bullet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bullet"
+  },
+  "bulwark": {
+    "conda_name": "bulwark",
+    "import_name": "bulwark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bulwark"
+  },
+  "bump-my-version": {
+    "conda_name": "bump-my-version",
+    "import_name": "bumpversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bump-my-version"
+  },
+  "bump2version": {
+    "conda_name": "bump2version",
+    "import_name": "bumpversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bump2version"
+  },
+  "bumpver": {
+    "conda_name": "bumpver",
+    "import_name": "bumpver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bumpver"
+  },
+  "bumpversion": {
+    "conda_name": "bumpversion",
+    "import_name": "bumpversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bumpversion"
+  },
+  "bunch": {
+    "conda_name": "bunch",
+    "import_name": "bunch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bunch"
+  },
+  "bunnet": {
+    "conda_name": "bunnet",
+    "import_name": "bunnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bunnet"
+  },
+  "bunq-sdk": {
+    "conda_name": "bunq-sdk",
+    "import_name": "bunq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bunq-sdk"
+  },
+  "bunqexport": {
+    "conda_name": "bunqexport",
+    "import_name": "bunqexport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bunqexport"
+  },
+  "burocrata": {
+    "conda_name": "burocrata",
+    "import_name": "burocrata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "burocrata"
+  },
+  "burst2safe": {
+    "conda_name": "burst2safe",
+    "import_name": "burst2safe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "burst2safe"
+  },
+  "bursty-dynamics": {
+    "conda_name": "bursty-dynamics",
+    "import_name": "bursty_dynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bursty-dynamics"
+  },
+  "bvalcalc": {
+    "conda_name": "bvalcalc",
+    "import_name": "Bvalcalc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bvalcalc"
+  },
+  "bw-migrations": {
+    "conda_name": "bw_migrations",
+    "import_name": "bw_migrations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw-migrations"
+  },
+  "bw-projects": {
+    "conda_name": "bw-projects",
+    "import_name": "bw_projects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw-projects"
+  },
+  "bw2analyzer": {
+    "conda_name": "bw2analyzer",
+    "import_name": "bw2analyzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2analyzer"
+  },
+  "bw2calc": {
+    "conda_name": "bw2calc",
+    "import_name": "bw2calc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2calc"
+  },
+  "bw2data": {
+    "conda_name": "bw2data",
+    "import_name": "bw2data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2data"
+  },
+  "bw2io": {
+    "conda_name": "bw2io",
+    "import_name": "bw2io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2io"
+  },
+  "bw2parameters": {
+    "conda_name": "bw2parameters",
+    "import_name": "bw2parameters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2parameters"
+  },
+  "bw2speedups": {
+    "conda_name": "bw2speedups",
+    "import_name": "bw2speedups",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bw2speedups"
+  },
+  "bxa": {
+    "conda_name": "bxa",
+    "import_name": "bxa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bxa"
+  },
+  "bz2file": {
+    "conda_name": "bz2file",
+    "import_name": "bz2file",
+    "mapping_source": "regro-bot",
+    "pypi_name": "bz2file"
+  },
+  "cabinetry": {
+    "conda_name": "cabinetry",
+    "import_name": "cabinetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cabinetry"
+  },
+  "cache-decorator": {
+    "conda_name": "cache_decorator",
+    "import_name": "cache_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cache-decorator"
+  },
+  "cached-interpolate": {
+    "conda_name": "cached_interpolate",
+    "import_name": "cached_interpolate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cached-interpolate"
+  },
+  "cached-property": {
+    "conda_name": "cached_property",
+    "import_name": "cached_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cached-property"
+  },
+  "cachelib": {
+    "conda_name": "cachelib",
+    "import_name": "cachelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cachelib"
+  },
+  "cacheout": {
+    "conda_name": "cacheout",
+    "import_name": "cacheout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cacheout"
+  },
+  "cachetools": {
+    "conda_name": "cachetools",
+    "import_name": "cachetools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cachetools"
+  },
+  "cachey": {
+    "conda_name": "cachey",
+    "import_name": "cachey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cachey"
+  },
+  "cacheyou": {
+    "conda_name": "cacheyou",
+    "import_name": "cacheyou",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cacheyou"
+  },
+  "cachy": {
+    "conda_name": "cachy",
+    "import_name": "cachy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cachy"
+  },
+  "cad-to-dagmc": {
+    "conda_name": "cad_to_dagmc",
+    "import_name": "cad_to_dagmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cad-to-dagmc"
+  },
+  "cadquery-direct-mesh-plugin": {
+    "conda_name": "cadquery-direct-mesh-plugin",
+    "import_name": "cadquery_direct_mesh_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cadquery-direct-mesh-plugin"
+  },
+  "cads-api-client": {
+    "conda_name": "cads-api-client",
+    "import_name": "cads_api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cads-api-client"
+  },
+  "caf-base": {
+    "conda_name": "caf.base",
+    "import_name": "caf.base",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-base"
+  },
+  "caf-brain": {
+    "conda_name": "caf.brain",
+    "import_name": "caf.brain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-brain"
+  },
+  "caf-cvt": {
+    "conda_name": "caf.cvt",
+    "import_name": "caf.cvt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-cvt"
+  },
+  "caf-distribute": {
+    "conda_name": "caf.distribute",
+    "import_name": "caf.distribute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-distribute"
+  },
+  "caf-mat": {
+    "conda_name": "caf.mat",
+    "import_name": "caf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-mat"
+  },
+  "caf-ntem": {
+    "conda_name": "caf.ntem",
+    "import_name": "caf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-ntem"
+  },
+  "caf-space": {
+    "conda_name": "caf.space",
+    "import_name": "caf.space",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-space"
+  },
+  "caf-toolkit": {
+    "conda_name": "caf.toolkit",
+    "import_name": "caf.toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-toolkit"
+  },
+  "caf-viz": {
+    "conda_name": "caf.viz",
+    "import_name": "caf.viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caf-viz"
+  },
+  "calamari-ocr": {
+    "conda_name": "calamari_ocr",
+    "import_name": "calamari_ocr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calamari-ocr"
+  },
+  "caldav": {
+    "conda_name": "caldav",
+    "import_name": "caldav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caldav"
+  },
+  "calibrated-explanations": {
+    "conda_name": "calibrated-explanations",
+    "import_name": "calibrated_explanations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calibrated-explanations"
+  },
+  "calkulate": {
+    "conda_name": "calkulate",
+    "import_name": "calkulate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calkulate"
+  },
+  "calliope": {
+    "conda_name": "calliope",
+    "import_name": "calliope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calliope"
+  },
+  "calphy": {
+    "conda_name": "calphy",
+    "import_name": "calphy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calphy"
+  },
+  "calt-x": {
+    "conda_name": "calt-x",
+    "import_name": "calt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calt-x"
+  },
+  "calver": {
+    "conda_name": "calver",
+    "import_name": "calver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calver"
+  },
+  "calysto-bash": {
+    "conda_name": "calysto_bash",
+    "import_name": "calysto_bash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "calysto-bash"
+  },
+  "camel": {
+    "conda_name": "camel",
+    "import_name": "camel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "camel"
+  },
+  "camel-converter": {
+    "conda_name": "camel-converter",
+    "import_name": "camel_converter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "camel-converter"
+  },
+  "camelot-py": {
+    "conda_name": "camelot-py",
+    "import_name": "camelot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "camelot-py"
+  },
+  "can-isotp": {
+    "conda_name": "can-isotp",
+    "import_name": "isotp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "can-isotp"
+  },
+  "caniusepython3": {
+    "conda_name": "caniusepython3",
+    "import_name": "caniusepython3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caniusepython3"
+  },
+  "canmatrix": {
+    "conda_name": "canmatrix",
+    "import_name": "canmatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "canmatrix"
+  },
+  "canonicaljson": {
+    "conda_name": "canonicaljson",
+    "import_name": "canonicaljson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "canonicaljson"
+  },
+  "canopen": {
+    "conda_name": "canopen",
+    "import_name": "canopen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "canopen"
+  },
+  "canopy-tools": {
+    "conda_name": "canopy-tools",
+    "import_name": "canopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "canopy-tools"
+  },
+  "cantools": {
+    "conda_name": "cantools",
+    "import_name": "cantools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cantools"
+  },
+  "caped-ai-augmentations": {
+    "conda_name": "caped-ai-augmentations",
+    "import_name": "caped_ai_augmentations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caped-ai-augmentations"
+  },
+  "caped-ai-metrics": {
+    "conda_name": "caped-ai-metrics",
+    "import_name": "caped_ai_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caped-ai-metrics"
+  },
+  "capella-console-client": {
+    "conda_name": "capella-console-client",
+    "import_name": "capella_console_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "capella-console-client"
+  },
+  "caproto": {
+    "conda_name": "caproto",
+    "import_name": "caproto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caproto"
+  },
+  "capsula": {
+    "conda_name": "capsula",
+    "import_name": "capsula",
+    "mapping_source": "regro-bot",
+    "pypi_name": "capsula"
+  },
+  "captcha": {
+    "conda_name": "captcha",
+    "import_name": "captcha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "captcha"
+  },
+  "captest": {
+    "conda_name": "pvcaptest",
+    "import_name": "captest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "captest"
+  },
+  "captum": {
+    "conda_name": "captum",
+    "import_name": "captum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "captum"
+  },
+  "capturer": {
+    "conda_name": "capturer",
+    "import_name": "capturer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "capturer"
+  },
+  "cardiac-geometries-core": {
+    "conda_name": "cardiac-geometries-core",
+    "import_name": "cardiac_geometries_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cardiac-geometries-core"
+  },
+  "cardiac-geometriesx": {
+    "conda_name": "cardiac-geometriesx",
+    "import_name": "cardiac_geometries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cardiac-geometriesx"
+  },
+  "cardiac-mps": {
+    "conda_name": "cardiac-mps",
+    "import_name": "mps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cardiac-mps"
+  },
+  "careamics": {
+    "conda_name": "careamics",
+    "import_name": "careamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "careamics"
+  },
+  "careamics-napari": {
+    "conda_name": "careamics-napari",
+    "import_name": "careamics_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "careamics-napari"
+  },
+  "careamics-portfolio": {
+    "conda_name": "careamics-portfolio",
+    "import_name": "careamics_portfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "careamics-portfolio"
+  },
+  "cartes": {
+    "conda_name": "cartes",
+    "import_name": "cartes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cartes"
+  },
+  "carto": {
+    "conda_name": "carto",
+    "import_name": "carto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "carto"
+  },
+  "carto-auth": {
+    "conda_name": "carto-auth",
+    "import_name": "carto_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "carto-auth"
+  },
+  "cartogram": {
+    "conda_name": "cartogram",
+    "import_name": "cartogram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cartogram"
+  },
+  "cartopy": {
+    "conda_name": "cartopy",
+    "import_name": "cartopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cartopy"
+  },
+  "cartotools": {
+    "conda_name": "cartotools",
+    "import_name": "cartotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cartotools"
+  },
+  "cartwright": {
+    "conda_name": "cartwright",
+    "import_name": "cartwright",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cartwright"
+  },
+  "casa-formats-io": {
+    "conda_name": "casa_formats_io",
+    "import_name": "casa_formats_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "casa-formats-io"
+  },
+  "case": {
+    "conda_name": "case",
+    "import_name": "case",
+    "mapping_source": "regro-bot",
+    "pypi_name": "case"
+  },
+  "casefy": {
+    "conda_name": "casefy",
+    "import_name": "casefy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "casefy"
+  },
+  "cashews": {
+    "conda_name": "cashews",
+    "import_name": "cashews",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cashews"
+  },
+  "cashocs": {
+    "conda_name": "cashocs",
+    "import_name": "cashocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cashocs"
+  },
+  "casq": {
+    "conda_name": "casq",
+    "import_name": "casq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "casq"
+  },
+  "cassandra-driver": {
+    "conda_name": "cassandra-driver",
+    "import_name": "cassandra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cassandra-driver"
+  },
+  "cassowary": {
+    "conda_name": "cassowary",
+    "import_name": "cassowary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cassowary"
+  },
+  "castepinput": {
+    "conda_name": "castepinput",
+    "import_name": "castepinput",
+    "mapping_source": "regro-bot",
+    "pypi_name": "castepinput"
+  },
+  "castorapi": {
+    "conda_name": "castorapi",
+    "import_name": "castorapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "castorapi"
+  },
+  "castoredc-api": {
+    "conda_name": "castoredc_api",
+    "import_name": "castoredc_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "castoredc-api"
+  },
+  "catalogue": {
+    "conda_name": "catalogue",
+    "import_name": "catalogue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catalogue"
+  },
+  "catalystcoop-dbfread": {
+    "conda_name": "catalystcoop.dbfread",
+    "import_name": "dbfread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catalystcoop-dbfread"
+  },
+  "catalystcoop-pudl-catalog": {
+    "conda_name": "catalystcoop.pudl_catalog",
+    "import_name": "pudl_catalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catalystcoop-pudl-catalog"
+  },
+  "categorical-distance": {
+    "conda_name": "categorical-distance",
+    "import_name": "categorical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "categorical-distance"
+  },
+  "catimg": {
+    "conda_name": "catimg",
+    "import_name": "catimg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catimg"
+  },
+  "catlearn": {
+    "conda_name": "catlearn",
+    "import_name": "catlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catlearn"
+  },
+  "catppuccin-jupyterlab": {
+    "conda_name": "catppuccin-jupyterlab",
+    "import_name": "catppuccin_jupyterlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catppuccin-jupyterlab"
+  },
+  "catzzz": {
+    "conda_name": "catzzz",
+    "import_name": "catzzz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "catzzz"
+  },
+  "causal-learn": {
+    "conda_name": "causal-learn",
+    "import_name": "causallearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "causal-learn"
+  },
+  "causal-testing-framework": {
+    "conda_name": "causal-testing-framework",
+    "import_name": "causal_testing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "causal-testing-framework"
+  },
+  "causalegm": {
+    "conda_name": "causalegm",
+    "import_name": "CausalEGM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "causalegm"
+  },
+  "causalimpact": {
+    "conda_name": "causalimpact",
+    "import_name": "causalimpact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "causalimpact"
+  },
+  "causalml": {
+    "conda_name": "causalml",
+    "import_name": "causalml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "causalml"
+  },
+  "caustics": {
+    "conda_name": "caustics",
+    "import_name": "caustics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "caustics"
+  },
+  "cbcflow": {
+    "conda_name": "cbcflow",
+    "import_name": "cbcflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cbcflow"
+  },
+  "cbgen": {
+    "conda_name": "cbgen",
+    "import_name": "cbgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cbgen"
+  },
+  "cbor": {
+    "conda_name": "cbor",
+    "import_name": "cbor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cbor"
+  },
+  "cc-plugin-cc6": {
+    "conda_name": "cc-plugin-cc6",
+    "import_name": "cc_plugin_cc6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cc-plugin-cc6"
+  },
+  "cc-plugin-glider": {
+    "conda_name": "cc-plugin-glider",
+    "import_name": "cc_plugin_glider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cc-plugin-glider"
+  },
+  "cc-plugin-ncei": {
+    "conda_name": "cc-plugin-ncei",
+    "import_name": "cc_plugin_ncei",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cc-plugin-ncei"
+  },
+  "cc-plugin-ugrid": {
+    "conda_name": "cc-plugin-ugrid",
+    "import_name": "cc_plugin_ugrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cc-plugin-ugrid"
+  },
+  "cc-qa": {
+    "conda_name": "cc-qa",
+    "import_name": "cc_qa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cc-qa"
+  },
+  "ccdproc": {
+    "conda_name": "ccdproc",
+    "import_name": "ccdproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ccdproc"
+  },
+  "cchardet": {
+    "conda_name": "cchardet",
+    "import_name": "cchardet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cchardet"
+  },
+  "cclib": {
+    "conda_name": "cclib",
+    "import_name": "cclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cclib"
+  },
+  "ccorp-yaml-include-relative-path": {
+    "conda_name": "ccorp-yaml-include-relative-path",
+    "import_name": "ccorp.ruamel.yaml.include",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ccorp-yaml-include-relative-path"
+  },
+  "ccsds-ndm": {
+    "conda_name": "ccsds_ndm",
+    "import_name": "ccsds_ndm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ccsds-ndm"
+  },
+  "cdasws": {
+    "conda_name": "cdasws",
+    "import_name": "cdasws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdasws"
+  },
+  "cdcs": {
+    "conda_name": "cdcs",
+    "import_name": "cdcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdcs"
+  },
+  "cdflib": {
+    "conda_name": "cdflib",
+    "import_name": "cdflib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdflib"
+  },
+  "cditools": {
+    "conda_name": "cditools",
+    "import_name": "cditools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cditools"
+  },
+  "cdlib": {
+    "conda_name": "cdlib",
+    "import_name": "cdlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdlib"
+  },
+  "cdsapi": {
+    "conda_name": "cdsapi",
+    "import_name": "cdsapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdsapi"
+  },
+  "cdsetool": {
+    "conda_name": "cdsetool",
+    "import_name": "cdsetool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdsetool"
+  },
+  "cdshealpix": {
+    "conda_name": "cdshealpix",
+    "import_name": "cdshealpix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdshealpix"
+  },
+  "cdsodatacli": {
+    "conda_name": "cdsodatacli",
+    "import_name": "cdsodatacli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdsodatacli"
+  },
+  "cdsswarm": {
+    "conda_name": "cdsswarm",
+    "import_name": "cdsswarm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdsswarm"
+  },
+  "cdsutils": {
+    "conda_name": "cdsutils",
+    "import_name": "cdsutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdsutils"
+  },
+  "cdt": {
+    "conda_name": "cdt",
+    "import_name": "cdt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cdt"
+  },
+  "ceci": {
+    "conda_name": "lsstdesc-ceci",
+    "import_name": "ceci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ceci"
+  },
+  "ceffyl": {
+    "conda_name": "ceffyl",
+    "import_name": "ceffyl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ceffyl"
+  },
+  "celer": {
+    "conda_name": "celer",
+    "import_name": "celer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celer"
+  },
+  "celeries": {
+    "conda_name": "celeries",
+    "import_name": "celeries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celeries"
+  },
+  "celerite": {
+    "conda_name": "celerite",
+    "import_name": "celerite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celerite"
+  },
+  "celerite2": {
+    "conda_name": "celerite2",
+    "import_name": "celerite2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celerite2"
+  },
+  "celery-eternal": {
+    "conda_name": "celery-eternal",
+    "import_name": "celery_eternal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celery-eternal"
+  },
+  "celery-redbeat": {
+    "conda_name": "celery-redbeat",
+    "import_name": "redbeat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celery-redbeat"
+  },
+  "celery-singleton": {
+    "conda_name": "celery-singleton",
+    "import_name": "celery_singleton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celery-singleton"
+  },
+  "cellconstructor": {
+    "conda_name": "cellconstructor",
+    "import_name": "cellconstructor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellconstructor"
+  },
+  "cellfinder": {
+    "conda_name": "cellfinder",
+    "import_name": "cellfinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellfinder"
+  },
+  "cellfinder-napari": {
+    "conda_name": "cellfinder-napari",
+    "import_name": "cellfinder_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellfinder-napari"
+  },
+  "cellhint": {
+    "conda_name": "cellhint",
+    "import_name": "cellhint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellhint"
+  },
+  "cellpose": {
+    "conda_name": "cellpose",
+    "import_name": "cellpose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellpose"
+  },
+  "cellpose-napari": {
+    "conda_name": "cellpose-napari",
+    "import_name": "cellpose_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellpose-napari"
+  },
+  "cellpycore": {
+    "conda_name": "cellpycore",
+    "import_name": "cellpycore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cellpycore"
+  },
+  "celluloid": {
+    "conda_name": "celluloid",
+    "import_name": "celluloid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "celluloid"
+  },
+  "cement": {
+    "conda_name": "cement",
+    "import_name": "cement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cement"
+  },
+  "cenpy": {
+    "conda_name": "cenpy",
+    "import_name": "cenpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cenpy"
+  },
+  "census": {
+    "conda_name": "census",
+    "import_name": "census",
+    "mapping_source": "regro-bot",
+    "pypi_name": "census"
+  },
+  "census-parquet": {
+    "conda_name": "census-parquet",
+    "import_name": "census_parquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "census-parquet"
+  },
+  "centerline": {
+    "conda_name": "centerline",
+    "import_name": "centerline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "centerline"
+  },
+  "cerberus": {
+    "conda_name": "cerberus",
+    "import_name": "cerberus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cerberus"
+  },
+  "certbot-apache": {
+    "conda_name": "certbot-apache",
+    "import_name": "certbot_apache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "certbot-apache"
+  },
+  "certbot-nginx": {
+    "conda_name": "certbot-nginx",
+    "import_name": "certbot_nginx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "certbot-nginx"
+  },
+  "cesard": {
+    "conda_name": "cesard",
+    "import_name": "cesard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cesard"
+  },
+  "cesium": {
+    "conda_name": "cesium",
+    "import_name": "cesium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cesium"
+  },
+  "cexprtk": {
+    "conda_name": "cexprtk",
+    "import_name": "cexprtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cexprtk"
+  },
+  "cf-pandas": {
+    "conda_name": "cf_pandas",
+    "import_name": "cf_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cf-pandas"
+  },
+  "cf-plot": {
+    "conda_name": "cf-plot",
+    "import_name": "cfplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cf-plot"
+  },
+  "cf-python": {
+    "conda_name": "cf-python",
+    "import_name": "cf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cf-python"
+  },
+  "cf-units": {
+    "conda_name": "cf-units",
+    "import_name": "cf_units",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cf-units"
+  },
+  "cf-xarray": {
+    "conda_name": "cf_xarray",
+    "import_name": "cf_xarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cf-xarray"
+  },
+  "cfanalytics": {
+    "conda_name": "cfanalytics",
+    "import_name": "cfanalytics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfanalytics"
+  },
+  "cfchecker": {
+    "conda_name": "cfchecker",
+    "import_name": "cfchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfchecker"
+  },
+  "cfdm": {
+    "conda_name": "cfdm",
+    "import_name": "cfdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfdm"
+  },
+  "cfenv": {
+    "conda_name": "cfenv",
+    "import_name": "cfenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfenv"
+  },
+  "cffconvert": {
+    "conda_name": "cffconvert",
+    "import_name": "cffconvert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cffconvert"
+  },
+  "cffsubr": {
+    "conda_name": "cffsubr",
+    "import_name": "cffsubr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cffsubr"
+  },
+  "cfg-cli": {
+    "conda_name": "cfg-cli",
+    "import_name": "cfg_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfg-cli"
+  },
+  "cfgraph": {
+    "conda_name": "cfgraph",
+    "import_name": "CFGraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfgraph"
+  },
+  "cfgv": {
+    "conda_name": "cfgv",
+    "import_name": "cfgv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfgv"
+  },
+  "cfn-lint": {
+    "conda_name": "cfn-lint",
+    "import_name": "cfnlint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfn-lint"
+  },
+  "cfncluster": {
+    "conda_name": "cfncluster",
+    "import_name": "cfncluster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfncluster"
+  },
+  "cfs3": {
+    "conda_name": "cfs3",
+    "import_name": "cfs3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfs3"
+  },
+  "cftime": {
+    "conda_name": "cftime",
+    "import_name": "cftime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cftime"
+  },
+  "cfunits": {
+    "conda_name": "cfunits",
+    "import_name": "cfunits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cfunits"
+  },
+  "cgen": {
+    "conda_name": "cgen",
+    "import_name": "cgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cgen"
+  },
+  "cget": {
+    "conda_name": "cget",
+    "import_name": "cget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cget"
+  },
+  "cgroupspy": {
+    "conda_name": "cgroupspy",
+    "import_name": "cgroupspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cgroupspy"
+  },
+  "chafer": {
+    "conda_name": "chafer",
+    "import_name": "chafer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chafer"
+  },
+  "chai": {
+    "conda_name": "chai",
+    "import_name": "chai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chai"
+  },
+  "chainer": {
+    "conda_name": "chainer",
+    "import_name": "chainer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chainer"
+  },
+  "chainladder": {
+    "conda_name": "chainladder",
+    "import_name": "chainladder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chainladder"
+  },
+  "chainmap": {
+    "conda_name": "chainmap",
+    "import_name": "chainmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chainmap"
+  },
+  "chalice": {
+    "conda_name": "chalice",
+    "import_name": "chalice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chalice"
+  },
+  "chalk-diagrams": {
+    "conda_name": "chalk-diagrams",
+    "import_name": "chalk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chalk-diagrams"
+  },
+  "chameleon": {
+    "conda_name": "chameleon",
+    "import_name": "chameleon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chameleon"
+  },
+  "changeforest": {
+    "conda_name": "changeforest",
+    "import_name": "changeforest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "changeforest"
+  },
+  "changelog-chug": {
+    "conda_name": "changelog-chug",
+    "import_name": "chug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "changelog-chug"
+  },
+  "channelarchiver": {
+    "conda_name": "channelarchiver",
+    "import_name": "channelarchiver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "channelarchiver"
+  },
+  "channels": {
+    "conda_name": "channels",
+    "import_name": "channels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "channels"
+  },
+  "channels-redis": {
+    "conda_name": "channels_redis",
+    "import_name": "channels_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "channels-redis"
+  },
+  "charidotella": {
+    "conda_name": "charidotella",
+    "import_name": "charidotella",
+    "mapping_source": "regro-bot",
+    "pypi_name": "charidotella"
+  },
+  "charset-normalizer": {
+    "conda_name": "charset-normalizer",
+    "import_name": "charset_normalizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "charset-normalizer"
+  },
+  "chart-studio": {
+    "conda_name": "chart-studio",
+    "import_name": "chart_studio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chart-studio"
+  },
+  "chartify": {
+    "conda_name": "chartify",
+    "import_name": "chartify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chartify"
+  },
+  "chartkick": {
+    "conda_name": "chartkick",
+    "import_name": "chartkick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chartkick"
+  },
+  "chbshash": {
+    "conda_name": "chbshash",
+    "import_name": "chbshash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chbshash"
+  },
+  "cheap-repr": {
+    "conda_name": "cheap_repr",
+    "import_name": "cheap_repr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cheap-repr"
+  },
+  "cheat": {
+    "conda_name": "cheat",
+    "import_name": "cheat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cheat"
+  },
+  "check-internet-speed": {
+    "conda_name": "check-internet-speed",
+    "import_name": "check_internet_speed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "check-internet-speed"
+  },
+  "check-manifest": {
+    "conda_name": "check-manifest",
+    "import_name": "check_manifest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "check-manifest"
+  },
+  "check-shapes": {
+    "conda_name": "check_shapes",
+    "import_name": "check_shapes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "check-shapes"
+  },
+  "checklist": {
+    "conda_name": "checklist",
+    "import_name": "checklist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "checklist"
+  },
+  "checksumdir": {
+    "conda_name": "checksumdir",
+    "import_name": "checksumdir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "checksumdir"
+  },
+  "cheetah3": {
+    "conda_name": "cheetah3",
+    "import_name": "Cheetah",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cheetah3"
+  },
+  "chembl-webresource-client": {
+    "conda_name": "chembl_webresource_client",
+    "import_name": "chembl_webresource_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chembl-webresource-client"
+  },
+  "chemcat": {
+    "conda_name": "chemcat",
+    "import_name": "chemcat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemcat"
+  },
+  "chemcoord": {
+    "conda_name": "chemcoord",
+    "import_name": "chemcoord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemcoord"
+  },
+  "chemdataextractor": {
+    "conda_name": "chemdataextractor",
+    "import_name": "chemdataextractor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemdataextractor"
+  },
+  "chemex": {
+    "conda_name": "chemex",
+    "import_name": "chemex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemex"
+  },
+  "chemicals": {
+    "conda_name": "chemicals",
+    "import_name": "chemicals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemicals"
+  },
+  "chemics": {
+    "conda_name": "chemics",
+    "import_name": "chemics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemics"
+  },
+  "chemiscope": {
+    "conda_name": "chemiscope",
+    "import_name": "chemiscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemiscope"
+  },
+  "chemml": {
+    "conda_name": "chemml",
+    "import_name": "chemml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemml"
+  },
+  "chemnlp": {
+    "conda_name": "chemnlp",
+    "import_name": "chemnlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemnlp"
+  },
+  "chemotools": {
+    "conda_name": "chemotools",
+    "import_name": "chemotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemotools"
+  },
+  "chemparse": {
+    "conda_name": "chemparse",
+    "import_name": "chemparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemparse"
+  },
+  "chemplot": {
+    "conda_name": "chemplot",
+    "import_name": "chemplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemplot"
+  },
+  "chemprop": {
+    "conda_name": "chemprop",
+    "import_name": "chemprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemprop"
+  },
+  "chemsolve": {
+    "conda_name": "chemsolve",
+    "import_name": "chemsolve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemsolve"
+  },
+  "chemspipy": {
+    "conda_name": "chemspipy",
+    "import_name": "chemspipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chemspipy"
+  },
+  "cherry-picker": {
+    "conda_name": "cherry-picker",
+    "import_name": "cherry_picker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cherry-picker"
+  },
+  "cherrypy": {
+    "conda_name": "cherrypy",
+    "import_name": "cherrypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cherrypy"
+  },
+  "chess": {
+    "conda_name": "chess",
+    "import_name": "chess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chess"
+  },
+  "chessnut": {
+    "conda_name": "chessnut",
+    "import_name": "Chessnut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chessnut"
+  },
+  "chest": {
+    "conda_name": "chest",
+    "import_name": "chest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chest"
+  },
+  "chevron": {
+    "conda_name": "chevron",
+    "import_name": "chevron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chevron"
+  },
+  "chi2comb": {
+    "conda_name": "chi2comb-py",
+    "import_name": "chi2comb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chi2comb"
+  },
+  "chilife": {
+    "conda_name": "chilife",
+    "import_name": "chilife",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chilife"
+  },
+  "chinese-whispers": {
+    "conda_name": "chinese-whispers",
+    "import_name": "chinese_whispers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chinese-whispers"
+  },
+  "chiral-transfermatrix": {
+    "conda_name": "chiral-transfermatrix",
+    "import_name": "chiral_transfermatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chiral-transfermatrix"
+  },
+  "chiscore": {
+    "conda_name": "chiscore",
+    "import_name": "chiscore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chiscore"
+  },
+  "chitra": {
+    "conda_name": "chitra",
+    "import_name": "chitra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chitra"
+  },
+  "choclo": {
+    "conda_name": "choclo",
+    "import_name": "choclo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "choclo"
+  },
+  "choicemodels": {
+    "conda_name": "choicemodels",
+    "import_name": "choicemodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "choicemodels"
+  },
+  "chopin2": {
+    "conda_name": "chopin2",
+    "import_name": "chopin2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chopin2"
+  },
+  "chroma-hnswlib": {
+    "conda_name": "chroma-hnswlib",
+    "import_name": "hnswlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chroma-hnswlib"
+  },
+  "chroma-py": {
+    "conda_name": "chroma-py",
+    "import_name": "chroma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chroma-py"
+  },
+  "chromedriver-autoinstaller": {
+    "conda_name": "chromedriver-autoinstaller",
+    "import_name": "chromedriver_autoinstaller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chromedriver-autoinstaller"
+  },
+  "chronon-ai": {
+    "conda_name": "chronon-ai",
+    "import_name": "ai.chronon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "chronon-ai"
+  },
+  "ci-sdr": {
+    "conda_name": "ci-sdr",
+    "import_name": "ci_sdr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ci-sdr"
+  },
+  "cifkit": {
+    "conda_name": "cifkit",
+    "import_name": "cifkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cifkit"
+  },
+  "cifti": {
+    "conda_name": "cifti",
+    "import_name": "cifti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cifti"
+  },
+  "cinemagoer": {
+    "conda_name": "cinemagoer",
+    "import_name": "imdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cinemagoer"
+  },
+  "circle-fit": {
+    "conda_name": "circle-fit",
+    "import_name": "circle_fit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "circle-fit"
+  },
+  "circleclient": {
+    "conda_name": "circleclient",
+    "import_name": "circleclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "circleclient"
+  },
+  "circuitbreaker": {
+    "conda_name": "circuitbreaker",
+    "import_name": "circuitbreaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "circuitbreaker"
+  },
+  "circuitq": {
+    "conda_name": "circuitq",
+    "import_name": "circuitq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "circuitq"
+  },
+  "circuits": {
+    "conda_name": "circuits",
+    "import_name": "circuits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "circuits"
+  },
+  "cirpy": {
+    "conda_name": "cirpy",
+    "import_name": "cirpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cirpy"
+  },
+  "cirun": {
+    "conda_name": "cirun",
+    "import_name": "cirun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cirun"
+  },
+  "cis-interface": {
+    "conda_name": "cis_interface",
+    "import_name": "cis_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cis-interface"
+  },
+  "ciso": {
+    "conda_name": "ciso",
+    "import_name": "ciso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ciso"
+  },
+  "citation-compass": {
+    "conda_name": "citation-compass",
+    "import_name": "citation_compass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "citation-compass"
+  },
+  "citeproc-py": {
+    "conda_name": "citeproc-py",
+    "import_name": "citeproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "citeproc-py"
+  },
+  "citric": {
+    "conda_name": "citric",
+    "import_name": "citric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "citric"
+  },
+  "citrination-client": {
+    "conda_name": "citrination-client",
+    "import_name": "citrination_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "citrination-client"
+  },
+  "city2graph": {
+    "conda_name": "city2graph",
+    "import_name": "city2graph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "city2graph"
+  },
+  "cityhash": {
+    "conda_name": "python-cityhash",
+    "import_name": "cityhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cityhash"
+  },
+  "cjdk": {
+    "conda_name": "cjdk",
+    "import_name": "cjdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cjdk"
+  },
+  "ckan": {
+    "conda_name": "ckan",
+    "import_name": "ckan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ckan"
+  },
+  "ckan-editor-utils": {
+    "conda_name": "ckan-editor-utils",
+    "import_name": "ckan_editor_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ckan-editor-utils"
+  },
+  "ckmeans-1d-dp": {
+    "conda_name": "ckmeans-1d-dp",
+    "import_name": "ckmeans_1d_dp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ckmeans-1d-dp"
+  },
+  "ckzg": {
+    "conda_name": "ckzg",
+    "import_name": "ckzg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ckzg"
+  },
+  "clamd": {
+    "conda_name": "clamd",
+    "import_name": "clamd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clamd"
+  },
+  "clang-format-docs": {
+    "conda_name": "clang-format-docs",
+    "import_name": "clang_format_docs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clang-format-docs"
+  },
+  "clapper": {
+    "conda_name": "clapper",
+    "import_name": "clapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clapper"
+  },
+  "clarabel": {
+    "conda_name": "clarabel",
+    "import_name": "clarabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clarabel"
+  },
+  "class-resolver": {
+    "conda_name": "class-resolver",
+    "import_name": "class_resolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "class-resolver"
+  },
+  "classify-imports": {
+    "conda_name": "classify-imports",
+    "import_name": "classify_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "classify-imports"
+  },
+  "classixclustering": {
+    "conda_name": "classixclustering",
+    "import_name": "classix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "classixclustering"
+  },
+  "classy-vision": {
+    "conda_name": "classy_vision",
+    "import_name": "classy_vision",
+    "mapping_source": "regro-bot",
+    "pypi_name": "classy-vision"
+  },
+  "classyconf": {
+    "conda_name": "classyconf",
+    "import_name": "classyconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "classyconf"
+  },
+  "clcache": {
+    "conda_name": "clcache",
+    "import_name": "clcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clcache"
+  },
+  "cleanco": {
+    "conda_name": "cleanco",
+    "import_name": "cleanco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cleanco"
+  },
+  "cleanlab": {
+    "conda_name": "cleanlab",
+    "import_name": "cleanlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cleanlab"
+  },
+  "clease": {
+    "conda_name": "clease",
+    "import_name": "clease",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clease"
+  },
+  "clease-gui": {
+    "conda_name": "clease-gui",
+    "import_name": "clease_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clease-gui"
+  },
+  "cleo": {
+    "conda_name": "cleo",
+    "import_name": "cleo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cleo"
+  },
+  "cleverdict": {
+    "conda_name": "cleverdict",
+    "import_name": "cleverdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cleverdict"
+  },
+  "cli-exit-tools": {
+    "conda_name": "cli-exit-tools",
+    "import_name": "cli_exit_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cli-exit-tools"
+  },
+  "cli-helpers": {
+    "conda_name": "cli_helpers",
+    "import_name": "cli_helpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cli-helpers"
+  },
+  "cli-ui": {
+    "conda_name": "cli-ui",
+    "import_name": "cli_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cli-ui"
+  },
+  "cliche": {
+    "conda_name": "cliche",
+    "import_name": "cliche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cliche"
+  },
+  "click-aliases": {
+    "conda_name": "click-aliases",
+    "import_name": "click_aliases",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-aliases"
+  },
+  "click-completion": {
+    "conda_name": "click-completion",
+    "import_name": "click_completion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-completion"
+  },
+  "click-config-file": {
+    "conda_name": "click-config-file",
+    "import_name": "click_config_file",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-config-file"
+  },
+  "click-configfile": {
+    "conda_name": "click-configfile",
+    "import_name": "click_configfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-configfile"
+  },
+  "click-default-group": {
+    "conda_name": "click-default-group",
+    "import_name": "click_default_group",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-default-group"
+  },
+  "click-default-group-wheel": {
+    "conda_name": "click-default-group-wheel",
+    "import_name": "click_default_group",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-default-group-wheel"
+  },
+  "click-didyoumean": {
+    "conda_name": "click-didyoumean",
+    "import_name": "click_didyoumean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-didyoumean"
+  },
+  "click-help-colors": {
+    "conda_name": "click-help-colors",
+    "import_name": "click_help_colors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-help-colors"
+  },
+  "click-log": {
+    "conda_name": "click-log",
+    "import_name": "click_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-log"
+  },
+  "click-loglevel": {
+    "conda_name": "click-loglevel",
+    "import_name": "click_loglevel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-loglevel"
+  },
+  "click-option-group": {
+    "conda_name": "click-option-group",
+    "import_name": "click_option_group",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-option-group"
+  },
+  "click-params": {
+    "conda_name": "click-params",
+    "import_name": "click_params",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-params"
+  },
+  "click-plugins": {
+    "conda_name": "click-plugins",
+    "import_name": "click_plugins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-plugins"
+  },
+  "click-repl": {
+    "conda_name": "click-repl",
+    "import_name": "click_repl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-repl"
+  },
+  "click-rich-help": {
+    "conda_name": "click-rich-help",
+    "import_name": "click_rich_help",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-rich-help"
+  },
+  "click-spinner": {
+    "conda_name": "click-spinner",
+    "import_name": "click_spinner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "click-spinner"
+  },
+  "clickclick": {
+    "conda_name": "clickclick",
+    "import_name": "clickclick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickclick"
+  },
+  "clickhouse-cityhash": {
+    "conda_name": "clickhouse-cityhash",
+    "import_name": "clickhouse_cityhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickhouse-cityhash"
+  },
+  "clickhouse-connect": {
+    "conda_name": "clickhouse-connect",
+    "import_name": "clickhouse_connect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickhouse-connect"
+  },
+  "clickhouse-driver": {
+    "conda_name": "clickhouse-driver",
+    "import_name": "clickhouse_driver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickhouse-driver"
+  },
+  "clickhouse-sqlalchemy": {
+    "conda_name": "clickhouse-sqlalchemy",
+    "import_name": "clickhouse_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickhouse-sqlalchemy"
+  },
+  "clickqt": {
+    "conda_name": "clickqt",
+    "import_name": "clickqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickqt"
+  },
+  "clickqt-utils": {
+    "conda_name": "clickqt-utils",
+    "import_name": "clickqt_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clickqt-utils"
+  },
+  "cliff": {
+    "conda_name": "cliff",
+    "import_name": "cliff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cliff"
+  },
+  "cligj": {
+    "conda_name": "cligj",
+    "import_name": "cligj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cligj"
+  },
+  "clikit": {
+    "conda_name": "clikit",
+    "import_name": "clikit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clikit"
+  },
+  "climada": {
+    "conda_name": "climada",
+    "import_name": "climada",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climada"
+  },
+  "climada-petals": {
+    "conda_name": "climada-petals",
+    "import_name": "climada_petals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climada-petals"
+  },
+  "climata": {
+    "conda_name": "climata",
+    "import_name": "climata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climata"
+  },
+  "climatecontrol": {
+    "conda_name": "climatecontrol",
+    "import_name": "climatecontrol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climatecontrol"
+  },
+  "climb-onyx-client": {
+    "conda_name": "climb-onyx-client",
+    "import_name": "onyx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climb-onyx-client"
+  },
+  "climix": {
+    "conda_name": "climix",
+    "import_name": "climix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climix"
+  },
+  "climkern": {
+    "conda_name": "climkern",
+    "import_name": "climkern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climkern"
+  },
+  "climlab": {
+    "conda_name": "climlab",
+    "import_name": "climlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climlab"
+  },
+  "climpred": {
+    "conda_name": "climpred",
+    "import_name": "climpred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "climpred"
+  },
+  "clint": {
+    "conda_name": "clint",
+    "import_name": "clint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clint"
+  },
+  "clipboard": {
+    "conda_name": "clipboard",
+    "import_name": "clipboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clipboard"
+  },
+  "clisops": {
+    "conda_name": "clisops",
+    "import_name": "clisops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clisops"
+  },
+  "clize": {
+    "conda_name": "clize",
+    "import_name": "clize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clize"
+  },
+  "clmm": {
+    "conda_name": "clmm",
+    "import_name": "clmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clmm"
+  },
+  "closure": {
+    "conda_name": "closure",
+    "import_name": "closure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "closure"
+  },
+  "cloud-data-connector": {
+    "conda_name": "cloud-data-connector",
+    "import_name": "cloud_data_connector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloud-data-connector"
+  },
+  "cloud-sptheme": {
+    "conda_name": "cloud_sptheme",
+    "import_name": "cloud_sptheme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloud-sptheme"
+  },
+  "clouddrift": {
+    "conda_name": "clouddrift",
+    "import_name": "clouddrift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clouddrift"
+  },
+  "cloudevents": {
+    "conda_name": "cloudevents",
+    "import_name": "cloudevents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloudevents"
+  },
+  "cloudflare": {
+    "conda_name": "cloudflare",
+    "import_name": "cloudflare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloudflare"
+  },
+  "cloudml-hypertune": {
+    "conda_name": "cloudml-hypertune",
+    "import_name": "hypertune",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloudml-hypertune"
+  },
+  "cloudsaga": {
+    "conda_name": "cloudsaga",
+    "import_name": "cloudsaga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloudsaga"
+  },
+  "cloudsplaining": {
+    "conda_name": "cloudsplaining",
+    "import_name": "cloudsplaining",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloudsplaining"
+  },
+  "cloup": {
+    "conda_name": "cloup",
+    "import_name": "cloup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloup"
+  },
+  "cloupy": {
+    "conda_name": "cloupy",
+    "import_name": "cloupy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cloupy"
+  },
+  "clr-loader": {
+    "conda_name": "clr_loader",
+    "import_name": "clr_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clr-loader"
+  },
+  "cltoolbox": {
+    "conda_name": "cltoolbox",
+    "import_name": "cltoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cltoolbox"
+  },
+  "clumper": {
+    "conda_name": "clumper",
+    "import_name": "clumper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clumper"
+  },
+  "cluster-lensing": {
+    "conda_name": "cluster-lensing",
+    "import_name": "clusterlensing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cluster-lensing"
+  },
+  "clustercleaver": {
+    "conda_name": "clustercleaver",
+    "import_name": "clusterCleaver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clustercleaver"
+  },
+  "clustergram": {
+    "conda_name": "clustergram",
+    "import_name": "clustergram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clustergram"
+  },
+  "clusterpilot": {
+    "conda_name": "clusterpilot",
+    "import_name": "clusterpilot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clusterpilot"
+  },
+  "clusterrunner": {
+    "conda_name": "clusterrunner",
+    "import_name": "clusterrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clusterrunner"
+  },
+  "clusterx": {
+    "conda_name": "clusterx",
+    "import_name": "clusterx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clusterx"
+  },
+  "clyngor": {
+    "conda_name": "clyngor",
+    "import_name": "clyngor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "clyngor"
+  },
+  "cma": {
+    "conda_name": "cma",
+    "import_name": "cma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cma"
+  },
+  "cma-es": {
+    "conda_name": "cma-es",
+    "import_name": "cma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cma-es"
+  },
+  "cmaes": {
+    "conda_name": "cmaes",
+    "import_name": "cmaes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmaes"
+  },
+  "cmake-build-extension": {
+    "conda_name": "cmake-build-extension",
+    "import_name": "cmake_build_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmake-build-extension"
+  },
+  "cmake-format": {
+    "conda_name": "cmake_format",
+    "import_name": "cmake_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmake-format"
+  },
+  "cmakelang": {
+    "conda_name": "cmakelang",
+    "import_name": "cmakelang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmakelang"
+  },
+  "cmakelint": {
+    "conda_name": "cmakelint",
+    "import_name": "cmakelint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmakelint"
+  },
+  "cmap": {
+    "conda_name": "cmap",
+    "import_name": "cmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmap"
+  },
+  "cmapy": {
+    "conda_name": "cmapy",
+    "import_name": "cmapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmapy"
+  },
+  "cmarkgfm": {
+    "conda_name": "cmarkgfm",
+    "import_name": "cmarkgfm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmarkgfm"
+  },
+  "cmasher": {
+    "conda_name": "cmasher",
+    "import_name": "cmasher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmasher"
+  },
+  "cmcrameri": {
+    "conda_name": "cmcrameri",
+    "import_name": "cmcrameri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmcrameri"
+  },
+  "cmd2": {
+    "conda_name": "cmd2",
+    "import_name": "cmd2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmd2"
+  },
+  "cmdline-provenance": {
+    "conda_name": "cmdline_provenance",
+    "import_name": "cmdline_provenance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmdline-provenance"
+  },
+  "cml-wd-pytorch": {
+    "conda_name": "cml_wd_pytorch",
+    "import_name": "cml_wd_pytorch.inference.run_inference",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cml-wd-pytorch"
+  },
+  "cmlib": {
+    "conda_name": "cmlib",
+    "import_name": "cmlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmlib"
+  },
+  "cmocean": {
+    "conda_name": "cmocean",
+    "import_name": "cmocean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmocean"
+  },
+  "cmomy": {
+    "conda_name": "cmomy",
+    "import_name": "cmomy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmomy"
+  },
+  "cmpitool": {
+    "conda_name": "cmpitool",
+    "import_name": "cmpitool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmpitool"
+  },
+  "cmweather": {
+    "conda_name": "cmweather",
+    "import_name": "cmweather",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmweather"
+  },
+  "cmyt": {
+    "conda_name": "cmyt",
+    "import_name": "cmyt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cmyt"
+  },
+  "cnmfsns": {
+    "conda_name": "cnmfsns",
+    "import_name": "cnmfsns",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cnmfsns"
+  },
+  "cnsr": {
+    "conda_name": "cnsr",
+    "import_name": "cnsr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cnsr"
+  },
+  "cnv-phenopacket": {
+    "conda_name": "cnv-phenopacket",
+    "import_name": "phenopacket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cnv-phenopacket"
+  },
+  "cnv-vcf2json": {
+    "conda_name": "cnv-vcf2json",
+    "import_name": "vcf_converter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cnv-vcf2json"
+  },
+  "coastsat-package": {
+    "conda_name": "coastsat-package",
+    "import_name": "coastsat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coastsat-package"
+  },
+  "cobble": {
+    "conda_name": "cobble",
+    "import_name": "cobble",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cobble"
+  },
+  "cobra": {
+    "conda_name": "cobra",
+    "import_name": "cobra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cobra"
+  },
+  "cobra-component-models": {
+    "conda_name": "cobra-component-models",
+    "import_name": "cobra_component_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cobra-component-models"
+  },
+  "cobyqa": {
+    "conda_name": "cobyqa",
+    "import_name": "cobyqa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cobyqa"
+  },
+  "cocina": {
+    "conda_name": "cocina",
+    "import_name": "cocina",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cocina"
+  },
+  "cockroachdb": {
+    "conda_name": "cockroachdb-python",
+    "import_name": "cockroachdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cockroachdb"
+  },
+  "coconut": {
+    "conda_name": "coconut",
+    "import_name": "coconut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coconut"
+  },
+  "cocopye": {
+    "conda_name": "cocopye",
+    "import_name": "cocopye",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cocopye"
+  },
+  "code2flow": {
+    "conda_name": "code2flow",
+    "import_name": "code2flow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "code2flow"
+  },
+  "codebraid": {
+    "conda_name": "codebraid",
+    "import_name": "codebraid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codebraid"
+  },
+  "codecarbon": {
+    "conda_name": "codecarbon",
+    "import_name": "codecarbon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codecarbon"
+  },
+  "codechembook": {
+    "conda_name": "codechembook",
+    "import_name": "codechembook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codechembook"
+  },
+  "codeclimate-test-reporter": {
+    "conda_name": "codeclimate-test-reporter",
+    "import_name": "codeclimate_test_reporter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codeclimate-test-reporter"
+  },
+  "codecov": {
+    "conda_name": "codecov",
+    "import_name": "codecov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codecov"
+  },
+  "coded-flows": {
+    "conda_name": "coded-flows",
+    "import_name": "coded_flows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coded-flows"
+  },
+  "codemodel": {
+    "conda_name": "codemodel",
+    "import_name": "codemodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codemodel"
+  },
+  "codetiming": {
+    "conda_name": "codetiming",
+    "import_name": "codetiming",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codetiming"
+  },
+  "codeval": {
+    "conda_name": "codeval",
+    "import_name": "codeval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "codeval"
+  },
+  "cofi": {
+    "conda_name": "cofi",
+    "import_name": "cofi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cofi"
+  },
+  "cogapp": {
+    "conda_name": "cogapp",
+    "import_name": "cogapp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cogapp"
+  },
+  "cogeo-mosaic": {
+    "conda_name": "cogeo-mosaic",
+    "import_name": "cogeo_mosaic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cogeo-mosaic"
+  },
+  "cognite-sdk": {
+    "conda_name": "cognite-sdk",
+    "import_name": "cognite.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cognite-sdk"
+  },
+  "cognitive-complexity": {
+    "conda_name": "cognitive_complexity",
+    "import_name": "cognitive_complexity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cognitive-complexity"
+  },
+  "cogwheel-pe": {
+    "conda_name": "cogwheel-pe",
+    "import_name": "cogwheel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cogwheel-pe"
+  },
+  "coiled-cloud": {
+    "conda_name": "coiled-cloud",
+    "import_name": "coiled_cloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coiled-cloud"
+  },
+  "colander": {
+    "conda_name": "colander",
+    "import_name": "colander",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colander"
+  },
+  "colcon-argcomplete": {
+    "conda_name": "colcon-argcomplete",
+    "import_name": "colcon_argcomplete",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-argcomplete"
+  },
+  "colcon-bash": {
+    "conda_name": "colcon-bash",
+    "import_name": "colcon_bash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-bash"
+  },
+  "colcon-cd": {
+    "conda_name": "colcon-cd",
+    "import_name": "colcon_cd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-cd"
+  },
+  "colcon-mixin": {
+    "conda_name": "colcon-mixin",
+    "import_name": "colcon_mixin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-mixin"
+  },
+  "colcon-ros-domain-id-coordinator": {
+    "conda_name": "colcon-ros-domain-id-coordinator",
+    "import_name": "colcon_ros_domain_id_coordinator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-ros-domain-id-coordinator"
+  },
+  "colcon-zsh": {
+    "conda_name": "colcon-zsh",
+    "import_name": "colcon_zsh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colcon-zsh"
+  },
+  "colicoords": {
+    "conda_name": "colicoords",
+    "import_name": "colicoords",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colicoords"
+  },
+  "collasso": {
+    "conda_name": "collasso",
+    "import_name": "collasso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "collasso"
+  },
+  "collatex": {
+    "conda_name": "collatex-python",
+    "import_name": "collatex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "collatex"
+  },
+  "collectfast": {
+    "conda_name": "collectfast",
+    "import_name": "collectfast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "collectfast"
+  },
+  "collections-extended": {
+    "conda_name": "collections-extended",
+    "import_name": "collections_extended",
+    "mapping_source": "regro-bot",
+    "pypi_name": "collections-extended"
+  },
+  "collections-undo": {
+    "conda_name": "collections-undo",
+    "import_name": "collections_undo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "collections-undo"
+  },
+  "colmena": {
+    "conda_name": "colmena",
+    "import_name": "colmena",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colmena"
+  },
+  "coloc-sat": {
+    "conda_name": "coloc_sat",
+    "import_name": "coloc_sat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coloc-sat"
+  },
+  "color-operations": {
+    "conda_name": "color-operations",
+    "import_name": "color_operations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "color-operations"
+  },
+  "coloraide": {
+    "conda_name": "coloraide",
+    "import_name": "coloraide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coloraide"
+  },
+  "colorama": {
+    "conda_name": "colorama",
+    "import_name": "colorama",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorama"
+  },
+  "colorcet": {
+    "conda_name": "colorcet",
+    "import_name": "colorcet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorcet"
+  },
+  "colorclass": {
+    "conda_name": "colorclass",
+    "import_name": "colorclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorclass"
+  },
+  "colored-traceback": {
+    "conda_name": "colored-traceback",
+    "import_name": "colored_traceback",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colored-traceback"
+  },
+  "coloredlogs": {
+    "conda_name": "coloredlogs",
+    "import_name": "coloredlogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coloredlogs"
+  },
+  "colorhash": {
+    "conda_name": "colorhash",
+    "import_name": "colorhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorhash"
+  },
+  "colorlover": {
+    "conda_name": "colorlover",
+    "import_name": "colorlover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorlover"
+  },
+  "colormaps": {
+    "conda_name": "colormaps",
+    "import_name": "colormaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colormaps"
+  },
+  "colormath": {
+    "conda_name": "colormath",
+    "import_name": "colormath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colormath"
+  },
+  "colorpedia": {
+    "conda_name": "colorpedia",
+    "import_name": "colorpedia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorpedia"
+  },
+  "colorspacious": {
+    "conda_name": "colorspacious",
+    "import_name": "colorspacious",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colorspacious"
+  },
+  "colour": {
+    "conda_name": "colour",
+    "import_name": "colour",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colour"
+  },
+  "colour-demosaicing": {
+    "conda_name": "colour-demosaicing",
+    "import_name": "colour_demosaicing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colour-demosaicing"
+  },
+  "colour-science": {
+    "conda_name": "colour-science",
+    "import_name": "colour",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colour-science"
+  },
+  "colourtime": {
+    "conda_name": "colourtime",
+    "import_name": "colourtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "colourtime"
+  },
+  "columnize": {
+    "conda_name": "columnize",
+    "import_name": "columnize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "columnize"
+  },
+  "combo": {
+    "conda_name": "combo",
+    "import_name": "combo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "combo"
+  },
+  "comet": {
+    "conda_name": "comet",
+    "import_name": "comet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "comet"
+  },
+  "commandlines": {
+    "conda_name": "commandlines",
+    "import_name": "commandlines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "commandlines"
+  },
+  "commentjson": {
+    "conda_name": "commentjson",
+    "import_name": "commentjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "commentjson"
+  },
+  "commitizen": {
+    "conda_name": "commitizen",
+    "import_name": "commitizen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "commitizen"
+  },
+  "commonmark": {
+    "conda_name": "commonmark",
+    "import_name": "commonmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "commonmark"
+  },
+  "compare-requirements": {
+    "conda_name": "compare-requirements",
+    "import_name": "cmpreqs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compare-requirements"
+  },
+  "compas-cloud": {
+    "conda_name": "compas_cloud",
+    "import_name": "compas_cloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-cloud"
+  },
+  "compas-eve": {
+    "conda_name": "compas_eve",
+    "import_name": "compas_eve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-eve"
+  },
+  "compas-fab": {
+    "conda_name": "compas_fab",
+    "import_name": "compas_fab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-fab"
+  },
+  "compas-mobile-robot-reloc": {
+    "conda_name": "compas_mobile_robot_reloc",
+    "import_name": "compas_mobile_robot_reloc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-mobile-robot-reloc"
+  },
+  "compas-model": {
+    "conda_name": "compas_model",
+    "import_name": "compas_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-model"
+  },
+  "compas-nurbs": {
+    "conda_name": "compas_nurbs",
+    "import_name": "compas_nurbs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-nurbs"
+  },
+  "compas-pb": {
+    "conda_name": "compas_pb",
+    "import_name": "compas_pb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-pb"
+  },
+  "compas-robots": {
+    "conda_name": "compas_robots",
+    "import_name": "compas_robots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-robots"
+  },
+  "compas-rrc": {
+    "conda_name": "compas_rrc",
+    "import_name": "compas_rrc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-rrc"
+  },
+  "compas-rv2": {
+    "conda_name": "compas-rv2",
+    "import_name": "compas_rv2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-rv2"
+  },
+  "compas-skeleton": {
+    "conda_name": "compas_skeleton",
+    "import_name": "compas_skeleton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-skeleton"
+  },
+  "compas-slicer": {
+    "conda_name": "compas_slicer",
+    "import_name": "compas_slicer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-slicer"
+  },
+  "compas-timber": {
+    "conda_name": "compas_timber",
+    "import_name": "compas_timber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-timber"
+  },
+  "compas-tna": {
+    "conda_name": "compas_tna",
+    "import_name": "compas_tna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-tna"
+  },
+  "compas-view2": {
+    "conda_name": "compas_view2",
+    "import_name": "compas_view2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-view2"
+  },
+  "compas-viewer": {
+    "conda_name": "compas_viewer",
+    "import_name": "compas_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compas-viewer"
+  },
+  "compiledb": {
+    "conda_name": "compiledb",
+    "import_name": "compiledb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compiledb"
+  },
+  "compliance-checker": {
+    "conda_name": "compliance-checker",
+    "import_name": "compliance_checker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compliance-checker"
+  },
+  "component-contribution": {
+    "conda_name": "component-contribution",
+    "import_name": "component_contribution",
+    "mapping_source": "regro-bot",
+    "pypi_name": "component-contribution"
+  },
+  "composeml": {
+    "conda_name": "composeml",
+    "import_name": "composeml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "composeml"
+  },
+  "composio": {
+    "conda_name": "composio",
+    "import_name": "composio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "composio"
+  },
+  "composio-client": {
+    "conda_name": "composio-client",
+    "import_name": "composio_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "composio-client"
+  },
+  "compositionspace": {
+    "conda_name": "compositionspace",
+    "import_name": "compositionspace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compositionspace"
+  },
+  "compress-json": {
+    "conda_name": "compress_json",
+    "import_name": "compress_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compress-json"
+  },
+  "compress-pickle": {
+    "conda_name": "compress-pickle",
+    "import_name": "compress_pickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compress-pickle"
+  },
+  "compressed-rtf": {
+    "conda_name": "compressed-rtf",
+    "import_name": "compressed_rtf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compressed-rtf"
+  },
+  "compressed-tensors": {
+    "conda_name": "compressed-tensors",
+    "import_name": "compressed_tensors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compressed-tensors"
+  },
+  "compstats": {
+    "conda_name": "compstats",
+    "import_name": "CompStats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "compstats"
+  },
+  "con-duct": {
+    "conda_name": "con-duct",
+    "import_name": "con_duct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "con-duct"
+  },
+  "conbench": {
+    "conda_name": "conbench",
+    "import_name": "conbench",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conbench"
+  },
+  "concepts": {
+    "conda_name": "concepts",
+    "import_name": "concepts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "concepts"
+  },
+  "conch-sounds": {
+    "conda_name": "conch-sounds",
+    "import_name": "conch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conch-sounds"
+  },
+  "concurrent-log-handler": {
+    "conda_name": "concurrent-log-handler",
+    "import_name": "concurrent_log_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "concurrent-log-handler"
+  },
+  "concurrentbuffer": {
+    "conda_name": "concurrentbuffer",
+    "import_name": "concurrentbuffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "concurrentbuffer"
+  },
+  "concurrentloghandler": {
+    "conda_name": "concurrentloghandler",
+    "import_name": "cloghandler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "concurrentloghandler"
+  },
+  "conda-exec": {
+    "conda_name": "conda-exec",
+    "import_name": "conda_exec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-exec"
+  },
+  "conda-flow": {
+    "conda_name": "conda-flow",
+    "import_name": "conda_flow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-flow"
+  },
+  "conda-inject": {
+    "conda_name": "conda-inject",
+    "import_name": "conda_inject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-inject"
+  },
+  "conda-poetry-liaison": {
+    "conda_name": "conda-poetry-liaison",
+    "import_name": "conda_poetry_liaison",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-poetry-liaison"
+  },
+  "conda-project": {
+    "conda_name": "conda-project",
+    "import_name": "conda_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-project"
+  },
+  "conda-recipe-upstream-validator": {
+    "conda_name": "conda-recipe-upstream-validator",
+    "import_name": "upstream_recipe_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-recipe-upstream-validator"
+  },
+  "conda-souschef": {
+    "conda_name": "conda-souschef",
+    "import_name": "souschef",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-souschef"
+  },
+  "conda-spawn": {
+    "conda_name": "conda-spawn",
+    "import_name": "conda_spawn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-spawn"
+  },
+  "conda-sphinx-theme": {
+    "conda_name": "conda-sphinx-theme",
+    "import_name": "conda_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conda-sphinx-theme"
+  },
+  "condansis": {
+    "conda_name": "condansis",
+    "import_name": "condansis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "condansis"
+  },
+  "condastats": {
+    "conda_name": "condastats",
+    "import_name": "condastats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "condastats"
+  },
+  "condax": {
+    "conda_name": "condax",
+    "import_name": "condax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "condax"
+  },
+  "condeltri": {
+    "conda_name": "condeltri",
+    "import_name": "condeltri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "condeltri"
+  },
+  "condorpy": {
+    "conda_name": "condorpy",
+    "import_name": "condorpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "condorpy"
+  },
+  "config": {
+    "conda_name": "config",
+    "import_name": "config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "config"
+  },
+  "configmypy": {
+    "conda_name": "configmypy",
+    "import_name": "configmypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configmypy"
+  },
+  "configobj": {
+    "conda_name": "configobj",
+    "import_name": "configobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configobj"
+  },
+  "configobj-dev": {
+    "conda_name": "configobj-dev",
+    "import_name": "configobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configobj-dev"
+  },
+  "configs": {
+    "conda_name": "configs",
+    "import_name": "configs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configs"
+  },
+  "configspace": {
+    "conda_name": "configspace",
+    "import_name": "ConfigSpace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configspace"
+  },
+  "configupdater": {
+    "conda_name": "configupdater",
+    "import_name": "configupdater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configupdater"
+  },
+  "configurator": {
+    "conda_name": "configurator",
+    "import_name": "configurator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "configurator"
+  },
+  "confuse": {
+    "conda_name": "confuse",
+    "import_name": "confuse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "confuse"
+  },
+  "confz": {
+    "conda_name": "confz",
+    "import_name": "confz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "confz"
+  },
+  "conjure-python-client": {
+    "conda_name": "conjure-python-client",
+    "import_name": "conjure_python_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conjure-python-client"
+  },
+  "conllu": {
+    "conda_name": "conllu",
+    "import_name": "conllu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conllu"
+  },
+  "connected-components-3d": {
+    "conda_name": "connected-components-3d",
+    "import_name": "cc3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "connected-components-3d"
+  },
+  "connection-pool": {
+    "conda_name": "connection_pool",
+    "import_name": "connection_pool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "connection-pool"
+  },
+  "cons": {
+    "conda_name": "cons",
+    "import_name": "cons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cons"
+  },
+  "conservedwatersearch": {
+    "conda_name": "conservedwatersearch",
+    "import_name": "ConservedWaterSearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conservedwatersearch"
+  },
+  "consolekit": {
+    "conda_name": "consolekit",
+    "import_name": "consolekit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "consolekit"
+  },
+  "consolemd": {
+    "conda_name": "consolemd",
+    "import_name": "consolemd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "consolemd"
+  },
+  "conspire": {
+    "conda_name": "conspire",
+    "import_name": "conspire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conspire"
+  },
+  "construct": {
+    "conda_name": "construct",
+    "import_name": "construct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "construct"
+  },
+  "construct-typing": {
+    "conda_name": "construct-typing",
+    "import_name": "construct_typed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "construct-typing"
+  },
+  "constructive-geometries": {
+    "conda_name": "constructive_geometries",
+    "import_name": "constructive_geometries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "constructive-geometries"
+  },
+  "constructs": {
+    "conda_name": "constructs",
+    "import_name": "constructs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "constructs"
+  },
+  "constyle": {
+    "conda_name": "constyle",
+    "import_name": "constyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "constyle"
+  },
+  "contact-map": {
+    "conda_name": "contact_map",
+    "import_name": "contact_map",
+    "mapping_source": "regro-bot",
+    "pypi_name": "contact-map"
+  },
+  "containers-sugar": {
+    "conda_name": "containers-sugar",
+    "import_name": "sugar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "containers-sugar"
+  },
+  "contextily": {
+    "conda_name": "contextily",
+    "import_name": "contextily",
+    "mapping_source": "regro-bot",
+    "pypi_name": "contextily"
+  },
+  "contextlib2": {
+    "conda_name": "contextlib2",
+    "import_name": "contextlib2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "contextlib2"
+  },
+  "contextvars": {
+    "conda_name": "contextvars",
+    "import_name": "contextvars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "contextvars"
+  },
+  "continuedev": {
+    "conda_name": "continuedev",
+    "import_name": "continuedev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "continuedev"
+  },
+  "contrib-colormaps": {
+    "conda_name": "contrib_colormaps",
+    "import_name": "contrib_colormaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "contrib-colormaps"
+  },
+  "control": {
+    "conda_name": "control",
+    "import_name": "control",
+    "mapping_source": "regro-bot",
+    "pypi_name": "control"
+  },
+  "convertdate": {
+    "conda_name": "convertdate",
+    "import_name": "convertdate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "convertdate"
+  },
+  "convolinear": {
+    "conda_name": "convolinear",
+    "import_name": "convolinear",
+    "mapping_source": "regro-bot",
+    "pypi_name": "convolinear"
+  },
+  "conway-polynomials": {
+    "conda_name": "conway-polynomials",
+    "import_name": "conway_polynomials",
+    "mapping_source": "regro-bot",
+    "pypi_name": "conway-polynomials"
+  },
+  "cookie-description": {
+    "conda_name": "cookie_description",
+    "import_name": "cookie_description",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cookie-description"
+  },
+  "cookiecutter-project-upgrader": {
+    "conda_name": "cookiecutter_project_upgrader",
+    "import_name": "cookiecutter_project_upgrader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cookiecutter-project-upgrader"
+  },
+  "cookieninja": {
+    "conda_name": "cookieninja",
+    "import_name": "cookieninja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cookieninja"
+  },
+  "cookies": {
+    "conda_name": "cookies",
+    "import_name": "cookies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cookies"
+  },
+  "coordinatesconverter": {
+    "conda_name": "coordinatesconverter",
+    "import_name": "CoordinatesConverter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coordinatesconverter"
+  },
+  "copernicusmarine": {
+    "conda_name": "copernicusmarine",
+    "import_name": "copernicusmarine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "copernicusmarine"
+  },
+  "coppeliasim-zmqremoteapi-client": {
+    "conda_name": "coppeliasim-zmqremoteapi-client",
+    "import_name": "coppeliasim_zmqremoteapi_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coppeliasim-zmqremoteapi-client"
+  },
+  "copulae": {
+    "conda_name": "copulae",
+    "import_name": "copulae",
+    "mapping_source": "regro-bot",
+    "pypi_name": "copulae"
+  },
+  "copulas": {
+    "conda_name": "copulas",
+    "import_name": "copulas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "copulas"
+  },
+  "coq-jupyter": {
+    "conda_name": "coq-jupyter",
+    "import_name": "coq_jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coq-jupyter"
+  },
+  "coqpit": {
+    "conda_name": "coqpit",
+    "import_name": "coqpit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coqpit"
+  },
+  "coqui-trainer": {
+    "conda_name": "coqui-trainer",
+    "import_name": "trainer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coqui-trainer"
+  },
+  "cornac": {
+    "conda_name": "cornac",
+    "import_name": "cornac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cornac"
+  },
+  "corner": {
+    "conda_name": "corner",
+    "import_name": "corner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "corner"
+  },
+  "cornice": {
+    "conda_name": "cornice",
+    "import_name": "cornice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cornice"
+  },
+  "corrfunc": {
+    "conda_name": "corrfunc",
+    "import_name": "Corrfunc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "corrfunc"
+  },
+  "corsikaio": {
+    "conda_name": "corsikaio",
+    "import_name": "corsikaio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "corsikaio"
+  },
+  "cortecs": {
+    "conda_name": "cortecs",
+    "import_name": "cortecs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cortecs"
+  },
+  "coscine": {
+    "conda_name": "coscine",
+    "import_name": "coscine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coscine"
+  },
+  "cosmic-profiles": {
+    "conda_name": "cosmic_profiles",
+    "import_name": "cosmic_profiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmic-profiles"
+  },
+  "cosmix": {
+    "conda_name": "cosmix",
+    "import_name": "cosmix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmix"
+  },
+  "cosmolopy": {
+    "conda_name": "cosmolopy",
+    "import_name": "cosmolopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmolopy"
+  },
+  "cosmopower": {
+    "conda_name": "cosmopower",
+    "import_name": "cosmopower",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmopower"
+  },
+  "cosmopy": {
+    "conda_name": "cosmopy",
+    "import_name": "cosmopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmopy"
+  },
+  "cosmosis": {
+    "conda_name": "cosmosis",
+    "import_name": "cosmosis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmosis"
+  },
+  "cosmotransitions": {
+    "conda_name": "cosmotransitions",
+    "import_name": "cosmoTransitions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cosmotransitions"
+  },
+  "cotede": {
+    "conda_name": "cotede",
+    "import_name": "cotede",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cotede"
+  },
+  "cotengra": {
+    "conda_name": "cotengra",
+    "import_name": "cotengra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cotengra"
+  },
+  "couchdb": {
+    "conda_name": "python-couchdb",
+    "import_name": "couchdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "couchdb"
+  },
+  "countest": {
+    "conda_name": "countest",
+    "import_name": "CountEst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "countest"
+  },
+  "country-converter": {
+    "conda_name": "country_converter",
+    "import_name": "country_converter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "country-converter"
+  },
+  "coursera-dl": {
+    "conda_name": "coursera-dl",
+    "import_name": "coursera",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coursera-dl"
+  },
+  "courtana": {
+    "conda_name": "courtana",
+    "import_name": "courtana",
+    "mapping_source": "regro-bot",
+    "pypi_name": "courtana"
+  },
+  "cov-core": {
+    "conda_name": "cov-core",
+    "import_name": "cov_core_init",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cov-core"
+  },
+  "covdefaults": {
+    "conda_name": "covdefaults",
+    "import_name": "covdefaults",
+    "mapping_source": "regro-bot",
+    "pypi_name": "covdefaults"
+  },
+  "covdrugsim": {
+    "conda_name": "covdrugsim",
+    "import_name": "covdrugsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "covdrugsim"
+  },
+  "coverage": {
+    "conda_name": "coverage",
+    "import_name": "coverage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coverage"
+  },
+  "coverage-badge": {
+    "conda_name": "coverage-badge",
+    "import_name": "coverage_badge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coverage-badge"
+  },
+  "coverage-conditional-plugin": {
+    "conda_name": "coverage-conditional-plugin",
+    "import_name": "coverage_conditional_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coverage-conditional-plugin"
+  },
+  "coverage-fixpaths": {
+    "conda_name": "coverage-fixpaths",
+    "import_name": "coveragefixpaths",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coverage-fixpaths"
+  },
+  "coverage-lcov": {
+    "conda_name": "coverage-lcov",
+    "import_name": "coverage_lcov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coverage-lcov"
+  },
+  "covseisnet": {
+    "conda_name": "covseisnet",
+    "import_name": "covseisnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "covseisnet"
+  },
+  "cox": {
+    "conda_name": "cox",
+    "import_name": "cox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cox"
+  },
+  "coxeter": {
+    "conda_name": "coxeter",
+    "import_name": "coxeter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "coxeter"
+  },
+  "cp2k-input-tools": {
+    "conda_name": "cp2k-input-tools",
+    "import_name": "cp2k_input_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cp2k-input-tools"
+  },
+  "cp2k-output-tools": {
+    "conda_name": "cp2k-output-tools",
+    "import_name": "cp2k_output_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cp2k-output-tools"
+  },
+  "cp2kdata": {
+    "conda_name": "cp2kdata",
+    "import_name": "cp2kdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cp2kdata"
+  },
+  "cplot": {
+    "conda_name": "cplot",
+    "import_name": "cplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cplot"
+  },
+  "cpnest": {
+    "conda_name": "cpnest",
+    "import_name": "cpnest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cpnest"
+  },
+  "cppbktree": {
+    "conda_name": "cppbktree",
+    "import_name": "cppbktree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cppbktree"
+  },
+  "cppheaderparser": {
+    "conda_name": "cppheaderparser",
+    "import_name": "CppHeaderParser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cppheaderparser"
+  },
+  "cppy": {
+    "conda_name": "cppy",
+    "import_name": "cppy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cppy"
+  },
+  "cptec-model": {
+    "conda_name": "cptec-model",
+    "import_name": "cptecmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cptec-model"
+  },
+  "cptec-sazonal": {
+    "conda_name": "cptec-sazonal",
+    "import_name": "sazonal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cptec-sazonal"
+  },
+  "cptec-subsaz": {
+    "conda_name": "cptec-subsaz",
+    "import_name": "subsaz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cptec-subsaz"
+  },
+  "cpuid": {
+    "conda_name": "cpuid",
+    "import_name": "cpuid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cpuid"
+  },
+  "cram": {
+    "conda_name": "cram",
+    "import_name": "cram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cram"
+  },
+  "crashtest": {
+    "conda_name": "crashtest",
+    "import_name": "crashtest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crashtest"
+  },
+  "crayons": {
+    "conda_name": "crayons",
+    "import_name": "crayons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crayons"
+  },
+  "crc64iso": {
+    "conda_name": "crc64iso",
+    "import_name": "crc64iso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crc64iso"
+  },
+  "crcmod": {
+    "conda_name": "crcmod",
+    "import_name": "crcmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crcmod"
+  },
+  "create-forwarder-dll": {
+    "conda_name": "create-forwarder-dll",
+    "import_name": "create_forwarder_dll",
+    "mapping_source": "regro-bot",
+    "pypi_name": "create-forwarder-dll"
+  },
+  "creationism": {
+    "conda_name": "creationism",
+    "import_name": "creationism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "creationism"
+  },
+  "credstash": {
+    "conda_name": "credstash",
+    "import_name": "credstash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "credstash"
+  },
+  "creme": {
+    "conda_name": "creme",
+    "import_name": "creme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "creme"
+  },
+  "creoleparser": {
+    "conda_name": "creoleparser",
+    "import_name": "creoleparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "creoleparser"
+  },
+  "crepe": {
+    "conda_name": "crepe",
+    "import_name": "crepe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crepe"
+  },
+  "crepes": {
+    "conda_name": "crepes",
+    "import_name": "crepes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crepes"
+  },
+  "crest4": {
+    "conda_name": "crest4",
+    "import_name": "crest4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crest4"
+  },
+  "crick": {
+    "conda_name": "crick",
+    "import_name": "crick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crick"
+  },
+  "crispy": {
+    "conda_name": "crispy",
+    "import_name": "crispy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crispy"
+  },
+  "critiplot": {
+    "conda_name": "critiplot",
+    "import_name": "critiplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "critiplot"
+  },
+  "crlibm": {
+    "conda_name": "pycrlibm",
+    "import_name": "crlibm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crlibm"
+  },
+  "crochet": {
+    "conda_name": "crochet",
+    "import_name": "crochet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crochet"
+  },
+  "cron-descriptor": {
+    "conda_name": "cron-descriptor",
+    "import_name": "cron_descriptor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cron-descriptor"
+  },
+  "cronodump": {
+    "conda_name": "cronodump",
+    "import_name": "crodump",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cronodump"
+  },
+  "cronsim": {
+    "conda_name": "cronsim",
+    "import_name": "cronsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cronsim"
+  },
+  "crontab": {
+    "conda_name": "crontab",
+    "import_name": "crontab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crontab"
+  },
+  "cross-cal-resourcesat": {
+    "conda_name": "cross_cal_resourcesat",
+    "import_name": "cross_cal_resourcesat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cross-cal-resourcesat"
+  },
+  "crowdin-api-client": {
+    "conda_name": "crowdin-api-client",
+    "import_name": "crowdin_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crowdin-api-client"
+  },
+  "crowdsourcephoto": {
+    "conda_name": "crowdsourcephoto",
+    "import_name": "crowdsource",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crowdsourcephoto"
+  },
+  "crowsetta": {
+    "conda_name": "crowsetta",
+    "import_name": "crowsetta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crowsetta"
+  },
+  "cruft": {
+    "conda_name": "cruft",
+    "import_name": "cruft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cruft"
+  },
+  "crunchflow": {
+    "conda_name": "crunchflow",
+    "import_name": "crunchflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crunchflow"
+  },
+  "cryohub": {
+    "conda_name": "cryohub",
+    "import_name": "cryohub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cryohub"
+  },
+  "cryoswath": {
+    "conda_name": "cryoswath",
+    "import_name": "cryoswath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cryoswath"
+  },
+  "cryotypes": {
+    "conda_name": "cryotypes",
+    "import_name": "cryotypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cryotypes"
+  },
+  "cryptoauthlib": {
+    "conda_name": "cryptoauthlib",
+    "import_name": "cryptoauthlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cryptoauthlib"
+  },
+  "cryptocode": {
+    "conda_name": "cryptocode",
+    "import_name": "cryptocode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cryptocode"
+  },
+  "crystal-toolkit": {
+    "conda_name": "crystal-toolkit",
+    "import_name": "crystal_toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crystal-toolkit"
+  },
+  "crystalpytools": {
+    "conda_name": "crystalpytools",
+    "import_name": "CRYSTALpytools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crystalpytools"
+  },
+  "crystals": {
+    "conda_name": "crystals",
+    "import_name": "crystals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crystals"
+  },
+  "crystmatch": {
+    "conda_name": "crystmatch",
+    "import_name": "crystmatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "crystmatch"
+  },
+  "csaps": {
+    "conda_name": "csaps",
+    "import_name": "csaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csaps"
+  },
+  "csbdeep": {
+    "conda_name": "csbdeep",
+    "import_name": "csbdeep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csbdeep"
+  },
+  "csbschema": {
+    "conda_name": "csbschema",
+    "import_name": "csbschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csbschema"
+  },
+  "csip": {
+    "conda_name": "csip",
+    "import_name": "csip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csip"
+  },
+  "cson": {
+    "conda_name": "cson",
+    "import_name": "cson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cson"
+  },
+  "csp": {
+    "conda_name": "csp",
+    "import_name": "csp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csp"
+  },
+  "csp-adapter-slack": {
+    "conda_name": "csp-adapter-slack",
+    "import_name": "csp_adapter_slack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csp-adapter-slack"
+  },
+  "csp-adapter-symphony": {
+    "conda_name": "csp-adapter-symphony",
+    "import_name": "csp_adapter_symphony",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csp-adapter-symphony"
+  },
+  "cssselect2": {
+    "conda_name": "cssselect2",
+    "import_name": "cssselect2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cssselect2"
+  },
+  "csv-diff": {
+    "conda_name": "csv-diff",
+    "import_name": "csv_diff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csv-diff"
+  },
+  "csv-trimming": {
+    "conda_name": "csv_trimming",
+    "import_name": "csv_trimming",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csv-trimming"
+  },
+  "csv2table": {
+    "conda_name": "csv2table",
+    "import_name": "csv2table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csv2table"
+  },
+  "csvinsight": {
+    "conda_name": "csvinsight",
+    "import_name": "csvinsight",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csvinsight"
+  },
+  "csvs-to-sqlite": {
+    "conda_name": "csvs-to-sqlite",
+    "import_name": "csvs_to_sqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csvs-to-sqlite"
+  },
+  "csvw": {
+    "conda_name": "csvw",
+    "import_name": "csvw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csvw"
+  },
+  "csxtools": {
+    "conda_name": "csxtools",
+    "import_name": "csxtools.ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "csxtools"
+  },
+  "ctao-datamodel": {
+    "conda_name": "ctao-datamodel",
+    "import_name": "ctao_datamodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctao-datamodel"
+  },
+  "ctao-dpps-cosmic-ray-spectra": {
+    "conda_name": "ctao-dpps-cosmic-ray-spectra",
+    "import_name": "ctao_cr_spectra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctao-dpps-cosmic-ray-spectra"
+  },
+  "ctapipe-io-lst": {
+    "conda_name": "ctapipe_io_lst",
+    "import_name": "ctapipe_io_lst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctapipe-io-lst"
+  },
+  "ctapipe-io-magic": {
+    "conda_name": "ctapipe-io-magic",
+    "import_name": "ctapipe_io_magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctapipe-io-magic"
+  },
+  "ctapipe-io-nectarcam": {
+    "conda_name": "ctapipe-io-nectarcam",
+    "import_name": "ctapipe_io_nectarcam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctapipe-io-nectarcam"
+  },
+  "ctapipe-io-zfits": {
+    "conda_name": "ctapipe_io_zfits",
+    "import_name": "ctapipe_io_zfits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctapipe-io-zfits"
+  },
+  "ctaplot": {
+    "conda_name": "ctaplot",
+    "import_name": "ctaplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctaplot"
+  },
+  "ctc-segmentation": {
+    "conda_name": "ctc-segmentation",
+    "import_name": "ctc_segmentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctc-segmentation"
+  },
+  "ctd": {
+    "conda_name": "ctd",
+    "import_name": "ctd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctd"
+  },
+  "ctdcal": {
+    "conda_name": "ctdcal",
+    "import_name": "ctdcal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctdcal"
+  },
+  "ctds": {
+    "conda_name": "ctds",
+    "import_name": "ctds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctds"
+  },
+  "ctgan": {
+    "conda_name": "ctgan",
+    "import_name": "ctgan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctgan"
+  },
+  "ctk-cli": {
+    "conda_name": "ctk-cli",
+    "import_name": "ctk_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctk-cli"
+  },
+  "ctlearn": {
+    "conda_name": "ctlearn",
+    "import_name": "ctlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctlearn"
+  },
+  "ctransformers": {
+    "conda_name": "ctransformers",
+    "import_name": "ctransformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctransformers"
+  },
+  "ctrl-benchmark": {
+    "conda_name": "ctrl-benchmark",
+    "import_name": "ctrl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ctrl-benchmark"
+  },
+  "cu2qu": {
+    "conda_name": "cu2qu",
+    "import_name": "cu2qu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cu2qu"
+  },
+  "cube-helper": {
+    "conda_name": "cube_helper",
+    "import_name": "cube_helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cube-helper"
+  },
+  "cubed": {
+    "conda_name": "cubed",
+    "import_name": "cubed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cubed"
+  },
+  "cubed-xarray": {
+    "conda_name": "cubed-xarray",
+    "import_name": "cubed_xarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cubed-xarray"
+  },
+  "cubedpandas": {
+    "conda_name": "cubedpandas",
+    "import_name": "cubedpandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cubedpandas"
+  },
+  "cubedsphere": {
+    "conda_name": "cubedsphere",
+    "import_name": "cubedsphere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cubedsphere"
+  },
+  "cubo": {
+    "conda_name": "cubo",
+    "import_name": "cubo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cubo"
+  },
+  "cucumber-expressions": {
+    "conda_name": "cucumber-expressions",
+    "import_name": "cucumber_expressions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cucumber-expressions"
+  },
+  "cufflinks": {
+    "conda_name": "python-cufflinks",
+    "import_name": "cufflinks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cufflinks"
+  },
+  "cuiman": {
+    "conda_name": "cuiman",
+    "import_name": "cuiman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cuiman"
+  },
+  "curated-tokenizers": {
+    "conda_name": "curated-tokenizers",
+    "import_name": "curated_tokenizers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curated-tokenizers"
+  },
+  "curated-transformers": {
+    "conda_name": "curated-transformers",
+    "import_name": "curated_transformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curated-transformers"
+  },
+  "curies": {
+    "conda_name": "curies",
+    "import_name": "curies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curies"
+  },
+  "curifactory": {
+    "conda_name": "curifactory",
+    "import_name": "curifactory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curifactory"
+  },
+  "curio": {
+    "conda_name": "curio",
+    "import_name": "curio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curio"
+  },
+  "curlify": {
+    "conda_name": "curlify",
+    "import_name": "curlify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curlify"
+  },
+  "curlify2": {
+    "conda_name": "curlify2",
+    "import_name": "curlify2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curlify2"
+  },
+  "currencyconverter": {
+    "conda_name": "currencyconverter",
+    "import_name": "currency_converter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "currencyconverter"
+  },
+  "curryreader": {
+    "conda_name": "curryreader",
+    "import_name": "curryreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curryreader"
+  },
+  "curtsies": {
+    "conda_name": "curtsies",
+    "import_name": "curtsies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curtsies"
+  },
+  "curviriver": {
+    "conda_name": "curviriver",
+    "import_name": "curviriver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "curviriver"
+  },
+  "custom-inherit": {
+    "conda_name": "custom-inherit",
+    "import_name": "custom_inherit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "custom-inherit"
+  },
+  "custom-json-diff": {
+    "conda_name": "custom-json-diff",
+    "import_name": "custom_json_diff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "custom-json-diff"
+  },
+  "cut-cross-entropy": {
+    "conda_name": "cut_cross_entropy",
+    "import_name": "cut_cross_entropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cut-cross-entropy"
+  },
+  "cutde": {
+    "conda_name": "cutde",
+    "import_name": "cutde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cutde"
+  },
+  "cvxportfolio": {
+    "conda_name": "cvxportfolio",
+    "import_name": "cvxportfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cvxportfolio"
+  },
+  "cvxpygen": {
+    "conda_name": "cvxpygen",
+    "import_name": "cvxpygen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cvxpygen"
+  },
+  "cw2": {
+    "conda_name": "cw2",
+    "import_name": "cw2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cw2"
+  },
+  "cwcwidth": {
+    "conda_name": "cwcwidth",
+    "import_name": "cwcwidth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwcwidth"
+  },
+  "cweqgen": {
+    "conda_name": "cweqgen",
+    "import_name": "cweqgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cweqgen"
+  },
+  "cwl-upgrader": {
+    "conda_name": "cwl-upgrader",
+    "import_name": "cwlupgrader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwl-upgrader"
+  },
+  "cwl-utils": {
+    "conda_name": "cwl-utils",
+    "import_name": "cwl_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwl-utils"
+  },
+  "cwlref-runner": {
+    "conda_name": "cwlref-runner",
+    "import_name": "cwltool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwlref-runner"
+  },
+  "cwltest": {
+    "conda_name": "cwltest",
+    "import_name": "cwltest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwltest"
+  },
+  "cwltool": {
+    "conda_name": "cwltool",
+    "import_name": "cwltool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cwltool"
+  },
+  "cx-logging": {
+    "conda_name": "cx_logging",
+    "import_name": "cx_Logging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cx-logging"
+  },
+  "cx-oracle": {
+    "conda_name": "cx_oracle",
+    "import_name": "cx_Oracle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cx-oracle"
+  },
+  "cxroots": {
+    "conda_name": "cxroots",
+    "import_name": "cxroots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cxroots"
+  },
+  "cxxfilt": {
+    "conda_name": "cxxfilt",
+    "import_name": "cxxfilt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cxxfilt"
+  },
+  "cyarray": {
+    "conda_name": "cyarray",
+    "import_name": "cyarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyarray"
+  },
+  "cyavro": {
+    "conda_name": "cyavro",
+    "import_name": "cyavro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyavro"
+  },
+  "cyberpandas": {
+    "conda_name": "cyberpandas",
+    "import_name": "cyberpandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyberpandas"
+  },
+  "cyberpunk-theme": {
+    "conda_name": "cyberpunk-theme",
+    "import_name": "cyberpunk_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyberpunk-theme"
+  },
+  "cybuffer": {
+    "conda_name": "cybuffer",
+    "import_name": "cybuffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cybuffer"
+  },
+  "cyfi": {
+    "conda_name": "cyfi",
+    "import_name": "cyfi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyfi"
+  },
+  "cyflann": {
+    "conda_name": "cyflann",
+    "import_name": "cyflann",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyflann"
+  },
+  "cygrid": {
+    "conda_name": "cygrid",
+    "import_name": "cygrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cygrid"
+  },
+  "cyipopt": {
+    "conda_name": "cyipopt",
+    "import_name": "cyipopt",
+    "mapping_source": "static",
+    "pypi_name": "cyipopt"
+  },
+  "cykhash": {
+    "conda_name": "cykhash",
+    "import_name": "cykhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cykhash"
+  },
+  "cyl1tf": {
+    "conda_name": "cyl1tf",
+    "import_name": "cyl1tf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyl1tf"
+  },
+  "cylc-flow": {
+    "conda_name": "cylc-flow",
+    "import_name": "cylc.flow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cylc-flow"
+  },
+  "cylp": {
+    "conda_name": "cylp",
+    "import_name": "cylp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cylp"
+  },
+  "cymbal": {
+    "conda_name": "cymbal",
+    "import_name": "cymbal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cymbal"
+  },
+  "cymem": {
+    "conda_name": "cymem",
+    "import_name": "cymem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cymem"
+  },
+  "cymysql": {
+    "conda_name": "cymysql",
+    "import_name": "cymysql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cymysql"
+  },
+  "cyrk": {
+    "conda_name": "cyrk",
+    "import_name": "CyRK",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyrk"
+  },
+  "cysgp4": {
+    "conda_name": "cysgp4",
+    "import_name": "cysgp4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cysgp4"
+  },
+  "cythonbiogeme": {
+    "conda_name": "cythonbiogeme",
+    "import_name": "cythonbiogeme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cythonbiogeme"
+  },
+  "cythongsl": {
+    "conda_name": "cythongsl",
+    "import_name": "cython_gsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cythongsl"
+  },
+  "cytominer-database": {
+    "conda_name": "cytominer_database",
+    "import_name": "cytominer_database",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cytominer-database"
+  },
+  "cytoolz": {
+    "conda_name": "cytoolz",
+    "import_name": "cytoolz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cytoolz"
+  },
+  "cytoplay": {
+    "conda_name": "cytoplay",
+    "import_name": "cytosim2D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cytoplay"
+  },
+  "cytosim": {
+    "conda_name": "cytosim",
+    "import_name": "cytosim2D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cytosim"
+  },
+  "cyvlfeat": {
+    "conda_name": "cyvlfeat",
+    "import_name": "cyvlfeat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cyvlfeat"
+  },
+  "cz-changeup": {
+    "conda_name": "cz-changeup",
+    "import_name": "cz_changeup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cz-changeup"
+  },
+  "czekitout": {
+    "conda_name": "czekitout",
+    "import_name": "czekitout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "czekitout"
+  },
+  "czifile": {
+    "conda_name": "czifile",
+    "import_name": "czifile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "czifile"
+  },
+  "czml3": {
+    "conda_name": "czml3",
+    "import_name": "czml3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "czml3"
+  },
+  "czmodel": {
+    "conda_name": "czmodel",
+    "import_name": "czmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "czmodel"
+  },
+  "cztile": {
+    "conda_name": "cztile",
+    "import_name": "cztile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "cztile"
+  },
+  "d2to1": {
+    "conda_name": "d2to1",
+    "import_name": "d2to1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "d2to1"
+  },
+  "d3rlpy": {
+    "conda_name": "d3rlpy",
+    "import_name": "d3rlpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "d3rlpy"
+  },
+  "dabl": {
+    "conda_name": "dabl",
+    "import_name": "dabl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dabl"
+  },
+  "dace": {
+    "conda_name": "dace",
+    "import_name": "dace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dace"
+  },
+  "dace-query": {
+    "conda_name": "dace-query",
+    "import_name": "dace_query",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dace-query"
+  },
+  "dadaptation": {
+    "conda_name": "dadaptation",
+    "import_name": "dadaptation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dadaptation"
+  },
+  "dadi": {
+    "conda_name": "dadi",
+    "import_name": "dadi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dadi"
+  },
+  "dadi-cli": {
+    "conda_name": "dadi-cli",
+    "import_name": "dadi_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dadi-cli"
+  },
+  "daemoniker": {
+    "conda_name": "daemoniker",
+    "import_name": "daemoniker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daemoniker"
+  },
+  "daffy": {
+    "conda_name": "daffy",
+    "import_name": "daffy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daffy"
+  },
+  "dag-factory": {
+    "conda_name": "dag-factory",
+    "import_name": "dagfactory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dag-factory"
+  },
+  "dageo": {
+    "conda_name": "dageo",
+    "import_name": "dageo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dageo"
+  },
+  "dagger-io": {
+    "conda_name": "dagger-io",
+    "import_name": "dagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dagger-io"
+  },
+  "daggerpy": {
+    "conda_name": "daggerpy",
+    "import_name": "dagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daggerpy"
+  },
+  "daggre": {
+    "conda_name": "daggre",
+    "import_name": "daggre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daggre"
+  },
+  "dagmc-h5m-file-inspector": {
+    "conda_name": "dagmc_h5m_file_inspector",
+    "import_name": "dagmc_h5m_file_inspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dagmc-h5m-file-inspector"
+  },
+  "dags": {
+    "conda_name": "dags",
+    "import_name": "dags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dags"
+  },
+  "dagster-async-executor": {
+    "conda_name": "dagster-async-executor",
+    "import_name": "dagster_async_executor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dagster-async-executor"
+  },
+  "dagster-pagerduty": {
+    "conda_name": "dagster_pagerduty",
+    "import_name": "dagster_pagerduty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dagster-pagerduty"
+  },
+  "dailyerosion": {
+    "conda_name": "dailyerosion",
+    "import_name": "dailyerosion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dailyerosion"
+  },
+  "daio": {
+    "conda_name": "daio",
+    "import_name": "daio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daio"
+  },
+  "daiquiri": {
+    "conda_name": "daiquiri",
+    "import_name": "daiquiri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daiquiri"
+  },
+  "dalex": {
+    "conda_name": "dalex",
+    "import_name": "dalex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dalex"
+  },
+  "daltools": {
+    "conda_name": "daltools",
+    "import_name": "daltools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daltools"
+  },
+  "daml": {
+    "conda_name": "daml",
+    "import_name": "daml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daml"
+  },
+  "dandi": {
+    "conda_name": "dandi",
+    "import_name": "dandi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dandi"
+  },
+  "dandischema": {
+    "conda_name": "dandischema",
+    "import_name": "dandischema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dandischema"
+  },
+  "danish": {
+    "conda_name": "danish",
+    "import_name": "danish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "danish"
+  },
+  "dante-db": {
+    "conda_name": "dante-db",
+    "import_name": "dante",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dante-db"
+  },
+  "dantro": {
+    "conda_name": "dantro",
+    "import_name": "dantro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dantro"
+  },
+  "daops": {
+    "conda_name": "daops",
+    "import_name": "daops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daops"
+  },
+  "dapclient": {
+    "conda_name": "dapclient",
+    "import_name": "dapclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dapclient"
+  },
+  "dapper-elm": {
+    "conda_name": "dapper-elm",
+    "import_name": "dapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dapper-elm"
+  },
+  "darglint": {
+    "conda_name": "darglint",
+    "import_name": "darglint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darglint"
+  },
+  "dargparser": {
+    "conda_name": "dargparser",
+    "import_name": "dargparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dargparser"
+  },
+  "darkdetect": {
+    "conda_name": "darkdetect",
+    "import_name": "darkdetect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darkdetect"
+  },
+  "darker": {
+    "conda_name": "darker",
+    "import_name": "darker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darker"
+  },
+  "darkgraylib": {
+    "conda_name": "darkgraylib",
+    "import_name": "darkgraylib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darkgraylib"
+  },
+  "darmonpoints": {
+    "conda_name": "darmonpoints",
+    "import_name": "darmonpoints.mixed_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darmonpoints"
+  },
+  "darr": {
+    "conda_name": "darr",
+    "import_name": "darr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darr"
+  },
+  "darth-d": {
+    "conda_name": "darth-d",
+    "import_name": "darth_d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darth-d"
+  },
+  "darwin-py": {
+    "conda_name": "darwin-py",
+    "import_name": "darwin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "darwin-py"
+  },
+  "daschlab": {
+    "conda_name": "daschlab",
+    "import_name": "daschlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daschlab"
+  },
+  "dascore": {
+    "conda_name": "dascore",
+    "import_name": "dascore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dascore"
+  },
+  "dash": {
+    "conda_name": "dash",
+    "import_name": "dash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash"
+  },
+  "dash-ag-grid": {
+    "conda_name": "dash-ag-grid",
+    "import_name": "dash_ag_grid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-ag-grid"
+  },
+  "dash-auth": {
+    "conda_name": "dash-auth",
+    "import_name": "dash_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-auth"
+  },
+  "dash-bio": {
+    "conda_name": "dash-bio",
+    "import_name": "dash_bio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-bio"
+  },
+  "dash-bio-utils": {
+    "conda_name": "dash-bio-utils",
+    "import_name": "dash_bio_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-bio-utils"
+  },
+  "dash-bootstrap-templates": {
+    "conda_name": "dash-bootstrap-templates",
+    "import_name": "dash_bootstrap_templates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-bootstrap-templates"
+  },
+  "dash-colorscales": {
+    "conda_name": "dash_colorscales",
+    "import_name": "dash_colorscales",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-colorscales"
+  },
+  "dash-core-components": {
+    "conda_name": "dash-core-components",
+    "import_name": "dash_core_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-core-components"
+  },
+  "dash-coreui-components": {
+    "conda_name": "dash-coreui-components",
+    "import_name": "dash_coreui_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-coreui-components"
+  },
+  "dash-cytoscape": {
+    "conda_name": "dash_cytoscape",
+    "import_name": "dash_cytoscape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-cytoscape"
+  },
+  "dash-daq": {
+    "conda_name": "dash-daq",
+    "import_name": "dash_daq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-daq"
+  },
+  "dash-deck": {
+    "conda_name": "dash-deck",
+    "import_name": "dash_deck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-deck"
+  },
+  "dash-editor-components": {
+    "conda_name": "dash-editor-components",
+    "import_name": "dash_editor_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-editor-components"
+  },
+  "dash-extensions": {
+    "conda_name": "dash-extensions",
+    "import_name": "dash_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-extensions"
+  },
+  "dash-html-components": {
+    "conda_name": "dash-html-components",
+    "import_name": "dash_html_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-html-components"
+  },
+  "dash-iconify": {
+    "conda_name": "dash-iconify",
+    "import_name": "dash_iconify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-iconify"
+  },
+  "dash-leaflet": {
+    "conda_name": "dash-leaflet",
+    "import_name": "dash_leaflet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-leaflet"
+  },
+  "dash-mantine-components": {
+    "conda_name": "dash-mantine-components",
+    "import_name": "dash_mantine_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-mantine-components"
+  },
+  "dash-mp-components": {
+    "conda_name": "dash-mp-components",
+    "import_name": "dash_mp_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-mp-components"
+  },
+  "dash-renderer": {
+    "conda_name": "dash-renderer",
+    "import_name": "dash_renderer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-renderer"
+  },
+  "dash-seqviz": {
+    "conda_name": "dash-seqviz",
+    "import_name": "dash_seqviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-seqviz"
+  },
+  "dash-table": {
+    "conda_name": "dash-table",
+    "import_name": "dash_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dash-table"
+  },
+  "dashing": {
+    "conda_name": "python-dashing",
+    "import_name": "dashing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dashing"
+  },
+  "dask-bigquery": {
+    "conda_name": "dask-bigquery",
+    "import_name": "dask_bigquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-bigquery"
+  },
+  "dask-cloudprovider": {
+    "conda_name": "dask-cloudprovider",
+    "import_name": "dask_cloudprovider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-cloudprovider"
+  },
+  "dask-ctl": {
+    "conda_name": "dask-ctl",
+    "import_name": "dask_ctl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-ctl"
+  },
+  "dask-cuda": {
+    "conda_name": "dask-cuda",
+    "import_name": "dask_cuda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-cuda"
+  },
+  "dask-databricks": {
+    "conda_name": "dask-databricks",
+    "import_name": "dask_databricks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-databricks"
+  },
+  "dask-deltatable": {
+    "conda_name": "dask-deltatable",
+    "import_name": "dask_deltatable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-deltatable"
+  },
+  "dask-distance": {
+    "conda_name": "dask-distance",
+    "import_name": "dask_distance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-distance"
+  },
+  "dask-ec2": {
+    "conda_name": "dask-ec2",
+    "import_name": "dask_ec2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-ec2"
+  },
+  "dask-ee": {
+    "conda_name": "dask-ee",
+    "import_name": "dask_ee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-ee"
+  },
+  "dask-expr": {
+    "conda_name": "dask-expr",
+    "import_name": "dask_expr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-expr"
+  },
+  "dask-funk": {
+    "conda_name": "dask-funk",
+    "import_name": "daskfunk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-funk"
+  },
+  "dask-geomodeling": {
+    "conda_name": "dask-geomodeling",
+    "import_name": "dask_geomodeling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-geomodeling"
+  },
+  "dask-geopandas": {
+    "conda_name": "dask-geopandas",
+    "import_name": "dask_geopandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-geopandas"
+  },
+  "dask-glm": {
+    "conda_name": "dask-glm",
+    "import_name": "dask_glm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-glm"
+  },
+  "dask-iclx": {
+    "conda_name": "dask-iclx",
+    "import_name": "dask_iclx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-iclx"
+  },
+  "dask-jobqueue": {
+    "conda_name": "dask-jobqueue",
+    "import_name": "dask_jobqueue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-jobqueue"
+  },
+  "dask-kubernetes": {
+    "conda_name": "dask-kubernetes",
+    "import_name": "dask_kubernetes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-kubernetes"
+  },
+  "dask-memusage": {
+    "conda_name": "dask-memusage",
+    "import_name": "dask_memusage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-memusage"
+  },
+  "dask-ml": {
+    "conda_name": "dask-ml",
+    "import_name": "dask_ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-ml"
+  },
+  "dask-mongo": {
+    "conda_name": "dask-mongo",
+    "import_name": "dask_mongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-mongo"
+  },
+  "dask-mpi": {
+    "conda_name": "dask-mpi",
+    "import_name": "dask_mpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-mpi"
+  },
+  "dask-ms": {
+    "conda_name": "dask-ms",
+    "import_name": "daskms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-ms"
+  },
+  "dask-snowflake": {
+    "conda_name": "dask-snowflake",
+    "import_name": "dask_snowflake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-snowflake"
+  },
+  "dask-sphinx-theme": {
+    "conda_name": "dask-sphinx-theme",
+    "import_name": "dask_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-sphinx-theme"
+  },
+  "dask-sql": {
+    "conda_name": "dask-sql",
+    "import_name": "dask_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-sql"
+  },
+  "dask-traj": {
+    "conda_name": "dask_traj",
+    "import_name": "dask_traj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-traj"
+  },
+  "dask-xgboost": {
+    "conda_name": "dask-xgboost",
+    "import_name": "dask_xgboost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-xgboost"
+  },
+  "dask-yarn": {
+    "conda_name": "dask-yarn",
+    "import_name": "dask_yarn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dask-yarn"
+  },
+  "daspy-toolbox": {
+    "conda_name": "daspy-toolbox",
+    "import_name": "daspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "daspy-toolbox"
+  },
+  "data-diff": {
+    "conda_name": "data-diff",
+    "import_name": "data_diff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "data-diff"
+  },
+  "data-morph-ai": {
+    "conda_name": "data-morph-ai",
+    "import_name": "data_morph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "data-morph-ai"
+  },
+  "data2objects": {
+    "conda_name": "data2objects",
+    "import_name": "data2objects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "data2objects"
+  },
+  "data2rdf": {
+    "conda_name": "data2rdf",
+    "import_name": "data2rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "data2rdf"
+  },
+  "databackend": {
+    "conda_name": "databackend",
+    "import_name": "databackend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databackend"
+  },
+  "databind-core": {
+    "conda_name": "databind.core",
+    "import_name": "databind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databind-core"
+  },
+  "databind-json": {
+    "conda_name": "databind.json",
+    "import_name": "databind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databind-json"
+  },
+  "databricks-sdk": {
+    "conda_name": "databricks-sdk",
+    "import_name": "databricks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databricks-sdk"
+  },
+  "databroker": {
+    "conda_name": "databroker",
+    "import_name": "databroker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databroker"
+  },
+  "databroker-pack": {
+    "conda_name": "databroker-pack",
+    "import_name": "databroker_pack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "databroker-pack"
+  },
+  "datacache": {
+    "conda_name": "datacache",
+    "import_name": "datacache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datacache"
+  },
+  "datachain": {
+    "conda_name": "datachain",
+    "import_name": "datachain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datachain"
+  },
+  "dataclass-csv": {
+    "conda_name": "dataclass-csv",
+    "import_name": "dataclass_csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclass-csv"
+  },
+  "dataclass-wizard": {
+    "conda_name": "dataclass-wizard",
+    "import_name": "dataclass_wizard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclass-wizard"
+  },
+  "dataclasses": {
+    "conda_name": "dataclasses",
+    "import_name": "dataclasses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclasses"
+  },
+  "dataclasses-avroschema": {
+    "conda_name": "dataclasses-avroschema",
+    "import_name": "dataclasses_avroschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclasses-avroschema"
+  },
+  "dataclasses-jsonschema": {
+    "conda_name": "dataclasses-jsonschema",
+    "import_name": "dataclasses_jsonschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclasses-jsonschema"
+  },
+  "dataclassy": {
+    "conda_name": "dataclassy",
+    "import_name": "dataclassy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataclassy"
+  },
+  "datacommons": {
+    "conda_name": "datacommons",
+    "import_name": "datacommons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datacommons"
+  },
+  "datacommons-pandas": {
+    "conda_name": "datacommons_pandas",
+    "import_name": "datacommons_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datacommons-pandas"
+  },
+  "datacompy": {
+    "conda_name": "datacompy",
+    "import_name": "datacompy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datacompy"
+  },
+  "datadog": {
+    "conda_name": "datadog",
+    "import_name": "datadog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datadog"
+  },
+  "datadotworld": {
+    "conda_name": "datadotworld-py",
+    "import_name": "datadotworld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datadotworld"
+  },
+  "dataeval": {
+    "conda_name": "dataeval",
+    "import_name": "dataeval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataeval"
+  },
+  "datafiller": {
+    "conda_name": "datafiller",
+    "import_name": "datafiller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datafiller"
+  },
+  "dataflows-tabulator": {
+    "conda_name": "dataflows-tabulator",
+    "import_name": "tabulator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataflows-tabulator"
+  },
+  "datahues": {
+    "conda_name": "datahues",
+    "import_name": "datahues",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datahues"
+  },
+  "datajoint": {
+    "conda_name": "datajoint",
+    "import_name": "datajoint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datajoint"
+  },
+  "datajudge": {
+    "conda_name": "datajudge",
+    "import_name": "datajudge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datajudge"
+  },
+  "datalab-kernel": {
+    "conda_name": "datalab-kernel",
+    "import_name": "datalab_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datalab-kernel"
+  },
+  "datalab-platform": {
+    "conda_name": "datalab",
+    "import_name": "datalab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datalab-platform"
+  },
+  "datalad": {
+    "conda_name": "datalad",
+    "import_name": "datalad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datalad"
+  },
+  "datalad-container": {
+    "conda_name": "datalad-container",
+    "import_name": "datalad_container",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datalad-container"
+  },
+  "datalad-installer": {
+    "conda_name": "datalad-installer",
+    "import_name": "datalad_installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datalad-installer"
+  },
+  "datamapplot": {
+    "conda_name": "datamapplot",
+    "import_name": "datamapplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datamapplot"
+  },
+  "datamatrix": {
+    "conda_name": "datamatrix",
+    "import_name": "datamatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datamatrix"
+  },
+  "datamodeldict": {
+    "conda_name": "datamodeldict",
+    "import_name": "DataModelDict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datamodeldict"
+  },
+  "datamol": {
+    "conda_name": "datamol",
+    "import_name": "datamol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datamol"
+  },
+  "datamountaineer-schemaregistry": {
+    "conda_name": "datamountaineer-schemaregistry",
+    "import_name": "datamountaineer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datamountaineer-schemaregistry"
+  },
+  "datapackage": {
+    "conda_name": "datapackage",
+    "import_name": "datapackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datapackage"
+  },
+  "datapane": {
+    "conda_name": "datapane",
+    "import_name": "datapane",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datapane"
+  },
+  "datapi": {
+    "conda_name": "datapi",
+    "import_name": "datapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datapi"
+  },
+  "dataprep": {
+    "conda_name": "dataprep",
+    "import_name": "dataprep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataprep"
+  },
+  "dataproperty": {
+    "conda_name": "dataproperty",
+    "import_name": "dataproperty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataproperty"
+  },
+  "datar": {
+    "conda_name": "datar",
+    "import_name": "datar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datar"
+  },
+  "dataretrieval": {
+    "conda_name": "dataretrieval",
+    "import_name": "dataretrieval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataretrieval"
+  },
+  "datarobot": {
+    "conda_name": "datarobot",
+    "import_name": "datarobot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datarobot"
+  },
+  "datarobot-bp-workshop": {
+    "conda_name": "datarobot-bp-workshop",
+    "import_name": "datarobot_bp_workshop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datarobot-bp-workshop"
+  },
+  "datasci-bricoletc": {
+    "conda_name": "datasci-bricoletc",
+    "import_name": "datasci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasci-bricoletc"
+  },
+  "datascience": {
+    "conda_name": "datascience",
+    "import_name": "datascience",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datascience"
+  },
+  "dataset": {
+    "conda_name": "dataset",
+    "import_name": "dataset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataset"
+  },
+  "datasette": {
+    "conda_name": "datasette",
+    "import_name": "datasette",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette"
+  },
+  "datasette-dashboards": {
+    "conda_name": "datasette-dashboards",
+    "import_name": "datasette_dashboards",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-dashboards"
+  },
+  "datasette-graphql": {
+    "conda_name": "datasette-graphql",
+    "import_name": "datasette_graphql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-graphql"
+  },
+  "datasette-gunicorn": {
+    "conda_name": "datasette-gunicorn",
+    "import_name": "datasette_gunicorn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-gunicorn"
+  },
+  "datasette-nteract-data-explorer": {
+    "conda_name": "datasette-nteract-data-explorer",
+    "import_name": "datasette_nteract_data_explorer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-nteract-data-explorer"
+  },
+  "datasette-secrets": {
+    "conda_name": "datasette-secrets",
+    "import_name": "datasette_secrets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-secrets"
+  },
+  "datasette-statistics": {
+    "conda_name": "datasette-statistics",
+    "import_name": "datasette_statistics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasette-statistics"
+  },
+  "datashader": {
+    "conda_name": "datashader",
+    "import_name": "datashader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datashader"
+  },
+  "datashuttle": {
+    "conda_name": "datashuttle",
+    "import_name": "datashuttle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datashuttle"
+  },
+  "datasketches": {
+    "conda_name": "datasketches",
+    "import_name": "datasketches",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasketches"
+  },
+  "datasloth": {
+    "conda_name": "datasloth",
+    "import_name": "datasloth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datasloth"
+  },
+  "dataspyre": {
+    "conda_name": "dataspyre",
+    "import_name": "spyre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dataspyre"
+  },
+  "datastock": {
+    "conda_name": "datastock",
+    "import_name": "datastock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datastock"
+  },
+  "datatable": {
+    "conda_name": "datatable",
+    "import_name": "datatable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datatable"
+  },
+  "datatoolbox": {
+    "conda_name": "datatoolbox",
+    "import_name": "datatoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datatoolbox"
+  },
+  "dateparser": {
+    "conda_name": "dateparser",
+    "import_name": "dateparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dateparser"
+  },
+  "datespan": {
+    "conda_name": "datespan",
+    "import_name": "datespan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datespan"
+  },
+  "datetime-distance": {
+    "conda_name": "datetime-distance",
+    "import_name": "datetime_distance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datetime-distance"
+  },
+  "datetimerange": {
+    "conda_name": "datetimerange",
+    "import_name": "datetimerange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datetimerange"
+  },
+  "dateutils": {
+    "conda_name": "dateutils",
+    "import_name": "dateutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dateutils"
+  },
+  "datreant": {
+    "conda_name": "datreant",
+    "import_name": "datreant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datreant"
+  },
+  "datrie": {
+    "conda_name": "datrie",
+    "import_name": "datrie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datrie"
+  },
+  "datview": {
+    "conda_name": "datview",
+    "import_name": "datview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "datview"
+  },
+  "dautilpy": {
+    "conda_name": "dautilpy",
+    "import_name": "dautil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dautilpy"
+  },
+  "dawg": {
+    "conda_name": "dawg",
+    "import_name": "dawg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dawg"
+  },
+  "dawg-python": {
+    "conda_name": "dawg-python",
+    "import_name": "dawg_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dawg-python"
+  },
+  "db12": {
+    "conda_name": "db12",
+    "import_name": "db12",
+    "mapping_source": "regro-bot",
+    "pypi_name": "db12"
+  },
+  "dbbot": {
+    "conda_name": "dbbot",
+    "import_name": "dbbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbbot"
+  },
+  "dbbot-sqlalchemy": {
+    "conda_name": "dbbot-sqlalchemy",
+    "import_name": "dbbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbbot-sqlalchemy"
+  },
+  "dbdreader": {
+    "conda_name": "dbdreader",
+    "import_name": "dbdreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbdreader"
+  },
+  "dbfread": {
+    "conda_name": "dbfread",
+    "import_name": "dbfread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbfread"
+  },
+  "dbgpy": {
+    "conda_name": "dbgpy",
+    "import_name": "dbgpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbgpy"
+  },
+  "dbnomics": {
+    "conda_name": "dbnomics",
+    "import_name": "dbnomics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbnomics"
+  },
+  "dbscan": {
+    "conda_name": "dbscan",
+    "import_name": "dbscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbscan"
+  },
+  "dbscan1d": {
+    "conda_name": "dbscan1d",
+    "import_name": "dbscan1d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbscan1d"
+  },
+  "dbsp-drp": {
+    "conda_name": "dbsp_drp",
+    "import_name": "dbsp_drp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbsp-drp"
+  },
+  "dbstep": {
+    "conda_name": "dbstep",
+    "import_name": "dbstep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbstep"
+  },
+  "dbt-athena-community": {
+    "conda_name": "dbt-athena-community",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-athena-community"
+  },
+  "dbt-bigquery": {
+    "conda_name": "dbt-bigquery",
+    "import_name": "dbt.adapters.bigquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-bigquery"
+  },
+  "dbt-databricks": {
+    "conda_name": "dbt-databricks",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-databricks"
+  },
+  "dbt-dremio": {
+    "conda_name": "dbt-dremio",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-dremio"
+  },
+  "dbt-duckdb": {
+    "conda_name": "dbt-duckdb",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-duckdb"
+  },
+  "dbt-extractor": {
+    "conda_name": "dbt-extractor",
+    "import_name": "dbt_extractor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-extractor"
+  },
+  "dbt-ibis": {
+    "conda_name": "dbt-ibis",
+    "import_name": "dbt_ibis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-ibis"
+  },
+  "dbt-postgres": {
+    "conda_name": "dbt-postgres",
+    "import_name": "dbt.adapters.postgres",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-postgres"
+  },
+  "dbt-redshift": {
+    "conda_name": "dbt-redshift",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-redshift"
+  },
+  "dbt-semantic-interfaces": {
+    "conda_name": "dbt-semantic-interfaces",
+    "import_name": "dbt_semantic_interfaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-semantic-interfaces"
+  },
+  "dbt-spark": {
+    "conda_name": "dbt-spark",
+    "import_name": "dbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbt-spark"
+  },
+  "dbus-fast": {
+    "conda_name": "dbus-fast",
+    "import_name": "dbus_fast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbus-fast"
+  },
+  "dbus-python": {
+    "conda_name": "dbus-python",
+    "import_name": "dbus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbus-python"
+  },
+  "dbxfs": {
+    "conda_name": "dbxfs",
+    "import_name": "dbxfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dbxfs"
+  },
+  "dcc": {
+    "conda_name": "dcc",
+    "import_name": "dcc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dcc"
+  },
+  "dclab": {
+    "conda_name": "dclab",
+    "import_name": "dclab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dclab"
+  },
+  "dcm2bids": {
+    "conda_name": "dcm2bids",
+    "import_name": "dcm2bids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dcm2bids"
+  },
+  "dcmstack": {
+    "conda_name": "dcmstack",
+    "import_name": "dcmstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dcmstack"
+  },
+  "dcor": {
+    "conda_name": "dcor",
+    "import_name": "dcor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dcor"
+  },
+  "dctmd": {
+    "conda_name": "dctmd",
+    "import_name": "dcTMD",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dctmd"
+  },
+  "ddd-subplots": {
+    "conda_name": "ddd_subplots",
+    "import_name": "ddd_subplots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ddd-subplots"
+  },
+  "ddeint": {
+    "conda_name": "ddeint",
+    "import_name": "ddeint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ddeint"
+  },
+  "ddsketch": {
+    "conda_name": "ddsketch",
+    "import_name": "ddsketch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ddsketch"
+  },
+  "ddsp": {
+    "conda_name": "ddsp",
+    "import_name": "ddsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ddsp"
+  },
+  "ddtrace": {
+    "conda_name": "ddtrace",
+    "import_name": "ddtrace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ddtrace"
+  },
+  "de-ausbildungssuche": {
+    "conda_name": "de-ausbildungssuche",
+    "import_name": "deutschland.ausbildungssuche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-ausbildungssuche"
+  },
+  "de-autobahn": {
+    "conda_name": "de-autobahn",
+    "import_name": "deutschland.autobahn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-autobahn"
+  },
+  "de-berufssprachkurssuche": {
+    "conda_name": "de-berufssprachkurssuche",
+    "import_name": "deutschland.berufssprachkurssuche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-berufssprachkurssuche"
+  },
+  "de-bundeshaushalt": {
+    "conda_name": "de-bundeshaushalt",
+    "import_name": "deutschland.bundeshaushalt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-bundeshaushalt"
+  },
+  "de-dip-bundestag": {
+    "conda_name": "de-dip-bundestag",
+    "import_name": "deutschland.dip_bundestag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-dip-bundestag"
+  },
+  "de-dwd": {
+    "conda_name": "de-dwd",
+    "import_name": "deutschland.dwd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-dwd"
+  },
+  "de-ecovisio": {
+    "conda_name": "de-ecovisio",
+    "import_name": "deutschland.EcoVisio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-ecovisio"
+  },
+  "de-interpol": {
+    "conda_name": "de-interpol",
+    "import_name": "deutschland.interpol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-interpol"
+  },
+  "de-ladestationen": {
+    "conda_name": "de-ladestationen",
+    "import_name": "deutschland.ladestationen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-ladestationen"
+  },
+  "de-marktstammdaten": {
+    "conda_name": "de-marktstammdaten",
+    "import_name": "deutschland.marktstammdaten",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-marktstammdaten"
+  },
+  "de-mudab": {
+    "conda_name": "de-mudab",
+    "import_name": "deutschland.mudab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-mudab"
+  },
+  "de-nina": {
+    "conda_name": "de-nina",
+    "import_name": "deutschland.nina",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-nina"
+  },
+  "de-pegel-online": {
+    "conda_name": "de-pegel-online",
+    "import_name": "deutschland.pegel_online",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-pegel-online"
+  },
+  "de-pflanzenschutzmittelzulassung": {
+    "conda_name": "de-pflanzenschutzmittelzulassung",
+    "import_name": "deutschland.pflanzenschutzmittelzulassung",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-pflanzenschutzmittelzulassung"
+  },
+  "de-polizei-brandenburg": {
+    "conda_name": "de-polizei-brandenburg",
+    "import_name": "deutschland.polizei_brandenburg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-polizei-brandenburg"
+  },
+  "de-studiensuche": {
+    "conda_name": "de-studiensuche",
+    "import_name": "deutschland.studiensuche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-studiensuche"
+  },
+  "de-tagesschau": {
+    "conda_name": "de-tagesschau",
+    "import_name": "deutschland.tagesschau",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-tagesschau"
+  },
+  "de-travelwarning": {
+    "conda_name": "de-travelwarning",
+    "import_name": "deutschland.travelwarning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-travelwarning"
+  },
+  "de-vag": {
+    "conda_name": "de-vag",
+    "import_name": "deutschland.vag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-vag"
+  },
+  "de-zoll": {
+    "conda_name": "de-zoll",
+    "import_name": "deutschland.zoll",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de-zoll"
+  },
+  "de2120-barcode-scanner": {
+    "conda_name": "de2120-barcode-scanner",
+    "import_name": "de2120_barcode_scanner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "de2120-barcode-scanner"
+  },
+  "deadlink": {
+    "conda_name": "deadlink",
+    "import_name": "deadlink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deadlink"
+  },
+  "debtcollector": {
+    "conda_name": "debtcollector",
+    "import_name": "debtcollector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "debtcollector"
+  },
+  "debuglater": {
+    "conda_name": "debuglater",
+    "import_name": "debuglater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "debuglater"
+  },
+  "decasu": {
+    "conda_name": "decasu",
+    "import_name": "decasu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decasu"
+  },
+  "deckbridge": {
+    "conda_name": "deckbridge",
+    "import_name": "deckbridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deckbridge"
+  },
+  "declare": {
+    "conda_name": "declare",
+    "import_name": "declare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "declare"
+  },
+  "decli": {
+    "conda_name": "decli",
+    "import_name": "decli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decli"
+  },
+  "deco": {
+    "conda_name": "deco",
+    "import_name": "deco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deco"
+  },
+  "decopatch": {
+    "conda_name": "decopatch",
+    "import_name": "decopatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decopatch"
+  },
+  "decorator": {
+    "conda_name": "decorator",
+    "import_name": "decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decorator"
+  },
+  "decore": {
+    "conda_name": "decore",
+    "import_name": "decore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decore"
+  },
+  "decorit": {
+    "conda_name": "decorit",
+    "import_name": "decorit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decorit"
+  },
+  "decorrelation": {
+    "conda_name": "decorrelation",
+    "import_name": "decorrelation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decorrelation"
+  },
+  "decoupler": {
+    "conda_name": "decoupler-py",
+    "import_name": "decoupler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "decoupler"
+  },
+  "dectate": {
+    "conda_name": "dectate",
+    "import_name": "dectate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dectate"
+  },
+  "dedalus": {
+    "conda_name": "dedalus",
+    "import_name": "dedalus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dedalus"
+  },
+  "dedupe": {
+    "conda_name": "dedupe",
+    "import_name": "dedupe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dedupe"
+  },
+  "dedupe-hcluster": {
+    "conda_name": "dedupe-hcluster",
+    "import_name": "hcluster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dedupe-hcluster"
+  },
+  "dedupe-variable-datetime": {
+    "conda_name": "dedupe-variable-datetime",
+    "import_name": "dedupe.variables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dedupe-variable-datetime"
+  },
+  "deduplipy": {
+    "conda_name": "deduplipy",
+    "import_name": "deduplipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deduplipy"
+  },
+  "deep-labelprop": {
+    "conda_name": "deep-labelprop",
+    "import_name": "labelprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deep-labelprop"
+  },
+  "deepchecks": {
+    "conda_name": "deepchecks",
+    "import_name": "deepchecks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepchecks"
+  },
+  "deepcs": {
+    "conda_name": "deepcs",
+    "import_name": "deepcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepcs"
+  },
+  "deepdish": {
+    "conda_name": "deepdish",
+    "import_name": "deepdish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepdish"
+  },
+  "deepecho": {
+    "conda_name": "deepecho",
+    "import_name": "deepecho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepecho"
+  },
+  "deepface": {
+    "conda_name": "deepface",
+    "import_name": "deepface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepface"
+  },
+  "deepforest": {
+    "conda_name": "deepforest",
+    "import_name": "deepforest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepforest"
+  },
+  "deepgraph": {
+    "conda_name": "deepgraph",
+    "import_name": "deepgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepgraph"
+  },
+  "deepmerge": {
+    "conda_name": "deepmerge",
+    "import_name": "deepmerge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deepmerge"
+  },
+  "deeprobust": {
+    "conda_name": "deeprobust",
+    "import_name": "deeprobust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deeprobust"
+  },
+  "defaultlist": {
+    "conda_name": "defaultlist",
+    "import_name": "defaultlist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "defaultlist"
+  },
+  "defectpl": {
+    "conda_name": "defectpl",
+    "import_name": "defectpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "defectpl"
+  },
+  "deferrer": {
+    "conda_name": "deferrer",
+    "import_name": "deferrer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deferrer"
+  },
+  "deffcode": {
+    "conda_name": "deffcode",
+    "import_name": "deffcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deffcode"
+  },
+  "defillama-curl": {
+    "conda_name": "defillama-curl",
+    "import_name": "defillama",
+    "mapping_source": "regro-bot",
+    "pypi_name": "defillama-curl"
+  },
+  "deflate-dict": {
+    "conda_name": "deflate_dict",
+    "import_name": "deflate_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deflate-dict"
+  },
+  "defopt": {
+    "conda_name": "defopt",
+    "import_name": "defopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "defopt"
+  },
+  "defusedxml": {
+    "conda_name": "defusedxml",
+    "import_name": "defusedxml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "defusedxml"
+  },
+  "dehinter": {
+    "conda_name": "dehinter",
+    "import_name": "dehinter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dehinter"
+  },
+  "deicode": {
+    "conda_name": "deicode",
+    "import_name": "deicode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deicode"
+  },
+  "deid": {
+    "conda_name": "deid",
+    "import_name": "deid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deid"
+  },
+  "deims": {
+    "conda_name": "deims",
+    "import_name": "deims",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deims"
+  },
+  "dejaq": {
+    "conda_name": "dejaq",
+    "import_name": "dejaq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dejaq"
+  },
+  "delayed-image": {
+    "conda_name": "delayed_image",
+    "import_name": "delayed_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delayed-image"
+  },
+  "delaynet": {
+    "conda_name": "delaynet",
+    "import_name": "delaynet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delaynet"
+  },
+  "delegator-py": {
+    "conda_name": "delegator",
+    "import_name": "delegator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delegator-py"
+  },
+  "delft-fiat": {
+    "conda_name": "delft_fiat",
+    "import_name": "fiat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delft-fiat"
+  },
+  "delimited-protobuf": {
+    "conda_name": "delimited-protobuf",
+    "import_name": "delimited_protobuf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delimited-protobuf"
+  },
+  "delocate": {
+    "conda_name": "delocate",
+    "import_name": "delocate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delocate"
+  },
+  "delta": {
+    "conda_name": "delta",
+    "import_name": "delta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delta"
+  },
+  "deltadb": {
+    "conda_name": "deltadb",
+    "import_name": "deltadb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deltadb"
+  },
+  "delvewheel": {
+    "conda_name": "delvewheel",
+    "import_name": "delvewheel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "delvewheel"
+  },
+  "dem-stitcher": {
+    "conda_name": "dem_stitcher",
+    "import_name": "dem_stitcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dem-stitcher"
+  },
+  "demcmc": {
+    "conda_name": "demcmc",
+    "import_name": "demcmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demcmc"
+  },
+  "demes": {
+    "conda_name": "demes",
+    "import_name": "demes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demes"
+  },
+  "demesdraw": {
+    "conda_name": "demesdraw",
+    "import_name": "demesdraw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demesdraw"
+  },
+  "demjson": {
+    "conda_name": "demjson",
+    "import_name": "demjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demjson"
+  },
+  "demjson3": {
+    "conda_name": "demjson3",
+    "import_name": "demjson3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demjson3"
+  },
+  "demon": {
+    "conda_name": "demon",
+    "import_name": "demon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demon"
+  },
+  "demquery": {
+    "conda_name": "demquery",
+    "import_name": "demquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "demquery"
+  },
+  "densmap-learn": {
+    "conda_name": "densmap-learn",
+    "import_name": "densmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "densmap-learn"
+  },
+  "deodr": {
+    "conda_name": "deodr",
+    "import_name": "deodr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deodr"
+  },
+  "deon": {
+    "conda_name": "deon",
+    "import_name": "deon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deon"
+  },
+  "dep-logic": {
+    "conda_name": "dep-logic",
+    "import_name": "dep_logic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dep-logic"
+  },
+  "dependencies": {
+    "conda_name": "dependencies",
+    "import_name": "dependencies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dependencies"
+  },
+  "dependency-injector": {
+    "conda_name": "dependency_injector",
+    "import_name": "dependency_injector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dependency-injector"
+  },
+  "dependente": {
+    "conda_name": "dependente",
+    "import_name": "dependente",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dependente"
+  },
+  "depinfo": {
+    "conda_name": "depinfo",
+    "import_name": "depinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "depinfo"
+  },
+  "deprecat": {
+    "conda_name": "deprecat",
+    "import_name": "deprecat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deprecat"
+  },
+  "deprecated": {
+    "conda_name": "deprecated",
+    "import_name": "deprecated",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deprecated"
+  },
+  "deprecation": {
+    "conda_name": "deprecation",
+    "import_name": "deprecation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deprecation"
+  },
+  "deprecation-alias": {
+    "conda_name": "deprecation-alias",
+    "import_name": "deprecation_alias",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deprecation-alias"
+  },
+  "deprecation-factory": {
+    "conda_name": "deprecation-factory",
+    "import_name": "deprecation_factory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deprecation-factory"
+  },
+  "deptry": {
+    "conda_name": "deptry",
+    "import_name": "deptry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "deptry"
+  },
+  "depyf": {
+    "conda_name": "depyf",
+    "import_name": "depyf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "depyf"
+  },
+  "derivative": {
+    "conda_name": "derivative",
+    "import_name": "derivative",
+    "mapping_source": "regro-bot",
+    "pypi_name": "derivative"
+  },
+  "descartes": {
+    "conda_name": "descartes",
+    "import_name": "descartes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "descartes"
+  },
+  "descriptastorus": {
+    "conda_name": "descriptastorus",
+    "import_name": "descriptastorus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "descriptastorus"
+  },
+  "desdeo": {
+    "conda_name": "desdeo",
+    "import_name": "desdeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "desdeo"
+  },
+  "desdeo-vis": {
+    "conda_name": "desdeo-vis",
+    "import_name": "desdeo_vis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "desdeo-vis"
+  },
+  "desert": {
+    "conda_name": "desert",
+    "import_name": "desert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "desert"
+  },
+  "design-by-contract": {
+    "conda_name": "design-by-contract",
+    "import_name": "design_by_contract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "design-by-contract"
+  },
+  "desktop-app": {
+    "conda_name": "desktop-app",
+    "import_name": "desktop_app",
+    "mapping_source": "regro-bot",
+    "pypi_name": "desktop-app"
+  },
+  "desktop3": {
+    "conda_name": "desktop3",
+    "import_name": "desktop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "desktop3"
+  },
+  "dessinemoi": {
+    "conda_name": "dessinemoi",
+    "import_name": "dessinemoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dessinemoi"
+  },
+  "detecto": {
+    "conda_name": "detecto",
+    "import_name": "detecto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "detecto"
+  },
+  "detectree": {
+    "conda_name": "detectree",
+    "import_name": "detectree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "detectree"
+  },
+  "devbio-napari": {
+    "conda_name": "devbio-napari",
+    "import_name": "devbio_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "devbio-napari"
+  },
+  "devicely": {
+    "conda_name": "devicely",
+    "import_name": "devicely",
+    "mapping_source": "regro-bot",
+    "pypi_name": "devicely"
+  },
+  "devscripts": {
+    "conda_name": "devscripts",
+    "import_name": "devscripts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "devscripts"
+  },
+  "devtools": {
+    "conda_name": "python-devtools",
+    "import_name": "devtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "devtools"
+  },
+  "dewret": {
+    "conda_name": "dewret",
+    "import_name": "dewret",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dewret"
+  },
+  "dexp": {
+    "conda_name": "dexp",
+    "import_name": "dexp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dexp"
+  },
+  "dexplot": {
+    "conda_name": "dexplot",
+    "import_name": "dexplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dexplot"
+  },
+  "dexpy": {
+    "conda_name": "dexpy",
+    "import_name": "dexpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dexpy"
+  },
+  "dfba": {
+    "conda_name": "dfba",
+    "import_name": "dfba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dfba"
+  },
+  "dfo-ls": {
+    "conda_name": "dfo-ls",
+    "import_name": "dfols",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dfo-ls"
+  },
+  "dfviz": {
+    "conda_name": "dfviz",
+    "import_name": "dfviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dfviz"
+  },
+  "dfvue": {
+    "conda_name": "dfvue",
+    "import_name": "dfvue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dfvue"
+  },
+  "diagnostic": {
+    "conda_name": "diagnostic",
+    "import_name": "diagnostic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diagnostic"
+  },
+  "diagrams": {
+    "conda_name": "diagrams",
+    "import_name": "diagrams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diagrams"
+  },
+  "dialectid": {
+    "conda_name": "dialectid",
+    "import_name": "dialectid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dialectid"
+  },
+  "dialite": {
+    "conda_name": "dialite",
+    "import_name": "dialite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dialite"
+  },
+  "dials-data": {
+    "conda_name": "dials-data",
+    "import_name": "dials_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dials-data"
+  },
+  "diceware": {
+    "conda_name": "diceware",
+    "import_name": "diceware",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diceware"
+  },
+  "dicfg": {
+    "conda_name": "dicfg",
+    "import_name": "dicfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dicfg"
+  },
+  "dicom-anonymizer": {
+    "conda_name": "dicom-anonymizer",
+    "import_name": "dicomanonymizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dicom-anonymizer"
+  },
+  "dicomweb-client": {
+    "conda_name": "dicomweb-client",
+    "import_name": "dicomweb_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dicomweb-client"
+  },
+  "dict-hash": {
+    "conda_name": "dict_hash",
+    "import_name": "dict_hash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dict-hash"
+  },
+  "dict-trie": {
+    "conda_name": "dict-trie",
+    "import_name": "dict_trie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dict-trie"
+  },
+  "dict2css": {
+    "conda_name": "dict2css",
+    "import_name": "dict2css",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dict2css"
+  },
+  "dict2xml": {
+    "conda_name": "dict2xml",
+    "import_name": "dict2xml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dict2xml"
+  },
+  "dictdiffer": {
+    "conda_name": "dictdiffer",
+    "import_name": "dictdiffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dictdiffer"
+  },
+  "dictlib": {
+    "conda_name": "dictlib",
+    "import_name": "dictlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dictlib"
+  },
+  "dictobj": {
+    "conda_name": "dictobj",
+    "import_name": "dictobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dictobj"
+  },
+  "dicttoxml": {
+    "conda_name": "dicttoxml",
+    "import_name": "dicttoxml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dicttoxml"
+  },
+  "dicttoxml2": {
+    "conda_name": "dicttoxml2",
+    "import_name": "dicttoxml2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dicttoxml2"
+  },
+  "diff-cover": {
+    "conda_name": "diff-cover",
+    "import_name": "diff_cover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diff-cover"
+  },
+  "diff-match-patch": {
+    "conda_name": "diff-match-patch",
+    "import_name": "diff_match_patch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diff-match-patch"
+  },
+  "diffpriv": {
+    "conda_name": "diffpriv",
+    "import_name": "DiffPriv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffpriv"
+  },
+  "diffprivlib": {
+    "conda_name": "diffprivlib",
+    "import_name": "diffprivlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffprivlib"
+  },
+  "diffpy-labpdfproc": {
+    "conda_name": "diffpy.labpdfproc",
+    "import_name": "diffpy.labpdfproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffpy-labpdfproc"
+  },
+  "diffpy-snmf": {
+    "conda_name": "diffpy.snmf",
+    "import_name": "diffpy.snmf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffpy-snmf"
+  },
+  "diffpy-srmise": {
+    "conda_name": "diffpy.srmise",
+    "import_name": "diffpy.srmise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffpy-srmise"
+  },
+  "diffsims": {
+    "conda_name": "diffsims",
+    "import_name": "diffsims",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffsims"
+  },
+  "diffsky": {
+    "conda_name": "diffsky",
+    "import_name": "diffsky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diffsky"
+  },
+  "digdem": {
+    "conda_name": "digdem",
+    "import_name": "digdem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "digdem"
+  },
+  "digen": {
+    "conda_name": "digen",
+    "import_name": "digen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "digen"
+  },
+  "dimcli": {
+    "conda_name": "dimcli",
+    "import_name": "dimcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dimcli"
+  },
+  "dimod": {
+    "conda_name": "dimod",
+    "import_name": "dimod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dimod"
+  },
+  "dinghy": {
+    "conda_name": "dinghy",
+    "import_name": "dinghy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dinghy"
+  },
+  "dingo-gw": {
+    "conda_name": "dingo-gw",
+    "import_name": "dingo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dingo-gw"
+  },
+  "dinosaur": {
+    "conda_name": "dinosaur-dycore",
+    "import_name": "dinosaur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dinosaur"
+  },
+  "diode": {
+    "conda_name": "diode",
+    "import_name": "diode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diode"
+  },
+  "dioptas": {
+    "conda_name": "dioptas",
+    "import_name": "dioptas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dioptas"
+  },
+  "diot": {
+    "conda_name": "diot",
+    "import_name": "diot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diot"
+  },
+  "diptest": {
+    "conda_name": "diptest",
+    "import_name": "diptest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diptest"
+  },
+  "diptox": {
+    "conda_name": "diptox",
+    "import_name": "diptox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diptox"
+  },
+  "diraccfg": {
+    "conda_name": "diraccfg",
+    "import_name": "diraccfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diraccfg"
+  },
+  "dirty-cat": {
+    "conda_name": "dirty_cat",
+    "import_name": "dirty_cat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dirty-cat"
+  },
+  "dirty-equals": {
+    "conda_name": "dirty-equals",
+    "import_name": "dirty_equals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dirty-equals"
+  },
+  "dirtyopts": {
+    "conda_name": "dirtyopts",
+    "import_name": "dirtyopts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dirtyopts"
+  },
+  "dis3": {
+    "conda_name": "dis3",
+    "import_name": "dis3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dis3"
+  },
+  "discid": {
+    "conda_name": "discid",
+    "import_name": "discid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "discid"
+  },
+  "discord-py": {
+    "conda_name": "discord.py",
+    "import_name": "discord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "discord-py"
+  },
+  "discorpy": {
+    "conda_name": "discorpy",
+    "import_name": "discorpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "discorpy"
+  },
+  "discretisedfield": {
+    "conda_name": "discretisedfield",
+    "import_name": "discretisedfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "discretisedfield"
+  },
+  "disdrodb": {
+    "conda_name": "disdrodb",
+    "import_name": "disdrodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "disdrodb"
+  },
+  "disjoint-set": {
+    "conda_name": "disjoint-set",
+    "import_name": "disjoint_set",
+    "mapping_source": "regro-bot",
+    "pypi_name": "disjoint-set"
+  },
+  "disk-objectstore": {
+    "conda_name": "disk-objectstore",
+    "import_name": "disk_objectstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "disk-objectstore"
+  },
+  "diskcache": {
+    "conda_name": "diskcache",
+    "import_name": "diskcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "diskcache"
+  },
+  "disnake": {
+    "conda_name": "disnake",
+    "import_name": "disnake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "disnake"
+  },
+  "dist-meta": {
+    "conda_name": "dist-meta",
+    "import_name": "dist_meta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dist-meta"
+  },
+  "dist-s1-enumerator": {
+    "conda_name": "dist_s1_enumerator",
+    "import_name": "dist_s1_enumerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dist-s1-enumerator"
+  },
+  "distance": {
+    "conda_name": "distance",
+    "import_name": "distance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distance"
+  },
+  "distilabel": {
+    "conda_name": "distilabel",
+    "import_name": "distilabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distilabel"
+  },
+  "distinctipy": {
+    "conda_name": "distinctipy",
+    "import_name": "distinctipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distinctipy"
+  },
+  "distoptica": {
+    "conda_name": "distoptica",
+    "import_name": "distoptica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distoptica"
+  },
+  "distro": {
+    "conda_name": "distro",
+    "import_name": "distro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distro"
+  },
+  "distromax": {
+    "conda_name": "distromax",
+    "import_name": "distromax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "distromax"
+  },
+  "dit": {
+    "conda_name": "dit",
+    "import_name": "dit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dit"
+  },
+  "divebomb": {
+    "conda_name": "divebomb",
+    "import_name": "divebomb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "divebomb"
+  },
+  "dj-database-url": {
+    "conda_name": "dj-database-url",
+    "import_name": "dj_database_url",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dj-database-url"
+  },
+  "dj-rest-auth": {
+    "conda_name": "dj-rest-auth",
+    "import_name": "dj_rest_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dj-rest-auth"
+  },
+  "django-admin-numeric-filter": {
+    "conda_name": "django-admin-numeric-filter",
+    "import_name": "admin_numeric_filter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-admin-numeric-filter"
+  },
+  "django-admin-shortcuts": {
+    "conda_name": "django-admin-shortcuts",
+    "import_name": "admin_shortcuts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-admin-shortcuts"
+  },
+  "django-admin-tui": {
+    "conda_name": "django-admin-tui",
+    "import_name": "django_admin_tui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-admin-tui"
+  },
+  "django-ajax-selects": {
+    "conda_name": "django-ajax-selects",
+    "import_name": "ajax_select",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-ajax-selects"
+  },
+  "django-allauth": {
+    "conda_name": "django-allauth",
+    "import_name": "allauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-allauth"
+  },
+  "django-analytical": {
+    "conda_name": "django-analytical",
+    "import_name": "analytical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-analytical"
+  },
+  "django-anymail": {
+    "conda_name": "django-anymail",
+    "import_name": "anymail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-anymail"
+  },
+  "django-appconf": {
+    "conda_name": "django-appconf",
+    "import_name": "appconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-appconf"
+  },
+  "django-approval": {
+    "conda_name": "django-approval",
+    "import_name": "approval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-approval"
+  },
+  "django-apptemplates": {
+    "conda_name": "django-apptemplates",
+    "import_name": "apptemplates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-apptemplates"
+  },
+  "django-auditlog": {
+    "conda_name": "django-auditlog",
+    "import_name": "auditlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-auditlog"
+  },
+  "django-avatar": {
+    "conda_name": "django-avatar",
+    "import_name": "avatar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-avatar"
+  },
+  "django-axes": {
+    "conda_name": "django-axes",
+    "import_name": "axes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-axes"
+  },
+  "django-bakery": {
+    "conda_name": "django-bakery",
+    "import_name": "bakery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-bakery"
+  },
+  "django-bootstrap4": {
+    "conda_name": "django-bootstrap4",
+    "import_name": "bootstrap4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-bootstrap4"
+  },
+  "django-braces": {
+    "conda_name": "django-braces",
+    "import_name": "braces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-braces"
+  },
+  "django-cachalot": {
+    "conda_name": "django-cachalot",
+    "import_name": "cachalot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cachalot"
+  },
+  "django-cities": {
+    "conda_name": "django-cities",
+    "import_name": "cities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cities"
+  },
+  "django-cleanup": {
+    "conda_name": "django-cleanup",
+    "import_name": "django_cleanup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cleanup"
+  },
+  "django-cloud-browser": {
+    "conda_name": "django-cloud-browser",
+    "import_name": "cloud_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cloud-browser"
+  },
+  "django-cognito-jwt": {
+    "conda_name": "django-cognito-jwt",
+    "import_name": "django_cognito_jwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cognito-jwt"
+  },
+  "django-colorfield": {
+    "conda_name": "django-colorfield",
+    "import_name": "colorfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-colorfield"
+  },
+  "django-configurations": {
+    "conda_name": "django-configurations",
+    "import_name": "configurations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-configurations"
+  },
+  "django-content-settings": {
+    "conda_name": "django-content-settings",
+    "import_name": "content_settings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-content-settings"
+  },
+  "django-contrib-comments": {
+    "conda_name": "django-contrib-comments",
+    "import_name": "django_comments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-contrib-comments"
+  },
+  "django-cookie-consent": {
+    "conda_name": "django-cookie-consent",
+    "import_name": "cookie_consent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cookie-consent"
+  },
+  "django-cors-headers": {
+    "conda_name": "django-cors-headers",
+    "import_name": "corsheaders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cors-headers"
+  },
+  "django-countries": {
+    "conda_name": "django-countries",
+    "import_name": "django_countries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-countries"
+  },
+  "django-coverage-plugin": {
+    "conda_name": "django_coverage_plugin",
+    "import_name": "django_coverage_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-coverage-plugin"
+  },
+  "django-cruds-adminlte": {
+    "conda_name": "django-cruds-adminlte",
+    "import_name": "cruds_adminlte",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-cruds-adminlte"
+  },
+  "django-currentuser": {
+    "conda_name": "django-currentuser",
+    "import_name": "django_currentuser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-currentuser"
+  },
+  "django-denied": {
+    "conda_name": "django-denied",
+    "import_name": "denied",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-denied"
+  },
+  "django-dramatiq": {
+    "conda_name": "django-dramatiq",
+    "import_name": "django_dramatiq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-dramatiq"
+  },
+  "django-drf-filepond": {
+    "conda_name": "django-drf-filepond",
+    "import_name": "django_drf_filepond",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-drf-filepond"
+  },
+  "django-easy-logging": {
+    "conda_name": "django-easy-logging",
+    "import_name": "dj_easy_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-easy-logging"
+  },
+  "django-elasticsearch-dsl": {
+    "conda_name": "django-elasticsearch-dsl",
+    "import_name": "django_elasticsearch_dsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-elasticsearch-dsl"
+  },
+  "django-environ": {
+    "conda_name": "django-environ",
+    "import_name": "environ",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-environ"
+  },
+  "django-extensions": {
+    "conda_name": "django-extensions",
+    "import_name": "django_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-extensions"
+  },
+  "django-extra-views": {
+    "conda_name": "django-extra-views",
+    "import_name": "extra_views",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-extra-views"
+  },
+  "django-fernet-fields-v2": {
+    "conda_name": "django-fernet-fields-v2",
+    "import_name": "fernet_fields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-fernet-fields-v2"
+  },
+  "django-filer": {
+    "conda_name": "django-filer",
+    "import_name": "filer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-filer"
+  },
+  "django-fixture-magic": {
+    "conda_name": "django-fixture-magic",
+    "import_name": "fixture_magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-fixture-magic"
+  },
+  "django-foundation-formtags": {
+    "conda_name": "django-foundation-formtags",
+    "import_name": "foundation_formtags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-foundation-formtags"
+  },
+  "django-fsm": {
+    "conda_name": "django-fsm",
+    "import_name": "django_fsm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-fsm"
+  },
+  "django-fsm-admin": {
+    "conda_name": "django-fsm-admin",
+    "import_name": "fsm_admin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-fsm-admin"
+  },
+  "django-fsm-log": {
+    "conda_name": "django-fsm-log",
+    "import_name": "django_fsm_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-fsm-log"
+  },
+  "django-grappelli": {
+    "conda_name": "django-grappelli",
+    "import_name": "grappelli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-grappelli"
+  },
+  "django-gravatar2": {
+    "conda_name": "django-gravatar2",
+    "import_name": "django_gravatar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-gravatar2"
+  },
+  "django-guardian": {
+    "conda_name": "django-guardian",
+    "import_name": "guardian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-guardian"
+  },
+  "django-guid": {
+    "conda_name": "django-guid",
+    "import_name": "django_guid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-guid"
+  },
+  "django-handyhelpers": {
+    "conda_name": "django-handyhelpers",
+    "import_name": "handyhelpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-handyhelpers"
+  },
+  "django-heroku": {
+    "conda_name": "django-heroku",
+    "import_name": "django_heroku",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-heroku"
+  },
+  "django-http-debug": {
+    "conda_name": "django-http-debug",
+    "import_name": "django_http_debug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-http-debug"
+  },
+  "django-import-export": {
+    "conda_name": "django-import-export",
+    "import_name": "import_export",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-import-export"
+  },
+  "django-ipware": {
+    "conda_name": "django-ipware",
+    "import_name": "ipware",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-ipware"
+  },
+  "django-jinja": {
+    "conda_name": "django-jinja",
+    "import_name": "django_jinja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-jinja"
+  },
+  "django-jquery": {
+    "conda_name": "django-jquery",
+    "import_name": "jquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-jquery"
+  },
+  "django-json-widget": {
+    "conda_name": "django-json-widget",
+    "import_name": "django_json_widget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-json-widget"
+  },
+  "django-large-image": {
+    "conda_name": "django-large-image",
+    "import_name": "django_large_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-large-image"
+  },
+  "django-linear-migrations": {
+    "conda_name": "django-linear-migrations",
+    "import_name": "django_linear_migrations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-linear-migrations"
+  },
+  "django-livesettings3": {
+    "conda_name": "django-livesettings3",
+    "import_name": "livesettings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-livesettings3"
+  },
+  "django-localflavor": {
+    "conda_name": "django-localflavor",
+    "import_name": "localflavor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-localflavor"
+  },
+  "django-material": {
+    "conda_name": "django-material",
+    "import_name": "material",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-material"
+  },
+  "django-mfa2": {
+    "conda_name": "django-mfa2",
+    "import_name": "mfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-mfa2"
+  },
+  "django-migrations-formatter": {
+    "conda_name": "django-migrations-formatter",
+    "import_name": "django_migrations_formatter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-migrations-formatter"
+  },
+  "django-model-utils": {
+    "conda_name": "django-model-utils",
+    "import_name": "model_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-model-utils"
+  },
+  "django-mongodb-backend": {
+    "conda_name": "django-mongodb-backend",
+    "import_name": "django_mongodb_backend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-mongodb-backend"
+  },
+  "django-mptt": {
+    "conda_name": "django-mptt",
+    "import_name": "mptt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-mptt"
+  },
+  "django-multiselectfield": {
+    "conda_name": "django-multiselectfield",
+    "import_name": "multiselectfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-multiselectfield"
+  },
+  "django-mustache": {
+    "conda_name": "django-mustache",
+    "import_name": "django_mustache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-mustache"
+  },
+  "django-nose": {
+    "conda_name": "django-nose",
+    "import_name": "django_nose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-nose"
+  },
+  "django-oauth-toolkit": {
+    "conda_name": "django-oauth-toolkit",
+    "import_name": "oauth2_provider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-oauth-toolkit"
+  },
+  "django-pandas": {
+    "conda_name": "django-pandas",
+    "import_name": "django_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-pandas"
+  },
+  "django-param": {
+    "conda_name": "django_param",
+    "import_name": "django_param",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-param"
+  },
+  "django-picklefield": {
+    "conda_name": "django-picklefield",
+    "import_name": "picklefield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-picklefield"
+  },
+  "django-polymorphic": {
+    "conda_name": "django_polymorphic",
+    "import_name": "polymorphic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-polymorphic"
+  },
+  "django-prose": {
+    "conda_name": "django-prose",
+    "import_name": "prose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-prose"
+  },
+  "django-pwa": {
+    "conda_name": "django-pwa",
+    "import_name": "pwa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-pwa"
+  },
+  "django-pygwalker": {
+    "conda_name": "django-pygwalker",
+    "import_name": "djangoaddicts.pygwalker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-pygwalker"
+  },
+  "django-queryset-feeler": {
+    "conda_name": "django-queryset-feeler",
+    "import_name": "django_queryset_feeler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-queryset-feeler"
+  },
+  "django-ranged-fileresponse": {
+    "conda_name": "django-ranged-fileresponse",
+    "import_name": "ranged_fileresponse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-ranged-fileresponse"
+  },
+  "django-ranged-response": {
+    "conda_name": "django-ranged-response",
+    "import_name": "ranged_response",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-ranged-response"
+  },
+  "django-recaptcha2": {
+    "conda_name": "django-recaptcha2",
+    "import_name": "snowpenguin.django.recaptcha2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-recaptcha2"
+  },
+  "django-redis": {
+    "conda_name": "django-redis",
+    "import_name": "django_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-redis"
+  },
+  "django-redis-cache": {
+    "conda_name": "django-redis-cache",
+    "import_name": "redis_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-redis-cache"
+  },
+  "django-relativity": {
+    "conda_name": "django-relativity",
+    "import_name": "relativity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-relativity"
+  },
+  "django-request-id": {
+    "conda_name": "django-request-id",
+    "import_name": "request_id",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-request-id"
+  },
+  "django-rest-auth": {
+    "conda_name": "django-rest-auth",
+    "import_name": "rest_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-rest-auth"
+  },
+  "django-rest-hooks": {
+    "conda_name": "django-rest-hooks",
+    "import_name": "rest_hooks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-rest-hooks"
+  },
+  "django-rest-polymorphic": {
+    "conda_name": "django-rest-polymorphic",
+    "import_name": "rest_polymorphic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-rest-polymorphic"
+  },
+  "django-rest-swagger": {
+    "conda_name": "django-rest-swagger",
+    "import_name": "rest_framework_swagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-rest-swagger"
+  },
+  "django-reversion": {
+    "conda_name": "django-reversion",
+    "import_name": "reversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-reversion"
+  },
+  "django-robots": {
+    "conda_name": "django-robots",
+    "import_name": "robots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-robots"
+  },
+  "django-rosetta": {
+    "conda_name": "django-rosetta",
+    "import_name": "rosetta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-rosetta"
+  },
+  "django-select2": {
+    "conda_name": "django-select2",
+    "import_name": "django_select2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-select2"
+  },
+  "django-sequences": {
+    "conda_name": "django-sequences",
+    "import_name": "sequences",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-sequences"
+  },
+  "django-sesame": {
+    "conda_name": "django-sesame",
+    "import_name": "sesame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-sesame"
+  },
+  "django-session-security": {
+    "conda_name": "django-session-security",
+    "import_name": "session_security",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-session-security"
+  },
+  "django-silk": {
+    "conda_name": "django-silk",
+    "import_name": "silk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-silk"
+  },
+  "django-simple-captcha": {
+    "conda_name": "django-simple-captcha",
+    "import_name": "captcha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-simple-captcha"
+  },
+  "django-simple-history": {
+    "conda_name": "django-simple-history",
+    "import_name": "simple_history",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-simple-history"
+  },
+  "django-socio-grpc": {
+    "conda_name": "django-socio-grpc",
+    "import_name": "django_socio_grpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-socio-grpc"
+  },
+  "django-storages": {
+    "conda_name": "django-storages",
+    "import_name": "storages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-storages"
+  },
+  "django-super-inlines": {
+    "conda_name": "django-super-inlines",
+    "import_name": "super_inlines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-super-inlines"
+  },
+  "django-tag-parser": {
+    "conda_name": "django-tag-parser",
+    "import_name": "tag_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tag-parser"
+  },
+  "django-taggit": {
+    "conda_name": "django-taggit",
+    "import_name": "taggit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-taggit"
+  },
+  "django-tastypie": {
+    "conda_name": "django-tastypie",
+    "import_name": "tastypie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tastypie"
+  },
+  "django-tenant-users": {
+    "conda_name": "django-tenant-users",
+    "import_name": "tenant_users",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tenant-users"
+  },
+  "django-tenants": {
+    "conda_name": "django-tenants",
+    "import_name": "django_tenants",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tenants"
+  },
+  "django-termsandconditions": {
+    "conda_name": "django-termsandconditions",
+    "import_name": "termsandconditions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-termsandconditions"
+  },
+  "django-tex": {
+    "conda_name": "django-tex",
+    "import_name": "django_tex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tex"
+  },
+  "django-todo": {
+    "conda_name": "django-todo",
+    "import_name": "todo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-todo"
+  },
+  "django-tree-queries": {
+    "conda_name": "django-tree-queries",
+    "import_name": "tree_queries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tree-queries"
+  },
+  "django-treebeard": {
+    "conda_name": "django-treebeard",
+    "import_name": "treebeard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-treebeard"
+  },
+  "django-tui": {
+    "conda_name": "django-tui",
+    "import_name": "django_tui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-tui"
+  },
+  "django-unicorn": {
+    "conda_name": "django_unicorn",
+    "import_name": "django_unicorn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-unicorn"
+  },
+  "django-unique-upload": {
+    "conda_name": "django-unique-upload",
+    "import_name": "unique_upload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-unique-upload"
+  },
+  "django-url-filter": {
+    "conda_name": "django-url-filter",
+    "import_name": "url_filter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-url-filter"
+  },
+  "django-user-agents": {
+    "conda_name": "django-user-agents",
+    "import_name": "django_user_agents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-user-agents"
+  },
+  "django-utils-six": {
+    "conda_name": "django-utils-six",
+    "import_name": "django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-utils-six"
+  },
+  "django-vite": {
+    "conda_name": "django-vite",
+    "import_name": "django_vite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-vite"
+  },
+  "django-vite-plugin": {
+    "conda_name": "django-vite-plugin",
+    "import_name": "django_vite_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-vite-plugin"
+  },
+  "django-waffle": {
+    "conda_name": "django-waffle",
+    "import_name": "waffle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-waffle"
+  },
+  "django-wagtail-feeds": {
+    "conda_name": "django-wagtail-feeds",
+    "import_name": "wagtail_feeds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-wagtail-feeds"
+  },
+  "django-weasyprint": {
+    "conda_name": "django-weasyprint",
+    "import_name": "django_weasyprint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-weasyprint"
+  },
+  "django-webhook": {
+    "conda_name": "django-webhook",
+    "import_name": "django_webhook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-webhook"
+  },
+  "django-webpack-loader": {
+    "conda_name": "django-webpack-loader",
+    "import_name": "webpack_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-webpack-loader"
+  },
+  "django-widget-tweaks": {
+    "conda_name": "django-widget-tweaks",
+    "import_name": "widget_tweaks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-widget-tweaks"
+  },
+  "django-wildewidgets": {
+    "conda_name": "django-wildewidgets",
+    "import_name": "wildewidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-wildewidgets"
+  },
+  "django-yugabytedb": {
+    "conda_name": "django-yugabytedb",
+    "import_name": "django_yugabytedb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "django-yugabytedb"
+  },
+  "djangocms-admin-style": {
+    "conda_name": "djangocms-admin-style",
+    "import_name": "djangocms_admin_style",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-admin-style"
+  },
+  "djangocms-attributes-field": {
+    "conda_name": "djangocms-attributes-field",
+    "import_name": "djangocms_attributes_field",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-attributes-field"
+  },
+  "djangocms-frontend": {
+    "conda_name": "djangocms-frontend",
+    "import_name": "djangocms_frontend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-frontend"
+  },
+  "djangocms-history": {
+    "conda_name": "djangocms-history",
+    "import_name": "djangocms_history",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-history"
+  },
+  "djangocms-icon": {
+    "conda_name": "djangocms-icon",
+    "import_name": "djangocms_icon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-icon"
+  },
+  "djangocms-link": {
+    "conda_name": "djangocms-link",
+    "import_name": "djangocms_link",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-link"
+  },
+  "djangocms-picture": {
+    "conda_name": "djangocms-picture",
+    "import_name": "djangocms_picture",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-picture"
+  },
+  "djangocms-style": {
+    "conda_name": "djangocms-style",
+    "import_name": "djangocms_style",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-style"
+  },
+  "djangocms-text-ckeditor": {
+    "conda_name": "djangocms-text-ckeditor",
+    "import_name": "djangocms_text_ckeditor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangocms-text-ckeditor"
+  },
+  "djangorestframework": {
+    "conda_name": "djangorestframework",
+    "import_name": "rest_framework",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework"
+  },
+  "djangorestframework-camel-case": {
+    "conda_name": "djangorestframework-camel-case",
+    "import_name": "djangorestframework_camel_case",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-camel-case"
+  },
+  "djangorestframework-csv": {
+    "conda_name": "djangorestframework-csv",
+    "import_name": "rest_framework_csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-csv"
+  },
+  "djangorestframework-filters": {
+    "conda_name": "djangorestframework-filters",
+    "import_name": "rest_framework_filters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-filters"
+  },
+  "djangorestframework-gis": {
+    "conda_name": "djangorestframework-gis",
+    "import_name": "rest_framework_gis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-gis"
+  },
+  "djangorestframework-guardian2": {
+    "conda_name": "djangorestframework-guardian2",
+    "import_name": "rest_framework_guardian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-guardian2"
+  },
+  "djangorestframework-jsonapi": {
+    "conda_name": "djangorestframework-jsonapi",
+    "import_name": "rest_framework_json_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-jsonapi"
+  },
+  "djangorestframework-jwt": {
+    "conda_name": "djangorestframework-jwt",
+    "import_name": "rest_framework_jwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-jwt"
+  },
+  "djangorestframework-queryfields": {
+    "conda_name": "djangorestframework-queryfields",
+    "import_name": "drf_queryfields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-queryfields"
+  },
+  "djangorestframework-xml": {
+    "conda_name": "djangorestframework-xml",
+    "import_name": "rest_framework_xml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-xml"
+  },
+  "djangorestframework-yaml": {
+    "conda_name": "djangorestframework-yaml",
+    "import_name": "rest_framework_yaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djangorestframework-yaml"
+  },
+  "djantic": {
+    "conda_name": "djantic",
+    "import_name": "djantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djantic"
+  },
+  "djlint": {
+    "conda_name": "djlint",
+    "import_name": "djlint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djlint"
+  },
+  "djongo": {
+    "conda_name": "djongo",
+    "import_name": "djongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djongo"
+  },
+  "djongo5": {
+    "conda_name": "djongo5",
+    "import_name": "djongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "djongo5"
+  },
+  "dkist": {
+    "conda_name": "dkist",
+    "import_name": "dkist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dkist"
+  },
+  "dl1-data-handler": {
+    "conda_name": "dl1_data_handler",
+    "import_name": "dl1_data_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dl1-data-handler"
+  },
+  "dlatk": {
+    "conda_name": "dlatk",
+    "import_name": "dlatk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlatk"
+  },
+  "dlclibrary": {
+    "conda_name": "dlclibrary",
+    "import_name": "dlclibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlclibrary"
+  },
+  "dlinfo": {
+    "conda_name": "dlinfo",
+    "import_name": "dlinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlinfo"
+  },
+  "dliswriter": {
+    "conda_name": "dliswriter",
+    "import_name": "dliswriter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dliswriter"
+  },
+  "dlltracer": {
+    "conda_name": "dlltracer",
+    "import_name": "dlltracer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlltracer"
+  },
+  "dlpoly-py": {
+    "conda_name": "dlpoly-py",
+    "import_name": "dlpoly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlpoly-py"
+  },
+  "dlux": {
+    "conda_name": "dlux",
+    "import_name": "dLux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlux"
+  },
+  "dlx": {
+    "conda_name": "dlx",
+    "import_name": "dlx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dlx"
+  },
+  "dm-acme": {
+    "conda_name": "dm-acme",
+    "import_name": "acme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dm-acme"
+  },
+  "dm-env": {
+    "conda_name": "dm-env",
+    "import_name": "dm_env",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dm-env"
+  },
+  "dm-tree": {
+    "conda_name": "dm-tree",
+    "import_name": "tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dm-tree"
+  },
+  "dmba": {
+    "conda_name": "dmba",
+    "import_name": "dmba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dmba"
+  },
+  "dmqclib": {
+    "conda_name": "dmqclib",
+    "import_name": "dmqclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dmqclib"
+  },
+  "dmri-amico": {
+    "conda_name": "dmri-amico",
+    "import_name": "amico",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dmri-amico"
+  },
+  "dmri-dicelib": {
+    "conda_name": "dmri-dicelib",
+    "import_name": "dicelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dmri-dicelib"
+  },
+  "dnest4": {
+    "conda_name": "dnest4",
+    "import_name": "dnest4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dnest4"
+  },
+  "dnslib": {
+    "conda_name": "dnslib",
+    "import_name": "dnslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dnslib"
+  },
+  "docarray": {
+    "conda_name": "docarray",
+    "import_name": "docarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docarray"
+  },
+  "docdata": {
+    "conda_name": "docdata",
+    "import_name": "docdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docdata"
+  },
+  "docite": {
+    "conda_name": "docite",
+    "import_name": "docite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docite"
+  },
+  "docker": {
+    "conda_name": "docker-py",
+    "import_name": "docker",
+    "mapping_source": "static",
+    "pypi_name": "docker"
+  },
+  "dockerfile-parse": {
+    "conda_name": "dockerfile-parse",
+    "import_name": "dockerfile_parse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dockerfile-parse"
+  },
+  "dockermake": {
+    "conda_name": "dockermake",
+    "import_name": "dockermake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dockermake"
+  },
+  "dockerpty": {
+    "conda_name": "dockerpty",
+    "import_name": "dockerpty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dockerpty"
+  },
+  "dockerspawner": {
+    "conda_name": "dockerspawner",
+    "import_name": "dockerspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dockerspawner"
+  },
+  "dockstring": {
+    "conda_name": "dockstring",
+    "import_name": "dockstring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dockstring"
+  },
+  "docopt": {
+    "conda_name": "docopt",
+    "import_name": "docopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docopt"
+  },
+  "docopt-ng": {
+    "conda_name": "docopt-ng",
+    "import_name": "docopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docopt-ng"
+  },
+  "docparse": {
+    "conda_name": "docparse",
+    "import_name": "docparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docparse"
+  },
+  "docplex": {
+    "conda_name": "docplex",
+    "import_name": "docplex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docplex"
+  },
+  "docquery": {
+    "conda_name": "docquery",
+    "import_name": "docquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docquery"
+  },
+  "docrep": {
+    "conda_name": "docrep",
+    "import_name": "docrep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docrep"
+  },
+  "docrepr": {
+    "conda_name": "docrepr",
+    "import_name": "docrepr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docrepr"
+  },
+  "docs-versions-menu": {
+    "conda_name": "docs-versions-menu",
+    "import_name": "docs_versions_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docs-versions-menu"
+  },
+  "docspec": {
+    "conda_name": "docspec",
+    "import_name": "docspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docspec"
+  },
+  "docspec-python": {
+    "conda_name": "docspec-python",
+    "import_name": "docspec_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docspec-python"
+  },
+  "docstrfmt": {
+    "conda_name": "docstrfmt",
+    "import_name": "docstrfmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docstrfmt"
+  },
+  "docstring-inheritance": {
+    "conda_name": "docstring-inheritance",
+    "import_name": "docstring_inheritance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docstring-inheritance"
+  },
+  "docstring-parser": {
+    "conda_name": "docstring_parser",
+    "import_name": "docstring_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docstring-parser"
+  },
+  "docstring-parser-fork": {
+    "conda_name": "docstring_parser_fork",
+    "import_name": "docstring_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docstring-parser-fork"
+  },
+  "doctools": {
+    "conda_name": "doctools",
+    "import_name": "doctools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doctools"
+  },
+  "doctr-versions-menu": {
+    "conda_name": "doctr-versions-menu",
+    "import_name": "doctr_versions_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doctr-versions-menu"
+  },
+  "docx-mailmerge": {
+    "conda_name": "docx-mailmerge",
+    "import_name": "mailmerge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docx-mailmerge"
+  },
+  "docx2pdf": {
+    "conda_name": "docx2pdf",
+    "import_name": "docx2pdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docx2pdf"
+  },
+  "docx2txt": {
+    "conda_name": "docx2txt",
+    "import_name": "docx2txt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docx2txt"
+  },
+  "docxtpl": {
+    "conda_name": "docxtpl",
+    "import_name": "docxtpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "docxtpl"
+  },
+  "dodgy": {
+    "conda_name": "dodgy",
+    "import_name": "dodgy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dodgy"
+  },
+  "dogpile-cache": {
+    "conda_name": "dogpile.cache",
+    "import_name": "dogpile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dogpile-cache"
+  },
+  "dokter": {
+    "conda_name": "dokter",
+    "import_name": "dokter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dokter"
+  },
+  "dolang": {
+    "conda_name": "dolang",
+    "import_name": "dolang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dolang"
+  },
+  "dolfyn": {
+    "conda_name": "dolfyn",
+    "import_name": "dolfyn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dolfyn"
+  },
+  "dolos": {
+    "conda_name": "dolos",
+    "import_name": "ibapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dolos"
+  },
+  "dom-toml": {
+    "conda_name": "dom-toml",
+    "import_name": "dom_toml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dom-toml"
+  },
+  "domb": {
+    "conda_name": "domb",
+    "import_name": "domb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "domb"
+  },
+  "domb-napari": {
+    "conda_name": "domb-napari",
+    "import_name": "domb_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "domb-napari"
+  },
+  "domdf-python-tools": {
+    "conda_name": "domdf-python-tools",
+    "import_name": "domdf_python_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "domdf-python-tools"
+  },
+  "dominate": {
+    "conda_name": "dominate",
+    "import_name": "dominate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dominate"
+  },
+  "donfig": {
+    "conda_name": "donfig",
+    "import_name": "donfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "donfig"
+  },
+  "doodleverse-utils": {
+    "conda_name": "doodleverse-utils",
+    "import_name": "doodleverse_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doodleverse-utils"
+  },
+  "doppyo": {
+    "conda_name": "doppyo",
+    "import_name": "doppyo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doppyo"
+  },
+  "dorban": {
+    "conda_name": "dorban",
+    "import_name": "dorban",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dorban"
+  },
+  "dot2tex": {
+    "conda_name": "dot2tex",
+    "import_name": "dot2tex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dot2tex"
+  },
+  "dotdict": {
+    "conda_name": "dotdict",
+    "import_name": "dotdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dotdict"
+  },
+  "dotmap": {
+    "conda_name": "dotmap",
+    "import_name": "dotmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dotmap"
+  },
+  "dotty-dict": {
+    "conda_name": "dotty-dict",
+    "import_name": "dotty_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dotty-dict"
+  },
+  "doublemetaphone": {
+    "conda_name": "doublemetaphone",
+    "import_name": "doublemetaphone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doublemetaphone"
+  },
+  "doubleml": {
+    "conda_name": "doubleml",
+    "import_name": "doubleml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doubleml"
+  },
+  "doubtlab": {
+    "conda_name": "doubtlab",
+    "import_name": "doubtlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "doubtlab"
+  },
+  "dowhy": {
+    "conda_name": "dowhy",
+    "import_name": "dowhy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dowhy"
+  },
+  "download": {
+    "conda_name": "download",
+    "import_name": "download",
+    "mapping_source": "regro-bot",
+    "pypi_name": "download"
+  },
+  "downloader-cli": {
+    "conda_name": "downloader-cli",
+    "import_name": "downloader_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "downloader-cli"
+  },
+  "downloaders": {
+    "conda_name": "downloaders",
+    "import_name": "downloaders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "downloaders"
+  },
+  "downsample": {
+    "conda_name": "downsample",
+    "import_name": "downsample",
+    "mapping_source": "regro-bot",
+    "pypi_name": "downsample"
+  },
+  "dp-accounting": {
+    "conda_name": "dp-accounting",
+    "import_name": "dp_accounting",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dp-accounting"
+  },
+  "dparse": {
+    "conda_name": "dparse",
+    "import_name": "dparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dparse"
+  },
+  "dpath": {
+    "conda_name": "dpath",
+    "import_name": "dpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpath"
+  },
+  "dpcmaps": {
+    "conda_name": "dpcmaps",
+    "import_name": "dpcmaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpcmaps"
+  },
+  "dpd-components": {
+    "conda_name": "dpd_components",
+    "import_name": "dpd_components",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpd-components"
+  },
+  "dpdispatcher": {
+    "conda_name": "dpdispatcher",
+    "import_name": "dpdispatcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpdispatcher"
+  },
+  "dphtools": {
+    "conda_name": "dphtools",
+    "import_name": "dphtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dphtools"
+  },
+  "dpkt": {
+    "conda_name": "dpkt",
+    "import_name": "dpkt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpkt"
+  },
+  "dpm360-lightsaber": {
+    "conda_name": "dpm360-lightsaber",
+    "import_name": "lightsaber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpm360-lightsaber"
+  },
+  "dpu-utils": {
+    "conda_name": "dpu-utils",
+    "import_name": "dpu_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dpu-utils"
+  },
+  "dqsegdb": {
+    "conda_name": "dqsegdb",
+    "import_name": "dqsegdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dqsegdb"
+  },
+  "drafthorse": {
+    "conda_name": "drafthorse",
+    "import_name": "drafthorse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drafthorse"
+  },
+  "dragon-ml-toolbox": {
+    "conda_name": "dragon-ml-toolbox",
+    "import_name": "ml_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dragon-ml-toolbox"
+  },
+  "dragonfly2": {
+    "conda_name": "dragonfly2",
+    "import_name": "dragonfly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dragonfly2"
+  },
+  "dramatiq": {
+    "conda_name": "dramatiq",
+    "import_name": "dramatiq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dramatiq"
+  },
+  "dramatiq-abort": {
+    "conda_name": "dramatiq-abort",
+    "import_name": "dramatiq_abort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dramatiq-abort"
+  },
+  "dranspose": {
+    "conda_name": "dranspose",
+    "import_name": "dranspose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dranspose"
+  },
+  "dreamcoat": {
+    "conda_name": "dreamcoat",
+    "import_name": "dreamcoat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dreamcoat"
+  },
+  "dremio-arrow": {
+    "conda_name": "dremio-arrow",
+    "import_name": "dremioarrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dremio-arrow"
+  },
+  "dremio-client": {
+    "conda_name": "python-dremio-client",
+    "import_name": "dremio_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dremio-client"
+  },
+  "dreqpy": {
+    "conda_name": "dreqpy",
+    "import_name": "dreqPy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dreqpy"
+  },
+  "drf-api-tracking": {
+    "conda_name": "drf-api-tracking",
+    "import_name": "rest_framework_tracking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-api-tracking"
+  },
+  "drf-dynamic-fields": {
+    "conda_name": "drf-dynamic-fields",
+    "import_name": "drf_dynamic_fields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-dynamic-fields"
+  },
+  "drf-generators": {
+    "conda_name": "drf-generators",
+    "import_name": "drf_generators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-generators"
+  },
+  "drf-haystack": {
+    "conda_name": "drf-haystack",
+    "import_name": "drf_haystack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-haystack"
+  },
+  "drf-optionalfields": {
+    "conda_name": "drf-optionalfields",
+    "import_name": "drf_optionalfields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-optionalfields"
+  },
+  "drf-pydantic": {
+    "conda_name": "drf-pydantic",
+    "import_name": "drf_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-pydantic"
+  },
+  "drf-spectacular": {
+    "conda_name": "drf-spectacular",
+    "import_name": "drf_spectacular",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-spectacular"
+  },
+  "drf-spectacular-sidecar": {
+    "conda_name": "drf-spectacular-sidecar",
+    "import_name": "drf_spectacular_sidecar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-spectacular-sidecar"
+  },
+  "drf-standardized-errors": {
+    "conda_name": "drf-standardized-errors",
+    "import_name": "drf_standardized_errors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drf-standardized-errors"
+  },
+  "drivelib": {
+    "conda_name": "drivelib",
+    "import_name": "drivelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drivelib"
+  },
+  "drm4g": {
+    "conda_name": "drm4g",
+    "import_name": "drm4g",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drm4g"
+  },
+  "drms": {
+    "conda_name": "drms",
+    "import_name": "drms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "drms"
+  },
+  "dropboxdrivefs": {
+    "conda_name": "dropboxdrivefs",
+    "import_name": "dropboxdrivefs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dropboxdrivefs"
+  },
+  "dropstackframe": {
+    "conda_name": "dropstackframe",
+    "import_name": "dropstackframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dropstackframe"
+  },
+  "ds-lime": {
+    "conda_name": "ds-lime",
+    "import_name": "lime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ds-lime"
+  },
+  "dsc": {
+    "conda_name": "dsc",
+    "import_name": "dsc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dsc"
+  },
+  "dscribe": {
+    "conda_name": "dscribe",
+    "import_name": "dscribe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dscribe"
+  },
+  "dsf": {
+    "conda_name": "dsf",
+    "import_name": "dsf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dsf"
+  },
+  "dsm2dtm": {
+    "conda_name": "dsm2dtm",
+    "import_name": "dsm2dtm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dsm2dtm"
+  },
+  "dspawpy": {
+    "conda_name": "dspawpy",
+    "import_name": "dspawpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dspawpy"
+  },
+  "dsps": {
+    "conda_name": "dsps",
+    "import_name": "dsps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dsps"
+  },
+  "dsub": {
+    "conda_name": "dsub",
+    "import_name": "dsub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dsub"
+  },
+  "dtaidistance": {
+    "conda_name": "dtaidistance",
+    "import_name": "dtaidistance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtaidistance"
+  },
+  "dtale": {
+    "conda_name": "dtale",
+    "import_name": "dtale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtale"
+  },
+  "dtool-annotation": {
+    "conda_name": "dtool_annotation",
+    "import_name": "dtool_annotation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-annotation"
+  },
+  "dtool-azure": {
+    "conda_name": "dtool_azure",
+    "import_name": "dtool_azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-azure"
+  },
+  "dtool-config": {
+    "conda_name": "dtool_config",
+    "import_name": "dtool_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-config"
+  },
+  "dtool-create": {
+    "conda_name": "dtool_create",
+    "import_name": "dtool_create",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-create"
+  },
+  "dtool-ecs": {
+    "conda_name": "dtool_ecs",
+    "import_name": "dtool_ecs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-ecs"
+  },
+  "dtool-http": {
+    "conda_name": "dtool_http",
+    "import_name": "dtool_http",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-http"
+  },
+  "dtool-ibeis": {
+    "conda_name": "dtool_ibeis",
+    "import_name": "dtool_ibeis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-ibeis"
+  },
+  "dtool-info": {
+    "conda_name": "dtool_info",
+    "import_name": "dtool_info",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-info"
+  },
+  "dtool-irods": {
+    "conda_name": "dtool_irods",
+    "import_name": "dtool_irods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-irods"
+  },
+  "dtool-lookup-api": {
+    "conda_name": "dtool_lookup_api",
+    "import_name": "dtool_lookup_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-api"
+  },
+  "dtool-lookup-client": {
+    "conda_name": "dtool-lookup-client",
+    "import_name": "dtool_lookup_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-client"
+  },
+  "dtool-lookup-server": {
+    "conda_name": "dtool_lookup_server",
+    "import_name": "dtool_lookup_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server"
+  },
+  "dtool-lookup-server-annotation-filter-plugin": {
+    "conda_name": "dtool_lookup_server_annotation_filter_plugin",
+    "import_name": "dtool_lookup_server_annotation_filter_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-annotation-filter-plugin"
+  },
+  "dtool-lookup-server-dependency-graph-plugin": {
+    "conda_name": "dtool_lookup_server_dependency_graph_plugin",
+    "import_name": "dtool_lookup_server_dependency_graph_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-dependency-graph-plugin"
+  },
+  "dtool-lookup-server-direct-mongo-plugin": {
+    "conda_name": "dtool_lookup_server_direct_mongo_plugin",
+    "import_name": "dtool_lookup_server_direct_mongo_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-direct-mongo-plugin"
+  },
+  "dtool-lookup-server-notification-plugin": {
+    "conda_name": "dtool_lookup_server_notification_plugin",
+    "import_name": "dtool_lookup_server_notification_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-notification-plugin"
+  },
+  "dtool-lookup-server-plugin-scaffolding": {
+    "conda_name": "dtool_lookup_server_plugin_scaffolding",
+    "import_name": "dtool_lookup_server_plugin_scaffolding",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-plugin-scaffolding"
+  },
+  "dtool-lookup-server-retrieve-plugin-mongo": {
+    "conda_name": "dtool_lookup_server_retrieve_plugin_mongo",
+    "import_name": "dtool_lookup_server_retrieve_plugin_mongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-retrieve-plugin-mongo"
+  },
+  "dtool-lookup-server-search-plugin-mongo": {
+    "conda_name": "dtool_lookup_server_search_plugin_mongo",
+    "import_name": "dtool_lookup_server_search_plugin_mongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-lookup-server-search-plugin-mongo"
+  },
+  "dtool-overlay": {
+    "conda_name": "dtool_overlay",
+    "import_name": "dtool_overlay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-overlay"
+  },
+  "dtool-smb": {
+    "conda_name": "dtool_smb",
+    "import_name": "dtool_smb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-smb"
+  },
+  "dtool-symlink": {
+    "conda_name": "dtool_symlink",
+    "import_name": "dtool_symlink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-symlink"
+  },
+  "dtool-tag": {
+    "conda_name": "dtool_tag",
+    "import_name": "dtool_tag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-tag"
+  },
+  "dtool-utils": {
+    "conda_name": "dtool_utils",
+    "import_name": "dtool_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtool-utils"
+  },
+  "dtoolai": {
+    "conda_name": "dtoolai",
+    "import_name": "dtoolai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtoolai"
+  },
+  "dtoolcore": {
+    "conda_name": "dtoolcore",
+    "import_name": "dtoolcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtoolcore"
+  },
+  "dtscalibration": {
+    "conda_name": "dtscalibration",
+    "import_name": "dtscalibration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtscalibration"
+  },
+  "dttxml": {
+    "conda_name": "dttxml",
+    "import_name": "dttxml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dttxml"
+  },
+  "dtw": {
+    "conda_name": "dtw",
+    "import_name": "dtw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtw"
+  },
+  "dtw-python": {
+    "conda_name": "dtw-python",
+    "import_name": "dtw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dtw-python"
+  },
+  "ducc0": {
+    "conda_name": "ducc0",
+    "import_name": "ducc0",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ducc0"
+  },
+  "duckcli": {
+    "conda_name": "duckcli",
+    "import_name": "duckcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duckcli"
+  },
+  "duckdb": {
+    "conda_name": "python-duckdb",
+    "import_name": "duckdb",
+    "mapping_source": "static",
+    "pypi_name": "duckdb"
+  },
+  "duckdb-engine": {
+    "conda_name": "duckdb-engine",
+    "import_name": "duckdb_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duckdb-engine"
+  },
+  "duckdb-server": {
+    "conda_name": "duckdb-server",
+    "import_name": "duckdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duckdb-server"
+  },
+  "ducks": {
+    "conda_name": "ducks",
+    "import_name": "ducks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ducks"
+  },
+  "duecredit": {
+    "conda_name": "duecredit",
+    "import_name": "duecredit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duecredit"
+  },
+  "duet": {
+    "conda_name": "duet-python",
+    "import_name": "duet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duet"
+  },
+  "dufte": {
+    "conda_name": "dufte",
+    "import_name": "dufte",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dufte"
+  },
+  "dummydata": {
+    "conda_name": "dummydata",
+    "import_name": "dummydata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dummydata"
+  },
+  "dunamai": {
+    "conda_name": "dunamai",
+    "import_name": "dunamai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dunamai"
+  },
+  "duplicity": {
+    "conda_name": "duplicity",
+    "import_name": "duplicity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "duplicity"
+  },
+  "durationpy": {
+    "conda_name": "durationpy",
+    "import_name": "durationpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "durationpy"
+  },
+  "dust-extinction": {
+    "conda_name": "dust_extinction",
+    "import_name": "dust_extinction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dust-extinction"
+  },
+  "dustgoggles": {
+    "conda_name": "dustgoggles",
+    "import_name": "dustgoggles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dustgoggles"
+  },
+  "dustmaps": {
+    "conda_name": "dustmaps",
+    "import_name": "dustmaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dustmaps"
+  },
+  "dvc-azure": {
+    "conda_name": "dvc-azure",
+    "import_name": "dvc_azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-azure"
+  },
+  "dvc-data": {
+    "conda_name": "dvc-data",
+    "import_name": "dvc_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-data"
+  },
+  "dvc-gdrive": {
+    "conda_name": "dvc-gdrive",
+    "import_name": "dvc_gdrive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-gdrive"
+  },
+  "dvc-gs": {
+    "conda_name": "dvc-gs",
+    "import_name": "dvc_gs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-gs"
+  },
+  "dvc-hdfs": {
+    "conda_name": "dvc-hdfs",
+    "import_name": "dvc_hdfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-hdfs"
+  },
+  "dvc-http": {
+    "conda_name": "dvc-http",
+    "import_name": "dvc_http",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-http"
+  },
+  "dvc-objects": {
+    "conda_name": "dvc-objects",
+    "import_name": "dvc_objects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-objects"
+  },
+  "dvc-oss": {
+    "conda_name": "dvc-oss",
+    "import_name": "dvc_oss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-oss"
+  },
+  "dvc-render": {
+    "conda_name": "dvc-render",
+    "import_name": "dvc_render",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-render"
+  },
+  "dvc-s3": {
+    "conda_name": "dvc-s3",
+    "import_name": "dvc_s3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-s3"
+  },
+  "dvc-ssh": {
+    "conda_name": "dvc-ssh",
+    "import_name": "dvc_ssh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-ssh"
+  },
+  "dvc-studio-client": {
+    "conda_name": "dvc-studio-client",
+    "import_name": "dvc_studio_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-studio-client"
+  },
+  "dvc-task": {
+    "conda_name": "dvc-task",
+    "import_name": "dvc_task",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-task"
+  },
+  "dvc-webdav": {
+    "conda_name": "dvc-webdav",
+    "import_name": "dvc_webdav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-webdav"
+  },
+  "dvc-webhdfs": {
+    "conda_name": "dvc-webhdfs",
+    "import_name": "dvc_webhdfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvc-webhdfs"
+  },
+  "dvclive": {
+    "conda_name": "dvclive",
+    "import_name": "dvclive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvclive"
+  },
+  "dvg-ringbuffer": {
+    "conda_name": "dvg-ringbuffer",
+    "import_name": "dvg_ringbuffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dvg-ringbuffer"
+  },
+  "dwave-cloud-client": {
+    "conda_name": "dwave-cloud-client",
+    "import_name": "dwave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-cloud-client"
+  },
+  "dwave-greedy": {
+    "conda_name": "dwave-greedy",
+    "import_name": "greedy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-greedy"
+  },
+  "dwave-hybrid": {
+    "conda_name": "dwave-hybrid",
+    "import_name": "hybrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-hybrid"
+  },
+  "dwave-inspector": {
+    "conda_name": "dwave-inspector",
+    "import_name": "dwave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-inspector"
+  },
+  "dwave-networkx": {
+    "conda_name": "dwave-networkx",
+    "import_name": "dwave_networkx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-networkx"
+  },
+  "dwave-ocean-sdk": {
+    "conda_name": "dwave-ocean-sdk",
+    "import_name": "dwaveoceansdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-ocean-sdk"
+  },
+  "dwave-system": {
+    "conda_name": "dwave-system",
+    "import_name": "dwave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-system"
+  },
+  "dwave-tabu": {
+    "conda_name": "dwave-tabu",
+    "import_name": "tabu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwave-tabu"
+  },
+  "dwavebinarycsp": {
+    "conda_name": "dwavebinarycsp",
+    "import_name": "dwavebinarycsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwavebinarycsp"
+  },
+  "dwclib": {
+    "conda_name": "dwclib",
+    "import_name": "dwclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dwclib"
+  },
+  "dxfgrabber": {
+    "conda_name": "dxfgrabber",
+    "import_name": "dxfgrabber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dxfgrabber"
+  },
+  "dxtb": {
+    "conda_name": "dxtb",
+    "import_name": "dxtb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dxtb"
+  },
+  "dye-score": {
+    "conda_name": "dye-score",
+    "import_name": "dye_score",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dye-score"
+  },
+  "dymos": {
+    "conda_name": "dymos",
+    "import_name": "dymos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dymos"
+  },
+  "dymoval": {
+    "conda_name": "dymoval",
+    "import_name": "dymoval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dymoval"
+  },
+  "dynamicisttoolkit": {
+    "conda_name": "dynamicisttoolkit",
+    "import_name": "dtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynamicisttoolkit"
+  },
+  "dynamo-pandas": {
+    "conda_name": "dynamo-pandas",
+    "import_name": "dynamo_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynamo-pandas"
+  },
+  "dynaphopy": {
+    "conda_name": "dynaphopy",
+    "import_name": "dynaphopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynaphopy"
+  },
+  "dynapydantic": {
+    "conda_name": "dynapydantic",
+    "import_name": "dynapydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynapydantic"
+  },
+  "dynesty": {
+    "conda_name": "dynesty",
+    "import_name": "dynesty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynesty"
+  },
+  "dynetx": {
+    "conda_name": "dynetx",
+    "import_name": "dynetx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dynetx"
+  },
+  "dyntapy": {
+    "conda_name": "dyntapy",
+    "import_name": "dyntapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dyntapy"
+  },
+  "dyson-equalizer": {
+    "conda_name": "dyson-equalizer",
+    "import_name": "dyson_equalizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dyson-equalizer"
+  },
+  "dython": {
+    "conda_name": "dython",
+    "import_name": "dython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "dython"
+  },
+  "e13tools": {
+    "conda_name": "e13tools",
+    "import_name": "e13tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "e13tools"
+  },
+  "e3nn-jax": {
+    "conda_name": "e3nn-jax",
+    "import_name": "e3nn_jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "e3nn-jax"
+  },
+  "e3x": {
+    "conda_name": "e3x",
+    "import_name": "e3x",
+    "mapping_source": "regro-bot",
+    "pypi_name": "e3x"
+  },
+  "eacc": {
+    "conda_name": "eacc",
+    "import_name": "eacc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eacc"
+  },
+  "eagerpy": {
+    "conda_name": "eagerpy",
+    "import_name": "eagerpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eagerpy"
+  },
+  "earth-osm": {
+    "conda_name": "earth-osm",
+    "import_name": "earth_osm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earth-osm"
+  },
+  "earthengine-api": {
+    "conda_name": "earthengine-api",
+    "import_name": "ee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthengine-api"
+  },
+  "earthformer": {
+    "conda_name": "earthformer",
+    "import_name": "earthformer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthformer"
+  },
+  "earthkit-data": {
+    "conda_name": "earthkit-data",
+    "import_name": "earthkit.data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthkit-data"
+  },
+  "earthkit-geo": {
+    "conda_name": "earthkit-geo",
+    "import_name": "earthkit.geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthkit-geo"
+  },
+  "earthkit-meteo": {
+    "conda_name": "earthkit-meteo",
+    "import_name": "earthkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthkit-meteo"
+  },
+  "earthkit-regrid": {
+    "conda_name": "earthkit-regrid",
+    "import_name": "earthkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthkit-regrid"
+  },
+  "earthkit-utils": {
+    "conda_name": "earthkit-utils",
+    "import_name": "earthkit.utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthkit-utils"
+  },
+  "earthnet": {
+    "conda_name": "earthnet",
+    "import_name": "earthnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthnet"
+  },
+  "earthpy": {
+    "conda_name": "earthpy",
+    "import_name": "earthpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthpy"
+  },
+  "earthstat": {
+    "conda_name": "earthstat",
+    "import_name": "earthstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "earthstat"
+  },
+  "easing-functions": {
+    "conda_name": "easing-functions",
+    "import_name": "easing_functions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easing-functions"
+  },
+  "easy-thumbnails": {
+    "conda_name": "easy-thumbnails",
+    "import_name": "easy_thumbnails",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easy-thumbnails"
+  },
+  "easyargs": {
+    "conda_name": "easyargs",
+    "import_name": "easyargs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easyargs"
+  },
+  "easybuild": {
+    "conda_name": "easybuild",
+    "import_name": "easybuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easybuild"
+  },
+  "easybuild-easyblocks": {
+    "conda_name": "easybuild-easyblocks",
+    "import_name": "easybuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easybuild-easyblocks"
+  },
+  "easybuild-easyconfigs": {
+    "conda_name": "easybuild-easyconfigs",
+    "import_name": "easybuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easybuild-easyconfigs"
+  },
+  "easybuild-framework": {
+    "conda_name": "easybuild-framework",
+    "import_name": "easybuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easybuild-framework"
+  },
+  "easycheck": {
+    "conda_name": "easycheck",
+    "import_name": "easycheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easycheck"
+  },
+  "easychem": {
+    "conda_name": "easychem",
+    "import_name": "easychem.easychem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easychem"
+  },
+  "easydict": {
+    "conda_name": "easydict",
+    "import_name": "easydict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easydict"
+  },
+  "easygdf": {
+    "conda_name": "easygdf",
+    "import_name": "easygdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easygdf"
+  },
+  "easygems": {
+    "conda_name": "easygems",
+    "import_name": "easygems",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easygems"
+  },
+  "easygui": {
+    "conda_name": "easygui",
+    "import_name": "easygui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easygui"
+  },
+  "easyprocess": {
+    "conda_name": "easyprocess",
+    "import_name": "easyprocess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easyprocess"
+  },
+  "easyquery": {
+    "conda_name": "easyquery",
+    "import_name": "easyquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easyquery"
+  },
+  "easysnowdata": {
+    "conda_name": "easysnowdata",
+    "import_name": "easysnowdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easysnowdata"
+  },
+  "easystac": {
+    "conda_name": "easystac",
+    "import_name": "easystac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easystac"
+  },
+  "easytest": {
+    "conda_name": "easytest",
+    "import_name": "easytest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easytest"
+  },
+  "easywatch": {
+    "conda_name": "easywatch",
+    "import_name": "easywatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "easywatch"
+  },
+  "ebcdic-parser": {
+    "conda_name": "ebcdic-parser",
+    "import_name": "ebcdic_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ebcdic-parser"
+  },
+  "ebg": {
+    "conda_name": "ebg",
+    "import_name": "EBG",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ebg"
+  },
+  "ebltable": {
+    "conda_name": "ebltable",
+    "import_name": "ebltable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ebltable"
+  },
+  "ebooklib": {
+    "conda_name": "ebooklib",
+    "import_name": "ebooklib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ebooklib"
+  },
+  "ecape": {
+    "conda_name": "ecape",
+    "import_name": "ecape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecape"
+  },
+  "ecape-parcel": {
+    "conda_name": "ecape-parcel",
+    "import_name": "ecape_parcel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecape-parcel"
+  },
+  "ecbdata": {
+    "conda_name": "ecbdata",
+    "import_name": "ecbdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecbdata"
+  },
+  "ecco": {
+    "conda_name": "ecco",
+    "import_name": "ecco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecco"
+  },
+  "ecco-access": {
+    "conda_name": "ecco_access",
+    "import_name": "ecco_access",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecco-access"
+  },
+  "ecco-v4-py": {
+    "conda_name": "ecco_v4_py",
+    "import_name": "ecco_v4_py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecco-v4-py"
+  },
+  "ecdsa": {
+    "conda_name": "ecdsa",
+    "import_name": "ecdsa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecdsa"
+  },
+  "ecgtools": {
+    "conda_name": "ecgtools",
+    "import_name": "ecgtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecgtools"
+  },
+  "echemdb": {
+    "conda_name": "echemdb",
+    "import_name": "echemdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echemdb"
+  },
+  "echo": {
+    "conda_name": "echo",
+    "import_name": "echo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echo"
+  },
+  "echopop": {
+    "conda_name": "echopop",
+    "import_name": "echopop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echopop"
+  },
+  "echopy": {
+    "conda_name": "echopy",
+    "import_name": "echopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echopy"
+  },
+  "echopype": {
+    "conda_name": "echopype",
+    "import_name": "echopype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echopype"
+  },
+  "echoregions": {
+    "conda_name": "echoregions",
+    "import_name": "echoregions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "echoregions"
+  },
+  "ecmean": {
+    "conda_name": "ecmean",
+    "import_name": "ecmean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecmean"
+  },
+  "ecmwf-api-client": {
+    "conda_name": "ecmwf-api-client",
+    "import_name": "ecmwfapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecmwf-api-client"
+  },
+  "ecmwf-datastores-client": {
+    "conda_name": "ecmwf-datastores-client",
+    "import_name": "ecmwf.datastores",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecmwf-datastores-client"
+  },
+  "ecmwf-opendata": {
+    "conda_name": "ecmwf-opendata",
+    "import_name": "ecmwf.opendata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecmwf-opendata"
+  },
+  "ecoinvent-interface": {
+    "conda_name": "ecoinvent_interface",
+    "import_name": "ecoinvent_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecoinvent-interface"
+  },
+  "econci": {
+    "conda_name": "econci",
+    "import_name": "econci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "econci"
+  },
+  "econtools": {
+    "conda_name": "econtools",
+    "import_name": "econtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "econtools"
+  },
+  "ecp-cookie-init": {
+    "conda_name": "ecp-cookie-init",
+    "import_name": "ecp_cookie_init",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecp-cookie-init"
+  },
+  "ecs-logging": {
+    "conda_name": "ecs-logging",
+    "import_name": "ecs_logging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ecs-logging"
+  },
+  "edalize": {
+    "conda_name": "edalize",
+    "import_name": "edalize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edalize"
+  },
+  "eden-kernel": {
+    "conda_name": "eden-kernel",
+    "import_name": "eden",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eden-kernel"
+  },
+  "edfio": {
+    "conda_name": "edfio",
+    "import_name": "edfio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edfio"
+  },
+  "edflib-python": {
+    "conda_name": "edflib-python",
+    "import_name": "EDFlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edflib-python"
+  },
+  "edgar-sec": {
+    "conda_name": "edgar-sec",
+    "import_name": "edgar_sec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgar-sec"
+  },
+  "edgartools": {
+    "conda_name": "edgartools",
+    "import_name": "edgar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgartools"
+  },
+  "edgedb": {
+    "conda_name": "edgedb-python",
+    "import_name": "edgedb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgedb"
+  },
+  "edgetest": {
+    "conda_name": "edgetest",
+    "import_name": "edgetest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgetest"
+  },
+  "edgetest-conda": {
+    "conda_name": "edgetest-conda",
+    "import_name": "edgetest_conda.plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgetest-conda"
+  },
+  "edgetest-hub": {
+    "conda_name": "edgetest-hub",
+    "import_name": "edgetest_hub.plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgetest-hub"
+  },
+  "edgetest-pip-tools": {
+    "conda_name": "edgetest-pip-tools",
+    "import_name": "edgetest_pip_tools.plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edgetest-pip-tools"
+  },
+  "ediblepickle": {
+    "conda_name": "ediblepickle",
+    "import_name": "ediblepickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ediblepickle"
+  },
+  "edit-distance": {
+    "conda_name": "edit_distance",
+    "import_name": "edit_distance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edit-distance"
+  },
+  "editabletuple": {
+    "conda_name": "editabletuple",
+    "import_name": "editabletuple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "editabletuple"
+  },
+  "editdistance-s": {
+    "conda_name": "editdistance-s",
+    "import_name": "editdistance_s",
+    "mapping_source": "regro-bot",
+    "pypi_name": "editdistance-s"
+  },
+  "editor": {
+    "conda_name": "editor",
+    "import_name": "editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "editor"
+  },
+  "edlib": {
+    "conda_name": "edlib",
+    "import_name": "edlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edlib"
+  },
+  "edn-format": {
+    "conda_name": "edn_format",
+    "import_name": "edn_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edn-format"
+  },
+  "edt": {
+    "conda_name": "edt",
+    "import_name": "edt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "edt"
+  },
+  "ee-client": {
+    "conda_name": "ee-client",
+    "import_name": "eeclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ee-client"
+  },
+  "ee-extra": {
+    "conda_name": "ee_extra",
+    "import_name": "ee_extra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ee-extra"
+  },
+  "eefolium": {
+    "conda_name": "eefolium",
+    "import_name": "eefolium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eefolium"
+  },
+  "eeg-positions": {
+    "conda_name": "eeg_positions",
+    "import_name": "eeg_positions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eeg-positions"
+  },
+  "eeglabio": {
+    "conda_name": "eeglabio",
+    "import_name": "eeglabio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eeglabio"
+  },
+  "eegrasp": {
+    "conda_name": "eegrasp",
+    "import_name": "eegrasp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eegrasp"
+  },
+  "eeharvest": {
+    "conda_name": "eeharvest",
+    "import_name": "eeharvest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eeharvest"
+  },
+  "eelbrain": {
+    "conda_name": "eelbrain",
+    "import_name": "eelbrain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eelbrain"
+  },
+  "eemont": {
+    "conda_name": "eemont",
+    "import_name": "eemont",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eemont"
+  },
+  "eerepr": {
+    "conda_name": "eerepr",
+    "import_name": "eerepr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eerepr"
+  },
+  "eeyore": {
+    "conda_name": "eeyore",
+    "import_name": "eeyore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eeyore"
+  },
+  "effectsize": {
+    "conda_name": "effectsize",
+    "import_name": "effectsize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "effectsize"
+  },
+  "efficient-apriori": {
+    "conda_name": "efficient-apriori",
+    "import_name": "efficient_apriori",
+    "mapping_source": "regro-bot",
+    "pypi_name": "efficient-apriori"
+  },
+  "efficientnet-pytorch": {
+    "conda_name": "efficientnet-pytorch",
+    "import_name": "efficientnet_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "efficientnet-pytorch"
+  },
+  "egl-probe": {
+    "conda_name": "egl-probe",
+    "import_name": "egl_probe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "egl-probe"
+  },
+  "egobox": {
+    "conda_name": "egobox",
+    "import_name": "egobox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "egobox"
+  },
+  "eido": {
+    "conda_name": "eido",
+    "import_name": "eido",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eido"
+  },
+  "eight": {
+    "conda_name": "eight",
+    "import_name": "eight",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eight"
+  },
+  "eikon": {
+    "conda_name": "eikon",
+    "import_name": "eikon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eikon"
+  },
+  "einops": {
+    "conda_name": "einops",
+    "import_name": "einops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "einops"
+  },
+  "einsteinpy": {
+    "conda_name": "einsteinpy",
+    "import_name": "einsteinpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "einsteinpy"
+  },
+  "ejplugins": {
+    "conda_name": "ejplugins",
+    "import_name": "ejplugins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ejplugins"
+  },
+  "elabapy": {
+    "conda_name": "elabapy",
+    "import_name": "elabapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elabapy"
+  },
+  "eland": {
+    "conda_name": "eland",
+    "import_name": "eland",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eland"
+  },
+  "elapid": {
+    "conda_name": "elapid",
+    "import_name": "elapid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elapid"
+  },
+  "elara": {
+    "conda_name": "elara",
+    "import_name": "elara",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elara"
+  },
+  "elastic": {
+    "conda_name": "elastic",
+    "import_name": "elastic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elastic"
+  },
+  "elastic-apm": {
+    "conda_name": "elastic-apm",
+    "import_name": "elasticapm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elastic-apm"
+  },
+  "elastic-transport": {
+    "conda_name": "elastic-transport",
+    "import_name": "elastic_transport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elastic-transport"
+  },
+  "elastic-vasp": {
+    "conda_name": "elastic-vasp",
+    "import_name": "elastic_vasp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elastic-vasp"
+  },
+  "elasticipy": {
+    "conda_name": "elasticipy",
+    "import_name": "elasticipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elasticipy"
+  },
+  "elasticsearch": {
+    "conda_name": "elasticsearch",
+    "import_name": "elasticsearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elasticsearch"
+  },
+  "elasticsearch-dbapi": {
+    "conda_name": "elasticsearch-dbapi",
+    "import_name": "es",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elasticsearch-dbapi"
+  },
+  "elasticsearch-dsl": {
+    "conda_name": "elasticsearch-dsl",
+    "import_name": "elasticsearch_dsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elasticsearch-dsl"
+  },
+  "elegansbot": {
+    "conda_name": "elegansbot",
+    "import_name": "elegansbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elegansbot"
+  },
+  "elektronn": {
+    "conda_name": "elektronn",
+    "import_name": "elektronn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elektronn"
+  },
+  "elektronn2": {
+    "conda_name": "elektronn2",
+    "import_name": "elektronn2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elektronn2"
+  },
+  "element-coder": {
+    "conda_name": "element-coder",
+    "import_name": "element_coder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "element-coder"
+  },
+  "element-recognition": {
+    "conda_name": "element-recognition",
+    "import_name": "element_recognition",
+    "mapping_source": "regro-bot",
+    "pypi_name": "element-recognition"
+  },
+  "elementable": {
+    "conda_name": "elementable",
+    "import_name": "elementable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elementable"
+  },
+  "elementembeddings": {
+    "conda_name": "elementembeddings",
+    "import_name": "elementembeddings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elementembeddings"
+  },
+  "elementpath": {
+    "conda_name": "elementpath",
+    "import_name": "elementpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elementpath"
+  },
+  "elicito": {
+    "conda_name": "elicito",
+    "import_name": "elicito",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elicito"
+  },
+  "eliot": {
+    "conda_name": "eliot",
+    "import_name": "eliot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eliot"
+  },
+  "ellc": {
+    "conda_name": "ellc",
+    "import_name": "ellc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ellc"
+  },
+  "elphmod": {
+    "conda_name": "elphmod",
+    "import_name": "elphmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elphmod"
+  },
+  "elpigraph-python": {
+    "conda_name": "elpigraph-python",
+    "import_name": "elpigraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elpigraph-python"
+  },
+  "elyra": {
+    "conda_name": "elyra",
+    "import_name": "elyra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elyra"
+  },
+  "elyra-server": {
+    "conda_name": "elyra-server",
+    "import_name": "elyra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "elyra-server"
+  },
+  "emails": {
+    "conda_name": "emails",
+    "import_name": "emails",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emails"
+  },
+  "embeam": {
+    "conda_name": "embeam",
+    "import_name": "embeam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "embeam"
+  },
+  "embiggen": {
+    "conda_name": "embiggen",
+    "import_name": "embiggen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "embiggen"
+  },
+  "emc2": {
+    "conda_name": "emc2",
+    "import_name": "emc2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emc2"
+  },
+  "emcee": {
+    "conda_name": "emcee",
+    "import_name": "emcee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emcee"
+  },
+  "emd": {
+    "conda_name": "emd",
+    "import_name": "emd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emd"
+  },
+  "emd-signal": {
+    "conda_name": "emd-signal",
+    "import_name": "PyEMD",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emd-signal"
+  },
+  "emdfile": {
+    "conda_name": "emdfile",
+    "import_name": "emdfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emdfile"
+  },
+  "emfile": {
+    "conda_name": "emfile",
+    "import_name": "emfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emfile"
+  },
+  "emg3d": {
+    "conda_name": "emg3d",
+    "import_name": "emg3d.inversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emg3d"
+  },
+  "emicroml": {
+    "conda_name": "emicroml",
+    "import_name": "emicroml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emicroml"
+  },
+  "emmental": {
+    "conda_name": "emmental",
+    "import_name": "emmental",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emmental"
+  },
+  "emmet-api": {
+    "conda_name": "emmet-api",
+    "import_name": "emmet.api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emmet-api"
+  },
+  "emmet-builders": {
+    "conda_name": "emmet-builders",
+    "import_name": "emmet.builders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emmet-builders"
+  },
+  "emmet-core": {
+    "conda_name": "emmet-core",
+    "import_name": "emmet.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emmet-core"
+  },
+  "emoji": {
+    "conda_name": "emoji",
+    "import_name": "emoji",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emoji"
+  },
+  "emoji-extractor": {
+    "conda_name": "emoji-extractor",
+    "import_name": "emoji_extractor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emoji-extractor"
+  },
+  "emojis": {
+    "conda_name": "emojis",
+    "import_name": "emojis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emojis"
+  },
+  "empack": {
+    "conda_name": "empack",
+    "import_name": "empack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empack"
+  },
+  "empanada-dl": {
+    "conda_name": "empanada-dl",
+    "import_name": "empanada",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empanada-dl"
+  },
+  "empanada-napari": {
+    "conda_name": "empanada-napari",
+    "import_name": "empanada_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empanada-napari"
+  },
+  "empath": {
+    "conda_name": "empath",
+    "import_name": "empath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empath"
+  },
+  "emperor": {
+    "conda_name": "emperor",
+    "import_name": "emperor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "emperor"
+  },
+  "empiricaldist": {
+    "conda_name": "empiricaldist",
+    "import_name": "empiricaldist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empiricaldist"
+  },
+  "empix": {
+    "conda_name": "empix",
+    "import_name": "empix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empix"
+  },
+  "empty-files": {
+    "conda_name": "empty-files",
+    "import_name": "empty_files",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empty-files"
+  },
+  "empymod": {
+    "conda_name": "empymod",
+    "import_name": "empymod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empymod"
+  },
+  "empyre": {
+    "conda_name": "empyre",
+    "import_name": "empyre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empyre"
+  },
+  "empyrical": {
+    "conda_name": "empyrical",
+    "import_name": "empyrical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empyrical"
+  },
+  "empyrical-reloaded": {
+    "conda_name": "empyrical-reloaded",
+    "import_name": "empyrical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "empyrical-reloaded"
+  },
+  "enaml": {
+    "conda_name": "enaml",
+    "import_name": "enaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enaml"
+  },
+  "enaml-extensions": {
+    "conda_name": "enaml-extensions",
+    "import_name": "enamlext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enaml-extensions"
+  },
+  "encexp": {
+    "conda_name": "encexp",
+    "import_name": "encexp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "encexp"
+  },
+  "encor": {
+    "conda_name": "encor",
+    "import_name": "acor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "encor"
+  },
+  "endf": {
+    "conda_name": "endf",
+    "import_name": "endf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "endf"
+  },
+  "endf-parserpy": {
+    "conda_name": "endf-parserpy",
+    "import_name": "endf_parserpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "endf-parserpy"
+  },
+  "energymon": {
+    "conda_name": "energymon",
+    "import_name": "energymon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "energymon"
+  },
+  "enforce-typing": {
+    "conda_name": "enforce-typing",
+    "import_name": "enforce_typing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enforce-typing"
+  },
+  "enfrosp": {
+    "conda_name": "enfrosp",
+    "import_name": "enfrosp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enfrosp"
+  },
+  "enfrosp-enmapboxapp": {
+    "conda_name": "enfrosp_enmapboxapp",
+    "import_name": "enfrosp_enmapboxapp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enfrosp-enmapboxapp"
+  },
+  "engarde": {
+    "conda_name": "engarde",
+    "import_name": "engarde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "engarde"
+  },
+  "english": {
+    "conda_name": "english",
+    "import_name": "english",
+    "mapping_source": "regro-bot",
+    "pypi_name": "english"
+  },
+  "eniccs": {
+    "conda_name": "eniccs",
+    "import_name": "eniccs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eniccs"
+  },
+  "enlighten": {
+    "conda_name": "enlighten",
+    "import_name": "enlighten",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enlighten"
+  },
+  "enlopy": {
+    "conda_name": "enlopy",
+    "import_name": "enlopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enlopy"
+  },
+  "enpt": {
+    "conda_name": "enpt",
+    "import_name": "enpt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enpt"
+  },
+  "enpt-enmapboxapp": {
+    "conda_name": "enpt_enmapboxapp",
+    "import_name": "enpt_enmapboxapp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enpt-enmapboxapp"
+  },
+  "enrich": {
+    "conda_name": "enrich",
+    "import_name": "enrich",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enrich"
+  },
+  "ensaio": {
+    "conda_name": "ensaio",
+    "import_name": "ensaio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ensaio"
+  },
+  "enterprise-extensions": {
+    "conda_name": "enterprise_extensions",
+    "import_name": "enterprise_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enterprise-extensions"
+  },
+  "enterprise-pulsar": {
+    "conda_name": "enterprise-pulsar",
+    "import_name": "enterprise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enterprise-pulsar"
+  },
+  "entrypoint2": {
+    "conda_name": "entrypoint2",
+    "import_name": "entrypoint2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "entrypoint2"
+  },
+  "entrypoints": {
+    "conda_name": "entrypoints",
+    "import_name": "entrypoints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "entrypoints"
+  },
+  "entsoe-py": {
+    "conda_name": "entsoe-py",
+    "import_name": "entsoe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "entsoe-py"
+  },
+  "enum-compat": {
+    "conda_name": "enum-compat",
+    "import_name": "enum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enum-compat"
+  },
+  "enum-extend": {
+    "conda_name": "enum-extend",
+    "import_name": "enum_extend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "enum-extend"
+  },
+  "environ-config": {
+    "conda_name": "environ-config",
+    "import_name": "environ",
+    "mapping_source": "regro-bot",
+    "pypi_name": "environ-config"
+  },
+  "environment-settings": {
+    "conda_name": "environment_settings",
+    "import_name": "environment_settings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "environment-settings"
+  },
+  "environments-utils": {
+    "conda_name": "environments_utils",
+    "import_name": "environments_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "environments-utils"
+  },
+  "environs": {
+    "conda_name": "environs",
+    "import_name": "environs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "environs"
+  },
+  "envkernel": {
+    "conda_name": "envkernel",
+    "import_name": "envkernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "envkernel"
+  },
+  "envs": {
+    "conda_name": "envs",
+    "import_name": "envs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "envs"
+  },
+  "envs-manager": {
+    "conda_name": "envs-manager",
+    "import_name": "envs_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "envs-manager"
+  },
+  "envstack": {
+    "conda_name": "envstack",
+    "import_name": "envstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "envstack"
+  },
+  "envyaml": {
+    "conda_name": "envyaml",
+    "import_name": "envyaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "envyaml"
+  },
+  "eo-learn": {
+    "conda_name": "eo-learn",
+    "import_name": "eolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn"
+  },
+  "eo-learn-core": {
+    "conda_name": "eo-learn-core",
+    "import_name": "eolearn.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-core"
+  },
+  "eo-learn-coregistration": {
+    "conda_name": "eo-learn-coregistration",
+    "import_name": "eolearn.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-coregistration"
+  },
+  "eo-learn-features": {
+    "conda_name": "eo-learn-features",
+    "import_name": "eolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-features"
+  },
+  "eo-learn-geometry": {
+    "conda_name": "eo-learn-geometry",
+    "import_name": "eolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-geometry"
+  },
+  "eo-learn-io": {
+    "conda_name": "eo-learn-io",
+    "import_name": "eolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-io"
+  },
+  "eo-learn-mask": {
+    "conda_name": "eo-learn-mask",
+    "import_name": "eolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-mask"
+  },
+  "eo-learn-ml-tools": {
+    "conda_name": "eo-learn-ml-tools",
+    "import_name": "eolearn.ml_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-ml-tools"
+  },
+  "eo-learn-visualization": {
+    "conda_name": "eo-learn-visualization",
+    "import_name": "eolearn.visualization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eo-learn-visualization"
+  },
+  "eodatasets3": {
+    "conda_name": "eodatasets3",
+    "import_name": "eodatasets3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eodatasets3"
+  },
+  "eofs": {
+    "conda_name": "eofs",
+    "import_name": "eofs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eofs"
+  },
+  "eomaps": {
+    "conda_name": "eomaps",
+    "import_name": "eomaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eomaps"
+  },
+  "eonr": {
+    "conda_name": "eonr",
+    "import_name": "eonr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eonr"
+  },
+  "eoreader": {
+    "conda_name": "eoreader",
+    "import_name": "eoreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eoreader"
+  },
+  "eosets": {
+    "conda_name": "eosets",
+    "import_name": "eosets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eosets"
+  },
+  "eozilla": {
+    "conda_name": "eozilla",
+    "import_name": "eozilla",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eozilla"
+  },
+  "epc": {
+    "conda_name": "epc",
+    "import_name": "epc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epc"
+  },
+  "ephem": {
+    "conda_name": "ephem",
+    "import_name": "ephem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ephem"
+  },
+  "ephyviewer": {
+    "conda_name": "ephyviewer",
+    "import_name": "ephyviewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ephyviewer"
+  },
+  "epicscorelibs": {
+    "conda_name": "epicscorelibs",
+    "import_name": "epicscorelibs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epicscorelibs"
+  },
+  "epicsmacrolib": {
+    "conda_name": "epicsmacrolib",
+    "import_name": "epicsmacrolib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epicsmacrolib"
+  },
+  "epitools": {
+    "conda_name": "epitools",
+    "import_name": "epitools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epitools"
+  },
+  "epiweeks": {
+    "conda_name": "epiweeks4cf",
+    "import_name": "epiweeks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epiweeks"
+  },
+  "epsie": {
+    "conda_name": "epsie",
+    "import_name": "epsie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epsie"
+  },
+  "epydemix": {
+    "conda_name": "epydemix",
+    "import_name": "epydemix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "epydemix"
+  },
+  "eqt": {
+    "conda_name": "eqt",
+    "import_name": "eqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eqt"
+  },
+  "equalityml": {
+    "conda_name": "equalityml",
+    "import_name": "equalityml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "equalityml"
+  },
+  "equilibrator-api": {
+    "conda_name": "equilibrator-api",
+    "import_name": "equilibrator_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "equilibrator-api"
+  },
+  "equilibrator-cache": {
+    "conda_name": "equilibrator-cache",
+    "import_name": "equilibrator_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "equilibrator-cache"
+  },
+  "equilibrator-pathway": {
+    "conda_name": "equilibrator-pathway",
+    "import_name": "equilibrator_pathway",
+    "mapping_source": "regro-bot",
+    "pypi_name": "equilibrator-pathway"
+  },
+  "equinox": {
+    "conda_name": "equinox",
+    "import_name": "equinox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "equinox"
+  },
+  "era5cli": {
+    "conda_name": "era5cli",
+    "import_name": "era5cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "era5cli"
+  },
+  "erdantic": {
+    "conda_name": "erdantic",
+    "import_name": "erdantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "erdantic"
+  },
+  "erddap-python": {
+    "conda_name": "erddap-python",
+    "import_name": "erddapClient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "erddap-python"
+  },
+  "erddapcfg": {
+    "conda_name": "erddapcfg",
+    "import_name": "erddapcfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "erddapcfg"
+  },
+  "erddaplogs": {
+    "conda_name": "erddaplogs",
+    "import_name": "erddaplogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "erddaplogs"
+  },
+  "erlab": {
+    "conda_name": "erlab",
+    "import_name": "erlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "erlab"
+  },
+  "esbmtk": {
+    "conda_name": "esbmtk",
+    "import_name": "esbmtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esbmtk"
+  },
+  "esbonio": {
+    "conda_name": "esbonio",
+    "import_name": "esbonio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esbonio"
+  },
+  "escaping": {
+    "conda_name": "escaping",
+    "import_name": "escape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "escaping"
+  },
+  "escapism": {
+    "conda_name": "escapism",
+    "import_name": "escapism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "escapism"
+  },
+  "esda": {
+    "conda_name": "esda",
+    "import_name": "esda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esda"
+  },
+  "esgf-pyclient": {
+    "conda_name": "esgf-pyclient",
+    "import_name": "pyesgf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esgf-pyclient"
+  },
+  "esi-acme": {
+    "conda_name": "esi-acme",
+    "import_name": "acme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-acme"
+  },
+  "esi-extern-openquake": {
+    "conda_name": "esi-extern-openquake",
+    "import_name": "esi_extern_openquake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-extern-openquake"
+  },
+  "esi-syncopy": {
+    "conda_name": "esi-syncopy",
+    "import_name": "syncopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-syncopy"
+  },
+  "esi-utils-colors": {
+    "conda_name": "esi-utils-colors",
+    "import_name": "esi_utils_colors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-utils-colors"
+  },
+  "esi-utils-geo": {
+    "conda_name": "esi-utils-geo",
+    "import_name": "esi_utils_geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-utils-geo"
+  },
+  "esi-utils-io": {
+    "conda_name": "esi-utils-io",
+    "import_name": "esi_utils_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-utils-io"
+  },
+  "esi-utils-rupture": {
+    "conda_name": "esi-utils-rupture",
+    "import_name": "esi_utils_rupture",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-utils-rupture"
+  },
+  "esi-utils-time": {
+    "conda_name": "esi-utils-time",
+    "import_name": "esi_utils_time",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esi-utils-time"
+  },
+  "esmcol-validator": {
+    "conda_name": "esmcol-validator",
+    "import_name": "esmcol_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esmcol-validator"
+  },
+  "esmf-regrid": {
+    "conda_name": "iris-esmf-regrid",
+    "import_name": "esmf_regrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esmf-regrid"
+  },
+  "esmlab": {
+    "conda_name": "esmlab",
+    "import_name": "esmlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esmlab"
+  },
+  "esmtools": {
+    "conda_name": "esmtools",
+    "import_name": "esmtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esmtools"
+  },
+  "esmvaltool-sample-data": {
+    "conda_name": "esmvaltool-sample-data",
+    "import_name": "esmvaltool_sample_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esmvaltool-sample-data"
+  },
+  "esparto": {
+    "conda_name": "esparto",
+    "import_name": "esparto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esparto"
+  },
+  "espnet-model-zoo": {
+    "conda_name": "espnet_model_zoo",
+    "import_name": "espnet_model_zoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "espnet-model-zoo"
+  },
+  "esprima": {
+    "conda_name": "esprima-python",
+    "import_name": "esprima",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esprima"
+  },
+  "esptool": {
+    "conda_name": "esptool",
+    "import_name": "esptool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esptool"
+  },
+  "esridump": {
+    "conda_name": "esridump",
+    "import_name": "esridump",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esridump"
+  },
+  "estimagic": {
+    "conda_name": "estimagic",
+    "import_name": "optimagic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "estimagic"
+  },
+  "esy-osm-pbf": {
+    "conda_name": "esy.osm.pbf",
+    "import_name": "esy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "esy-osm-pbf"
+  },
+  "et-xmlfile": {
+    "conda_name": "et_xmlfile",
+    "import_name": "et_xmlfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "et-xmlfile"
+  },
+  "etcdpy": {
+    "conda_name": "etcdpy",
+    "import_name": "etcd3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "etcdpy"
+  },
+  "ete3": {
+    "conda_name": "ete3",
+    "import_name": "ete3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ete3"
+  },
+  "ete4": {
+    "conda_name": "ete4",
+    "import_name": "ete4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ete4"
+  },
+  "eth-abi": {
+    "conda_name": "eth-abi",
+    "import_name": "eth_abi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-abi"
+  },
+  "eth-event": {
+    "conda_name": "eth-event",
+    "import_name": "eth_event",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-event"
+  },
+  "eth-hash": {
+    "conda_name": "eth-hash",
+    "import_name": "eth_hash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-hash"
+  },
+  "eth-keyfile": {
+    "conda_name": "eth-keyfile",
+    "import_name": "eth_keyfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-keyfile"
+  },
+  "eth-keys": {
+    "conda_name": "eth-keys",
+    "import_name": "eth_keys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-keys"
+  },
+  "eth-rlp": {
+    "conda_name": "eth-rlp",
+    "import_name": "eth_rlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-rlp"
+  },
+  "eth-typing": {
+    "conda_name": "eth-typing",
+    "import_name": "eth_typing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-typing"
+  },
+  "eth-utils": {
+    "conda_name": "eth-utils",
+    "import_name": "eth_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eth-utils"
+  },
+  "etuples": {
+    "conda_name": "etuples",
+    "import_name": "etuples",
+    "mapping_source": "regro-bot",
+    "pypi_name": "etuples"
+  },
+  "eudist": {
+    "conda_name": "eudist",
+    "import_name": "eudist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eudist"
+  },
+  "eulexistdb": {
+    "conda_name": "eulexistdb",
+    "import_name": "eulexistdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eulexistdb"
+  },
+  "eulxml": {
+    "conda_name": "eulxml",
+    "import_name": "eulxml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eulxml"
+  },
+  "eumdac": {
+    "conda_name": "eumdac",
+    "import_name": "eumdac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eumdac"
+  },
+  "euphonic": {
+    "conda_name": "euphonic",
+    "import_name": "euphonic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "euphonic"
+  },
+  "euporie": {
+    "conda_name": "euporie",
+    "import_name": "euporie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "euporie"
+  },
+  "eva-lcd": {
+    "conda_name": "eva-lcd",
+    "import_name": "Eva",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eva-lcd"
+  },
+  "eval-type-backport": {
+    "conda_name": "eval_type_backport",
+    "import_name": "eval_type_backport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eval-type-backport"
+  },
+  "evalica": {
+    "conda_name": "evalica",
+    "import_name": "evalica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evalica"
+  },
+  "evargs": {
+    "conda_name": "evargs",
+    "import_name": "evargs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evargs"
+  },
+  "evdev": {
+    "conda_name": "evdev",
+    "import_name": "evdev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evdev"
+  },
+  "event-model": {
+    "conda_name": "event-model",
+    "import_name": "event_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "event-model"
+  },
+  "eventemitter": {
+    "conda_name": "eventemitter",
+    "import_name": "eventemitter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eventemitter"
+  },
+  "eventio": {
+    "conda_name": "eventio",
+    "import_name": "eventio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eventio"
+  },
+  "eventkit": {
+    "conda_name": "eventkit",
+    "import_name": "eventkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eventkit"
+  },
+  "ever-beta": {
+    "conda_name": "ever-beta",
+    "import_name": "ever",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ever-beta"
+  },
+  "evfuncs": {
+    "conda_name": "evfuncs",
+    "import_name": "evfuncs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evfuncs"
+  },
+  "evodag": {
+    "conda_name": "evodag",
+    "import_name": "EvoDAG",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evodag"
+  },
+  "evojax": {
+    "conda_name": "evojax",
+    "import_name": "evojax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evojax"
+  },
+  "evomsa": {
+    "conda_name": "evomsa",
+    "import_name": "EvoMSA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evomsa"
+  },
+  "evv4esm": {
+    "conda_name": "evv4esm",
+    "import_name": "evv4esm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "evv4esm"
+  },
+  "ewah-bool-utils": {
+    "conda_name": "ewah-bool-utils",
+    "import_name": "ewah_bool_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ewah-bool-utils"
+  },
+  "ewmh": {
+    "conda_name": "ewmh",
+    "import_name": "ewmh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ewmh"
+  },
+  "exactextract": {
+    "conda_name": "exactextract",
+    "import_name": "exactextract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exactextract"
+  },
+  "excelcsvparsehelper": {
+    "conda_name": "excelcsvparsehelper",
+    "import_name": "ExcelCSVParseHelper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "excelcsvparsehelper"
+  },
+  "excels2vensim": {
+    "conda_name": "excels2vensim",
+    "import_name": "excels2vensim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "excels2vensim"
+  },
+  "exceptiongroup": {
+    "conda_name": "exceptiongroup",
+    "import_name": "exceptiongroup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exceptiongroup"
+  },
+  "exchange-calendars": {
+    "conda_name": "exchange-calendars",
+    "import_name": "exchange_calendars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exchange-calendars"
+  },
+  "exchangelib": {
+    "conda_name": "exchangelib",
+    "import_name": "exchangelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exchangelib"
+  },
+  "exdown": {
+    "conda_name": "exdown",
+    "import_name": "exdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exdown"
+  },
+  "exec-wrappers": {
+    "conda_name": "exec-wrappers",
+    "import_name": "exec_wrappers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exec-wrappers"
+  },
+  "execnet": {
+    "conda_name": "execnet",
+    "import_name": "execnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "execnet"
+  },
+  "executing": {
+    "conda_name": "executing",
+    "import_name": "executing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "executing"
+  },
+  "executor": {
+    "conda_name": "executor",
+    "import_name": "executor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "executor"
+  },
+  "executorlib-core": {
+    "conda_name": "executorlib-core",
+    "import_name": "executorlib_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "executorlib-core"
+  },
+  "exejs": {
+    "conda_name": "exejs",
+    "import_name": "exejs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exejs"
+  },
+  "exhale": {
+    "conda_name": "exhale",
+    "import_name": "exhale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exhale"
+  },
+  "exifread": {
+    "conda_name": "exifread",
+    "import_name": "exifread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exifread"
+  },
+  "exifreader": {
+    "conda_name": "exifreader",
+    "import_name": "exifreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exifreader"
+  },
+  "exn": {
+    "conda_name": "exn",
+    "import_name": "exn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exn"
+  },
+  "exo-puppies": {
+    "conda_name": "exo_puppies",
+    "import_name": "puppies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exo-puppies"
+  },
+  "exonote": {
+    "conda_name": "exonote",
+    "import_name": "exonote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exonote"
+  },
+  "exoplanet": {
+    "conda_name": "exoplanet",
+    "import_name": "exoplanet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exoplanet"
+  },
+  "exoplanet-core": {
+    "conda_name": "exoplanet-core",
+    "import_name": "exoplanet_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exoplanet-core"
+  },
+  "expandvars": {
+    "conda_name": "expandvars",
+    "import_name": "expandvars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expandvars"
+  },
+  "expects": {
+    "conda_name": "expects",
+    "import_name": "expects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expects"
+  },
+  "expecttest": {
+    "conda_name": "expecttest",
+    "import_name": "expecttest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expecttest"
+  },
+  "expelliarmus": {
+    "conda_name": "expelliarmus",
+    "import_name": "expelliarmus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expelliarmus"
+  },
+  "expiringdict": {
+    "conda_name": "expiringdict",
+    "import_name": "expiringdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expiringdict"
+  },
+  "explainerdashboard": {
+    "conda_name": "explainerdashboard",
+    "import_name": "explainerdashboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "explainerdashboard"
+  },
+  "expression": {
+    "conda_name": "expression",
+    "import_name": "expression",
+    "mapping_source": "regro-bot",
+    "pypi_name": "expression"
+  },
+  "exrex": {
+    "conda_name": "exrex",
+    "import_name": "exrex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exrex"
+  },
+  "exspy": {
+    "conda_name": "exspy",
+    "import_name": "exspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "exspy"
+  },
+  "extendedjson": {
+    "conda_name": "extendedjson",
+    "import_name": "extendedjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extendedjson"
+  },
+  "extension-helpers": {
+    "conda_name": "extension-helpers",
+    "import_name": "extension_helpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extension-helpers"
+  },
+  "extensisq": {
+    "conda_name": "extensisq",
+    "import_name": "extensisq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extensisq"
+  },
+  "extern": {
+    "conda_name": "extern",
+    "import_name": "extern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extern"
+  },
+  "external-systems": {
+    "conda_name": "external-systems",
+    "import_name": "external_systems",
+    "mapping_source": "regro-bot",
+    "pypi_name": "external-systems"
+  },
+  "extinction": {
+    "conda_name": "extinction",
+    "import_name": "extinction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extinction"
+  },
+  "extract-msg": {
+    "conda_name": "msg-extractor",
+    "import_name": "extract_msg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extract-msg"
+  },
+  "extranormal3": {
+    "conda_name": "extranormal3",
+    "import_name": "extranormal3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extranormal3"
+  },
+  "extras": {
+    "conda_name": "extras",
+    "import_name": "extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "extras"
+  },
+  "eyedentify3d": {
+    "conda_name": "eyedentify3d",
+    "import_name": "eyedentify3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eyedentify3d"
+  },
+  "ez-zarr": {
+    "conda_name": "ez-zarr",
+    "import_name": "ez_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ez-zarr"
+  },
+  "ezca": {
+    "conda_name": "ezca",
+    "import_name": "ezca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ezca"
+  },
+  "ezconda": {
+    "conda_name": "ezconda",
+    "import_name": "ezconda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ezconda"
+  },
+  "ezdxf": {
+    "conda_name": "ezdxf",
+    "import_name": "ezdxf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ezdxf"
+  },
+  "ezodf": {
+    "conda_name": "ezodf",
+    "import_name": "ezodf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ezodf"
+  },
+  "eztaox": {
+    "conda_name": "eztaox",
+    "import_name": "eztaox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "eztaox"
+  },
+  "ezyrb": {
+    "conda_name": "ezyrb",
+    "import_name": "ezyrb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ezyrb"
+  },
+  "f3dasm": {
+    "conda_name": "f3dasm",
+    "import_name": "f3dasm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "f3dasm"
+  },
+  "f90nml": {
+    "conda_name": "f90nml",
+    "import_name": "f90nml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "f90nml"
+  },
+  "f90wrap": {
+    "conda_name": "f90wrap",
+    "import_name": "f90wrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "f90wrap"
+  },
+  "fa2": {
+    "conda_name": "fa2",
+    "import_name": "fa2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fa2"
+  },
+  "fa2-modified": {
+    "conda_name": "fa2_modified",
+    "import_name": "fa2_modified",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fa2-modified"
+  },
+  "fabba": {
+    "conda_name": "fabba",
+    "import_name": "fABBA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fabba"
+  },
+  "fabdem": {
+    "conda_name": "fabdem",
+    "import_name": "fabdem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fabdem"
+  },
+  "fabio": {
+    "conda_name": "fabio",
+    "import_name": "fabio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fabio"
+  },
+  "fabric": {
+    "conda_name": "fabric",
+    "import_name": "fabric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fabric"
+  },
+  "fabric3": {
+    "conda_name": "fabric3",
+    "import_name": "fabric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fabric3"
+  },
+  "face-recognition": {
+    "conda_name": "face_recognition",
+    "import_name": "face_recognition",
+    "mapping_source": "regro-bot",
+    "pypi_name": "face-recognition"
+  },
+  "face-recognition-models": {
+    "conda_name": "face_recognition_models",
+    "import_name": "face_recognition_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "face-recognition-models"
+  },
+  "facetorch": {
+    "conda_name": "facetorch",
+    "import_name": "facetorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "facetorch"
+  },
+  "facit": {
+    "conda_name": "facit",
+    "import_name": "facit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "facit"
+  },
+  "factor-analyzer": {
+    "conda_name": "factor-analyzer",
+    "import_name": "factor_analyzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "factor-analyzer"
+  },
+  "factory-boy": {
+    "conda_name": "factory_boy",
+    "import_name": "factory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "factory-boy"
+  },
+  "faicons": {
+    "conda_name": "faicons",
+    "import_name": "faicons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "faicons"
+  },
+  "fair": {
+    "conda_name": "fair",
+    "import_name": "fair",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fair"
+  },
+  "fairchem-core": {
+    "conda_name": "fairchem-core",
+    "import_name": "fairchem.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fairchem-core"
+  },
+  "fairly": {
+    "conda_name": "fairly",
+    "import_name": "fairly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fairly"
+  },
+  "fake-factory": {
+    "conda_name": "fake-factory",
+    "import_name": "faker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fake-factory"
+  },
+  "fake-useragent": {
+    "conda_name": "fake-useragent",
+    "import_name": "fake_useragent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fake-useragent"
+  },
+  "fakecbed": {
+    "conda_name": "fakecbed",
+    "import_name": "fakecbed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fakecbed"
+  },
+  "faker": {
+    "conda_name": "faker",
+    "import_name": "faker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "faker"
+  },
+  "falcon-auth": {
+    "conda_name": "falcon-auth",
+    "import_name": "falcon_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "falcon-auth"
+  },
+  "falcon-require-https": {
+    "conda_name": "falcon-require-https",
+    "import_name": "falcon_require_https",
+    "mapping_source": "regro-bot",
+    "pypi_name": "falcon-require-https"
+  },
+  "fancy-collections": {
+    "conda_name": "fancy-collections",
+    "import_name": "fancy_collections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fancy-collections"
+  },
+  "fancycompleter": {
+    "conda_name": "fancycompleter",
+    "import_name": "fancycompleter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fancycompleter"
+  },
+  "fancyimpute": {
+    "conda_name": "fancyimpute",
+    "import_name": "fancyimpute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fancyimpute"
+  },
+  "fancylog": {
+    "conda_name": "fancylog",
+    "import_name": "fancylog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fancylog"
+  },
+  "fancytypes": {
+    "conda_name": "fancytypes",
+    "import_name": "fancytypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fancytypes"
+  },
+  "fanstatic": {
+    "conda_name": "fanstatic",
+    "import_name": "fanstatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fanstatic"
+  },
+  "faqtory": {
+    "conda_name": "faqtory",
+    "import_name": "faqtory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "faqtory"
+  },
+  "farama-notifications": {
+    "conda_name": "farama-notifications",
+    "import_name": "farama_notifications",
+    "mapping_source": "regro-bot",
+    "pypi_name": "farama-notifications"
+  },
+  "farm": {
+    "conda_name": "farm",
+    "import_name": "farm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "farm"
+  },
+  "farmos": {
+    "conda_name": "farmos",
+    "import_name": "farmOS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "farmos"
+  },
+  "fast-array-utils": {
+    "conda_name": "fast-array-utils",
+    "import_name": "fast_array_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-array-utils"
+  },
+  "fast-barnes-py": {
+    "conda_name": "fast-barnes-py",
+    "import_name": "fastbarnes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-barnes-py"
+  },
+  "fast-bss-eval": {
+    "conda_name": "fast-bss-eval",
+    "import_name": "fast_bss_eval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-bss-eval"
+  },
+  "fast-dp": {
+    "conda_name": "fast_dp",
+    "import_name": "fast_dp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-dp"
+  },
+  "fast-hdbscan": {
+    "conda_name": "fast_hdbscan",
+    "import_name": "fast_hdbscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-hdbscan"
+  },
+  "fast-histogram": {
+    "conda_name": "fast-histogram",
+    "import_name": "fast_histogram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-histogram"
+  },
+  "fast-matrix-market": {
+    "conda_name": "fast_matrix_market",
+    "import_name": "fast_matrix_market",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-matrix-market"
+  },
+  "fast-plscan": {
+    "conda_name": "fast-plscan",
+    "import_name": "fast_plscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-plscan"
+  },
+  "fast-pt": {
+    "conda_name": "fast-pt",
+    "import_name": "fastpt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-pt"
+  },
+  "fast-soup": {
+    "conda_name": "fast-soup",
+    "import_name": "fast_soup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-soup"
+  },
+  "fast-vindex": {
+    "conda_name": "fast_vindex",
+    "import_name": "fast_vindex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast-vindex"
+  },
+  "fast3tree": {
+    "conda_name": "fast3tree",
+    "import_name": "fast3tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fast3tree"
+  },
+  "fasta": {
+    "conda_name": "fasta",
+    "import_name": "fasta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fasta"
+  },
+  "fastai": {
+    "conda_name": "fastai",
+    "import_name": "fastai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastai"
+  },
+  "fastapi-admin": {
+    "conda_name": "fastapi-admin",
+    "import_name": "fastapi_admin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-admin"
+  },
+  "fastapi-azure-auth": {
+    "conda_name": "fastapi-azure-auth",
+    "import_name": "fastapi_azure_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-azure-auth"
+  },
+  "fastapi-cache2": {
+    "conda_name": "fastapi-cache2",
+    "import_name": "fastapi_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-cache2"
+  },
+  "fastapi-crudrouter": {
+    "conda_name": "fastapi-crudrouter",
+    "import_name": "fastapi_crudrouter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-crudrouter"
+  },
+  "fastapi-healthcheck": {
+    "conda_name": "fastapi-healthcheck",
+    "import_name": "fastapi_healthcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-healthcheck"
+  },
+  "fastapi-mcp": {
+    "conda_name": "fastapi-mcp",
+    "import_name": "fastapi_mcp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-mcp"
+  },
+  "fastapi-mvc": {
+    "conda_name": "fastapi-mvc",
+    "import_name": "fastapi_mvc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-mvc"
+  },
+  "fastapi-oidc": {
+    "conda_name": "fastapi-oidc",
+    "import_name": "fastapi_oidc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-oidc"
+  },
+  "fastapi-pagination": {
+    "conda_name": "fastapi-pagination",
+    "import_name": "fastapi_pagination",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-pagination"
+  },
+  "fastapi-socketio": {
+    "conda_name": "fastapi-socketio",
+    "import_name": "fastapi_socketio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-socketio"
+  },
+  "fastapi-third-party-auth": {
+    "conda_name": "fastapi-third-party-auth",
+    "import_name": "fastapi_third_party_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-third-party-auth"
+  },
+  "fastapi-users-db-sqlalchemy": {
+    "conda_name": "fastapi-users-db-sqlalchemy",
+    "import_name": "fastapi_users_db_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastapi-users-db-sqlalchemy"
+  },
+  "fastbpe": {
+    "conda_name": "fastbpe",
+    "import_name": "fastBPE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastbpe"
+  },
+  "fastcdc": {
+    "conda_name": "fastcdc",
+    "import_name": "fastcdc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastcdc"
+  },
+  "fastclasses-json": {
+    "conda_name": "fastclasses-json",
+    "import_name": "fastclasses_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastclasses-json"
+  },
+  "fastdfe": {
+    "conda_name": "fastdfe",
+    "import_name": "fastdfe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastdfe"
+  },
+  "fastdiff": {
+    "conda_name": "fastdiff",
+    "import_name": "fastdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastdiff"
+  },
+  "fastdownload": {
+    "conda_name": "fastdownload",
+    "import_name": "fastdownload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastdownload"
+  },
+  "fastds": {
+    "conda_name": "fastds",
+    "import_name": "fds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastds"
+  },
+  "fastdtw": {
+    "conda_name": "fastdtw",
+    "import_name": "fastdtw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastdtw"
+  },
+  "fasteners": {
+    "conda_name": "fasteners",
+    "import_name": "fasteners",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fasteners"
+  },
+  "fastentrypoints": {
+    "conda_name": "fastentrypoints",
+    "import_name": "fastentrypoints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastentrypoints"
+  },
+  "faster-coco-eval": {
+    "conda_name": "faster-coco-eval",
+    "import_name": "faster_coco_eval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "faster-coco-eval"
+  },
+  "fastf1": {
+    "conda_name": "fastf1",
+    "import_name": "fastf1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastf1"
+  },
+  "fastfilters2": {
+    "conda_name": "fastfilters2",
+    "import_name": "fastfilters2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastfilters2"
+  },
+  "fastimport": {
+    "conda_name": "fastimport",
+    "import_name": "fastimport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastimport"
+  },
+  "fastjmd95": {
+    "conda_name": "fastjmd95",
+    "import_name": "fastjmd95",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastjmd95"
+  },
+  "fastjsonschema": {
+    "conda_name": "python-fastjsonschema",
+    "import_name": "fastjsonschema",
+    "mapping_source": "static",
+    "pypi_name": "fastjsonschema"
+  },
+  "fastkml": {
+    "conda_name": "fastkml",
+    "import_name": "fastkml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastkml"
+  },
+  "fastnanquantile": {
+    "conda_name": "fastnanquantile",
+    "import_name": "fastnanquantile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastnanquantile"
+  },
+  "fastnml": {
+    "conda_name": "fastnml",
+    "import_name": "fastnml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastnml"
+  },
+  "fastparquet": {
+    "conda_name": "fastparquet",
+    "import_name": "fastparquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastparquet"
+  },
+  "fastpath": {
+    "conda_name": "fastpath",
+    "import_name": "fastpathz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastpath"
+  },
+  "fastprogress": {
+    "conda_name": "fastprogress",
+    "import_name": "fastprogress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastprogress"
+  },
+  "fastreg": {
+    "conda_name": "fastreg",
+    "import_name": "fastreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastreg"
+  },
+  "fastremap": {
+    "conda_name": "fastremap",
+    "import_name": "fastremap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastremap"
+  },
+  "fastscape": {
+    "conda_name": "fastscape",
+    "import_name": "fastscape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastscape"
+  },
+  "fastshermanmorrison-pulsar": {
+    "conda_name": "fastshermanmorrison-pulsar",
+    "import_name": "fastshermanmorrison",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastshermanmorrison-pulsar"
+  },
+  "fastsrm": {
+    "conda_name": "fastsrm",
+    "import_name": "fastsrm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastsrm"
+  },
+  "fasttransform": {
+    "conda_name": "fasttransform",
+    "import_name": "fasttransform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fasttransform"
+  },
+  "fasttreeshap": {
+    "conda_name": "fasttreeshap",
+    "import_name": "fasttreeshap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fasttreeshap"
+  },
+  "fastuuid": {
+    "conda_name": "fastuuid",
+    "import_name": "fastuuid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastuuid"
+  },
+  "fastwsgi": {
+    "conda_name": "fastwsgi",
+    "import_name": "fastwsgi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fastwsgi"
+  },
+  "fatiando": {
+    "conda_name": "fatiando",
+    "import_name": "fatiando",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fatiando"
+  },
+  "fault-localization": {
+    "conda_name": "fault-localization",
+    "import_name": "fault_localization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fault-localization"
+  },
+  "fbdfile": {
+    "conda_name": "fbdfile",
+    "import_name": "fbdfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fbdfile"
+  },
+  "fbpca": {
+    "conda_name": "fbpca",
+    "import_name": "fbpca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fbpca"
+  },
+  "fcmaes": {
+    "conda_name": "fcmaes",
+    "import_name": "fcmaes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fcmaes"
+  },
+  "fcos": {
+    "conda_name": "fcos",
+    "import_name": "fcos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fcos"
+  },
+  "fcsparser": {
+    "conda_name": "fcsparser",
+    "import_name": "fcsparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fcsparser"
+  },
+  "fcswrite": {
+    "conda_name": "fcswrite",
+    "import_name": "fcswrite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fcswrite"
+  },
+  "fdasrsf": {
+    "conda_name": "fdasrsf",
+    "import_name": "fdasrsf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fdasrsf"
+  },
+  "fdb": {
+    "conda_name": "fdb",
+    "import_name": "fdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fdb"
+  },
+  "fdm": {
+    "conda_name": "fdm",
+    "import_name": "fdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fdm"
+  },
+  "fdtd": {
+    "conda_name": "fdtd",
+    "import_name": "fdtd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fdtd"
+  },
+  "feather-format": {
+    "conda_name": "feather-format",
+    "import_name": "feather",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feather-format"
+  },
+  "featherhelper": {
+    "conda_name": "featherhelper",
+    "import_name": "featherhelper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featherhelper"
+  },
+  "feature-engine": {
+    "conda_name": "feature_engine",
+    "import_name": "feature_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feature-engine"
+  },
+  "featureclass": {
+    "conda_name": "featureclass",
+    "import_name": "featureclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featureclass"
+  },
+  "featuremap-learn": {
+    "conda_name": "featuremap-learn",
+    "import_name": "featuremap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featuremap-learn"
+  },
+  "featuretools": {
+    "conda_name": "featuretools",
+    "import_name": "featuretools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featuretools"
+  },
+  "featuretools-sql": {
+    "conda_name": "featuretools_sql",
+    "import_name": "featuretools_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featuretools-sql"
+  },
+  "featuretools-tsfresh-primitives": {
+    "conda_name": "featuretools-tsfresh-primitives",
+    "import_name": "featuretools_tsfresh_primitives",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featuretools-tsfresh-primitives"
+  },
+  "featurewiz": {
+    "conda_name": "featurewiz",
+    "import_name": "featurewiz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "featurewiz"
+  },
+  "fed-rag": {
+    "conda_name": "fed-rag",
+    "import_name": "fed_rag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fed-rag"
+  },
+  "fedfred": {
+    "conda_name": "fedfred",
+    "import_name": "fedfred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fedfred"
+  },
+  "feedfinder2": {
+    "conda_name": "feedfinder2",
+    "import_name": "feedfinder2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feedfinder2"
+  },
+  "feedgen": {
+    "conda_name": "feedgen",
+    "import_name": "feedgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feedgen"
+  },
+  "feedgenerator": {
+    "conda_name": "feedgenerator",
+    "import_name": "feedgenerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feedgenerator"
+  },
+  "feedparser": {
+    "conda_name": "feedparser",
+    "import_name": "feedparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feedparser"
+  },
+  "feets": {
+    "conda_name": "feets",
+    "import_name": "feets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "feets"
+  },
+  "felling": {
+    "conda_name": "felling",
+    "import_name": "felling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "felling"
+  },
+  "felupe": {
+    "conda_name": "felupe",
+    "import_name": "felupe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "felupe"
+  },
+  "femtoscope": {
+    "conda_name": "femtoscope",
+    "import_name": "femtoscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "femtoscope"
+  },
+  "fenicsx-beat": {
+    "conda_name": "fenicsx-beat",
+    "import_name": "beat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fenicsx-beat"
+  },
+  "fenicsx-ldrb": {
+    "conda_name": "fenicsx-ldrb",
+    "import_name": "ldrb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fenicsx-ldrb"
+  },
+  "fenicsx-pulse": {
+    "conda_name": "fenicsx-pulse",
+    "import_name": "fenicsx_pulse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fenicsx-pulse"
+  },
+  "festim": {
+    "conda_name": "festim",
+    "import_name": "festim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "festim"
+  },
+  "fett": {
+    "conda_name": "fett",
+    "import_name": "fett",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fett"
+  },
+  "ff3": {
+    "conda_name": "python-fpe",
+    "import_name": "ff3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ff3"
+  },
+  "ffmpy": {
+    "conda_name": "ffmpy",
+    "import_name": "ffmpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ffmpy"
+  },
+  "ffn": {
+    "conda_name": "ffn",
+    "import_name": "ffn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ffn"
+  },
+  "ffpiv": {
+    "conda_name": "ffpiv",
+    "import_name": "ffpiv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ffpiv"
+  },
+  "fft-conv-pytorch": {
+    "conda_name": "fft-conv-pytorch",
+    "import_name": "fft_conv_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fft-conv-pytorch"
+  },
+  "fftlog": {
+    "conda_name": "fftlog",
+    "import_name": "fftlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fftlog"
+  },
+  "fgclustering": {
+    "conda_name": "fgclustering",
+    "import_name": "fgclustering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fgclustering"
+  },
+  "fgmetric": {
+    "conda_name": "fgmetric",
+    "import_name": "fgmetric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fgmetric"
+  },
+  "fiatlux": {
+    "conda_name": "fiatlux",
+    "import_name": "fiatlux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fiatlux"
+  },
+  "fica": {
+    "conda_name": "fica",
+    "import_name": "fica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fica"
+  },
+  "fides": {
+    "conda_name": "fides",
+    "import_name": "fides",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fides"
+  },
+  "fido2": {
+    "conda_name": "fido2",
+    "import_name": "fido2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fido2"
+  },
+  "fief-client": {
+    "conda_name": "fief-client-fastapi",
+    "import_name": "fief_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fief-client"
+  },
+  "fiftyone": {
+    "conda_name": "fiftyone",
+    "import_name": "fiftyone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fiftyone"
+  },
+  "figanos": {
+    "conda_name": "figanos",
+    "import_name": "figanos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "figanos"
+  },
+  "figpager": {
+    "conda_name": "figpager",
+    "import_name": "figpager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "figpager"
+  },
+  "figuregenerator": {
+    "conda_name": "figuregenerator",
+    "import_name": "FigureGenerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "figuregenerator"
+  },
+  "file-captain": {
+    "conda_name": "file-captain",
+    "import_name": "file_captain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "file-captain"
+  },
+  "file-tree": {
+    "conda_name": "file-tree",
+    "import_name": "file_tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "file-tree"
+  },
+  "file-tree-fsl": {
+    "conda_name": "file-tree-fsl",
+    "import_name": "file_tree_fsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "file-tree-fsl"
+  },
+  "filecache": {
+    "conda_name": "filecache",
+    "import_name": "filecache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filecache"
+  },
+  "filechunkio": {
+    "conda_name": "filechunkio",
+    "import_name": "filechunkio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filechunkio"
+  },
+  "filefisher": {
+    "conda_name": "filefisher",
+    "import_name": "filefisher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filefisher"
+  },
+  "filelock": {
+    "conda_name": "filelock",
+    "import_name": "filelock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filelock"
+  },
+  "filemagic": {
+    "conda_name": "filemagic",
+    "import_name": "magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filemagic"
+  },
+  "filequery": {
+    "conda_name": "filequery",
+    "import_name": "filequery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filequery"
+  },
+  "filesdb": {
+    "conda_name": "filesdb",
+    "import_name": "filesdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filesdb"
+  },
+  "fileseq": {
+    "conda_name": "fileseq",
+    "import_name": "fileseq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fileseq"
+  },
+  "filetype": {
+    "conda_name": "filetype",
+    "import_name": "filetype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filetype"
+  },
+  "fill-voids": {
+    "conda_name": "fill-voids",
+    "import_name": "fill_voids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fill-voids"
+  },
+  "filterpy": {
+    "conda_name": "filterpy",
+    "import_name": "filterpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "filterpy"
+  },
+  "finam": {
+    "conda_name": "finam",
+    "import_name": "finam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finam"
+  },
+  "find-kedro": {
+    "conda_name": "find-kedro",
+    "import_name": "find_kedro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "find-kedro"
+  },
+  "findblas": {
+    "conda_name": "findblas",
+    "import_name": "findblas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "findblas"
+  },
+  "findiff": {
+    "conda_name": "findiff",
+    "import_name": "findiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "findiff"
+  },
+  "findimports": {
+    "conda_name": "findimports",
+    "import_name": "findimports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "findimports"
+  },
+  "findspark": {
+    "conda_name": "findspark",
+    "import_name": "findspark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "findspark"
+  },
+  "finesse": {
+    "conda_name": "finesse",
+    "import_name": "finesse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finesse"
+  },
+  "finitediff": {
+    "conda_name": "finitediff",
+    "import_name": "finitediff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finitediff"
+  },
+  "finlogic": {
+    "conda_name": "finlogic",
+    "import_name": "finlogic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finlogic"
+  },
+  "finmind": {
+    "conda_name": "finmind",
+    "import_name": "FinMind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finmind"
+  },
+  "finnhub-python": {
+    "conda_name": "finnhub-python",
+    "import_name": "finnhub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finnhub-python"
+  },
+  "finstruments": {
+    "conda_name": "finstruments",
+    "import_name": "finstruments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finstruments"
+  },
+  "finta": {
+    "conda_name": "finta",
+    "import_name": "finta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finta"
+  },
+  "fints": {
+    "conda_name": "fints",
+    "import_name": "fints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fints"
+  },
+  "finvader": {
+    "conda_name": "finvader",
+    "import_name": "finvader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "finvader"
+  },
+  "fiona": {
+    "conda_name": "fiona",
+    "import_name": "fiona",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fiona"
+  },
+  "fire": {
+    "conda_name": "fire",
+    "import_name": "fire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fire"
+  },
+  "firefly-client": {
+    "conda_name": "firefly-client",
+    "import_name": "firefly_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "firefly-client"
+  },
+  "fireworks-ai": {
+    "conda_name": "fireworks-ai",
+    "import_name": "fireworks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fireworks-ai"
+  },
+  "firewxpy": {
+    "conda_name": "firewxpy",
+    "import_name": "firewxpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "firewxpy"
+  },
+  "firthmodels": {
+    "conda_name": "firthmodels",
+    "import_name": "firthmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "firthmodels"
+  },
+  "fiscalyear": {
+    "conda_name": "fiscalyear",
+    "import_name": "fiscalyear",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fiscalyear"
+  },
+  "fishersapi": {
+    "conda_name": "fishersapi",
+    "import_name": "fishersapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fishersapi"
+  },
+  "fissix": {
+    "conda_name": "fissix",
+    "import_name": "fissix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fissix"
+  },
+  "fisspy": {
+    "conda_name": "fisspy",
+    "import_name": "fisspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fisspy"
+  },
+  "fisx": {
+    "conda_name": "fisx",
+    "import_name": "fisx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fisx"
+  },
+  "fits2image": {
+    "conda_name": "fits2image",
+    "import_name": "fits2image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fits2image"
+  },
+  "fitsnap3": {
+    "conda_name": "fitsnap3",
+    "import_name": "fitsnap3lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fitsnap3"
+  },
+  "fixedint": {
+    "conda_name": "fixedint",
+    "import_name": "fixedint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixedint"
+  },
+  "fixedwidth": {
+    "conda_name": "fixedwidth",
+    "import_name": "fixedwidth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixedwidth"
+  },
+  "fixie": {
+    "conda_name": "fixie",
+    "import_name": "fixie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixie"
+  },
+  "fixie-batch": {
+    "conda_name": "fixie-batch",
+    "import_name": "fixie_batch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixie-batch"
+  },
+  "fixie-creds": {
+    "conda_name": "fixie-creds",
+    "import_name": "fixie_creds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixie-creds"
+  },
+  "fixie-data": {
+    "conda_name": "fixie-data",
+    "import_name": "fixie_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixie-data"
+  },
+  "fixit": {
+    "conda_name": "fixit",
+    "import_name": "fixit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fixit"
+  },
+  "flake518": {
+    "conda_name": "flake518",
+    "import_name": "flake518",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake518"
+  },
+  "flake8-annotations": {
+    "conda_name": "flake8-annotations",
+    "import_name": "flake8_annotations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-annotations"
+  },
+  "flake8-bandit": {
+    "conda_name": "flake8-bandit",
+    "import_name": "flake8_bandit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-bandit"
+  },
+  "flake8-blind-except": {
+    "conda_name": "flake8-blind-except",
+    "import_name": "flake8_blind_except",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-blind-except"
+  },
+  "flake8-class-newline": {
+    "conda_name": "flake8-class-newline",
+    "import_name": "flake8_class_newline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-class-newline"
+  },
+  "flake8-cognitive-complexity": {
+    "conda_name": "flake8-cognitive-complexity",
+    "import_name": "flake8_cognitive_complexity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-cognitive-complexity"
+  },
+  "flake8-colors": {
+    "conda_name": "flake8-colors",
+    "import_name": "flake8_colors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-colors"
+  },
+  "flake8-commas": {
+    "conda_name": "flake8-commas",
+    "import_name": "flake8_commas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-commas"
+  },
+  "flake8-debugger": {
+    "conda_name": "flake8-debugger",
+    "import_name": "flake8_debugger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-debugger"
+  },
+  "flake8-deprecated": {
+    "conda_name": "flake8-deprecated",
+    "import_name": "flake8_deprecated",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-deprecated"
+  },
+  "flake8-django": {
+    "conda_name": "flake8-django",
+    "import_name": "flake8_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-django"
+  },
+  "flake8-eradicate": {
+    "conda_name": "flake8-eradicate",
+    "import_name": "flake8_eradicate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-eradicate"
+  },
+  "flake8-executable": {
+    "conda_name": "flake8-executable",
+    "import_name": "flake8_executable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-executable"
+  },
+  "flake8-functions": {
+    "conda_name": "flake8-functions",
+    "import_name": "flake8_functions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-functions"
+  },
+  "flake8-functions-names": {
+    "conda_name": "flake8-functions-names",
+    "import_name": "flake8_functions_names",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-functions-names"
+  },
+  "flake8-import-order": {
+    "conda_name": "flake8-import-order",
+    "import_name": "flake8_import_order",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-import-order"
+  },
+  "flake8-import-style": {
+    "conda_name": "flake8-import-style",
+    "import_name": "flake8_import_style",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-import-style"
+  },
+  "flake8-isort": {
+    "conda_name": "flake8-isort",
+    "import_name": "flake8_isort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-isort"
+  },
+  "flake8-junit-report": {
+    "conda_name": "flake8-junit-report",
+    "import_name": "junit_conversor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-junit-report"
+  },
+  "flake8-logging": {
+    "conda_name": "flake8-logging",
+    "import_name": "flake8_logging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-logging"
+  },
+  "flake8-logging-format": {
+    "conda_name": "flake8-logging-format",
+    "import_name": "logging_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-logging-format"
+  },
+  "flake8-markdown": {
+    "conda_name": "flake8-markdown",
+    "import_name": "flake8_markdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-markdown"
+  },
+  "flake8-multiline-containers": {
+    "conda_name": "flake8-multiline-containers",
+    "import_name": "flake8_multiline_containers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-multiline-containers"
+  },
+  "flake8-nb": {
+    "conda_name": "flake8-nb",
+    "import_name": "flake8_nb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-nb"
+  },
+  "flake8-no-implicit-concat": {
+    "conda_name": "flake8-no-implicit-concat",
+    "import_name": "flake8_no_implicit_concat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-no-implicit-concat"
+  },
+  "flake8-no-pep420": {
+    "conda_name": "flake8-no-pep420",
+    "import_name": "flake8_no_pep420",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-no-pep420"
+  },
+  "flake8-noqa": {
+    "conda_name": "flake8-noqa",
+    "import_name": "flake8_noqa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-noqa"
+  },
+  "flake8-pie": {
+    "conda_name": "flake8-pie",
+    "import_name": "flake8_pie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-pie"
+  },
+  "flake8-polyfill": {
+    "conda_name": "flake8-polyfill",
+    "import_name": "flake8_polyfill",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-polyfill"
+  },
+  "flake8-pyi": {
+    "conda_name": "flake8-pyi",
+    "import_name": "flake8_pyi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-pyi"
+  },
+  "flake8-pylint": {
+    "conda_name": "flake8-pylint",
+    "import_name": "flake8_pylint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-pylint"
+  },
+  "flake8-quotes": {
+    "conda_name": "flake8-quotes",
+    "import_name": "flake8_quotes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-quotes"
+  },
+  "flake8-return": {
+    "conda_name": "flake8-return",
+    "import_name": "flake8_return",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-return"
+  },
+  "flake8-rst": {
+    "conda_name": "flake8-rst",
+    "import_name": "flake8_rst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-rst"
+  },
+  "flake8-spellcheck": {
+    "conda_name": "flake8-spellcheck",
+    "import_name": "flake8_spellcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-spellcheck"
+  },
+  "flake8-sql": {
+    "conda_name": "flake8-sql",
+    "import_name": "flake8_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-sql"
+  },
+  "flake8-string-format": {
+    "conda_name": "flake8-string-format",
+    "import_name": "flake8_string_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-string-format"
+  },
+  "flake8-tidy-imports": {
+    "conda_name": "flake8-tidy-imports",
+    "import_name": "flake8_tidy_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-tidy-imports"
+  },
+  "flake8-unused-arguments": {
+    "conda_name": "flake8-unused-arguments",
+    "import_name": "flake8_unused_arguments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-unused-arguments"
+  },
+  "flake8-use-fstring": {
+    "conda_name": "flake8-use-fstring",
+    "import_name": "flake8_use_fstring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-use-fstring"
+  },
+  "flake8-use-pathlib": {
+    "conda_name": "flake8-use-pathlib",
+    "import_name": "flake8_use_pathlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-use-pathlib"
+  },
+  "flake8-variables-names": {
+    "conda_name": "flake8-variables-names",
+    "import_name": "flake8_variables_names",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flake8-variables-names"
+  },
+  "flakeheaven": {
+    "conda_name": "flakeheaven",
+    "import_name": "flakeheaven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flakeheaven"
+  },
+  "flaky": {
+    "conda_name": "flaky",
+    "import_name": "flaky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flaky"
+  },
+  "flametree": {
+    "conda_name": "flametree",
+    "import_name": "flametree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flametree"
+  },
+  "flasgger": {
+    "conda_name": "flasgger",
+    "import_name": "flasgger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flasgger"
+  },
+  "flashgeotext": {
+    "conda_name": "flashgeotext",
+    "import_name": "flashgeotext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flashgeotext"
+  },
+  "flashtext": {
+    "conda_name": "flashtext",
+    "import_name": "flashtext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flashtext"
+  },
+  "flask-allows": {
+    "conda_name": "flask-allows",
+    "import_name": "flask_allows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-allows"
+  },
+  "flask-apispec": {
+    "conda_name": "flask-apispec",
+    "import_name": "flask_apispec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-apispec"
+  },
+  "flask-apscheduler": {
+    "conda_name": "flask-apscheduler",
+    "import_name": "flask_apscheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-apscheduler"
+  },
+  "flask-assets": {
+    "conda_name": "flask-assets",
+    "import_name": "flask_assets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-assets"
+  },
+  "flask-authorize": {
+    "conda_name": "flask-authorize",
+    "import_name": "flask_authorize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-authorize"
+  },
+  "flask-autoindex": {
+    "conda_name": "flask-autoindex",
+    "import_name": "flask_autoindex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-autoindex"
+  },
+  "flask-babel": {
+    "conda_name": "flask-babel",
+    "import_name": "flask_babel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-babel"
+  },
+  "flask-basicauth": {
+    "conda_name": "flask-basicauth",
+    "import_name": "flask_basicauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-basicauth"
+  },
+  "flask-bcrypt": {
+    "conda_name": "flask-bcrypt",
+    "import_name": "flask_bcrypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-bcrypt"
+  },
+  "flask-bower": {
+    "conda_name": "flask-bower",
+    "import_name": "flask_bower",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-bower"
+  },
+  "flask-caching": {
+    "conda_name": "flask-caching",
+    "import_name": "flask_caching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-caching"
+  },
+  "flask-celery-helper": {
+    "conda_name": "flask-celery-helper",
+    "import_name": "flask_celery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-celery-helper"
+  },
+  "flask-cors": {
+    "conda_name": "flask_cors",
+    "import_name": "flask_cors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-cors"
+  },
+  "flask-couchdb": {
+    "conda_name": "flask-couchdb",
+    "import_name": "flaskext.couchdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-couchdb"
+  },
+  "flask-creole": {
+    "conda_name": "flask-creole",
+    "import_name": "flaskext.creole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-creole"
+  },
+  "flask-dance": {
+    "conda_name": "flask-dance",
+    "import_name": "flask_dance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-dance"
+  },
+  "flask-debugtoolbar": {
+    "conda_name": "flask-debugtoolbar",
+    "import_name": "flask_debugtoolbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-debugtoolbar"
+  },
+  "flask-dramatiq": {
+    "conda_name": "flask-dramatiq",
+    "import_name": "flask_dramatiq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-dramatiq"
+  },
+  "flask-executor": {
+    "conda_name": "flask-executor",
+    "import_name": "flask_executor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-executor"
+  },
+  "flask-fixtures": {
+    "conda_name": "flask-fixtures",
+    "import_name": "flask_fixtures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-fixtures"
+  },
+  "flask-flatpages": {
+    "conda_name": "flask-flatpages",
+    "import_name": "flask_flatpages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-flatpages"
+  },
+  "flask-genshi": {
+    "conda_name": "flask-genshi",
+    "import_name": "flaskext.genshi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-genshi"
+  },
+  "flask-graphql": {
+    "conda_name": "flask-graphql",
+    "import_name": "flask_graphql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-graphql"
+  },
+  "flask-injector": {
+    "conda_name": "flask-injector",
+    "import_name": "flask_injector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-injector"
+  },
+  "flask-json": {
+    "conda_name": "flask_json",
+    "import_name": "flask_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-json"
+  },
+  "flask-jsonpify": {
+    "conda_name": "flask-jsonpify",
+    "import_name": "flask_jsonpify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-jsonpify"
+  },
+  "flask-ldap3-login": {
+    "conda_name": "flask-ldap3-login",
+    "import_name": "flask_ldap3_login",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-ldap3-login"
+  },
+  "flask-limiter": {
+    "conda_name": "flask-limiter",
+    "import_name": "flask_limiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-limiter"
+  },
+  "flask-login": {
+    "conda_name": "flask-login",
+    "import_name": "flask_login",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-login"
+  },
+  "flask-mail": {
+    "conda_name": "flask-mail",
+    "import_name": "flask_mail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-mail"
+  },
+  "flask-marshmallow": {
+    "conda_name": "flask-marshmallow",
+    "import_name": "flask_marshmallow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-marshmallow"
+  },
+  "flask-migrate": {
+    "conda_name": "flask-migrate",
+    "import_name": "flask_migrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-migrate"
+  },
+  "flask-minify": {
+    "conda_name": "flask-minify",
+    "import_name": "flask_minify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-minify"
+  },
+  "flask-moment": {
+    "conda_name": "flask-moment",
+    "import_name": "flask_moment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-moment"
+  },
+  "flask-muck": {
+    "conda_name": "flask-muck",
+    "import_name": "flask_muck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-muck"
+  },
+  "flask-multipass": {
+    "conda_name": "flask-multipass",
+    "import_name": "flask_multipass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-multipass"
+  },
+  "flask-multistatic": {
+    "conda_name": "flask-multistatic",
+    "import_name": "flask_multistatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-multistatic"
+  },
+  "flask-nav": {
+    "conda_name": "flask-nav",
+    "import_name": "flask_nav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-nav"
+  },
+  "flask-oauthlib": {
+    "conda_name": "flask-oauthlib",
+    "import_name": "flask_oauthlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-oauthlib"
+  },
+  "flask-openapi3": {
+    "conda_name": "flask-openapi3",
+    "import_name": "flask_openapi3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-openapi3"
+  },
+  "flask-openid": {
+    "conda_name": "flask-openid",
+    "import_name": "flask_openid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-openid"
+  },
+  "flask-postgres": {
+    "conda_name": "flask-postgres",
+    "import_name": "flask_postgres",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-postgres"
+  },
+  "flask-principal": {
+    "conda_name": "flask-principal",
+    "import_name": "flask_principal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-principal"
+  },
+  "flask-pymongo": {
+    "conda_name": "flask-pymongo",
+    "import_name": "flask_pymongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-pymongo"
+  },
+  "flask-rdf": {
+    "conda_name": "flask_rdf",
+    "import_name": "flask_rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-rdf"
+  },
+  "flask-redis": {
+    "conda_name": "flask-redis",
+    "import_name": "flask_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-redis"
+  },
+  "flask-redis-helper": {
+    "conda_name": "flask-redis-helper",
+    "import_name": "flask_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-redis-helper"
+  },
+  "flask-request-id": {
+    "conda_name": "flask_request_id",
+    "import_name": "flask_request_id",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-request-id"
+  },
+  "flask-restalchemy": {
+    "conda_name": "flask-restalchemy",
+    "import_name": "flask_restalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-restalchemy"
+  },
+  "flask-restful": {
+    "conda_name": "flask-restful",
+    "import_name": "flask_restful",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-restful"
+  },
+  "flask-restful-swagger": {
+    "conda_name": "flask-restful-swagger",
+    "import_name": "flask_restful_swagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-restful-swagger"
+  },
+  "flask-restless": {
+    "conda_name": "flask-restless",
+    "import_name": "flask_restless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-restless"
+  },
+  "flask-restplus": {
+    "conda_name": "flask-restplus",
+    "import_name": "flask_restplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-restplus"
+  },
+  "flask-script": {
+    "conda_name": "flask-script",
+    "import_name": "flask_script",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-script"
+  },
+  "flask-security": {
+    "conda_name": "flask-security",
+    "import_name": "flask_security",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-security"
+  },
+  "flask-server-timing": {
+    "conda_name": "flask-server-timing",
+    "import_name": "server_timing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-server-timing"
+  },
+  "flask-session": {
+    "conda_name": "flask-session",
+    "import_name": "flask_session",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-session"
+  },
+  "flask-session2": {
+    "conda_name": "flask-session2",
+    "import_name": "flask_session",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-session2"
+  },
+  "flask-silk": {
+    "conda_name": "flask-silk",
+    "import_name": "flask_silk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-silk"
+  },
+  "flask-simpleldap": {
+    "conda_name": "flask-simpleldap",
+    "import_name": "flask_simpleldap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-simpleldap"
+  },
+  "flask-smorest": {
+    "conda_name": "flask-smorest",
+    "import_name": "flask_smorest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-smorest"
+  },
+  "flask-sockets": {
+    "conda_name": "flask-sockets",
+    "import_name": "flask_sockets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-sockets"
+  },
+  "flask-sspi": {
+    "conda_name": "flask-sspi",
+    "import_name": "flask_sspi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-sspi"
+  },
+  "flask-swagger": {
+    "conda_name": "flask-swagger",
+    "import_name": "flask_swagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-swagger"
+  },
+  "flask-swagger-ui": {
+    "conda_name": "flask-swagger-ui",
+    "import_name": "flask_swagger_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-swagger-ui"
+  },
+  "flask-testing": {
+    "conda_name": "flask-testing",
+    "import_name": "flask_testing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-testing"
+  },
+  "flask-themes2": {
+    "conda_name": "flask-themes2",
+    "import_name": "flask_themes2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-themes2"
+  },
+  "flask-turbolinks": {
+    "conda_name": "flask-turbolinks",
+    "import_name": "flask_turbolinks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-turbolinks"
+  },
+  "flask-uploads": {
+    "conda_name": "flask-uploads",
+    "import_name": "flask_uploads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-uploads"
+  },
+  "flask-user": {
+    "conda_name": "flask-user",
+    "import_name": "flask_user",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-user"
+  },
+  "flask-webpack": {
+    "conda_name": "flask-webpack",
+    "import_name": "flask_webpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-webpack"
+  },
+  "flask-wtf": {
+    "conda_name": "flask-wtf",
+    "import_name": "flask_wtf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flask-wtf"
+  },
+  "flaskwebgui": {
+    "conda_name": "flaskwebgui",
+    "import_name": "flaskwebgui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flaskwebgui"
+  },
+  "flastapi": {
+    "conda_name": "flastapi",
+    "import_name": "flastapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flastapi"
+  },
+  "flatdict": {
+    "conda_name": "flatdict",
+    "import_name": "flatdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flatdict"
+  },
+  "flatten-dict": {
+    "conda_name": "flatten-dict",
+    "import_name": "flatten_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flatten-dict"
+  },
+  "flatten-json": {
+    "conda_name": "flatten_json",
+    "import_name": "flatten_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flatten-json"
+  },
+  "flet-core": {
+    "conda_name": "flet-core",
+    "import_name": "flet_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flet-core"
+  },
+  "flet-runtime": {
+    "conda_name": "flet-runtime",
+    "import_name": "flet_runtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flet-runtime"
+  },
+  "flex": {
+    "conda_name": "flex-swagger",
+    "import_name": "flex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flex"
+  },
+  "flexcache": {
+    "conda_name": "flexcache",
+    "import_name": "flexcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexcache"
+  },
+  "fleximod": {
+    "conda_name": "fleximod",
+    "import_name": "fleximod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fleximod"
+  },
+  "flexitext": {
+    "conda_name": "flexitext",
+    "import_name": "flexitext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexitext"
+  },
+  "flexmod": {
+    "conda_name": "flexmod",
+    "import_name": "flexmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexmod"
+  },
+  "flexparser": {
+    "conda_name": "flexparser",
+    "import_name": "flexparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexparser"
+  },
+  "flexpolyline": {
+    "conda_name": "flexpolyline",
+    "import_name": "flexpolyline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexpolyline"
+  },
+  "flexx": {
+    "conda_name": "flexx",
+    "import_name": "flexx.flx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flexx"
+  },
+  "flickrhistory": {
+    "conda_name": "flickrhistory",
+    "import_name": "flickrhistory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flickrhistory"
+  },
+  "flit": {
+    "conda_name": "flit",
+    "import_name": "flit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flit"
+  },
+  "flit-core": {
+    "conda_name": "flit-core",
+    "import_name": "flit_core",
+    "mapping_source": "static",
+    "pypi_name": "flit-core"
+  },
+  "flit-install-py2": {
+    "conda_name": "flit_install_py2",
+    "import_name": "flit_install_py2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flit-install-py2"
+  },
+  "flit-scm": {
+    "conda_name": "flit-scm",
+    "import_name": "flit_scm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flit-scm"
+  },
+  "floatcsep": {
+    "conda_name": "floatcsep",
+    "import_name": "floatcsep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "floatcsep"
+  },
+  "flopy": {
+    "conda_name": "flopy",
+    "import_name": "flopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flopy"
+  },
+  "flory": {
+    "conda_name": "flory",
+    "import_name": "flory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flory"
+  },
+  "floweaver": {
+    "conda_name": "floweaver",
+    "import_name": "floweaver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "floweaver"
+  },
+  "flower": {
+    "conda_name": "flower",
+    "import_name": "flower",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flower"
+  },
+  "flowio": {
+    "conda_name": "flowio",
+    "import_name": "flowio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flowio"
+  },
+  "flowjax": {
+    "conda_name": "flowjax",
+    "import_name": "flowjax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flowjax"
+  },
+  "flowsaber": {
+    "conda_name": "flowsaber",
+    "import_name": "flowsaber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flowsaber"
+  },
+  "flowtorch": {
+    "conda_name": "flowtorch",
+    "import_name": "flowtorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flowtorch"
+  },
+  "fludashboard": {
+    "conda_name": "fludashboard",
+    "import_name": "fludashboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fludashboard"
+  },
+  "fluent-logger": {
+    "conda_name": "fluent-logger",
+    "import_name": "fluent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluent-logger"
+  },
+  "flufl-enum": {
+    "conda_name": "flufl.enum",
+    "import_name": "flufl.enum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flufl-enum"
+  },
+  "flufl-lock": {
+    "conda_name": "flufl.lock",
+    "import_name": "flufl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flufl-lock"
+  },
+  "fluidfft": {
+    "conda_name": "fluidfft",
+    "import_name": "fluidfft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfft"
+  },
+  "fluidfft-builder": {
+    "conda_name": "fluidfft-builder",
+    "import_name": "fluidfft_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfft-builder"
+  },
+  "fluidfft-fftw": {
+    "conda_name": "fluidfft-fftw",
+    "import_name": "fluidfft_fftw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfft-fftw"
+  },
+  "fluidfft-fftwmpi": {
+    "conda_name": "fluidfft-fftwmpi",
+    "import_name": "fluidfft_fftwmpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfft-fftwmpi"
+  },
+  "fluidfft-mpi-with-fftw": {
+    "conda_name": "fluidfft-mpi_with_fftw",
+    "import_name": "fluidfft_mpi_with_fftw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfft-mpi-with-fftw"
+  },
+  "fluidfoam": {
+    "conda_name": "fluidfoam",
+    "import_name": "fluidfoam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidfoam"
+  },
+  "fluids": {
+    "conda_name": "fluids",
+    "import_name": "fluids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluids"
+  },
+  "fluidsim": {
+    "conda_name": "fluidsim",
+    "import_name": "fluidsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidsim"
+  },
+  "fluidsim-core": {
+    "conda_name": "fluidsim-core",
+    "import_name": "fluidsim_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluidsim-core"
+  },
+  "fluoriclogppka": {
+    "conda_name": "fluoriclogppka",
+    "import_name": "fluoriclogppka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fluoriclogppka"
+  },
+  "flup": {
+    "conda_name": "flup",
+    "import_name": "flup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flup"
+  },
+  "flupy": {
+    "conda_name": "flupy",
+    "import_name": "flupy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flupy"
+  },
+  "flux-restful-client": {
+    "conda_name": "flux-restful-client",
+    "import_name": "flux_restful_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flux-restful-client"
+  },
+  "flynt": {
+    "conda_name": "flynt",
+    "import_name": "flynt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flynt"
+  },
+  "flyr": {
+    "conda_name": "flyr",
+    "import_name": "flyr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flyr"
+  },
+  "flyteidl": {
+    "conda_name": "flyteidl",
+    "import_name": "flyteidl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flyteidl"
+  },
+  "flytekit": {
+    "conda_name": "flytekit",
+    "import_name": "flytekit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekit"
+  },
+  "flytekitplugins-athena": {
+    "conda_name": "flytekitplugins-athena",
+    "import_name": "flytekitplugins.athena",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-athena"
+  },
+  "flytekitplugins-awsbatch": {
+    "conda_name": "flytekitplugins-awsbatch",
+    "import_name": "flytekitplugins.awsbatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-awsbatch"
+  },
+  "flytekitplugins-dask": {
+    "conda_name": "flytekitplugins-dask",
+    "import_name": "flytekitplugins.dask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-dask"
+  },
+  "flytekitplugins-data-fsspec": {
+    "conda_name": "flytekitplugins-data-fsspec",
+    "import_name": "flytekitplugins.fsspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-data-fsspec"
+  },
+  "flytekitplugins-modin": {
+    "conda_name": "flytekitplugins-modin",
+    "import_name": "flytekitplugins.modin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-modin"
+  },
+  "flytekitplugins-pandera": {
+    "conda_name": "flytekitplugins-pandera",
+    "import_name": "flytekitplugins.pandera",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-pandera"
+  },
+  "flytekitplugins-spark": {
+    "conda_name": "flytekitplugins-spark",
+    "import_name": "flytekitplugins.spark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-spark"
+  },
+  "flytekitplugins-sqlalchemy": {
+    "conda_name": "flytekitplugins-sqlalchemy",
+    "import_name": "flytekitplugins.sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "flytekitplugins-sqlalchemy"
+  },
+  "fn": {
+    "conda_name": "fn",
+    "import_name": "fn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fn"
+  },
+  "fnc": {
+    "conda_name": "fnc",
+    "import_name": "fnc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fnc"
+  },
+  "foamlib": {
+    "conda_name": "foamlib",
+    "import_name": "foamlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foamlib"
+  },
+  "focal-loss": {
+    "conda_name": "focal-loss",
+    "import_name": "focal_loss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "focal-loss"
+  },
+  "focal-stats": {
+    "conda_name": "focal-stats",
+    "import_name": "focal_stats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "focal-stats"
+  },
+  "folium": {
+    "conda_name": "folium",
+    "import_name": "folium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "folium"
+  },
+  "folium-pmtiles": {
+    "conda_name": "folium-pmtiles",
+    "import_name": "folium_pmtiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "folium-pmtiles"
+  },
+  "folktables": {
+    "conda_name": "folktables",
+    "import_name": "folktables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "folktables"
+  },
+  "folx": {
+    "conda_name": "folx",
+    "import_name": "folx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "folx"
+  },
+  "fonduer": {
+    "conda_name": "fonduer",
+    "import_name": "fonduer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonduer"
+  },
+  "font-v": {
+    "conda_name": "font-v",
+    "import_name": "fontv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "font-v"
+  },
+  "fonticon-fontawesome5": {
+    "conda_name": "fonticon-fontawesome5",
+    "import_name": "fonticon_fa5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonticon-fontawesome5"
+  },
+  "fonticon-fontawesome6": {
+    "conda_name": "fonticon-fontawesome6",
+    "import_name": "fonticon_fa6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonticon-fontawesome6"
+  },
+  "fonticon-materialdesignicons6": {
+    "conda_name": "fonticon-materialdesignicons6",
+    "import_name": "fonticon_mdi6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonticon-materialdesignicons6"
+  },
+  "fonticon-materialdesignicons7": {
+    "conda_name": "fonticon-materialdesignicons7",
+    "import_name": "fonticon_mdi7",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonticon-materialdesignicons7"
+  },
+  "fontmath": {
+    "conda_name": "fontmath",
+    "import_name": "fontMath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fontmath"
+  },
+  "fontparts": {
+    "conda_name": "fontparts",
+    "import_name": "fontParts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fontparts"
+  },
+  "fonttools": {
+    "conda_name": "fonttools",
+    "import_name": "fontTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fonttools"
+  },
+  "foolbox": {
+    "conda_name": "foolbox",
+    "import_name": "foolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foolbox"
+  },
+  "fooof": {
+    "conda_name": "fooof",
+    "import_name": "fooof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fooof"
+  },
+  "forallpeople": {
+    "conda_name": "forallpeople",
+    "import_name": "forallpeople",
+    "mapping_source": "regro-bot",
+    "pypi_name": "forallpeople"
+  },
+  "forbiddenfruit": {
+    "conda_name": "forbiddenfruit",
+    "import_name": "forbiddenfruit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "forbiddenfruit"
+  },
+  "force-delete-win": {
+    "conda_name": "force-delete-win",
+    "import_name": "force_delete_win",
+    "mapping_source": "regro-bot",
+    "pypi_name": "force-delete-win"
+  },
+  "ford": {
+    "conda_name": "ford",
+    "import_name": "ford",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ford"
+  },
+  "forestci": {
+    "conda_name": "forestci",
+    "import_name": "forestci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "forestci"
+  },
+  "forestopenfermion": {
+    "conda_name": "forestopenfermion",
+    "import_name": "forestopenfermion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "forestopenfermion"
+  },
+  "forestplot": {
+    "conda_name": "forestplot",
+    "import_name": "forestplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "forestplot"
+  },
+  "fork-purger": {
+    "conda_name": "fork-purger",
+    "import_name": "purger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fork-purger"
+  },
+  "formencode": {
+    "conda_name": "formencode",
+    "import_name": "formencode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "formencode"
+  },
+  "formlayout": {
+    "conda_name": "formlayout",
+    "import_name": "formlayout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "formlayout"
+  },
+  "formulae": {
+    "conda_name": "formulae",
+    "import_name": "formulae",
+    "mapping_source": "regro-bot",
+    "pypi_name": "formulae"
+  },
+  "formulaic": {
+    "conda_name": "formulaic",
+    "import_name": "formulaic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "formulaic"
+  },
+  "formulate": {
+    "conda_name": "formulate",
+    "import_name": "formulate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "formulate"
+  },
+  "fortio": {
+    "conda_name": "fortio",
+    "import_name": "fortio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fortio"
+  },
+  "fortls": {
+    "conda_name": "fortls",
+    "import_name": "fortls",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fortls"
+  },
+  "fortran-binary": {
+    "conda_name": "fortran-binary",
+    "import_name": "fortran_binary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fortran-binary"
+  },
+  "fortranformat": {
+    "conda_name": "fortranformat",
+    "import_name": "fortranformat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fortranformat"
+  },
+  "foscat": {
+    "conda_name": "foscat",
+    "import_name": "foscat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foscat"
+  },
+  "foundry-dev-tools": {
+    "conda_name": "foundry-dev-tools",
+    "import_name": "foundry_dev_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foundry-dev-tools"
+  },
+  "foundry-dev-tools-transforms": {
+    "conda_name": "foundry-dev-tools-transforms",
+    "import_name": "transforms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foundry-dev-tools-transforms"
+  },
+  "foundry-platform-sdk": {
+    "conda_name": "foundry-platform-sdk",
+    "import_name": "foundry_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foundry-platform-sdk"
+  },
+  "foxplainer": {
+    "conda_name": "foxplainer",
+    "import_name": "foxplainer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "foxplainer"
+  },
+  "fparser": {
+    "conda_name": "fparser",
+    "import_name": "fparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fparser"
+  },
+  "fpdf": {
+    "conda_name": "fpdf",
+    "import_name": "fpdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fpdf"
+  },
+  "fps-akernel-task": {
+    "conda_name": "fps-akernel-task",
+    "import_name": "fps_akernel_task",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fps-akernel-task"
+  },
+  "fps-retrolab": {
+    "conda_name": "fps-retrolab",
+    "import_name": "fps_retrolab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fps-retrolab"
+  },
+  "fps-uvicorn": {
+    "conda_name": "fps-uvicorn",
+    "import_name": "fps_uvicorn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fps-uvicorn"
+  },
+  "fpyutils": {
+    "conda_name": "fpyutils",
+    "import_name": "fpyutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fpyutils"
+  },
+  "fqe": {
+    "conda_name": "fqe",
+    "import_name": "fqe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fqe"
+  },
+  "fractal-client": {
+    "conda_name": "fractal-client",
+    "import_name": "fractal_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractal-client"
+  },
+  "fractal-server": {
+    "conda_name": "fractal-server",
+    "import_name": "fractal_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractal-server"
+  },
+  "fractal-task-tools": {
+    "conda_name": "fractal-task-tools",
+    "import_name": "fractal_task_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractal-task-tools"
+  },
+  "fractal-tasks-core": {
+    "conda_name": "fractal-tasks-core",
+    "import_name": "fractal_tasks_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractal-tasks-core"
+  },
+  "fractal-tasks-utils": {
+    "conda_name": "fractal-tasks-utils",
+    "import_name": "fractal_tasks_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractal-tasks-utils"
+  },
+  "fractopo": {
+    "conda_name": "fractopo",
+    "import_name": "fractopo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fractopo"
+  },
+  "fredapi": {
+    "conda_name": "fredapi",
+    "import_name": "fredapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fredapi"
+  },
+  "free-proxy": {
+    "conda_name": "free-proxy",
+    "import_name": "fp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "free-proxy"
+  },
+  "freediscovery": {
+    "conda_name": "freediscovery",
+    "import_name": "freediscovery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freediscovery"
+  },
+  "freegenes": {
+    "conda_name": "freegenes",
+    "import_name": "freegenes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freegenes"
+  },
+  "freephil": {
+    "conda_name": "freephil",
+    "import_name": "freephil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freephil"
+  },
+  "freeqdsk": {
+    "conda_name": "freeqdsk",
+    "import_name": "freeqdsk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freeqdsk"
+  },
+  "freetype-py": {
+    "conda_name": "freetype-py",
+    "import_name": "freetype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freetype-py"
+  },
+  "freezegun": {
+    "conda_name": "freezegun",
+    "import_name": "freezegun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freezegun"
+  },
+  "frelatage": {
+    "conda_name": "frelatage",
+    "import_name": "frelatage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frelatage"
+  },
+  "french-cities": {
+    "conda_name": "french-cities",
+    "import_name": "french_cities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "french-cities"
+  },
+  "freshwater": {
+    "conda_name": "freshwater",
+    "import_name": "freshwater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freshwater"
+  },
+  "fretraj": {
+    "conda_name": "fretraj",
+    "import_name": "fretraj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fretraj"
+  },
+  "frettipy": {
+    "conda_name": "frettipy",
+    "import_name": "frettipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frettipy"
+  },
+  "freva-client": {
+    "conda_name": "freva-client",
+    "import_name": "freva_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "freva-client"
+  },
+  "frictionless": {
+    "conda_name": "frictionless",
+    "import_name": "frictionless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frictionless"
+  },
+  "frictionless-ckan-mapper": {
+    "conda_name": "frictionless-ckan-mapper",
+    "import_name": "frictionless_ckan_mapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frictionless-ckan-mapper"
+  },
+  "friendli-client": {
+    "conda_name": "friendli-client",
+    "import_name": "friendli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "friendli-client"
+  },
+  "friendly": {
+    "conda_name": "friendly",
+    "import_name": "friendly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "friendly"
+  },
+  "friendly-styles": {
+    "conda_name": "friendly-styles",
+    "import_name": "friendly_styles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "friendly-styles"
+  },
+  "friendly-traceback": {
+    "conda_name": "friendly-traceback",
+    "import_name": "friendly_traceback",
+    "mapping_source": "regro-bot",
+    "pypi_name": "friendly-traceback"
+  },
+  "frilouz": {
+    "conda_name": "frilouz",
+    "import_name": "frilouz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frilouz"
+  },
+  "frogress": {
+    "conda_name": "frogress",
+    "import_name": "frogress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frogress"
+  },
+  "frosted": {
+    "conda_name": "frosted",
+    "import_name": "frosted",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frosted"
+  },
+  "frozen-flask": {
+    "conda_name": "frozen-flask",
+    "import_name": "flask_frozen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frozen-flask"
+  },
+  "frozenlist": {
+    "conda_name": "frozenlist",
+    "import_name": "frozenlist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "frozenlist"
+  },
+  "fs": {
+    "conda_name": "fs",
+    "import_name": "fs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs"
+  },
+  "fs-azureblob": {
+    "conda_name": "fs-azureblob",
+    "import_name": "fs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-azureblob"
+  },
+  "fs-dropboxfs": {
+    "conda_name": "fs.dropboxfs",
+    "import_name": "fs.dropboxfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-dropboxfs"
+  },
+  "fs-gcsfs": {
+    "conda_name": "fs-gcsfs",
+    "import_name": "fs_gcsfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-gcsfs"
+  },
+  "fs-googledrivefs": {
+    "conda_name": "fs.googledrivefs",
+    "import_name": "fs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-googledrivefs"
+  },
+  "fs-onedatarestfs": {
+    "conda_name": "fs.onedatarestfs",
+    "import_name": "fs.onedatarestfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-onedatarestfs"
+  },
+  "fs-s3fs": {
+    "conda_name": "fs-s3fs",
+    "import_name": "fs_s3fs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-s3fs"
+  },
+  "fs-smbfs": {
+    "conda_name": "fs.smbfs",
+    "import_name": "fs.smbfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-smbfs"
+  },
+  "fs-sshfs": {
+    "conda_name": "fs.sshfs",
+    "import_name": "fs.sshfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-sshfs"
+  },
+  "fs-webdavfs": {
+    "conda_name": "fs.webdavfs",
+    "import_name": "webdavfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fs-webdavfs"
+  },
+  "fscacher": {
+    "conda_name": "fscacher",
+    "import_name": "fscacher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fscacher"
+  },
+  "fscan": {
+    "conda_name": "fscan",
+    "import_name": "fscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fscan"
+  },
+  "fsl-pipe": {
+    "conda_name": "fsl-pipe",
+    "import_name": "fsl_pipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsl-pipe"
+  },
+  "fsl-pipe-gui": {
+    "conda_name": "fsl-pipe-gui",
+    "import_name": "fsl_pipe_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsl-pipe-gui"
+  },
+  "fsl-sub": {
+    "conda_name": "fsl-sub",
+    "import_name": "fsl_sub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsl-sub"
+  },
+  "fsl-sub-plugin-sge": {
+    "conda_name": "fsl-sub-plugin-sge",
+    "import_name": "fsl_sub_plugin_sge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsl-sub-plugin-sge"
+  },
+  "fsl-sub-plugin-slurm": {
+    "conda_name": "fsl-sub-plugin-slurm",
+    "import_name": "fsl_sub_plugin_slurm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsl-sub-plugin-slurm"
+  },
+  "fsleyes": {
+    "conda_name": "fsleyes",
+    "import_name": "fsleyes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsleyes"
+  },
+  "fsleyes-plugin-mrs": {
+    "conda_name": "fsleyes-plugin-mrs",
+    "import_name": "fsleyes_plugin_mrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsleyes-plugin-mrs"
+  },
+  "fsspec": {
+    "conda_name": "fsspec",
+    "import_name": "fsspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsspec"
+  },
+  "fsspec-reference-maker": {
+    "conda_name": "fsspec-reference-maker",
+    "import_name": "fsspec_reference_maker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fsspec-reference-maker"
+  },
+  "fst-pso": {
+    "conda_name": "fst-pso",
+    "import_name": "fstpso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fst-pso"
+  },
+  "ftfy": {
+    "conda_name": "ftfy",
+    "import_name": "ftfy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ftfy"
+  },
+  "ftputil": {
+    "conda_name": "ftputil",
+    "import_name": "ftputil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ftputil"
+  },
+  "fts3": {
+    "conda_name": "fts3",
+    "import_name": "fts3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fts3"
+  },
+  "full-fred": {
+    "conda_name": "full-fred",
+    "import_name": "full_fred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "full-fred"
+  },
+  "func-timeout": {
+    "conda_name": "func_timeout",
+    "import_name": "func_timeout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "func-timeout"
+  },
+  "funcargparse": {
+    "conda_name": "funcargparse",
+    "import_name": "funcargparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "funcargparse"
+  },
+  "funcparserlib": {
+    "conda_name": "funcparserlib",
+    "import_name": "funcparserlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "funcparserlib"
+  },
+  "functional-algorithms": {
+    "conda_name": "functional_algorithms",
+    "import_name": "functional_algorithms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "functional-algorithms"
+  },
+  "functionali": {
+    "conda_name": "functionali",
+    "import_name": "functionali",
+    "mapping_source": "regro-bot",
+    "pypi_name": "functionali"
+  },
+  "funcy": {
+    "conda_name": "funcy",
+    "import_name": "funcy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "funcy"
+  },
+  "fundamentals": {
+    "conda_name": "fundamentals",
+    "import_name": "fundamentals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fundamentals"
+  },
+  "funlib-geometry": {
+    "conda_name": "funlib.geometry",
+    "import_name": "funlib.geometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "funlib-geometry"
+  },
+  "funsor": {
+    "conda_name": "funsor",
+    "import_name": "funsor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "funsor"
+  },
+  "furl": {
+    "conda_name": "furl",
+    "import_name": "furl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "furl"
+  },
+  "furones": {
+    "conda_name": "furones",
+    "import_name": "furones",
+    "mapping_source": "regro-bot",
+    "pypi_name": "furones"
+  },
+  "fury": {
+    "conda_name": "fury",
+    "import_name": "fury",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fury"
+  },
+  "fusepy": {
+    "conda_name": "fusepy",
+    "import_name": "fuse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fusepy"
+  },
+  "fusepyng": {
+    "conda_name": "fusepyng",
+    "import_name": "fusepyng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fusepyng"
+  },
+  "fusesoc": {
+    "conda_name": "fusesoc",
+    "import_name": "fusesoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fusesoc"
+  },
+  "future-annotations": {
+    "conda_name": "future-annotations",
+    "import_name": "future_annotations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "future-annotations"
+  },
+  "future-fstrings": {
+    "conda_name": "future_fstrings",
+    "import_name": "future_fstrings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "future-fstrings"
+  },
+  "future-typing": {
+    "conda_name": "future_typing",
+    "import_name": "future_typing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "future-typing"
+  },
+  "fuzzymatcher": {
+    "conda_name": "fuzzymatcher",
+    "import_name": "fuzzymatcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fuzzymatcher"
+  },
+  "fuzzytm": {
+    "conda_name": "fuzzytm",
+    "import_name": "FuzzyTM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fuzzytm"
+  },
+  "fuzzywuzzy": {
+    "conda_name": "fuzzywuzzy",
+    "import_name": "fuzzywuzzy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fuzzywuzzy"
+  },
+  "fv3grid": {
+    "conda_name": "fv3grid",
+    "import_name": "fv3grid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fv3grid"
+  },
+  "fvcore": {
+    "conda_name": "fvcore",
+    "import_name": "fvcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fvcore"
+  },
+  "fvgp": {
+    "conda_name": "fvgp",
+    "import_name": "fvgp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "fvgp"
+  },
+  "g2p-en": {
+    "conda_name": "g2p-en",
+    "import_name": "g2p_en",
+    "mapping_source": "regro-bot",
+    "pypi_name": "g2p-en"
+  },
+  "gaiaxpy": {
+    "conda_name": "gaiaxpy",
+    "import_name": "gaiaxpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gaiaxpy"
+  },
+  "gaitsetpy": {
+    "conda_name": "gaitsetpy",
+    "import_name": "gaitsetpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gaitsetpy"
+  },
+  "gala": {
+    "conda_name": "gala",
+    "import_name": "gala",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gala"
+  },
+  "galaxy-containers": {
+    "conda_name": "galaxy-containers",
+    "import_name": "galaxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galaxy-containers"
+  },
+  "galaxy-tool-util": {
+    "conda_name": "galaxy-tool-util",
+    "import_name": "galaxy.tool_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galaxy-tool-util"
+  },
+  "galaxy-tool-util-models": {
+    "conda_name": "galaxy-tool-util-models",
+    "import_name": "galaxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galaxy-tool-util-models"
+  },
+  "galaxy-util": {
+    "conda_name": "galaxy-util",
+    "import_name": "galaxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galaxy-util"
+  },
+  "galois": {
+    "conda_name": "galois",
+    "import_name": "galois",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galois"
+  },
+  "galpy": {
+    "conda_name": "galpy",
+    "import_name": "galpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "galpy"
+  },
+  "gammapy": {
+    "conda_name": "gammapy",
+    "import_name": "gammapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gammapy"
+  },
+  "gammasimtools": {
+    "conda_name": "gammasimtools",
+    "import_name": "simtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gammasimtools"
+  },
+  "gandlf": {
+    "conda_name": "gandlf",
+    "import_name": "GANDLF",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gandlf"
+  },
+  "gars-field": {
+    "conda_name": "gars_field",
+    "import_name": "gars_field",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gars-field"
+  },
+  "gaspium": {
+    "conda_name": "gaspium",
+    "import_name": "gaspium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gaspium"
+  },
+  "gaspype": {
+    "conda_name": "gaspype",
+    "import_name": "gaspype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gaspype"
+  },
+  "gast": {
+    "conda_name": "gast",
+    "import_name": "gast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gast"
+  },
+  "gatiab": {
+    "conda_name": "gatiab",
+    "import_name": "gatiab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gatiab"
+  },
+  "gatspy": {
+    "conda_name": "gatspy",
+    "import_name": "gatspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gatspy"
+  },
+  "gauche": {
+    "conda_name": "gauche",
+    "import_name": "gauche",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gauche"
+  },
+  "gavicore": {
+    "conda_name": "gavicore",
+    "import_name": "gavicore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gavicore"
+  },
+  "gazar": {
+    "conda_name": "gazar",
+    "import_name": "gazar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gazar"
+  },
+  "gazpacho": {
+    "conda_name": "gazpacho",
+    "import_name": "gazpacho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gazpacho"
+  },
+  "gbquality": {
+    "conda_name": "gbquality",
+    "import_name": "gbquality",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gbquality"
+  },
+  "gcld3": {
+    "conda_name": "gcld3",
+    "import_name": "gcld3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcld3"
+  },
+  "gcm-filters": {
+    "conda_name": "gcm_filters",
+    "import_name": "gcm_filters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcm-filters"
+  },
+  "gcn-kafka": {
+    "conda_name": "gcn-kafka",
+    "import_name": "gcn_kafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcn-kafka"
+  },
+  "gcovr": {
+    "conda_name": "gcovr",
+    "import_name": "gcovr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcovr"
+  },
+  "gcr": {
+    "conda_name": "gcr",
+    "import_name": "GCR",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcr"
+  },
+  "gcs-oauth2-boto-plugin": {
+    "conda_name": "gcs-oauth2-boto-plugin",
+    "import_name": "gcs_oauth2_boto_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcs-oauth2-boto-plugin"
+  },
+  "gcsfs": {
+    "conda_name": "gcsfs",
+    "import_name": "gcsfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gcsfs"
+  },
+  "gctree": {
+    "conda_name": "gctree",
+    "import_name": "gctree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gctree"
+  },
+  "gdecomp": {
+    "conda_name": "gdecomp",
+    "import_name": "gdecomp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gdecomp"
+  },
+  "gdown": {
+    "conda_name": "gdown",
+    "import_name": "gdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gdown"
+  },
+  "gdpx": {
+    "conda_name": "gdpx",
+    "import_name": "gdpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gdpx"
+  },
+  "gdsfactory": {
+    "conda_name": "gdsfactory",
+    "import_name": "gdsfactory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gdsfactory"
+  },
+  "gdtchron": {
+    "conda_name": "gdtchron",
+    "import_name": "gdtchron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gdtchron"
+  },
+  "geeadd": {
+    "conda_name": "geeadd",
+    "import_name": "geeadd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geeadd"
+  },
+  "geedim": {
+    "conda_name": "geedim",
+    "import_name": "geedim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geedim"
+  },
+  "geehydro": {
+    "conda_name": "geehydro",
+    "import_name": "geehydro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geehydro"
+  },
+  "geemap": {
+    "conda_name": "geemap",
+    "import_name": "geemap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geemap"
+  },
+  "geetools": {
+    "conda_name": "geetools",
+    "import_name": "geetools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geetools"
+  },
+  "gekko": {
+    "conda_name": "gekko",
+    "import_name": "gekko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gekko"
+  },
+  "gelidum": {
+    "conda_name": "gelidum",
+    "import_name": "gelidum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gelidum"
+  },
+  "gemgis": {
+    "conda_name": "gemgis",
+    "import_name": "gemgis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gemgis"
+  },
+  "gemseo": {
+    "conda_name": "gemseo",
+    "import_name": "gemseo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gemseo"
+  },
+  "gemspa-spt": {
+    "conda_name": "gemspa-spt",
+    "import_name": "gemspa_spt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gemspa-spt"
+  },
+  "gemviz": {
+    "conda_name": "gemviz",
+    "import_name": "gemviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gemviz"
+  },
+  "genai": {
+    "conda_name": "genai",
+    "import_name": "genai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genai"
+  },
+  "genanki": {
+    "conda_name": "genanki",
+    "import_name": "genanki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genanki"
+  },
+  "generalisedformanricci": {
+    "conda_name": "generalisedformanricci",
+    "import_name": "GeneralisedFormanRicci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "generalisedformanricci"
+  },
+  "generate-dense-patches": {
+    "conda_name": "generate-dense-patches",
+    "import_name": "generate_dense_patches",
+    "mapping_source": "regro-bot",
+    "pypi_name": "generate-dense-patches"
+  },
+  "generic-parser": {
+    "conda_name": "generic_parser",
+    "import_name": "generic_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "generic-parser"
+  },
+  "genericache": {
+    "conda_name": "genericache",
+    "import_name": "genericache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genericache"
+  },
+  "genesis-pyapi": {
+    "conda_name": "genesis-pyapi",
+    "import_name": "genesis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genesis-pyapi"
+  },
+  "genespeak": {
+    "conda_name": "genespeak",
+    "import_name": "genespeak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genespeak"
+  },
+  "genestboost": {
+    "conda_name": "genestboost",
+    "import_name": "genestboost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genestboost"
+  },
+  "genno": {
+    "conda_name": "genno",
+    "import_name": "genno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genno"
+  },
+  "genshi": {
+    "conda_name": "genshi",
+    "import_name": "genshi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "genshi"
+  },
+  "geo-parameters": {
+    "conda_name": "geo-parameters",
+    "import_name": "geo_parameters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geo-parameters"
+  },
+  "geo-skeletons": {
+    "conda_name": "geo-skeletons",
+    "import_name": "geo_skeletons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geo-skeletons"
+  },
+  "geoagent": {
+    "conda_name": "geoagent",
+    "import_name": "geoagent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoagent"
+  },
+  "geoai-py": {
+    "conda_name": "geoai-py",
+    "import_name": "geoai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoai-py"
+  },
+  "geoalchemy2": {
+    "conda_name": "geoalchemy2",
+    "import_name": "geoalchemy2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoalchemy2"
+  },
+  "geoapis": {
+    "conda_name": "geoapis",
+    "import_name": "geoapis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoapis"
+  },
+  "geoarray": {
+    "conda_name": "geoarray",
+    "import_name": "geoarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoarray"
+  },
+  "geoarrow-c": {
+    "conda_name": "geoarrow-c",
+    "import_name": "geoarrow.c",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoarrow-c"
+  },
+  "geoarrow-pyarrow": {
+    "conda_name": "geoarrow-pyarrow",
+    "import_name": "geoarrow.pyarrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoarrow-pyarrow"
+  },
+  "geoarrow-types": {
+    "conda_name": "geoarrow-types",
+    "import_name": "geoarrow.types",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoarrow-types"
+  },
+  "geocat-datafiles": {
+    "conda_name": "geocat-datafiles",
+    "import_name": "geocat.datafiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geocat-datafiles"
+  },
+  "geoclide": {
+    "conda_name": "geoclide",
+    "import_name": "geoclide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoclide"
+  },
+  "geocoder": {
+    "conda_name": "geocoder",
+    "import_name": "geocoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geocoder"
+  },
+  "geocube": {
+    "conda_name": "geocube",
+    "import_name": "geocube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geocube"
+  },
+  "geodata-harvester": {
+    "conda_name": "geodata-harvester",
+    "import_name": "geodata_harvester",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodata-harvester"
+  },
+  "geodatasets": {
+    "conda_name": "geodatasets",
+    "import_name": "geodatasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodatasets"
+  },
+  "geodatatool": {
+    "conda_name": "geodatatool",
+    "import_name": "geodatatool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodatatool"
+  },
+  "geodemo": {
+    "conda_name": "geodemo",
+    "import_name": "geodemo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodemo"
+  },
+  "geodemo-zw": {
+    "conda_name": "geodemo_zw",
+    "import_name": "geodemo_zw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodemo-zw"
+  },
+  "geodemora": {
+    "conda_name": "geodemora",
+    "import_name": "geodemora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geodemora"
+  },
+  "geofabrics": {
+    "conda_name": "geofabrics",
+    "import_name": "geofabrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geofabrics"
+  },
+  "geofileops": {
+    "conda_name": "geofileops",
+    "import_name": "geofileops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geofileops"
+  },
+  "geogif": {
+    "conda_name": "geogif",
+    "import_name": "geogif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geogif"
+  },
+  "geoglows": {
+    "conda_name": "geoglows",
+    "import_name": "geoglows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoglows"
+  },
+  "geograph": {
+    "conda_name": "geograph",
+    "import_name": "geograph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geograph"
+  },
+  "geographiclib": {
+    "conda_name": "geographiclib",
+    "import_name": "geographiclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geographiclib"
+  },
+  "geograpy3": {
+    "conda_name": "geograpy3",
+    "import_name": "geograpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geograpy3"
+  },
+  "geogravl3": {
+    "conda_name": "geogravl3",
+    "import_name": "geogravl3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geogravl3"
+  },
+  "geohexgrid": {
+    "conda_name": "geohexgrid",
+    "import_name": "geohexgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geohexgrid"
+  },
+  "geohexviz": {
+    "conda_name": "geohexviz",
+    "import_name": "geohexviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geohexviz"
+  },
+  "geohmt": {
+    "conda_name": "geohmt",
+    "import_name": "geohmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geohmt"
+  },
+  "geoid-toolkit": {
+    "conda_name": "geoid-toolkit",
+    "import_name": "geoid_toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoid-toolkit"
+  },
+  "geoip2": {
+    "conda_name": "geoip2",
+    "import_name": "geoip2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoip2"
+  },
+  "geojson": {
+    "conda_name": "geojson",
+    "import_name": "geojson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geojson"
+  },
+  "geolinks": {
+    "conda_name": "geolinks",
+    "import_name": "geolinks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geolinks"
+  },
+  "geomad": {
+    "conda_name": "geomad",
+    "import_name": "geomad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomad"
+  },
+  "geomag": {
+    "conda_name": "geomag",
+    "import_name": "geomag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomag"
+  },
+  "geomappy": {
+    "conda_name": "geomappy",
+    "import_name": "geomappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomappy"
+  },
+  "geomatics": {
+    "conda_name": "geomatics",
+    "import_name": "geomatics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomatics"
+  },
+  "geomcompare": {
+    "conda_name": "geomcompare",
+    "import_name": "geomcompare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomcompare"
+  },
+  "geomesher": {
+    "conda_name": "geomesher",
+    "import_name": "geomesher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomesher"
+  },
+  "geomet": {
+    "conda_name": "geomet",
+    "import_name": "geomet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomet"
+  },
+  "geometamaker": {
+    "conda_name": "geometamaker",
+    "import_name": "geometamaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geometamaker"
+  },
+  "geometry3d": {
+    "conda_name": "geometry3d",
+    "import_name": "Geometry3D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geometry3d"
+  },
+  "geomodels": {
+    "conda_name": "geomodels",
+    "import_name": "geomodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geomodels"
+  },
+  "geonum": {
+    "conda_name": "geonum",
+    "import_name": "geonum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geonum"
+  },
+  "geoparse": {
+    "conda_name": "geoparse",
+    "import_name": "GEOparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoparse"
+  },
+  "geopfa": {
+    "conda_name": "geopfa",
+    "import_name": "geopfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geopfa"
+  },
+  "geoplot": {
+    "conda_name": "geoplot",
+    "import_name": "geoplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoplot"
+  },
+  "georasters": {
+    "conda_name": "georasters",
+    "import_name": "georasters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "georasters"
+  },
+  "george": {
+    "conda_name": "george",
+    "import_name": "george",
+    "mapping_source": "regro-bot",
+    "pypi_name": "george"
+  },
+  "georouting": {
+    "conda_name": "georouting",
+    "import_name": "georouting",
+    "mapping_source": "regro-bot",
+    "pypi_name": "georouting"
+  },
+  "geoschem-gcpy": {
+    "conda_name": "geoschem-gcpy",
+    "import_name": "gcpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoschem-gcpy"
+  },
+  "geosci": {
+    "conda_name": "geosci",
+    "import_name": "geosci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geosci"
+  },
+  "geosdemo": {
+    "conda_name": "geosdemo",
+    "import_name": "geosdemo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geosdemo"
+  },
+  "geoserver-rest": {
+    "conda_name": "geoserver-rest",
+    "import_name": "geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoserver-rest"
+  },
+  "geosnap": {
+    "conda_name": "geosnap",
+    "import_name": "geosnap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geosnap"
+  },
+  "geospark": {
+    "conda_name": "geospark",
+    "import_name": "geospark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geospark"
+  },
+  "geospatial": {
+    "conda_name": "geospatial",
+    "import_name": "geospatial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geospatial"
+  },
+  "geospatial-ml": {
+    "conda_name": "geospatial-ml",
+    "import_name": "geospatial_ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geospatial-ml"
+  },
+  "geost": {
+    "conda_name": "geost",
+    "import_name": "geost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geost"
+  },
+  "geostatista": {
+    "conda_name": "geostatista",
+    "import_name": "geostatista",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geostatista"
+  },
+  "geotessera": {
+    "conda_name": "geotessera",
+    "import_name": "geotessera",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geotessera"
+  },
+  "geotext": {
+    "conda_name": "geotext",
+    "import_name": "geotext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geotext"
+  },
+  "geotexxx": {
+    "conda_name": "geotexxx",
+    "import_name": "geotexxx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geotexxx"
+  },
+  "geotiff": {
+    "conda_name": "python-geotiff",
+    "import_name": "geotiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geotiff"
+  },
+  "geotile": {
+    "conda_name": "geotile",
+    "import_name": "geotile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geotile"
+  },
+  "geouned": {
+    "conda_name": "geouned",
+    "import_name": "geouned",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geouned"
+  },
+  "geovista": {
+    "conda_name": "geovista",
+    "import_name": "geovista",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geovista"
+  },
+  "geoxarray": {
+    "conda_name": "geoxarray",
+    "import_name": "geoxarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "geoxarray"
+  },
+  "gerrychain": {
+    "conda_name": "gerrychain",
+    "import_name": "gerrychain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gerrychain"
+  },
+  "gest-api": {
+    "conda_name": "gest-api",
+    "import_name": "gest_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gest-api"
+  },
+  "get-annotations": {
+    "conda_name": "get-annotations",
+    "import_name": "get_annotations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "get-annotations"
+  },
+  "get-docker-secret": {
+    "conda_name": "get-docker-secret",
+    "import_name": "get_docker_secret",
+    "mapping_source": "regro-bot",
+    "pypi_name": "get-docker-secret"
+  },
+  "getcalspec": {
+    "conda_name": "getcalspec",
+    "import_name": "getCalspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "getcalspec"
+  },
+  "gettsim": {
+    "conda_name": "gettsim",
+    "import_name": "gettsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gettsim"
+  },
+  "gevent-websocket": {
+    "conda_name": "gevent-websocket",
+    "import_name": "geventwebsocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gevent-websocket"
+  },
+  "gf-kernel": {
+    "conda_name": "gf-kernel",
+    "import_name": "gf_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gf-kernel"
+  },
+  "gflanguages": {
+    "conda_name": "gflanguages",
+    "import_name": "gflanguages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gflanguages"
+  },
+  "gftool": {
+    "conda_name": "gftool",
+    "import_name": "gftool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gftool"
+  },
+  "gglasso": {
+    "conda_name": "gglasso",
+    "import_name": "gglasso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gglasso"
+  },
+  "gh-scoped-creds": {
+    "conda_name": "gh-scoped-creds",
+    "import_name": "gh_scoped_creds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gh-scoped-creds"
+  },
+  "ghetool": {
+    "conda_name": "ghetool",
+    "import_name": "GHEtool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ghetool"
+  },
+  "ghostpii": {
+    "conda_name": "ghostpii",
+    "import_name": "ghostPii",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ghostpii"
+  },
+  "ghp-import": {
+    "conda_name": "ghp-import",
+    "import_name": "ghp_import",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ghp-import"
+  },
+  "ghstack": {
+    "conda_name": "ghstack",
+    "import_name": "ghstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ghstack"
+  },
+  "ghtoken": {
+    "conda_name": "ghtoken",
+    "import_name": "ghtoken",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ghtoken"
+  },
+  "gi-docgen": {
+    "conda_name": "gi-docgen",
+    "import_name": "gidocgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gi-docgen"
+  },
+  "giddy": {
+    "conda_name": "giddy",
+    "import_name": "giddy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "giddy"
+  },
+  "gidgethub": {
+    "conda_name": "gidgethub",
+    "import_name": "gidgethub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gidgethub"
+  },
+  "gif": {
+    "conda_name": "gif",
+    "import_name": "gif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gif"
+  },
+  "gillespy2": {
+    "conda_name": "gillespy2",
+    "import_name": "gillespy2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gillespy2"
+  },
+  "gin-config": {
+    "conda_name": "gin-config",
+    "import_name": "gin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gin-config"
+  },
+  "ginga": {
+    "conda_name": "ginga",
+    "import_name": "ginga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ginga"
+  },
+  "girder": {
+    "conda_name": "girder",
+    "import_name": "girder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "girder"
+  },
+  "girder-client": {
+    "conda_name": "girder-client",
+    "import_name": "girder_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "girder-client"
+  },
+  "gis-metadata-parser": {
+    "conda_name": "gis-metadata-parser",
+    "import_name": "gis_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gis-metadata-parser"
+  },
+  "gis-utils": {
+    "conda_name": "gis-utils",
+    "import_name": "gisutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gis-utils"
+  },
+  "gisdata": {
+    "conda_name": "gisdata",
+    "import_name": "gisdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gisdata"
+  },
+  "giso": {
+    "conda_name": "giso",
+    "import_name": "giso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "giso"
+  },
+  "gistim": {
+    "conda_name": "gistim",
+    "import_name": "gistim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gistim"
+  },
+  "git-annex-remote-googledrive": {
+    "conda_name": "git-annex-remote-googledrive",
+    "import_name": "git_annex_remote_googledrive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-annex-remote-googledrive"
+  },
+  "git-changelog": {
+    "conda_name": "git-changelog",
+    "import_name": "git_changelog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-changelog"
+  },
+  "git-fame": {
+    "conda_name": "git-fame",
+    "import_name": "gitfame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-fame"
+  },
+  "git-machete": {
+    "conda_name": "git-machete",
+    "import_name": "git_machete",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-machete"
+  },
+  "git-pull-request": {
+    "conda_name": "git-pull-request",
+    "import_name": "git_pull_request",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-pull-request"
+  },
+  "git-remote-codecommit": {
+    "conda_name": "git-remote-codecommit",
+    "import_name": "git_remote_codecommit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-remote-codecommit"
+  },
+  "git-story": {
+    "conda_name": "git-story",
+    "import_name": "git_story",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-story"
+  },
+  "git-url-parse": {
+    "conda_name": "git-url-parse",
+    "import_name": "giturlparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "git-url-parse"
+  },
+  "gita": {
+    "conda_name": "gita",
+    "import_name": "gita",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gita"
+  },
+  "gitdb": {
+    "conda_name": "gitdb",
+    "import_name": "gitdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitdb"
+  },
+  "gitdb2": {
+    "conda_name": "gitdb2",
+    "import_name": "gitdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitdb2"
+  },
+  "gitflow-studio": {
+    "conda_name": "gitflow-studio",
+    "import_name": "studio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitflow-studio"
+  },
+  "github-action-utils": {
+    "conda_name": "github-action-utils",
+    "import_name": "github_action_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "github-action-utils"
+  },
+  "github-activity": {
+    "conda_name": "github-activity",
+    "import_name": "github_activity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "github-activity"
+  },
+  "github-copilot-sdk": {
+    "conda_name": "github-copilot-sdk",
+    "import_name": "copilot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "github-copilot-sdk"
+  },
+  "github-to-sqlite": {
+    "conda_name": "github-to-sqlite",
+    "import_name": "github_to_sqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "github-to-sqlite"
+  },
+  "github3-py": {
+    "conda_name": "github3.py",
+    "import_name": "github3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "github3-py"
+  },
+  "gitignore-parser": {
+    "conda_name": "gitignore-parser",
+    "import_name": "gitignore_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitignore-parser"
+  },
+  "gitlab-runner-api": {
+    "conda_name": "gitlab-runner-api",
+    "import_name": "gitlab_runner_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitlab-runner-api"
+  },
+  "gitmodules": {
+    "conda_name": "gitmodules",
+    "import_name": "gitmodules",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitmodules"
+  },
+  "gitpython": {
+    "conda_name": "gitpython",
+    "import_name": "git",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitpython"
+  },
+  "gitsummary": {
+    "conda_name": "gitsummary",
+    "import_name": "gitsummary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gitsummary"
+  },
+  "giturlparse-py": {
+    "conda_name": "giturlparse.py",
+    "import_name": "giturlparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "giturlparse-py"
+  },
+  "gjf": {
+    "conda_name": "gjf",
+    "import_name": "gjf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gjf"
+  },
+  "glacier": {
+    "conda_name": "glacier",
+    "import_name": "glacier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glacier"
+  },
+  "gladtex": {
+    "conda_name": "gladtex",
+    "import_name": "gleetex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gladtex"
+  },
+  "glasbey": {
+    "conda_name": "glasbey",
+    "import_name": "glasbey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glasbey"
+  },
+  "glasflow": {
+    "conda_name": "glasflow",
+    "import_name": "glasflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glasflow"
+  },
+  "glfw": {
+    "conda_name": "pyglfw",
+    "import_name": "glfw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glfw"
+  },
+  "glidertest": {
+    "conda_name": "glidertest",
+    "import_name": "glidertest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glidertest"
+  },
+  "glidertools": {
+    "conda_name": "glidertools",
+    "import_name": "glidertools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glidertools"
+  },
+  "gliner": {
+    "conda_name": "gliner",
+    "import_name": "gliner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gliner"
+  },
+  "glmnet": {
+    "conda_name": "glmnet",
+    "import_name": "glmnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glmnet"
+  },
+  "glob2": {
+    "conda_name": "glob2",
+    "import_name": "glob2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glob2"
+  },
+  "globalign": {
+    "conda_name": "globalign",
+    "import_name": "globalign",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globalign"
+  },
+  "globalwarmingpotentials": {
+    "conda_name": "globalwarmingpotentials",
+    "import_name": "globalwarmingpotentials",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globalwarmingpotentials"
+  },
+  "globre": {
+    "conda_name": "globre",
+    "import_name": "globre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globre"
+  },
+  "globus-automate-client": {
+    "conda_name": "globus-automate-client",
+    "import_name": "globus_automate_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globus-automate-client"
+  },
+  "globus-compute-sdk": {
+    "conda_name": "globus-compute-sdk",
+    "import_name": "globus_compute_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globus-compute-sdk"
+  },
+  "globus-nexus-client": {
+    "conda_name": "globus-nexus-client",
+    "import_name": "globus_nexus_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "globus-nexus-client"
+  },
+  "glodap": {
+    "conda_name": "glodap",
+    "import_name": "glodap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glodap"
+  },
+  "gloe": {
+    "conda_name": "gloe",
+    "import_name": "gloe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gloe"
+  },
+  "glpk": {
+    "conda_name": "pyglpk",
+    "import_name": "glpk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glpk"
+  },
+  "gltflib": {
+    "conda_name": "gltflib",
+    "import_name": "gltflib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gltflib"
+  },
+  "glue-astronomy": {
+    "conda_name": "glue-astronomy",
+    "import_name": "glue_astronomy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-astronomy"
+  },
+  "glue-core": {
+    "conda_name": "glue-core",
+    "import_name": "glue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-core"
+  },
+  "glue-geospatial": {
+    "conda_name": "glue-geospatial",
+    "import_name": "glue_geospatial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-geospatial"
+  },
+  "glue-jupyter": {
+    "conda_name": "glue-jupyter",
+    "import_name": "glue_jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-jupyter"
+  },
+  "glue-jupyterlab": {
+    "conda_name": "glue-jupyterlab",
+    "import_name": "glue_jupyterlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-jupyterlab"
+  },
+  "glue-medical": {
+    "conda_name": "glue-medical",
+    "import_name": "glue_medical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-medical"
+  },
+  "glue-plotly": {
+    "conda_name": "glue-plotly",
+    "import_name": "glue_plotly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-plotly"
+  },
+  "glue-qt": {
+    "conda_name": "glue-qt",
+    "import_name": "glue_qt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-qt"
+  },
+  "glue-samp": {
+    "conda_name": "glue-samp",
+    "import_name": "glue_samp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-samp"
+  },
+  "glue-vispy-viewers": {
+    "conda_name": "glue-vispy-viewers",
+    "import_name": "glue_vispy_viewers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-vispy-viewers"
+  },
+  "glue-wwt": {
+    "conda_name": "glue-wwt",
+    "import_name": "glue_wwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glue-wwt"
+  },
+  "gluoncv": {
+    "conda_name": "gluoncv",
+    "import_name": "gluoncv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gluoncv"
+  },
+  "gluonts": {
+    "conda_name": "gluonts",
+    "import_name": "gluonts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gluonts"
+  },
+  "glymur": {
+    "conda_name": "glymur",
+    "import_name": "glymur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "glymur"
+  },
+  "gmaps": {
+    "conda_name": "gmaps",
+    "import_name": "gmaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmaps"
+  },
+  "gmmx": {
+    "conda_name": "gmmx",
+    "import_name": "gmmx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmmx"
+  },
+  "gmpacket": {
+    "conda_name": "gmpacket",
+    "import_name": "gmpacket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpacket"
+  },
+  "gmprocess": {
+    "conda_name": "gmprocess",
+    "import_name": "gmprocess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmprocess"
+  },
+  "gmpy2": {
+    "conda_name": "gmpy2",
+    "import_name": "gmpy2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpy2"
+  },
+  "gmpyinfr-amqp": {
+    "conda_name": "gmpyinfr_amqp",
+    "import_name": "gmpyinfr_amqp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpyinfr-amqp"
+  },
+  "gmpyinfr-dbutils": {
+    "conda_name": "gmpyinfr_dbutils",
+    "import_name": "gmpyinfr_dbutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpyinfr-dbutils"
+  },
+  "gmpyinfr-log": {
+    "conda_name": "gmpyinfr_log",
+    "import_name": "gmpyinfr_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpyinfr-log"
+  },
+  "gmpyinfr-telegram": {
+    "conda_name": "gmpyinfr_telegram",
+    "import_name": "gmpyinfr_telegram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmpyinfr-telegram"
+  },
+  "gms-preprocessing": {
+    "conda_name": "gms_preprocessing",
+    "import_name": "gms_preprocessing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gms-preprocessing"
+  },
+  "gmshmodel": {
+    "conda_name": "gmshmodel",
+    "import_name": "gmshModel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmshmodel"
+  },
+  "gmx-mmpbsa": {
+    "conda_name": "gmx_mmpbsa",
+    "import_name": "GMXMMPBSA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gmx-mmpbsa"
+  },
+  "gnumpy": {
+    "conda_name": "gnumpy",
+    "import_name": "gnumpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gnumpy"
+  },
+  "gnupg": {
+    "conda_name": "gnupg-py",
+    "import_name": "gnupg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gnupg"
+  },
+  "goatools": {
+    "conda_name": "goatools",
+    "import_name": "goatools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goatools"
+  },
+  "gocart": {
+    "conda_name": "gocart",
+    "import_name": "gocart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gocart"
+  },
+  "godale": {
+    "conda_name": "godale",
+    "import_name": "godale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "godale"
+  },
+  "goes2go": {
+    "conda_name": "goes2go",
+    "import_name": "goes2go",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goes2go"
+  },
+  "gofit": {
+    "conda_name": "gofit",
+    "import_name": "gofit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gofit"
+  },
+  "goftests": {
+    "conda_name": "goftests",
+    "import_name": "goftests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goftests"
+  },
+  "goodtables": {
+    "conda_name": "goodtables",
+    "import_name": "goodtables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goodtables"
+  },
+  "goodtables-pandas-py": {
+    "conda_name": "goodtables-pandas-py",
+    "import_name": "goodtables_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goodtables-pandas-py"
+  },
+  "goodvibes": {
+    "conda_name": "goodvibes",
+    "import_name": "goodvibes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "goodvibes"
+  },
+  "gooey": {
+    "conda_name": "gooey",
+    "import_name": "gooey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gooey"
+  },
+  "google": {
+    "conda_name": "googlesearch",
+    "import_name": "googlesearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google"
+  },
+  "google-adk": {
+    "conda_name": "google-adk",
+    "import_name": "google.adk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-adk"
+  },
+  "google-ai-generativelanguage": {
+    "conda_name": "google-ai-generativelanguage",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-ai-generativelanguage"
+  },
+  "google-apitools": {
+    "conda_name": "google-apitools",
+    "import_name": "apitools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-apitools"
+  },
+  "google-auth-oauthlib": {
+    "conda_name": "google-auth-oauthlib",
+    "import_name": "google_auth_oauthlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-auth-oauthlib"
+  },
+  "google-cloud-artifact-registry": {
+    "conda_name": "google-cloud-artifact-registry",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-cloud-artifact-registry"
+  },
+  "google-cloud-bigquery-connection": {
+    "conda_name": "google-cloud-bigquery-connection",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-cloud-bigquery-connection"
+  },
+  "google-cloud-functions": {
+    "conda_name": "google-cloud-functions",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-cloud-functions"
+  },
+  "google-cloud-ndb": {
+    "conda_name": "google-cloud-ndb",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-cloud-ndb"
+  },
+  "google-cloud-scheduler": {
+    "conda_name": "google-cloud-scheduler",
+    "import_name": "google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-cloud-scheduler"
+  },
+  "google-colab": {
+    "conda_name": "google-colab",
+    "import_name": "google.colab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-colab"
+  },
+  "google-compute-engine": {
+    "conda_name": "google-compute-engine",
+    "import_name": "google_compute_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-compute-engine"
+  },
+  "google-crc32c": {
+    "conda_name": "google-crc32c",
+    "import_name": "google_crc32c",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-crc32c"
+  },
+  "google-geo-type": {
+    "conda_name": "google-geo-type",
+    "import_name": "google.geo.type",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-geo-type"
+  },
+  "google-maps-routing": {
+    "conda_name": "google-maps-routing",
+    "import_name": "google.maps.routing_v2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-maps-routing"
+  },
+  "google-pasta": {
+    "conda_name": "google-pasta",
+    "import_name": "pasta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-pasta"
+  },
+  "google-reauth": {
+    "conda_name": "google-reauth",
+    "import_name": "google_reauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "google-reauth"
+  },
+  "googledrivedownloader": {
+    "conda_name": "googledrivedownloader",
+    "import_name": "googledrivedownloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "googledrivedownloader"
+  },
+  "googlemaps": {
+    "conda_name": "googlemaps",
+    "import_name": "googlemaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "googlemaps"
+  },
+  "googletrans": {
+    "conda_name": "googletrans",
+    "import_name": "googletrans",
+    "mapping_source": "regro-bot",
+    "pypi_name": "googletrans"
+  },
+  "gordias": {
+    "conda_name": "gordias",
+    "import_name": "gordias",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gordias"
+  },
+  "gorilla": {
+    "conda_name": "gorilla",
+    "import_name": "gorilla",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gorilla"
+  },
+  "gorilla-cli": {
+    "conda_name": "gorilla-cli",
+    "import_name": "go_questionary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gorilla-cli"
+  },
+  "gotran": {
+    "conda_name": "gotran",
+    "import_name": "gotran",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gotran"
+  },
+  "gotranx": {
+    "conda_name": "gotranx",
+    "import_name": "gotranx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gotranx"
+  },
+  "gotrue": {
+    "conda_name": "gotrue",
+    "import_name": "gotrue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gotrue"
+  },
+  "gp-tempest": {
+    "conda_name": "gp-tempest",
+    "import_name": "gptempest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gp-tempest"
+  },
+  "gpflow": {
+    "conda_name": "gpflow",
+    "import_name": "gpflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpflow"
+  },
+  "gpkgstatus": {
+    "conda_name": "gpkgstatus",
+    "import_name": "gpkgstatus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpkgstatus"
+  },
+  "gplately": {
+    "conda_name": "gplately",
+    "import_name": "gplately",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gplately"
+  },
+  "gplite": {
+    "conda_name": "gplite",
+    "import_name": "gplite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gplite"
+  },
+  "gpm-api": {
+    "conda_name": "gpm-api",
+    "import_name": "gpm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpm-api"
+  },
+  "gpp-client": {
+    "conda_name": "gpp-client",
+    "import_name": "gpp_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpp-client"
+  },
+  "gprof2dot": {
+    "conda_name": "gprof2dot",
+    "import_name": "gprof2dot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gprof2dot"
+  },
+  "gps-timemachine": {
+    "conda_name": "gps-timemachine",
+    "import_name": "gps_timemachine.gps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gps-timemachine"
+  },
+  "gptcache": {
+    "conda_name": "gptcache",
+    "import_name": "gptcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gptcache"
+  },
+  "gpustat": {
+    "conda_name": "gpustat",
+    "import_name": "gpustat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpustat"
+  },
+  "gputools": {
+    "conda_name": "gputools",
+    "import_name": "gputools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gputools"
+  },
+  "gpx": {
+    "conda_name": "gpx",
+    "import_name": "gpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpx"
+  },
+  "gpxpy": {
+    "conda_name": "gpxpy",
+    "import_name": "gpxpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpxpy"
+  },
+  "gpyconform": {
+    "conda_name": "gpyconform",
+    "import_name": "gpyconform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpyconform"
+  },
+  "gpyopt": {
+    "conda_name": "gpyopt",
+    "import_name": "GPyOpt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpyopt"
+  },
+  "gpyreg": {
+    "conda_name": "gpyreg",
+    "import_name": "gpyreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gpyreg"
+  },
+  "gql": {
+    "conda_name": "gql",
+    "import_name": "gql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gql"
+  },
+  "grabber-ift": {
+    "conda_name": "grabber-ift",
+    "import_name": "grabber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grabber-ift"
+  },
+  "gracedb-sdk": {
+    "conda_name": "gracedb-sdk",
+    "import_name": "gracedb_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gracedb-sdk"
+  },
+  "grad-cam": {
+    "conda_name": "grad-cam",
+    "import_name": "pytorch_grad_cam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grad-cam"
+  },
+  "gradescope-utils": {
+    "conda_name": "gradescope-utils",
+    "import_name": "gradescope_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gradescope-utils"
+  },
+  "gradient-agreement-filtering": {
+    "conda_name": "gradient-agreement-filtering",
+    "import_name": "gradient_agreement_filtering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gradient-agreement-filtering"
+  },
+  "gradientai": {
+    "conda_name": "gradientai",
+    "import_name": "gradientai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gradientai"
+  },
+  "gradio-client": {
+    "conda_name": "gradio-client",
+    "import_name": "gradio_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gradio-client"
+  },
+  "gradsflow": {
+    "conda_name": "gradsflow",
+    "import_name": "gradsflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gradsflow"
+  },
+  "grafana-api": {
+    "conda_name": "grafana_api",
+    "import_name": "grafana_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grafana-api"
+  },
+  "grafana-client": {
+    "conda_name": "grafana-client",
+    "import_name": "grafana_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grafana-client"
+  },
+  "grakel": {
+    "conda_name": "grakel",
+    "import_name": "grakel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grakel"
+  },
+  "grape": {
+    "conda_name": "grape",
+    "import_name": "grape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grape"
+  },
+  "grapes": {
+    "conda_name": "grapes",
+    "import_name": "grapes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grapes"
+  },
+  "graph-hypothesis": {
+    "conda_name": "graph-hypothesis",
+    "import_name": "graph_hypothesis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graph-hypothesis"
+  },
+  "graph-pes": {
+    "conda_name": "graph-pes",
+    "import_name": "graph_pes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graph-pes"
+  },
+  "grapharray": {
+    "conda_name": "grapharray",
+    "import_name": "grapharray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grapharray"
+  },
+  "graphblas-algorithms": {
+    "conda_name": "graphblas-algorithms",
+    "import_name": "graphblas_algorithms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphblas-algorithms"
+  },
+  "graphbrain": {
+    "conda_name": "graphbrain",
+    "import_name": "graphbrain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphbrain"
+  },
+  "graphdatascience": {
+    "conda_name": "graphdatascience",
+    "import_name": "graphdatascience",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphdatascience"
+  },
+  "grapheme": {
+    "conda_name": "grapheme",
+    "import_name": "grapheme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grapheme"
+  },
+  "graphene": {
+    "conda_name": "graphene",
+    "import_name": "graphene",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphene"
+  },
+  "graphene-django": {
+    "conda_name": "graphene-django",
+    "import_name": "graphene_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphene-django"
+  },
+  "graphene-mongo": {
+    "conda_name": "graphene-mongo",
+    "import_name": "graphene_mongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphene-mongo"
+  },
+  "graphene-sqlalchemy": {
+    "conda_name": "graphene-sqlalchemy",
+    "import_name": "graphene_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphene-sqlalchemy"
+  },
+  "graphene-tornado": {
+    "conda_name": "graphene-tornado",
+    "import_name": "graphene_tornado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphene-tornado"
+  },
+  "graphframes": {
+    "conda_name": "graphframes",
+    "import_name": "graphframes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphframes"
+  },
+  "graphium": {
+    "conda_name": "graphium",
+    "import_name": "graphium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphium"
+  },
+  "graphlib-backport": {
+    "conda_name": "graphlib-backport",
+    "import_name": "graphlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphlib-backport"
+  },
+  "graphormer-pretrained": {
+    "conda_name": "graphormer-pretrained",
+    "import_name": "graphormer_pretrained",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphormer-pretrained"
+  },
+  "graphpro": {
+    "conda_name": "graphpro",
+    "import_name": "graphpro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphpro"
+  },
+  "graphql-relay": {
+    "conda_name": "graphql-relay",
+    "import_name": "graphql_relay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphql-relay"
+  },
+  "graphql-ws": {
+    "conda_name": "graphql-ws",
+    "import_name": "graphql_ws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphql-ws"
+  },
+  "graphtools": {
+    "conda_name": "graphtools",
+    "import_name": "graphtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphtools"
+  },
+  "graphviz": {
+    "conda_name": "python-graphviz",
+    "import_name": "graphviz",
+    "mapping_source": "static",
+    "pypi_name": "graphviz"
+  },
+  "graphysio": {
+    "conda_name": "graphysio",
+    "import_name": "graphysio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graphysio"
+  },
+  "graspologic": {
+    "conda_name": "graspologic",
+    "import_name": "graspologic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graspologic"
+  },
+  "graspologic-native": {
+    "conda_name": "graspologic-native",
+    "import_name": "graspologic_native",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graspologic-native"
+  },
+  "gravis": {
+    "conda_name": "gravis",
+    "import_name": "gravis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gravis"
+  },
+  "gravity-toolkit": {
+    "conda_name": "gravity-toolkit",
+    "import_name": "gravity_toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gravity-toolkit"
+  },
+  "graylint": {
+    "conda_name": "graylint",
+    "import_name": "graylint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graylint"
+  },
+  "graypy": {
+    "conda_name": "graypy",
+    "import_name": "graypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "graypy"
+  },
+  "grblogtools": {
+    "conda_name": "grblogtools",
+    "import_name": "grblogtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grblogtools"
+  },
+  "great-expectations": {
+    "conda_name": "great-expectations",
+    "import_name": "great_expectations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "great-expectations"
+  },
+  "greedy": {
+    "conda_name": "greedy",
+    "import_name": "greedy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "greedy"
+  },
+  "green": {
+    "conda_name": "green",
+    "import_name": "green",
+    "mapping_source": "regro-bot",
+    "pypi_name": "green"
+  },
+  "greenback": {
+    "conda_name": "greenback",
+    "import_name": "greenback",
+    "mapping_source": "regro-bot",
+    "pypi_name": "greenback"
+  },
+  "greenletio": {
+    "conda_name": "greenletio",
+    "import_name": "greenletio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "greenletio"
+  },
+  "gremlinpython": {
+    "conda_name": "gremlinpython",
+    "import_name": "gremlin_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gremlinpython"
+  },
+  "grequests": {
+    "conda_name": "grequests",
+    "import_name": "grequests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grequests"
+  },
+  "greykite": {
+    "conda_name": "greykite",
+    "import_name": "greykite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "greykite"
+  },
+  "grheat": {
+    "conda_name": "grheat",
+    "import_name": "grheat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grheat"
+  },
+  "grib2io-interp": {
+    "conda_name": "grib2io-interp",
+    "import_name": "grib2io_interp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grib2io-interp"
+  },
+  "grid-strategy": {
+    "conda_name": "grid-strategy",
+    "import_name": "grid_strategy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grid-strategy"
+  },
+  "griddataformats": {
+    "conda_name": "griddataformats",
+    "import_name": "gridData",
+    "mapping_source": "regro-bot",
+    "pypi_name": "griddataformats"
+  },
+  "gridemissions": {
+    "conda_name": "gridemissions",
+    "import_name": "gridemissions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridemissions"
+  },
+  "gridgeo": {
+    "conda_name": "gridgeo",
+    "import_name": "gridgeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridgeo"
+  },
+  "gridit": {
+    "conda_name": "gridit",
+    "import_name": "gridit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridit"
+  },
+  "gridmap": {
+    "conda_name": "gridmap",
+    "import_name": "gridmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridmap"
+  },
+  "gridtest": {
+    "conda_name": "gridtest",
+    "import_name": "gridtest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridtest"
+  },
+  "gridtk": {
+    "conda_name": "gridtk",
+    "import_name": "gridtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gridtk"
+  },
+  "griffe-inherited-docstrings": {
+    "conda_name": "griffe-inherited-docstrings",
+    "import_name": "griffe_inherited_docstrings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "griffe-inherited-docstrings"
+  },
+  "griffe-pydantic": {
+    "conda_name": "griffe-pydantic",
+    "import_name": "griffe_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "griffe-pydantic"
+  },
+  "grin": {
+    "conda_name": "grin",
+    "import_name": "grin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grin"
+  },
+  "griottes": {
+    "conda_name": "griottes",
+    "import_name": "griottes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "griottes"
+  },
+  "grip": {
+    "conda_name": "grip",
+    "import_name": "grip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grip"
+  },
+  "grip-nulling": {
+    "conda_name": "grip-nulling",
+    "import_name": "grip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grip-nulling"
+  },
+  "groclient": {
+    "conda_name": "groclient",
+    "import_name": "api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "groclient"
+  },
+  "gromacswrapper": {
+    "conda_name": "gromacswrapper",
+    "import_name": "gromacs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gromacswrapper"
+  },
+  "groovy": {
+    "conda_name": "groovy-python",
+    "import_name": "groovy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "groovy"
+  },
+  "groq": {
+    "conda_name": "groq",
+    "import_name": "groq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "groq"
+  },
+  "groundingdino-py": {
+    "conda_name": "groundingdino-py",
+    "import_name": "groundingdino",
+    "mapping_source": "regro-bot",
+    "pypi_name": "groundingdino-py"
+  },
+  "grpc-interceptor": {
+    "conda_name": "grpc-interceptor",
+    "import_name": "grpc_interceptor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grpc-interceptor"
+  },
+  "grpcio-gcp": {
+    "conda_name": "grpcio-gcp",
+    "import_name": "grpc_gcp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grpcio-gcp"
+  },
+  "grpcio-reflection": {
+    "conda_name": "grpcio-reflection",
+    "import_name": "grpc_reflection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grpcio-reflection"
+  },
+  "grpclib": {
+    "conda_name": "grpclib",
+    "import_name": "grpclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grpclib"
+  },
+  "grplot": {
+    "conda_name": "grplot",
+    "import_name": "grplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grplot"
+  },
+  "grunnur": {
+    "conda_name": "grunnur",
+    "import_name": "grunnur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "grunnur"
+  },
+  "gruut": {
+    "conda_name": "gruut",
+    "import_name": "gruut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gruut"
+  },
+  "gruut-lang-en": {
+    "conda_name": "gruut-lang-en",
+    "import_name": "gruut_lang_en",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gruut-lang-en"
+  },
+  "gryds": {
+    "conda_name": "gryds",
+    "import_name": "gryds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gryds"
+  },
+  "gs-quant": {
+    "conda_name": "gs-quant",
+    "import_name": "gs_quant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gs-quant"
+  },
+  "gsee": {
+    "conda_name": "gsee",
+    "import_name": "gsee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsee"
+  },
+  "gsheetsdb": {
+    "conda_name": "gsheetsdb",
+    "import_name": "gsheetsdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsheetsdb"
+  },
+  "gslides": {
+    "conda_name": "gslides",
+    "import_name": "gslides",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gslides"
+  },
+  "gspread": {
+    "conda_name": "gspread",
+    "import_name": "gspread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gspread"
+  },
+  "gspread-dataframe": {
+    "conda_name": "gspread-dataframe",
+    "import_name": "gspread_dataframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gspread-dataframe"
+  },
+  "gspread-pandas": {
+    "conda_name": "gspread-pandas",
+    "import_name": "gspread_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gspread-pandas"
+  },
+  "gssapi": {
+    "conda_name": "python-gssapi",
+    "import_name": "gssapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gssapi"
+  },
+  "gsshapy": {
+    "conda_name": "gsshapy",
+    "import_name": "gsshapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsshapy"
+  },
+  "gsshapyorm": {
+    "conda_name": "gsshapyorm",
+    "import_name": "gsshapyorm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsshapyorm"
+  },
+  "gstools": {
+    "conda_name": "gstools",
+    "import_name": "gstools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gstools"
+  },
+  "gstools-cython": {
+    "conda_name": "gstools-cython",
+    "import_name": "gstools_cython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gstools-cython"
+  },
+  "gsutil": {
+    "conda_name": "gsutil",
+    "import_name": "gslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsutil"
+  },
+  "gsw-xarray": {
+    "conda_name": "gsw-xarray",
+    "import_name": "gsw_xarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gsw-xarray"
+  },
+  "gtabview": {
+    "conda_name": "gtabview",
+    "import_name": "gtabview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gtabview"
+  },
+  "gtdb-validation-tk": {
+    "conda_name": "gtdb_validation_tk",
+    "import_name": "gtdb_validation_tk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gtdb-validation-tk"
+  },
+  "gtdownloader": {
+    "conda_name": "gtdownloader",
+    "import_name": "gtdownloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gtdownloader"
+  },
+  "guanine-crystal-analysis": {
+    "conda_name": "guanine-crystal-analysis",
+    "import_name": "guanine_crystal_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "guanine-crystal-analysis"
+  },
+  "guidance": {
+    "conda_name": "guidance",
+    "import_name": "guidance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "guidance"
+  },
+  "gulpio": {
+    "conda_name": "gulpio",
+    "import_name": "gulpio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gulpio"
+  },
+  "gunicorn": {
+    "conda_name": "gunicorn",
+    "import_name": "gunicorn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gunicorn"
+  },
+  "gunpowder": {
+    "conda_name": "gunpowder",
+    "import_name": "gunpowder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gunpowder"
+  },
+  "guppy3": {
+    "conda_name": "guppy3",
+    "import_name": "guppy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "guppy3"
+  },
+  "gwcosmo": {
+    "conda_name": "gwcosmo",
+    "import_name": "gwcosmo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwcosmo"
+  },
+  "gwcs": {
+    "conda_name": "gwcs",
+    "import_name": "gwcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwcs"
+  },
+  "gwdetchar": {
+    "conda_name": "gwdetchar",
+    "import_name": "gwdetchar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwdetchar"
+  },
+  "gwemopt": {
+    "conda_name": "gwemopt",
+    "import_name": "gwemopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwemopt"
+  },
+  "gwinc": {
+    "conda_name": "gwinc",
+    "import_name": "gwinc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwinc"
+  },
+  "gwlearn": {
+    "conda_name": "gwlearn",
+    "import_name": "gwlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwlearn"
+  },
+  "gwmemory": {
+    "conda_name": "gwmemory",
+    "import_name": "gwmemory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwmemory"
+  },
+  "gwpopulation-pipe": {
+    "conda_name": "gwpopulation-pipe",
+    "import_name": "gwpopulation_pipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwpopulation-pipe"
+  },
+  "gwsumm": {
+    "conda_name": "gwsumm",
+    "import_name": "gwsumm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwsumm"
+  },
+  "gwsurrogate": {
+    "conda_name": "gwsurrogate",
+    "import_name": "gwsurrogate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwsurrogate"
+  },
+  "gwtc-analysis": {
+    "conda_name": "gwtc_analysis",
+    "import_name": "gwtc_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwtc-analysis"
+  },
+  "gwtc-tools": {
+    "conda_name": "gwtc-tools",
+    "import_name": "gwtc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwtc-tools"
+  },
+  "gwtools": {
+    "conda_name": "gwtools",
+    "import_name": "gwtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwtools"
+  },
+  "gwtrigfind": {
+    "conda_name": "gwtrigfind",
+    "import_name": "gwtrigfind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwtrigfind"
+  },
+  "gwvet": {
+    "conda_name": "gwvet",
+    "import_name": "gwvet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwvet"
+  },
+  "gwyfile": {
+    "conda_name": "gwyfile",
+    "import_name": "gwyfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gwyfile"
+  },
+  "gym-ignition-models": {
+    "conda_name": "gym-ignition-models",
+    "import_name": "gym_ignition_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gym-ignition-models"
+  },
+  "gym-pusht": {
+    "conda_name": "gym-pusht",
+    "import_name": "gym_pusht",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gym-pusht"
+  },
+  "gym-saturation": {
+    "conda_name": "gym-saturation",
+    "import_name": "gym_saturation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gym-saturation"
+  },
+  "gymnasium-notices": {
+    "conda_name": "gymnasium-notices",
+    "import_name": "gymnasium_notices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "gymnasium-notices"
+  },
+  "h2o": {
+    "conda_name": "h2o-py",
+    "import_name": "h2o",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h2o"
+  },
+  "h3pandas": {
+    "conda_name": "h3pandas",
+    "import_name": "h3pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h3pandas"
+  },
+  "h3spark": {
+    "conda_name": "h3spark",
+    "import_name": "h3spark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h3spark"
+  },
+  "h5coro": {
+    "conda_name": "h5coro",
+    "import_name": "h5coro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5coro"
+  },
+  "h5grove": {
+    "conda_name": "h5grove",
+    "import_name": "h5grove",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5grove"
+  },
+  "h5io": {
+    "conda_name": "h5io",
+    "import_name": "h5io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5io"
+  },
+  "h5netcdf": {
+    "conda_name": "h5netcdf",
+    "import_name": "h5netcdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5netcdf"
+  },
+  "h5pickle": {
+    "conda_name": "h5pickle",
+    "import_name": "h5pickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5pickle"
+  },
+  "h5pulsar": {
+    "conda_name": "h5pulsar",
+    "import_name": "h5pulsar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5pulsar"
+  },
+  "h5pyd": {
+    "conda_name": "h5pyd",
+    "import_name": "h5pyd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5pyd"
+  },
+  "h5pywrappers": {
+    "conda_name": "h5pywrappers",
+    "import_name": "h5pywrappers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "h5pywrappers"
+  },
+  "habanero": {
+    "conda_name": "habanero",
+    "import_name": "habanero",
+    "mapping_source": "regro-bot",
+    "pypi_name": "habanero"
+  },
+  "hachoir-subfile": {
+    "conda_name": "hachoir-subfile",
+    "import_name": "hachoir_subfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hachoir-subfile"
+  },
+  "hackernote": {
+    "conda_name": "hackernote",
+    "import_name": "hackernote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hackernote"
+  },
+  "hadoop-test-cluster": {
+    "conda_name": "hadoop-test-cluster",
+    "import_name": "hadoop_test_cluster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hadoop-test-cluster"
+  },
+  "haesleinhuepf-pyqode-core": {
+    "conda_name": "haesleinhuepf-pyqode.core",
+    "import_name": "pyqode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "haesleinhuepf-pyqode-core"
+  },
+  "haesleinhuepf-pyqode-python": {
+    "conda_name": "haesleinhuepf-pyqode.python",
+    "import_name": "pyqode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "haesleinhuepf-pyqode-python"
+  },
+  "hagerstrand": {
+    "conda_name": "hagerstrand",
+    "import_name": "hagerstrand",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hagerstrand"
+  },
+  "hallelujah": {
+    "conda_name": "hallelujah",
+    "import_name": "hallelujah",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hallelujah"
+  },
+  "halo": {
+    "conda_name": "halo",
+    "import_name": "halo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "halo"
+  },
+  "halotools": {
+    "conda_name": "halotools",
+    "import_name": "halotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "halotools"
+  },
+  "hamilflow": {
+    "conda_name": "hamilflow",
+    "import_name": "hamilflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hamilflow"
+  },
+  "handout": {
+    "conda_name": "handout",
+    "import_name": "handout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "handout"
+  },
+  "handy-archives": {
+    "conda_name": "handy-archives",
+    "import_name": "handy_archives",
+    "mapping_source": "regro-bot",
+    "pypi_name": "handy-archives"
+  },
+  "hangar": {
+    "conda_name": "hangar",
+    "import_name": "hangar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hangar"
+  },
+  "hankel": {
+    "conda_name": "hankel",
+    "import_name": "hankel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hankel"
+  },
+  "hanta": {
+    "conda_name": "hanta",
+    "import_name": "HanTa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hanta"
+  },
+  "hapiclient": {
+    "conda_name": "hapiclient",
+    "import_name": "hapiclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hapiclient"
+  },
+  "happybase": {
+    "conda_name": "happybase",
+    "import_name": "happybase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "happybase"
+  },
+  "happymath": {
+    "conda_name": "happymath",
+    "import_name": "happymath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "happymath"
+  },
+  "hapsira": {
+    "conda_name": "hapsira",
+    "import_name": "hapsira",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hapsira"
+  },
+  "harissa": {
+    "conda_name": "harissa",
+    "import_name": "harissa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "harissa"
+  },
+  "harlequin-bigquery": {
+    "conda_name": "harlequin-bigquery",
+    "import_name": "harlequin_bigquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "harlequin-bigquery"
+  },
+  "harlequin-trino": {
+    "conda_name": "harlequin-trino",
+    "import_name": "harlequin_trino",
+    "mapping_source": "regro-bot",
+    "pypi_name": "harlequin-trino"
+  },
+  "harmonica": {
+    "conda_name": "harmonica",
+    "import_name": "harmonica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "harmonica"
+  },
+  "harmony-py": {
+    "conda_name": "harmony-py",
+    "import_name": "harmony",
+    "mapping_source": "regro-bot",
+    "pypi_name": "harmony-py"
+  },
+  "hart-protocol": {
+    "conda_name": "hart-protocol",
+    "import_name": "hart_protocol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hart-protocol"
+  },
+  "hasasia": {
+    "conda_name": "hasasia",
+    "import_name": "hasasia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hasasia"
+  },
+  "hashids": {
+    "conda_name": "hashids",
+    "import_name": "hashids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hashids"
+  },
+  "hashio": {
+    "conda_name": "hashio",
+    "import_name": "hashio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hashio"
+  },
+  "hashquery": {
+    "conda_name": "hashquery",
+    "import_name": "hashquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hashquery"
+  },
+  "hatch-build": {
+    "conda_name": "hatch-build",
+    "import_name": "hatch_build.cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-build"
+  },
+  "hatch-build-scripts": {
+    "conda_name": "hatch-build-scripts",
+    "import_name": "hatch_build_scripts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-build-scripts"
+  },
+  "hatch-ci": {
+    "conda_name": "hatch-ci",
+    "import_name": "hatch_ci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-ci"
+  },
+  "hatch-cpp": {
+    "conda_name": "hatch-cpp",
+    "import_name": "hatch_cpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-cpp"
+  },
+  "hatch-deps-selector": {
+    "conda_name": "hatch-deps-selector",
+    "import_name": "hatch_deps_selector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-deps-selector"
+  },
+  "hatch-docstring-description": {
+    "conda_name": "hatch-docstring-description",
+    "import_name": "hatch_docstring_description",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-docstring-description"
+  },
+  "hatch-jupyter-builder": {
+    "conda_name": "hatch-jupyter-builder",
+    "import_name": "hatch_jupyter_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-jupyter-builder"
+  },
+  "hatch-min-requirements": {
+    "conda_name": "hatch-min-requirements",
+    "import_name": "hatch_min_requirements",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-min-requirements"
+  },
+  "hatch-mkdocs": {
+    "conda_name": "hatch-mkdocs",
+    "import_name": "hatch_mkdocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-mkdocs"
+  },
+  "hatch-mypyc": {
+    "conda_name": "hatch-mypyc",
+    "import_name": "hatch_mypyc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-mypyc"
+  },
+  "hatch-regex-commit": {
+    "conda_name": "hatch-regex-commit",
+    "import_name": "hatch_regex_commit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-regex-commit"
+  },
+  "hatch-requirements-txt": {
+    "conda_name": "hatch-requirements-txt",
+    "import_name": "hatch_requirements_txt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-requirements-txt"
+  },
+  "hatch-sphinx": {
+    "conda_name": "hatch-sphinx",
+    "import_name": "hatch_sphinx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-sphinx"
+  },
+  "hatch-vcs": {
+    "conda_name": "hatch-vcs",
+    "import_name": "hatch_vcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hatch-vcs"
+  },
+  "haversine": {
+    "conda_name": "haversine",
+    "import_name": "haversine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "haversine"
+  },
+  "haystack-bm25": {
+    "conda_name": "haystack-bm25",
+    "import_name": "haystack_bm25",
+    "mapping_source": "regro-bot",
+    "pypi_name": "haystack-bm25"
+  },
+  "haystack-experimental": {
+    "conda_name": "haystack-experimental",
+    "import_name": "haystack_experimental",
+    "mapping_source": "regro-bot",
+    "pypi_name": "haystack-experimental"
+  },
+  "hazardous": {
+    "conda_name": "hazardous",
+    "import_name": "hazardous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hazardous"
+  },
+  "hazelbean": {
+    "conda_name": "hazelbean",
+    "import_name": "hazelbean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hazelbean"
+  },
+  "hazm": {
+    "conda_name": "hazm",
+    "import_name": "hazm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hazm"
+  },
+  "hbreader": {
+    "conda_name": "hbreader",
+    "import_name": "hbreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hbreader"
+  },
+  "hcipy": {
+    "conda_name": "hcipy",
+    "import_name": "hcipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hcipy"
+  },
+  "hcloud": {
+    "conda_name": "hcloud",
+    "import_name": "hcloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hcloud"
+  },
+  "hcrystalball": {
+    "conda_name": "hcrystalball",
+    "import_name": "hcrystalball",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hcrystalball"
+  },
+  "hda": {
+    "conda_name": "hda",
+    "import_name": "hda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hda"
+  },
+  "hdbscan": {
+    "conda_name": "hdbscan",
+    "import_name": "hdbscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdbscan"
+  },
+  "hddm-wfpt": {
+    "conda_name": "hddm-wfpt",
+    "import_name": "hddm_wfpt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hddm-wfpt"
+  },
+  "hdf5plugin": {
+    "conda_name": "hdf5plugin",
+    "import_name": "hdf5plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdf5plugin"
+  },
+  "hdf5storage": {
+    "conda_name": "hdf5storage",
+    "import_name": "hdf5storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdf5storage"
+  },
+  "hdf5tools": {
+    "conda_name": "hdf5tools",
+    "import_name": "hdf5tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdf5tools"
+  },
+  "hdfmap": {
+    "conda_name": "hdfmap",
+    "import_name": "hdfmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdfmap"
+  },
+  "hdfs": {
+    "conda_name": "python-hdfs",
+    "import_name": "hdfs.ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdfs"
+  },
+  "hdijupyterutils": {
+    "conda_name": "hdijupyterutils",
+    "import_name": "hdijupyterutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdijupyterutils"
+  },
+  "hdlib": {
+    "conda_name": "hdlib",
+    "import_name": "hdlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdlib"
+  },
+  "hdmedians": {
+    "conda_name": "hdmedians",
+    "import_name": "hdmedians",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdmedians"
+  },
+  "hdmf": {
+    "conda_name": "hdmf",
+    "import_name": "hdmf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdmf"
+  },
+  "hdmf-zarr": {
+    "conda_name": "hdmf_zarr",
+    "import_name": "hdmf_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdmf-zarr"
+  },
+  "hdpws": {
+    "conda_name": "hdpws",
+    "import_name": "hdpws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdpws"
+  },
+  "hdx-python-api": {
+    "conda_name": "hdx-python-api",
+    "import_name": "hdx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdx-python-api"
+  },
+  "hdx-python-country": {
+    "conda_name": "hdx-python-country",
+    "import_name": "hdx.location",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdx-python-country"
+  },
+  "hdx-python-utilities": {
+    "conda_name": "hdx-python-utilities",
+    "import_name": "hdx.utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdx-python-utilities"
+  },
+  "hdxms-datasets": {
+    "conda_name": "hdxms-datasets",
+    "import_name": "hdxms_datasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdxms-datasets"
+  },
+  "hdxrate": {
+    "conda_name": "hdxrate",
+    "import_name": "hdxrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hdxrate"
+  },
+  "healpix": {
+    "conda_name": "healpix",
+    "import_name": "healpix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "healpix"
+  },
+  "healpy": {
+    "conda_name": "healpy",
+    "import_name": "healpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "healpy"
+  },
+  "healsparse": {
+    "conda_name": "healsparse",
+    "import_name": "healsparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "healsparse"
+  },
+  "heapdict": {
+    "conda_name": "heapdict",
+    "import_name": "heapdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heapdict"
+  },
+  "heart-library": {
+    "conda_name": "heart-library",
+    "import_name": "heart_library",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heart-library"
+  },
+  "heartrate": {
+    "conda_name": "heartrate",
+    "import_name": "heartrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heartrate"
+  },
+  "heat": {
+    "conda_name": "heat",
+    "import_name": "heat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heat"
+  },
+  "heatrapy": {
+    "conda_name": "heatrapy",
+    "import_name": "heatrapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heatrapy"
+  },
+  "heavyai": {
+    "conda_name": "heavyai",
+    "import_name": "heavyai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heavyai"
+  },
+  "hecss": {
+    "conda_name": "hecss",
+    "import_name": "hecss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hecss"
+  },
+  "hedtools": {
+    "conda_name": "hedtools",
+    "import_name": "hed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hedtools"
+  },
+  "helanal": {
+    "conda_name": "helanal",
+    "import_name": "helanal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "helanal"
+  },
+  "heligeo": {
+    "conda_name": "heligeo",
+    "import_name": "heligeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heligeo"
+  },
+  "helmeos": {
+    "conda_name": "helmeos",
+    "import_name": "helmeos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "helmeos"
+  },
+  "helpdev": {
+    "conda_name": "helpdev",
+    "import_name": "helpdev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "helpdev"
+  },
+  "helper": {
+    "conda_name": "helper",
+    "import_name": "helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "helper"
+  },
+  "helpme": {
+    "conda_name": "helpme",
+    "import_name": "helpme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "helpme"
+  },
+  "hendrics": {
+    "conda_name": "hendrics",
+    "import_name": "hendrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hendrics"
+  },
+  "hepconvert": {
+    "conda_name": "hepconvert",
+    "import_name": "hepconvert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hepconvert"
+  },
+  "hera": {
+    "conda_name": "hera",
+    "import_name": "hera.workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hera"
+  },
+  "herbie-data": {
+    "conda_name": "herbie-data",
+    "import_name": "herbie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "herbie-data"
+  },
+  "here-location-services": {
+    "conda_name": "here-location-services",
+    "import_name": "here_location_services",
+    "mapping_source": "regro-bot",
+    "pypi_name": "here-location-services"
+  },
+  "here-map-widget-for-jupyter": {
+    "conda_name": "here-map-widget-for-jupyter",
+    "import_name": "here_map_widget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "here-map-widget-for-jupyter"
+  },
+  "herepy": {
+    "conda_name": "herepy",
+    "import_name": "herepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "herepy"
+  },
+  "heroicons": {
+    "conda_name": "heroicons",
+    "import_name": "heroicons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heroicons"
+  },
+  "hesperos": {
+    "conda_name": "hesperos",
+    "import_name": "hesperos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hesperos"
+  },
+  "heudiconv": {
+    "conda_name": "heudiconv",
+    "import_name": "heudiconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "heudiconv"
+  },
+  "hexalattice": {
+    "conda_name": "hexalattice",
+    "import_name": "hexalattice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hexalattice"
+  },
+  "hexbytes": {
+    "conda_name": "hexbytes",
+    "import_name": "hexbytes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hexbytes"
+  },
+  "hexdump": {
+    "conda_name": "hexdump",
+    "import_name": "hexdump",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hexdump"
+  },
+  "hextools": {
+    "conda_name": "hextools",
+    "import_name": "hextools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hextools"
+  },
+  "hg-evolve": {
+    "conda_name": "hg-evolve",
+    "import_name": "hgext3rd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hg-evolve"
+  },
+  "hg-git": {
+    "conda_name": "hg-git",
+    "import_name": "hggit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hg-git"
+  },
+  "hg-setup": {
+    "conda_name": "hg-setup",
+    "import_name": "hg_setup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hg-setup"
+  },
+  "hickle": {
+    "conda_name": "hickle",
+    "import_name": "hickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hickle"
+  },
+  "hiclass": {
+    "conda_name": "hiclass",
+    "import_name": "hiclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hiclass"
+  },
+  "hicsv-python": {
+    "conda_name": "hicsv-python",
+    "import_name": "hicsv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hicsv-python"
+  },
+  "hidapi": {
+    "conda_name": "hidapi",
+    "import_name": "hid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hidapi"
+  },
+  "hide-code": {
+    "conda_name": "hide_code",
+    "import_name": "hide_code",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hide-code"
+  },
+  "hidefix": {
+    "conda_name": "hidefix",
+    "import_name": "hidefix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hidefix"
+  },
+  "hierarchicalforecast": {
+    "conda_name": "hierarchicalforecast",
+    "import_name": "hierarchicalforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hierarchicalforecast"
+  },
+  "hierarchicalsoftmax": {
+    "conda_name": "hierarchicalsoftmax",
+    "import_name": "hierarchicalsoftmax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hierarchicalsoftmax"
+  },
+  "highdicom": {
+    "conda_name": "highdicom",
+    "import_name": "highdicom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "highdicom"
+  },
+  "highered": {
+    "conda_name": "highered",
+    "import_name": "highered",
+    "mapping_source": "regro-bot",
+    "pypi_name": "highered"
+  },
+  "highlight-text": {
+    "conda_name": "highlight_text",
+    "import_name": "highlight_text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "highlight-text"
+  },
+  "hijri-converter": {
+    "conda_name": "hijri-converter",
+    "import_name": "hijri_converter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hijri-converter"
+  },
+  "hijridate": {
+    "conda_name": "hijridate",
+    "import_name": "hijridate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hijridate"
+  },
+  "hilbertcurve": {
+    "conda_name": "hilbertcurve",
+    "import_name": "hilbertcurve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hilbertcurve"
+  },
+  "hillmaker": {
+    "conda_name": "hillmaker",
+    "import_name": "hillmaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hillmaker"
+  },
+  "hilltop-py": {
+    "conda_name": "hilltop-py",
+    "import_name": "hilltoppy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hilltop-py"
+  },
+  "hiphive": {
+    "conda_name": "hiphive",
+    "import_name": "hiphive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hiphive"
+  },
+  "hiplot": {
+    "conda_name": "hiplot",
+    "import_name": "hiplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hiplot"
+  },
+  "hippynn": {
+    "conda_name": "hippynn",
+    "import_name": "hippynn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hippynn"
+  },
+  "hiproc": {
+    "conda_name": "hiproc",
+    "import_name": "hiproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hiproc"
+  },
+  "histogrammar": {
+    "conda_name": "histogrammar",
+    "import_name": "histogrammar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "histogrammar"
+  },
+  "histolab": {
+    "conda_name": "histolab",
+    "import_name": "histolab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "histolab"
+  },
+  "historia": {
+    "conda_name": "historia",
+    "import_name": "historia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "historia"
+  },
+  "historydag": {
+    "conda_name": "historydag",
+    "import_name": "historydag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "historydag"
+  },
+  "histoseg": {
+    "conda_name": "histoseg",
+    "import_name": "histoseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "histoseg"
+  },
+  "hiveplot": {
+    "conda_name": "hiveplot",
+    "import_name": "hiveplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hiveplot"
+  },
+  "hjson": {
+    "conda_name": "hjson-py",
+    "import_name": "hjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hjson"
+  },
+  "hklpy": {
+    "conda_name": "hklpy",
+    "import_name": "hkl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hklpy"
+  },
+  "hll": {
+    "conda_name": "hll",
+    "import_name": "HLL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hll"
+  },
+  "hls4ml": {
+    "conda_name": "hls4ml",
+    "import_name": "hls4ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hls4ml"
+  },
+  "hmmlearn": {
+    "conda_name": "hmmlearn",
+    "import_name": "hmmlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hmmlearn"
+  },
+  "hmsclient": {
+    "conda_name": "hmsclient",
+    "import_name": "hmsclient.genthrift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hmsclient"
+  },
+  "hnswlib": {
+    "conda_name": "hnswlib",
+    "import_name": "hnswlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hnswlib"
+  },
+  "hockey-rink": {
+    "conda_name": "hockey_rink",
+    "import_name": "hockey_rink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hockey-rink"
+  },
+  "hoggorm": {
+    "conda_name": "hoggorm",
+    "import_name": "hoggorm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hoggorm"
+  },
+  "hoggormplot": {
+    "conda_name": "hoggormplot",
+    "import_name": "hoggormplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hoggormplot"
+  },
+  "holidays-ext": {
+    "conda_name": "holidays-ext",
+    "import_name": "holidays_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "holidays-ext"
+  },
+  "holodeck-gw": {
+    "conda_name": "holodeck-gw",
+    "import_name": "holodeck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "holodeck-gw"
+  },
+  "hologridgen": {
+    "conda_name": "hologridgen",
+    "import_name": "hologridgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hologridgen"
+  },
+  "hololinked": {
+    "conda_name": "hololinked",
+    "import_name": "hololinked",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hololinked"
+  },
+  "holonote": {
+    "conda_name": "holonote",
+    "import_name": "holonote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "holonote"
+  },
+  "holospy": {
+    "conda_name": "holospy",
+    "import_name": "holospy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "holospy"
+  },
+  "holoviews": {
+    "conda_name": "holoviews",
+    "import_name": "holoviews",
+    "mapping_source": "regro-bot",
+    "pypi_name": "holoviews"
+  },
+  "homeassistant": {
+    "conda_name": "homeassistant",
+    "import_name": "homeassistant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "homeassistant"
+  },
+  "homebase": {
+    "conda_name": "homebase",
+    "import_name": "homebase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "homebase"
+  },
+  "homebrew-pypi-poet": {
+    "conda_name": "homebrew-pypi-poet",
+    "import_name": "poet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "homebrew-pypi-poet"
+  },
+  "homonim": {
+    "conda_name": "homonim",
+    "import_name": "homonim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "homonim"
+  },
+  "honcho": {
+    "conda_name": "honcho",
+    "import_name": "honcho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "honcho"
+  },
+  "honto": {
+    "conda_name": "honto",
+    "import_name": "honto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "honto"
+  },
+  "hookee": {
+    "conda_name": "hookee",
+    "import_name": "hookee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hookee"
+  },
+  "hooking": {
+    "conda_name": "hooking",
+    "import_name": "hooking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hooking"
+  },
+  "hopcroftkarp": {
+    "conda_name": "hopcroftkarp",
+    "import_name": "hopcroftkarp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hopcroftkarp"
+  },
+  "hopfield4py": {
+    "conda_name": "hopfield4py",
+    "import_name": "hopfield4py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hopfield4py"
+  },
+  "hostess": {
+    "conda_name": "hostess",
+    "import_name": "hostess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hostess"
+  },
+  "hover": {
+    "conda_name": "hover",
+    "import_name": "hover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hover"
+  },
+  "hpack": {
+    "conda_name": "hpack",
+    "import_name": "hpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hpack"
+  },
+  "hpccm": {
+    "conda_name": "hpccm",
+    "import_name": "hpccm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hpccm"
+  },
+  "hpfrec": {
+    "conda_name": "hpfrec",
+    "import_name": "hpfrec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hpfrec"
+  },
+  "hpgeom": {
+    "conda_name": "hpgeom",
+    "import_name": "hpgeom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hpgeom"
+  },
+  "hs-restclient": {
+    "conda_name": "hs_restclient",
+    "import_name": "hs_restclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hs-restclient"
+  },
+  "hsluv": {
+    "conda_name": "hsluv",
+    "import_name": "hsluv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hsluv"
+  },
+  "hsp2": {
+    "conda_name": "hsp2",
+    "import_name": "hsp2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hsp2"
+  },
+  "hspf-reader": {
+    "conda_name": "hspf_reader",
+    "import_name": "hspf_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hspf-reader"
+  },
+  "hspf-utils": {
+    "conda_name": "hspf_utils",
+    "import_name": "hspf_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hspf-utils"
+  },
+  "hspfbintoolbox": {
+    "conda_name": "hspfbintoolbox",
+    "import_name": "hspfbintoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hspfbintoolbox"
+  },
+  "hssm": {
+    "conda_name": "hssm",
+    "import_name": "hssm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hssm"
+  },
+  "hstspreload": {
+    "conda_name": "hstspreload",
+    "import_name": "hstspreload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hstspreload"
+  },
+  "ht": {
+    "conda_name": "ht",
+    "import_name": "ht",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ht"
+  },
+  "htbuilder": {
+    "conda_name": "htbuilder",
+    "import_name": "htbuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htbuilder"
+  },
+  "htchirp": {
+    "conda_name": "htchirp",
+    "import_name": "htchirp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htchirp"
+  },
+  "htm-pytorch": {
+    "conda_name": "htm-pytorch",
+    "import_name": "htm_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htm-pytorch"
+  },
+  "htmap": {
+    "conda_name": "htmap",
+    "import_name": "htmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmap"
+  },
+  "html-json-forms": {
+    "conda_name": "html-json-forms",
+    "import_name": "html_json_forms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html-json-forms"
+  },
+  "html-sanitizer": {
+    "conda_name": "html-sanitizer",
+    "import_name": "html_sanitizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html-sanitizer"
+  },
+  "html-tag-names": {
+    "conda_name": "html-tag-names",
+    "import_name": "HtmlTagNames",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html-tag-names"
+  },
+  "html-void-elements": {
+    "conda_name": "html-void-elements",
+    "import_name": "HtmlVoidElements",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html-void-elements"
+  },
+  "html2image": {
+    "conda_name": "html2image",
+    "import_name": "html2image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html2image"
+  },
+  "html2text": {
+    "conda_name": "html2text",
+    "import_name": "html2text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html2text"
+  },
+  "html5lib": {
+    "conda_name": "html5lib",
+    "import_name": "html5lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html5lib"
+  },
+  "html5lib-modern": {
+    "conda_name": "html5lib-modern",
+    "import_name": "html5lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html5lib-modern"
+  },
+  "html5rdf": {
+    "conda_name": "html5rdf",
+    "import_name": "html5rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "html5rdf"
+  },
+  "htmlark": {
+    "conda_name": "htmlark",
+    "import_name": "htmlark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmlark"
+  },
+  "htmldocx": {
+    "conda_name": "htmldocx",
+    "import_name": "htmldocx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmldocx"
+  },
+  "htmllistparse": {
+    "conda_name": "htmllistparse",
+    "import_name": "htmllistparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmllistparse"
+  },
+  "htmlmin": {
+    "conda_name": "htmlmin",
+    "import_name": "htmlmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmlmin"
+  },
+  "htmltools": {
+    "conda_name": "htmltools",
+    "import_name": "htmltools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmltools"
+  },
+  "htmx-flask": {
+    "conda_name": "htmx-flask",
+    "import_name": "htmx_flask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htmx-flask"
+  },
+  "htpolynet": {
+    "conda_name": "htpolynet",
+    "import_name": "htpolynet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htpolynet"
+  },
+  "htrmopo": {
+    "conda_name": "htrmopo",
+    "import_name": "htrmopo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "htrmopo"
+  },
+  "http-ece": {
+    "conda_name": "http-ece",
+    "import_name": "http_ece",
+    "mapping_source": "regro-bot",
+    "pypi_name": "http-ece"
+  },
+  "http3": {
+    "conda_name": "http3",
+    "import_name": "http3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "http3"
+  },
+  "httpagentparser": {
+    "conda_name": "httpagentparser",
+    "import_name": "httpagentparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpagentparser"
+  },
+  "httpauth": {
+    "conda_name": "httpauth",
+    "import_name": "httpauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpauth"
+  },
+  "httpie": {
+    "conda_name": "httpie",
+    "import_name": "httpie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpie"
+  },
+  "httplib2shim": {
+    "conda_name": "httplib2shim",
+    "import_name": "httplib2shim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httplib2shim"
+  },
+  "httpretty": {
+    "conda_name": "httpretty",
+    "import_name": "httpretty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpretty"
+  },
+  "httpx": {
+    "conda_name": "httpx",
+    "import_name": "httpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx"
+  },
+  "httpx-cache": {
+    "conda_name": "httpx-cache",
+    "import_name": "httpx_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-cache"
+  },
+  "httpx-gssapi": {
+    "conda_name": "httpx-gssapi",
+    "import_name": "httpx_gssapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-gssapi"
+  },
+  "httpx-negotiate-sspi": {
+    "conda_name": "httpx-negotiate-sspi",
+    "import_name": "httpx_negotiate_sspi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-negotiate-sspi"
+  },
+  "httpx-ntlm": {
+    "conda_name": "httpx-ntlm",
+    "import_name": "httpx_ntlm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-ntlm"
+  },
+  "httpx-oauth": {
+    "conda_name": "httpx-oauth",
+    "import_name": "httpx_oauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-oauth"
+  },
+  "httpx-sse": {
+    "conda_name": "httpx-sse",
+    "import_name": "httpx_sse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-sse"
+  },
+  "httpx-ws": {
+    "conda_name": "httpx-ws",
+    "import_name": "httpx_ws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpx-ws"
+  },
+  "httpxthrottlecache": {
+    "conda_name": "httpxthrottlecache",
+    "import_name": "httpxthrottlecache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "httpxthrottlecache"
+  },
+  "hubspot-api-client": {
+    "conda_name": "hubspot-api-client",
+    "import_name": "hubspot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hubspot-api-client"
+  },
+  "hubstore": {
+    "conda_name": "hubstore",
+    "import_name": "hubstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hubstore"
+  },
+  "hug": {
+    "conda_name": "hug",
+    "import_name": "hug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hug"
+  },
+  "human-learn": {
+    "conda_name": "human-learn",
+    "import_name": "hulearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "human-learn"
+  },
+  "humanfriendly": {
+    "conda_name": "humanfriendly",
+    "import_name": "humanfriendly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "humanfriendly"
+  },
+  "humanize": {
+    "conda_name": "humanize",
+    "import_name": "humanize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "humanize"
+  },
+  "humap": {
+    "conda_name": "humap",
+    "import_name": "humap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "humap"
+  },
+  "humbug": {
+    "conda_name": "humbug",
+    "import_name": "humbug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "humbug"
+  },
+  "hummingbird-ml": {
+    "conda_name": "hummingbird-ml",
+    "import_name": "hummingbird.ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hummingbird-ml"
+  },
+  "humre": {
+    "conda_name": "humre",
+    "import_name": "humre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "humre"
+  },
+  "hunspell": {
+    "conda_name": "pyhunspell",
+    "import_name": "hunspell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hunspell"
+  },
+  "hunter": {
+    "conda_name": "hunter",
+    "import_name": "hunter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hunter"
+  },
+  "hupper": {
+    "conda_name": "hupper",
+    "import_name": "hupper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hupper"
+  },
+  "huracanpy": {
+    "conda_name": "huracanpy",
+    "import_name": "huracanpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "huracanpy"
+  },
+  "hurry-filesize": {
+    "conda_name": "hurry.filesize",
+    "import_name": "hurry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hurry-filesize"
+  },
+  "husl": {
+    "conda_name": "husl",
+    "import_name": "husl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "husl"
+  },
+  "hvac": {
+    "conda_name": "hvac",
+    "import_name": "hvac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hvac"
+  },
+  "hvala": {
+    "conda_name": "hvala",
+    "import_name": "hvala",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hvala"
+  },
+  "hveto": {
+    "conda_name": "hveto",
+    "import_name": "hveto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hveto"
+  },
+  "hvplot": {
+    "conda_name": "hvplot",
+    "import_name": "hvplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hvplot"
+  },
+  "hvpy": {
+    "conda_name": "hvpy",
+    "import_name": "hvpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hvpy"
+  },
+  "hvsampledata": {
+    "conda_name": "hvsampledata",
+    "import_name": "hvsampledata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hvsampledata"
+  },
+  "hwm": {
+    "conda_name": "hwm",
+    "import_name": "hwm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hwm"
+  },
+  "hws": {
+    "conda_name": "hws",
+    "import_name": "HWS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hws"
+  },
+  "hxnfly": {
+    "conda_name": "hxnfly",
+    "import_name": "hxnfly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hxnfly"
+  },
+  "hxntools": {
+    "conda_name": "hxntools",
+    "import_name": "hxntools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hxntools"
+  },
+  "hybgensea": {
+    "conda_name": "hybgensea",
+    "import_name": "hybgensea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hybgensea"
+  },
+  "hybridcontents": {
+    "conda_name": "hybridcontents",
+    "import_name": "hybridcontents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hybridcontents"
+  },
+  "hydra-joblib-launcher": {
+    "conda_name": "hydra-joblib-launcher",
+    "import_name": "hydra_plugins.hydra_joblib_launcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydra-joblib-launcher"
+  },
+  "hydra-zen": {
+    "conda_name": "hydra-zen",
+    "import_name": "hydra_zen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydra-zen"
+  },
+  "hydrodata": {
+    "conda_name": "hydrodata",
+    "import_name": "pygeohydro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrodata"
+  },
+  "hydroerr": {
+    "conda_name": "hydroerr",
+    "import_name": "HydroErr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydroerr"
+  },
+  "hydrofunctions": {
+    "conda_name": "hydrofunctions",
+    "import_name": "hydrofunctions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrofunctions"
+  },
+  "hydromt": {
+    "conda_name": "hydromt",
+    "import_name": "hydromt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydromt"
+  },
+  "hydromt-delwaq": {
+    "conda_name": "hydromt_delwaq",
+    "import_name": "hydromt_delwaq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydromt-delwaq"
+  },
+  "hydromt-sfincs": {
+    "conda_name": "hydromt_sfincs",
+    "import_name": "hydromt_sfincs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydromt-sfincs"
+  },
+  "hydromt-wflow": {
+    "conda_name": "hydromt_wflow",
+    "import_name": "hydromt_wflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydromt-wflow"
+  },
+  "hydrosar": {
+    "conda_name": "hydrosar",
+    "import_name": "hydrosar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrosar"
+  },
+  "hydrosignatures": {
+    "conda_name": "hydrosignatures",
+    "import_name": "hydrosignatures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrosignatures"
+  },
+  "hydrostats": {
+    "conda_name": "hydrostats",
+    "import_name": "hydrostats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrostats"
+  },
+  "hydrotoolbox": {
+    "conda_name": "hydrotoolbox",
+    "import_name": "hydrotoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hydrotoolbox"
+  },
+  "hyp3-sdk": {
+    "conda_name": "hyp3_sdk",
+    "import_name": "hyp3_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyp3-sdk"
+  },
+  "hyp3lib": {
+    "conda_name": "hyp3lib",
+    "import_name": "hyp3lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyp3lib"
+  },
+  "hyper": {
+    "conda_name": "hyper",
+    "import_name": "hyper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyper"
+  },
+  "hyper-connections": {
+    "conda_name": "hyper-connections",
+    "import_name": "hyper_connections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyper-connections"
+  },
+  "hyperas": {
+    "conda_name": "hyperas",
+    "import_name": "hyperas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperas"
+  },
+  "hypercoast": {
+    "conda_name": "hypercoast",
+    "import_name": "hypercoast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypercoast"
+  },
+  "hyperframe": {
+    "conda_name": "hyperframe",
+    "import_name": "hyperframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperframe"
+  },
+  "hypergas": {
+    "conda_name": "hypergas",
+    "import_name": "hypergas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypergas"
+  },
+  "hyperion": {
+    "conda_name": "hyperion",
+    "import_name": "hyperion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperion"
+  },
+  "hyperlib": {
+    "conda_name": "hyperlib",
+    "import_name": "hyperlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperlib"
+  },
+  "hyperopt": {
+    "conda_name": "hyperopt",
+    "import_name": "hyperopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperopt"
+  },
+  "hyperscript": {
+    "conda_name": "hyperscript",
+    "import_name": "hyperscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperscript"
+  },
+  "hypersolver": {
+    "conda_name": "hypersolver",
+    "import_name": "hypersolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypersolver"
+  },
+  "hyperspy-gui-ipywidgets": {
+    "conda_name": "hyperspy-gui-ipywidgets",
+    "import_name": "hyperspy_gui_ipywidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperspy-gui-ipywidgets"
+  },
+  "hyperspy-gui-traitsui": {
+    "conda_name": "hyperspy-gui-traitsui",
+    "import_name": "hyperspy_gui_traitsui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperspy-gui-traitsui"
+  },
+  "hyperspyui": {
+    "conda_name": "hyperspyui",
+    "import_name": "hyperspyui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyperspyui"
+  },
+  "hypertab": {
+    "conda_name": "hypertab",
+    "import_name": "hypertab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypertab"
+  },
+  "hypertemp": {
+    "conda_name": "hypertemp",
+    "import_name": "hypertemp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypertemp"
+  },
+  "hypertransform": {
+    "conda_name": "hypertransform",
+    "import_name": "hypertransform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypertransform"
+  },
+  "hypothesis-jsonschema": {
+    "conda_name": "hypothesis-jsonschema",
+    "import_name": "hypothesis_jsonschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypothesis-jsonschema"
+  },
+  "hypothesis-networkx": {
+    "conda_name": "hypothesis-networkx",
+    "import_name": "hypothesis_networkx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypothesis-networkx"
+  },
+  "hypothesis-rdkit": {
+    "conda_name": "hypothesis-rdkit",
+    "import_name": "hypothesis_rdkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypothesis-rdkit"
+  },
+  "hypothesize": {
+    "conda_name": "hypothesize",
+    "import_name": "hypothesize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hypothesize"
+  },
+  "hyram": {
+    "conda_name": "hyram",
+    "import_name": "hyram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hyram"
+  },
+  "hysetter": {
+    "conda_name": "hysetter",
+    "import_name": "hysetter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "hysetter"
+  },
+  "i18nice": {
+    "conda_name": "i18nice",
+    "import_name": "i18n",
+    "mapping_source": "regro-bot",
+    "pypi_name": "i18nice"
+  },
+  "iacs-ipac-reader": {
+    "conda_name": "iacs-ipac-reader",
+    "import_name": "iacs_ipac_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iacs-ipac-reader"
+  },
+  "iadpython": {
+    "conda_name": "iadpython",
+    "import_name": "iadpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iadpython"
+  },
+  "iam-units": {
+    "conda_name": "iam-units",
+    "import_name": "iam_units",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iam-units"
+  },
+  "iapws": {
+    "conda_name": "iapws",
+    "import_name": "iapws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iapws"
+  },
+  "ib-async": {
+    "conda_name": "ib_async",
+    "import_name": "ib_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ib-async"
+  },
+  "ib-insync": {
+    "conda_name": "ib-insync",
+    "import_name": "ib_insync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ib-insync"
+  },
+  "ibex": {
+    "conda_name": "ibex",
+    "import_name": "ibex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibex"
+  },
+  "ibis-heavyai": {
+    "conda_name": "ibis-heavyai",
+    "import_name": "ibis_heavyai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibis-heavyai"
+  },
+  "ibis-ml": {
+    "conda_name": "ibis-ml",
+    "import_name": "ibis_ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibis-ml"
+  },
+  "ibis-mssql": {
+    "conda_name": "ibis-mssql",
+    "import_name": "ibis_mssql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibis-mssql"
+  },
+  "ibis-omniscidb": {
+    "conda_name": "ibis-omniscidb",
+    "import_name": "ibis_omniscidb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibis-omniscidb"
+  },
+  "ibis-substrait": {
+    "conda_name": "ibis-substrait",
+    "import_name": "ibis_substrait",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibis-substrait"
+  },
+  "ibm-db-django": {
+    "conda_name": "ibm_db_django",
+    "import_name": "ibm_db_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibm-db-django"
+  },
+  "ibm-db-sa": {
+    "conda_name": "ibm_db_sa",
+    "import_name": "ibm_db_sa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibm-db-sa"
+  },
+  "ibm-platform-services": {
+    "conda_name": "ibm-platform-services",
+    "import_name": "ibm_platform_services",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibm-platform-services"
+  },
+  "ibmpairs": {
+    "conda_name": "ibmpairs",
+    "import_name": "ibmpairs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ibmpairs"
+  },
+  "icalendar": {
+    "conda_name": "icalendar",
+    "import_name": "icalendar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icalendar"
+  },
+  "icalendar-searcher": {
+    "conda_name": "icalendar-searcher",
+    "import_name": "icalendar_searcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icalendar-searcher"
+  },
+  "icartt": {
+    "conda_name": "icartt",
+    "import_name": "icartt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icartt"
+  },
+  "icc": {
+    "conda_name": "python-icc",
+    "import_name": "icc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icc"
+  },
+  "icclim": {
+    "conda_name": "icclim",
+    "import_name": "icclim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icclim"
+  },
+  "icdiff": {
+    "conda_name": "icdiff",
+    "import_name": "icdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icdiff"
+  },
+  "icechart": {
+    "conda_name": "icechart",
+    "import_name": "icechart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icechart"
+  },
+  "icecream": {
+    "conda_name": "icecream",
+    "import_name": "icecream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icecream"
+  },
+  "icet": {
+    "conda_name": "icet",
+    "import_name": "icet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icet"
+  },
+  "icon-font-to-png": {
+    "conda_name": "icon_font_to_png",
+    "import_name": "icon_font_to_png",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icon-font-to-png"
+  },
+  "icontract": {
+    "conda_name": "icontract",
+    "import_name": "icontract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "icontract"
+  },
+  "idaes-pse": {
+    "conda_name": "idaes-pse",
+    "import_name": "idaes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idaes-pse"
+  },
+  "idds-client": {
+    "conda_name": "idds-client",
+    "import_name": "idds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idds-client"
+  },
+  "idds-common": {
+    "conda_name": "idds-common",
+    "import_name": "idds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idds-common"
+  },
+  "idds-doma": {
+    "conda_name": "idds-doma",
+    "import_name": "idds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idds-doma"
+  },
+  "idds-workflow": {
+    "conda_name": "idds-workflow",
+    "import_name": "idds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idds-workflow"
+  },
+  "idna-ssl": {
+    "conda_name": "idna_ssl",
+    "import_name": "idna_ssl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "idna-ssl"
+  },
+  "iembot": {
+    "conda_name": "iembot",
+    "import_name": "iembot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iembot"
+  },
+  "ifaddr": {
+    "conda_name": "ifaddr",
+    "import_name": "ifaddr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ifaddr"
+  },
+  "ifadw-treeviz": {
+    "conda_name": "ifadw-treeviz",
+    "import_name": "ifadw_treeviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ifadw-treeviz"
+  },
+  "ifes-apt-tc-data-modeling": {
+    "conda_name": "ifes-apt-tc-data-modeling",
+    "import_name": "ifes_apt_tc_data_modeling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ifes-apt-tc-data-modeling"
+  },
+  "igor": {
+    "conda_name": "igor",
+    "import_name": "igor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "igor"
+  },
+  "igor2": {
+    "conda_name": "igor2",
+    "import_name": "igor2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "igor2"
+  },
+  "igorwriter": {
+    "conda_name": "igorwriter",
+    "import_name": "igorwriter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "igorwriter"
+  },
+  "igraph": {
+    "conda_name": "python-igraph",
+    "import_name": "igraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "igraph"
+  },
+  "igwn-archive": {
+    "conda_name": "igwn-archive",
+    "import_name": "igwn_archive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "igwn-archive"
+  },
+  "ihist": {
+    "conda_name": "ihist",
+    "import_name": "ihist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ihist"
+  },
+  "ihm": {
+    "conda_name": "ihm",
+    "import_name": "ihm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ihm"
+  },
+  "ijroi": {
+    "conda_name": "ijroi",
+    "import_name": "ijroi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ijroi"
+  },
+  "ilamb": {
+    "conda_name": "ilamb",
+    "import_name": "ILAMB",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ilamb"
+  },
+  "ilastik-napari": {
+    "conda_name": "ilastik-napari",
+    "import_name": "ilastik",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ilastik-napari"
+  },
+  "ilpy": {
+    "conda_name": "ilpy",
+    "import_name": "ilpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ilpy"
+  },
+  "image-composer": {
+    "conda_name": "image-composer",
+    "import_name": "Image_Composer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "image-composer"
+  },
+  "image-part-selecter": {
+    "conda_name": "image-part-selecter",
+    "import_name": "Image_Part_Selecter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "image-part-selecter"
+  },
+  "image-quality": {
+    "conda_name": "image-quality",
+    "import_name": "imquality",
+    "mapping_source": "regro-bot",
+    "pypi_name": "image-quality"
+  },
+  "image-registration": {
+    "conda_name": "image-registration",
+    "import_name": "image_registration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "image-registration"
+  },
+  "imageai": {
+    "conda_name": "imageai",
+    "import_name": "imageai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imageai"
+  },
+  "imagecodecs": {
+    "conda_name": "imagecodecs",
+    "import_name": "imagecodecs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagecodecs"
+  },
+  "imagecodecs-lite": {
+    "conda_name": "imagecodecs-lite",
+    "import_name": "imagecodecs_lite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagecodecs-lite"
+  },
+  "imagedataextractor": {
+    "conda_name": "imagedataextractor",
+    "import_name": "imagedataextractor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagedataextractor"
+  },
+  "imagedominantcolor": {
+    "conda_name": "imagedominantcolor",
+    "import_name": "imagedominantcolor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagedominantcolor"
+  },
+  "imagehash": {
+    "conda_name": "imagehash",
+    "import_name": "imagehash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagehash"
+  },
+  "imageio": {
+    "conda_name": "imageio",
+    "import_name": "imageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imageio"
+  },
+  "imageio-ffmpeg": {
+    "conda_name": "imageio-ffmpeg",
+    "import_name": "imageio_ffmpeg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imageio-ffmpeg"
+  },
+  "imagepy": {
+    "conda_name": "imagepy",
+    "import_name": "imagepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagepy"
+  },
+  "images-into-array": {
+    "conda_name": "images-into-array",
+    "import_name": "images_into_array",
+    "mapping_source": "regro-bot",
+    "pypi_name": "images-into-array"
+  },
+  "imagesize": {
+    "conda_name": "imagesize",
+    "import_name": "imagesize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagesize"
+  },
+  "imagingreso": {
+    "conda_name": "imagingreso",
+    "import_name": "ImagingReso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imagingreso"
+  },
+  "imantics": {
+    "conda_name": "imantics",
+    "import_name": "imantics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imantics"
+  },
+  "imap-tools": {
+    "conda_name": "imap-tools",
+    "import_name": "imap_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imap-tools"
+  },
+  "imapclient": {
+    "conda_name": "imapclient",
+    "import_name": "imapclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imapclient"
+  },
+  "imaris-ims-file-reader": {
+    "conda_name": "imaris-ims-file-reader",
+    "import_name": "imaris_ims_file_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imaris-ims-file-reader"
+  },
+  "imate": {
+    "conda_name": "imate",
+    "import_name": "imate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imate"
+  },
+  "imaxt-image": {
+    "conda_name": "imaxt-image",
+    "import_name": "imaxt_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imaxt-image"
+  },
+  "imaxt-multiscale-plugin": {
+    "conda_name": "imaxt-multiscale-plugin",
+    "import_name": "imaxt_multiscale_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imaxt-multiscale-plugin"
+  },
+  "imbalanced-learn": {
+    "conda_name": "imbalanced-learn",
+    "import_name": "imblearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imbalanced-learn"
+  },
+  "imdclient": {
+    "conda_name": "imdclient",
+    "import_name": "imdclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imdclient"
+  },
+  "imdtrack": {
+    "conda_name": "imdtrack",
+    "import_name": "imdtrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imdtrack"
+  },
+  "imexam": {
+    "conda_name": "imexam",
+    "import_name": "imexam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imexam"
+  },
+  "img2pdf": {
+    "conda_name": "img2pdf",
+    "import_name": "img2pdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "img2pdf"
+  },
+  "imgaug": {
+    "conda_name": "imgaug",
+    "import_name": "imgaug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imgaug"
+  },
+  "imglyb": {
+    "conda_name": "imglyb",
+    "import_name": "imglyb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imglyb"
+  },
+  "imgroi": {
+    "conda_name": "imgroi",
+    "import_name": "imgroi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imgroi"
+  },
+  "imgurpython": {
+    "conda_name": "imgurpython",
+    "import_name": "imgurpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imgurpython"
+  },
+  "imgviz": {
+    "conda_name": "imgviz",
+    "import_name": "imgviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imgviz"
+  },
+  "imia": {
+    "conda_name": "imia",
+    "import_name": "imia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imia"
+  },
+  "imio": {
+    "conda_name": "imio",
+    "import_name": "imio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imio"
+  },
+  "imlib": {
+    "conda_name": "imlib",
+    "import_name": "imlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imlib"
+  },
+  "immutabledict": {
+    "conda_name": "immutabledict",
+    "import_name": "immutabledict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "immutabledict"
+  },
+  "immutables": {
+    "conda_name": "immutables",
+    "import_name": "immutables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "immutables"
+  },
+  "imod": {
+    "conda_name": "imod",
+    "import_name": "imod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imod"
+  },
+  "imodels": {
+    "conda_name": "imodels",
+    "import_name": "imodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imodels"
+  },
+  "imodmodel": {
+    "conda_name": "imodmodel",
+    "import_name": "imodmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imodmodel"
+  },
+  "import-linter": {
+    "conda_name": "import-linter",
+    "import_name": "importlinter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "import-linter"
+  },
+  "importhook": {
+    "conda_name": "importhook",
+    "import_name": "importhook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importhook"
+  },
+  "importlab": {
+    "conda_name": "importlab",
+    "import_name": "importlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importlab"
+  },
+  "importlib-resources": {
+    "conda_name": "importlib_resources",
+    "import_name": "importlib_resources",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importlib-resources"
+  },
+  "importnb": {
+    "conda_name": "importnb",
+    "import_name": "importnb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importnb"
+  },
+  "importrosbag": {
+    "conda_name": "importrosbag",
+    "import_name": "importRosbag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importrosbag"
+  },
+  "importscan": {
+    "conda_name": "importscan",
+    "import_name": "importscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "importscan"
+  },
+  "impunity": {
+    "conda_name": "impunity",
+    "import_name": "impunity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "impunity"
+  },
+  "impyla": {
+    "conda_name": "impyla",
+    "import_name": "impala",
+    "mapping_source": "regro-bot",
+    "pypi_name": "impyla"
+  },
+  "imread": {
+    "conda_name": "imread",
+    "import_name": "imread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imread"
+  },
+  "imreg-dft": {
+    "conda_name": "imreg_dft",
+    "import_name": "imreg_dft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imreg-dft"
+  },
+  "imutils": {
+    "conda_name": "imutils",
+    "import_name": "imutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imutils"
+  },
+  "imy": {
+    "conda_name": "imy",
+    "import_name": "imy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "imy"
+  },
+  "in-n-out": {
+    "conda_name": "in-n-out",
+    "import_name": "in_n_out",
+    "mapping_source": "regro-bot",
+    "pypi_name": "in-n-out"
+  },
+  "in-place": {
+    "conda_name": "in_place",
+    "import_name": "in_place",
+    "mapping_source": "regro-bot",
+    "pypi_name": "in-place"
+  },
+  "in-silico-fate-mapping": {
+    "conda_name": "in-silico-fate-mapping",
+    "import_name": "in_silico_fate_mapping",
+    "mapping_source": "regro-bot",
+    "pypi_name": "in-silico-fate-mapping"
+  },
+  "inaspeechsegmenter": {
+    "conda_name": "inaspeechsegmenter",
+    "import_name": "inaSpeechSegmenter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inaspeechsegmenter"
+  },
+  "incqueryserver-api-python-client": {
+    "conda_name": "incqueryserver-api-python-client",
+    "import_name": "iqs_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "incqueryserver-api-python-client"
+  },
+  "incqueryserver-jupyter": {
+    "conda_name": "incqueryserver-jupyter",
+    "import_name": "iqs_jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "incqueryserver-jupyter"
+  },
+  "indexed-bzip2": {
+    "conda_name": "indexed_bzip2",
+    "import_name": "indexed_bzip2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "indexed-bzip2"
+  },
+  "indexed-zstd": {
+    "conda_name": "indexed_zstd",
+    "import_name": "indexed_zstd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "indexed-zstd"
+  },
+  "indexedconv": {
+    "conda_name": "indexedconv",
+    "import_name": "indexedconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "indexedconv"
+  },
+  "inept": {
+    "conda_name": "inept",
+    "import_name": "inept",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inept"
+  },
+  "inequality": {
+    "conda_name": "inequality",
+    "import_name": "inequality",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inequality"
+  },
+  "inertia-django": {
+    "conda_name": "inertia-django",
+    "import_name": "inertia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inertia-django"
+  },
+  "inference-server": {
+    "conda_name": "inference-server",
+    "import_name": "inference_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inference-server"
+  },
+  "inference-tools": {
+    "conda_name": "inference-tools",
+    "import_name": "inference",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inference-tools"
+  },
+  "infinite-sets": {
+    "conda_name": "infinite-sets",
+    "import_name": "infinite_sets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "infinite-sets"
+  },
+  "inflate64": {
+    "conda_name": "inflate64",
+    "import_name": "inflate64",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inflate64"
+  },
+  "inflect": {
+    "conda_name": "inflect",
+    "import_name": "inflect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inflect"
+  },
+  "inflection": {
+    "conda_name": "inflection",
+    "import_name": "inflection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inflection"
+  },
+  "influxdb": {
+    "conda_name": "influxdb",
+    "import_name": "influxdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "influxdb"
+  },
+  "influxdb-client": {
+    "conda_name": "influxdb-client",
+    "import_name": "influxdb_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "influxdb-client"
+  },
+  "infomap": {
+    "conda_name": "infomap",
+    "import_name": "infomap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "infomap"
+  },
+  "infomeasure": {
+    "conda_name": "infomeasure",
+    "import_name": "infomeasure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "infomeasure"
+  },
+  "inform": {
+    "conda_name": "inform",
+    "import_name": "inform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inform"
+  },
+  "ingeoml": {
+    "conda_name": "ingeoml",
+    "import_name": "IngeoML",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ingeoml"
+  },
+  "iniconfig": {
+    "conda_name": "iniconfig",
+    "import_name": "iniconfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iniconfig"
+  },
+  "inifile": {
+    "conda_name": "inifile",
+    "import_name": "inifile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inifile"
+  },
+  "inifix": {
+    "conda_name": "inifix",
+    "import_name": "inifix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inifix"
+  },
+  "inject": {
+    "conda_name": "inject",
+    "import_name": "inject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inject"
+  },
+  "injector": {
+    "conda_name": "injector",
+    "import_name": "injector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "injector"
+  },
+  "inkex": {
+    "conda_name": "inkex",
+    "import_name": "inkex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inkex"
+  },
+  "inline-html": {
+    "conda_name": "inline-html",
+    "import_name": "inline_html",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inline-html"
+  },
+  "inline-model-metrics": {
+    "conda_name": "inline-model-metrics",
+    "import_name": "inline_model_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inline-model-metrics"
+  },
+  "inline-sql": {
+    "conda_name": "inline-sql",
+    "import_name": "inline_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inline-sql"
+  },
+  "innerscope": {
+    "conda_name": "innerscope",
+    "import_name": "innerscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "innerscope"
+  },
+  "inotify": {
+    "conda_name": "inotify",
+    "import_name": "inotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inotify"
+  },
+  "inotify-simple": {
+    "conda_name": "inotify_simple",
+    "import_name": "inotify_simple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inotify-simple"
+  },
+  "inputs": {
+    "conda_name": "inputs",
+    "import_name": "inputs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inputs"
+  },
+  "inquirer": {
+    "conda_name": "inquirer",
+    "import_name": "inquirer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inquirer"
+  },
+  "inquirerpy": {
+    "conda_name": "inquirerpy",
+    "import_name": "InquirerPy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inquirerpy"
+  },
+  "insert-license-header": {
+    "conda_name": "insert-license-header",
+    "import_name": "insert_license_header",
+    "mapping_source": "regro-bot",
+    "pypi_name": "insert-license-header"
+  },
+  "insightface": {
+    "conda_name": "insightface",
+    "import_name": "insightface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "insightface"
+  },
+  "inspecta": {
+    "conda_name": "inspecta",
+    "import_name": "inspecta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inspecta"
+  },
+  "inspectds": {
+    "conda_name": "inspectds",
+    "import_name": "inspectds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inspectds"
+  },
+  "inspyred": {
+    "conda_name": "inspyred",
+    "import_name": "inspyred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "inspyred"
+  },
+  "install-jdk": {
+    "conda_name": "install-jdk",
+    "import_name": "jdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "install-jdk"
+  },
+  "install-locked-env": {
+    "conda_name": "install-locked-env",
+    "import_name": "install_locked_env",
+    "mapping_source": "regro-bot",
+    "pypi_name": "install-locked-env"
+  },
+  "installer": {
+    "conda_name": "python-installer",
+    "import_name": "installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "installer"
+  },
+  "instaloader": {
+    "conda_name": "instaloader",
+    "import_name": "instaloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "instaloader"
+  },
+  "instapush": {
+    "conda_name": "instapush",
+    "import_name": "instapush",
+    "mapping_source": "regro-bot",
+    "pypi_name": "instapush"
+  },
+  "instaseis": {
+    "conda_name": "instaseis",
+    "import_name": "instaseis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "instaseis"
+  },
+  "intake": {
+    "conda_name": "intake",
+    "import_name": "intake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake"
+  },
+  "intake-astro": {
+    "conda_name": "intake-accumulo",
+    "import_name": "intake_astro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-astro"
+  },
+  "intake-avro": {
+    "conda_name": "intake-avro",
+    "import_name": "intake_avro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-avro"
+  },
+  "intake-axds": {
+    "conda_name": "intake-axds",
+    "import_name": "intake_axds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-axds"
+  },
+  "intake-cmip": {
+    "conda_name": "intake-cmip",
+    "import_name": "intake_cmip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-cmip"
+  },
+  "intake-dataframe-catalog": {
+    "conda_name": "intake-dataframe-catalog",
+    "import_name": "intake_dataframe_catalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-dataframe-catalog"
+  },
+  "intake-dremio": {
+    "conda_name": "intake-dremio",
+    "import_name": "intake_dremio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-dremio"
+  },
+  "intake-dynamodb": {
+    "conda_name": "intake-dynamodb",
+    "import_name": "intake_dynamodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-dynamodb"
+  },
+  "intake-elasticsearch": {
+    "conda_name": "intake-elasticsearch",
+    "import_name": "intake_elasticsearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-elasticsearch"
+  },
+  "intake-erddap": {
+    "conda_name": "intake-erddap",
+    "import_name": "intake_erddap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-erddap"
+  },
+  "intake-esm": {
+    "conda_name": "intake-esm",
+    "import_name": "intake_esm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-esm"
+  },
+  "intake-excel": {
+    "conda_name": "intake-excel",
+    "import_name": "intake_excel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-excel"
+  },
+  "intake-geopandas": {
+    "conda_name": "intake-geopandas",
+    "import_name": "intake_geopandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-geopandas"
+  },
+  "intake-hive": {
+    "conda_name": "intake-hive",
+    "import_name": "intake_hive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-hive"
+  },
+  "intake-nested-yaml-catalog": {
+    "conda_name": "intake-nested-yaml-catalog",
+    "import_name": "intake_nested_yaml_catalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-nested-yaml-catalog"
+  },
+  "intake-odbc": {
+    "conda_name": "intake-odbc",
+    "import_name": "intake_odbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-odbc"
+  },
+  "intake-parquet": {
+    "conda_name": "intake-parquet",
+    "import_name": "intake_parquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-parquet"
+  },
+  "intake-pattern-catalog": {
+    "conda_name": "intake-pattern-catalog",
+    "import_name": "intake_pattern_catalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-pattern-catalog"
+  },
+  "intake-salesforce": {
+    "conda_name": "intake-salesforce",
+    "import_name": "intake_salesforce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-salesforce"
+  },
+  "intake-satpy": {
+    "conda_name": "intake-satpy",
+    "import_name": "intake_satpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-satpy"
+  },
+  "intake-spark": {
+    "conda_name": "intake-spark",
+    "import_name": "intake_spark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-spark"
+  },
+  "intake-sql": {
+    "conda_name": "intake-sql",
+    "import_name": "intake_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-sql"
+  },
+  "intake-sqlite": {
+    "conda_name": "intake-sqlite",
+    "import_name": "intake_sqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-sqlite"
+  },
+  "intake-stac": {
+    "conda_name": "intake-stac",
+    "import_name": "intake_stac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-stac"
+  },
+  "intake-streamz": {
+    "conda_name": "intake-streamz",
+    "import_name": "intake_streamz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-streamz"
+  },
+  "intake-thredds": {
+    "conda_name": "intake-thredds",
+    "import_name": "intake_thredds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-thredds"
+  },
+  "intake-xarray": {
+    "conda_name": "intake-xarray",
+    "import_name": "intake_xarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intake-xarray"
+  },
+  "intbitset": {
+    "conda_name": "intbitset",
+    "import_name": "intbitset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intbitset"
+  },
+  "intelhex": {
+    "conda_name": "intelhex",
+    "import_name": "intelhex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intelhex"
+  },
+  "intensity-normalization": {
+    "conda_name": "intensity-normalization",
+    "import_name": "intensity_normalization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intensity-normalization"
+  },
+  "interchange": {
+    "conda_name": "interchange",
+    "import_name": "interchange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interchange"
+  },
+  "interface-meta": {
+    "conda_name": "interface_meta",
+    "import_name": "interface_meta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interface-meta"
+  },
+  "interlap": {
+    "conda_name": "interlap",
+    "import_name": "interlap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interlap"
+  },
+  "interleave": {
+    "conda_name": "interleave",
+    "import_name": "interleave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interleave"
+  },
+  "intern": {
+    "conda_name": "intern",
+    "import_name": "intern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intern"
+  },
+  "interpret-community": {
+    "conda_name": "interpret-community",
+    "import_name": "interpret_community",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interpret-community"
+  },
+  "interrogate": {
+    "conda_name": "interrogate",
+    "import_name": "interrogate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interrogate"
+  },
+  "intersphinx-registry": {
+    "conda_name": "intersphinx-registry",
+    "import_name": "intersphinx_registry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intersphinx-registry"
+  },
+  "interval-tree": {
+    "conda_name": "interval_tree",
+    "import_name": "interval_tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "interval-tree"
+  },
+  "intervals": {
+    "conda_name": "intervals",
+    "import_name": "intervals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intervals"
+  },
+  "intervaltree": {
+    "conda_name": "intervaltree",
+    "import_name": "intervaltree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intervaltree"
+  },
+  "intervalues": {
+    "conda_name": "intervalues",
+    "import_name": "intervalues",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intervalues"
+  },
+  "intreehooks": {
+    "conda_name": "intreehooks",
+    "import_name": "intreehooks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intreehooks"
+  },
+  "intspan": {
+    "conda_name": "intspan",
+    "import_name": "intspan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "intspan"
+  },
+  "invagination": {
+    "conda_name": "invagination",
+    "import_name": "invagination",
+    "mapping_source": "regro-bot",
+    "pypi_name": "invagination"
+  },
+  "invariant-point-attention": {
+    "conda_name": "invariant-point-attention",
+    "import_name": "invariant_point_attention",
+    "mapping_source": "regro-bot",
+    "pypi_name": "invariant-point-attention"
+  },
+  "invert4geom": {
+    "conda_name": "invert4geom",
+    "import_name": "invert4geom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "invert4geom"
+  },
+  "invest-ucm-calibration": {
+    "conda_name": "invest-ucm-calibration",
+    "import_name": "invest_ucm_calibration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "invest-ucm-calibration"
+  },
+  "invoke": {
+    "conda_name": "invoke",
+    "import_name": "invoke",
+    "mapping_source": "regro-bot",
+    "pypi_name": "invoke"
+  },
+  "iohub": {
+    "conda_name": "iohub",
+    "import_name": "iohub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iohub"
+  },
+  "ioos-metrics": {
+    "conda_name": "ioos_metrics",
+    "import_name": "ioos_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ioos-metrics"
+  },
+  "ioos-qartod": {
+    "conda_name": "ioos_qartod",
+    "import_name": "ioos_qartod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ioos-qartod"
+  },
+  "ioos-qc": {
+    "conda_name": "ioos_qc",
+    "import_name": "ioos_qc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ioos-qc"
+  },
+  "ioos-tools": {
+    "conda_name": "ioos_tools",
+    "import_name": "ioos_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ioos-tools"
+  },
+  "iopath": {
+    "conda_name": "iopath",
+    "import_name": "iopath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iopath"
+  },
+  "ioproc": {
+    "conda_name": "ioproc",
+    "import_name": "ioproc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ioproc"
+  },
+  "iosacal": {
+    "conda_name": "iosacal",
+    "import_name": "iosacal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iosacal"
+  },
+  "iosbackup": {
+    "conda_name": "iosbackup",
+    "import_name": "iOSbackup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iosbackup"
+  },
+  "iota": {
+    "conda_name": "iota",
+    "import_name": "iota",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iota"
+  },
+  "iowait": {
+    "conda_name": "iowait",
+    "import_name": "iowait",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iowait"
+  },
+  "ipaddress": {
+    "conda_name": "ipaddress",
+    "import_name": "ipaddress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipaddress"
+  },
+  "ipannotoryous": {
+    "conda_name": "ipannotoryous",
+    "import_name": "ipannotoryous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipannotoryous"
+  },
+  "ipecharts": {
+    "conda_name": "ipecharts",
+    "import_name": "ipecharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipecharts"
+  },
+  "ipfn": {
+    "conda_name": "ipfn",
+    "import_name": "ipfn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipfn"
+  },
+  "ipfshttpclient": {
+    "conda_name": "ipfshttpclient",
+    "import_name": "ipfshttpclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipfshttpclient"
+  },
+  "ipfsspec": {
+    "conda_name": "ipfsspec",
+    "import_name": "ipfsspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipfsspec"
+  },
+  "ipi": {
+    "conda_name": "i-pi",
+    "import_name": "ipi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipi"
+  },
+  "ipopt": {
+    "conda_name": "cyipopt",
+    "import_name": "cyipopt",
+    "mapping_source": "static",
+    "pypi_name": "ipopt"
+  },
+  "iprogress": {
+    "conda_name": "iprogress",
+    "import_name": "IProgress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iprogress"
+  },
+  "iprpy": {
+    "conda_name": "iprpy",
+    "import_name": "iprPy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iprpy"
+  },
+  "ipserver": {
+    "conda_name": "ipserver",
+    "import_name": "ipserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipserver"
+  },
+  "ipsurv": {
+    "conda_name": "ipsurv",
+    "import_name": "ipsurv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipsurv"
+  },
+  "iptcinfo3": {
+    "conda_name": "iptcinfo3",
+    "import_name": "iptcinfo3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iptcinfo3"
+  },
+  "ipumspy": {
+    "conda_name": "ipumspy",
+    "import_name": "ipumspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipumspy"
+  },
+  "ipyaggrid": {
+    "conda_name": "ipyaggrid",
+    "import_name": "ipyaggrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyaggrid"
+  },
+  "ipyaladin": {
+    "conda_name": "ipyaladin",
+    "import_name": "ipyaladin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyaladin"
+  },
+  "ipyautoui": {
+    "conda_name": "ipyautoui",
+    "import_name": "ipyautoui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyautoui"
+  },
+  "ipybertin": {
+    "conda_name": "ipybertin",
+    "import_name": "ipybertin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipybertin"
+  },
+  "ipychart": {
+    "conda_name": "ipychart",
+    "import_name": "ipychart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipychart"
+  },
+  "ipycytoscape": {
+    "conda_name": "ipycytoscape",
+    "import_name": "ipycytoscape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipycytoscape"
+  },
+  "ipydagred3": {
+    "conda_name": "ipydagred3",
+    "import_name": "ipydagred3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipydagred3"
+  },
+  "ipydatawidgets": {
+    "conda_name": "ipydatawidgets",
+    "import_name": "ipydatawidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipydatawidgets"
+  },
+  "ipyelk": {
+    "conda_name": "ipyelk",
+    "import_name": "ipyelk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyelk"
+  },
+  "ipyevents": {
+    "conda_name": "ipyevents",
+    "import_name": "ipyevents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyevents"
+  },
+  "ipyfastscape": {
+    "conda_name": "ipyfastscape",
+    "import_name": "ipyfastscape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyfastscape"
+  },
+  "ipyfilechooser": {
+    "conda_name": "ipyfilechooser",
+    "import_name": "ipyfilechooser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyfilechooser"
+  },
+  "ipyflex": {
+    "conda_name": "ipyflex",
+    "import_name": "ipyflex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyflex"
+  },
+  "ipyforcegraph": {
+    "conda_name": "ipyforcegraph",
+    "import_name": "ipyforcegraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyforcegraph"
+  },
+  "ipygany": {
+    "conda_name": "ipygany",
+    "import_name": "ipygany",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipygany"
+  },
+  "ipygraphql": {
+    "conda_name": "ipygraphql",
+    "import_name": "ipygraphql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipygraphql"
+  },
+  "ipyigv": {
+    "conda_name": "ipyigv",
+    "import_name": "ipyigv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyigv"
+  },
+  "ipylayout": {
+    "conda_name": "ipylayout",
+    "import_name": "ipylayout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipylayout"
+  },
+  "ipymarkup": {
+    "conda_name": "ipymarkup",
+    "import_name": "ipymarkup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipymarkup"
+  },
+  "ipymaterialui": {
+    "conda_name": "ipymaterialui",
+    "import_name": "ipymaterialui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipymaterialui"
+  },
+  "ipymesh": {
+    "conda_name": "ipymesh",
+    "import_name": "ipymesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipymesh"
+  },
+  "ipymidicontrols": {
+    "conda_name": "ipymidicontrols",
+    "import_name": "ipymidicontrols",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipymidicontrols"
+  },
+  "ipynao": {
+    "conda_name": "ipynao",
+    "import_name": "ipynao",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipynao"
+  },
+  "ipynb-py-convert": {
+    "conda_name": "ipynb-py-convert",
+    "import_name": "ipynb_py_convert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipynb-py-convert"
+  },
+  "ipynbname": {
+    "conda_name": "ipynbname",
+    "import_name": "ipynbname",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipynbname"
+  },
+  "ipypivot": {
+    "conda_name": "ipypivot",
+    "import_name": "ipypivot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipypivot"
+  },
+  "ipypublish": {
+    "conda_name": "ipypublish",
+    "import_name": "ipypublish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipypublish"
+  },
+  "ipyradiant": {
+    "conda_name": "ipyradiant",
+    "import_name": "ipyradiant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyradiant"
+  },
+  "ipyreact": {
+    "conda_name": "ipyreact",
+    "import_name": "ipyreact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyreact"
+  },
+  "ipyregulartable": {
+    "conda_name": "ipyregulartable",
+    "import_name": "ipyregulartable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyregulartable"
+  },
+  "ipysankeywidget": {
+    "conda_name": "ipysankeywidget",
+    "import_name": "ipysankeywidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipysankeywidget"
+  },
+  "ipyscales": {
+    "conda_name": "ipyscales",
+    "import_name": "ipyscales",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyscales"
+  },
+  "ipysheet": {
+    "conda_name": "ipysheet",
+    "import_name": "ipysheet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipysheet"
+  },
+  "ipyslides": {
+    "conda_name": "ipyslides",
+    "import_name": "ipyslides",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyslides"
+  },
+  "ipyslurm": {
+    "conda_name": "ipyslurm",
+    "import_name": "ipyslurm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyslurm"
+  },
+  "ipyspin": {
+    "conda_name": "ipyspin",
+    "import_name": "ipyspin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyspin"
+  },
+  "ipytablewidgets": {
+    "conda_name": "ipytablewidgets",
+    "import_name": "ipytablewidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipytablewidgets"
+  },
+  "ipytest": {
+    "conda_name": "ipytest",
+    "import_name": "ipytest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipytest"
+  },
+  "ipython-autotime": {
+    "conda_name": "ipython-autotime",
+    "import_name": "autotime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipython-autotime"
+  },
+  "ipython-genutils": {
+    "conda_name": "ipython_genutils",
+    "import_name": "ipython_genutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipython-genutils"
+  },
+  "ipython-pygments-lexers": {
+    "conda_name": "ipython_pygments_lexers",
+    "import_name": "ipython_pygments_lexers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipython-pygments-lexers"
+  },
+  "ipython-sql": {
+    "conda_name": "ipython-sql",
+    "import_name": "sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipython-sql"
+  },
+  "ipython-unittest": {
+    "conda_name": "ipython_unittest",
+    "import_name": "ipython_unittest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipython-unittest"
+  },
+  "ipytone": {
+    "conda_name": "ipytone",
+    "import_name": "ipytone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipytone"
+  },
+  "ipytree": {
+    "conda_name": "ipytree",
+    "import_name": "ipytree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipytree"
+  },
+  "ipyurl": {
+    "conda_name": "ipyurl",
+    "import_name": "ipyurl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyurl"
+  },
+  "ipyvizzu": {
+    "conda_name": "ipyvizzu",
+    "import_name": "ipyvizzu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvizzu"
+  },
+  "ipyvizzu-story": {
+    "conda_name": "ipyvizzu-story",
+    "import_name": "ipyvizzustory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvizzu-story"
+  },
+  "ipyvolume": {
+    "conda_name": "ipyvolume",
+    "import_name": "ipyvolume",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvolume"
+  },
+  "ipyvtklink": {
+    "conda_name": "ipyvtklink",
+    "import_name": "ipyvtklink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvtklink"
+  },
+  "ipyvue": {
+    "conda_name": "ipyvue",
+    "import_name": "ipyvue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvue"
+  },
+  "ipyvuedraggable": {
+    "conda_name": "ipyvuedraggable",
+    "import_name": "ipyvuedraggable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvuedraggable"
+  },
+  "ipyvuetify": {
+    "conda_name": "ipyvuetify",
+    "import_name": "ipyvuetify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyvuetify"
+  },
+  "ipywebrtc": {
+    "conda_name": "ipywebrtc",
+    "import_name": "ipywebrtc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipywebrtc"
+  },
+  "ipywidgets": {
+    "conda_name": "ipywidgets",
+    "import_name": "ipywidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipywidgets"
+  },
+  "ipywidgets-jsonschema": {
+    "conda_name": "ipywidgets-jsonschema",
+    "import_name": "ipywidgets_jsonschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipywidgets-jsonschema"
+  },
+  "ipyx": {
+    "conda_name": "ipyx",
+    "import_name": "ipyx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyx"
+  },
+  "ipyxact": {
+    "conda_name": "ipyxact",
+    "import_name": "ipyxact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ipyxact"
+  },
+  "iredis": {
+    "conda_name": "iredis",
+    "import_name": "iredis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iredis"
+  },
+  "iris-grib": {
+    "conda_name": "iris-grib",
+    "import_name": "iris_grib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iris-grib"
+  },
+  "iris-sample-data": {
+    "conda_name": "iris-sample-data",
+    "import_name": "iris_sample_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iris-sample-data"
+  },
+  "iris-ued": {
+    "conda_name": "iris-ued",
+    "import_name": "iris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iris-ued"
+  },
+  "irispy-lmsal": {
+    "conda_name": "irispy-lmsal",
+    "import_name": "irispy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "irispy-lmsal"
+  },
+  "ironflow": {
+    "conda_name": "ironflow",
+    "import_name": "ironflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ironflow"
+  },
+  "irrep": {
+    "conda_name": "irrep",
+    "import_name": "irrep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "irrep"
+  },
+  "is2view": {
+    "conda_name": "is2view",
+    "import_name": "IS2view",
+    "mapping_source": "regro-bot",
+    "pypi_name": "is2view"
+  },
+  "isal": {
+    "conda_name": "python-isal",
+    "import_name": "isal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isal"
+  },
+  "isbnlib": {
+    "conda_name": "isbnlib",
+    "import_name": "isbnlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isbnlib"
+  },
+  "iscan": {
+    "conda_name": "iscan",
+    "import_name": "iscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iscan"
+  },
+  "isicarchive": {
+    "conda_name": "isicarchive",
+    "import_name": "isicarchive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isicarchive"
+  },
+  "isitgr": {
+    "conda_name": "isitgr",
+    "import_name": "isitgr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isitgr"
+  },
+  "islpy": {
+    "conda_name": "islpy",
+    "import_name": "islpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "islpy"
+  },
+  "iso-639": {
+    "conda_name": "iso-639",
+    "import_name": "iso639",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iso-639"
+  },
+  "iso3166": {
+    "conda_name": "iso3166",
+    "import_name": "iso3166",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iso3166"
+  },
+  "iso4217": {
+    "conda_name": "iso4217",
+    "import_name": "iso4217",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iso4217"
+  },
+  "iso639-lang": {
+    "conda_name": "iso639-lang",
+    "import_name": "iso639",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iso639-lang"
+  },
+  "iso8601": {
+    "conda_name": "iso8601",
+    "import_name": "iso8601",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iso8601"
+  },
+  "isodate": {
+    "conda_name": "isodate",
+    "import_name": "isodate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isodate"
+  },
+  "isofit": {
+    "conda_name": "isofit",
+    "import_name": "isofit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isofit"
+  },
+  "isort": {
+    "conda_name": "isort",
+    "import_name": "isort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isort"
+  },
+  "isosplit6": {
+    "conda_name": "isosplit6",
+    "import_name": "isosplit6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isosplit6"
+  },
+  "isosurfaces": {
+    "conda_name": "isosurfaces",
+    "import_name": "isosurfaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isosurfaces"
+  },
+  "isoweek": {
+    "conda_name": "isoweek",
+    "import_name": "isoweek",
+    "mapping_source": "regro-bot",
+    "pypi_name": "isoweek"
+  },
+  "ispyb": {
+    "conda_name": "ispyb",
+    "import_name": "ispyb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ispyb"
+  },
+  "issho": {
+    "conda_name": "issho",
+    "import_name": "issho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "issho"
+  },
+  "itallic": {
+    "conda_name": "itallic",
+    "import_name": "itallic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itallic"
+  },
+  "itemadapter": {
+    "conda_name": "itemadapter",
+    "import_name": "itemadapter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itemadapter"
+  },
+  "itemloaders": {
+    "conda_name": "itemloaders",
+    "import_name": "itemloaders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itemloaders"
+  },
+  "iterable-io": {
+    "conda_name": "iterable-io",
+    "import_name": "iterableio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterable-io"
+  },
+  "iteration-utilities": {
+    "conda_name": "iteration_utilities",
+    "import_name": "iteration_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iteration-utilities"
+  },
+  "iterative-telemetry": {
+    "conda_name": "iterative-telemetry",
+    "import_name": "iterative_telemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterative-telemetry"
+  },
+  "iterativefiltering": {
+    "conda_name": "iterativefiltering",
+    "import_name": "fifpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterativefiltering"
+  },
+  "iterativewgcna": {
+    "conda_name": "iterativewgcna",
+    "import_name": "iterativeWGCNA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterativewgcna"
+  },
+  "iterators": {
+    "conda_name": "iterators",
+    "import_name": "iterators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterators"
+  },
+  "iterm2-tools": {
+    "conda_name": "iterm2-tools",
+    "import_name": "iterm2_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "iterm2-tools"
+  },
+  "itermate": {
+    "conda_name": "itermate",
+    "import_name": "itermate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itermate"
+  },
+  "itermplot": {
+    "conda_name": "itermplot",
+    "import_name": "itermplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itermplot"
+  },
+  "itertable": {
+    "conda_name": "itertable",
+    "import_name": "itertable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itertable"
+  },
+  "itk-meshtopolydata": {
+    "conda_name": "itk-meshtopolydata",
+    "import_name": "itk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itk-meshtopolydata"
+  },
+  "itk-napari-conversion": {
+    "conda_name": "itk-napari-conversion",
+    "import_name": "itk_napari_conversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itk-napari-conversion"
+  },
+  "itksn": {
+    "conda_name": "itksn",
+    "import_name": "itksn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itksn"
+  },
+  "itkwasm": {
+    "conda_name": "itkwasm",
+    "import_name": "itkwasm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itkwasm"
+  },
+  "itkwasm-downsample": {
+    "conda_name": "itkwasm-downsample",
+    "import_name": "itkwasm_downsample",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itkwasm-downsample"
+  },
+  "itkwasm-downsample-emscripten": {
+    "conda_name": "itkwasm-downsample-emscripten",
+    "import_name": "itkwasm_downsample_emscripten",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itkwasm-downsample-emscripten"
+  },
+  "itkwasm-downsample-wasi": {
+    "conda_name": "itkwasm-downsample-wasi",
+    "import_name": "itkwasm_downsample_wasi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itkwasm-downsample-wasi"
+  },
+  "itkwidgets": {
+    "conda_name": "itkwidgets",
+    "import_name": "itkwidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itkwidgets"
+  },
+  "itmlogic": {
+    "conda_name": "itmlogic",
+    "import_name": "itmlogic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itmlogic"
+  },
+  "itpminer": {
+    "conda_name": "itpminer",
+    "import_name": "itpminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itpminer"
+  },
+  "itsdangerous": {
+    "conda_name": "itsdangerous",
+    "import_name": "itsdangerous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itsdangerous"
+  },
+  "itunespy": {
+    "conda_name": "itunespy",
+    "import_name": "itunespy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itunespy"
+  },
+  "itypes": {
+    "conda_name": "itypes",
+    "import_name": "itypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "itypes"
+  },
+  "ivmodels": {
+    "conda_name": "ivmodels",
+    "import_name": "ivmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ivmodels"
+  },
+  "ixmp": {
+    "conda_name": "ixmp",
+    "import_name": "ixmp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ixmp"
+  },
+  "ixmp4": {
+    "conda_name": "ixmp4",
+    "import_name": "ixmp4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ixmp4"
+  },
+  "ja-webutils": {
+    "conda_name": "ja-webutils",
+    "import_name": "ja_webutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ja-webutils"
+  },
+  "jacobi": {
+    "conda_name": "jacobi",
+    "import_name": "jacobi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jacobi"
+  },
+  "jaeger-browser": {
+    "conda_name": "jaeger-browser",
+    "import_name": "jaeger_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaeger-browser"
+  },
+  "jaeger-client": {
+    "conda_name": "jaeger-client",
+    "import_name": "jaeger_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaeger-client"
+  },
+  "jalali-core": {
+    "conda_name": "jalali-core",
+    "import_name": "jalali_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jalali-core"
+  },
+  "jamo": {
+    "conda_name": "jamo",
+    "import_name": "jamo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jamo"
+  },
+  "jamotools": {
+    "conda_name": "jamotools",
+    "import_name": "jamotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jamotools"
+  },
+  "janitor-rs": {
+    "conda_name": "janitor-rs",
+    "import_name": "janitor_rs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "janitor-rs"
+  },
+  "janome": {
+    "conda_name": "janome",
+    "import_name": "janome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "janome"
+  },
+  "janus": {
+    "conda_name": "janus",
+    "import_name": "janus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "janus"
+  },
+  "jaraco-docker": {
+    "conda_name": "jaraco.docker",
+    "import_name": "jaraco.docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-docker"
+  },
+  "jaraco-envs": {
+    "conda_name": "jaraco.envs",
+    "import_name": "jaraco.envs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-envs"
+  },
+  "jaraco-itertools": {
+    "conda_name": "jaraco.itertools",
+    "import_name": "jaraco.itertools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-itertools"
+  },
+  "jaraco-logging": {
+    "conda_name": "jaraco.logging",
+    "import_name": "jaraco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-logging"
+  },
+  "jaraco-stream": {
+    "conda_name": "jaraco.stream",
+    "import_name": "jaraco.stream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-stream"
+  },
+  "jaraco-test": {
+    "conda_name": "jaraco.test",
+    "import_name": "jaraco.test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaraco-test"
+  },
+  "jarowinkler": {
+    "conda_name": "jarowinkler",
+    "import_name": "jarowinkler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jarowinkler"
+  },
+  "java-access-bridge-wrapper": {
+    "conda_name": "java-access-bridge-wrapper",
+    "import_name": "JABWrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "java-access-bridge-wrapper"
+  },
+  "javabridge": {
+    "conda_name": "javabridge",
+    "import_name": "javabridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "javabridge"
+  },
+  "javaobj-py3": {
+    "conda_name": "javaobj-py3",
+    "import_name": "javaobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "javaobj-py3"
+  },
+  "javascripthon": {
+    "conda_name": "javascripthon",
+    "import_name": "metapensiero.pj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "javascripthon"
+  },
+  "jax": {
+    "conda_name": "jax",
+    "import_name": "jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax"
+  },
+  "jax-cfd": {
+    "conda_name": "jax-cfd",
+    "import_name": "jax_cfd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-cfd"
+  },
+  "jax-dataclasses": {
+    "conda_name": "jax-dataclasses",
+    "import_name": "jax_dataclasses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-dataclasses"
+  },
+  "jax-datetime": {
+    "conda_name": "jax-datetime",
+    "import_name": "jax_datetime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-datetime"
+  },
+  "jax-finufft": {
+    "conda_name": "jax-finufft",
+    "import_name": "jax_finufft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-finufft"
+  },
+  "jax-jumpy": {
+    "conda_name": "jax-jumpy",
+    "import_name": "jumpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-jumpy"
+  },
+  "jax-rrtmgp": {
+    "conda_name": "jax-rrtmgp",
+    "import_name": "rrtmgp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-rrtmgp"
+  },
+  "jax-solar": {
+    "conda_name": "jax-solar",
+    "import_name": "jax_solar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-solar"
+  },
+  "jax-tqdm": {
+    "conda_name": "jax-tqdm",
+    "import_name": "jax_tqdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax-tqdm"
+  },
+  "jax2torch": {
+    "conda_name": "jax2torch",
+    "import_name": "jax2torch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jax2torch"
+  },
+  "jaxlie": {
+    "conda_name": "jaxlie",
+    "import_name": "jaxlie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaxlie"
+  },
+  "jaxns": {
+    "conda_name": "jaxns",
+    "import_name": "jaxns",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaxns"
+  },
+  "jaxonnxruntime": {
+    "conda_name": "jaxonnxruntime",
+    "import_name": "jaxonnxruntime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaxonnxruntime"
+  },
+  "jaxopt": {
+    "conda_name": "jaxopt",
+    "import_name": "jaxopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaxopt"
+  },
+  "jaxtyping": {
+    "conda_name": "jaxtyping",
+    "import_name": "jaxtyping",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaxtyping"
+  },
+  "jaydebeapi": {
+    "conda_name": "jaydebeapi",
+    "import_name": "jaydebeapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jaydebeapi"
+  },
+  "jazz-hands": {
+    "conda_name": "jazz-hands",
+    "import_name": "jazzhands",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jazz-hands"
+  },
+  "jazzit": {
+    "conda_name": "jazzit",
+    "import_name": "jazzit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jazzit"
+  },
+  "jbpy": {
+    "conda_name": "jbpy",
+    "import_name": "jbpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jbpy"
+  },
+  "jcm": {
+    "conda_name": "jcm",
+    "import_name": "jcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jcm"
+  },
+  "jdcal": {
+    "conda_name": "jdcal",
+    "import_name": "jdcal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jdcal"
+  },
+  "jdeskew": {
+    "conda_name": "jdeskew",
+    "import_name": "jdeskew",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jdeskew"
+  },
+  "jdot": {
+    "conda_name": "jdot",
+    "import_name": "jdot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jdot"
+  },
+  "jeepney": {
+    "conda_name": "jeepney",
+    "import_name": "jeepney",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jeepney"
+  },
+  "jellyfish": {
+    "conda_name": "jellyfish",
+    "import_name": "jellyfish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jellyfish"
+  },
+  "jenkinsapi": {
+    "conda_name": "jenkinsapi",
+    "import_name": "jenkinsapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jenkinsapi"
+  },
+  "jenkspy": {
+    "conda_name": "jenkspy",
+    "import_name": "jenkspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jenkspy"
+  },
+  "jenn": {
+    "conda_name": "jenn",
+    "import_name": "jenn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jenn"
+  },
+  "jesth": {
+    "conda_name": "jesth",
+    "import_name": "jesth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jesth"
+  },
+  "jftools": {
+    "conda_name": "jftools",
+    "import_name": "jftools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jftools"
+  },
+  "jgo": {
+    "conda_name": "jgo",
+    "import_name": "jgo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jgo"
+  },
+  "jhsingle-native-proxy": {
+    "conda_name": "jhsingle-native-proxy",
+    "import_name": "jhsingle_native_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jhsingle-native-proxy"
+  },
+  "jhub-client": {
+    "conda_name": "jhub-client",
+    "import_name": "jhub_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jhub-client"
+  },
+  "jill": {
+    "conda_name": "jill",
+    "import_name": "jill",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jill"
+  },
+  "jina-hubble-sdk": {
+    "conda_name": "jina-hubble-sdk",
+    "import_name": "hubble",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jina-hubble-sdk"
+  },
+  "jinja-partials": {
+    "conda_name": "jinja_partials",
+    "import_name": "jinja_partials",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja-partials"
+  },
+  "jinja2-ansible-filters": {
+    "conda_name": "jinja2-ansible-filters",
+    "import_name": "jinja2_ansible_filters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-ansible-filters"
+  },
+  "jinja2-git": {
+    "conda_name": "jinja2-git",
+    "import_name": "jinja2_git",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-git"
+  },
+  "jinja2-highlight": {
+    "conda_name": "jinja2-highlight",
+    "import_name": "jinja2_highlight",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-highlight"
+  },
+  "jinja2-humanize-extension": {
+    "conda_name": "jinja2-humanize-extension",
+    "import_name": "jinja2_humanize_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-humanize-extension"
+  },
+  "jinja2-pluralize": {
+    "conda_name": "jinja2_pluralize",
+    "import_name": "jinja2_pluralize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-pluralize"
+  },
+  "jinja2-simple-tags": {
+    "conda_name": "jinja2-simple-tags",
+    "import_name": "jinja2_simple_tags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-simple-tags"
+  },
+  "jinja2-time": {
+    "conda_name": "jinja2-time",
+    "import_name": "jinja2_time",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2-time"
+  },
+  "jinja2schema": {
+    "conda_name": "jinja2schema",
+    "import_name": "jinja2schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinja2schema"
+  },
+  "jinjasql": {
+    "conda_name": "jinjasql",
+    "import_name": "jinjasql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinjasql"
+  },
+  "jinxed": {
+    "conda_name": "jinxed",
+    "import_name": "jinxed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jinxed"
+  },
+  "jit-open": {
+    "conda_name": "jit-open",
+    "import_name": "jit_open",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jit-open"
+  },
+  "jiter": {
+    "conda_name": "jiter",
+    "import_name": "jiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jiter"
+  },
+  "jlgametheory": {
+    "conda_name": "jlgametheory",
+    "import_name": "jlgametheory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jlgametheory"
+  },
+  "jnbv": {
+    "conda_name": "jnbv",
+    "import_name": "jnbv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jnbv"
+  },
+  "job-pool": {
+    "conda_name": "job-pool",
+    "import_name": "job_pool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "job-pool"
+  },
+  "jobflow": {
+    "conda_name": "jobflow",
+    "import_name": "jobflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jobflow"
+  },
+  "jobrunner": {
+    "conda_name": "jobrunner",
+    "import_name": "jobrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jobrunner"
+  },
+  "jobtastic": {
+    "conda_name": "jobtastic",
+    "import_name": "jobtastic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jobtastic"
+  },
+  "johnnydep": {
+    "conda_name": "johnnydep",
+    "import_name": "johnnydep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "johnnydep"
+  },
+  "jonga": {
+    "conda_name": "jonga",
+    "import_name": "jonga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jonga"
+  },
+  "joommf": {
+    "conda_name": "joommf",
+    "import_name": "joommf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "joommf"
+  },
+  "joommfutil": {
+    "conda_name": "joommfutil",
+    "import_name": "joommfutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "joommfutil"
+  },
+  "joseki": {
+    "conda_name": "joseki",
+    "import_name": "joseki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "joseki"
+  },
+  "josepy": {
+    "conda_name": "josepy",
+    "import_name": "josepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "josepy"
+  },
+  "joserfc": {
+    "conda_name": "joserfc",
+    "import_name": "joserfc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "joserfc"
+  },
+  "joypy": {
+    "conda_name": "joypy",
+    "import_name": "joypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "joypy"
+  },
+  "jp-noui": {
+    "conda_name": "jp-noui",
+    "import_name": "jp_noui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jp-noui"
+  },
+  "jpf": {
+    "conda_name": "jpf",
+    "import_name": "jpf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jpf"
+  },
+  "jpl-small-bodies-de441-n16": {
+    "conda_name": "jpl-small-bodies-de441-n16",
+    "import_name": "jpl_small_bodies_de441_n16",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jpl-small-bodies-de441-n16"
+  },
+  "jplephem": {
+    "conda_name": "jplephem",
+    "import_name": "jplephem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jplephem"
+  },
+  "jproperties": {
+    "conda_name": "jproperties",
+    "import_name": "jproperties",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jproperties"
+  },
+  "jpterm": {
+    "conda_name": "jpterm",
+    "import_name": "jpterm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jpterm"
+  },
+  "jpype1": {
+    "conda_name": "jpype1",
+    "import_name": "jpype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jpype1"
+  },
+  "jraph": {
+    "conda_name": "jraph",
+    "import_name": "jraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jraph"
+  },
+  "jrnl": {
+    "conda_name": "jrnl",
+    "import_name": "jrnl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jrnl"
+  },
+  "jrsync": {
+    "conda_name": "jrsync",
+    "import_name": "jrsync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jrsync"
+  },
+  "js-regex": {
+    "conda_name": "js-regex",
+    "import_name": "js_regex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "js-regex"
+  },
+  "js2py": {
+    "conda_name": "js2py",
+    "import_name": "js2py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "js2py"
+  },
+  "jsbsim": {
+    "conda_name": "jsbsim",
+    "import_name": "jsbsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsbsim"
+  },
+  "jscatter": {
+    "conda_name": "jscatter",
+    "import_name": "jscatter.libs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jscatter"
+  },
+  "jschema-to-python": {
+    "conda_name": "jschema-to-python",
+    "import_name": "jschema_to_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jschema-to-python"
+  },
+  "jschon": {
+    "conda_name": "jschon",
+    "import_name": "jschon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jschon"
+  },
+  "jsii": {
+    "conda_name": "python-jsii",
+    "import_name": "jsii",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsii"
+  },
+  "jsmin": {
+    "conda_name": "jsmin",
+    "import_name": "jsmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsmin"
+  },
+  "json-cfg": {
+    "conda_name": "json-cfg",
+    "import_name": "jsoncfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-cfg"
+  },
+  "json-flattener": {
+    "conda_name": "json-flattener",
+    "import_name": "json_flattener",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-flattener"
+  },
+  "json-logging": {
+    "conda_name": "json-logging",
+    "import_name": "json_logging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-logging"
+  },
+  "json-lsp": {
+    "conda_name": "json-lsp",
+    "import_name": "json_lsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-lsp"
+  },
+  "json-merge-patch": {
+    "conda_name": "json-merge-patch",
+    "import_name": "json_merge_patch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-merge-patch"
+  },
+  "json-numpy": {
+    "conda_name": "json-numpy",
+    "import_name": "json_numpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-numpy"
+  },
+  "json-rpc": {
+    "conda_name": "json-rpc",
+    "import_name": "jsonrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-rpc"
+  },
+  "json-spec": {
+    "conda_name": "json-spec",
+    "import_name": "jsonspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-spec"
+  },
+  "json-stream": {
+    "conda_name": "json_stream",
+    "import_name": "json_stream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-stream"
+  },
+  "json-stream-rs-tokenizer": {
+    "conda_name": "json-stream-rs-tokenizer",
+    "import_name": "json_stream_rs_tokenizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-stream-rs-tokenizer"
+  },
+  "json-tricks": {
+    "conda_name": "json_tricks",
+    "import_name": "json_tricks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json-tricks"
+  },
+  "json2html": {
+    "conda_name": "json2html",
+    "import_name": "json2html",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json2html"
+  },
+  "json2parquet": {
+    "conda_name": "json2parquet",
+    "import_name": "json2parquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json2parquet"
+  },
+  "json2table": {
+    "conda_name": "json2table",
+    "import_name": "json2table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json2table"
+  },
+  "json5": {
+    "conda_name": "json5",
+    "import_name": "json5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "json5"
+  },
+  "jsonalias": {
+    "conda_name": "jsonalias",
+    "import_name": "jsonalias",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonalias"
+  },
+  "jsonapi-client": {
+    "conda_name": "jsonapi-client",
+    "import_name": "jsonapi_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonapi-client"
+  },
+  "jsonapi-requests": {
+    "conda_name": "jsonapi-requests",
+    "import_name": "jsonapi_requests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonapi-requests"
+  },
+  "jsonasobj": {
+    "conda_name": "jsonasobj",
+    "import_name": "jsonasobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonasobj"
+  },
+  "jsoncomment": {
+    "conda_name": "jsoncomment",
+    "import_name": "jsoncomment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsoncomment"
+  },
+  "jsondiff": {
+    "conda_name": "jsondiff",
+    "import_name": "jsondiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsondiff"
+  },
+  "jsonextended": {
+    "conda_name": "jsonextended",
+    "import_name": "jsonextended",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonextended"
+  },
+  "jsonfield": {
+    "conda_name": "jsonfield",
+    "import_name": "jsonfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonfield"
+  },
+  "jsongrapher": {
+    "conda_name": "jsongrapher",
+    "import_name": "JSONGrapher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsongrapher"
+  },
+  "jsonlines": {
+    "conda_name": "jsonlines",
+    "import_name": "jsonlines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonlines"
+  },
+  "jsonlookup": {
+    "conda_name": "jsonlookup",
+    "import_name": "jsonLookup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonlookup"
+  },
+  "jsonmerge": {
+    "conda_name": "jsonmerge",
+    "import_name": "jsonmerge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonmerge"
+  },
+  "jsonpatch": {
+    "conda_name": "jsonpatch",
+    "import_name": "jsonpatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonpatch"
+  },
+  "jsonpath": {
+    "conda_name": "jsonpath",
+    "import_name": "jsonpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonpath"
+  },
+  "jsonref": {
+    "conda_name": "jsonref",
+    "import_name": "jsonref",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonref"
+  },
+  "jsonrpcserver": {
+    "conda_name": "jsonrpcserver",
+    "import_name": "jsonrpcserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonrpcserver"
+  },
+  "jsonschema-default": {
+    "conda_name": "jsonschema-default",
+    "import_name": "jsonschema_default",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonschema-default"
+  },
+  "jsonschema-spec": {
+    "conda_name": "jsonschema-spec",
+    "import_name": "jsonschema_spec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonschema-spec"
+  },
+  "jsonschema2md": {
+    "conda_name": "jsonschema2md",
+    "import_name": "jsonschema2md",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonschema2md"
+  },
+  "jsonspice": {
+    "conda_name": "jsonspice",
+    "import_name": "jsonspice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonspice"
+  },
+  "jsonsubschema": {
+    "conda_name": "jsonsubschema",
+    "import_name": "jsonsubschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonsubschema"
+  },
+  "jsontableschema": {
+    "conda_name": "jsontableschema",
+    "import_name": "jsontableschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsontableschema"
+  },
+  "jsontableschema-pandas": {
+    "conda_name": "jsontableschema-pandas",
+    "import_name": "jsontableschema_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsontableschema-pandas"
+  },
+  "jsonyx": {
+    "conda_name": "jsonyx",
+    "import_name": "jsonyx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jsonyx"
+  },
+  "jstyleson": {
+    "conda_name": "jstyleson",
+    "import_name": "jstyleson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jstyleson"
+  },
+  "jug": {
+    "conda_name": "jug",
+    "import_name": "jug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jug"
+  },
+  "julearn": {
+    "conda_name": "julearn",
+    "import_name": "julearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "julearn"
+  },
+  "juliacall": {
+    "conda_name": "pyjuliacall",
+    "import_name": "juliacall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "juliacall"
+  },
+  "julian": {
+    "conda_name": "julian",
+    "import_name": "julian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "julian"
+  },
+  "juliapkg": {
+    "conda_name": "pyjuliapkg",
+    "import_name": "juliapkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "juliapkg"
+  },
+  "juliart": {
+    "conda_name": "juliart",
+    "import_name": "juliart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "juliart"
+  },
+  "juliaup": {
+    "conda_name": "pyjuliaup",
+    "import_name": "juliaup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "juliaup"
+  },
+  "julius": {
+    "conda_name": "julius",
+    "import_name": "julius",
+    "mapping_source": "regro-bot",
+    "pypi_name": "julius"
+  },
+  "junifer": {
+    "conda_name": "junifer",
+    "import_name": "junifer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "junifer"
+  },
+  "junifer-data": {
+    "conda_name": "junifer-data",
+    "import_name": "junifer_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "junifer-data"
+  },
+  "junit2html": {
+    "conda_name": "junit2html",
+    "import_name": "junit2htmlreport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "junit2html"
+  },
+  "junitparser": {
+    "conda_name": "junitparser",
+    "import_name": "junitparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "junitparser"
+  },
+  "jupikchr": {
+    "conda_name": "jupikchr",
+    "import_name": "jupikchr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupikchr"
+  },
+  "jupitest": {
+    "conda_name": "jupitest",
+    "import_name": "jupitest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupitest"
+  },
+  "jupyros": {
+    "conda_name": "jupyros",
+    "import_name": "jupyros",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyros"
+  },
+  "jupysql": {
+    "conda_name": "jupysql",
+    "import_name": "sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupysql"
+  },
+  "jupysql-plugin": {
+    "conda_name": "jupysql-plugin",
+    "import_name": "jupysql_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupysql-plugin"
+  },
+  "jupytab": {
+    "conda_name": "jupytab",
+    "import_name": "jupytab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupytab"
+  },
+  "jupyter": {
+    "conda_name": "jupyter",
+    "import_name": "jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter"
+  },
+  "jupyter-activity-monitor-extension": {
+    "conda_name": "jupyter-activity-monitor-extension",
+    "import_name": "jupyter_activity_monitor_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-activity-monitor-extension"
+  },
+  "jupyter-app-launcher": {
+    "conda_name": "jupyter_app_launcher",
+    "import_name": "jupyter_app_launcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-app-launcher"
+  },
+  "jupyter-archive": {
+    "conda_name": "jupyter-archive",
+    "import_name": "jupyter_archive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-archive"
+  },
+  "jupyter-ascending": {
+    "conda_name": "jupyter_ascending",
+    "import_name": "jupyter_ascending",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-ascending"
+  },
+  "jupyter-black": {
+    "conda_name": "jupyter-black",
+    "import_name": "jupyter_black",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-black"
+  },
+  "jupyter-cache": {
+    "conda_name": "jupyter-cache",
+    "import_name": "jupyter_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-cache"
+  },
+  "jupyter-cms": {
+    "conda_name": "jupyter_cms",
+    "import_name": "jupyter_cms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-cms"
+  },
+  "jupyter-console": {
+    "conda_name": "jupyter_console",
+    "import_name": "jupyter_console",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-console"
+  },
+  "jupyter-containds": {
+    "conda_name": "jupyter-containds",
+    "import_name": "jupyter_containds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-containds"
+  },
+  "jupyter-contrib-core": {
+    "conda_name": "jupyter_contrib_core",
+    "import_name": "jupyter_contrib_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-contrib-core"
+  },
+  "jupyter-contrib-nbextensions": {
+    "conda_name": "jupyter_contrib_nbextensions",
+    "import_name": "jupyter_contrib_nbextensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-contrib-nbextensions"
+  },
+  "jupyter-dashboards": {
+    "conda_name": "jupyter_dashboards",
+    "import_name": "jupyter_dashboards",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-dashboards"
+  },
+  "jupyter-docx-bundler": {
+    "conda_name": "jupyter-docx-bundler",
+    "import_name": "jupyter_docx_bundler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-docx-bundler"
+  },
+  "jupyter-drives": {
+    "conda_name": "jupyter-drives",
+    "import_name": "jupyter_drives",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-drives"
+  },
+  "jupyter-enterprise-gateway": {
+    "conda_name": "jupyter_enterprise_gateway",
+    "import_name": "enterprise_gateway.services",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-enterprise-gateway"
+  },
+  "jupyter-forward": {
+    "conda_name": "jupyter-forward",
+    "import_name": "jupyter_forward",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-forward"
+  },
+  "jupyter-fs": {
+    "conda_name": "jupyter-fs",
+    "import_name": "jupyterfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-fs"
+  },
+  "jupyter-fsspec": {
+    "conda_name": "jupyter-fsspec",
+    "import_name": "jupyter_fsspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-fsspec"
+  },
+  "jupyter-full-width": {
+    "conda_name": "jupyter_full_width",
+    "import_name": "full_width",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-full-width"
+  },
+  "jupyter-hdfscm": {
+    "conda_name": "jupyter-hdfscm",
+    "import_name": "hdfscm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-hdfscm"
+  },
+  "jupyter-highlight-selected-word": {
+    "conda_name": "jupyter_highlight_selected_word",
+    "import_name": "jupyter_highlight_selected_word",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-highlight-selected-word"
+  },
+  "jupyter-jaeger": {
+    "conda_name": "jupyter-jaeger",
+    "import_name": "jupyter_jaeger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-jaeger"
+  },
+  "jupyter-jsmol": {
+    "conda_name": "jupyter-jsmol",
+    "import_name": "jupyter_jsmol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-jsmol"
+  },
+  "jupyter-kernel-client": {
+    "conda_name": "jupyter-kernel-client",
+    "import_name": "jupyter_kernel_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-kernel-client"
+  },
+  "jupyter-kernel-gateway": {
+    "conda_name": "jupyter_kernel_gateway",
+    "import_name": "kernel_gateway",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-kernel-gateway"
+  },
+  "jupyter-kernel-provisioner-proxy": {
+    "conda_name": "jupyter-kernel-provisioner-proxy",
+    "import_name": "jupyter_kernel_provisioner_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-kernel-provisioner-proxy"
+  },
+  "jupyter-kernel-singular": {
+    "conda_name": "jupyter-kernel-singular",
+    "import_name": "jupyter_kernel_singular",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-kernel-singular"
+  },
+  "jupyter-latex-envs": {
+    "conda_name": "jupyter_latex_envs",
+    "import_name": "latex_envs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-latex-envs"
+  },
+  "jupyter-launcher-shortcuts": {
+    "conda_name": "jupyter-launcher-shortcuts",
+    "import_name": "jupyter_launcher_shortcuts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-launcher-shortcuts"
+  },
+  "jupyter-loopback": {
+    "conda_name": "jupyter-loopback",
+    "import_name": "jupyter_loopback",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-loopback"
+  },
+  "jupyter-marimo-proxy": {
+    "conda_name": "jupyter-marimo-proxy",
+    "import_name": "jupyter_marimo_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-marimo-proxy"
+  },
+  "jupyter-nbextensions-configurator": {
+    "conda_name": "jupyter_nbextensions_configurator",
+    "import_name": "jupyter_nbextensions_configurator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-nbextensions-configurator"
+  },
+  "jupyter-nbmodel-client": {
+    "conda_name": "jupyter-nbmodel-client",
+    "import_name": "jupyter_nbmodel_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-nbmodel-client"
+  },
+  "jupyter-offlinenotebook": {
+    "conda_name": "jupyter-offlinenotebook",
+    "import_name": "jupyter_offlinenotebook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-offlinenotebook"
+  },
+  "jupyter-packaging": {
+    "conda_name": "jupyter-packaging",
+    "import_name": "jupyter_packaging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-packaging"
+  },
+  "jupyter-panel-proxy": {
+    "conda_name": "jupyter-panel-proxy",
+    "import_name": "panel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-panel-proxy"
+  },
+  "jupyter-paperboy": {
+    "conda_name": "jupyter_paperboy",
+    "import_name": "paperboy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-paperboy"
+  },
+  "jupyter-pluto-proxy": {
+    "conda_name": "jupyter-pluto-proxy",
+    "import_name": "jupyter_pluto_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-pluto-proxy"
+  },
+  "jupyter-project": {
+    "conda_name": "jupyter-project",
+    "import_name": "jupyter_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-project"
+  },
+  "jupyter-qtconsole-colorschemes": {
+    "conda_name": "jupyter_qtconsole_colorschemes",
+    "import_name": "jupyter_qtconsole_colorschemes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-qtconsole-colorschemes"
+  },
+  "jupyter-releaser": {
+    "conda_name": "jupyter-releaser",
+    "import_name": "jupyter_releaser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-releaser"
+  },
+  "jupyter-repo2docker": {
+    "conda_name": "jupyter-repo2docker",
+    "import_name": "repo2docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-repo2docker"
+  },
+  "jupyter-resource-usage": {
+    "conda_name": "jupyter-resource-usage",
+    "import_name": "jupyter_resource_usage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-resource-usage"
+  },
+  "jupyter-resource-usage-proxy": {
+    "conda_name": "jupyter_resource_usage_proxy",
+    "import_name": "jupyter_resource_usage_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-resource-usage-proxy"
+  },
+  "jupyter-rfb": {
+    "conda_name": "jupyter-rfb",
+    "import_name": "jupyter_rfb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-rfb"
+  },
+  "jupyter-rospkg": {
+    "conda_name": "jupyter-rospkg",
+    "import_name": "jupyter_rospkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-rospkg"
+  },
+  "jupyter-rsession-proxy": {
+    "conda_name": "jupyter-rsession-proxy",
+    "import_name": "jupyter_rsession_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-rsession-proxy"
+  },
+  "jupyter-ruff": {
+    "conda_name": "jupyter-ruff",
+    "import_name": "jupyter_ruff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-ruff"
+  },
+  "jupyter-secrets-manager": {
+    "conda_name": "jupyter-secrets-manager",
+    "import_name": "jupyter_secrets_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-secrets-manager"
+  },
+  "jupyter-server-fileid": {
+    "conda_name": "jupyter_server_fileid",
+    "import_name": "jupyter_server_fileid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-server-fileid"
+  },
+  "jupyter-server-mathjax": {
+    "conda_name": "jupyter-server-mathjax",
+    "import_name": "jupyter_server_mathjax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-server-mathjax"
+  },
+  "jupyter-server-terminals-proxy": {
+    "conda_name": "jupyter_server_terminals_proxy",
+    "import_name": "jupyter_server_terminals_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-server-terminals-proxy"
+  },
+  "jupyter-server-xarray-leaflet": {
+    "conda_name": "jupyter_server_xarray_leaflet",
+    "import_name": "jupyter_server_xarray_leaflet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-server-xarray-leaflet"
+  },
+  "jupyter-sshd-proxy": {
+    "conda_name": "jupyter-sshd-proxy",
+    "import_name": "jupyter_sshd_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-sshd-proxy"
+  },
+  "jupyter-starters": {
+    "conda_name": "jupyter-starters",
+    "import_name": "jupyter_starters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-starters"
+  },
+  "jupyter-syncthing-proxy": {
+    "conda_name": "jupyter-syncthing-proxy",
+    "import_name": "jupyter_syncthing_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-syncthing-proxy"
+  },
+  "jupyter-telemetry": {
+    "conda_name": "jupyter_telemetry",
+    "import_name": "jupyter_telemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-telemetry"
+  },
+  "jupyter-templates": {
+    "conda_name": "jupyter-templates",
+    "import_name": "jupyter_templates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-templates"
+  },
+  "jupyter-themer": {
+    "conda_name": "jupyter-themer",
+    "import_name": "jupythemer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-themer"
+  },
+  "jupyter-to-medium": {
+    "conda_name": "jupyter_to_medium",
+    "import_name": "jupyter_to_medium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-to-medium"
+  },
+  "jupyter-ui-poll": {
+    "conda_name": "jupyter-ui-poll",
+    "import_name": "jupyter_ui_poll",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-ui-poll"
+  },
+  "jupyter-videochat": {
+    "conda_name": "jupyter-videochat",
+    "import_name": "jupyter_videochat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyter-videochat"
+  },
+  "jupyterbook-latex": {
+    "conda_name": "jupyterbook-latex",
+    "import_name": "jupyterbook_latex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterbook-latex"
+  },
+  "jupytercad-freecad": {
+    "conda_name": "jupytercad-freecad",
+    "import_name": "jupytercad_freecad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupytercad-freecad"
+  },
+  "jupytercad-salome": {
+    "conda_name": "jupytercad-salome",
+    "import_name": "jupytercad_salome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupytercad-salome"
+  },
+  "jupyterclearcheck": {
+    "conda_name": "jupyterclearcheck",
+    "import_name": "jupyterclearcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterclearcheck"
+  },
+  "jupyterhub-kubespawner": {
+    "conda_name": "jupyterhub-kubespawner",
+    "import_name": "kubespawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterhub-kubespawner"
+  },
+  "jupyterhub-ldapauthenticator": {
+    "conda_name": "jupyterhub-ldapauthenticator",
+    "import_name": "ldapauthenticator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterhub-ldapauthenticator"
+  },
+  "jupyterhub-systemdspawner": {
+    "conda_name": "jupyterhub-systemdspawner",
+    "import_name": "systemdspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterhub-systemdspawner"
+  },
+  "jupyterhub-terraformspawner": {
+    "conda_name": "jupyterhub-terraformspawner",
+    "import_name": "terraformspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterhub-terraformspawner"
+  },
+  "jupyterhub-yarnspawner": {
+    "conda_name": "jupyterhub-yarnspawner",
+    "import_name": "yarnspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterhub-yarnspawner"
+  },
+  "jupyterlab": {
+    "conda_name": "jupyterlab",
+    "import_name": "jupyterlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab"
+  },
+  "jupyterlab-ai-commands": {
+    "conda_name": "jupyterlab-ai-commands",
+    "import_name": "jupyterlab_ai_commands",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-ai-commands"
+  },
+  "jupyterlab-autoversion": {
+    "conda_name": "jupyterlab_autoversion",
+    "import_name": "jupyterlab_autoversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-autoversion"
+  },
+  "jupyterlab-blockly": {
+    "conda_name": "jupyterlab-blockly",
+    "import_name": "jupyterlab_blockly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-blockly"
+  },
+  "jupyterlab-code-formatter": {
+    "conda_name": "jupyterlab_code_formatter",
+    "import_name": "jupyterlab_code_formatter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-code-formatter"
+  },
+  "jupyterlab-commands": {
+    "conda_name": "jupyterlab_commands",
+    "import_name": "jupyterlab_commands",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-commands"
+  },
+  "jupyterlab-daw": {
+    "conda_name": "jupyterlab-daw",
+    "import_name": "jupyterlab_daw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-daw"
+  },
+  "jupyterlab-deck": {
+    "conda_name": "jupyterlab-deck",
+    "import_name": "jupyterlab_deck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-deck"
+  },
+  "jupyterlab-downloadfolder": {
+    "conda_name": "jupyterlab_downloadfolder",
+    "import_name": "jupyterlab_downloadfolder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-downloadfolder"
+  },
+  "jupyterlab-email": {
+    "conda_name": "jupyterlab_email",
+    "import_name": "jupyterlab_email",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-email"
+  },
+  "jupyterlab-execute-time": {
+    "conda_name": "jupyterlab_execute_time",
+    "import_name": "jupyterlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-execute-time"
+  },
+  "jupyterlab-flake8": {
+    "conda_name": "jupyterlab-flake8",
+    "import_name": "jupyterlab_flake8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-flake8"
+  },
+  "jupyterlab-fonts": {
+    "conda_name": "jupyterlab-fonts",
+    "import_name": "jupyterlab_fonts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-fonts"
+  },
+  "jupyterlab-gather": {
+    "conda_name": "jupyterlab-gather",
+    "import_name": "jupyterlab_gather",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-gather"
+  },
+  "jupyterlab-genv": {
+    "conda_name": "jupyterlab_genv",
+    "import_name": "jupyterlab_genv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-genv"
+  },
+  "jupyterlab-gist-it": {
+    "conda_name": "jupyterlab-gist-it",
+    "import_name": "jupyterlab_gist_it",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-gist-it"
+  },
+  "jupyterlab-github": {
+    "conda_name": "jupyterlab-github",
+    "import_name": "jupyterlab_github",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-github"
+  },
+  "jupyterlab-gt-coar-theme": {
+    "conda_name": "jupyterlab-gt-coar-theme",
+    "import_name": "jupyterlab_gt_coar_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-gt-coar-theme"
+  },
+  "jupyterlab-h5web": {
+    "conda_name": "jupyterlab-h5web",
+    "import_name": "jupyterlab_h5web",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-h5web"
+  },
+  "jupyterlab-iframe": {
+    "conda_name": "jupyterlab_iframe",
+    "import_name": "jupyterlab_iframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-iframe"
+  },
+  "jupyterlab-js": {
+    "conda_name": "jupyterlab-js",
+    "import_name": "jupyterlab_js",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-js"
+  },
+  "jupyterlab-kernelspy": {
+    "conda_name": "jupyterlab-kernelspy",
+    "import_name": "jupyterlab_kernelspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-kernelspy"
+  },
+  "jupyterlab-launcher": {
+    "conda_name": "jupyterlab_launcher",
+    "import_name": "jupyterlab_launcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-launcher"
+  },
+  "jupyterlab-lego-boost": {
+    "conda_name": "jupyterlab-lego-boost",
+    "import_name": "jupyterlab_lego_boost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-lego-boost"
+  },
+  "jupyterlab-link-share": {
+    "conda_name": "jupyterlab-link-share",
+    "import_name": "jupyterlab_link_share",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-link-share"
+  },
+  "jupyterlab-markup": {
+    "conda_name": "jupyterlab-markup",
+    "import_name": "jupyterlab_markup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-markup"
+  },
+  "jupyterlab-mosaic": {
+    "conda_name": "jupyterlab-mosaic",
+    "import_name": "jupyterlab_mosaic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-mosaic"
+  },
+  "jupyterlab-nbconvert-nocode": {
+    "conda_name": "jupyterlab_nbconvert_nocode",
+    "import_name": "jupyterlab_nbconvert_nocode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-nbconvert-nocode"
+  },
+  "jupyterlab-niryo-one": {
+    "conda_name": "jupyterlab-niryo-one",
+    "import_name": "jupyterlab_niryo_one",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-niryo-one"
+  },
+  "jupyterlab-omnisci": {
+    "conda_name": "omnisci-pytools",
+    "import_name": "jupyterlab_omnisci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-omnisci"
+  },
+  "jupyterlab-pioneer": {
+    "conda_name": "jupyterlab-pioneer",
+    "import_name": "jupyterlab_pioneer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-pioneer"
+  },
+  "jupyterlab-powerpoint": {
+    "conda_name": "jupyterlab_powerpoint",
+    "import_name": "jupyterlab_powerpoint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-powerpoint"
+  },
+  "jupyterlab-pullrequests": {
+    "conda_name": "jupyterlab-pullrequests",
+    "import_name": "jupyterlab_pullrequests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-pullrequests"
+  },
+  "jupyterlab-pygments": {
+    "conda_name": "jupyterlab_pygments",
+    "import_name": "jupyterlab_pygments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-pygments"
+  },
+  "jupyterlab-quickopen": {
+    "conda_name": "jupyterlab-quickopen",
+    "import_name": "jupyterlab_quickopen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-quickopen"
+  },
+  "jupyterlab-rise": {
+    "conda_name": "jupyterlab_rise",
+    "import_name": "jupyterlab_rise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-rise"
+  },
+  "jupyterlab-s3-browser": {
+    "conda_name": "jupyterlab-s3-browser",
+    "import_name": "jupyterlab_s3_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-s3-browser"
+  },
+  "jupyterlab-search-replace": {
+    "conda_name": "jupyterlab-search-replace",
+    "import_name": "jupyterlab_search_replace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-search-replace"
+  },
+  "jupyterlab-solarized-light-theme": {
+    "conda_name": "jupyterlab-solarized-light-theme",
+    "import_name": "jupyterlab_solarized_light_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-solarized-light-theme"
+  },
+  "jupyterlab-spellchecker": {
+    "conda_name": "jupyterlab-spellchecker",
+    "import_name": "jupyterlab_spellchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-spellchecker"
+  },
+  "jupyterlab-spreadsheet-editor": {
+    "conda_name": "jupyterlab-spreadsheet-editor",
+    "import_name": "jupyterlab_spreadsheet_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-spreadsheet-editor"
+  },
+  "jupyterlab-stickyland": {
+    "conda_name": "jupyterlab-stickyland",
+    "import_name": "jupyterlab_stickyland",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-stickyland"
+  },
+  "jupyterlab-templates": {
+    "conda_name": "jupyterlab_templates",
+    "import_name": "jupyterlab_templates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-templates"
+  },
+  "jupyterlab-translate": {
+    "conda_name": "jupyterlab-translate",
+    "import_name": "jupyterlab_translate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-translate"
+  },
+  "jupyterlab-vim": {
+    "conda_name": "jupyterlab_vim",
+    "import_name": "jupyterlab_vim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-vim"
+  },
+  "jupyterlab-vpython": {
+    "conda_name": "jupyterlab-vpython",
+    "import_name": "jupyterlab_vpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-vpython"
+  },
+  "jupyterlab-webrtc-docprovider": {
+    "conda_name": "jupyterlab-webrtc-docprovider",
+    "import_name": "jupyterlab_webrtc_docprovider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-webrtc-docprovider"
+  },
+  "jupyterlab-wipp": {
+    "conda_name": "jupyterlab-wipp",
+    "import_name": "jupyterlab_wipp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlab-wipp"
+  },
+  "jupyterlite-ai": {
+    "conda_name": "jupyterlite-ai",
+    "import_name": "jupyterlite_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlite-ai"
+  },
+  "jupyterlite-javascript-kernel": {
+    "conda_name": "jupyterlite-javascript-kernel",
+    "import_name": "jupyterlite_javascript_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlite-javascript-kernel"
+  },
+  "jupyterlite-terminal": {
+    "conda_name": "jupyterlite-terminal",
+    "import_name": "jupyterlite_terminal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlite-terminal"
+  },
+  "jupyterlite-xeus": {
+    "conda_name": "jupyterlite-xeus",
+    "import_name": "jupyterlite_xeus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlite-xeus"
+  },
+  "jupyterlite-xeus-python": {
+    "conda_name": "jupyterlite-xeus-python",
+    "import_name": "jupyterlite_xeus_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterlite-xeus-python"
+  },
+  "jupyternotify": {
+    "conda_name": "jupyternotify",
+    "import_name": "jupyternotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyternotify"
+  },
+  "jupyterpack": {
+    "conda_name": "jupyterpack",
+    "import_name": "jupyterpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterpack"
+  },
+  "jupyterthemes": {
+    "conda_name": "jupyterthemes",
+    "import_name": "jupyterthemes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterthemes"
+  },
+  "jupyterview": {
+    "conda_name": "jupyterview",
+    "import_name": "jupyterview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyterview"
+  },
+  "jupyverse": {
+    "conda_name": "jupyverse",
+    "import_name": "jupyverse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jupyverse"
+  },
+  "justpy": {
+    "conda_name": "justpy",
+    "import_name": "justpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "justpy"
+  },
+  "jut": {
+    "conda_name": "jut",
+    "import_name": "jut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jut"
+  },
+  "jwcrypto": {
+    "conda_name": "jwcrypto",
+    "import_name": "jwcrypto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jwcrypto"
+  },
+  "jwskate": {
+    "conda_name": "jwskate",
+    "import_name": "jwskate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jwskate"
+  },
+  "jyg": {
+    "conda_name": "jyg",
+    "import_name": "jyg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "jyg"
+  },
+  "k-diagram": {
+    "conda_name": "k-diagram",
+    "import_name": "kdiagram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "k-diagram"
+  },
+  "k3d": {
+    "conda_name": "k3d",
+    "import_name": "k3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "k3d"
+  },
+  "kafka-python-ng": {
+    "conda_name": "kafka-python-ng",
+    "import_name": "kafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kafka-python-ng"
+  },
+  "kafkit": {
+    "conda_name": "kafkit",
+    "import_name": "kafkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kafkit"
+  },
+  "kaggle-environments": {
+    "conda_name": "kaggle-environments",
+    "import_name": "kaggle_environments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kaggle-environments"
+  },
+  "kaitaistruct": {
+    "conda_name": "kaitaistruct",
+    "import_name": "kaitaistruct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kaitaistruct"
+  },
+  "kaldi-io": {
+    "conda_name": "kaldi_io",
+    "import_name": "kaldi_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kaldi-io"
+  },
+  "kalendar": {
+    "conda_name": "kalendar",
+    "import_name": "kalendar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kalendar"
+  },
+  "kalepy": {
+    "conda_name": "kalepy",
+    "import_name": "kalepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kalepy"
+  },
+  "kalmangrad": {
+    "conda_name": "kalmangrad",
+    "import_name": "kalmangrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kalmangrad"
+  },
+  "kalpy-kaldi": {
+    "conda_name": "kalpy",
+    "import_name": "kalpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kalpy-kaldi"
+  },
+  "kanaries-track": {
+    "conda_name": "kanaries-track",
+    "import_name": "kanaries_track",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kanaries-track"
+  },
+  "kanga": {
+    "conda_name": "kanga",
+    "import_name": "kanga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kanga"
+  },
+  "kantoku": {
+    "conda_name": "kantoku",
+    "import_name": "circus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kantoku"
+  },
+  "kapteyn": {
+    "conda_name": "kapteyn",
+    "import_name": "kapteyn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kapteyn"
+  },
+  "karateclub": {
+    "conda_name": "karateclub",
+    "import_name": "karateclub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "karateclub"
+  },
+  "karawun": {
+    "conda_name": "karawun",
+    "import_name": "karawun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "karawun"
+  },
+  "karney": {
+    "conda_name": "karney",
+    "import_name": "karney",
+    "mapping_source": "regro-bot",
+    "pypi_name": "karney"
+  },
+  "kartothek": {
+    "conda_name": "kartothek",
+    "import_name": "kartothek",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kartothek"
+  },
+  "kastore": {
+    "conda_name": "kastore",
+    "import_name": "kastore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kastore"
+  },
+  "kats": {
+    "conda_name": "kats",
+    "import_name": "kats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kats"
+  },
+  "kazoo": {
+    "conda_name": "kazoo",
+    "import_name": "kazoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kazoo"
+  },
+  "kazu": {
+    "conda_name": "kazu",
+    "import_name": "kazu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kazu"
+  },
+  "kbatch": {
+    "conda_name": "kbatch",
+    "import_name": "kbatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kbatch"
+  },
+  "kdtree": {
+    "conda_name": "kdtree",
+    "import_name": "kdtree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kdtree"
+  },
+  "kedro-aim": {
+    "conda_name": "kedro-aim",
+    "import_name": "kedro_aim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-aim"
+  },
+  "kedro-airflow": {
+    "conda_name": "kedro-airflow",
+    "import_name": "kedro_airflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-airflow"
+  },
+  "kedro-light": {
+    "conda_name": "kedro-light",
+    "import_name": "kedro_light",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-light"
+  },
+  "kedro-mlflow": {
+    "conda_name": "kedro-mlflow",
+    "import_name": "kedro_mlflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-mlflow"
+  },
+  "kedro-pandera": {
+    "conda_name": "kedro-pandera",
+    "import_name": "kedro_pandera",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-pandera"
+  },
+  "kedro-telemetry": {
+    "conda_name": "kedro-telemetry",
+    "import_name": "kedro_telemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-telemetry"
+  },
+  "kedro-vertexai": {
+    "conda_name": "kedro-vertexai",
+    "import_name": "kedro_vertexai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kedro-vertexai"
+  },
+  "kelp-o-matic": {
+    "conda_name": "kelp-o-matic",
+    "import_name": "kelp_o_matic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kelp-o-matic"
+  },
+  "kenjutsu": {
+    "conda_name": "kenjutsu",
+    "import_name": "kenjutsu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kenjutsu"
+  },
+  "kennard-stone": {
+    "conda_name": "kennard-stone",
+    "import_name": "kennard_stone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kennard-stone"
+  },
+  "kepderiv": {
+    "conda_name": "kepderiv",
+    "import_name": "kepderiv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kepderiv"
+  },
+  "keplergl": {
+    "conda_name": "keplergl",
+    "import_name": "keplergl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keplergl"
+  },
+  "kepmodel": {
+    "conda_name": "kepmodel",
+    "import_name": "kepmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kepmodel"
+  },
+  "keras": {
+    "conda_name": "keras",
+    "import_name": "tensorflow.keras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras"
+  },
+  "keras-core": {
+    "conda_name": "keras-core",
+    "import_name": "keras_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-core"
+  },
+  "keras-metrics": {
+    "conda_name": "keras-metrics",
+    "import_name": "keras_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-metrics"
+  },
+  "keras-mixed-sequence": {
+    "conda_name": "keras_mixed_sequence",
+    "import_name": "keras_mixed_sequence",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-mixed-sequence"
+  },
+  "keras-preprocessing": {
+    "conda_name": "keras-preprocessing",
+    "import_name": "keras_preprocessing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-preprocessing"
+  },
+  "keras-resnet": {
+    "conda_name": "keras-resnet",
+    "import_name": "keras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-resnet"
+  },
+  "keras-spiking": {
+    "conda_name": "keras-spiking",
+    "import_name": "keras_spiking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-spiking"
+  },
+  "keras-tuner": {
+    "conda_name": "keras-tuner",
+    "import_name": "keras_tuner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-tuner"
+  },
+  "keras-unet": {
+    "conda_name": "keras-unet",
+    "import_name": "keras_unet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keras-unet"
+  },
+  "kerberos": {
+    "conda_name": "python-kerberos",
+    "import_name": "kerberos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kerberos"
+  },
+  "kerchunk": {
+    "conda_name": "kerchunk",
+    "import_name": "kerchunk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kerchunk"
+  },
+  "kernda": {
+    "conda_name": "kernda",
+    "import_name": "kernda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kernda"
+  },
+  "kernel-driver": {
+    "conda_name": "kernel_driver",
+    "import_name": "kernel_driver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kernel-driver"
+  },
+  "kerrgeopy": {
+    "conda_name": "kerrgeopy",
+    "import_name": "kerrgeopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kerrgeopy"
+  },
+  "keybert": {
+    "conda_name": "keybert",
+    "import_name": "keybert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keybert"
+  },
+  "keyboard": {
+    "conda_name": "keyboard",
+    "import_name": "keyboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyboard"
+  },
+  "keyring": {
+    "conda_name": "keyring",
+    "import_name": "keyring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyring"
+  },
+  "keyring-pass": {
+    "conda_name": "keyring-pass",
+    "import_name": "keyring_pass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyring-pass"
+  },
+  "keyrings-alt": {
+    "conda_name": "keyrings.alt",
+    "import_name": "keyrings.alt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyrings-alt"
+  },
+  "keyrings-artifacts": {
+    "conda_name": "keyrings.artifacts",
+    "import_name": "keyrings_artifacts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyrings-artifacts"
+  },
+  "keyrings-codeartifact": {
+    "conda_name": "keyrings.codeartifact",
+    "import_name": "keyrings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keyrings-codeartifact"
+  },
+  "keystoneauth1": {
+    "conda_name": "keystoneauth1",
+    "import_name": "keystoneauth1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "keystoneauth1"
+  },
+  "kfac-jax": {
+    "conda_name": "kfac-jax",
+    "import_name": "kfac_jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfac-jax"
+  },
+  "kfp": {
+    "conda_name": "kfp",
+    "import_name": "kfp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfp"
+  },
+  "kfp-notebook": {
+    "conda_name": "kfp-notebook",
+    "import_name": "kfp_notebook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfp-notebook"
+  },
+  "kfp-server-api": {
+    "conda_name": "kfp-server-api",
+    "import_name": "kfp_server_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfp-server-api"
+  },
+  "kfp-tekton": {
+    "conda_name": "kfp-tekton",
+    "import_name": "kfp_tekton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfp-tekton"
+  },
+  "kfp-tekton-server-api": {
+    "conda_name": "kfp-tekton-server-api",
+    "import_name": "kfp_tekton_server_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kfp-tekton-server-api"
+  },
+  "kgen": {
+    "conda_name": "kgen",
+    "import_name": "kgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kgen"
+  },
+  "kim-convergence": {
+    "conda_name": "kim-convergence",
+    "import_name": "kim_convergence",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kim-convergence"
+  },
+  "kim-edn": {
+    "conda_name": "kim-edn",
+    "import_name": "kim_edn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kim-edn"
+  },
+  "kim-property": {
+    "conda_name": "kim-property",
+    "import_name": "kim_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kim-property"
+  },
+  "kim-query": {
+    "conda_name": "kim-query",
+    "import_name": "kim_query",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kim-query"
+  },
+  "kimpy": {
+    "conda_name": "kimpy",
+    "import_name": "kimpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kimpy"
+  },
+  "kinbot": {
+    "conda_name": "kinbot",
+    "import_name": "kinbot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kinbot"
+  },
+  "kineticstoolkit": {
+    "conda_name": "kineticstoolkit",
+    "import_name": "kineticstoolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kineticstoolkit"
+  },
+  "kineticstoolkit-extensions": {
+    "conda_name": "kineticstoolkit_extensions",
+    "import_name": "kineticstoolkit_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kineticstoolkit-extensions"
+  },
+  "kinisi": {
+    "conda_name": "kinisi",
+    "import_name": "kinisi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kinisi"
+  },
+  "kinparse": {
+    "conda_name": "kinparse",
+    "import_name": "kinparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kinparse"
+  },
+  "kiss-headers": {
+    "conda_name": "kiss-headers",
+    "import_name": "kiss_headers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kiss-headers"
+  },
+  "kissbt": {
+    "conda_name": "kissbt",
+    "import_name": "kissbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kissbt"
+  },
+  "kit4dl": {
+    "conda_name": "kit4dl",
+    "import_name": "kit4dl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kit4dl"
+  },
+  "kitchen": {
+    "conda_name": "kitchen",
+    "import_name": "kitchen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kitchen"
+  },
+  "kivymd": {
+    "conda_name": "kivymd",
+    "import_name": "kivymd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kivymd"
+  },
+  "kiwipy": {
+    "conda_name": "kiwipy",
+    "import_name": "kiwipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kiwipy"
+  },
+  "kkcalc": {
+    "conda_name": "kkcalc",
+    "import_name": "kkcalc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kkcalc"
+  },
+  "klaus": {
+    "conda_name": "klaus",
+    "import_name": "klaus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "klaus"
+  },
+  "klib": {
+    "conda_name": "klib",
+    "import_name": "klib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "klib"
+  },
+  "kliff": {
+    "conda_name": "kliff",
+    "import_name": "kliff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kliff"
+  },
+  "km3db": {
+    "conda_name": "km3db",
+    "import_name": "km3db",
+    "mapping_source": "regro-bot",
+    "pypi_name": "km3db"
+  },
+  "km3io": {
+    "conda_name": "km3io",
+    "import_name": "km3io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "km3io"
+  },
+  "kml2geojson": {
+    "conda_name": "kml2geojson",
+    "import_name": "kml2geojson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kml2geojson"
+  },
+  "kmodes": {
+    "conda_name": "kmodes",
+    "import_name": "kmodes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kmodes"
+  },
+  "knack": {
+    "conda_name": "knack",
+    "import_name": "knack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knack"
+  },
+  "knapsack": {
+    "conda_name": "knapsack",
+    "import_name": "knapsack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knapsack"
+  },
+  "kneebow": {
+    "conda_name": "kneebow",
+    "import_name": "kneebow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kneebow"
+  },
+  "kneed": {
+    "conda_name": "kneed",
+    "import_name": "kneed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kneed"
+  },
+  "knit": {
+    "conda_name": "knit",
+    "import_name": "knit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knit"
+  },
+  "knitty": {
+    "conda_name": "knitty",
+    "import_name": "knitty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knitty"
+  },
+  "knnimpute": {
+    "conda_name": "knnimpute",
+    "import_name": "knnimpute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knnimpute"
+  },
+  "knockknock": {
+    "conda_name": "knockknock",
+    "import_name": "knockknock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "knockknock"
+  },
+  "koalas": {
+    "conda_name": "koalas",
+    "import_name": "databricks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "koalas"
+  },
+  "koda": {
+    "conda_name": "koda",
+    "import_name": "koda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "koda"
+  },
+  "kombine": {
+    "conda_name": "kombine",
+    "import_name": "kombine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kombine"
+  },
+  "kombu": {
+    "conda_name": "kombu",
+    "import_name": "kombu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kombu"
+  },
+  "komplot": {
+    "conda_name": "komplot",
+    "import_name": "komplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "komplot"
+  },
+  "koncept": {
+    "conda_name": "koncept",
+    "import_name": "koncept",
+    "mapping_source": "regro-bot",
+    "pypi_name": "koncept"
+  },
+  "konoha": {
+    "conda_name": "konoha",
+    "import_name": "konoha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "konoha"
+  },
+  "koolstof": {
+    "conda_name": "koolstof",
+    "import_name": "koolstof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "koolstof"
+  },
+  "koopa-viz": {
+    "conda_name": "koopa-viz",
+    "import_name": "koopa_viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "koopa-viz"
+  },
+  "kopf": {
+    "conda_name": "kopf",
+    "import_name": "kopf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kopf"
+  },
+  "kornia": {
+    "conda_name": "kornia",
+    "import_name": "kornia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kornia"
+  },
+  "kotsu": {
+    "conda_name": "kotsu",
+    "import_name": "kotsu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kotsu"
+  },
+  "kr8s": {
+    "conda_name": "kr8s",
+    "import_name": "kr8s",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kr8s"
+  },
+  "kraken": {
+    "conda_name": "kraken-ocr",
+    "import_name": "kraken",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kraken"
+  },
+  "krb5": {
+    "conda_name": "pykrb5",
+    "import_name": "krb5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "krb5"
+  },
+  "krbcontext": {
+    "conda_name": "krbcontext",
+    "import_name": "krbcontext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "krbcontext"
+  },
+  "ksfeatureselector": {
+    "conda_name": "ksfeatureselector",
+    "import_name": "ksfeatureselector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ksfeatureselector"
+  },
+  "kstar": {
+    "conda_name": "kstar",
+    "import_name": "kstar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kstar"
+  },
+  "kt-legacy": {
+    "conda_name": "kt-legacy",
+    "import_name": "kerastuner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kt-legacy"
+  },
+  "kthread": {
+    "conda_name": "kthread",
+    "import_name": "kthread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kthread"
+  },
+  "kubeflow-katib": {
+    "conda_name": "kubeflow-katib",
+    "import_name": "kubeflow.katib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kubeflow-katib"
+  },
+  "kubeflow-training": {
+    "conda_name": "kubeflow-training",
+    "import_name": "kubeflow.training",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kubeflow-training"
+  },
+  "kubessh": {
+    "conda_name": "kubessh",
+    "import_name": "kubessh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kubessh"
+  },
+  "kulprit": {
+    "conda_name": "kulprit",
+    "import_name": "kulprit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kulprit"
+  },
+  "kurl": {
+    "conda_name": "kurl",
+    "import_name": "kurl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kurl"
+  },
+  "kuti": {
+    "conda_name": "kuti",
+    "import_name": "kuti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kuti"
+  },
+  "kuyruk": {
+    "conda_name": "kuyruk",
+    "import_name": "kuyruk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kuyruk"
+  },
+  "kvf": {
+    "conda_name": "kvf",
+    "import_name": "kvf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kvf"
+  },
+  "kvh": {
+    "conda_name": "kvh",
+    "import_name": "kvh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kvh"
+  },
+  "kwant": {
+    "conda_name": "kwant",
+    "import_name": "kwant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwant"
+  },
+  "kwantspectrum": {
+    "conda_name": "kwantspectrum",
+    "import_name": "kwantspectrum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwantspectrum"
+  },
+  "kwargshelper": {
+    "conda_name": "kwargshelper",
+    "import_name": "kwhelp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwargshelper"
+  },
+  "kwarray": {
+    "conda_name": "kwarray",
+    "import_name": "kwarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwarray"
+  },
+  "kwimage": {
+    "conda_name": "kwimage",
+    "import_name": "kwimage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwimage"
+  },
+  "kwonly-args": {
+    "conda_name": "kwonly-args",
+    "import_name": "kwonly_args",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kwonly-args"
+  },
+  "kylinpy": {
+    "conda_name": "kylinpy",
+    "import_name": "kylinpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "kylinpy"
+  },
+  "l18n": {
+    "conda_name": "l18n",
+    "import_name": "l18n",
+    "mapping_source": "regro-bot",
+    "pypi_name": "l18n"
+  },
+  "la-forge": {
+    "conda_name": "la_forge",
+    "import_name": "la_forge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "la-forge"
+  },
+  "labbench": {
+    "conda_name": "labbench",
+    "import_name": "labbench",
+    "mapping_source": "regro-bot",
+    "pypi_name": "labbench"
+  },
+  "label-creator": {
+    "conda_name": "label-creator",
+    "import_name": "Label_Creator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "label-creator"
+  },
+  "label-maker": {
+    "conda_name": "label-maker",
+    "import_name": "label_maker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "label-maker"
+  },
+  "label-maker-dask": {
+    "conda_name": "label-maker-dask",
+    "import_name": "label_maker_dask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "label-maker-dask"
+  },
+  "labelfusion": {
+    "conda_name": "labelfusion",
+    "import_name": "LabelFusion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "labelfusion"
+  },
+  "labeling": {
+    "conda_name": "labeling",
+    "import_name": "labeling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "labeling"
+  },
+  "labgrid": {
+    "conda_name": "labgrid",
+    "import_name": "labgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "labgrid"
+  },
+  "laces": {
+    "conda_name": "laces",
+    "import_name": "laces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "laces"
+  },
+  "lakepy": {
+    "conda_name": "lakepy",
+    "import_name": "lakepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lakepy"
+  },
+  "lale": {
+    "conda_name": "lale",
+    "import_name": "lale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lale"
+  },
+  "lambdaprompt": {
+    "conda_name": "lambdaprompt",
+    "import_name": "lambdaprompt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lambdaprompt"
+  },
+  "lamin-utils": {
+    "conda_name": "lamin_utils",
+    "import_name": "lamin_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lamin-utils"
+  },
+  "lammps-interface": {
+    "conda_name": "lammps-interface",
+    "import_name": "lammps_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lammps-interface"
+  },
+  "lammpsio": {
+    "conda_name": "lammpsio",
+    "import_name": "lammpsio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lammpsio"
+  },
+  "lance-namespace-urllib3-client": {
+    "conda_name": "lance-namespace-urllib3-client",
+    "import_name": "lance_namespace_urllib3_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lance-namespace-urllib3-client"
+  },
+  "landau": {
+    "conda_name": "landau",
+    "import_name": "landau",
+    "mapping_source": "regro-bot",
+    "pypi_name": "landau"
+  },
+  "langchain-ai21": {
+    "conda_name": "langchain-ai21",
+    "import_name": "langchain_ai21",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-ai21"
+  },
+  "langchain-anthropic": {
+    "conda_name": "langchain-anthropic",
+    "import_name": "langchain_anthropic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-anthropic"
+  },
+  "langchain-aws": {
+    "conda_name": "langchain-aws",
+    "import_name": "langchain_aws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-aws"
+  },
+  "langchain-community": {
+    "conda_name": "langchain-community",
+    "import_name": "langchain_community",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-community"
+  },
+  "langchain-core": {
+    "conda_name": "langchain-core",
+    "import_name": "langchain_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-core"
+  },
+  "langchain-experimental": {
+    "conda_name": "langchain-experimental",
+    "import_name": "langchain_experimental",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-experimental"
+  },
+  "langchain-google-genai": {
+    "conda_name": "langchain-google-genai",
+    "import_name": "langchain_google_genai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-google-genai"
+  },
+  "langchain-groq": {
+    "conda_name": "langchain-groq",
+    "import_name": "langchain_groq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-groq"
+  },
+  "langchain-huggingface": {
+    "conda_name": "langchain-huggingface",
+    "import_name": "langchain_huggingface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-huggingface"
+  },
+  "langchain-nomic": {
+    "conda_name": "langchain-nomic",
+    "import_name": "langchain_nomic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-nomic"
+  },
+  "langchain-openai": {
+    "conda_name": "langchain-openai",
+    "import_name": "langchain_openai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-openai"
+  },
+  "langchain-postgres": {
+    "conda_name": "langchain-postgres",
+    "import_name": "langchain_postgres",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-postgres"
+  },
+  "langchain-tavily": {
+    "conda_name": "langchain-tavily",
+    "import_name": "langchain_tavily",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-tavily"
+  },
+  "langchain-text-splitters": {
+    "conda_name": "langchain-text-splitters",
+    "import_name": "langchain_text_splitters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchain-text-splitters"
+  },
+  "langchainhub": {
+    "conda_name": "langchainhub",
+    "import_name": "langchainhub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langchainhub"
+  },
+  "langdetect": {
+    "conda_name": "langdetect",
+    "import_name": "langdetect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langdetect"
+  },
+  "langextract": {
+    "conda_name": "langextract",
+    "import_name": "langextract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langextract"
+  },
+  "langgraph": {
+    "conda_name": "langgraph",
+    "import_name": "langgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langgraph"
+  },
+  "langgraph-checkpoint-aws": {
+    "conda_name": "langgraph-checkpoint-aws",
+    "import_name": "langgraph_checkpoint_aws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langgraph-checkpoint-aws"
+  },
+  "langsmith": {
+    "conda_name": "langsmith",
+    "import_name": "langsmith",
+    "mapping_source": "regro-bot",
+    "pypi_name": "langsmith"
+  },
+  "lap": {
+    "conda_name": "lap",
+    "import_name": "lap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lap"
+  },
+  "laptrack": {
+    "conda_name": "laptrack",
+    "import_name": "laptrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "laptrack"
+  },
+  "lapy": {
+    "conda_name": "lapy",
+    "import_name": "lapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lapy"
+  },
+  "larch": {
+    "conda_name": "larch",
+    "import_name": "larch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "larch"
+  },
+  "large-image": {
+    "conda_name": "large-image",
+    "import_name": "large_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "large-image"
+  },
+  "large-image-viewer": {
+    "conda_name": "large-image-viewer",
+    "import_name": "large_image_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "large-image-viewer"
+  },
+  "larixite": {
+    "conda_name": "larixite",
+    "import_name": "larixite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "larixite"
+  },
+  "lark": {
+    "conda_name": "lark",
+    "import_name": "lark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lark"
+  },
+  "lark-parser": {
+    "conda_name": "lark-parser",
+    "import_name": "lark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lark-parser"
+  },
+  "lasagne": {
+    "conda_name": "lasagne",
+    "import_name": "lasagne",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lasagne"
+  },
+  "laserbeamsize": {
+    "conda_name": "laserbeamsize",
+    "import_name": "laserbeamsize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "laserbeamsize"
+  },
+  "laserfields": {
+    "conda_name": "laserfields",
+    "import_name": "laserfields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "laserfields"
+  },
+  "lat-lon-parser": {
+    "conda_name": "lat_lon_parser",
+    "import_name": "lat_lon_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lat-lon-parser"
+  },
+  "latch-persistence": {
+    "conda_name": "latch-persistence",
+    "import_name": "latch_persistence",
+    "mapping_source": "regro-bot",
+    "pypi_name": "latch-persistence"
+  },
+  "latex-dependency-scanner": {
+    "conda_name": "latex-dependency-scanner",
+    "import_name": "latex_dependency_scanner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "latex-dependency-scanner"
+  },
+  "latex-rubber": {
+    "conda_name": "latex-rubber",
+    "import_name": "rubber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "latex-rubber"
+  },
+  "latex2mathml": {
+    "conda_name": "latex2mathml",
+    "import_name": "latex2mathml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "latex2mathml"
+  },
+  "latlon23": {
+    "conda_name": "latlon23",
+    "import_name": "LatLon23",
+    "mapping_source": "regro-bot",
+    "pypi_name": "latlon23"
+  },
+  "launchdarkly-server-sdk": {
+    "conda_name": "launchdarkly-server-sdk",
+    "import_name": "ldclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "launchdarkly-server-sdk"
+  },
+  "layer-data-replace": {
+    "conda_name": "layer-data-replace",
+    "import_name": "Layer_Data_Replace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "layer-data-replace"
+  },
+  "lazify": {
+    "conda_name": "lazify",
+    "import_name": "lazify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazify"
+  },
+  "lazy-import": {
+    "conda_name": "lazy_import",
+    "import_name": "lazy_import",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-import"
+  },
+  "lazy-imports": {
+    "conda_name": "lazy-imports",
+    "import_name": "lazy_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-imports"
+  },
+  "lazy-loader": {
+    "conda_name": "lazy-loader",
+    "import_name": "lazy_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-loader"
+  },
+  "lazy-model": {
+    "conda_name": "lazy-model",
+    "import_name": "lazy_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-model"
+  },
+  "lazy-object-proxy": {
+    "conda_name": "lazy-object-proxy",
+    "import_name": "lazy_object_proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-object-proxy"
+  },
+  "lazy-property": {
+    "conda_name": "lazy-property",
+    "import_name": "lazy_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-property"
+  },
+  "lazy-table": {
+    "conda_name": "lazy_table",
+    "import_name": "lazy_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazy-table"
+  },
+  "lazyslide": {
+    "conda_name": "lazyslide",
+    "import_name": "lazyslide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazyslide"
+  },
+  "lazytransform": {
+    "conda_name": "lazytransform",
+    "import_name": "lazytransform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lazytransform"
+  },
+  "lb-nightly-configuration": {
+    "conda_name": "lb-nightly-configuration",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-configuration"
+  },
+  "lb-nightly-db": {
+    "conda_name": "lb-nightly-db",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-db"
+  },
+  "lb-nightly-functions": {
+    "conda_name": "lb-nightly-functions",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-functions"
+  },
+  "lb-nightly-rpc": {
+    "conda_name": "lb-nightly-rpc",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-rpc"
+  },
+  "lb-nightly-scheduler": {
+    "conda_name": "lb-nightly-scheduler",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-scheduler"
+  },
+  "lb-nightly-utils": {
+    "conda_name": "lb-nightly-utils",
+    "import_name": "lb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-nightly-utils"
+  },
+  "lb-telemetry": {
+    "conda_name": "lb-telemetry",
+    "import_name": "lb_telemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lb-telemetry"
+  },
+  "lbadmin": {
+    "conda_name": "lbadmin",
+    "import_name": "LbAdmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbadmin"
+  },
+  "lbcharmdb": {
+    "conda_name": "lbcharmdb",
+    "import_name": "lbcharmdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbcharmdb"
+  },
+  "lbcommon": {
+    "conda_name": "lbcommon",
+    "import_name": "LbCommon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbcommon"
+  },
+  "lbdiracwrappers": {
+    "conda_name": "lbdiracwrappers",
+    "import_name": "LbDiracWrappers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbdiracwrappers"
+  },
+  "lbexec": {
+    "conda_name": "lbexec",
+    "import_name": "LbExec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbexec"
+  },
+  "lbinstall": {
+    "conda_name": "lbinstall",
+    "import_name": "lbinstall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbinstall"
+  },
+  "lbl-repack": {
+    "conda_name": "lbl-repack",
+    "import_name": "repack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbl-repack"
+  },
+  "lbmessaging": {
+    "conda_name": "lbmessaging",
+    "import_name": "lbmessaging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbmessaging"
+  },
+  "lbmpy-walberla": {
+    "conda_name": "lbmpy-walberla",
+    "import_name": "lbmpy_walberla",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbmpy-walberla"
+  },
+  "lbscriptslegacy": {
+    "conda_name": "lbscriptslegacy",
+    "import_name": "LbScriptsLegacy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbscriptslegacy"
+  },
+  "lbsoftconfdb2clients": {
+    "conda_name": "lbsoftconfdb2clients",
+    "import_name": "LbSoftConfDb2Clients",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lbsoftconfdb2clients"
+  },
+  "lcensemble": {
+    "conda_name": "lcensemble",
+    "import_name": "lce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lcensemble"
+  },
+  "lckr-jupyterlab-variableinspector": {
+    "conda_name": "lckr_jupyterlab_variableinspector",
+    "import_name": "lckr_jupyterlab_variableinspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lckr-jupyterlab-variableinspector"
+  },
+  "lcov-cobertura": {
+    "conda_name": "lcov_cobertura",
+    "import_name": "lcov_cobertura.lcov_cobertura",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lcov-cobertura"
+  },
+  "lda": {
+    "conda_name": "lda",
+    "import_name": "lda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lda"
+  },
+  "ldap": {
+    "conda_name": "ldap",
+    "import_name": "ldap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ldap"
+  },
+  "ldap3": {
+    "conda_name": "ldap3",
+    "import_name": "ldap3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ldap3"
+  },
+  "ldaptor": {
+    "conda_name": "ldaptor",
+    "import_name": "ldaptor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ldaptor"
+  },
+  "ldcpy": {
+    "conda_name": "ldcpy",
+    "import_name": "ldcpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ldcpy"
+  },
+  "leafmap": {
+    "conda_name": "leafmap",
+    "import_name": "leafmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "leafmap"
+  },
+  "leafmaptools": {
+    "conda_name": "leafmaptools",
+    "import_name": "leafmaptools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "leafmaptools"
+  },
+  "learn-python-ceg-test": {
+    "conda_name": "learn-python-ceg-test",
+    "import_name": "learn_python_ceg_test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "learn-python-ceg-test"
+  },
+  "legacy-api-wrap": {
+    "conda_name": "legacy-api-wrap",
+    "import_name": "legacy_api_wrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "legacy-api-wrap"
+  },
+  "legendgram": {
+    "conda_name": "legendgram",
+    "import_name": "legendgram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "legendgram"
+  },
+  "legendkit": {
+    "conda_name": "legendkit",
+    "import_name": "legendkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "legendkit"
+  },
+  "legit": {
+    "conda_name": "legit",
+    "import_name": "legit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "legit"
+  },
+  "legofy": {
+    "conda_name": "legofy",
+    "import_name": "legofy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "legofy"
+  },
+  "leidenalg": {
+    "conda_name": "leidenalg",
+    "import_name": "leidenalg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "leidenalg"
+  },
+  "lektor": {
+    "conda_name": "lektor",
+    "import_name": "lektor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lektor"
+  },
+  "lemmagen3": {
+    "conda_name": "lemmagen3",
+    "import_name": "lemmagen3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lemmagen3"
+  },
+  "lemminflect": {
+    "conda_name": "lemminflect",
+    "import_name": "lemminflect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lemminflect"
+  },
+  "lens-vpr": {
+    "conda_name": "lens-vpr",
+    "import_name": "lens",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lens-vpr"
+  },
+  "lenstest": {
+    "conda_name": "lenstest",
+    "import_name": "lenstest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lenstest"
+  },
+  "lenstronomy": {
+    "conda_name": "lenstronomy",
+    "import_name": "lenstronomy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lenstronomy"
+  },
+  "leopards": {
+    "conda_name": "leopards",
+    "import_name": "leopards",
+    "mapping_source": "regro-bot",
+    "pypi_name": "leopards"
+  },
+  "less-learn": {
+    "conda_name": "less-learn",
+    "import_name": "less",
+    "mapping_source": "regro-bot",
+    "pypi_name": "less-learn"
+  },
+  "lesscpy": {
+    "conda_name": "lesscpy",
+    "import_name": "lesscpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lesscpy"
+  },
+  "leveldb": {
+    "conda_name": "python-leveldb",
+    "import_name": "leveldb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "leveldb"
+  },
+  "levenshtein": {
+    "conda_name": "levenshtein",
+    "import_name": "Levenshtein",
+    "mapping_source": "regro-bot",
+    "pypi_name": "levenshtein"
+  },
+  "levenshtein-search": {
+    "conda_name": "levenshtein-search",
+    "import_name": "Levenshtein_search",
+    "mapping_source": "regro-bot",
+    "pypi_name": "levenshtein-search"
+  },
+  "lewis": {
+    "conda_name": "lewis",
+    "import_name": "lewis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lewis"
+  },
+  "lexicalrichness": {
+    "conda_name": "lexicalrichness",
+    "import_name": "lexicalrichness",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lexicalrichness"
+  },
+  "lexid": {
+    "conda_name": "lexid",
+    "import_name": "lexid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lexid"
+  },
+  "lfdfiles": {
+    "conda_name": "lfdfiles",
+    "import_name": "lfdfiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lfdfiles"
+  },
+  "lfpykit": {
+    "conda_name": "lfpykit",
+    "import_name": "lfpykit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lfpykit"
+  },
+  "lhcbstyle": {
+    "conda_name": "lhcbstyle",
+    "import_name": "lhcbstyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lhcbstyle"
+  },
+  "lhorizon": {
+    "conda_name": "lhorizon",
+    "import_name": "lhorizon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lhorizon"
+  },
+  "liac-arff": {
+    "conda_name": "liac-arff",
+    "import_name": "arff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liac-arff"
+  },
+  "lib-detect-testenv": {
+    "conda_name": "lib-detect-testenv",
+    "import_name": "lib_detect_testenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lib-detect-testenv"
+  },
+  "lib3to6": {
+    "conda_name": "lib3to6",
+    "import_name": "lib3to6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lib3to6"
+  },
+  "libaio": {
+    "conda_name": "python-libaio",
+    "import_name": "libaio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libaio"
+  },
+  "libcloudspawner": {
+    "conda_name": "libcloudspawner",
+    "import_name": "libcloudspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libcloudspawner"
+  },
+  "libconeangle": {
+    "conda_name": "libconeangle",
+    "import_name": "libconeangle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libconeangle"
+  },
+  "libdlf": {
+    "conda_name": "libdlf",
+    "import_name": "libdlf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libdlf"
+  },
+  "libdlfind": {
+    "conda_name": "libdlfind",
+    "import_name": "libdlfind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libdlfind"
+  },
+  "libertem": {
+    "conda_name": "libertem",
+    "import_name": "libertem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem"
+  },
+  "libertem-asi-tpx3": {
+    "conda_name": "libertem-asi-tpx3",
+    "import_name": "libertem_asi_tpx3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-asi-tpx3"
+  },
+  "libertem-blobfinder": {
+    "conda_name": "libertem-blobfinder",
+    "import_name": "libertem_blobfinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-blobfinder"
+  },
+  "libertem-dectris": {
+    "conda_name": "libertem-dectris",
+    "import_name": "libertem_dectris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-dectris"
+  },
+  "libertem-holo": {
+    "conda_name": "libertem-holo",
+    "import_name": "libertem_holo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-holo"
+  },
+  "libertem-live": {
+    "conda_name": "libertem-live",
+    "import_name": "libertem_live",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-live"
+  },
+  "libertem-qd-mpx": {
+    "conda_name": "libertem-qd-mpx",
+    "import_name": "libertem_qd_mpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libertem-qd-mpx"
+  },
+  "libhxl": {
+    "conda_name": "libhxl",
+    "import_name": "hxl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libhxl"
+  },
+  "libigl": {
+    "conda_name": "igl",
+    "import_name": "igl",
+    "mapping_source": "static",
+    "pypi_name": "libigl"
+  },
+  "libipld": {
+    "conda_name": "libipld",
+    "import_name": "libipld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libipld"
+  },
+  "libneuroml": {
+    "conda_name": "libneuroml",
+    "import_name": "neuroml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libneuroml"
+  },
+  "libpass": {
+    "conda_name": "libpass",
+    "import_name": "passlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libpass"
+  },
+  "libreyolo": {
+    "conda_name": "libreyolo",
+    "import_name": "libreyolo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libreyolo"
+  },
+  "librosa": {
+    "conda_name": "librosa",
+    "import_name": "librosa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "librosa"
+  },
+  "libsemigroups-pybind11": {
+    "conda_name": "libsemigroups_pybind11",
+    "import_name": "libsemigroups_pybind11",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libsemigroups-pybind11"
+  },
+  "libssr": {
+    "conda_name": "libssr-py",
+    "import_name": "libssr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libssr"
+  },
+  "libstempo": {
+    "conda_name": "libstempo",
+    "import_name": "libstempo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libstempo"
+  },
+  "libsvm": {
+    "conda_name": "libsvm-python",
+    "import_name": "libsvm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libsvm"
+  },
+  "libsvmdata": {
+    "conda_name": "libsvmdata",
+    "import_name": "libsvmdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libsvmdata"
+  },
+  "libusb-package": {
+    "conda_name": "libusb-package",
+    "import_name": "libusb_package",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libusb-package"
+  },
+  "libusb1": {
+    "conda_name": "libusb1",
+    "import_name": "usb1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libusb1"
+  },
+  "libwapiti": {
+    "conda_name": "libwapiti",
+    "import_name": "wapiti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "libwapiti"
+  },
+  "lidar": {
+    "conda_name": "lidar",
+    "import_name": "numpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lidar"
+  },
+  "liecasadi": {
+    "conda_name": "liecasadi",
+    "import_name": "liecasadi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liecasadi"
+  },
+  "lifelib": {
+    "conda_name": "lifelib",
+    "import_name": "lifelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lifelib"
+  },
+  "lifetimes": {
+    "conda_name": "lifetimes",
+    "import_name": "lifetimes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lifetimes"
+  },
+  "liffile": {
+    "conda_name": "liffile",
+    "import_name": "liffile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liffile"
+  },
+  "light-curve": {
+    "conda_name": "light-curve-python",
+    "import_name": "light_curve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "light-curve"
+  },
+  "lightcurvelynx": {
+    "conda_name": "lightcurvelynx",
+    "import_name": "lightcurvelynx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightcurvelynx"
+  },
+  "lightfm": {
+    "conda_name": "lightfm",
+    "import_name": "lightfm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightfm"
+  },
+  "lightgbm-ray": {
+    "conda_name": "lightgbm_ray",
+    "import_name": "lightgbm_ray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightgbm-ray"
+  },
+  "lightkurve": {
+    "conda_name": "lightkurve",
+    "import_name": "lightkurve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightkurve"
+  },
+  "lightly": {
+    "conda_name": "lightly",
+    "import_name": "lightly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightly"
+  },
+  "lightly-train": {
+    "conda_name": "lightly-train",
+    "import_name": "lightly_train",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightly-train"
+  },
+  "lightly-utils": {
+    "conda_name": "lightly-utils",
+    "import_name": "lightly_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightly-utils"
+  },
+  "lightning-bolts": {
+    "conda_name": "lightning-bolts",
+    "import_name": "pl_bolts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightning-bolts"
+  },
+  "lightning-cloud": {
+    "conda_name": "lightning-cloud",
+    "import_name": "lightning_cloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightning-cloud"
+  },
+  "lightning-flash": {
+    "conda_name": "lightning-flash",
+    "import_name": "flash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightning-flash"
+  },
+  "lightning-uq-box": {
+    "conda_name": "lightning-uq-box",
+    "import_name": "lightning_uq_box",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightning-uq-box"
+  },
+  "lightning-utilities": {
+    "conda_name": "lightning-utilities",
+    "import_name": "lightning_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightning-utilities"
+  },
+  "lightwood": {
+    "conda_name": "lightwood",
+    "import_name": "lightwood",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lightwood"
+  },
+  "ligo-asimov": {
+    "conda_name": "ligo-asimov",
+    "import_name": "asimov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ligo-asimov"
+  },
+  "ligo-raven": {
+    "conda_name": "ligo-raven",
+    "import_name": "ligo.raven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ligo-raven"
+  },
+  "ligo-requests": {
+    "conda_name": "ligo-requests",
+    "import_name": "ligo.requests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ligo-requests"
+  },
+  "ligo-scald": {
+    "conda_name": "ligo-scald",
+    "import_name": "ligo.scald",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ligo-scald"
+  },
+  "likeness-vitals": {
+    "conda_name": "likeness_vitals",
+    "import_name": "likeness_vitals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "likeness-vitals"
+  },
+  "liknorm": {
+    "conda_name": "liknorm-py",
+    "import_name": "liknorm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liknorm"
+  },
+  "lilio": {
+    "conda_name": "lilio",
+    "import_name": "lilio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lilio"
+  },
+  "lime": {
+    "conda_name": "lime",
+    "import_name": "lime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lime"
+  },
+  "limitedinteraction": {
+    "conda_name": "limitedinteraction",
+    "import_name": "limitedinteraction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "limitedinteraction"
+  },
+  "limix": {
+    "conda_name": "limix",
+    "import_name": "limix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "limix"
+  },
+  "limix-core": {
+    "conda_name": "limix-core",
+    "import_name": "limix_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "limix-core"
+  },
+  "limix-inference": {
+    "conda_name": "limix-inference",
+    "import_name": "limix_inference",
+    "mapping_source": "regro-bot",
+    "pypi_name": "limix-inference"
+  },
+  "limix-legacy": {
+    "conda_name": "limix-legacy",
+    "import_name": "limix_legacy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "limix-legacy"
+  },
+  "lineapy": {
+    "conda_name": "lineapy",
+    "import_name": "lineapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lineapy"
+  },
+  "linear-inverse-model": {
+    "conda_name": "linear-inverse-model",
+    "import_name": "linear_inverse_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linear-inverse-model"
+  },
+  "linear-operator": {
+    "conda_name": "linear_operator",
+    "import_name": "linear_operator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linear-operator"
+  },
+  "linear-tsv": {
+    "conda_name": "linear-tsv",
+    "import_name": "tsv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linear-tsv"
+  },
+  "linearmodels": {
+    "conda_name": "linearmodels",
+    "import_name": "linearmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linearmodels"
+  },
+  "lineax": {
+    "conda_name": "lineax",
+    "import_name": "lineax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lineax"
+  },
+  "lineedit": {
+    "conda_name": "lineedit",
+    "import_name": "lineedit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lineedit"
+  },
+  "linetools": {
+    "conda_name": "linetools",
+    "import_name": "linetools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linetools"
+  },
+  "lingua-language-detector": {
+    "conda_name": "lingua-language-detector",
+    "import_name": "lingua",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lingua-language-detector"
+  },
+  "link-traits": {
+    "conda_name": "link-traits",
+    "import_name": "link_traits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "link-traits"
+  },
+  "linkchecker": {
+    "conda_name": "linkchecker",
+    "import_name": "linkcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linkchecker"
+  },
+  "linkcheckmd": {
+    "conda_name": "linkcheckmd",
+    "import_name": "linkcheckmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linkcheckmd"
+  },
+  "linkedin-api": {
+    "conda_name": "linkedin-api",
+    "import_name": "linkedin_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linkedin-api"
+  },
+  "linmarg": {
+    "conda_name": "linmarg",
+    "import_name": "linmarg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "linmarg"
+  },
+  "lintquarto": {
+    "conda_name": "lintquarto",
+    "import_name": "lintquarto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lintquarto"
+  },
+  "lintsampler": {
+    "conda_name": "lintsampler",
+    "import_name": "lintsampler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lintsampler"
+  },
+  "lion-pytorch": {
+    "conda_name": "lion-pytorch",
+    "import_name": "lion_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lion-pytorch"
+  },
+  "lipo": {
+    "conda_name": "lipo",
+    "import_name": "lipo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lipo"
+  },
+  "lipyds": {
+    "conda_name": "lipyds",
+    "import_name": "lipyds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lipyds"
+  },
+  "lipyphilic": {
+    "conda_name": "lipyphilic",
+    "import_name": "lipyphilic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lipyphilic"
+  },
+  "liquid-babel": {
+    "conda_name": "liquid-babel",
+    "import_name": "liquid_babel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liquid-babel"
+  },
+  "liquidpy": {
+    "conda_name": "liquidpy",
+    "import_name": "liquid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liquidpy"
+  },
+  "liquipydia": {
+    "conda_name": "liquipydia",
+    "import_name": "liquipydia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "liquipydia"
+  },
+  "lit": {
+    "conda_name": "lit-nlp",
+    "import_name": "lit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lit"
+  },
+  "litecli": {
+    "conda_name": "litecli",
+    "import_name": "litecli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "litecli"
+  },
+  "litedao": {
+    "conda_name": "litedao",
+    "import_name": "litedao",
+    "mapping_source": "regro-bot",
+    "pypi_name": "litedao"
+  },
+  "litellm": {
+    "conda_name": "litellm",
+    "import_name": "litellm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "litellm"
+  },
+  "litemark": {
+    "conda_name": "litemark",
+    "import_name": "litemark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "litemark"
+  },
+  "literalai": {
+    "conda_name": "literalai",
+    "import_name": "literalai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "literalai"
+  },
+  "litereval": {
+    "conda_name": "litereval",
+    "import_name": "litereval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "litereval"
+  },
+  "littlemcmc": {
+    "conda_name": "littlemcmc",
+    "import_name": "littlemcmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "littlemcmc"
+  },
+  "littletable": {
+    "conda_name": "littletable",
+    "import_name": "littletable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "littletable"
+  },
+  "littleutils": {
+    "conda_name": "littleutils",
+    "import_name": "littleutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "littleutils"
+  },
+  "livelike": {
+    "conda_name": "livelike",
+    "import_name": "livelike",
+    "mapping_source": "regro-bot",
+    "pypi_name": "livelike"
+  },
+  "livereload": {
+    "conda_name": "livereload",
+    "import_name": "livereload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "livereload"
+  },
+  "livvkit": {
+    "conda_name": "livvkit",
+    "import_name": "livvkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "livvkit"
+  },
+  "lixtools": {
+    "conda_name": "lixtools",
+    "import_name": "lixtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lixtools"
+  },
+  "llama-index": {
+    "conda_name": "llama-index",
+    "import_name": "llama_index",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-index"
+  },
+  "llama-index-cli": {
+    "conda_name": "llama-index-cli",
+    "import_name": "llama_index.cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-index-cli"
+  },
+  "llama-index-core": {
+    "conda_name": "llama-index-core",
+    "import_name": "llama_index.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-index-core"
+  },
+  "llama-index-indices-managed-llama-cloud": {
+    "conda_name": "llama-index-indices-managed-llama-cloud",
+    "import_name": "llama_index.indices.managed.llama_cloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-index-indices-managed-llama-cloud"
+  },
+  "llama-index-readers-llama-parse": {
+    "conda_name": "llama-index-readers-llama-parse",
+    "import_name": "llama_index.readers.llama_parse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-index-readers-llama-parse"
+  },
+  "llama-parse": {
+    "conda_name": "llama-parse",
+    "import_name": "llama_parse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llama-parse"
+  },
+  "llckbdm": {
+    "conda_name": "llckbdm",
+    "import_name": "llckbdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llckbdm"
+  },
+  "lleaves": {
+    "conda_name": "lleaves",
+    "import_name": "lleaves",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lleaves"
+  },
+  "llguidance": {
+    "conda_name": "llguidance",
+    "import_name": "llguidance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llguidance"
+  },
+  "llist": {
+    "conda_name": "llist",
+    "import_name": "llist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llist"
+  },
+  "llmcompressor": {
+    "conda_name": "llmcompressor",
+    "import_name": "llmcompressor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llmcompressor"
+  },
+  "llmlingua": {
+    "conda_name": "llmlingua",
+    "import_name": "llmlingua",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llmlingua"
+  },
+  "llspy-slm": {
+    "conda_name": "llspy-slm",
+    "import_name": "slmgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "llspy-slm"
+  },
+  "lm-format-enforcer": {
+    "conda_name": "lm-format-enforcer",
+    "import_name": "lmformatenforcer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lm-format-enforcer"
+  },
+  "lmdbm": {
+    "conda_name": "lmdbm",
+    "import_name": "lmdbm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lmdbm"
+  },
+  "lml": {
+    "conda_name": "lml",
+    "import_name": "lml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lml"
+  },
+  "lmoments3": {
+    "conda_name": "lmoments3",
+    "import_name": "lmoments3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lmoments3"
+  },
+  "lmz": {
+    "conda_name": "lmz",
+    "import_name": "lmz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lmz"
+  },
+  "load-atoms": {
+    "conda_name": "load-atoms",
+    "import_name": "load_atoms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "load-atoms"
+  },
+  "loadmydata": {
+    "conda_name": "loadmydata",
+    "import_name": "loadmydata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loadmydata"
+  },
+  "lobsterpy": {
+    "conda_name": "lobsterpy",
+    "import_name": "lobsterpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lobsterpy"
+  },
+  "locache": {
+    "conda_name": "locache",
+    "import_name": "locache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "locache"
+  },
+  "local-attention": {
+    "conda_name": "local-attention",
+    "import_name": "local_attention",
+    "mapping_source": "regro-bot",
+    "pypi_name": "local-attention"
+  },
+  "local-migrator": {
+    "conda_name": "local-migrator",
+    "import_name": "local_migrator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "local-migrator"
+  },
+  "localdeps": {
+    "conda_name": "localdeps",
+    "import_name": "localdeps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "localdeps"
+  },
+  "localstack-client": {
+    "conda_name": "localstack-client",
+    "import_name": "localstack_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "localstack-client"
+  },
+  "localstack-ext": {
+    "conda_name": "localstack-ext",
+    "import_name": "localstack_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "localstack-ext"
+  },
+  "localstack-plugin-loader": {
+    "conda_name": "localstack-plugin-loader",
+    "import_name": "plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "localstack-plugin-loader"
+  },
+  "localtileserver": {
+    "conda_name": "localtileserver",
+    "import_name": "localtileserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "localtileserver"
+  },
+  "locan": {
+    "conda_name": "locan",
+    "import_name": "locan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "locan"
+  },
+  "locate": {
+    "conda_name": "locate",
+    "import_name": "locate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "locate"
+  },
+  "locket": {
+    "conda_name": "locket",
+    "import_name": "locket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "locket"
+  },
+  "lockfile": {
+    "conda_name": "lockfile",
+    "import_name": "lockfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lockfile"
+  },
+  "lockfilesemaphore": {
+    "conda_name": "lockfilesemaphore",
+    "import_name": "LockFileSemaphore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lockfilesemaphore"
+  },
+  "locopy": {
+    "conda_name": "locopy",
+    "import_name": "locopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "locopy"
+  },
+  "lofo-importance": {
+    "conda_name": "lofo-importance",
+    "import_name": "lofo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lofo-importance"
+  },
+  "log-symbols": {
+    "conda_name": "log_symbols",
+    "import_name": "log_symbols",
+    "mapping_source": "regro-bot",
+    "pypi_name": "log-symbols"
+  },
+  "log-to-json": {
+    "conda_name": "log-to-json",
+    "import_name": "log_to_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "log-to-json"
+  },
+  "log2d": {
+    "conda_name": "log2d",
+    "import_name": "log2d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "log2d"
+  },
+  "logbook": {
+    "conda_name": "logbook",
+    "import_name": "logbook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logbook"
+  },
+  "logdir": {
+    "conda_name": "logdir",
+    "import_name": "logdir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logdir"
+  },
+  "logfire": {
+    "conda_name": "logfire",
+    "import_name": "logfire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logfire"
+  },
+  "logfmt": {
+    "conda_name": "logfmt",
+    "import_name": "logfmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logfmt"
+  },
+  "logfury": {
+    "conda_name": "logfury",
+    "import_name": "logfury",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logfury"
+  },
+  "loggertools": {
+    "conda_name": "loggertools",
+    "import_name": "loggertools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loggertools"
+  },
+  "logging-exceptions": {
+    "conda_name": "logging_exceptions",
+    "import_name": "logging_exceptions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logging-exceptions"
+  },
+  "logging-tree": {
+    "conda_name": "logging_tree",
+    "import_name": "logging_tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logging-tree"
+  },
+  "loghub": {
+    "conda_name": "loghub",
+    "import_name": "loghub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loghub"
+  },
+  "logical-unification": {
+    "conda_name": "logical-unification",
+    "import_name": "unification",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logical-unification"
+  },
+  "logilab-common": {
+    "conda_name": "logilab-common",
+    "import_name": "logilab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logilab-common"
+  },
+  "logomaker": {
+    "conda_name": "logomaker",
+    "import_name": "logomaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logomaker"
+  },
+  "logrun": {
+    "conda_name": "logrun",
+    "import_name": "logrun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logrun"
+  },
+  "loguru": {
+    "conda_name": "loguru",
+    "import_name": "loguru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loguru"
+  },
+  "loguru-config": {
+    "conda_name": "loguru-config",
+    "import_name": "loguru_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loguru-config"
+  },
+  "loguru-mypy": {
+    "conda_name": "loguru-mypy",
+    "import_name": "loguru_mypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loguru-mypy"
+  },
+  "logutils": {
+    "conda_name": "logutils",
+    "import_name": "logutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logutils"
+  },
+  "logzero": {
+    "conda_name": "logzero",
+    "import_name": "logzero",
+    "mapping_source": "regro-bot",
+    "pypi_name": "logzero"
+  },
+  "loinchpo": {
+    "conda_name": "loinchpo",
+    "import_name": "loinchpo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loinchpo"
+  },
+  "loki-logger-handler": {
+    "conda_name": "loki-logger-handler",
+    "import_name": "loki_logger_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loki-logger-handler"
+  },
+  "loky": {
+    "conda_name": "loky",
+    "import_name": "loky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loky"
+  },
+  "lolviz": {
+    "conda_name": "lolviz",
+    "import_name": "lolviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lolviz"
+  },
+  "lona": {
+    "conda_name": "lona",
+    "import_name": "lona",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lona"
+  },
+  "lonboard": {
+    "conda_name": "lonboard",
+    "import_name": "lonboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lonboard"
+  },
+  "loompy": {
+    "conda_name": "loompy",
+    "import_name": "loompy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loompy"
+  },
+  "loop-rate-limiters": {
+    "conda_name": "loop-rate-limiters",
+    "import_name": "loop_rate_limiters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loop-rate-limiters"
+  },
+  "loopy": {
+    "conda_name": "loopy",
+    "import_name": "loopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loopy"
+  },
+  "looseversion": {
+    "conda_name": "looseversion",
+    "import_name": "looseversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "looseversion"
+  },
+  "loprop": {
+    "conda_name": "loprop",
+    "import_name": "loprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loprop"
+  },
+  "loralib": {
+    "conda_name": "loralib",
+    "import_name": "loralib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loralib"
+  },
+  "lorem": {
+    "conda_name": "lorem",
+    "import_name": "lorem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lorem"
+  },
+  "loris": {
+    "conda_name": "loris",
+    "import_name": "loris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "loris"
+  },
+  "lotterycn": {
+    "conda_name": "lotterycn",
+    "import_name": "lotterycn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lotterycn"
+  },
+  "louvain": {
+    "conda_name": "louvain",
+    "import_name": "louvain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "louvain"
+  },
+  "lovely-jax": {
+    "conda_name": "lovely-jax",
+    "import_name": "lovely_jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lovely-jax"
+  },
+  "lovely-numpy": {
+    "conda_name": "lovely-numpy",
+    "import_name": "lovely_numpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lovely-numpy"
+  },
+  "lovely-tensors": {
+    "conda_name": "lovely-tensors",
+    "import_name": "lovely_tensors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lovely-tensors"
+  },
+  "lovelyplots": {
+    "conda_name": "lovelyplots",
+    "import_name": "lovelyplots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lovelyplots"
+  },
+  "lowbar": {
+    "conda_name": "lowbar",
+    "import_name": "lowbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lowbar"
+  },
+  "lpsn": {
+    "conda_name": "lpsn",
+    "import_name": "lpsn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lpsn"
+  },
+  "lpsolvers": {
+    "conda_name": "lpsolvers",
+    "import_name": "lpsolvers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lpsolvers"
+  },
+  "lpynn": {
+    "conda_name": "lpynn",
+    "import_name": "lpynn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lpynn"
+  },
+  "lpython-emulation": {
+    "conda_name": "lpython_emulation",
+    "import_name": "lpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lpython-emulation"
+  },
+  "lrcalc": {
+    "conda_name": "python-lrcalc",
+    "import_name": "lrcalc",
+    "mapping_source": "static",
+    "pypi_name": "lrcalc"
+  },
+  "lru-dict": {
+    "conda_name": "lru-dict",
+    "import_name": "lru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lru-dict"
+  },
+  "lsapy": {
+    "conda_name": "lsapy",
+    "import_name": "lsapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsapy"
+  },
+  "lsdb-rubin": {
+    "conda_name": "lsdb-rubin",
+    "import_name": "lsdb_rubin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsdb-rubin"
+  },
+  "lsdtt-xtensor-python": {
+    "conda_name": "lsdtt-xtensor-python",
+    "import_name": "lsdtt_xtensor_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsdtt-xtensor-python"
+  },
+  "lspopt": {
+    "conda_name": "lspopt",
+    "import_name": "lspopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lspopt"
+  },
+  "lsst-dd-rtd-theme": {
+    "conda_name": "lsst-dd-rtd-theme",
+    "import_name": "lsst_dd_rtd_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-dd-rtd-theme"
+  },
+  "lsst-resources": {
+    "conda_name": "lsst-resources",
+    "import_name": "lsst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-resources"
+  },
+  "lsst-rsp": {
+    "conda_name": "lsst-rsp",
+    "import_name": "lsst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-rsp"
+  },
+  "lsst-sphgeom": {
+    "conda_name": "lsst-sphgeom",
+    "import_name": "lsst.sphgeom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-sphgeom"
+  },
+  "lsst-sphinx-bootstrap-theme": {
+    "conda_name": "lsst-sphinx-bootstrap-theme",
+    "import_name": "lsst_sphinx_bootstrap_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-sphinx-bootstrap-theme"
+  },
+  "lsst-utils": {
+    "conda_name": "lsst-utils",
+    "import_name": "lsst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-utils"
+  },
+  "lsst-versions": {
+    "conda_name": "lsst-versions",
+    "import_name": "lsst_versions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsst-versions"
+  },
+  "lsstdesc-diffsky": {
+    "conda_name": "lsstdesc-diffsky",
+    "import_name": "lsstdesc_diffsky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lsstdesc-diffsky"
+  },
+  "lstchain": {
+    "conda_name": "lstchain",
+    "import_name": "lstchain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lstchain"
+  },
+  "lstmcpipe": {
+    "conda_name": "lstmcpipe",
+    "import_name": "lstmcpipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lstmcpipe"
+  },
+  "ltbams": {
+    "conda_name": "ltbams",
+    "import_name": "ams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ltbams"
+  },
+  "lttbc": {
+    "conda_name": "lttbc",
+    "import_name": "lttbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lttbc"
+  },
+  "lttl": {
+    "conda_name": "lttl",
+    "import_name": "LTTL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lttl"
+  },
+  "luddite": {
+    "conda_name": "luddite",
+    "import_name": "luddite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "luddite"
+  },
+  "luhn": {
+    "conda_name": "luhn",
+    "import_name": "luhn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "luhn"
+  },
+  "lume-impact": {
+    "conda_name": "lume-impact",
+    "import_name": "impact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lume-impact"
+  },
+  "lume-model": {
+    "conda_name": "lume-model",
+    "import_name": "lume_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lume-model"
+  },
+  "lumicks-pylake": {
+    "conda_name": "lumicks.pylake",
+    "import_name": "lumicks.pylake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lumicks-pylake"
+  },
+  "luminet": {
+    "conda_name": "luminet",
+    "import_name": "luminet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "luminet"
+  },
+  "lumispy": {
+    "conda_name": "lumispy",
+    "import_name": "lumispy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lumispy"
+  },
+  "lunarcalendar": {
+    "conda_name": "lunarcalendar",
+    "import_name": "lunarcalendar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lunarcalendar"
+  },
+  "lunarcalendar-ext": {
+    "conda_name": "lunarcalendar-ext",
+    "import_name": "lunarcalendar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lunarcalendar-ext"
+  },
+  "lunchable": {
+    "conda_name": "lunchable",
+    "import_name": "lunchable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lunchable"
+  },
+  "lungmask": {
+    "conda_name": "lungmask",
+    "import_name": "lungmask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lungmask"
+  },
+  "lupa": {
+    "conda_name": "lupa",
+    "import_name": "lupa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lupa"
+  },
+  "luts": {
+    "conda_name": "luts",
+    "import_name": "luts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "luts"
+  },
+  "lux": {
+    "conda_name": "lux",
+    "import_name": "lux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lux"
+  },
+  "lux-api": {
+    "conda_name": "lux-api",
+    "import_name": "lux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lux-api"
+  },
+  "lux-widget": {
+    "conda_name": "lux-widget",
+    "import_name": "luxwidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lux-widget"
+  },
+  "lxml": {
+    "conda_name": "lxml",
+    "import_name": "lxml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lxml"
+  },
+  "lxmlh": {
+    "conda_name": "lxmlh",
+    "import_name": "lxmlh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lxmlh"
+  },
+  "lyricsmaster": {
+    "conda_name": "lyricsmaster",
+    "import_name": "lyricsmaster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lyricsmaster"
+  },
+  "lytekit": {
+    "conda_name": "lytekit",
+    "import_name": "flytekit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lytekit"
+  },
+  "lytekitplugins-pods": {
+    "conda_name": "lytekitplugins-pods",
+    "import_name": "flytekitplugins.pod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lytekitplugins-pods"
+  },
+  "lz": {
+    "conda_name": "lz",
+    "import_name": "lz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lz"
+  },
+  "lzstring": {
+    "conda_name": "lzstring",
+    "import_name": "lzstring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "lzstring"
+  },
+  "m2cgen": {
+    "conda_name": "m2cgen",
+    "import_name": "m2cgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "m2cgen"
+  },
+  "m2r": {
+    "conda_name": "m2r",
+    "import_name": "m2r",
+    "mapping_source": "regro-bot",
+    "pypi_name": "m2r"
+  },
+  "m2r2": {
+    "conda_name": "m2r2",
+    "import_name": "m2r2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "m2r2"
+  },
+  "m3gnet": {
+    "conda_name": "m3gnet",
+    "import_name": "m3gnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "m3gnet"
+  },
+  "m3u8": {
+    "conda_name": "m3u8",
+    "import_name": "m3u8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "m3u8"
+  },
+  "mac-alias": {
+    "conda_name": "mac_alias",
+    "import_name": "mac_alias",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mac-alias"
+  },
+  "macfsevents": {
+    "conda_name": "macfsevents",
+    "import_name": "fsevents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "macfsevents"
+  },
+  "machine-learning-py": {
+    "conda_name": "machine-learning-py",
+    "import_name": "mlpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "machine-learning-py"
+  },
+  "macholib": {
+    "conda_name": "macholib",
+    "import_name": "macholib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "macholib"
+  },
+  "machomachomangler": {
+    "conda_name": "machomachomangler",
+    "import_name": "machomachomangler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "machomachomangler"
+  },
+  "macro-kit": {
+    "conda_name": "macro-kit",
+    "import_name": "macrokit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "macro-kit"
+  },
+  "macropy3": {
+    "conda_name": "macropy3",
+    "import_name": "macropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "macropy3"
+  },
+  "madminer": {
+    "conda_name": "madminer",
+    "import_name": "madminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "madminer"
+  },
+  "madoka": {
+    "conda_name": "madoka",
+    "import_name": "madoka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "madoka"
+  },
+  "maesters-nwp": {
+    "conda_name": "maesters-nwp",
+    "import_name": "maesters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maesters-nwp"
+  },
+  "maestral": {
+    "conda_name": "maestral",
+    "import_name": "maestral",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maestral"
+  },
+  "mag2exp": {
+    "conda_name": "mag2exp",
+    "import_name": "mag2exp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mag2exp"
+  },
+  "mage-ai": {
+    "conda_name": "mage-ai",
+    "import_name": "mage_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mage-ai"
+  },
+  "magentropy": {
+    "conda_name": "magentropy",
+    "import_name": "magentropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "magentropy"
+  },
+  "magic-class": {
+    "conda_name": "magic-class",
+    "import_name": "magicclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "magic-class"
+  },
+  "magic-cta-pipe": {
+    "conda_name": "magic-cta-pipe",
+    "import_name": "magicctapipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "magic-cta-pipe"
+  },
+  "magicgui": {
+    "conda_name": "magicgui",
+    "import_name": "magicgui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "magicgui"
+  },
+  "magpylib": {
+    "conda_name": "magpylib",
+    "import_name": "magpylib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "magpylib"
+  },
+  "mahotas": {
+    "conda_name": "mahotas",
+    "import_name": "mahotas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mahotas"
+  },
+  "maicos": {
+    "conda_name": "maicos",
+    "import_name": "maicos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maicos"
+  },
+  "mail-parser": {
+    "conda_name": "mail-parser",
+    "import_name": "mailparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mail-parser"
+  },
+  "mailbits": {
+    "conda_name": "mailbits",
+    "import_name": "mailbits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mailbits"
+  },
+  "mailchecker": {
+    "conda_name": "mailchecker",
+    "import_name": "MailChecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mailchecker"
+  },
+  "mailer": {
+    "conda_name": "mailer",
+    "import_name": "mailer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mailer"
+  },
+  "maite": {
+    "conda_name": "maite",
+    "import_name": "maite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maite"
+  },
+  "make-arq": {
+    "conda_name": "make_arq",
+    "import_name": "make_arq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "make-arq"
+  },
+  "make-it-sync": {
+    "conda_name": "make-it-sync",
+    "import_name": "make_it_sync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "make-it-sync"
+  },
+  "makefun": {
+    "conda_name": "makefun",
+    "import_name": "makefun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "makefun"
+  },
+  "makemake90": {
+    "conda_name": "makemake90",
+    "import_name": "makemake90",
+    "mapping_source": "regro-bot",
+    "pypi_name": "makemake90"
+  },
+  "maketables": {
+    "conda_name": "maketables",
+    "import_name": "maketables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maketables"
+  },
+  "makim": {
+    "conda_name": "makim",
+    "import_name": "makim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "makim"
+  },
+  "maml": {
+    "conda_name": "maml",
+    "import_name": "maml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maml"
+  },
+  "mammos": {
+    "conda_name": "mammos",
+    "import_name": "mammos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos"
+  },
+  "mammos-ai": {
+    "conda_name": "mammos-ai",
+    "import_name": "mammos_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-ai"
+  },
+  "mammos-analysis": {
+    "conda_name": "mammos-analysis",
+    "import_name": "mammos_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-analysis"
+  },
+  "mammos-dft": {
+    "conda_name": "mammos-dft",
+    "import_name": "mammos_dft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-dft"
+  },
+  "mammos-entity": {
+    "conda_name": "mammos-entity",
+    "import_name": "mammos_entity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-entity"
+  },
+  "mammos-mumag": {
+    "conda_name": "mammos-mumag",
+    "import_name": "mammos_mumag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-mumag"
+  },
+  "mammos-parser": {
+    "conda_name": "mammos-parser",
+    "import_name": "mammos_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-parser"
+  },
+  "mammos-spindynamics": {
+    "conda_name": "mammos-spindynamics",
+    "import_name": "mammos_spindynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-spindynamics"
+  },
+  "mammos-units": {
+    "conda_name": "mammos-units",
+    "import_name": "mammos_units",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammos-units"
+  },
+  "mammoth": {
+    "conda_name": "mammoth",
+    "import_name": "mammoth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mammoth"
+  },
+  "mamonca": {
+    "conda_name": "mamonca",
+    "import_name": "mamonca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mamonca"
+  },
+  "mando": {
+    "conda_name": "mando",
+    "import_name": "mando",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mando"
+  },
+  "manhole": {
+    "conda_name": "manhole",
+    "import_name": "manhole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "manhole"
+  },
+  "mantichora": {
+    "conda_name": "mantichora",
+    "import_name": "mantichora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mantichora"
+  },
+  "maoto-agent": {
+    "conda_name": "maoto-agent",
+    "import_name": "maoto_agent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maoto-agent"
+  },
+  "map-binning": {
+    "conda_name": "map-binning",
+    "import_name": "map_binning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "map-binning"
+  },
+  "map-parallel": {
+    "conda_name": "map_parallel",
+    "import_name": "map_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "map-parallel"
+  },
+  "mapbox": {
+    "conda_name": "mapbox",
+    "import_name": "mapbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapbox"
+  },
+  "mapbox-earcut": {
+    "conda_name": "mapbox_earcut",
+    "import_name": "mapbox_earcut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapbox-earcut"
+  },
+  "mapbox-vector-tile": {
+    "conda_name": "mapbox-vector-tile",
+    "import_name": "mapbox_vector_tile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapbox-vector-tile"
+  },
+  "mapcat": {
+    "conda_name": "mapcat",
+    "import_name": "mapcat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapcat"
+  },
+  "mapchete": {
+    "conda_name": "mapchete",
+    "import_name": "mapchete",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapchete"
+  },
+  "mapchete-eo": {
+    "conda_name": "mapchete-eo",
+    "import_name": "mapchete_eo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapchete-eo"
+  },
+  "mapclassify": {
+    "conda_name": "mapclassify",
+    "import_name": "mapclassify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapclassify"
+  },
+  "mapflow": {
+    "conda_name": "mapflow",
+    "import_name": "mapflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapflow"
+  },
+  "mapgenerator": {
+    "conda_name": "mapgenerator",
+    "import_name": "mapgenerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapgenerator"
+  },
+  "mapie": {
+    "conda_name": "mapie",
+    "import_name": "mapie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapie"
+  },
+  "mapkit": {
+    "conda_name": "mapkit",
+    "import_name": "mapkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapkit"
+  },
+  "maplibre": {
+    "conda_name": "maplibre",
+    "import_name": "maplibre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maplibre"
+  },
+  "mappyfile": {
+    "conda_name": "mappyfile",
+    "import_name": "mappyfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mappyfile"
+  },
+  "mapraster": {
+    "conda_name": "mapraster",
+    "import_name": "mapraster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapraster"
+  },
+  "maps-cli": {
+    "conda_name": "maps-cli",
+    "import_name": "maps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maps-cli"
+  },
+  "mapshader": {
+    "conda_name": "mapshader",
+    "import_name": "mapshader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapshader"
+  },
+  "maptide": {
+    "conda_name": "maptide",
+    "import_name": "maptide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maptide"
+  },
+  "mapwidget": {
+    "conda_name": "mapwidget",
+    "import_name": "mapwidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapwidget"
+  },
+  "mapyde": {
+    "conda_name": "mapyde",
+    "import_name": "mapyde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mapyde"
+  },
+  "marbles": {
+    "conda_name": "marbles",
+    "import_name": "marbles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marbles"
+  },
+  "marbles-core": {
+    "conda_name": "marbles-core",
+    "import_name": "marbles.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marbles-core"
+  },
+  "marbles-mixins": {
+    "conda_name": "marbles-mixins",
+    "import_name": "marbles.mixins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marbles-mixins"
+  },
+  "mariadb": {
+    "conda_name": "mariadb",
+    "import_name": "mariadb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mariadb"
+  },
+  "mariadb-context-manager": {
+    "conda_name": "mariadb-context-manager",
+    "import_name": "contextManager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mariadb-context-manager"
+  },
+  "marinvaders": {
+    "conda_name": "marinvaders",
+    "import_name": "marinvaders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marinvaders"
+  },
+  "marisa-trie": {
+    "conda_name": "marisa-trie",
+    "import_name": "marisa_trie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marisa-trie"
+  },
+  "markdiffusion": {
+    "conda_name": "markdiffusion",
+    "import_name": "markdiffusion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdiffusion"
+  },
+  "markdown-checklist": {
+    "conda_name": "markdown-checklist",
+    "import_name": "markdown_checklist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdown-checklist"
+  },
+  "markdown-include": {
+    "conda_name": "markdown-include",
+    "import_name": "markdown_include",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdown-include"
+  },
+  "markdown-it-py": {
+    "conda_name": "markdown-it-py",
+    "import_name": "markdown_it",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdown-it-py"
+  },
+  "markdown-kernel": {
+    "conda_name": "markdown-kernel",
+    "import_name": "markdown_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdown-kernel"
+  },
+  "markdown-strings": {
+    "conda_name": "markdown_strings",
+    "import_name": "markdown_strings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markdown-strings"
+  },
+  "marko": {
+    "conda_name": "marko",
+    "import_name": "marko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marko"
+  },
+  "markov-clustering": {
+    "conda_name": "markov-clustering",
+    "import_name": "markov_clustering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markov-clustering"
+  },
+  "markov-draftjs": {
+    "conda_name": "markov_draftjs",
+    "import_name": "markov_draftjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markov-draftjs"
+  },
+  "markuppy": {
+    "conda_name": "markuppy",
+    "import_name": "MarkupPy.markup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markuppy"
+  },
+  "markupsafe": {
+    "conda_name": "markupsafe",
+    "import_name": "markupsafe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "markupsafe"
+  },
+  "marpyter": {
+    "conda_name": "marpyter",
+    "import_name": "marpyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marpyter"
+  },
+  "marray": {
+    "conda_name": "marray-python",
+    "import_name": "marray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marray"
+  },
+  "marshmallow-dataclass": {
+    "conda_name": "marshmallow-dataclass",
+    "import_name": "marshmallow_dataclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-dataclass"
+  },
+  "marshmallow-jsonapi": {
+    "conda_name": "marshmallow-jsonapi",
+    "import_name": "marshmallow_jsonapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-jsonapi"
+  },
+  "marshmallow-jsonschema": {
+    "conda_name": "marshmallow-jsonschema",
+    "import_name": "marshmallow_jsonschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-jsonschema"
+  },
+  "marshmallow-oneofschema": {
+    "conda_name": "marshmallow-oneofschema",
+    "import_name": "marshmallow_oneofschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-oneofschema"
+  },
+  "marshmallow-sqlalchemy": {
+    "conda_name": "marshmallow-sqlalchemy",
+    "import_name": "marshmallow_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-sqlalchemy"
+  },
+  "marshmallow-union": {
+    "conda_name": "marshmallow-union",
+    "import_name": "marshmallow_union",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow-union"
+  },
+  "marshmallow3-annotations": {
+    "conda_name": "marshmallow3-annotations",
+    "import_name": "marshmallow3_annotations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marshmallow3-annotations"
+  },
+  "marsilea": {
+    "conda_name": "marsilea",
+    "import_name": "marsilea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marsilea"
+  },
+  "marslab": {
+    "conda_name": "marslab",
+    "import_name": "marslab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marslab"
+  },
+  "marspylib": {
+    "conda_name": "marspylib",
+    "import_name": "marspylib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marspylib"
+  },
+  "marvin": {
+    "conda_name": "marvin",
+    "import_name": "marvin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marvin"
+  },
+  "marxs": {
+    "conda_name": "marxs",
+    "import_name": "marxs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "marxs"
+  },
+  "masci-tools": {
+    "conda_name": "masci-tools",
+    "import_name": "masci_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "masci-tools"
+  },
+  "mask-to-polygons": {
+    "conda_name": "mask-to-polygons",
+    "import_name": "mask_to_polygons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mask-to-polygons"
+  },
+  "mastercard-client-encryption": {
+    "conda_name": "mastercard-client-encryption",
+    "import_name": "client_encryption",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mastercard-client-encryption"
+  },
+  "mastercard-oauth1-signer": {
+    "conda_name": "mastercard-oauth1-signer",
+    "import_name": "oauth1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mastercard-oauth1-signer"
+  },
+  "mastodon-py": {
+    "conda_name": "mastodon.py",
+    "import_name": "mastodon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mastodon-py"
+  },
+  "mat4py": {
+    "conda_name": "mat4py",
+    "import_name": "mat4py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mat4py"
+  },
+  "mat73": {
+    "conda_name": "mat73",
+    "import_name": "mat73",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mat73"
+  },
+  "matbench-genmetrics": {
+    "conda_name": "matbench-genmetrics",
+    "import_name": "matbench_genmetrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matbench-genmetrics"
+  },
+  "matching": {
+    "conda_name": "matching",
+    "import_name": "matching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matching"
+  },
+  "matchpy": {
+    "conda_name": "matchpy",
+    "import_name": "matchpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matchpy"
+  },
+  "mathics-pygments": {
+    "conda_name": "mathics_pygments",
+    "import_name": "mathics_pygments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mathics-pygments"
+  },
+  "mathics-scanner": {
+    "conda_name": "mathics-scanner",
+    "import_name": "mathics_scanner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mathics-scanner"
+  },
+  "mathics3": {
+    "conda_name": "mathics3",
+    "import_name": "mathics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mathics3"
+  },
+  "mathics3-scanner": {
+    "conda_name": "mathics3-scanner",
+    "import_name": "mathics_scanner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mathics3-scanner"
+  },
+  "mathpad": {
+    "conda_name": "mathpad",
+    "import_name": "mathpad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mathpad"
+  },
+  "matid": {
+    "conda_name": "matid",
+    "import_name": "matid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matid"
+  },
+  "matlab-kernel": {
+    "conda_name": "matlab_kernel",
+    "import_name": "matlab_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matlab-kernel"
+  },
+  "matminer": {
+    "conda_name": "matminer",
+    "import_name": "matminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matminer"
+  },
+  "matplotcheck": {
+    "conda_name": "matplotcheck",
+    "import_name": "matplotcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotcheck"
+  },
+  "matplotgl": {
+    "conda_name": "matplotgl",
+    "import_name": "matplotgl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotgl"
+  },
+  "matplotlib": {
+    "conda_name": "matplotlib-base",
+    "import_name": "matplotlib",
+    "mapping_source": "static",
+    "pypi_name": "matplotlib"
+  },
+  "matplotlib-fontja": {
+    "conda_name": "matplotlib-fontja",
+    "import_name": "matplotlib_fontja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlib-fontja"
+  },
+  "matplotlib-inline": {
+    "conda_name": "matplotlib-inline",
+    "import_name": "matplotlib_inline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlib-inline"
+  },
+  "matplotlib-scalebar": {
+    "conda_name": "matplotlib-scalebar",
+    "import_name": "matplotlib_scalebar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlib-scalebar"
+  },
+  "matplotlib-venn": {
+    "conda_name": "matplotlib-venn",
+    "import_name": "matplotlib_venn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlib-venn"
+  },
+  "matplotlibhelper": {
+    "conda_name": "matplotlibhelper",
+    "import_name": "matplotlibhelper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlibhelper"
+  },
+  "matplotlive": {
+    "conda_name": "matplotlive",
+    "import_name": "matplotlive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotlive"
+  },
+  "matplotview": {
+    "conda_name": "matplotview",
+    "import_name": "matplotview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotview"
+  },
+  "matplotx": {
+    "conda_name": "matplotx",
+    "import_name": "matplotx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matplotx"
+  },
+  "matrepr": {
+    "conda_name": "matrepr",
+    "import_name": "matrepr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrepr"
+  },
+  "matrix-api-async": {
+    "conda_name": "matrix-api-async",
+    "import_name": "matrix_api_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrix-api-async"
+  },
+  "matrix-nio": {
+    "conda_name": "matrix-nio",
+    "import_name": "nio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrix-nio"
+  },
+  "matrix-py3": {
+    "conda_name": "matrix-py3",
+    "import_name": "matrix3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrix-py3"
+  },
+  "matrix-utils": {
+    "conda_name": "matrix_utils",
+    "import_name": "matrix_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrix-utils"
+  },
+  "matrixprofile": {
+    "conda_name": "matrixprofile",
+    "import_name": "matrixprofile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matrixprofile"
+  },
+  "matscipy": {
+    "conda_name": "matscipy",
+    "import_name": "matscipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matscipy"
+  },
+  "matspy": {
+    "conda_name": "matspy",
+    "import_name": "matspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matspy"
+  },
+  "matsubplots": {
+    "conda_name": "matsubplots",
+    "import_name": "matsubplots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "matsubplots"
+  },
+  "mattermostdriver": {
+    "conda_name": "mattermostdriver",
+    "import_name": "mattermostdriver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mattermostdriver"
+  },
+  "mattersim": {
+    "conda_name": "mattersim",
+    "import_name": "mattersim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mattersim"
+  },
+  "maup": {
+    "conda_name": "maup",
+    "import_name": "maup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maup"
+  },
+  "maxminddb": {
+    "conda_name": "maxminddb",
+    "import_name": "maxminddb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maxminddb"
+  },
+  "maxvolpy": {
+    "conda_name": "maxvolpy",
+    "import_name": "maxvolpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maxvolpy"
+  },
+  "maya": {
+    "conda_name": "maya",
+    "import_name": "maya",
+    "mapping_source": "regro-bot",
+    "pypi_name": "maya"
+  },
+  "mbstrdecoder": {
+    "conda_name": "mbstrdecoder",
+    "import_name": "mbstrdecoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mbstrdecoder"
+  },
+  "mbutil": {
+    "conda_name": "mbutil",
+    "import_name": "mbutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mbutil"
+  },
+  "mc-goods": {
+    "conda_name": "mc-goods",
+    "import_name": "mc_goods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mc-goods"
+  },
+  "mc3": {
+    "conda_name": "mc3",
+    "import_name": "mc3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mc3"
+  },
+  "mcalf": {
+    "conda_name": "mcalf",
+    "import_name": "mcalf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcalf"
+  },
+  "mcap": {
+    "conda_name": "mcap",
+    "import_name": "mcap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcap"
+  },
+  "mcap-owa-support": {
+    "conda_name": "mcap-owa-support",
+    "import_name": "mcap_owa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcap-owa-support"
+  },
+  "mccabe": {
+    "conda_name": "mccabe",
+    "import_name": "mccabe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mccabe"
+  },
+  "mccode-antlr": {
+    "conda_name": "mccode-antlr",
+    "import_name": "mccode_antlr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mccode-antlr"
+  },
+  "mcculw": {
+    "conda_name": "mcculw",
+    "import_name": "mcculw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcculw"
+  },
+  "mcerp": {
+    "conda_name": "mcerp",
+    "import_name": "mcerp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcerp"
+  },
+  "mcgrad": {
+    "conda_name": "mcgrad",
+    "import_name": "mcgrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcgrad"
+  },
+  "mcp": {
+    "conda_name": "mcp",
+    "import_name": "mcp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcp"
+  },
+  "mcp-ui-server": {
+    "conda_name": "mcp-ui-server",
+    "import_name": "mcp_ui_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcp-ui-server"
+  },
+  "mcplot": {
+    "conda_name": "mcplot",
+    "import_name": "mcplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcplot"
+  },
+  "mcrnmf": {
+    "conda_name": "mcrnmf",
+    "import_name": "mcrnmf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcrnmf"
+  },
+  "mcstasscript": {
+    "conda_name": "mcstasscript",
+    "import_name": "mcstasscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mcstasscript"
+  },
+  "md-environ": {
+    "conda_name": "md-environ",
+    "import_name": "md_environ",
+    "mapping_source": "regro-bot",
+    "pypi_name": "md-environ"
+  },
+  "md-toc": {
+    "conda_name": "md-toc",
+    "import_name": "md_toc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "md-toc"
+  },
+  "md2py": {
+    "conda_name": "md2py",
+    "import_name": "md2py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "md2py"
+  },
+  "mda-xdrlib": {
+    "conda_name": "mda-xdrlib",
+    "import_name": "mda_xdrlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mda-xdrlib"
+  },
+  "mdacli": {
+    "conda_name": "mdacli",
+    "import_name": "mdacli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdacli"
+  },
+  "mdaencore": {
+    "conda_name": "mdaencore",
+    "import_name": "mdaencore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdaencore"
+  },
+  "mdahole2": {
+    "conda_name": "mdahole2",
+    "import_name": "mdahole2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdahole2"
+  },
+  "mdanalysis": {
+    "conda_name": "mdanalysis",
+    "import_name": "MDAnalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdanalysis"
+  },
+  "mdanalysis-sphinx-theme": {
+    "conda_name": "mdanalysis-sphinx-theme",
+    "import_name": "mdanalysis_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdanalysis-sphinx-theme"
+  },
+  "mdanalysisdata": {
+    "conda_name": "mdanalysisdata",
+    "import_name": "MDAnalysisData",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdanalysisdata"
+  },
+  "mdanalysistests": {
+    "conda_name": "mdanalysistests",
+    "import_name": "MDAnalysisTests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdanalysistests"
+  },
+  "mdbenchmark": {
+    "conda_name": "mdbenchmark",
+    "import_name": "mdbenchmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdbenchmark"
+  },
+  "mdf-forge": {
+    "conda_name": "mdf_forge",
+    "import_name": "mdf_forge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdf-forge"
+  },
+  "mdformat": {
+    "conda_name": "mdformat",
+    "import_name": "mdformat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat"
+  },
+  "mdformat-beautysh": {
+    "conda_name": "mdformat-beautysh",
+    "import_name": "mdformat_beautysh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-beautysh"
+  },
+  "mdformat-config": {
+    "conda_name": "mdformat-config",
+    "import_name": "mdformat_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-config"
+  },
+  "mdformat-deflist": {
+    "conda_name": "mdformat-deflist",
+    "import_name": "mdformat_deflist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-deflist"
+  },
+  "mdformat-footnote": {
+    "conda_name": "mdformat-footnote",
+    "import_name": "mdformat_footnote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-footnote"
+  },
+  "mdformat-gfm": {
+    "conda_name": "mdformat-gfm",
+    "import_name": "mdformat_gfm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-gfm"
+  },
+  "mdformat-myst": {
+    "conda_name": "mdformat-myst",
+    "import_name": "mdformat_myst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-myst"
+  },
+  "mdformat-pyproject": {
+    "conda_name": "mdformat-pyproject",
+    "import_name": "mdformat_pyproject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-pyproject"
+  },
+  "mdformat-ruff": {
+    "conda_name": "mdformat-ruff",
+    "import_name": "mdformat_ruff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-ruff"
+  },
+  "mdformat-shfmt": {
+    "conda_name": "mdformat-shfmt",
+    "import_name": "mdformat_shfmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-shfmt"
+  },
+  "mdformat-tables": {
+    "conda_name": "mdformat-tables",
+    "import_name": "mdformat_tables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdformat-tables"
+  },
+  "mdfreader": {
+    "conda_name": "mdfreader",
+    "import_name": "mdfreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdfreader"
+  },
+  "mdit-py-plugins": {
+    "conda_name": "mdit-py-plugins",
+    "import_name": "mdit_py_plugins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdit-py-plugins"
+  },
+  "mdonatello": {
+    "conda_name": "mdonatello",
+    "import_name": "mdonatello",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdonatello"
+  },
+  "mds-toolbox": {
+    "conda_name": "mds-toolbox",
+    "import_name": "mds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mds-toolbox"
+  },
+  "mdshare": {
+    "conda_name": "mdshare",
+    "import_name": "mdshare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdshare"
+  },
+  "mdsrv": {
+    "conda_name": "mdsrv",
+    "import_name": "mdsrv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdsrv"
+  },
+  "mdsynthesis": {
+    "conda_name": "mdsynthesis",
+    "import_name": "mdsynthesis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdsynthesis"
+  },
+  "mdurl": {
+    "conda_name": "mdurl",
+    "import_name": "mdurl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdurl"
+  },
+  "mdutils": {
+    "conda_name": "mdutils",
+    "import_name": "mdutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdutils"
+  },
+  "mdv": {
+    "conda_name": "mdv",
+    "import_name": "mdv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdv"
+  },
+  "mdx-gh-links": {
+    "conda_name": "mdx_gh_links",
+    "import_name": "mdx_gh_links",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdx-gh-links"
+  },
+  "mdx2": {
+    "conda_name": "mdx2",
+    "import_name": "mdx2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mdx2"
+  },
+  "measurement": {
+    "conda_name": "measurement",
+    "import_name": "measurement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "measurement"
+  },
+  "meautility": {
+    "conda_name": "meautility",
+    "import_name": "MEAutility",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meautility"
+  },
+  "mecab-python3": {
+    "conda_name": "mecab-python3",
+    "import_name": "MeCab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mecab-python3"
+  },
+  "mecademicpy": {
+    "conda_name": "mecademicpy",
+    "import_name": "mecademicpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mecademicpy"
+  },
+  "mechanicalsoup": {
+    "conda_name": "mechanicalsoup",
+    "import_name": "mechanicalsoup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mechanicalsoup"
+  },
+  "mechanize": {
+    "conda_name": "mechanize",
+    "import_name": "mechanize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mechanize"
+  },
+  "mechwolf": {
+    "conda_name": "mechwolf",
+    "import_name": "mechwolf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mechwolf"
+  },
+  "medaprep": {
+    "conda_name": "medaprep",
+    "import_name": "medaprep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medaprep"
+  },
+  "medatetime": {
+    "conda_name": "medatetime",
+    "import_name": "medatetime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medatetime"
+  },
+  "medcam": {
+    "conda_name": "medcam",
+    "import_name": "medcam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medcam"
+  },
+  "medenv": {
+    "conda_name": "medenv",
+    "import_name": "medenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medenv"
+  },
+  "mediafile": {
+    "conda_name": "mediafile",
+    "import_name": "mediafile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mediafile"
+  },
+  "mediapy": {
+    "conda_name": "mediapy",
+    "import_name": "mediapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mediapy"
+  },
+  "medigan": {
+    "conda_name": "medigan",
+    "import_name": "medigan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medigan"
+  },
+  "medpy": {
+    "conda_name": "medpy",
+    "import_name": "medpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "medpy"
+  },
+  "meegkit": {
+    "conda_name": "meegkit",
+    "import_name": "meegkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meegkit"
+  },
+  "meeko": {
+    "conda_name": "meeko",
+    "import_name": "meeko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meeko"
+  },
+  "meepmeep": {
+    "conda_name": "meepmeep",
+    "import_name": "meepmeep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meepmeep"
+  },
+  "megaman": {
+    "conda_name": "megaman",
+    "import_name": "megaman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "megaman"
+  },
+  "megaradrp": {
+    "conda_name": "megaradrp",
+    "import_name": "megaradrp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "megaradrp"
+  },
+  "megawidget": {
+    "conda_name": "megawidget",
+    "import_name": "megawidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "megawidget"
+  },
+  "meilisearch-python-async": {
+    "conda_name": "meilisearch-python-async",
+    "import_name": "meilisearch_python_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meilisearch-python-async"
+  },
+  "meinheld": {
+    "conda_name": "meinheld",
+    "import_name": "meinheld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meinheld"
+  },
+  "mellon": {
+    "conda_name": "mellon",
+    "import_name": "mellon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mellon"
+  },
+  "membrane-curvature": {
+    "conda_name": "membrane-curvature",
+    "import_name": "membrane_curvature",
+    "mapping_source": "regro-bot",
+    "pypi_name": "membrane-curvature"
+  },
+  "memestra": {
+    "conda_name": "memestra",
+    "import_name": "memestra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "memestra"
+  },
+  "memoir": {
+    "conda_name": "memoir",
+    "import_name": "memoir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "memoir"
+  },
+  "memoization": {
+    "conda_name": "memoization",
+    "import_name": "memoization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "memoization"
+  },
+  "memoized-property": {
+    "conda_name": "memoized-property",
+    "import_name": "memoized_property",
+    "mapping_source": "regro-bot",
+    "pypi_name": "memoized-property"
+  },
+  "memory-allocator": {
+    "conda_name": "memory-allocator",
+    "import_name": "memory_allocator",
+    "mapping_source": "static",
+    "pypi_name": "memory-allocator"
+  },
+  "memprof": {
+    "conda_name": "memprof",
+    "import_name": "memprof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "memprof"
+  },
+  "mendeleev": {
+    "conda_name": "mendeleev",
+    "import_name": "mendeleev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mendeleev"
+  },
+  "menpo": {
+    "conda_name": "menpo",
+    "import_name": "menpo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "menpo"
+  },
+  "menpo3d": {
+    "conda_name": "menpo3d",
+    "import_name": "menpo3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "menpo3d"
+  },
+  "menpodetect": {
+    "conda_name": "menpodetect",
+    "import_name": "menpodetect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "menpodetect"
+  },
+  "menpofit": {
+    "conda_name": "menpofit",
+    "import_name": "menpofit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "menpofit"
+  },
+  "menpowidgets": {
+    "conda_name": "menpowidgets",
+    "import_name": "menpowidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "menpowidgets"
+  },
+  "mercantile": {
+    "conda_name": "mercantile",
+    "import_name": "mercantile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mercantile"
+  },
+  "mercury": {
+    "conda_name": "mercury",
+    "import_name": "mercury",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mercury"
+  },
+  "merge-args": {
+    "conda_name": "merge-args",
+    "import_name": "merge_args",
+    "mapping_source": "regro-bot",
+    "pypi_name": "merge-args"
+  },
+  "merge-stardist-masks": {
+    "conda_name": "merge-stardist-masks",
+    "import_name": "merge_stardist_masks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "merge-stardist-masks"
+  },
+  "mesa": {
+    "conda_name": "mesa",
+    "import_name": "mesa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesa"
+  },
+  "mesa-geo": {
+    "conda_name": "mesa-geo",
+    "import_name": "mesa_geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesa-geo"
+  },
+  "mesa-viz-tornado": {
+    "conda_name": "mesa-viz-tornado",
+    "import_name": "mesa_viz_tornado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesa-viz-tornado"
+  },
+  "meshcat": {
+    "conda_name": "meshcat-python",
+    "import_name": "meshcat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meshcat"
+  },
+  "meshcat-shapes": {
+    "conda_name": "meshcat-shapes",
+    "import_name": "meshcat_shapes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meshcat-shapes"
+  },
+  "meshcut": {
+    "conda_name": "meshcut",
+    "import_name": "meshcut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meshcut"
+  },
+  "mesher": {
+    "conda_name": "mesher",
+    "import_name": "mesher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesher"
+  },
+  "meshio": {
+    "conda_name": "meshio",
+    "import_name": "meshio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meshio"
+  },
+  "meshpy": {
+    "conda_name": "meshpy",
+    "import_name": "meshpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meshpy"
+  },
+  "mesmer-emulator": {
+    "conda_name": "mesmer",
+    "import_name": "mesmer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesmer-emulator"
+  },
+  "mesonpep517": {
+    "conda_name": "mesonpep517",
+    "import_name": "mesonpep517",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mesonpep517"
+  },
+  "message-ix": {
+    "conda_name": "message-ix",
+    "import_name": "message_ix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "message-ix"
+  },
+  "metadata-inspector": {
+    "conda_name": "metadata-inspector",
+    "import_name": "metadata_inspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metadata-inspector"
+  },
+  "metaflow": {
+    "conda_name": "metaflow",
+    "import_name": "metaflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metaflow"
+  },
+  "metaflow-netflixext": {
+    "conda_name": "metaflow-netflixext",
+    "import_name": "metaflow_extensions.netflix_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metaflow-netflixext"
+  },
+  "metafone": {
+    "conda_name": "metafone",
+    "import_name": "metaphone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metafone"
+  },
+  "metaimageio": {
+    "conda_name": "metaimageio",
+    "import_name": "metaimageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metaimageio"
+  },
+  "metakernel": {
+    "conda_name": "metakernel",
+    "import_name": "metakernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metakernel"
+  },
+  "metaknowledge": {
+    "conda_name": "metaknowledge",
+    "import_name": "metaknowledge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metaknowledge"
+  },
+  "metalearners": {
+    "conda_name": "metalearners",
+    "import_name": "metalearners",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metalearners"
+  },
+  "metaphone": {
+    "conda_name": "metaphone",
+    "import_name": "metaphone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metaphone"
+  },
+  "metar": {
+    "conda_name": "metar",
+    "import_name": "metar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metar"
+  },
+  "metatensor-core": {
+    "conda_name": "python-metatensor-core",
+    "import_name": "metatensor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatensor-core"
+  },
+  "metatensor-learn": {
+    "conda_name": "python-metatensor-learn",
+    "import_name": "metatensor.learn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatensor-learn"
+  },
+  "metatensor-operations": {
+    "conda_name": "python-metatensor-operations",
+    "import_name": "metatensor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatensor-operations"
+  },
+  "metatomic-ase": {
+    "conda_name": "python-metatomic-ase",
+    "import_name": "metatomic_ase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatomic-ase"
+  },
+  "metatomic-torch": {
+    "conda_name": "python-metatomic-torch",
+    "import_name": "metatomic.torch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatomic-torch"
+  },
+  "metatrain": {
+    "conda_name": "metatrain",
+    "import_name": "metatrain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metatrain"
+  },
+  "metawrap": {
+    "conda_name": "metawrap",
+    "import_name": "metawrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metawrap"
+  },
+  "meteofetch": {
+    "conda_name": "meteofetch",
+    "import_name": "meteofetch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meteofetch"
+  },
+  "meteor-maps": {
+    "conda_name": "meteor-maps",
+    "import_name": "meteor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meteor-maps"
+  },
+  "meteora": {
+    "conda_name": "meteora",
+    "import_name": "meteora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "meteora"
+  },
+  "methodtools": {
+    "conda_name": "methodtools",
+    "import_name": "methodtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "methodtools"
+  },
+  "metobs-toolkit": {
+    "conda_name": "metobs-toolkit",
+    "import_name": "metobs_toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metobs-toolkit"
+  },
+  "metocean-api": {
+    "conda_name": "metocean-api",
+    "import_name": "metocean_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metocean-api"
+  },
+  "metocean-stats": {
+    "conda_name": "metocean-stats",
+    "import_name": "metocean_stats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metocean-stats"
+  },
+  "metoffice-afterburner": {
+    "conda_name": "metoffice-afterburner",
+    "import_name": "afterburner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metoffice-afterburner"
+  },
+  "metomi-isodatetime": {
+    "conda_name": "metomi-isodatetime",
+    "import_name": "metomi.isodatetime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metomi-isodatetime"
+  },
+  "metpy": {
+    "conda_name": "metpy",
+    "import_name": "metpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metpy"
+  },
+  "metric-learn": {
+    "conda_name": "metric-learn",
+    "import_name": "metric_learn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metric-learn"
+  },
+  "metrolopy": {
+    "conda_name": "metrolopy",
+    "import_name": "metrolopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metrolopy"
+  },
+  "metronomes": {
+    "conda_name": "metronomes",
+    "import_name": "metronomes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metronomes"
+  },
+  "metsim": {
+    "conda_name": "metsim",
+    "import_name": "metsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "metsim"
+  },
+  "mettoolbox": {
+    "conda_name": "mettoolbox",
+    "import_name": "mettoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mettoolbox"
+  },
+  "mf2": {
+    "conda_name": "mf2",
+    "import_name": "mf2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mf2"
+  },
+  "mf2py": {
+    "conda_name": "mf2py",
+    "import_name": "mf2py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mf2py"
+  },
+  "mf6adj": {
+    "conda_name": "mf6adj",
+    "import_name": "mf6adj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mf6adj"
+  },
+  "mffpy": {
+    "conda_name": "mffpy",
+    "import_name": "mffpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mffpy"
+  },
+  "mfpymake": {
+    "conda_name": "mfpymake",
+    "import_name": "pymake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mfpymake"
+  },
+  "mfusepy": {
+    "conda_name": "mfusepy",
+    "import_name": "mfusepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mfusepy"
+  },
+  "mget3": {
+    "conda_name": "mget3",
+    "import_name": "GeoEco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mget3"
+  },
+  "mgwr": {
+    "conda_name": "mgwr",
+    "import_name": "mgwr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mgwr"
+  },
+  "mhealpy": {
+    "conda_name": "mhealpy",
+    "import_name": "mhealpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mhealpy"
+  },
+  "mhfp": {
+    "conda_name": "mhfp",
+    "import_name": "mhfp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mhfp"
+  },
+  "mhkit": {
+    "conda_name": "mhkit",
+    "import_name": "mhkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mhkit"
+  },
+  "mhm": {
+    "conda_name": "mhm",
+    "import_name": "mhm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mhm"
+  },
+  "micawber": {
+    "conda_name": "micawber",
+    "import_name": "micawber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micawber"
+  },
+  "miceforest": {
+    "conda_name": "miceforest",
+    "import_name": "miceforest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miceforest"
+  },
+  "micov": {
+    "conda_name": "micov",
+    "import_name": "micov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micov"
+  },
+  "micro-liquid": {
+    "conda_name": "micro-liquid",
+    "import_name": "micro_liquid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micro-liquid"
+  },
+  "microfilm": {
+    "conda_name": "microfilm",
+    "import_name": "microfilm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "microfilm"
+  },
+  "micromagneticdata": {
+    "conda_name": "micromagneticdata",
+    "import_name": "micromagneticdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micromagneticdata"
+  },
+  "micromagneticmodel": {
+    "conda_name": "micromagneticmodel",
+    "import_name": "micromagneticmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micromagneticmodel"
+  },
+  "micromagnetictests": {
+    "conda_name": "micromagnetictests",
+    "import_name": "micromagnetictests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micromagnetictests"
+  },
+  "micrometa": {
+    "conda_name": "micrometa",
+    "import_name": "micrometa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micrometa"
+  },
+  "micropip": {
+    "conda_name": "micropip",
+    "import_name": "micropip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "micropip"
+  },
+  "microscope": {
+    "conda_name": "microscope",
+    "import_name": "microscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "microscope"
+  },
+  "microsoft-aurora": {
+    "conda_name": "microsoft-aurora",
+    "import_name": "aurora",
+    "mapping_source": "regro-bot",
+    "pypi_name": "microsoft-aurora"
+  },
+  "microssim": {
+    "conda_name": "microssim",
+    "import_name": "microssim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "microssim"
+  },
+  "microtc": {
+    "conda_name": "microtc",
+    "import_name": "microtc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "microtc"
+  },
+  "mido": {
+    "conda_name": "mido",
+    "import_name": "mido",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mido"
+  },
+  "miepython": {
+    "conda_name": "miepython",
+    "import_name": "miepython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miepython"
+  },
+  "migen": {
+    "conda_name": "migen",
+    "import_name": "migen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "migen"
+  },
+  "migra": {
+    "conda_name": "migra",
+    "import_name": "migra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "migra"
+  },
+  "mikeio": {
+    "conda_name": "mikeio",
+    "import_name": "mikeio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mikeio"
+  },
+  "milksnake": {
+    "conda_name": "milksnake",
+    "import_name": "milksnake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "milksnake"
+  },
+  "mimerender": {
+    "conda_name": "mimerender",
+    "import_name": "mimerender",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mimerender"
+  },
+  "mimics": {
+    "conda_name": "mimics",
+    "import_name": "mimics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mimics"
+  },
+  "min-dalle": {
+    "conda_name": "min-dalle",
+    "import_name": "min_dalle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "min-dalle"
+  },
+  "minepy": {
+    "conda_name": "minepy",
+    "import_name": "minepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minepy"
+  },
+  "minian": {
+    "conda_name": "minian",
+    "import_name": "minian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minian"
+  },
+  "miniboss": {
+    "conda_name": "miniboss",
+    "import_name": "miniboss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miniboss"
+  },
+  "miniful": {
+    "conda_name": "miniful",
+    "import_name": "miniful",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miniful"
+  },
+  "minify-html": {
+    "conda_name": "minify-html",
+    "import_name": "minify_html",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minify-html"
+  },
+  "minikanren": {
+    "conda_name": "minikanren",
+    "import_name": "kanren",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minikanren"
+  },
+  "minim": {
+    "conda_name": "minim",
+    "import_name": "minim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minim"
+  },
+  "minimal-molview": {
+    "conda_name": "minimal_molview",
+    "import_name": "minimal_molview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minimal-molview"
+  },
+  "minimal-snowplow-tracker": {
+    "conda_name": "minimal-snowplow-tracker",
+    "import_name": "snowplow_tracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minimal-snowplow-tracker"
+  },
+  "miningpy": {
+    "conda_name": "miningpy",
+    "import_name": "miningpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miningpy"
+  },
+  "minio": {
+    "conda_name": "minio",
+    "import_name": "minio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minio"
+  },
+  "minipcn": {
+    "conda_name": "minipcn",
+    "import_name": "minipcn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minipcn"
+  },
+  "minisom": {
+    "conda_name": "minisom",
+    "import_name": "minisom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "minisom"
+  },
+  "miniwdl": {
+    "conda_name": "miniwdl",
+    "import_name": "WDL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miniwdl"
+  },
+  "miniwdl-slurm": {
+    "conda_name": "miniwdl-slurm",
+    "import_name": "miniwdl_slurm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miniwdl-slurm"
+  },
+  "mintpy": {
+    "conda_name": "mintpy",
+    "import_name": "mintpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mintpy"
+  },
+  "mir-eval": {
+    "conda_name": "mir_eval",
+    "import_name": "mir_eval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mir-eval"
+  },
+  "mirakuru": {
+    "conda_name": "mirakuru",
+    "import_name": "mirakuru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mirakuru"
+  },
+  "miranda": {
+    "conda_name": "python-miranda",
+    "import_name": "miranda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miranda"
+  },
+  "misaka": {
+    "conda_name": "misaka",
+    "import_name": "misaka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "misaka"
+  },
+  "misaki": {
+    "conda_name": "misaki",
+    "import_name": "misaki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "misaki"
+  },
+  "misic-napari": {
+    "conda_name": "misic-napari",
+    "import_name": "misic_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "misic-napari"
+  },
+  "miss-hit": {
+    "conda_name": "miss-hit",
+    "import_name": "miss_hit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miss-hit"
+  },
+  "miss-hit-core": {
+    "conda_name": "miss-hit-core",
+    "import_name": "miss_hit_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "miss-hit-core"
+  },
+  "missingno": {
+    "conda_name": "missingno",
+    "import_name": "missingno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "missingno"
+  },
+  "mistletoe": {
+    "conda_name": "mistletoe",
+    "import_name": "mistletoe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mistletoe"
+  },
+  "mistletoe-ebp": {
+    "conda_name": "mistletoe-ebp",
+    "import_name": "mistletoe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mistletoe-ebp"
+  },
+  "mixer": {
+    "conda_name": "mixer",
+    "import_name": "mixer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mixer"
+  },
+  "mixsea": {
+    "conda_name": "mixsea",
+    "import_name": "mixsea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mixsea"
+  },
+  "mixsimulator": {
+    "conda_name": "mixsimulator",
+    "import_name": "mixsimulator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mixsimulator"
+  },
+  "mkdocs": {
+    "conda_name": "mkdocs",
+    "import_name": "mkdocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs"
+  },
+  "mkdocs-autorefs": {
+    "conda_name": "mkdocs-autorefs",
+    "import_name": "mkdocs_autorefs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-autorefs"
+  },
+  "mkdocs-bibtex": {
+    "conda_name": "mkdocs-bibtex",
+    "import_name": "mkdocs_bibtex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-bibtex"
+  },
+  "mkdocs-bootstrap": {
+    "conda_name": "mkdocs-bootstrap",
+    "import_name": "mkdocs_bootstrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-bootstrap"
+  },
+  "mkdocs-bootswatch": {
+    "conda_name": "mkdocs-bootswatch",
+    "import_name": "mkdocs_bootswatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-bootswatch"
+  },
+  "mkdocs-exclude": {
+    "conda_name": "mkdocs-exclude",
+    "import_name": "mkdocs_exclude",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-exclude"
+  },
+  "mkdocs-get-deps": {
+    "conda_name": "mkdocs-get-deps",
+    "import_name": "mkdocs_get_deps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-get-deps"
+  },
+  "mkdocs-git-revision-date-localized-plugin": {
+    "conda_name": "mkdocs-git-revision-date-localized-plugin",
+    "import_name": "mkdocs_git_revision_date_localized_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-git-revision-date-localized-plugin"
+  },
+  "mkdocs-git-revision-date-plugin": {
+    "conda_name": "mkdocs-git-revision-date-plugin",
+    "import_name": "mkdocs_git_revision_date_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-git-revision-date-plugin"
+  },
+  "mkdocs-glightbox": {
+    "conda_name": "mkdocs-glightbox",
+    "import_name": "mkdocs_glightbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-glightbox"
+  },
+  "mkdocs-graphviz": {
+    "conda_name": "mkdocs-graphviz",
+    "import_name": "mkdocs_graphviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-graphviz"
+  },
+  "mkdocs-include-markdown-plugin": {
+    "conda_name": "mkdocs-include-markdown-plugin",
+    "import_name": "mkdocs_include_markdown_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-include-markdown-plugin"
+  },
+  "mkdocs-ivory": {
+    "conda_name": "mkdocs-ivory",
+    "import_name": "mkdocs_ivory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-ivory"
+  },
+  "mkdocs-jupyter": {
+    "conda_name": "mkdocs-jupyter",
+    "import_name": "mkdocs_jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-jupyter"
+  },
+  "mkdocs-literate-nav": {
+    "conda_name": "mkdocs-literate-nav",
+    "import_name": "mkdocs_literate_nav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-literate-nav"
+  },
+  "mkdocs-macros-plugin": {
+    "conda_name": "mkdocs-macros-plugin",
+    "import_name": "mkdocs_macros",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-macros-plugin"
+  },
+  "mkdocs-markdownextradata-plugin": {
+    "conda_name": "mkdocs-markdownextradata-plugin",
+    "import_name": "markdownextradata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-markdownextradata-plugin"
+  },
+  "mkdocs-material-extensions": {
+    "conda_name": "mkdocs-material-extensions",
+    "import_name": "materialx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-material-extensions"
+  },
+  "mkdocs-monorepo-plugin": {
+    "conda_name": "mkdocs-monorepo-plugin",
+    "import_name": "mkdocs_monorepo_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-monorepo-plugin"
+  },
+  "mkdocs-quiz": {
+    "conda_name": "mkdocs-quiz",
+    "import_name": "mkdocs_quiz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-quiz"
+  },
+  "mkdocs-section-index": {
+    "conda_name": "mkdocs-section-index",
+    "import_name": "mkdocs_section_index",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-section-index"
+  },
+  "mkdocs-table-reader-plugin": {
+    "conda_name": "mkdocs-table-reader-plugin",
+    "import_name": "mkdocs_table_reader_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocs-table-reader-plugin"
+  },
+  "mkdocstrings": {
+    "conda_name": "mkdocstrings",
+    "import_name": "mkdocstrings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocstrings"
+  },
+  "mkdocstrings-python": {
+    "conda_name": "mkdocstrings-python",
+    "import_name": "mkdocstrings_handlers.python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocstrings-python"
+  },
+  "mkdocstrings-python-xref": {
+    "conda_name": "mkdocstrings-python-xref",
+    "import_name": "mkdocstrings_handlers.python_xref",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdocstrings-python-xref"
+  },
+  "mkdoxy": {
+    "conda_name": "mkdoxy",
+    "import_name": "mkdoxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mkdoxy"
+  },
+  "ml-insights": {
+    "conda_name": "ml-insights",
+    "import_name": "ml_insights",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ml-insights"
+  },
+  "ml-research": {
+    "conda_name": "ml-research",
+    "import_name": "mlresearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ml-research"
+  },
+  "ml-tooling": {
+    "conda_name": "ml_tooling",
+    "import_name": "ml_tooling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ml-tooling"
+  },
+  "ml4xcube": {
+    "conda_name": "ml4xcube",
+    "import_name": "ml4xcube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ml4xcube"
+  },
+  "mlconjug": {
+    "conda_name": "mlconjug",
+    "import_name": "mlconjug",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlconjug"
+  },
+  "mlconjug3": {
+    "conda_name": "mlconjug3",
+    "import_name": "mlconjug3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlconjug3"
+  },
+  "mlcroissant": {
+    "conda_name": "mlcroissant",
+    "import_name": "mlcroissant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlcroissant"
+  },
+  "mleap": {
+    "conda_name": "mleap",
+    "import_name": "mleap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mleap"
+  },
+  "mlflow-autogluon": {
+    "conda_name": "mlflow-autogluon",
+    "import_name": "mlflow_autogluon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlflow-autogluon"
+  },
+  "mlforecast": {
+    "conda_name": "mlforecast",
+    "import_name": "mlforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlforecast"
+  },
+  "mlgb": {
+    "conda_name": "mlgb",
+    "import_name": "mlgb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlgb"
+  },
+  "mljar-mercury": {
+    "conda_name": "mljar-mercury",
+    "import_name": "mercury",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mljar-mercury"
+  },
+  "mljar-scikit-plot": {
+    "conda_name": "mljar-scikit-plot",
+    "import_name": "scikitplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mljar-scikit-plot"
+  },
+  "mljar-supervised": {
+    "conda_name": "mljar-supervised",
+    "import_name": "supervised",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mljar-supervised"
+  },
+  "mlnotify": {
+    "conda_name": "mlnotify",
+    "import_name": "mlnotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlnotify"
+  },
+  "mlo-co2": {
+    "conda_name": "mlo-co2",
+    "import_name": "mlo_co2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlo-co2"
+  },
+  "mlrose-ky": {
+    "conda_name": "mlrose-ky",
+    "import_name": "mlrose_ky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlrose-ky"
+  },
+  "mlx-ctc": {
+    "conda_name": "mlx-ctc",
+    "import_name": "mlx_ctc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlx-ctc"
+  },
+  "mlxtend": {
+    "conda_name": "mlxtend",
+    "import_name": "mlxtend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mlxtend"
+  },
+  "mmcif-pdbx": {
+    "conda_name": "mmcif_pdbx",
+    "import_name": "pdbx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmcif-pdbx"
+  },
+  "mmengine": {
+    "conda_name": "mmengine",
+    "import_name": "mmengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmengine"
+  },
+  "mmhash3": {
+    "conda_name": "mmhash3",
+    "import_name": "mmh3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmhash3"
+  },
+  "mmparse": {
+    "conda_name": "mmparse",
+    "import_name": "mmparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmparse"
+  },
+  "mms-python-adapter": {
+    "conda_name": "mms-python-adapter",
+    "import_name": "mms_python_adapter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mms-python-adapter"
+  },
+  "mms-python-client": {
+    "conda_name": "mms-python-client",
+    "import_name": "mms_python_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mms-python-client"
+  },
+  "mmsegmentation": {
+    "conda_name": "mmsegmentation",
+    "import_name": "mmseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmsegmentation"
+  },
+  "mmtf-python": {
+    "conda_name": "mmtf-python",
+    "import_name": "mmtf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmtf-python"
+  },
+  "mmvec": {
+    "conda_name": "mmvec",
+    "import_name": "mmvec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mmvec"
+  },
+  "mne-ari": {
+    "conda_name": "mne-ari",
+    "import_name": "mne_ari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-ari"
+  },
+  "mne-bids": {
+    "conda_name": "mne-bids",
+    "import_name": "mne_bids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-bids"
+  },
+  "mne-bids-pipeline": {
+    "conda_name": "mne-bids-pipeline",
+    "import_name": "mne_bids_pipeline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-bids-pipeline"
+  },
+  "mne-connectivity": {
+    "conda_name": "mne-connectivity",
+    "import_name": "mne_connectivity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-connectivity"
+  },
+  "mne-faster": {
+    "conda_name": "mne-faster",
+    "import_name": "mne_faster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-faster"
+  },
+  "mne-features": {
+    "conda_name": "mne-features",
+    "import_name": "mne_features",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-features"
+  },
+  "mne-gui-addons": {
+    "conda_name": "mne-gui-addons",
+    "import_name": "mne_gui_addons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-gui-addons"
+  },
+  "mne-icalabel": {
+    "conda_name": "mne-icalabel",
+    "import_name": "mne_icalabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-icalabel"
+  },
+  "mne-kit-gui": {
+    "conda_name": "mne-kit-gui",
+    "import_name": "mne_kit_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-kit-gui"
+  },
+  "mne-lsl": {
+    "conda_name": "mne-lsl",
+    "import_name": "mne_lsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-lsl"
+  },
+  "mne-microstates": {
+    "conda_name": "mne-microstates",
+    "import_name": "mne_microstates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-microstates"
+  },
+  "mne-nirs": {
+    "conda_name": "mne-nirs",
+    "import_name": "mne_nirs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-nirs"
+  },
+  "mne-qt-browser": {
+    "conda_name": "mne-qt-browser",
+    "import_name": "mne_qt_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-qt-browser"
+  },
+  "mne-realtime": {
+    "conda_name": "mne-realtime",
+    "import_name": "mne_realtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-realtime"
+  },
+  "mne-rsa": {
+    "conda_name": "mne-rsa",
+    "import_name": "mne_rsa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-rsa"
+  },
+  "mne-rt": {
+    "conda_name": "mne-rt",
+    "import_name": "mne_rt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-rt"
+  },
+  "mne-videobrowser": {
+    "conda_name": "mne-videobrowser",
+    "import_name": "mne_videobrowser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mne-videobrowser"
+  },
+  "mnist": {
+    "conda_name": "mnist",
+    "import_name": "mnist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mnist"
+  },
+  "mo-dots": {
+    "conda_name": "mo-dots",
+    "import_name": "mo_dots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mo-dots"
+  },
+  "mo-future": {
+    "conda_name": "mo-future",
+    "import_name": "mo_future",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mo-future"
+  },
+  "mo-imports": {
+    "conda_name": "mo-imports",
+    "import_name": "mo_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mo-imports"
+  },
+  "mo-kwargs": {
+    "conda_name": "mo-kwargs",
+    "import_name": "mo_kwargs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mo-kwargs"
+  },
+  "mo-logs": {
+    "conda_name": "mo-logs",
+    "import_name": "mo_logs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mo-logs"
+  },
+  "mobie": {
+    "conda_name": "mobie",
+    "import_name": "mobie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mobie"
+  },
+  "mock": {
+    "conda_name": "mock",
+    "import_name": "mock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mock"
+  },
+  "mockafka-py": {
+    "conda_name": "mockafka-py",
+    "import_name": "mockafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mockafka-py"
+  },
+  "mockextras": {
+    "conda_name": "mockextras",
+    "import_name": "mockextras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mockextras"
+  },
+  "mockupdb": {
+    "conda_name": "mockupdb",
+    "import_name": "mockupdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mockupdb"
+  },
+  "mocpy": {
+    "conda_name": "mocpy",
+    "import_name": "mocpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mocpy"
+  },
+  "mod-wsgi": {
+    "conda_name": "mod_wsgi",
+    "import_name": "mod_wsgi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mod-wsgi"
+  },
+  "model-bakery": {
+    "conda_name": "model_bakery",
+    "import_name": "model_bakery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "model-bakery"
+  },
+  "model-catalogs": {
+    "conda_name": "model_catalogs",
+    "import_name": "model_catalogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "model-catalogs"
+  },
+  "model-harmonics": {
+    "conda_name": "model-harmonics",
+    "import_name": "model_harmonics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "model-harmonics"
+  },
+  "model2vec": {
+    "conda_name": "model2vec",
+    "import_name": "model2vec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "model2vec"
+  },
+  "modelbase": {
+    "conda_name": "modelbase",
+    "import_name": "modelbase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelbase"
+  },
+  "modelcards": {
+    "conda_name": "modelcards",
+    "import_name": "modelcards",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelcards"
+  },
+  "modelcif": {
+    "conda_name": "modelcif",
+    "import_name": "modelcif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelcif"
+  },
+  "modelmimic": {
+    "conda_name": "modelmimic",
+    "import_name": "modelmimic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelmimic"
+  },
+  "modelparameters": {
+    "conda_name": "modelparameters",
+    "import_name": "modelparameters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelparameters"
+  },
+  "modelx": {
+    "conda_name": "modelx",
+    "import_name": "modelx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelx"
+  },
+  "modelx-cython": {
+    "conda_name": "modelx-cython",
+    "import_name": "modelx_cython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modelx-cython"
+  },
+  "modepy": {
+    "conda_name": "modepy",
+    "import_name": "modepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modepy"
+  },
+  "modernize": {
+    "conda_name": "modernize",
+    "import_name": "libmodernize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modernize"
+  },
+  "modestimage": {
+    "conda_name": "modestimage",
+    "import_name": "modest_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modestimage"
+  },
+  "modflow-devtools": {
+    "conda_name": "modflow-devtools",
+    "import_name": "modflow_devtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modflow-devtools"
+  },
+  "modflow-export": {
+    "conda_name": "modflow-export",
+    "import_name": "mfexport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modflow-export"
+  },
+  "modflow-setup": {
+    "conda_name": "modflow-setup",
+    "import_name": "mfsetup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modflow-setup"
+  },
+  "modflowapi": {
+    "conda_name": "modflowapi",
+    "import_name": "modflowapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modflowapi"
+  },
+  "modshim": {
+    "conda_name": "modshim",
+    "import_name": "modshim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modshim"
+  },
+  "module-utilities": {
+    "conda_name": "module-utilities",
+    "import_name": "module_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "module-utilities"
+  },
+  "modulegraph": {
+    "conda_name": "modulegraph",
+    "import_name": "modulegraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modulegraph"
+  },
+  "modulegraph2": {
+    "conda_name": "modulegraph2",
+    "import_name": "modulegraph2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modulegraph2"
+  },
+  "modzy-sdk": {
+    "conda_name": "modzy-sdk",
+    "import_name": "modzy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "modzy-sdk"
+  },
+  "moe-mediafile": {
+    "conda_name": "moe_mediafile",
+    "import_name": "mediafile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moe-mediafile"
+  },
+  "mofax": {
+    "conda_name": "mofax",
+    "import_name": "mofax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mofax"
+  },
+  "mofchecker": {
+    "conda_name": "mofchecker",
+    "import_name": "mofchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mofchecker"
+  },
+  "mofdscribe": {
+    "conda_name": "mofdscribe",
+    "import_name": "mofdscribe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mofdscribe"
+  },
+  "moffragmentor": {
+    "conda_name": "moffragmentor",
+    "import_name": "moffragmentor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moffragmentor"
+  },
+  "molcomplib": {
+    "conda_name": "molcomplib",
+    "import_name": "molcomplib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molcomplib"
+  },
+  "molecular-rectifier": {
+    "conda_name": "molecular-rectifier",
+    "import_name": "molecular_rectifier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molecular-rectifier"
+  },
+  "molecule": {
+    "conda_name": "molecule",
+    "import_name": "molecule",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molecule"
+  },
+  "molecule-docker": {
+    "conda_name": "molecule-docker",
+    "import_name": "molecule_docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molecule-docker"
+  },
+  "molecule-generation": {
+    "conda_name": "molecule-generation",
+    "import_name": "molecule_generation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molecule-generation"
+  },
+  "molecule-inspec": {
+    "conda_name": "molecule-inspec",
+    "import_name": "molecule_inspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molecule-inspec"
+  },
+  "moleculeace": {
+    "conda_name": "moleculeace",
+    "import_name": "MoleculeACE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moleculeace"
+  },
+  "moleculetda": {
+    "conda_name": "moleculetda",
+    "import_name": "moleculetda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moleculetda"
+  },
+  "molfeat": {
+    "conda_name": "molfeat",
+    "import_name": "molfeat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molfeat"
+  },
+  "molml": {
+    "conda_name": "molml",
+    "import_name": "molml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molml"
+  },
+  "molmod": {
+    "conda_name": "molmod",
+    "import_name": "molmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molmod"
+  },
+  "molpx": {
+    "conda_name": "molpx",
+    "import_name": "molpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molpx"
+  },
+  "mols2grid": {
+    "conda_name": "mols2grid",
+    "import_name": "mols2grid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mols2grid"
+  },
+  "molscrub": {
+    "conda_name": "molscrub",
+    "import_name": "molscrub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molscrub"
+  },
+  "molsystem": {
+    "conda_name": "molsystem",
+    "import_name": "molsystem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molsystem"
+  },
+  "moltemplate": {
+    "conda_name": "moltemplate",
+    "import_name": "moltemplate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moltemplate"
+  },
+  "molviewspec": {
+    "conda_name": "molviewspec",
+    "import_name": "molviewspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molviewspec"
+  },
+  "molvs": {
+    "conda_name": "molvs",
+    "import_name": "molvs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "molvs"
+  },
+  "momentchi2": {
+    "conda_name": "momentchi2",
+    "import_name": "momentchi2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "momentchi2"
+  },
+  "momepy": {
+    "conda_name": "momepy",
+    "import_name": "momepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "momepy"
+  },
+  "momlevel": {
+    "conda_name": "momlevel",
+    "import_name": "momlevel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "momlevel"
+  },
+  "mongogrant": {
+    "conda_name": "mongogrant",
+    "import_name": "mongogrant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mongogrant"
+  },
+  "mongomock": {
+    "conda_name": "mongomock",
+    "import_name": "mongomock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mongomock"
+  },
+  "monitor-server-api": {
+    "conda_name": "monitor-server-api",
+    "import_name": "monitor_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "monitor-server-api"
+  },
+  "monotonic": {
+    "conda_name": "monotonic",
+    "import_name": "monotonic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "monotonic"
+  },
+  "monotonicnetworks": {
+    "conda_name": "monotonicnetworks",
+    "import_name": "monotonicnetworks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "monotonicnetworks"
+  },
+  "montepy": {
+    "conda_name": "montepy",
+    "import_name": "montepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "montepy"
+  },
+  "montreal-forced-aligner": {
+    "conda_name": "montreal-forced-aligner",
+    "import_name": "montreal_forced_aligner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "montreal-forced-aligner"
+  },
+  "moola": {
+    "conda_name": "moola",
+    "import_name": "moola",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moola"
+  },
+  "moraine": {
+    "conda_name": "moraine",
+    "import_name": "moraine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moraine"
+  },
+  "mord": {
+    "conda_name": "mord",
+    "import_name": "mord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mord"
+  },
+  "mordred": {
+    "conda_name": "mordred",
+    "import_name": "mordred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mordred"
+  },
+  "mordredcommunity": {
+    "conda_name": "mordredcommunity",
+    "import_name": "mordred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mordredcommunity"
+  },
+  "more-click": {
+    "conda_name": "more-click",
+    "import_name": "more_click",
+    "mapping_source": "regro-bot",
+    "pypi_name": "more-click"
+  },
+  "more-forwarded": {
+    "conda_name": "more.forwarded",
+    "import_name": "more",
+    "mapping_source": "regro-bot",
+    "pypi_name": "more-forwarded"
+  },
+  "more-pathtool": {
+    "conda_name": "more.pathtool",
+    "import_name": "more",
+    "mapping_source": "regro-bot",
+    "pypi_name": "more-pathtool"
+  },
+  "more-static": {
+    "conda_name": "more.static",
+    "import_name": "more",
+    "mapping_source": "regro-bot",
+    "pypi_name": "more-static"
+  },
+  "morecantile": {
+    "conda_name": "morecantile",
+    "import_name": "morecantile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morecantile"
+  },
+  "morefs": {
+    "conda_name": "morefs",
+    "import_name": "morefs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morefs"
+  },
+  "morepath": {
+    "conda_name": "morepath",
+    "import_name": "morepath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morepath"
+  },
+  "morfessor": {
+    "conda_name": "morfessor",
+    "import_name": "morfessor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morfessor"
+  },
+  "morfeus-ml": {
+    "conda_name": "morfeus-ml",
+    "import_name": "morfeus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morfeus-ml"
+  },
+  "morph": {
+    "conda_name": "morph",
+    "import_name": "morph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morph"
+  },
+  "morphodynamics": {
+    "conda_name": "morphodynamics",
+    "import_name": "morphodynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphodynamics"
+  },
+  "morphometrics": {
+    "conda_name": "morphometrics",
+    "import_name": "morphometrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphometrics"
+  },
+  "morphometrics-engine": {
+    "conda_name": "morphometrics-engine",
+    "import_name": "morphometrics_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphometrics-engine"
+  },
+  "morphops": {
+    "conda_name": "morphops",
+    "import_name": "morphops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphops"
+  },
+  "morphosamplers": {
+    "conda_name": "morphosamplers",
+    "import_name": "morphosamplers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphosamplers"
+  },
+  "morphospaces": {
+    "conda_name": "morphospaces",
+    "import_name": "morphospaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphospaces"
+  },
+  "morphsnakes": {
+    "conda_name": "morphsnakes",
+    "import_name": "morphsnakes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "morphsnakes"
+  },
+  "mosaic-clustering": {
+    "conda_name": "mosaic-clustering",
+    "import_name": "mosaic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosaic-clustering"
+  },
+  "mosaicmpi": {
+    "conda_name": "mosaicmpi",
+    "import_name": "mosaicmpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosaicmpi"
+  },
+  "mosartwmpy": {
+    "conda_name": "mosartwmpy",
+    "import_name": "mosartwmpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosartwmpy"
+  },
+  "moscot": {
+    "conda_name": "moscot",
+    "import_name": "moscot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moscot"
+  },
+  "mosec": {
+    "conda_name": "mosec",
+    "import_name": "mosec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosec"
+  },
+  "mosestokenizer": {
+    "conda_name": "mosestokenizer",
+    "import_name": "mosestokenizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosestokenizer"
+  },
+  "mosfit": {
+    "conda_name": "mosfit",
+    "import_name": "mosfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mosfit"
+  },
+  "mostlyai-engine": {
+    "conda_name": "mostlyai-engine",
+    "import_name": "mostlyai.engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mostlyai-engine"
+  },
+  "motifcluster": {
+    "conda_name": "motifcluster",
+    "import_name": "motifcluster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "motifcluster"
+  },
+  "motile": {
+    "conda_name": "motile",
+    "import_name": "motile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "motile"
+  },
+  "motionless": {
+    "conda_name": "motionless",
+    "import_name": "motionless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "motionless"
+  },
+  "motmetrics": {
+    "conda_name": "motmetrics",
+    "import_name": "motmetrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "motmetrics"
+  },
+  "motor": {
+    "conda_name": "motor",
+    "import_name": "motor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "motor"
+  },
+  "mountainsort5": {
+    "conda_name": "mountainsort5",
+    "import_name": "mountainsort5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mountainsort5"
+  },
+  "movement": {
+    "conda_name": "movement",
+    "import_name": "movement",
+    "mapping_source": "regro-bot",
+    "pypi_name": "movement"
+  },
+  "moviepy": {
+    "conda_name": "moviepy",
+    "import_name": "moviepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moviepy"
+  },
+  "movingpandas": {
+    "conda_name": "movingpandas",
+    "import_name": "movingpandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "movingpandas"
+  },
+  "moz-sql-parser": {
+    "conda_name": "moz-sql-parser",
+    "import_name": "moz_sql_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "moz-sql-parser"
+  },
+  "mp-pyrho": {
+    "conda_name": "mp-pyrho",
+    "import_name": "pyrho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mp-pyrho"
+  },
+  "mp-pytorch": {
+    "conda_name": "mp_pytorch",
+    "import_name": "mp_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mp-pytorch"
+  },
+  "mpacklog": {
+    "conda_name": "mpacklog",
+    "import_name": "mpacklog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpacklog"
+  },
+  "mpackview": {
+    "conda_name": "mpackview",
+    "import_name": "mpackview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpackview"
+  },
+  "mpart": {
+    "conda_name": "mpart",
+    "import_name": "mpart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpart"
+  },
+  "mpc-obscodes": {
+    "conda_name": "mpc-obscodes",
+    "import_name": "mpc_obscodes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpc-obscodes"
+  },
+  "mpcontribs-client": {
+    "conda_name": "mpcontribs-client",
+    "import_name": "mpcontribs.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpcontribs-client"
+  },
+  "mpcq": {
+    "conda_name": "mpcq",
+    "import_name": "mpcq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpcq"
+  },
+  "mpeg1audio": {
+    "conda_name": "mpeg1audio",
+    "import_name": "mpeg1audio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpeg1audio"
+  },
+  "mpire": {
+    "conda_name": "mpire",
+    "import_name": "mpire",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpire"
+  },
+  "mpl-animators": {
+    "conda_name": "mpl_animators",
+    "import_name": "mpl_animators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-animators"
+  },
+  "mpl-gui": {
+    "conda_name": "mpl-gui",
+    "import_name": "mpl_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-gui"
+  },
+  "mpl-interactions": {
+    "conda_name": "mpl-interactions",
+    "import_name": "mpl_interactions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-interactions"
+  },
+  "mpl-plotter": {
+    "conda_name": "mpl_plotter",
+    "import_name": "mpl_plotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-plotter"
+  },
+  "mpl-point-clicker": {
+    "conda_name": "mpl-point-clicker",
+    "import_name": "mpl_point_clicker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-point-clicker"
+  },
+  "mpl-qt-viz": {
+    "conda_name": "mpl_qt_viz",
+    "import_name": "mpl_qt_viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-qt-viz"
+  },
+  "mpl-qtthread": {
+    "conda_name": "mpl-qtthread",
+    "import_name": "mpl_qtthread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-qtthread"
+  },
+  "mpl-scatter-density": {
+    "conda_name": "mpl-scatter-density",
+    "import_name": "mpl_scatter_density",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-scatter-density"
+  },
+  "mpl-sphinx-theme": {
+    "conda_name": "mpl-sphinx-theme",
+    "import_name": "mpl_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-sphinx-theme"
+  },
+  "mpl-table": {
+    "conda_name": "mpl_table",
+    "import_name": "mpl_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-table"
+  },
+  "mpl-template": {
+    "conda_name": "mpl-template",
+    "import_name": "mpl_template",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpl-template"
+  },
+  "mplcairo": {
+    "conda_name": "mplcairo",
+    "import_name": "mplcairo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplcairo"
+  },
+  "mplcursors": {
+    "conda_name": "mplcursors",
+    "import_name": "mplcursors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplcursors"
+  },
+  "mpld3": {
+    "conda_name": "mpld3",
+    "import_name": "mpld3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpld3"
+  },
+  "mpldatacursor": {
+    "conda_name": "mpldatacursor",
+    "import_name": "mpldatacursor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpldatacursor"
+  },
+  "mplhep-data": {
+    "conda_name": "mplhep_data",
+    "import_name": "mplhep_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplhep-data"
+  },
+  "mplleaflet": {
+    "conda_name": "mplleaflet",
+    "import_name": "mplleaflet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplleaflet"
+  },
+  "mplotutils": {
+    "conda_name": "mplotutils",
+    "import_name": "mplotutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplotutils"
+  },
+  "mplsignal": {
+    "conda_name": "mplsignal",
+    "import_name": "mplsignal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplsignal"
+  },
+  "mplsoccer": {
+    "conda_name": "mplsoccer",
+    "import_name": "mplsoccer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplsoccer"
+  },
+  "mplstereonet": {
+    "conda_name": "mplstereonet",
+    "import_name": "mplstereonet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplstereonet"
+  },
+  "mpltern": {
+    "conda_name": "mpltern",
+    "import_name": "mpltern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpltern"
+  },
+  "mplview": {
+    "conda_name": "mplview",
+    "import_name": "mplview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mplview"
+  },
+  "mpmath": {
+    "conda_name": "mpmath",
+    "import_name": "mpmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpmath"
+  },
+  "mprod-package": {
+    "conda_name": "mprod-package",
+    "import_name": "mprod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mprod-package"
+  },
+  "mps-motion": {
+    "conda_name": "mps-motion",
+    "import_name": "mps_motion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mps-motion"
+  },
+  "mputil": {
+    "conda_name": "mputil",
+    "import_name": "mputil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mputil"
+  },
+  "mpxj": {
+    "conda_name": "mpxj",
+    "import_name": "mpxj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpxj"
+  },
+  "mpython-core": {
+    "conda_name": "mpython-core",
+    "import_name": "mpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mpython-core"
+  },
+  "mr-bob": {
+    "conda_name": "mr.bob",
+    "import_name": "mrbob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mr-bob"
+  },
+  "mr-proper": {
+    "conda_name": "mr-proper",
+    "import_name": "mr_proper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mr-proper"
+  },
+  "mrc": {
+    "conda_name": "mrc",
+    "import_name": "mrc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrc"
+  },
+  "mrcfile": {
+    "conda_name": "mrcfile",
+    "import_name": "mrcfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrcfile"
+  },
+  "mrcz": {
+    "conda_name": "mrcz",
+    "import_name": "mrcz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrcz"
+  },
+  "mrio-common-metadata": {
+    "conda_name": "mrio_common_metadata",
+    "import_name": "mrio_common_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrio-common-metadata"
+  },
+  "mrjob": {
+    "conda_name": "mrjob",
+    "import_name": "mrjob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrjob"
+  },
+  "mrs-denoising-tools": {
+    "conda_name": "mrs_denoising_tools",
+    "import_name": "mrs_denoising",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mrs-denoising-tools"
+  },
+  "ms-entropy": {
+    "conda_name": "ms_entropy",
+    "import_name": "ms_entropy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ms-entropy"
+  },
+  "msal": {
+    "conda_name": "msal",
+    "import_name": "msal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msal"
+  },
+  "msal-requests-auth": {
+    "conda_name": "msal_requests_auth",
+    "import_name": "msal_requests_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msal-requests-auth"
+  },
+  "msgfy": {
+    "conda_name": "msgfy",
+    "import_name": "msgfy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msgfy"
+  },
+  "msgraph-sdk": {
+    "conda_name": "msgraph-sdk",
+    "import_name": "msgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msgraph-sdk"
+  },
+  "mslex": {
+    "conda_name": "mslex",
+    "import_name": "mslex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mslex"
+  },
+  "msmbuilder": {
+    "conda_name": "msmbuilder",
+    "import_name": "msmbuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msmbuilder"
+  },
+  "msmhelper": {
+    "conda_name": "msmhelper",
+    "import_name": "msmhelper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msmhelper"
+  },
+  "msmtools": {
+    "conda_name": "msmtools",
+    "import_name": "msmtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msmtools"
+  },
+  "msnoise": {
+    "conda_name": "msnoise",
+    "import_name": "msnoise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msnoise"
+  },
+  "msprime": {
+    "conda_name": "msprime",
+    "import_name": "msprime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msprime"
+  },
+  "msrest": {
+    "conda_name": "msrest",
+    "import_name": "msrest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msrest"
+  },
+  "msrestazure": {
+    "conda_name": "msrestazure",
+    "import_name": "msrestazure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msrestazure"
+  },
+  "mss": {
+    "conda_name": "python-mss",
+    "import_name": "mss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mss"
+  },
+  "mssql-django": {
+    "conda_name": "mssql-django",
+    "import_name": "mssql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mssql-django"
+  },
+  "msumastro": {
+    "conda_name": "msumastro",
+    "import_name": "msumastro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "msumastro"
+  },
+  "mt-io": {
+    "conda_name": "mt-io",
+    "import_name": "mt_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mt-io"
+  },
+  "mt-metadata": {
+    "conda_name": "mt-metadata",
+    "import_name": "mt_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mt-metadata"
+  },
+  "mt-timeseries": {
+    "conda_name": "mt-timeseries",
+    "import_name": "mt_timeseries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mt-timeseries"
+  },
+  "mtcnn": {
+    "conda_name": "mtcnn",
+    "import_name": "mtcnn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mtcnn"
+  },
+  "mth5": {
+    "conda_name": "mth5",
+    "import_name": "mth5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mth5"
+  },
+  "mtpy-v2": {
+    "conda_name": "mtpy-v2",
+    "import_name": "mtpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mtpy-v2"
+  },
+  "mu-repo": {
+    "conda_name": "mu_repo",
+    "import_name": "mu_repo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mu-repo"
+  },
+  "muarch": {
+    "conda_name": "muarch",
+    "import_name": "muarch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "muarch"
+  },
+  "mudata": {
+    "conda_name": "mudata",
+    "import_name": "mudata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mudata"
+  },
+  "mujoco-python-viewer": {
+    "conda_name": "mujoco-python-viewer",
+    "import_name": "mujoco_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mujoco-python-viewer"
+  },
+  "muler": {
+    "conda_name": "muler",
+    "import_name": "muler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "muler"
+  },
+  "multi-key-dict": {
+    "conda_name": "multi_key_dict",
+    "import_name": "multi_key_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multi-key-dict"
+  },
+  "multi-rake": {
+    "conda_name": "multi_rake",
+    "import_name": "multi_rake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multi-rake"
+  },
+  "multiaddr": {
+    "conda_name": "multiaddr",
+    "import_name": "multiaddr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiaddr"
+  },
+  "multiclean": {
+    "conda_name": "multiclean",
+    "import_name": "multiclean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiclean"
+  },
+  "multicollections": {
+    "conda_name": "multicollections",
+    "import_name": "multicollections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multicollections"
+  },
+  "multidimio": {
+    "conda_name": "multidimio",
+    "import_name": "mdio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multidimio"
+  },
+  "multiformats": {
+    "conda_name": "multiformats",
+    "import_name": "multiformats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiformats"
+  },
+  "multifutures": {
+    "conda_name": "multifutures",
+    "import_name": "multifutures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multifutures"
+  },
+  "multimethod": {
+    "conda_name": "multimethod",
+    "import_name": "multimethod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multimethod"
+  },
+  "multio": {
+    "conda_name": "multio",
+    "import_name": "multio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multio"
+  },
+  "multipart": {
+    "conda_name": "multipart",
+    "import_name": "multipart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multipart"
+  },
+  "multipers": {
+    "conda_name": "multipers",
+    "import_name": "multipers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multipers"
+  },
+  "multiping": {
+    "conda_name": "multiping",
+    "import_name": "multiping",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiping"
+  },
+  "multiprocessing-on-dill": {
+    "conda_name": "multiprocessing_on_dill",
+    "import_name": "multiprocessing_on_dill",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiprocessing-on-dill"
+  },
+  "multiregex": {
+    "conda_name": "multiregex",
+    "import_name": "multiregex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiregex"
+  },
+  "multirtc": {
+    "conda_name": "multirtc",
+    "import_name": "multirtc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multirtc"
+  },
+  "multiscale-spatial-image": {
+    "conda_name": "multiscale-spatial-image",
+    "import_name": "multiscale_spatial_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiscale-spatial-image"
+  },
+  "multiset": {
+    "conda_name": "multiset",
+    "import_name": "multiset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiset"
+  },
+  "multispaeti": {
+    "conda_name": "multispaeti",
+    "import_name": "multispaeti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multispaeti"
+  },
+  "multisplitby": {
+    "conda_name": "multisplitby",
+    "import_name": "multisplitby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multisplitby"
+  },
+  "multitaper": {
+    "conda_name": "multitaper",
+    "import_name": "multitaper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multitaper"
+  },
+  "multitasking": {
+    "conda_name": "multitasking",
+    "import_name": "multitasking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multitasking"
+  },
+  "multiurl": {
+    "conda_name": "multiurl",
+    "import_name": "multiurl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiurl"
+  },
+  "multiuserfilelock": {
+    "conda_name": "multiuserfilelock",
+    "import_name": "multiuserfilelock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiuserfilelock"
+  },
+  "multiviewica": {
+    "conda_name": "multiviewica",
+    "import_name": "multiviewica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiviewica"
+  },
+  "multivolumefile": {
+    "conda_name": "multivolumefile",
+    "import_name": "multivolumefile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multivolumefile"
+  },
+  "multiwebcam": {
+    "conda_name": "multiwebcam",
+    "import_name": "multiwebcam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "multiwebcam"
+  },
+  "mumax3c": {
+    "conda_name": "mumax3c",
+    "import_name": "mumax3c",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mumax3c"
+  },
+  "munch": {
+    "conda_name": "munch",
+    "import_name": "munch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "munch"
+  },
+  "mup": {
+    "conda_name": "mup",
+    "import_name": "mup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mup"
+  },
+  "murky": {
+    "conda_name": "murky",
+    "import_name": "murky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "murky"
+  },
+  "murphy": {
+    "conda_name": "murphy",
+    "import_name": "murphy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "murphy"
+  },
+  "musdb": {
+    "conda_name": "musdb",
+    "import_name": "musdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "musdb"
+  },
+  "museval": {
+    "conda_name": "museval",
+    "import_name": "museval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "museval"
+  },
+  "music21": {
+    "conda_name": "music21",
+    "import_name": "music21",
+    "mapping_source": "regro-bot",
+    "pypi_name": "music21"
+  },
+  "musicbrainzngs": {
+    "conda_name": "musicbrainzngs",
+    "import_name": "musicbrainzngs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "musicbrainzngs"
+  },
+  "muspinsim": {
+    "conda_name": "muspinsim",
+    "import_name": "muspinsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "muspinsim"
+  },
+  "mutatest": {
+    "conda_name": "mutatest",
+    "import_name": "mutatest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mutatest"
+  },
+  "mutpy": {
+    "conda_name": "mutpy",
+    "import_name": "mutpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mutpy"
+  },
+  "mutpy-pynguin": {
+    "conda_name": "mutpy-pynguin",
+    "import_name": "mutpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mutpy-pynguin"
+  },
+  "muttlib": {
+    "conda_name": "muttlib",
+    "import_name": "muttlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "muttlib"
+  },
+  "mvgavg": {
+    "conda_name": "mvgavg",
+    "import_name": "mvgavg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mvgavg"
+  },
+  "mvt": {
+    "conda_name": "mvt",
+    "import_name": "mvt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mvt"
+  },
+  "mvtb-data": {
+    "conda_name": "mvtb-data",
+    "import_name": "mvtbdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mvtb-data"
+  },
+  "mwclient": {
+    "conda_name": "mwclient",
+    "import_name": "mwclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mwclient"
+  },
+  "mwprop": {
+    "conda_name": "mwprop",
+    "import_name": "mwprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mwprop"
+  },
+  "mxtools": {
+    "conda_name": "mxtools",
+    "import_name": "mxtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mxtools"
+  },
+  "my-jupyter-shared-drive": {
+    "conda_name": "my-jupyter-shared-drive",
+    "import_name": "my_jupyter_shared_drive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "my-jupyter-shared-drive"
+  },
+  "mycli": {
+    "conda_name": "mycli",
+    "import_name": "mycli.packages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mycli"
+  },
+  "myerson": {
+    "conda_name": "myerson",
+    "import_name": "myerson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myerson"
+  },
+  "mygeopackage": {
+    "conda_name": "mygeopackage",
+    "import_name": "mygeopackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mygeopackage"
+  },
+  "myhdl": {
+    "conda_name": "myhdl",
+    "import_name": "myhdl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myhdl"
+  },
+  "myproxyclient": {
+    "conda_name": "myproxyclient",
+    "import_name": "myproxy.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myproxyclient"
+  },
+  "mypy-boto3-batch": {
+    "conda_name": "mypy-boto3-batch",
+    "import_name": "mypy_boto3_batch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-batch"
+  },
+  "mypy-boto3-builder": {
+    "conda_name": "mypy_boto3_builder",
+    "import_name": "mypy_boto3_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-builder"
+  },
+  "mypy-boto3-cloudwatch": {
+    "conda_name": "mypy-boto3-cloudwatch",
+    "import_name": "mypy_boto3_cloudwatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-cloudwatch"
+  },
+  "mypy-boto3-glue": {
+    "conda_name": "mypy-boto3-glue",
+    "import_name": "mypy_boto3_glue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-glue"
+  },
+  "mypy-boto3-logs": {
+    "conda_name": "mypy-boto3-logs",
+    "import_name": "mypy_boto3_logs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-logs"
+  },
+  "mypy-boto3-secretsmanager": {
+    "conda_name": "mypy-boto3-secretsmanager",
+    "import_name": "mypy_boto3_secretsmanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-secretsmanager"
+  },
+  "mypy-boto3-ses": {
+    "conda_name": "mypy-boto3-ses",
+    "import_name": "mypy_boto3_ses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-ses"
+  },
+  "mypy-boto3-ssm": {
+    "conda_name": "mypy-boto3-ssm",
+    "import_name": "mypy_boto3_ssm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-ssm"
+  },
+  "mypy-boto3-textract": {
+    "conda_name": "mypy-boto3-textract",
+    "import_name": "mypy_boto3_textract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-boto3-textract"
+  },
+  "mypy-coverage": {
+    "conda_name": "mypy-coverage",
+    "import_name": "mypy_coverage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-coverage"
+  },
+  "mypy-extensions": {
+    "conda_name": "mypy_extensions",
+    "import_name": "mypy_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-extensions"
+  },
+  "mypy-protobuf": {
+    "conda_name": "mypy-protobuf",
+    "import_name": "mypy_protobuf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mypy-protobuf"
+  },
+  "myst-nb-bokeh": {
+    "conda_name": "myst-nb-bokeh",
+    "import_name": "myst_nb_bokeh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myst-nb-bokeh"
+  },
+  "myst-parser": {
+    "conda_name": "myst-parser",
+    "import_name": "myst_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myst-parser"
+  },
+  "myst-sphinx-gallery": {
+    "conda_name": "myst-sphinx-gallery",
+    "import_name": "myst_sphinx_gallery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "myst-sphinx-gallery"
+  },
+  "mythx-models": {
+    "conda_name": "mythx-models",
+    "import_name": "mythx_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "mythx-models"
+  },
+  "n2snusertools": {
+    "conda_name": "n2snusertools",
+    "import_name": "N2SNUserTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "n2snusertools"
+  },
+  "n2v": {
+    "conda_name": "n2v",
+    "import_name": "n2v",
+    "mapping_source": "regro-bot",
+    "pypi_name": "n2v"
+  },
+  "naaf": {
+    "conda_name": "naaf",
+    "import_name": "naaf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naaf"
+  },
+  "naif-de440": {
+    "conda_name": "naif_de440",
+    "import_name": "naif_de440",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-de440"
+  },
+  "naif-earth-itrf93": {
+    "conda_name": "naif_earth_itrf93",
+    "import_name": "naif_earth_itrf93",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-earth-itrf93"
+  },
+  "naif-eop-high-prec": {
+    "conda_name": "naif_eop_high_prec",
+    "import_name": "naif_eop_high_prec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-eop-high-prec"
+  },
+  "naif-eop-historical": {
+    "conda_name": "naif_eop_historical",
+    "import_name": "naif_eop_historical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-eop-historical"
+  },
+  "naif-eop-predict": {
+    "conda_name": "naif_eop_predict",
+    "import_name": "naif_eop_predict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-eop-predict"
+  },
+  "naif-leapseconds": {
+    "conda_name": "naif_leapseconds",
+    "import_name": "naif_leapseconds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naif-leapseconds"
+  },
+  "naima": {
+    "conda_name": "naima",
+    "import_name": "naima",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naima"
+  },
+  "naked": {
+    "conda_name": "naked",
+    "import_name": "Naked",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naked"
+  },
+  "nambazasimu": {
+    "conda_name": "nambazasimu",
+    "import_name": "nambazasimu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nambazasimu"
+  },
+  "name-that-hash": {
+    "conda_name": "name_that_hash",
+    "import_name": "name_that_hash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "name-that-hash"
+  },
+  "namedlist": {
+    "conda_name": "namedlist",
+    "import_name": "namedlist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "namedlist"
+  },
+  "namex": {
+    "conda_name": "namex",
+    "import_name": "namex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "namex"
+  },
+  "nannyml": {
+    "conda_name": "nannyml",
+    "import_name": "nannyml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nannyml"
+  },
+  "nanocube": {
+    "conda_name": "nanocube",
+    "import_name": "nanocube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nanocube"
+  },
+  "nanotime": {
+    "conda_name": "nanotime",
+    "import_name": "nanotime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nanotime"
+  },
+  "nap-plot-tools": {
+    "conda_name": "nap-plot-tools",
+    "import_name": "nap_plot_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nap-plot-tools"
+  },
+  "napari-3d-counter": {
+    "conda_name": "napari-3d-counter",
+    "import_name": "napari_3d_counter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-3d-counter"
+  },
+  "napari-3d-ortho-viewer": {
+    "conda_name": "napari-3d-ortho-viewer",
+    "import_name": "napari_3d_ortho_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-3d-ortho-viewer"
+  },
+  "napari-accelerated-pixel-and-object-classification": {
+    "conda_name": "napari-accelerated-pixel-and-object-classification",
+    "import_name": "napari_accelerated_pixel_and_object_classification",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-accelerated-pixel-and-object-classification"
+  },
+  "napari-affinities": {
+    "conda_name": "napari-affinities",
+    "import_name": "napari_affinities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-affinities"
+  },
+  "napari-aicsimageio": {
+    "conda_name": "napari-aicsimageio",
+    "import_name": "napari_aicsimageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-aicsimageio"
+  },
+  "napari-aideveloper": {
+    "conda_name": "napari-aideveloper",
+    "import_name": "napari_aideveloper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-aideveloper"
+  },
+  "napari-allencell-annotator": {
+    "conda_name": "napari-allencell-annotator",
+    "import_name": "napari_allencell_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-allencell-annotator"
+  },
+  "napari-allencell-segmenter": {
+    "conda_name": "napari-allencell-segmenter",
+    "import_name": "napari_allencell_segmenter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-allencell-segmenter"
+  },
+  "napari-amdtrk": {
+    "conda_name": "napari-amdtrk",
+    "import_name": "napari_amdtrk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-amdtrk"
+  },
+  "napari-animated-gif-io": {
+    "conda_name": "napari-animated-gif-io",
+    "import_name": "napari_animated_gif_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-animated-gif-io"
+  },
+  "napari-animation": {
+    "conda_name": "napari-animation",
+    "import_name": "napari_animation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-animation"
+  },
+  "napari-annotate": {
+    "conda_name": "napari-annotate",
+    "import_name": "napari_annotate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-annotate"
+  },
+  "napari-annotation-project": {
+    "conda_name": "napari-annotation-project",
+    "import_name": "napari_annotation_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-annotation-project"
+  },
+  "napari-annotator": {
+    "conda_name": "napari-annotator",
+    "import_name": "napari_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-annotator"
+  },
+  "napari-annotatorj": {
+    "conda_name": "napari-annotatorj",
+    "import_name": "napari_annotatorj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-annotatorj"
+  },
+  "napari-aphid": {
+    "conda_name": "napari-aphid",
+    "import_name": "napari_aphid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-aphid"
+  },
+  "napari-arboretum": {
+    "conda_name": "napari-arboretum",
+    "import_name": "napari_arboretum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-arboretum"
+  },
+  "napari-assistant": {
+    "conda_name": "napari-assistant",
+    "import_name": "napari_assistant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-assistant"
+  },
+  "napari-assistant-plugin-generator": {
+    "conda_name": "napari-assistant-plugin-generator",
+    "import_name": "napari_assistant_plugin_generator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-assistant-plugin-generator"
+  },
+  "napari-bbox": {
+    "conda_name": "napari-bbox",
+    "import_name": "napari_bbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bbox"
+  },
+  "napari-bfio": {
+    "conda_name": "napari-bfio",
+    "import_name": "napari_bfio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bfio"
+  },
+  "napari-bigfish": {
+    "conda_name": "napari-bigfish",
+    "import_name": "napari_bigfish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bigfish"
+  },
+  "napari-bigwarp": {
+    "conda_name": "napari-bigwarp",
+    "import_name": "napari_bigwarp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bigwarp"
+  },
+  "napari-bil-data-viewer": {
+    "conda_name": "napari-bil-data-viewer",
+    "import_name": "napari_bil_data_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bil-data-viewer"
+  },
+  "napari-bio-sample-data": {
+    "conda_name": "napari-bio-sample-data",
+    "import_name": "napari_bio_sample_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bio-sample-data"
+  },
+  "napari-bioimageio": {
+    "conda_name": "napari-bioimageio",
+    "import_name": "napari_bioimageio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bioimageio"
+  },
+  "napari-bleach-correct": {
+    "conda_name": "napari-bleach-correct",
+    "import_name": "napari_bleach_correct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bleach-correct"
+  },
+  "napari-blender-bridge": {
+    "conda_name": "napari-blender-bridge",
+    "import_name": "napari_blender_bridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-blender-bridge"
+  },
+  "napari-blob-detection": {
+    "conda_name": "napari-blob-detection",
+    "import_name": "napari_blob_detection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-blob-detection"
+  },
+  "napari-blossom": {
+    "conda_name": "napari-blossom",
+    "import_name": "napari_blossom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-blossom"
+  },
+  "napari-boardgame-maker": {
+    "conda_name": "napari-boardgame-maker",
+    "import_name": "napari_boardgame_maker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-boardgame-maker"
+  },
+  "napari-boids": {
+    "conda_name": "napari-boids",
+    "import_name": "napari_boids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-boids"
+  },
+  "napari-boxmanager": {
+    "conda_name": "napari-boxmanager",
+    "import_name": "box_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-boxmanager"
+  },
+  "napari-brainbow-diagnose": {
+    "conda_name": "napari-brainbow-diagnose",
+    "import_name": "napari_brainbow_diagnose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-brainbow-diagnose"
+  },
+  "napari-brightness-contrast": {
+    "conda_name": "napari-brightness-contrast",
+    "import_name": "napari_brightness_contrast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-brightness-contrast"
+  },
+  "napari-brushsettings": {
+    "conda_name": "napari-brushsettings",
+    "import_name": "napari_brushsettings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-brushsettings"
+  },
+  "napari-btrack-reader": {
+    "conda_name": "napari-btrack-reader",
+    "import_name": "napari_btrack_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-btrack-reader"
+  },
+  "napari-bud-cell-segmenter": {
+    "conda_name": "napari-bud-cell-segmenter",
+    "import_name": "napari_bud_cell_segmenter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-bud-cell-segmenter"
+  },
+  "napari-buds": {
+    "conda_name": "napari-buds",
+    "import_name": "napari_buds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-buds"
+  },
+  "napari-caphid": {
+    "conda_name": "napari-caphid",
+    "import_name": "napari_caphid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-caphid"
+  },
+  "napari-ccp4map": {
+    "conda_name": "napari-ccp4map",
+    "import_name": "napari_ccp4map",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ccp4map"
+  },
+  "napari-cell-centroid-annotator": {
+    "conda_name": "napari-cell-centroid-annotator",
+    "import_name": "napari_cell_centroid_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-cell-centroid-annotator"
+  },
+  "napari-cellseg3d": {
+    "conda_name": "napari-cellseg3d",
+    "import_name": "napari_cellseg3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-cellseg3d"
+  },
+  "napari-clipboard": {
+    "conda_name": "napari-clipboard",
+    "import_name": "napari_clipboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-clipboard"
+  },
+  "napari-clusters-plotter": {
+    "conda_name": "napari-clusters-plotter",
+    "import_name": "napari_clusters_plotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-clusters-plotter"
+  },
+  "napari-compressed-labels-io": {
+    "conda_name": "napari-compressed-labels-io",
+    "import_name": "napari_compressed_labels_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-compressed-labels-io"
+  },
+  "napari-conidie": {
+    "conda_name": "napari-conidie",
+    "import_name": "napari_conidie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-conidie"
+  },
+  "napari-console": {
+    "conda_name": "napari-console",
+    "import_name": "napari_console",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-console"
+  },
+  "napari-convpaint": {
+    "conda_name": "napari-convpaint",
+    "import_name": "napari_convpaint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-convpaint"
+  },
+  "napari-correct-drift": {
+    "conda_name": "napari-correct-drift",
+    "import_name": "napari_correct_drift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-correct-drift"
+  },
+  "napari-crop": {
+    "conda_name": "napari-crop",
+    "import_name": "napari_crop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-crop"
+  },
+  "napari-cryofibsem-monitor": {
+    "conda_name": "napari-cryofibsem-monitor",
+    "import_name": "napari_cryofibsem_monitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-cryofibsem-monitor"
+  },
+  "napari-cupy-image-processing": {
+    "conda_name": "napari-cupy-image-processing",
+    "import_name": "napari_cupy_image_processing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-cupy-image-processing"
+  },
+  "napari-cursor-tracker": {
+    "conda_name": "napari-cursor-tracker",
+    "import_name": "napari_cursor_tracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-cursor-tracker"
+  },
+  "napari-curtain": {
+    "conda_name": "napari-curtain",
+    "import_name": "napari_curtain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-curtain"
+  },
+  "napari-czann-segment": {
+    "conda_name": "napari-czann-segment",
+    "import_name": "napari_czann_segment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-czann-segment"
+  },
+  "napari-czifile2": {
+    "conda_name": "napari-czifile2",
+    "import_name": "napari_czifile2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-czifile2"
+  },
+  "napari-deeplabcut": {
+    "conda_name": "napari-deeplabcut",
+    "import_name": "napari_deeplabcut",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-deeplabcut"
+  },
+  "napari-deepmeta": {
+    "conda_name": "napari-deepmeta",
+    "import_name": "deepmeta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-deepmeta"
+  },
+  "napari-deepspot": {
+    "conda_name": "napari-deepspot",
+    "import_name": "napari_deepspot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-deepspot"
+  },
+  "napari-dexp": {
+    "conda_name": "napari-dexp",
+    "import_name": "napari_dexp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-dexp"
+  },
+  "napari-dv": {
+    "conda_name": "napari-dv",
+    "import_name": "napari_dv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-dv"
+  },
+  "napari-dvid": {
+    "conda_name": "napari-dvid",
+    "import_name": "napari_dvid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-dvid"
+  },
+  "napari-dzi-zarr": {
+    "conda_name": "napari-dzi-zarr",
+    "import_name": "napari_dzi_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-dzi-zarr"
+  },
+  "napari-elementary-numpy-operations": {
+    "conda_name": "napari-elementary-numpy-operations",
+    "import_name": "napari_elementary_numpy_operations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-elementary-numpy-operations"
+  },
+  "napari-em-reader": {
+    "conda_name": "napari-em-reader",
+    "import_name": "napari_em_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-em-reader"
+  },
+  "napari-emd": {
+    "conda_name": "napari-emd",
+    "import_name": "napari_emd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-emd"
+  },
+  "napari-error-reporter": {
+    "conda_name": "napari-error-reporter",
+    "import_name": "napari_error_reporter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-error-reporter"
+  },
+  "napari-feature-classifier": {
+    "conda_name": "napari-feature-classifier",
+    "import_name": "napari_feature_classifier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-feature-classifier"
+  },
+  "napari-features": {
+    "conda_name": "napari-features",
+    "import_name": "napari_features",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-features"
+  },
+  "napari-features-selector": {
+    "conda_name": "napari-features-selector",
+    "import_name": "napari_features_selector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-features-selector"
+  },
+  "napari-filament-annotator": {
+    "conda_name": "napari-filament-annotator",
+    "import_name": "napari_filament_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-filament-annotator"
+  },
+  "napari-filaments": {
+    "conda_name": "napari-filaments",
+    "import_name": "napari_filaments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-filaments"
+  },
+  "napari-file-watcher": {
+    "conda_name": "napari-file-watcher",
+    "import_name": "napari_file_watcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-file-watcher"
+  },
+  "napari-folder-browser": {
+    "conda_name": "napari-folder-browser",
+    "import_name": "napari_folder_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-folder-browser"
+  },
+  "napari-gemspa": {
+    "conda_name": "napari-gemspa",
+    "import_name": "napari_gemspa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-gemspa"
+  },
+  "napari-generic-simulator": {
+    "conda_name": "napari-generic-simulator",
+    "import_name": "napari_generic_simulator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-generic-simulator"
+  },
+  "napari-geojson": {
+    "conda_name": "napari-geojson",
+    "import_name": "napari_geojson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-geojson"
+  },
+  "napari-geoscience-viewer": {
+    "conda_name": "napari-geoscience-viewer",
+    "import_name": "napari_geoscience_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-geoscience-viewer"
+  },
+  "napari-graph": {
+    "conda_name": "napari-graph",
+    "import_name": "napari_graph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-graph"
+  },
+  "napari-griottes": {
+    "conda_name": "napari-griottes",
+    "import_name": "napari_griottes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-griottes"
+  },
+  "napari-gruvbox": {
+    "conda_name": "napari-gruvbox",
+    "import_name": "napari_gruvbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-gruvbox"
+  },
+  "napari-guitils": {
+    "conda_name": "napari-guitils",
+    "import_name": "napari_guitils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-guitils"
+  },
+  "napari-h5": {
+    "conda_name": "napari-h5",
+    "import_name": "napari_h5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-h5"
+  },
+  "napari-hdf5-labels-io": {
+    "conda_name": "napari-hdf5-labels-io",
+    "import_name": "napari_hdf5_labels_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-hdf5-labels-io"
+  },
+  "napari-hdf5-netcdf-viewer": {
+    "conda_name": "napari-hdf5-netcdf-viewer",
+    "import_name": "napari_hdf5_netcdf_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-hdf5-netcdf-viewer"
+  },
+  "napari-help": {
+    "conda_name": "napari-help",
+    "import_name": "napari_help",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-help"
+  },
+  "napari-hierarchical": {
+    "conda_name": "napari-hierarchical",
+    "import_name": "napari_hierarchical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-hierarchical"
+  },
+  "napari-hough-circle-detector": {
+    "conda_name": "napari-hough-circle-detector",
+    "import_name": "napari_hough_circle_detector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-hough-circle-detector"
+  },
+  "napari-image-stacker": {
+    "conda_name": "napari-image-stacker",
+    "import_name": "napari_image_stacker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-image-stacker"
+  },
+  "napari-imagej": {
+    "conda_name": "napari-imagej",
+    "import_name": "napari_imagej",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-imagej"
+  },
+  "napari-imaris-loader": {
+    "conda_name": "napari-imaris-loader",
+    "import_name": "napari_imaris_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-imaris-loader"
+  },
+  "napari-imc": {
+    "conda_name": "napari-imc",
+    "import_name": "napari_imc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-imc"
+  },
+  "napari-imsmicrolink": {
+    "conda_name": "napari-imsmicrolink",
+    "import_name": "napari_imsmicrolink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-imsmicrolink"
+  },
+  "napari-indices": {
+    "conda_name": "napari-indices",
+    "import_name": "napari_indices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-indices"
+  },
+  "napari-input-visualizer": {
+    "conda_name": "napari-input-visualizer",
+    "import_name": "napari_input_visualizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-input-visualizer"
+  },
+  "napari-ip-workflow": {
+    "conda_name": "napari-ip-workflow",
+    "import_name": "napari_ip_workflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ip-workflow"
+  },
+  "napari-ism": {
+    "conda_name": "napari-ism",
+    "import_name": "napari_ism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ism"
+  },
+  "napari-itk-io": {
+    "conda_name": "napari-itk-io",
+    "import_name": "napari_itk_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-itk-io"
+  },
+  "napari-j": {
+    "conda_name": "napari-j",
+    "import_name": "napari_j",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-j"
+  },
+  "napari-kics": {
+    "conda_name": "napari-kics",
+    "import_name": "napari_kics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-kics"
+  },
+  "napari-label-interpolator": {
+    "conda_name": "napari-label-interpolator",
+    "import_name": "napari_label_interpolator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-label-interpolator"
+  },
+  "napari-labelimg4classification": {
+    "conda_name": "napari-labelimg4classification",
+    "import_name": "napari_labelimg4classification",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-labelimg4classification"
+  },
+  "napari-labeling": {
+    "conda_name": "napari-labeling",
+    "import_name": "napari_labeling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-labeling"
+  },
+  "napari-labelling-assistant": {
+    "conda_name": "napari-labelling-assistant",
+    "import_name": "napari_labelling_assistant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-labelling-assistant"
+  },
+  "napari-labelprop": {
+    "conda_name": "napari-labelprop",
+    "import_name": "napari_labelprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-labelprop"
+  },
+  "napari-labels-overlap": {
+    "conda_name": "napari-labels-overlap",
+    "import_name": "napari_labels_overlap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-labels-overlap"
+  },
+  "napari-laptrack": {
+    "conda_name": "napari-laptrack",
+    "import_name": "napari_laptrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-laptrack"
+  },
+  "napari-large-image-importer": {
+    "conda_name": "napari-large-image-importer",
+    "import_name": "napari_large_image_importer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-large-image-importer"
+  },
+  "napari-layer-details-display": {
+    "conda_name": "napari-layer-details-display",
+    "import_name": "napari_layer_details_display",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-layer-details-display"
+  },
+  "napari-layer-table": {
+    "conda_name": "napari-layer-table",
+    "import_name": "napari_layer_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-layer-table"
+  },
+  "napari-lazy-openslide": {
+    "conda_name": "napari-lazy-openslide",
+    "import_name": "napari_lazy_openslide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-lazy-openslide"
+  },
+  "napari-lf": {
+    "conda_name": "napari-lf",
+    "import_name": "napari_lf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-lf"
+  },
+  "napari-live-recording": {
+    "conda_name": "napari-live-recording",
+    "import_name": "napari_live_recording",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-live-recording"
+  },
+  "napari-locan": {
+    "conda_name": "napari-locan",
+    "import_name": "napari_locan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-locan"
+  },
+  "napari-locpix": {
+    "conda_name": "napari-locpix",
+    "import_name": "napari_locpix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-locpix"
+  },
+  "napari-macrokit": {
+    "conda_name": "napari-macrokit",
+    "import_name": "napari_macrokit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-macrokit"
+  },
+  "napari-manual-transforms": {
+    "conda_name": "napari-manual-transforms",
+    "import_name": "napari_manual_transforms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-manual-transforms"
+  },
+  "napari-mat-file-reader": {
+    "conda_name": "napari-mat-file-reader",
+    "import_name": "napari_mat_file_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mat-file-reader"
+  },
+  "napari-math": {
+    "conda_name": "napari-math",
+    "import_name": "napari_math",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-math"
+  },
+  "napari-matplotlib": {
+    "conda_name": "napari-matplotlib",
+    "import_name": "napari_matplotlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-matplotlib"
+  },
+  "napari-mclabel": {
+    "conda_name": "napari-mclabel",
+    "import_name": "napari_mclabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mclabel"
+  },
+  "napari-medical-image-formats": {
+    "conda_name": "napari-medical-image-formats",
+    "import_name": "napari_medical_image_formats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-medical-image-formats"
+  },
+  "napari-medical-image-formats-read-write": {
+    "conda_name": "napari-medical-image-formats-read-write",
+    "import_name": "napari_medical_image_formats_read_write",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-medical-image-formats-read-write"
+  },
+  "napari-melt-pool-tracker": {
+    "conda_name": "napari-melt-pool-tracker",
+    "import_name": "napari_melt_pool_tracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-melt-pool-tracker"
+  },
+  "napari-merge-stardist-masks": {
+    "conda_name": "napari-merge-stardist-masks",
+    "import_name": "napari_merge_stardist_masks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-merge-stardist-masks"
+  },
+  "napari-meshio": {
+    "conda_name": "napari-meshio",
+    "import_name": "napari_meshio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-meshio"
+  },
+  "napari-metroid": {
+    "conda_name": "napari-metroid",
+    "import_name": "napari_metroid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-metroid"
+  },
+  "napari-micromanager": {
+    "conda_name": "napari-micromanager",
+    "import_name": "napari_micromanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-micromanager"
+  },
+  "napari-microscope": {
+    "conda_name": "napari-microscope",
+    "import_name": "napari_microscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-microscope"
+  },
+  "napari-microtubule-analyzer": {
+    "conda_name": "napari-microtubule-analyzer",
+    "import_name": "napari_microtubule_analyzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-microtubule-analyzer"
+  },
+  "napari-molecule-reader": {
+    "conda_name": "napari-molecule-reader",
+    "import_name": "napari_molecule_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-molecule-reader"
+  },
+  "napari-morphodynamics": {
+    "conda_name": "napari-morphodynamics",
+    "import_name": "napari_morphodynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-morphodynamics"
+  },
+  "napari-mouse-controls": {
+    "conda_name": "napari-mouse-controls",
+    "import_name": "napari_mouse_controls",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mouse-controls"
+  },
+  "napari-mrcfile-handler": {
+    "conda_name": "napari-mrcfile-handler",
+    "import_name": "napari_mrcfile_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mrcfile-handler"
+  },
+  "napari-mrcfile-reader": {
+    "conda_name": "napari-mrcfile-reader",
+    "import_name": "napari_mrcfile_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mrcfile-reader"
+  },
+  "napari-mri": {
+    "conda_name": "napari-mri",
+    "import_name": "napari_mri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mri"
+  },
+  "napari-multitask": {
+    "conda_name": "napari-multitask",
+    "import_name": "napari_multitask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-multitask"
+  },
+  "napari-mzarr": {
+    "conda_name": "napari-mzarr",
+    "import_name": "napari_mzarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-mzarr"
+  },
+  "napari-n2v": {
+    "conda_name": "napari-n2v",
+    "import_name": "napari_n2v",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-n2v"
+  },
+  "napari-napari": {
+    "conda_name": "napari-napari",
+    "import_name": "napari_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-napari"
+  },
+  "napari-nasa-samples": {
+    "conda_name": "napari-nasa-samples",
+    "import_name": "napari_nasa_samples",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nasa-samples"
+  },
+  "napari-nd-annotator": {
+    "conda_name": "napari-nd-annotator",
+    "import_name": "napari_nd_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nd-annotator"
+  },
+  "napari-nd-cropper": {
+    "conda_name": "napari-nd-cropper",
+    "import_name": "napari_nd_cropper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nd-cropper"
+  },
+  "napari-nd2-folder-viewer": {
+    "conda_name": "napari-nd2-folder-viewer",
+    "import_name": "napari_nd2_folder_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nd2-folder-viewer"
+  },
+  "napari-ndev": {
+    "conda_name": "napari-ndev",
+    "import_name": "napari_ndev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ndev"
+  },
+  "napari-ndtiffs": {
+    "conda_name": "napari-ndtiffs",
+    "import_name": "napari_ndtiffs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ndtiffs"
+  },
+  "napari-nibabel": {
+    "conda_name": "napari-nibabel",
+    "import_name": "napari_nibabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nibabel"
+  },
+  "napari-nifti": {
+    "conda_name": "napari-nifti",
+    "import_name": "napari_nifti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nifti"
+  },
+  "napari-nikon-nd2": {
+    "conda_name": "napari-nikon-nd2",
+    "import_name": "napari_nikon_nd2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nikon-nd2"
+  },
+  "napari-nlm": {
+    "conda_name": "napari-nlm",
+    "import_name": "napari_nlm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-nlm"
+  },
+  "napari-obj": {
+    "conda_name": "napari-obj",
+    "import_name": "napari_obj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-obj"
+  },
+  "napari-omaas": {
+    "conda_name": "napari-omaas",
+    "import_name": "napari_omaas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-omaas"
+  },
+  "napari-ome-zarr": {
+    "conda_name": "napari-ome-zarr",
+    "import_name": "napari_ome_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ome-zarr"
+  },
+  "napari-organoid-counter": {
+    "conda_name": "napari-organoid-counter",
+    "import_name": "napari_organoid_counter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-organoid-counter"
+  },
+  "napari-owncloud": {
+    "conda_name": "napari-owncloud",
+    "import_name": "napari_owncloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-owncloud"
+  },
+  "napari-parallel": {
+    "conda_name": "napari-parallel",
+    "import_name": "napari_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-parallel"
+  },
+  "napari-patchcreator": {
+    "conda_name": "napari-patchcreator",
+    "import_name": "napari_patchcreator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-patchcreator"
+  },
+  "napari-pdf-reader": {
+    "conda_name": "napari-pdf-reader",
+    "import_name": "napari_pdf_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pdf-reader"
+  },
+  "napari-pdr-reader": {
+    "conda_name": "napari-pdr-reader",
+    "import_name": "napari_pdr_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pdr-reader"
+  },
+  "napari-philow": {
+    "conda_name": "napari-philow",
+    "import_name": "napari_philow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-philow"
+  },
+  "napari-pims-bioformats": {
+    "conda_name": "napari-pims-bioformats",
+    "import_name": "napari_pims_bioformats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pims-bioformats"
+  },
+  "napari-pixel-correction": {
+    "conda_name": "napari-pixel-correction",
+    "import_name": "napari_pixel_correction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pixel-correction"
+  },
+  "napari-plot": {
+    "conda_name": "napari-plot",
+    "import_name": "napari_plot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-plot"
+  },
+  "napari-plot-profile": {
+    "conda_name": "napari-plot-profile",
+    "import_name": "napari_plot_profile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-plot-profile"
+  },
+  "napari-plugin-engine": {
+    "conda_name": "napari-plugin-engine",
+    "import_name": "napari_plugin_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-plugin-engine"
+  },
+  "napari-plugin-manager": {
+    "conda_name": "napari-plugin-manager",
+    "import_name": "napari_plugin_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-plugin-manager"
+  },
+  "napari-plugin-search": {
+    "conda_name": "napari-plugin-search",
+    "import_name": "napari_plugin_search",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-plugin-search"
+  },
+  "napari-pointslayer-projection": {
+    "conda_name": "napari-pointslayer-projection",
+    "import_name": "napari_pointslayer_projection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pointslayer-projection"
+  },
+  "napari-power-spectrum": {
+    "conda_name": "napari-power-spectrum",
+    "import_name": "napari_power_spectrum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-power-spectrum"
+  },
+  "napari-power-widgets": {
+    "conda_name": "napari-power-widgets",
+    "import_name": "napari_power_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-power-widgets"
+  },
+  "napari-pram": {
+    "conda_name": "napari-pram",
+    "import_name": "napari_pram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pram"
+  },
+  "napari-process-points-and-surfaces": {
+    "conda_name": "napari-process-points-and-surfaces",
+    "import_name": "napari_process_points_and_surfaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-process-points-and-surfaces"
+  },
+  "napari-proofread-brainbow": {
+    "conda_name": "napari-proofread-brainbow",
+    "import_name": "napari_proofread_brainbow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-proofread-brainbow"
+  },
+  "napari-properties-plotter": {
+    "conda_name": "napari-properties-plotter",
+    "import_name": "napari_properties_plotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-properties-plotter"
+  },
+  "napari-properties-viewer": {
+    "conda_name": "napari-properties-viewer",
+    "import_name": "napari_properties_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-properties-viewer"
+  },
+  "napari-psf-analysis": {
+    "conda_name": "napari-psf-analysis",
+    "import_name": "napari_psf_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-psf-analysis"
+  },
+  "napari-psf-simulator": {
+    "conda_name": "napari-psf-simulator",
+    "import_name": "napari_psf_simulator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-psf-simulator"
+  },
+  "napari-pssr": {
+    "conda_name": "napari-pssr",
+    "import_name": "napari_pssr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pssr"
+  },
+  "napari-pystackreg": {
+    "conda_name": "napari-pystackreg",
+    "import_name": "napari_pystackreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-pystackreg"
+  },
+  "napari-qrcode": {
+    "conda_name": "napari-qrcode",
+    "import_name": "napari_qrcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-qrcode"
+  },
+  "napari-rembg": {
+    "conda_name": "napari-rembg",
+    "import_name": "napari_rembg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-rembg"
+  },
+  "napari-result-stack": {
+    "conda_name": "napari-result-stack",
+    "import_name": "napari_result_stack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-result-stack"
+  },
+  "napari-rioxarray": {
+    "conda_name": "napari-rioxarray",
+    "import_name": "napari_rioxarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-rioxarray"
+  },
+  "napari-roi": {
+    "conda_name": "napari-roi",
+    "import_name": "napari_roi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-roi"
+  },
+  "napari-roi-registration": {
+    "conda_name": "napari-roi-registration",
+    "import_name": "napari_roi_registration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-roi-registration"
+  },
+  "napari-sam": {
+    "conda_name": "napari-sam",
+    "import_name": "napari_sam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sam"
+  },
+  "napari-sam4is": {
+    "conda_name": "napari-sam4is",
+    "import_name": "napari_sam4is",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sam4is"
+  },
+  "napari-sc3d-viewer": {
+    "conda_name": "napari-sc3d-viewer",
+    "import_name": "napari_sc3d_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sc3d-viewer"
+  },
+  "napari-script-editor": {
+    "conda_name": "napari-script-editor",
+    "import_name": "napari_script_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-script-editor"
+  },
+  "napari-sdeconv": {
+    "conda_name": "napari-sdeconv",
+    "import_name": "napari_sdeconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sdeconv"
+  },
+  "napari-seedseg": {
+    "conda_name": "napari-seedseg",
+    "import_name": "napari_seedseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-seedseg"
+  },
+  "napari-segment": {
+    "conda_name": "napari-segment",
+    "import_name": "napari_segment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-segment"
+  },
+  "napari-segment-anything": {
+    "conda_name": "napari-segment-anything",
+    "import_name": "napari_segment_anything",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-segment-anything"
+  },
+  "napari-segment-blobs-and-things-with-membranes": {
+    "conda_name": "napari-segment-blobs-and-things-with-membranes",
+    "import_name": "napari_segment_blobs_and_things_with_membranes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-segment-blobs-and-things-with-membranes"
+  },
+  "napari-sif-reader": {
+    "conda_name": "napari-sif-reader",
+    "import_name": "napari_sif_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sif-reader"
+  },
+  "napari-sift-registration": {
+    "conda_name": "napari-sift-registration",
+    "import_name": "napari_sift_registration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sift-registration"
+  },
+  "napari-signal-selector": {
+    "conda_name": "napari-signal-selector",
+    "import_name": "napari_signal_selector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-signal-selector"
+  },
+  "napari-sim-processor": {
+    "conda_name": "napari-sim-processor",
+    "import_name": "napari_sim_processor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-sim-processor"
+  },
+  "napari-simpleannotate": {
+    "conda_name": "napari-simpleannotate",
+    "import_name": "napari_simpleannotate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-simpleannotate"
+  },
+  "napari-simpleitk-image-processing": {
+    "conda_name": "napari-simpleitk-image-processing",
+    "import_name": "napari_simpleitk_image_processing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-simpleitk-image-processing"
+  },
+  "napari-skimage": {
+    "conda_name": "napari-skimage",
+    "import_name": "napari_skimage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-skimage"
+  },
+  "napari-skimage-regionprops": {
+    "conda_name": "napari-skimage-regionprops",
+    "import_name": "napari_skimage_regionprops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-skimage-regionprops"
+  },
+  "napari-solarized": {
+    "conda_name": "napari-solarized",
+    "import_name": "napari_solarized",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-solarized"
+  },
+  "napari-spacetx-explorer": {
+    "conda_name": "napari-spacetx-explorer",
+    "import_name": "napari_spacetx_explorer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-spacetx-explorer"
+  },
+  "napari-spatial-omics": {
+    "conda_name": "napari-spatial-omics",
+    "import_name": "napari_spatial_omics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-spatial-omics"
+  },
+  "napari-spatialdata": {
+    "conda_name": "napari-spatialdata",
+    "import_name": "napari_spatialdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-spatialdata"
+  },
+  "napari-splinedist": {
+    "conda_name": "napari-splinedist",
+    "import_name": "napari_splinedist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-splinedist"
+  },
+  "napari-splineit": {
+    "conda_name": "napari-splineit",
+    "import_name": "napari_splineit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-splineit"
+  },
+  "napari-spreadsheet": {
+    "conda_name": "napari-spreadsheet",
+    "import_name": "napari_spreadsheet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-spreadsheet"
+  },
+  "napari-stable-diffusion": {
+    "conda_name": "napari-stable-diffusion",
+    "import_name": "napari_stable_diffusion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-stable-diffusion"
+  },
+  "napari-steinpose": {
+    "conda_name": "napari-steinpose",
+    "import_name": "napari_steinpose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-steinpose"
+  },
+  "napari-stracking": {
+    "conda_name": "napari-stracking",
+    "import_name": "napari_stracking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-stracking"
+  },
+  "napari-stress": {
+    "conda_name": "napari-stress",
+    "import_name": "napari_stress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-stress"
+  },
+  "napari-subboxer": {
+    "conda_name": "napari-subboxer",
+    "import_name": "napari_subboxer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-subboxer"
+  },
+  "napari-superres": {
+    "conda_name": "napari-superres",
+    "import_name": "napari_superres",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-superres"
+  },
+  "napari-tabu": {
+    "conda_name": "napari-tabu",
+    "import_name": "napari_tabu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tabu"
+  },
+  "napari-text-layer": {
+    "conda_name": "napari-text-layer",
+    "import_name": "napari_text_layer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-text-layer"
+  },
+  "napari-threedee": {
+    "conda_name": "napari-threedee",
+    "import_name": "napari_threedee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-threedee"
+  },
+  "napari-tiff": {
+    "conda_name": "napari-tiff",
+    "import_name": "napari_tiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tiff"
+  },
+  "napari-tiledb-bioimg": {
+    "conda_name": "napari-tiledb-bioimg",
+    "import_name": "napari_tiledb_bioimg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tiledb-bioimg"
+  },
+  "napari-tiler": {
+    "conda_name": "napari-tiler",
+    "import_name": "napari_tiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tiler"
+  },
+  "napari-time-series-plotter": {
+    "conda_name": "napari-time-series-plotter",
+    "import_name": "napari_time_series_plotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-time-series-plotter"
+  },
+  "napari-time-slicer": {
+    "conda_name": "napari-time-slicer",
+    "import_name": "napari_time_slicer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-time-slicer"
+  },
+  "napari-timeseries-opener-plugin": {
+    "conda_name": "napari-timeseries-opener-plugin",
+    "import_name": "napari_timeseries_opener_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-timeseries-opener-plugin"
+  },
+  "napari-timestamper": {
+    "conda_name": "napari-timestamper",
+    "import_name": "napari_timestamper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-timestamper"
+  },
+  "napari-tissuumaps": {
+    "conda_name": "napari-tissuumaps",
+    "import_name": "napari_tissuumaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tissuumaps"
+  },
+  "napari-tomocube-data-viewer": {
+    "conda_name": "napari-tomocube-data-viewer",
+    "import_name": "napari_tomocube_data_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tomocube-data-viewer"
+  },
+  "napari-tomoslice": {
+    "conda_name": "napari-tomoslice",
+    "import_name": "napari_tomoslice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tomoslice"
+  },
+  "napari-tomotwin": {
+    "conda_name": "napari-tomotwin",
+    "import_name": "napari_tomotwin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tomotwin"
+  },
+  "napari-tools-menu": {
+    "conda_name": "napari-tools-menu",
+    "import_name": "napari_tools_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tools-menu"
+  },
+  "napari-toothfairy-annotator": {
+    "conda_name": "napari-toothfairy-annotator",
+    "import_name": "napari_toothfairy_annotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-toothfairy-annotator"
+  },
+  "napari-trackpy": {
+    "conda_name": "napari-trackpy",
+    "import_name": "napari_trackpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-trackpy"
+  },
+  "napari-tracks-reader": {
+    "conda_name": "napari-tracks-reader",
+    "import_name": "napari_tracks_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tracks-reader"
+  },
+  "napari-trait2d": {
+    "conda_name": "napari-trait2d",
+    "import_name": "napari_trait2d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-trait2d"
+  },
+  "napari-turing": {
+    "conda_name": "napari-turing",
+    "import_name": "napari_turing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-turing"
+  },
+  "napari-tyssue": {
+    "conda_name": "napari-tyssue",
+    "import_name": "napari_tyssue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-tyssue"
+  },
+  "napari-ufish": {
+    "conda_name": "napari-ufish",
+    "import_name": "napari_ufish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ufish"
+  },
+  "napari-ui-tracer": {
+    "conda_name": "napari-ui-tracer",
+    "import_name": "napari_ui_tracer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-ui-tracer"
+  },
+  "napari-unicell": {
+    "conda_name": "napari-unicell",
+    "import_name": "napari_unicell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-unicell"
+  },
+  "napari-update-checker": {
+    "conda_name": "napari-update-checker",
+    "import_name": "napari_update_checker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-update-checker"
+  },
+  "napari-validate-random-label-predictions": {
+    "conda_name": "napari-validate-random-label-predictions",
+    "import_name": "napari_validate_random_label_predictions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-validate-random-label-predictions"
+  },
+  "napari-vedo-bridge": {
+    "conda_name": "napari-vedo-bridge",
+    "import_name": "napari_vedo_bridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-vedo-bridge"
+  },
+  "napari-vesicles-segmentation": {
+    "conda_name": "napari-vesicles-segmentation",
+    "import_name": "napari_vesicles_segmentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-vesicles-segmentation"
+  },
+  "napari-video": {
+    "conda_name": "napari_video",
+    "import_name": "napari_video.napari_video",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-video"
+  },
+  "napari-vodex": {
+    "conda_name": "napari-vodex",
+    "import_name": "napari_vodex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-vodex"
+  },
+  "napari-workflow-inspector": {
+    "conda_name": "napari-workflow-inspector",
+    "import_name": "napari_workflow_inspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-workflow-inspector"
+  },
+  "napari-workflow-optimizer": {
+    "conda_name": "napari-workflow-optimizer",
+    "import_name": "napari_workflow_optimizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-workflow-optimizer"
+  },
+  "napari-workflows": {
+    "conda_name": "napari-workflows",
+    "import_name": "napari_workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-workflows"
+  },
+  "napari-workshop-browser": {
+    "conda_name": "napari-workshop-browser",
+    "import_name": "napari_workshop_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-workshop-browser"
+  },
+  "napari-wsi": {
+    "conda_name": "napari-wsi",
+    "import_name": "napari_wsi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-wsi"
+  },
+  "napari-yapic-prediction": {
+    "conda_name": "napari-yapic-prediction",
+    "import_name": "napari_yapic_prediction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-yapic-prediction"
+  },
+  "napari-yolov5": {
+    "conda_name": "napari-yolov5",
+    "import_name": "napari_yolov5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-yolov5"
+  },
+  "napari-zelda": {
+    "conda_name": "napari-zelda",
+    "import_name": "napari_zelda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-zelda"
+  },
+  "napari-zulip": {
+    "conda_name": "napari-zulip",
+    "import_name": "napari_zulip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napari-zulip"
+  },
+  "napatrackmater": {
+    "conda_name": "napatrackmater",
+    "import_name": "napatrackmater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "napatrackmater"
+  },
+  "nappy": {
+    "conda_name": "nappy",
+    "import_name": "nappy.utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nappy"
+  },
+  "nardini": {
+    "conda_name": "nardini",
+    "import_name": "nardini",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nardini"
+  },
+  "nasdaq-data-link": {
+    "conda_name": "nasdaq-data-link",
+    "import_name": "nasdaqdatalink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nasdaq-data-link"
+  },
+  "nashpy": {
+    "conda_name": "nashpy",
+    "import_name": "nashpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nashpy"
+  },
+  "natari": {
+    "conda_name": "natari",
+    "import_name": "natari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "natari"
+  },
+  "natasha": {
+    "conda_name": "natasha",
+    "import_name": "natasha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "natasha"
+  },
+  "natcap-invest": {
+    "conda_name": "natcap.invest",
+    "import_name": "natcap.invest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "natcap-invest"
+  },
+  "natural": {
+    "conda_name": "natural",
+    "import_name": "natural",
+    "mapping_source": "regro-bot",
+    "pypi_name": "natural"
+  },
+  "naturalneighbor": {
+    "conda_name": "naturalneighbor",
+    "import_name": "naturalneighbor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "naturalneighbor"
+  },
+  "nautilus-sampler": {
+    "conda_name": "nautilus-sampler",
+    "import_name": "nautilus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nautilus-sampler"
+  },
+  "navec": {
+    "conda_name": "navec",
+    "import_name": "navec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "navec"
+  },
+  "nb-clean": {
+    "conda_name": "nb-clean",
+    "import_name": "nb_clean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nb-clean"
+  },
+  "nb-conda-store-kernels": {
+    "conda_name": "nb_conda_store_kernels",
+    "import_name": "nb_conda_store_kernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nb-conda-store-kernels"
+  },
+  "nbappinator": {
+    "conda_name": "nbappinator",
+    "import_name": "nbappinator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbappinator"
+  },
+  "nbautoexport": {
+    "conda_name": "nbautoexport",
+    "import_name": "nbautoexport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbautoexport"
+  },
+  "nbbrowserpdf": {
+    "conda_name": "nbbrowserpdf",
+    "import_name": "nbbrowserpdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbbrowserpdf"
+  },
+  "nbcelltests": {
+    "conda_name": "nbcelltests",
+    "import_name": "nbcelltests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbcelltests"
+  },
+  "nbclient": {
+    "conda_name": "nbclient",
+    "import_name": "nbclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbclient"
+  },
+  "nbconvert-utils": {
+    "conda_name": "nbconvert-utils",
+    "import_name": "nbconvert_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbconvert-utils"
+  },
+  "nbcx": {
+    "conda_name": "nbcx",
+    "import_name": "nbcx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbcx"
+  },
+  "nbdotrun": {
+    "conda_name": "nbdotrun",
+    "import_name": "nbdotrun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbdotrun"
+  },
+  "nbfinder": {
+    "conda_name": "nbfinder",
+    "import_name": "nbfinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbfinder"
+  },
+  "nbformat": {
+    "conda_name": "nbformat",
+    "import_name": "nbformat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbformat"
+  },
+  "nbgitpuller": {
+    "conda_name": "nbgitpuller",
+    "import_name": "nbgitpuller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbgitpuller"
+  },
+  "nbgitpuller-link": {
+    "conda_name": "nbgitpuller-link",
+    "import_name": "nbgitpuller_link",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbgitpuller-link"
+  },
+  "nbgrader": {
+    "conda_name": "nbgrader",
+    "import_name": "nbgrader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbgrader"
+  },
+  "nbjuniper": {
+    "conda_name": "nbjuniper",
+    "import_name": "nbjuniper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbjuniper"
+  },
+  "nbmake": {
+    "conda_name": "nbmake",
+    "import_name": "nbmake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbmake"
+  },
+  "nbmerge": {
+    "conda_name": "nbmerge",
+    "import_name": "nbmerge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbmerge"
+  },
+  "nbparameterise": {
+    "conda_name": "nbparameterise",
+    "import_name": "nbparameterise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbparameterise"
+  },
+  "nbpreview": {
+    "conda_name": "nbpreview",
+    "import_name": "nbpreview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbpreview"
+  },
+  "nbprint": {
+    "conda_name": "nbprint",
+    "import_name": "nbprint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbprint"
+  },
+  "nbproject": {
+    "conda_name": "nbproject",
+    "import_name": "nbproject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbproject"
+  },
+  "nbqa": {
+    "conda_name": "nbqa",
+    "import_name": "nbqa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbqa"
+  },
+  "nbrr": {
+    "conda_name": "nbrr",
+    "import_name": "nbrr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbrr"
+  },
+  "nbsafety": {
+    "conda_name": "nbsafety",
+    "import_name": "nbsafety",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbsafety"
+  },
+  "nbserverproxy": {
+    "conda_name": "nbserverproxy",
+    "import_name": "nbserverproxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbserverproxy"
+  },
+  "nbsmoke": {
+    "conda_name": "nbsmoke",
+    "import_name": "nbsmoke",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbsmoke"
+  },
+  "nbsphinx": {
+    "conda_name": "nbsphinx",
+    "import_name": "nbsphinx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbsphinx"
+  },
+  "nbsphinx-link": {
+    "conda_name": "nbsphinx-link",
+    "import_name": "nbsphinx_link",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbsphinx-link"
+  },
+  "nbstripout": {
+    "conda_name": "nbstripout",
+    "import_name": "nbstripout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbstripout"
+  },
+  "nbtutor": {
+    "conda_name": "nbtutor",
+    "import_name": "nbtutor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbtutor"
+  },
+  "nbval": {
+    "conda_name": "nbval",
+    "import_name": "nbval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nbval"
+  },
+  "nc-time-axis": {
+    "conda_name": "nc-time-axis",
+    "import_name": "nc_time_axis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nc-time-axis"
+  },
+  "ncar-jobqueue": {
+    "conda_name": "ncar-jobqueue",
+    "import_name": "ncar_jobqueue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncar-jobqueue"
+  },
+  "ncas-amof-netcdf-template": {
+    "conda_name": "ncas-amof-netcdf-template",
+    "import_name": "ncas_amof_netcdf_template",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncas-amof-netcdf-template"
+  },
+  "nccompare": {
+    "conda_name": "nccompare",
+    "import_name": "nccompare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nccompare"
+  },
+  "ncdata": {
+    "conda_name": "ncdata",
+    "import_name": "ncdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncdata"
+  },
+  "ncempy": {
+    "conda_name": "ncempy",
+    "import_name": "ncempy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncempy"
+  },
+  "ncephes": {
+    "conda_name": "ncephes",
+    "import_name": "ncephes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncephes"
+  },
+  "ncio": {
+    "conda_name": "ncio",
+    "import_name": "ncio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncio"
+  },
+  "nclpy": {
+    "conda_name": "nclpy",
+    "import_name": "nclpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nclpy"
+  },
+  "nco": {
+    "conda_name": "pynco",
+    "import_name": "nco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nco"
+  },
+  "ncompare": {
+    "conda_name": "ncompare",
+    "import_name": "ncompare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncompare"
+  },
+  "ncplot": {
+    "conda_name": "ncplot",
+    "import_name": "ncplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncplot"
+  },
+  "ncpol2sdpa": {
+    "conda_name": "ncpol2sdpa",
+    "import_name": "ncpol2sdpa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncpol2sdpa"
+  },
+  "nctoolkit": {
+    "conda_name": "nctoolkit",
+    "import_name": "nctoolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nctoolkit"
+  },
+  "ncvue": {
+    "conda_name": "ncvue",
+    "import_name": "ncvue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ncvue"
+  },
+  "nd2": {
+    "conda_name": "nd2",
+    "import_name": "nd2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nd2"
+  },
+  "nd2-dask": {
+    "conda_name": "nd2-dask",
+    "import_name": "nd2_dask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nd2-dask"
+  },
+  "nd2reader": {
+    "conda_name": "nd2reader",
+    "import_name": "nd2reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nd2reader"
+  },
+  "ndarray-listener": {
+    "conda_name": "ndarray-listener",
+    "import_name": "ndarray_listener",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndarray-listener"
+  },
+  "ndbc-api": {
+    "conda_name": "ndbc-api",
+    "import_name": "ndbc_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndbc-api"
+  },
+  "ndbcrealtime": {
+    "conda_name": "ndbcrealtime",
+    "import_name": "ndbcrealtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndbcrealtime"
+  },
+  "ndcsv": {
+    "conda_name": "ndcsv",
+    "import_name": "ndcsv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndcsv"
+  },
+  "ndcube": {
+    "conda_name": "ndcube",
+    "import_name": "ndcube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndcube"
+  },
+  "ndf": {
+    "conda_name": "ndf",
+    "import_name": "ndf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndf"
+  },
+  "ndg-httpsclient": {
+    "conda_name": "ndg-httpsclient",
+    "import_name": "ndg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndg-httpsclient"
+  },
+  "ndim": {
+    "conda_name": "ndim",
+    "import_name": "ndim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndim"
+  },
+  "ndindex": {
+    "conda_name": "ndindex",
+    "import_name": "ndindex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndindex"
+  },
+  "ndlinear": {
+    "conda_name": "ndlinear",
+    "import_name": "ndlinear",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndlinear"
+  },
+  "ndpyramid": {
+    "conda_name": "ndpyramid",
+    "import_name": "ndpyramid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndpyramid"
+  },
+  "ndsplines": {
+    "conda_name": "ndsplines",
+    "import_name": "ndsplines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndsplines"
+  },
+  "ndtiff": {
+    "conda_name": "ndtiff",
+    "import_name": "ndtiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndtiff"
+  },
+  "ndv": {
+    "conda_name": "ndv",
+    "import_name": "ndv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndv"
+  },
+  "ndvi2gif": {
+    "conda_name": "ndvi2gif",
+    "import_name": "ndvi2gif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndvi2gif"
+  },
+  "ndx-pose": {
+    "conda_name": "ndx-pose",
+    "import_name": "ndx_pose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ndx-pose"
+  },
+  "neattext": {
+    "conda_name": "neattext",
+    "import_name": "neattext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neattext"
+  },
+  "nebari": {
+    "conda_name": "nebari",
+    "import_name": "nebari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nebari"
+  },
+  "nectarchain": {
+    "conda_name": "nectarchain",
+    "import_name": "nectarchain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nectarchain"
+  },
+  "neighpy": {
+    "conda_name": "neighpy",
+    "import_name": "neighpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neighpy"
+  },
+  "nelson-siegel-svensson": {
+    "conda_name": "nelson-siegel-svensson",
+    "import_name": "nelson_siegel_svensson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nelson-siegel-svensson"
+  },
+  "nemspy": {
+    "conda_name": "nemspy",
+    "import_name": "nemspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nemspy"
+  },
+  "nene": {
+    "conda_name": "nene",
+    "import_name": "nene",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nene"
+  },
+  "nengo": {
+    "conda_name": "nengo",
+    "import_name": "nengo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo"
+  },
+  "nengo-dl": {
+    "conda_name": "nengo-dl",
+    "import_name": "nengo_dl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-dl"
+  },
+  "nengo-extras": {
+    "conda_name": "nengo-extras",
+    "import_name": "nengo_extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-extras"
+  },
+  "nengo-gui": {
+    "conda_name": "nengo-gui",
+    "import_name": "nengo_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-gui"
+  },
+  "nengo-loihi": {
+    "conda_name": "nengo-loihi",
+    "import_name": "nengo_loihi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-loihi"
+  },
+  "nengo-ocl": {
+    "conda_name": "nengo-ocl",
+    "import_name": "nengo_ocl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-ocl"
+  },
+  "nengo-spa": {
+    "conda_name": "nengo-spa",
+    "import_name": "nengo_spa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nengo-spa"
+  },
+  "neo": {
+    "conda_name": "python-neo",
+    "import_name": "neo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neo"
+  },
+  "neobolt": {
+    "conda_name": "neobolt",
+    "import_name": "neobolt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neobolt"
+  },
+  "neomodel": {
+    "conda_name": "neomodel",
+    "import_name": "neomodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neomodel"
+  },
+  "neotime": {
+    "conda_name": "neotime",
+    "import_name": "neotime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neotime"
+  },
+  "neovim": {
+    "conda_name": "neovim",
+    "import_name": "neovim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neovim"
+  },
+  "nep29": {
+    "conda_name": "nep29",
+    "import_name": "nep29",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nep29"
+  },
+  "neqsim": {
+    "conda_name": "neqsim",
+    "import_name": "neqsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neqsim"
+  },
+  "nequip": {
+    "conda_name": "nequip",
+    "import_name": "nequip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nequip"
+  },
+  "nerval": {
+    "conda_name": "nerval",
+    "import_name": "nerval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nerval"
+  },
+  "nessai": {
+    "conda_name": "nessai",
+    "import_name": "nessai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nessai"
+  },
+  "nessai-bilby": {
+    "conda_name": "nessai-bilby",
+    "import_name": "nessai_bilby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nessai-bilby"
+  },
+  "nest-asyncio": {
+    "conda_name": "nest-asyncio",
+    "import_name": "nest_asyncio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nest-asyncio"
+  },
+  "nestcheck": {
+    "conda_name": "nestcheck",
+    "import_name": "nestcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nestcheck"
+  },
+  "nestd": {
+    "conda_name": "nestd",
+    "import_name": "nestd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nestd"
+  },
+  "nested-dask": {
+    "conda_name": "nested-dask",
+    "import_name": "nested_dask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nested-dask"
+  },
+  "nested-dict": {
+    "conda_name": "nested_dict",
+    "import_name": "nested_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nested-dict"
+  },
+  "nested-lookup": {
+    "conda_name": "nested-lookup",
+    "import_name": "nested_lookup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nested-lookup"
+  },
+  "nested-pandas": {
+    "conda_name": "nested-pandas",
+    "import_name": "nested_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nested-pandas"
+  },
+  "nestedtext": {
+    "conda_name": "nestedtext",
+    "import_name": "nestedtext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nestedtext"
+  },
+  "nestle": {
+    "conda_name": "nestle",
+    "import_name": "nestle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nestle"
+  },
+  "nestly": {
+    "conda_name": "nestly",
+    "import_name": "nestly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nestly"
+  },
+  "netatmo-geopy": {
+    "conda_name": "netatmo-geopy",
+    "import_name": "netatmo_geopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netatmo-geopy"
+  },
+  "netcdf-flattener": {
+    "conda_name": "netcdf-flattener",
+    "import_name": "netcdf_flattener",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netcdf-flattener"
+  },
+  "netcdf-scm": {
+    "conda_name": "netcdf-scm",
+    "import_name": "netcdf_scm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netcdf-scm"
+  },
+  "netgraph": {
+    "conda_name": "netgraph",
+    "import_name": "netgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netgraph"
+  },
+  "nethsm": {
+    "conda_name": "nethsm",
+    "import_name": "nethsm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nethsm"
+  },
+  "netifaces": {
+    "conda_name": "netifaces",
+    "import_name": "netifaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netifaces"
+  },
+  "netpbmfile": {
+    "conda_name": "netpbmfile",
+    "import_name": "netpbmfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netpbmfile"
+  },
+  "netsuitesdk": {
+    "conda_name": "netsuitesdk",
+    "import_name": "netsuitesdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "netsuitesdk"
+  },
+  "networkx-temporal": {
+    "conda_name": "networkx-temporal",
+    "import_name": "networkx_temporal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "networkx-temporal"
+  },
+  "neunorm": {
+    "conda_name": "neunorm",
+    "import_name": "NeuNorm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neunorm"
+  },
+  "neuralcoref": {
+    "conda_name": "neuralcoref",
+    "import_name": "neuralcoref",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neuralcoref"
+  },
+  "neuralforecast": {
+    "conda_name": "neuralforecast",
+    "import_name": "neuralforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neuralforecast"
+  },
+  "neuralgcm": {
+    "conda_name": "neuralgcm",
+    "import_name": "neuralgcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neuralgcm"
+  },
+  "neuralprophet": {
+    "conda_name": "neuralprophet",
+    "import_name": "neuralprophet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neuralprophet"
+  },
+  "neurdflib": {
+    "conda_name": "neurdflib",
+    "import_name": "rdflib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurdflib"
+  },
+  "neurodent": {
+    "conda_name": "neurodent",
+    "import_name": "neurodent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurodent"
+  },
+  "neurodocker": {
+    "conda_name": "neurodocker",
+    "import_name": "neurodocker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurodocker"
+  },
+  "neurokit2": {
+    "conda_name": "neurokit2",
+    "import_name": "neurokit2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurokit2"
+  },
+  "neurosynchro": {
+    "conda_name": "neurosynchro",
+    "import_name": "neurosynchro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurosynchro"
+  },
+  "neurotic": {
+    "conda_name": "neurotic",
+    "import_name": "neurotic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neurotic"
+  },
+  "neutralnemo": {
+    "conda_name": "neutralnemo",
+    "import_name": "neutralNEMO",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neutralnemo"
+  },
+  "neutralocean": {
+    "conda_name": "neutralocean",
+    "import_name": "neutralocean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neutralocean"
+  },
+  "neutronics-material-maker": {
+    "conda_name": "neutronics_material_maker",
+    "import_name": "neutronics_material_maker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neutronics-material-maker"
+  },
+  "nevergrad": {
+    "conda_name": "nevergrad",
+    "import_name": "nevergrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nevergrad"
+  },
+  "neworder": {
+    "conda_name": "neworder",
+    "import_name": "neworder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "neworder"
+  },
+  "newrelic-telemetry-sdk": {
+    "conda_name": "newrelic-telemetry-sdk",
+    "import_name": "newrelic_telemetry_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "newrelic-telemetry-sdk"
+  },
+  "newspaper3k": {
+    "conda_name": "newspaper3k",
+    "import_name": "newspaper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "newspaper3k"
+  },
+  "newversion": {
+    "conda_name": "newversion",
+    "import_name": "newversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "newversion"
+  },
+  "nexpy": {
+    "conda_name": "nexpy",
+    "import_name": "nexpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nexpy"
+  },
+  "nexus2srs": {
+    "conda_name": "nexus2srs",
+    "import_name": "nexus2srs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nexus2srs"
+  },
+  "nexusformat": {
+    "conda_name": "nexusformat",
+    "import_name": "nexusformat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nexusformat"
+  },
+  "nfinder": {
+    "conda_name": "nfinder",
+    "import_name": "nfinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nfinder"
+  },
+  "nflows": {
+    "conda_name": "nflows",
+    "import_name": "nflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nflows"
+  },
+  "nfoursid": {
+    "conda_name": "nfoursid",
+    "import_name": "nfoursid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nfoursid"
+  },
+  "ngff-zarr": {
+    "conda_name": "ngff_zarr",
+    "import_name": "ngff_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ngff-zarr"
+  },
+  "ngio": {
+    "conda_name": "ngio",
+    "import_name": "ngio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ngio"
+  },
+  "nglview": {
+    "conda_name": "nglview",
+    "import_name": "nglview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nglview"
+  },
+  "nhs-number": {
+    "conda_name": "nhs-number",
+    "import_name": "nhs_number",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nhs-number"
+  },
+  "niacin": {
+    "conda_name": "niacin",
+    "import_name": "niacin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "niacin"
+  },
+  "nicelib": {
+    "conda_name": "nicelib",
+    "import_name": "nicelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nicelib"
+  },
+  "nichord": {
+    "conda_name": "nichord",
+    "import_name": "nichord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nichord"
+  },
+  "nifti-mrs": {
+    "conda_name": "nifti-mrs",
+    "import_name": "nifti_mrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nifti-mrs"
+  },
+  "nigsp": {
+    "conda_name": "nigsp",
+    "import_name": "nigsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nigsp"
+  },
+  "nikola": {
+    "conda_name": "nikola",
+    "import_name": "nikola",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nikola"
+  },
+  "nilearn": {
+    "conda_name": "nilearn",
+    "import_name": "nilearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nilearn"
+  },
+  "nimfa": {
+    "conda_name": "nimfa",
+    "import_name": "nimfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nimfa"
+  },
+  "nine": {
+    "conda_name": "nine",
+    "import_name": "nine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nine"
+  },
+  "ninja-syntax": {
+    "conda_name": "ninja_syntax",
+    "import_name": "ninja_syntax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ninja-syntax"
+  },
+  "niondata": {
+    "conda_name": "niondata",
+    "import_name": "nion.data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "niondata"
+  },
+  "nionswift-experimental": {
+    "conda_name": "nionswift-experimental",
+    "import_name": "nionswift_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nionswift-experimental"
+  },
+  "nionswift-io": {
+    "conda_name": "nionswift-io",
+    "import_name": "nionswift_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nionswift-io"
+  },
+  "nionswift-usim": {
+    "conda_name": "nionswift-usim",
+    "import_name": "nionswift_plugin.usim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nionswift-usim"
+  },
+  "nionswift-video-capture": {
+    "conda_name": "nionswift-video-capture",
+    "import_name": "nionswift_plugin.nionswift_video_capture",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nionswift-video-capture"
+  },
+  "nionutils": {
+    "conda_name": "nionutils",
+    "import_name": "nion.utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nionutils"
+  },
+  "nipreps-versions": {
+    "conda_name": "nipreps-versions",
+    "import_name": "nipreps_versions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nipreps-versions"
+  },
+  "nipy": {
+    "conda_name": "nipy",
+    "import_name": "nipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nipy"
+  },
+  "nir": {
+    "conda_name": "nir",
+    "import_name": "nir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nir"
+  },
+  "nirtorch": {
+    "conda_name": "nirtorch",
+    "import_name": "nirtorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nirtorch"
+  },
+  "nitransforms": {
+    "conda_name": "nitransforms",
+    "import_name": "nitransforms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nitransforms"
+  },
+  "nitrokey": {
+    "conda_name": "nitrokey",
+    "import_name": "nitrokey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nitrokey"
+  },
+  "niworkflows": {
+    "conda_name": "niworkflows",
+    "import_name": "niworkflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "niworkflows"
+  },
+  "nkdfu": {
+    "conda_name": "nkdfu",
+    "import_name": "nkdfu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nkdfu"
+  },
+  "nldi-flowtools": {
+    "conda_name": "nldi-flowtools",
+    "import_name": "nldi_flowtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nldi-flowtools"
+  },
+  "nllgrid": {
+    "conda_name": "nllgrid",
+    "import_name": "nllgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nllgrid"
+  },
+  "nlp": {
+    "conda_name": "nlp",
+    "import_name": "nlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nlp"
+  },
+  "nlp-feature-extractors": {
+    "conda_name": "nlp-feature-extractors",
+    "import_name": "nlp_feature_extractors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nlp-feature-extractors"
+  },
+  "nlpannotator": {
+    "conda_name": "nlpannotator",
+    "import_name": "nlpannotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nlpannotator"
+  },
+  "nlptest": {
+    "conda_name": "nlptest",
+    "import_name": "nlptest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nlptest"
+  },
+  "nme": {
+    "conda_name": "nme",
+    "import_name": "nme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nme"
+  },
+  "nmma": {
+    "conda_name": "nmma",
+    "import_name": "nmma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nmma"
+  },
+  "nncf": {
+    "conda_name": "nncf",
+    "import_name": "nncf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nncf"
+  },
+  "no-more-breakpoints": {
+    "conda_name": "no-more-breakpoints",
+    "import_name": "no_more_breakpoints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "no-more-breakpoints"
+  },
+  "noaa-coops": {
+    "conda_name": "noaa-coops",
+    "import_name": "noaa_coops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "noaa-coops"
+  },
+  "node-semver": {
+    "conda_name": "python-node-semver",
+    "import_name": "nodesemver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "node-semver"
+  },
+  "node2vec": {
+    "conda_name": "node2vec",
+    "import_name": "node2vec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "node2vec"
+  },
+  "nodify": {
+    "conda_name": "nodify",
+    "import_name": "nodify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nodify"
+  },
+  "nodimo": {
+    "conda_name": "nodimo",
+    "import_name": "nodimo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nodimo"
+  },
+  "noise": {
+    "conda_name": "noise",
+    "import_name": "noise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "noise"
+  },
+  "noisemonitor": {
+    "conda_name": "noisemonitor",
+    "import_name": "noisemonitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "noisemonitor"
+  },
+  "nolearn": {
+    "conda_name": "nolearn",
+    "import_name": "nolearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nolearn"
+  },
+  "nomad-camels": {
+    "conda_name": "nomad-camels",
+    "import_name": "nomad_camels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels"
+  },
+  "nomad-camels-driver-agilent-34401a": {
+    "conda_name": "nomad-camels-driver-agilent-34401a",
+    "import_name": "nomad_camels_driver_agilent_34401a",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-agilent-34401a"
+  },
+  "nomad-camels-driver-cam-control-pylablib": {
+    "conda_name": "nomad-camels-driver-cam-control-pylablib",
+    "import_name": "nomad_camels_driver_cam_control_pylablib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-cam-control-pylablib"
+  },
+  "nomad-camels-driver-demo-instrument": {
+    "conda_name": "nomad-camels-driver-demo-instrument",
+    "import_name": "nomad_camels_driver_demo_instrument",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-demo-instrument"
+  },
+  "nomad-camels-driver-keithley-2000": {
+    "conda_name": "nomad-camels-driver-keithley-2000",
+    "import_name": "nomad_camels_driver_keithley_2000",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keithley-2000"
+  },
+  "nomad-camels-driver-keithley-220": {
+    "conda_name": "nomad-camels-driver-keithley-220",
+    "import_name": "nomad_camels_driver_keithley_220",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keithley-220"
+  },
+  "nomad-camels-driver-keithley-237": {
+    "conda_name": "nomad-camels-driver-keithley-237",
+    "import_name": "nomad_camels_driver_keithley_237",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keithley-237"
+  },
+  "nomad-camels-driver-keithley-2400": {
+    "conda_name": "nomad-camels-driver-keithley-2400",
+    "import_name": "nomad_camels_driver_keithley_2400",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keithley-2400"
+  },
+  "nomad-camels-driver-keysight-b2912a": {
+    "conda_name": "nomad-camels-driver-keysight-b2912a",
+    "import_name": "nomad_camels_driver_keysight_b2912a",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keysight-b2912a"
+  },
+  "nomad-camels-driver-keysight-e5270b": {
+    "conda_name": "nomad-camels-driver-keysight-e5270b",
+    "import_name": "nomad_camels_driver_keysight_e5270b",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-keysight-e5270b"
+  },
+  "nomad-camels-driver-mechonics-cu30cl": {
+    "conda_name": "nomad-camels-driver-mechonics-cu30cl",
+    "import_name": "nomad_camels_driver_mechonics_cu30cl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-mechonics-cu30cl"
+  },
+  "nomad-camels-driver-pid": {
+    "conda_name": "nomad-camels-driver-pid",
+    "import_name": "nomad_camels_driver_PID",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-pid"
+  },
+  "nomad-camels-driver-swabianinstruments-timetagger": {
+    "conda_name": "nomad-camels-driver-swabianinstruments-timetagger",
+    "import_name": "nomad_camels_driver_swabianinstruments_timetagger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-swabianinstruments-timetagger"
+  },
+  "nomad-camels-driver-thorlabs-k10cr1": {
+    "conda_name": "nomad-camels-driver-thorlabs-k10cr1",
+    "import_name": "nomad_camels_driver_thorlabs_K10CR1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-thorlabs-k10cr1"
+  },
+  "nomad-camels-driver-thorlabs-tlpm": {
+    "conda_name": "nomad-camels-driver-thorlabs-tlpm",
+    "import_name": "nomad_camels_driver_thorlabs_TLPM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-thorlabs-tlpm"
+  },
+  "nomad-camels-driver-trinamic-tmcm-1110": {
+    "conda_name": "nomad-camels-driver-trinamic-tmcm-1110",
+    "import_name": "nomad_camels_driver_trinamic_tmcm_1110",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-trinamic-tmcm-1110"
+  },
+  "nomad-camels-driver-voltcraft-pps": {
+    "conda_name": "nomad-camels-driver-voltcraft-pps",
+    "import_name": "nomad_camels_driver_voltcraft_pps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-camels-driver-voltcraft-pps"
+  },
+  "nomad-parser-plugins-atomistic": {
+    "conda_name": "nomad-parser-plugins-atomistic",
+    "import_name": "atomisticparsers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-parser-plugins-atomistic"
+  },
+  "nomad-parser-plugins-electronic": {
+    "conda_name": "nomad-parser-plugins-electronic",
+    "import_name": "electronicparsers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-parser-plugins-electronic"
+  },
+  "nomad-parser-plugins-simulation": {
+    "conda_name": "nomad-parser-plugins-simulation",
+    "import_name": "simulationparsers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-parser-plugins-simulation"
+  },
+  "nomad-parser-plugins-workflow": {
+    "conda_name": "nomad-parser-plugins-workflow",
+    "import_name": "workflowparsers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-parser-plugins-workflow"
+  },
+  "nomad-schema-plugin-run": {
+    "conda_name": "nomad-schema-plugin-run",
+    "import_name": "runschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-schema-plugin-run"
+  },
+  "nomad-schema-plugin-simulation-workflow": {
+    "conda_name": "nomad-schema-plugin-simulation-workflow",
+    "import_name": "simulationworkflowschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nomad-schema-plugin-simulation-workflow"
+  },
+  "norbert": {
+    "conda_name": "norbert",
+    "import_name": "norbert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "norbert"
+  },
+  "normi": {
+    "conda_name": "normi",
+    "import_name": "normi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "normi"
+  },
+  "norse": {
+    "conda_name": "norse",
+    "import_name": "norse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "norse"
+  },
+  "nose-cov": {
+    "conda_name": "nose-cov",
+    "import_name": "nose_cov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-cov"
+  },
+  "nose-exclude": {
+    "conda_name": "nose-exclude",
+    "import_name": "nose_exclude",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-exclude"
+  },
+  "nose-parameterized": {
+    "conda_name": "nose-parameterized",
+    "import_name": "nose_parameterized",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-parameterized"
+  },
+  "nose-progressive": {
+    "conda_name": "nose-progressive",
+    "import_name": "noseprogressive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-progressive"
+  },
+  "nose-timer": {
+    "conda_name": "nose-timer",
+    "import_name": "nosetimer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-timer"
+  },
+  "nose-xunitmp": {
+    "conda_name": "nose_xunitmp",
+    "import_name": "nose_xunitmp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose-xunitmp"
+  },
+  "nose2": {
+    "conda_name": "nose2",
+    "import_name": "nose2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nose2"
+  },
+  "nosexcover": {
+    "conda_name": "nosexcover",
+    "import_name": "nosexcover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nosexcover"
+  },
+  "notebook-as-pdf": {
+    "conda_name": "notebook-as-pdf",
+    "import_name": "notebook_as_pdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notebook-as-pdf"
+  },
+  "notebook-frontend": {
+    "conda_name": "notebook-frontend",
+    "import_name": "notebook_frontend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notebook-frontend"
+  },
+  "notebook-shim": {
+    "conda_name": "notebook-shim",
+    "import_name": "notebook_shim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notebook-shim"
+  },
+  "notebookscripter": {
+    "conda_name": "notebookscripter",
+    "import_name": "NotebookScripter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notebookscripter"
+  },
+  "notedown": {
+    "conda_name": "notedown",
+    "import_name": "notedown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notedown"
+  },
+  "noteslib": {
+    "conda_name": "noteslib",
+    "import_name": "noteslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "noteslib"
+  },
+  "notify2": {
+    "conda_name": "notify2",
+    "import_name": "notify2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notify2"
+  },
+  "notion-client": {
+    "conda_name": "notion-client",
+    "import_name": "notion_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notion-client"
+  },
+  "notolog": {
+    "conda_name": "notolog",
+    "import_name": "notolog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "notolog"
+  },
+  "novas": {
+    "conda_name": "novas",
+    "import_name": "novas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "novas"
+  },
+  "nox-poetry": {
+    "conda_name": "nox-poetry",
+    "import_name": "nox_poetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nox-poetry"
+  },
+  "np-utils": {
+    "conda_name": "np_utils",
+    "import_name": "np_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "np-utils"
+  },
+  "npctypes": {
+    "conda_name": "npctypes",
+    "import_name": "npctypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npctypes"
+  },
+  "npe2": {
+    "conda_name": "npe2",
+    "import_name": "npe2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npe2"
+  },
+  "npstreams": {
+    "conda_name": "npstreams",
+    "import_name": "npstreams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npstreams"
+  },
+  "npx": {
+    "conda_name": "npx",
+    "import_name": "npx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npx"
+  },
+  "npy2bdv": {
+    "conda_name": "npy2bdv",
+    "import_name": "npy2bdv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npy2bdv"
+  },
+  "npysearch": {
+    "conda_name": "npysearch",
+    "import_name": "npysearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "npysearch"
+  },
+  "nqlib": {
+    "conda_name": "nqlib",
+    "import_name": "nqlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nqlib"
+  },
+  "nr-bundler": {
+    "conda_name": "nr.bundler",
+    "import_name": "nr.bundler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-bundler"
+  },
+  "nr-cli": {
+    "conda_name": "nr.cli",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-cli"
+  },
+  "nr-config": {
+    "conda_name": "nr.config",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-config"
+  },
+  "nr-date": {
+    "conda_name": "nr.date",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-date"
+  },
+  "nr-fs": {
+    "conda_name": "nr.fs",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-fs"
+  },
+  "nr-optional": {
+    "conda_name": "nr.optional",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-optional"
+  },
+  "nr-parse": {
+    "conda_name": "nr.parse",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-parse"
+  },
+  "nr-parsing-date": {
+    "conda_name": "nr.parsing.date",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-parsing-date"
+  },
+  "nr-preconditions": {
+    "conda_name": "nr.preconditions",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-preconditions"
+  },
+  "nr-pylang-utils": {
+    "conda_name": "nr.pylang.utils",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-pylang-utils"
+  },
+  "nr-stream": {
+    "conda_name": "nr.stream",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-stream"
+  },
+  "nr-types": {
+    "conda_name": "nr.types",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-types"
+  },
+  "nr-util": {
+    "conda_name": "nr.util",
+    "import_name": "nr.util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-util"
+  },
+  "nr-utils-re": {
+    "conda_name": "nr.utils.re",
+    "import_name": "nr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nr-utils-re"
+  },
+  "nrel-routee-compass": {
+    "conda_name": "nrel.routee.compass",
+    "import_name": "nrel.routee.compass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nrel-routee-compass"
+  },
+  "nrtk": {
+    "conda_name": "nrtk",
+    "import_name": "nrtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nrtk"
+  },
+  "nrtk-explorer": {
+    "conda_name": "nrtk-explorer",
+    "import_name": "nrtk_explorer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nrtk-explorer"
+  },
+  "nsidc-iceflow": {
+    "conda_name": "nsidc-iceflow",
+    "import_name": "nsidc.iceflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nsidc-iceflow"
+  },
+  "nskeyedunarchiver": {
+    "conda_name": "nskeyedunarchiver",
+    "import_name": "NSKeyedUnArchiver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nskeyedunarchiver"
+  },
+  "nsls2-detector-handlers": {
+    "conda_name": "nsls2-detector-handlers",
+    "import_name": "nsls2_detector_handlers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nsls2-detector-handlers"
+  },
+  "nslsii": {
+    "conda_name": "nslsii",
+    "import_name": "nslsii",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nslsii"
+  },
+  "nteract-on-jupyter": {
+    "conda_name": "nteract_on_jupyter",
+    "import_name": "nteract_on_jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nteract-on-jupyter"
+  },
+  "ntlm-auth": {
+    "conda_name": "ntlm-auth",
+    "import_name": "ntlm_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ntlm-auth"
+  },
+  "ntplib": {
+    "conda_name": "ntplib",
+    "import_name": "ntplib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ntplib"
+  },
+  "nu-gitflow": {
+    "conda_name": "gitflow",
+    "import_name": "gitflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nu-gitflow"
+  },
+  "nucleopt": {
+    "conda_name": "nucleopt",
+    "import_name": "nucleobench",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nucleopt"
+  },
+  "nuitka": {
+    "conda_name": "nuitka",
+    "import_name": "nuitka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nuitka"
+  },
+  "numba-celltree": {
+    "conda_name": "numba_celltree",
+    "import_name": "numba_celltree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba-celltree"
+  },
+  "numba-lapack": {
+    "conda_name": "numba-lapack",
+    "import_name": "numba_lapack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba-lapack"
+  },
+  "numba-progress": {
+    "conda_name": "numba-progress",
+    "import_name": "numba_progress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba-progress"
+  },
+  "numba-quaternion": {
+    "conda_name": "numba_quaternion",
+    "import_name": "numba_quaternion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba-quaternion"
+  },
+  "numba-scipy": {
+    "conda_name": "numba-scipy",
+    "import_name": "numba_scipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba-scipy"
+  },
+  "numba4jax": {
+    "conda_name": "numba4jax",
+    "import_name": "numba4jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numba4jax"
+  },
+  "numbacs": {
+    "conda_name": "numbacs",
+    "import_name": "numbacs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numbacs"
+  },
+  "numbagg": {
+    "conda_name": "numbagg",
+    "import_name": "numbagg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numbagg"
+  },
+  "numbasom": {
+    "conda_name": "numbasom",
+    "import_name": "numbasom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numbasom"
+  },
+  "numberpartitioning": {
+    "conda_name": "numberpartitioning",
+    "import_name": "numberpartitioning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numberpartitioning"
+  },
+  "numcodecs": {
+    "conda_name": "numcodecs",
+    "import_name": "numcodecs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numcodecs"
+  },
+  "numconv": {
+    "conda_name": "numconv",
+    "import_name": "numconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numconv"
+  },
+  "numdifftools": {
+    "conda_name": "numdifftools",
+    "import_name": "numdifftools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numdifftools"
+  },
+  "numericalunits": {
+    "conda_name": "numericalunits",
+    "import_name": "numericalunits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numericalunits"
+  },
+  "numerizer": {
+    "conda_name": "numerizer",
+    "import_name": "numerizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numerizer"
+  },
+  "numexpr": {
+    "conda_name": "numexpr",
+    "import_name": "numexpr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numexpr"
+  },
+  "numina": {
+    "conda_name": "numina",
+    "import_name": "numina",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numina"
+  },
+  "numkit": {
+    "conda_name": "numkit",
+    "import_name": "numkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numkit"
+  },
+  "numpngw": {
+    "conda_name": "numpngw",
+    "import_name": "numpngw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpngw"
+  },
+  "numpy": {
+    "conda_name": "numpy",
+    "import_name": "numpy",
+    "mapping_source": "static",
+    "pypi_name": "numpy"
+  },
+  "numpy-allocator": {
+    "conda_name": "numpy-allocator",
+    "import_name": "numpy_allocator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-allocator"
+  },
+  "numpy-financial": {
+    "conda_name": "numpy-financial",
+    "import_name": "numpy_financial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-financial"
+  },
+  "numpy-groupies": {
+    "conda_name": "numpy_groupies",
+    "import_name": "numpy_groupies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-groupies"
+  },
+  "numpy-quaternion": {
+    "conda_name": "quaternion",
+    "import_name": "quaternion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-quaternion"
+  },
+  "numpy-ringbuffer": {
+    "conda_name": "numpy_ringbuffer",
+    "import_name": "numpy_ringbuffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-ringbuffer"
+  },
+  "numpy-stl": {
+    "conda_name": "numpy-stl",
+    "import_name": "stl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-stl"
+  },
+  "numpy-sugar": {
+    "conda_name": "numpy-sugar",
+    "import_name": "numpy_sugar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpy-sugar"
+  },
+  "numpydantic": {
+    "conda_name": "numpydantic",
+    "import_name": "numpydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpydantic"
+  },
+  "numpydoc-decorator": {
+    "conda_name": "numpydoc_decorator",
+    "import_name": "numpydoc_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numpydoc-decorator"
+  },
+  "numthreads": {
+    "conda_name": "numthreads",
+    "import_name": "numthreads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "numthreads"
+  },
+  "nvector": {
+    "conda_name": "nvector",
+    "import_name": "nvector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nvector"
+  },
+  "nvidia-ml-py": {
+    "conda_name": "nvidia-ml-py",
+    "import_name": "pynvml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nvidia-ml-py"
+  },
+  "nvidia-ml-py3": {
+    "conda_name": "nvidia-ml",
+    "import_name": "pynvml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nvidia-ml-py3"
+  },
+  "nvitop": {
+    "conda_name": "nvitop",
+    "import_name": "nvitop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nvitop"
+  },
+  "nvtx": {
+    "conda_name": "nvtx",
+    "import_name": "nvtx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nvtx"
+  },
+  "nwb2bids": {
+    "conda_name": "nwb2bids",
+    "import_name": "nwb2bids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nwb2bids"
+  },
+  "nwbinspector": {
+    "conda_name": "nwbinspector",
+    "import_name": "nwbinspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nwbinspector"
+  },
+  "nxmx": {
+    "conda_name": "nxmx",
+    "import_name": "nxmx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nxmx"
+  },
+  "nxviz": {
+    "conda_name": "nxviz",
+    "import_name": "nxviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nxviz"
+  },
+  "nystrom-attention": {
+    "conda_name": "nystrom-attention",
+    "import_name": "nystrom_attention",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nystrom-attention"
+  },
+  "nyxtools": {
+    "conda_name": "nyxtools",
+    "import_name": "nyxtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nyxtools"
+  },
+  "nzgeom": {
+    "conda_name": "nzgeom",
+    "import_name": "nzgeom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nzgeom"
+  },
+  "nzpy": {
+    "conda_name": "nzpy",
+    "import_name": "nzpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "nzpy"
+  },
+  "o365": {
+    "conda_name": "o365",
+    "import_name": "O365",
+    "mapping_source": "regro-bot",
+    "pypi_name": "o365"
+  },
+  "oast": {
+    "conda_name": "oast",
+    "import_name": "oast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oast"
+  },
+  "oath": {
+    "conda_name": "oath",
+    "import_name": "oath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oath"
+  },
+  "oauth2": {
+    "conda_name": "oauth2",
+    "import_name": "oauth2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oauth2"
+  },
+  "oauth2client": {
+    "conda_name": "oauth2client",
+    "import_name": "oauth2client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oauth2client"
+  },
+  "oauthlib": {
+    "conda_name": "oauthlib",
+    "import_name": "oauthlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oauthlib"
+  },
+  "objectgraph": {
+    "conda_name": "objectgraph",
+    "import_name": "objectgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objectgraph"
+  },
+  "objectlist": {
+    "conda_name": "objectlist",
+    "import_name": "objectlist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objectlist"
+  },
+  "objectpath": {
+    "conda_name": "objectpath",
+    "import_name": "objectpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objectpath"
+  },
+  "objexplore": {
+    "conda_name": "objexplore",
+    "import_name": "objexplore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objexplore"
+  },
+  "objgraph": {
+    "conda_name": "objgraph",
+    "import_name": "objgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objgraph"
+  },
+  "objprint": {
+    "conda_name": "objprint",
+    "import_name": "objprint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "objprint"
+  },
+  "obplatform": {
+    "conda_name": "obplatform",
+    "import_name": "obplatform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obplatform"
+  },
+  "obspec": {
+    "conda_name": "obspec",
+    "import_name": "obspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obspec"
+  },
+  "obspec-utils": {
+    "conda_name": "obspec_utils",
+    "import_name": "obspec_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obspec-utils"
+  },
+  "obsplus": {
+    "conda_name": "obsplus",
+    "import_name": "obsplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obsplus"
+  },
+  "obspy": {
+    "conda_name": "obspy",
+    "import_name": "obspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obspy"
+  },
+  "obspyck": {
+    "conda_name": "obspyck",
+    "import_name": "obspyck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "obspyck"
+  },
+  "ocap": {
+    "conda_name": "ocap",
+    "import_name": "owa.ocap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocap"
+  },
+  "ocean-data-gateway": {
+    "conda_name": "ocean_data_gateway",
+    "import_name": "ocean_data_gateway",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocean-data-gateway"
+  },
+  "ocean-model-skill-assessor": {
+    "conda_name": "ocean-model-skill-assessor",
+    "import_name": "ocean_model_skill_assessor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocean-model-skill-assessor"
+  },
+  "ocean-wave-tracing": {
+    "conda_name": "ocean-wave-tracing",
+    "import_name": "ocean_wave_tracing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocean-wave-tracing"
+  },
+  "oceancolor": {
+    "conda_name": "oceancolor",
+    "import_name": "OceanColor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oceancolor"
+  },
+  "oceansdb": {
+    "conda_name": "oceansdb",
+    "import_name": "oceansdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oceansdb"
+  },
+  "oceanum": {
+    "conda_name": "oceanum",
+    "import_name": "oceanum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oceanum"
+  },
+  "oceanumlab": {
+    "conda_name": "oceanumlab",
+    "import_name": "oceanumlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oceanumlab"
+  },
+  "oceanval": {
+    "conda_name": "oceanval",
+    "import_name": "oceanval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oceanval"
+  },
+  "ocetrac": {
+    "conda_name": "ocetrac",
+    "import_name": "ocetrac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocetrac"
+  },
+  "ocha-anticipy": {
+    "conda_name": "ocha-anticipy",
+    "import_name": "ochanticipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocha-anticipy"
+  },
+  "oci": {
+    "conda_name": "oci",
+    "import_name": "oci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oci"
+  },
+  "ocifs": {
+    "conda_name": "ocifs",
+    "import_name": "ocifs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocifs"
+  },
+  "ocpsvg": {
+    "conda_name": "ocpsvg",
+    "import_name": "ocpsvg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ocpsvg"
+  },
+  "octave-kernel": {
+    "conda_name": "octave_kernel",
+    "import_name": "octave_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "octave-kernel"
+  },
+  "octokitpy": {
+    "conda_name": "octokitpy",
+    "import_name": "octokit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "octokitpy"
+  },
+  "octokitpy-routes": {
+    "conda_name": "octokitpy-routes",
+    "import_name": "octokit_routes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "octokitpy-routes"
+  },
+  "od": {
+    "conda_name": "od",
+    "import_name": "od",
+    "mapping_source": "regro-bot",
+    "pypi_name": "od"
+  },
+  "oda-api": {
+    "conda_name": "oda-api",
+    "import_name": "oda_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oda-api"
+  },
+  "odachi": {
+    "conda_name": "odachi",
+    "import_name": "odachi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odachi"
+  },
+  "odc-apps-dc-tools": {
+    "conda_name": "odc-apps-dc-tools",
+    "import_name": "odc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-apps-dc-tools"
+  },
+  "odc-cloud": {
+    "conda_name": "odc-cloud",
+    "import_name": "odc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-cloud"
+  },
+  "odc-dscache": {
+    "conda_name": "odc-dscache",
+    "import_name": "odc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-dscache"
+  },
+  "odc-geo": {
+    "conda_name": "odc-geo",
+    "import_name": "odc.geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-geo"
+  },
+  "odc-io": {
+    "conda_name": "odc-io",
+    "import_name": "odc.io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-io"
+  },
+  "odc-loader": {
+    "conda_name": "odc-loader",
+    "import_name": "odc.loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-loader"
+  },
+  "odc-stac": {
+    "conda_name": "odc-stac",
+    "import_name": "odc.stac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-stac"
+  },
+  "odc-stats": {
+    "conda_name": "odc-stats",
+    "import_name": "odc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odc-stats"
+  },
+  "odfpy": {
+    "conda_name": "odfpy",
+    "import_name": "odf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odfpy"
+  },
+  "odrpack": {
+    "conda_name": "odrpack",
+    "import_name": "odrpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odrpack"
+  },
+  "odvc": {
+    "conda_name": "odvc",
+    "import_name": "odvc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "odvc"
+  },
+  "office365-rest-python-client": {
+    "conda_name": "office365-rest-python-client",
+    "import_name": "office365",
+    "mapping_source": "regro-bot",
+    "pypi_name": "office365-rest-python-client"
+  },
+  "offset": {
+    "conda_name": "offset",
+    "import_name": "offset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "offset"
+  },
+  "offset-subtraction": {
+    "conda_name": "offset-subtraction",
+    "import_name": "Offset_Subtraction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "offset-subtraction"
+  },
+  "ofiber": {
+    "conda_name": "ofiber",
+    "import_name": "ofiber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ofiber"
+  },
+  "ofxclient": {
+    "conda_name": "ofxclient",
+    "import_name": "ofxclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ofxclient"
+  },
+  "ofxhome": {
+    "conda_name": "ofxhome",
+    "import_name": "ofxhome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ofxhome"
+  },
+  "ofxparse": {
+    "conda_name": "ofxparse",
+    "import_name": "ofxparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ofxparse"
+  },
+  "ogb": {
+    "conda_name": "ogb",
+    "import_name": "ogb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ogb"
+  },
+  "ogh": {
+    "conda_name": "ogh",
+    "import_name": "ogh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ogh"
+  },
+  "ogs5py": {
+    "conda_name": "ogs5py",
+    "import_name": "ogs5py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ogs5py"
+  },
+  "ogstools": {
+    "conda_name": "ogstools",
+    "import_name": "ogstools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ogstools"
+  },
+  "oic": {
+    "conda_name": "oic",
+    "import_name": "oic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oic"
+  },
+  "oiffile": {
+    "conda_name": "oiffile",
+    "import_name": "oiffile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oiffile"
+  },
+  "oirfile": {
+    "conda_name": "oirfile",
+    "import_name": "oirfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oirfile"
+  },
+  "okapi-em": {
+    "conda_name": "okapi-em",
+    "import_name": "okapi_em",
+    "mapping_source": "regro-bot",
+    "pypi_name": "okapi-em"
+  },
+  "okonomiyaki": {
+    "conda_name": "okonomiyaki",
+    "import_name": "okonomiyaki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "okonomiyaki"
+  },
+  "okta-jwt-verifier": {
+    "conda_name": "okta-jwt-verifier",
+    "import_name": "okta_jwt_verifier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "okta-jwt-verifier"
+  },
+  "oktopus": {
+    "conda_name": "oktopus",
+    "import_name": "oktopus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oktopus"
+  },
+  "olas": {
+    "conda_name": "olas",
+    "import_name": "olas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "olas"
+  },
+  "olefile": {
+    "conda_name": "olefile",
+    "import_name": "olefile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "olefile"
+  },
+  "ollama": {
+    "conda_name": "ollama-python",
+    "import_name": "ollama",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ollama"
+  },
+  "om-pycycle": {
+    "conda_name": "pycycle",
+    "import_name": "pycycle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "om-pycycle"
+  },
+  "ome-zarr": {
+    "conda_name": "ome-zarr",
+    "import_name": "ome_zarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ome-zarr"
+  },
+  "omegaconf": {
+    "conda_name": "omegaconf",
+    "import_name": "omegaconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omegaconf"
+  },
+  "omero-marshal": {
+    "conda_name": "omero-marshal",
+    "import_name": "omero_marshal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omero-marshal"
+  },
+  "omero-rdf": {
+    "conda_name": "omero-rdf",
+    "import_name": "omero_rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omero-rdf"
+  },
+  "omero-rois": {
+    "conda_name": "omero-rois",
+    "import_name": "omero_rois",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omero-rois"
+  },
+  "omf": {
+    "conda_name": "omf",
+    "import_name": "omf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omf"
+  },
+  "omfiles": {
+    "conda_name": "omfiles",
+    "import_name": "omfiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omfiles"
+  },
+  "omfit-classes": {
+    "conda_name": "omfit_classes",
+    "import_name": "omfit_classes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omfit-classes"
+  },
+  "omicron-utils": {
+    "conda_name": "omicron_utils",
+    "import_name": "omicron_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omicron-utils"
+  },
+  "omicverse": {
+    "conda_name": "omicverse",
+    "import_name": "omicverse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omicverse"
+  },
+  "omnicloudmask": {
+    "conda_name": "omnicloudmask",
+    "import_name": "omnicloudmask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omnicloudmask"
+  },
+  "omnifit": {
+    "conda_name": "omnifit",
+    "import_name": "omnifit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omnifit"
+  },
+  "omnipath": {
+    "conda_name": "omnipath",
+    "import_name": "omnipath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omnipath"
+  },
+  "omnipkg": {
+    "conda_name": "omnipkg",
+    "import_name": "omnipkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omnipkg"
+  },
+  "omniwatermask": {
+    "conda_name": "omniwatermask",
+    "import_name": "omniwatermask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omniwatermask"
+  },
+  "omnixai": {
+    "conda_name": "omnixai",
+    "import_name": "omnixai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "omnixai"
+  },
+  "ompython": {
+    "conda_name": "ompython",
+    "import_name": "OMPython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ompython"
+  },
+  "oneat": {
+    "conda_name": "oneat",
+    "import_name": "oneat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oneat"
+  },
+  "oneat-augmentations": {
+    "conda_name": "oneat-augmentations",
+    "import_name": "oneat_augmentations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oneat-augmentations"
+  },
+  "onedatafilerestclient": {
+    "conda_name": "onedatafilerestclient",
+    "import_name": "onedatafilerestclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onedatafilerestclient"
+  },
+  "onedrivedownloader": {
+    "conda_name": "onedrivedownloader",
+    "import_name": "onedrivedownloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onedrivedownloader"
+  },
+  "onnx-ir": {
+    "conda_name": "onnx-ir",
+    "import_name": "onnx_ir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnx-ir"
+  },
+  "onnx-tf": {
+    "conda_name": "onnx-tf",
+    "import_name": "onnx_tf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnx-tf"
+  },
+  "onnx2pytorch": {
+    "conda_name": "onnx2pytorch",
+    "import_name": "onnx2pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnx2pytorch"
+  },
+  "onnx2torch": {
+    "conda_name": "onnx2torch",
+    "import_name": "onnx2torch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnx2torch"
+  },
+  "onnxoptimizer": {
+    "conda_name": "onnxoptimizer",
+    "import_name": "onnxoptimizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnxoptimizer"
+  },
+  "onnxscript": {
+    "conda_name": "onnxscript",
+    "import_name": "onnxscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "onnxscript"
+  },
+  "ood-metrics": {
+    "conda_name": "ood-metrics",
+    "import_name": "ood_metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ood-metrics"
+  },
+  "ooipy": {
+    "conda_name": "ooipy",
+    "import_name": "ooipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ooipy"
+  },
+  "oommfc": {
+    "conda_name": "oommfc",
+    "import_name": "oommfc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oommfc"
+  },
+  "oommfodt": {
+    "conda_name": "oommfodt",
+    "import_name": "oommfodt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oommfodt"
+  },
+  "ooouno": {
+    "conda_name": "ooouno",
+    "import_name": "ooo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ooouno"
+  },
+  "oop-ext": {
+    "conda_name": "oop-ext",
+    "import_name": "oop_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oop-ext"
+  },
+  "opcua": {
+    "conda_name": "opcua",
+    "import_name": "opcua",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opcua"
+  },
+  "open-exchange": {
+    "conda_name": "open-exchange",
+    "import_name": "open_exchange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "open-exchange"
+  },
+  "open-notebook": {
+    "conda_name": "open-notebook",
+    "import_name": "open_notebook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "open-notebook"
+  },
+  "open-radar-data": {
+    "conda_name": "open-radar-data",
+    "import_name": "open_radar_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "open-radar-data"
+  },
+  "openactive": {
+    "conda_name": "openactive",
+    "import_name": "openactive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openactive"
+  },
+  "openai-clip": {
+    "conda_name": "openai-clip",
+    "import_name": "clip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openai-clip"
+  },
+  "openai-whisper": {
+    "conda_name": "openai-whisper",
+    "import_name": "whisper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openai-whisper"
+  },
+  "openalpr": {
+    "conda_name": "py-openalpr",
+    "import_name": "openalpr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openalpr"
+  },
+  "openamundsen": {
+    "conda_name": "openamundsen",
+    "import_name": "openamundsen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openamundsen"
+  },
+  "openap": {
+    "conda_name": "openap",
+    "import_name": "openap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openap"
+  },
+  "openapi-codec": {
+    "conda_name": "openapi-codec",
+    "import_name": "openapi_codec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openapi-codec"
+  },
+  "openapi-pydantic": {
+    "conda_name": "openapi-pydantic",
+    "import_name": "openapi_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openapi-pydantic"
+  },
+  "openapi-python-client": {
+    "conda_name": "openapi-python-client",
+    "import_name": "openapi_python_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openapi-python-client"
+  },
+  "openapi-schema-pydantic": {
+    "conda_name": "openapi-schema-pydantic",
+    "import_name": "openapi_schema_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openapi-schema-pydantic"
+  },
+  "opencensus": {
+    "conda_name": "opencensus",
+    "import_name": "opencensus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opencensus"
+  },
+  "opencensus-context": {
+    "conda_name": "opencensus-context",
+    "import_name": "opencensus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opencensus-context"
+  },
+  "opencensus-ext-azure": {
+    "conda_name": "opencensus-ext-azure",
+    "import_name": "opencensus.ext.azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opencensus-ext-azure"
+  },
+  "opencensus-proto": {
+    "conda_name": "opencensus-proto",
+    "import_name": "opencensus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opencensus-proto"
+  },
+  "opencv-python": {
+    "conda_name": "opencv",
+    "import_name": "cv2",
+    "mapping_source": "static",
+    "pypi_name": "opencv-python"
+  },
+  "opencv-python-headless": {
+    "conda_name": "opencv",
+    "import_name": "cv2",
+    "mapping_source": "static",
+    "pypi_name": "opencv-python-headless"
+  },
+  "opendap-protocol": {
+    "conda_name": "opendap-protocol",
+    "import_name": "opendap_protocol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opendap-protocol"
+  },
+  "opendatasets": {
+    "conda_name": "opendatasets",
+    "import_name": "opendatasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opendatasets"
+  },
+  "opendp-smartnoise": {
+    "conda_name": "opendp-smartnoise",
+    "import_name": "opendp.smartnoise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opendp-smartnoise"
+  },
+  "opendp-smartnoise-core": {
+    "conda_name": "opendp-smartnoise-core",
+    "import_name": "opendp.smartnoise.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opendp-smartnoise-core"
+  },
+  "opendrift": {
+    "conda_name": "opendrift",
+    "import_name": "opendrift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opendrift"
+  },
+  "openfermion": {
+    "conda_name": "openfermion",
+    "import_name": "openfermion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfermion"
+  },
+  "openfermionpsi4": {
+    "conda_name": "openfermionpsi4",
+    "import_name": "openfermionpsi4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfermionpsi4"
+  },
+  "openfermionpyscf": {
+    "conda_name": "openfermionpyscf",
+    "import_name": "openfermionpyscf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfermionpyscf"
+  },
+  "openff-nagl-models": {
+    "conda_name": "openff-nagl-models",
+    "import_name": "openff.nagl_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openff-nagl-models"
+  },
+  "openfile": {
+    "conda_name": "openfile",
+    "import_name": "openfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfile"
+  },
+  "openfisca-core": {
+    "conda_name": "openfisca-core",
+    "import_name": "openfisca_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfisca-core"
+  },
+  "openfisca-france": {
+    "conda_name": "openfisca-france",
+    "import_name": "openfisca_france",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfisca-france"
+  },
+  "openfl": {
+    "conda_name": "openfl",
+    "import_name": "openfl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openfl"
+  },
+  "opengeotech": {
+    "conda_name": "opengeotech",
+    "import_name": "opengeotech",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opengeotech"
+  },
+  "openhsi": {
+    "conda_name": "openhsi",
+    "import_name": "openhsi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openhsi"
+  },
+  "openidc-client": {
+    "conda_name": "openidc_client",
+    "import_name": "openidc_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openidc-client"
+  },
+  "openinference-instrumentation": {
+    "conda_name": "openinference-instrumentation",
+    "import_name": "openinference.instrumentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation"
+  },
+  "openinference-instrumentation-anthropic": {
+    "conda_name": "openinference-instrumentation-anthropic",
+    "import_name": "openinference.instrumentation.anthropic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-anthropic"
+  },
+  "openinference-instrumentation-bedrock": {
+    "conda_name": "openinference-instrumentation-bedrock",
+    "import_name": "openinference.instrumentation.bedrock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-bedrock"
+  },
+  "openinference-instrumentation-dspy": {
+    "conda_name": "openinference-instrumentation-dspy",
+    "import_name": "openinference.instrumentation.dspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-dspy"
+  },
+  "openinference-instrumentation-haystack": {
+    "conda_name": "openinference-instrumentation-haystack",
+    "import_name": "openinference.instrumentation.haystack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-haystack"
+  },
+  "openinference-instrumentation-langchain": {
+    "conda_name": "openinference-instrumentation-langchain",
+    "import_name": "openinference.instrumentation.langchain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-langchain"
+  },
+  "openinference-instrumentation-llama-index": {
+    "conda_name": "openinference-instrumentation-llama-index",
+    "import_name": "openinference.instrumentation.llama_index",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-llama-index"
+  },
+  "openinference-instrumentation-mistralai": {
+    "conda_name": "openinference-instrumentation-mistralai",
+    "import_name": "openinference.instrumentation.mistralai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-mistralai"
+  },
+  "openinference-instrumentation-openai": {
+    "conda_name": "openinference-instrumentation-openai",
+    "import_name": "openinference.instrumentation.openai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-openai"
+  },
+  "openinference-instrumentation-openai-agents": {
+    "conda_name": "openinference-instrumentation-openai-agents",
+    "import_name": "openinference.instrumentation.openai_agents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-openai-agents"
+  },
+  "openinference-instrumentation-vertexai": {
+    "conda_name": "openinference-instrumentation-vertexai",
+    "import_name": "openinference.instrumentation.vertexai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-instrumentation-vertexai"
+  },
+  "openinference-semantic-conventions": {
+    "conda_name": "openinference-semantic-conventions",
+    "import_name": "openinference.semconv.trace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openinference-semantic-conventions"
+  },
+  "opening-hours-py": {
+    "conda_name": "opening-hours-py",
+    "import_name": "opening_hours",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opening-hours-py"
+  },
+  "openlineage-airflow": {
+    "conda_name": "openlineage-airflow",
+    "import_name": "openlineage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openlineage-airflow"
+  },
+  "openllm": {
+    "conda_name": "openllm",
+    "import_name": "openllm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openllm"
+  },
+  "openllm-client": {
+    "conda_name": "openllm-client",
+    "import_name": "openllm_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openllm-client"
+  },
+  "openllm-core": {
+    "conda_name": "openllm-core",
+    "import_name": "openllm_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openllm-core"
+  },
+  "openmatrix": {
+    "conda_name": "openmatrix",
+    "import_name": "openmatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmatrix"
+  },
+  "openmc-plotter": {
+    "conda_name": "openmc-plotter",
+    "import_name": "openmc_plotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmc-plotter"
+  },
+  "openmesh": {
+    "conda_name": "openmesh-python",
+    "import_name": "openmesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmesh"
+  },
+  "openmetadata-managed-apis": {
+    "conda_name": "openmetadata-managed-apis",
+    "import_name": "openmetadata_managed_apis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmetadata-managed-apis"
+  },
+  "openmetadata-sqllineage": {
+    "conda_name": "openmetadata-sqllineage",
+    "import_name": "sqllineage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmetadata-sqllineage"
+  },
+  "openmeteo-requests": {
+    "conda_name": "openmeteo_requests",
+    "import_name": "openmeteo_requests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmeteo-requests"
+  },
+  "openmeteo-sdk": {
+    "conda_name": "openmeteo-sdk",
+    "import_name": "openmeteo_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmeteo-sdk"
+  },
+  "openmim": {
+    "conda_name": "openmim",
+    "import_name": "mim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openmim"
+  },
+  "openml": {
+    "conda_name": "openml",
+    "import_name": "openml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openml"
+  },
+  "openneuro-py": {
+    "conda_name": "openneuro-py",
+    "import_name": "openneuro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openneuro-py"
+  },
+  "openpathsampling": {
+    "conda_name": "openpathsampling",
+    "import_name": "openpathsampling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openpathsampling"
+  },
+  "openpathsampling-cli": {
+    "conda_name": "openpathsampling-cli",
+    "import_name": "paths_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openpathsampling-cli"
+  },
+  "openpnm": {
+    "conda_name": "openpnm",
+    "import_name": "openpnm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openpnm"
+  },
+  "openpyxl": {
+    "conda_name": "openpyxl",
+    "import_name": "openpyxl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openpyxl"
+  },
+  "openqasm3": {
+    "conda_name": "openqasm3",
+    "import_name": "openqasm3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openqasm3"
+  },
+  "openqdc": {
+    "conda_name": "openqdc",
+    "import_name": "openqdc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openqdc"
+  },
+  "opensarlab-lib": {
+    "conda_name": "opensarlab_lib",
+    "import_name": "opensarlab_lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensarlab-lib"
+  },
+  "opensarlab-profile-label": {
+    "conda_name": "opensarlab-profile-label",
+    "import_name": "opensarlab_profile_label",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensarlab-profile-label"
+  },
+  "openscm-runner": {
+    "conda_name": "openscm-runner",
+    "import_name": "openscm_runner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openscm-runner"
+  },
+  "openscm-twolayermodel": {
+    "conda_name": "openscm-twolayermodel",
+    "import_name": "openscm_twolayermodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openscm-twolayermodel"
+  },
+  "opensearch-dsl": {
+    "conda_name": "opensearch-dsl",
+    "import_name": "opensearch_dsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensearch-dsl"
+  },
+  "opensearch-py": {
+    "conda_name": "opensearch-py",
+    "import_name": "opensearchpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensearch-py"
+  },
+  "openseries": {
+    "conda_name": "openseries",
+    "import_name": "openseries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openseries"
+  },
+  "opensimplex": {
+    "conda_name": "opensimplex",
+    "import_name": "opensimplex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensimplex"
+  },
+  "openslide-python": {
+    "conda_name": "openslide-python",
+    "import_name": "openslide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openslide-python"
+  },
+  "opensmog": {
+    "conda_name": "opensmog",
+    "import_name": "OpenSMOG",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensmog"
+  },
+  "opensource": {
+    "conda_name": "opensource",
+    "import_name": "opensource",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opensource"
+  },
+  "openspoor": {
+    "conda_name": "openspoor",
+    "import_name": "openspoor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openspoor"
+  },
+  "openstep-parser": {
+    "conda_name": "openstep-parser",
+    "import_name": "openstep_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openstep-parser"
+  },
+  "openstep-plist": {
+    "conda_name": "openstep-plist",
+    "import_name": "openstep_plist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openstep-plist"
+  },
+  "opentelemetry-api": {
+    "conda_name": "opentelemetry-api",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-api"
+  },
+  "opentelemetry-distro": {
+    "conda_name": "opentelemetry-distro",
+    "import_name": "opentelemetry.distro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-distro"
+  },
+  "opentelemetry-exporter-datadog": {
+    "conda_name": "opentelemetry-exporter-datadog",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-datadog"
+  },
+  "opentelemetry-exporter-gcp-monitoring": {
+    "conda_name": "opentelemetry-exporter-gcp-monitoring",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-gcp-monitoring"
+  },
+  "opentelemetry-exporter-gcp-trace": {
+    "conda_name": "opentelemetry-exporter-gcp-trace",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-gcp-trace"
+  },
+  "opentelemetry-exporter-google-cloud": {
+    "conda_name": "opentelemetry-exporter-google-cloud",
+    "import_name": "opentelemetry.exporter.cloud_trace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-google-cloud"
+  },
+  "opentelemetry-exporter-jaeger": {
+    "conda_name": "opentelemetry-exporter-jaeger",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-jaeger"
+  },
+  "opentelemetry-exporter-jaeger-proto-grpc": {
+    "conda_name": "opentelemetry-exporter-jaeger-proto-grpc",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-jaeger-proto-grpc"
+  },
+  "opentelemetry-exporter-jaeger-thrift": {
+    "conda_name": "opentelemetry-exporter-jaeger-thrift",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-jaeger-thrift"
+  },
+  "opentelemetry-exporter-opencensus": {
+    "conda_name": "opentelemetry-exporter-opencensus",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-opencensus"
+  },
+  "opentelemetry-exporter-otlp": {
+    "conda_name": "opentelemetry-exporter-otlp",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-otlp"
+  },
+  "opentelemetry-exporter-otlp-proto-common": {
+    "conda_name": "opentelemetry-exporter-otlp-proto-common",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-otlp-proto-common"
+  },
+  "opentelemetry-exporter-otlp-proto-grpc": {
+    "conda_name": "opentelemetry-exporter-otlp-proto-grpc",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-otlp-proto-grpc"
+  },
+  "opentelemetry-exporter-otlp-proto-http": {
+    "conda_name": "opentelemetry-exporter-otlp-proto-http",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-otlp-proto-http"
+  },
+  "opentelemetry-exporter-prometheus-remote-write": {
+    "conda_name": "opentelemetry-exporter-prometheus-remote-write",
+    "import_name": "opentelemetry.exporter.prometheus_remote_write",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-prometheus-remote-write"
+  },
+  "opentelemetry-exporter-zipkin": {
+    "conda_name": "opentelemetry-exporter-zipkin",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-zipkin"
+  },
+  "opentelemetry-exporter-zipkin-json": {
+    "conda_name": "opentelemetry-exporter-zipkin-json",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-zipkin-json"
+  },
+  "opentelemetry-exporter-zipkin-proto-http": {
+    "conda_name": "opentelemetry-exporter-zipkin-proto-http",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-exporter-zipkin-proto-http"
+  },
+  "opentelemetry-instrumentation": {
+    "conda_name": "opentelemetry-instrumentation",
+    "import_name": "opentelemetry.instrumentation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation"
+  },
+  "opentelemetry-instrumentation-agno": {
+    "conda_name": "opentelemetry-instrumentation-agno",
+    "import_name": "opentelemetry.instrumentation.agno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-agno"
+  },
+  "opentelemetry-instrumentation-aiohttp-client": {
+    "conda_name": "opentelemetry-instrumentation-aiohttp-client",
+    "import_name": "opentelemetry.instrumentation.aiohttp_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-aiohttp-client"
+  },
+  "opentelemetry-instrumentation-aiopg": {
+    "conda_name": "opentelemetry-instrumentation-aiopg",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-aiopg"
+  },
+  "opentelemetry-instrumentation-alephalpha": {
+    "conda_name": "opentelemetry-instrumentation-alephalpha",
+    "import_name": "opentelemetry.instrumentation.alephalpha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-alephalpha"
+  },
+  "opentelemetry-instrumentation-anthropic": {
+    "conda_name": "opentelemetry-instrumentation-anthropic",
+    "import_name": "opentelemetry.instrumentation.anthropic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-anthropic"
+  },
+  "opentelemetry-instrumentation-asgi": {
+    "conda_name": "opentelemetry-instrumentation-asgi",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-asgi"
+  },
+  "opentelemetry-instrumentation-asyncpg": {
+    "conda_name": "opentelemetry-instrumentation-asyncpg",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-asyncpg"
+  },
+  "opentelemetry-instrumentation-bedrock": {
+    "conda_name": "opentelemetry-instrumentation-bedrock",
+    "import_name": "opentelemetry.instrumentation.bedrock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-bedrock"
+  },
+  "opentelemetry-instrumentation-boto": {
+    "conda_name": "opentelemetry-instrumentation-boto",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-boto"
+  },
+  "opentelemetry-instrumentation-botocore": {
+    "conda_name": "opentelemetry-instrumentation-botocore",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-botocore"
+  },
+  "opentelemetry-instrumentation-celery": {
+    "conda_name": "opentelemetry-instrumentation-celery",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-celery"
+  },
+  "opentelemetry-instrumentation-chromadb": {
+    "conda_name": "opentelemetry-instrumentation-chromadb",
+    "import_name": "opentelemetry.instrumentation.chromadb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-chromadb"
+  },
+  "opentelemetry-instrumentation-cohere": {
+    "conda_name": "opentelemetry-instrumentation-cohere",
+    "import_name": "opentelemetry.instrumentation.cohere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-cohere"
+  },
+  "opentelemetry-instrumentation-crewai": {
+    "conda_name": "opentelemetry-instrumentation-crewai",
+    "import_name": "opentelemetry.instrumentation.crewai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-crewai"
+  },
+  "opentelemetry-instrumentation-dbapi": {
+    "conda_name": "opentelemetry-instrumentation-dbapi",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-dbapi"
+  },
+  "opentelemetry-instrumentation-django": {
+    "conda_name": "opentelemetry-instrumentation-django",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-django"
+  },
+  "opentelemetry-instrumentation-elasticsearch": {
+    "conda_name": "opentelemetry-instrumentation-elasticsearch",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-elasticsearch"
+  },
+  "opentelemetry-instrumentation-falcon": {
+    "conda_name": "opentelemetry-instrumentation-falcon",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-falcon"
+  },
+  "opentelemetry-instrumentation-fastapi": {
+    "conda_name": "opentelemetry-instrumentation-fastapi",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-fastapi"
+  },
+  "opentelemetry-instrumentation-flask": {
+    "conda_name": "opentelemetry-instrumentation-flask",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-flask"
+  },
+  "opentelemetry-instrumentation-google-generativeai": {
+    "conda_name": "opentelemetry-instrumentation-google-generativeai",
+    "import_name": "opentelemetry.instrumentation.google_generativeai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-google-generativeai"
+  },
+  "opentelemetry-instrumentation-groq": {
+    "conda_name": "opentelemetry-instrumentation-groq",
+    "import_name": "opentelemetry.instrumentation.groq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-groq"
+  },
+  "opentelemetry-instrumentation-grpc": {
+    "conda_name": "opentelemetry-instrumentation-grpc",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-grpc"
+  },
+  "opentelemetry-instrumentation-haystack": {
+    "conda_name": "opentelemetry-instrumentation-haystack",
+    "import_name": "opentelemetry.instrumentation.haystack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-haystack"
+  },
+  "opentelemetry-instrumentation-httpx": {
+    "conda_name": "opentelemetry-instrumentation-httpx",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-httpx"
+  },
+  "opentelemetry-instrumentation-jinja2": {
+    "conda_name": "opentelemetry-instrumentation-jinja2",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-jinja2"
+  },
+  "opentelemetry-instrumentation-lancedb": {
+    "conda_name": "opentelemetry-instrumentation-lancedb",
+    "import_name": "opentelemetry.instrumentation.lancedb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-lancedb"
+  },
+  "opentelemetry-instrumentation-langchain": {
+    "conda_name": "opentelemetry-instrumentation-langchain",
+    "import_name": "opentelemetry.instrumentation.langchain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-langchain"
+  },
+  "opentelemetry-instrumentation-litellm": {
+    "conda_name": "opentelemetry-instrumentation-litellm",
+    "import_name": "opentelemetry.instrumentation.litellm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-litellm"
+  },
+  "opentelemetry-instrumentation-llamaindex": {
+    "conda_name": "opentelemetry-instrumentation-llamaindex",
+    "import_name": "opentelemetry.instrumentation.llamaindex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-llamaindex"
+  },
+  "opentelemetry-instrumentation-logging": {
+    "conda_name": "opentelemetry-instrumentation-logging",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-logging"
+  },
+  "opentelemetry-instrumentation-marqo": {
+    "conda_name": "opentelemetry-instrumentation-marqo",
+    "import_name": "opentelemetry.instrumentation.marqo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-marqo"
+  },
+  "opentelemetry-instrumentation-mcp": {
+    "conda_name": "opentelemetry-instrumentation-mcp",
+    "import_name": "opentelemetry.instrumentation.mcp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-mcp"
+  },
+  "opentelemetry-instrumentation-mistralai": {
+    "conda_name": "opentelemetry-instrumentation-mistralai",
+    "import_name": "opentelemetry.instrumentation.mistralai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-mistralai"
+  },
+  "opentelemetry-instrumentation-mysql": {
+    "conda_name": "opentelemetry-instrumentation-mysql",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-mysql"
+  },
+  "opentelemetry-instrumentation-ollama": {
+    "conda_name": "opentelemetry-instrumentation-ollama",
+    "import_name": "opentelemetry.instrumentation.ollama",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-ollama"
+  },
+  "opentelemetry-instrumentation-openai": {
+    "conda_name": "opentelemetry-instrumentation-openai",
+    "import_name": "opentelemetry.instrumentation.openai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-openai"
+  },
+  "opentelemetry-instrumentation-openai-agents": {
+    "conda_name": "opentelemetry-instrumentation-openai-agents",
+    "import_name": "opentelemetry.instrumentation.openai_agents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-openai-agents"
+  },
+  "opentelemetry-instrumentation-pinecone": {
+    "conda_name": "opentelemetry-instrumentation-pinecone",
+    "import_name": "opentelemetry.instrumentation.pinecone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-pinecone"
+  },
+  "opentelemetry-instrumentation-psycopg2": {
+    "conda_name": "opentelemetry-instrumentation-psycopg2",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-psycopg2"
+  },
+  "opentelemetry-instrumentation-pymemcache": {
+    "conda_name": "opentelemetry-instrumentation-pymemcache",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-pymemcache"
+  },
+  "opentelemetry-instrumentation-pymongo": {
+    "conda_name": "opentelemetry-instrumentation-pymongo",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-pymongo"
+  },
+  "opentelemetry-instrumentation-pymysql": {
+    "conda_name": "opentelemetry-instrumentation-pymysql",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-pymysql"
+  },
+  "opentelemetry-instrumentation-pyramid": {
+    "conda_name": "opentelemetry-instrumentation-pyramid",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-pyramid"
+  },
+  "opentelemetry-instrumentation-qdrant": {
+    "conda_name": "opentelemetry-instrumentation-qdrant",
+    "import_name": "opentelemetry.instrumentation.qdrant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-qdrant"
+  },
+  "opentelemetry-instrumentation-redis": {
+    "conda_name": "opentelemetry-instrumentation-redis",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-redis"
+  },
+  "opentelemetry-instrumentation-replicate": {
+    "conda_name": "opentelemetry-instrumentation-replicate",
+    "import_name": "opentelemetry.instrumentation.replicate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-replicate"
+  },
+  "opentelemetry-instrumentation-requests": {
+    "conda_name": "opentelemetry-instrumentation-requests",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-requests"
+  },
+  "opentelemetry-instrumentation-sagemaker": {
+    "conda_name": "opentelemetry-instrumentation-sagemaker",
+    "import_name": "opentelemetry.instrumentation.sagemaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-sagemaker"
+  },
+  "opentelemetry-instrumentation-sklearn": {
+    "conda_name": "opentelemetry-instrumentation-sklearn",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-sklearn"
+  },
+  "opentelemetry-instrumentation-sqlalchemy": {
+    "conda_name": "opentelemetry-instrumentation-sqlalchemy",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-sqlalchemy"
+  },
+  "opentelemetry-instrumentation-sqlite3": {
+    "conda_name": "opentelemetry-instrumentation-sqlite3",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-sqlite3"
+  },
+  "opentelemetry-instrumentation-starlette": {
+    "conda_name": "opentelemetry-instrumentation-starlette",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-starlette"
+  },
+  "opentelemetry-instrumentation-system-metrics": {
+    "conda_name": "opentelemetry-instrumentation-system-metrics",
+    "import_name": "opentelemetry.metrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-system-metrics"
+  },
+  "opentelemetry-instrumentation-threading": {
+    "conda_name": "opentelemetry-instrumentation-threading",
+    "import_name": "opentelemetry.instrumentation.threading",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-threading"
+  },
+  "opentelemetry-instrumentation-together": {
+    "conda_name": "opentelemetry-instrumentation-together",
+    "import_name": "opentelemetry.instrumentation.together",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-together"
+  },
+  "opentelemetry-instrumentation-tornado": {
+    "conda_name": "opentelemetry-instrumentation-tornado",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-tornado"
+  },
+  "opentelemetry-instrumentation-transformers": {
+    "conda_name": "opentelemetry-instrumentation-transformers",
+    "import_name": "opentelemetry.instrumentation.transformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-transformers"
+  },
+  "opentelemetry-instrumentation-urllib": {
+    "conda_name": "opentelemetry-instrumentation-urllib",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-urllib"
+  },
+  "opentelemetry-instrumentation-urllib3": {
+    "conda_name": "opentelemetry-instrumentation-urllib3",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-urllib3"
+  },
+  "opentelemetry-instrumentation-vertexai": {
+    "conda_name": "opentelemetry-instrumentation-vertexai",
+    "import_name": "opentelemetry.instrumentation.vertexai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-vertexai"
+  },
+  "opentelemetry-instrumentation-voyageai": {
+    "conda_name": "opentelemetry-instrumentation-voyageai",
+    "import_name": "opentelemetry.instrumentation.voyageai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-voyageai"
+  },
+  "opentelemetry-instrumentation-watsonx": {
+    "conda_name": "opentelemetry-instrumentation-watsonx",
+    "import_name": "opentelemetry.instrumentation.watsonx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-watsonx"
+  },
+  "opentelemetry-instrumentation-weaviate": {
+    "conda_name": "opentelemetry-instrumentation-weaviate",
+    "import_name": "opentelemetry.instrumentation.weaviate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-weaviate"
+  },
+  "opentelemetry-instrumentation-writer": {
+    "conda_name": "opentelemetry-instrumentation-writer",
+    "import_name": "opentelemetry.instrumentation.writer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-writer"
+  },
+  "opentelemetry-instrumentation-wsgi": {
+    "conda_name": "opentelemetry-instrumentation-wsgi",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-instrumentation-wsgi"
+  },
+  "opentelemetry-propagator-b3": {
+    "conda_name": "opentelemetry-propagator-b3",
+    "import_name": "opentelemetry.propagators.b3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-propagator-b3"
+  },
+  "opentelemetry-propagator-gcp": {
+    "conda_name": "opentelemetry-propagator-gcp",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-propagator-gcp"
+  },
+  "opentelemetry-propagator-jaeger": {
+    "conda_name": "opentelemetry-propagator-jaeger",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-propagator-jaeger"
+  },
+  "opentelemetry-proto": {
+    "conda_name": "opentelemetry-proto",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-proto"
+  },
+  "opentelemetry-resource-detector-azure": {
+    "conda_name": "opentelemetry-resource-detector-azure",
+    "import_name": "opentelemetry.resource.detector.azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-resource-detector-azure"
+  },
+  "opentelemetry-resourcedetector-gcp": {
+    "conda_name": "opentelemetry-resourcedetector-gcp",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-resourcedetector-gcp"
+  },
+  "opentelemetry-sdk": {
+    "conda_name": "opentelemetry-sdk",
+    "import_name": "opentelemetry.sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-sdk"
+  },
+  "opentelemetry-semantic-conventions": {
+    "conda_name": "opentelemetry-semantic-conventions",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-semantic-conventions"
+  },
+  "opentelemetry-util-http": {
+    "conda_name": "opentelemetry-util-http",
+    "import_name": "opentelemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentelemetry-util-http"
+  },
+  "opentile": {
+    "conda_name": "opentile",
+    "import_name": "opentile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentile"
+  },
+  "opentracing": {
+    "conda_name": "opentracing",
+    "import_name": "opentracing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentracing"
+  },
+  "opentsne": {
+    "conda_name": "opentsne",
+    "import_name": "openTSNE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentsne"
+  },
+  "opentype-sanitizer": {
+    "conda_name": "opentype-sanitizer",
+    "import_name": "ots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentype-sanitizer"
+  },
+  "opentypespec": {
+    "conda_name": "opentypespec",
+    "import_name": "opentypespec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opentypespec"
+  },
+  "openvino-telemetry": {
+    "conda_name": "openvino-telemetry",
+    "import_name": "openvino_telemetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "openvino-telemetry"
+  },
+  "opera-utils": {
+    "conda_name": "opera-utils",
+    "import_name": "opera_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opera-utils"
+  },
+  "ophyd": {
+    "conda_name": "ophyd",
+    "import_name": "ophyd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ophyd"
+  },
+  "ophyd-async": {
+    "conda_name": "ophyd-async",
+    "import_name": "ophyd_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ophyd-async"
+  },
+  "opl": {
+    "conda_name": "opl",
+    "import_name": "opl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opl"
+  },
+  "opsdroid": {
+    "conda_name": "opsdroid",
+    "import_name": "opsdroid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opsdroid"
+  },
+  "opsdroid-get-image-size": {
+    "conda_name": "opsdroid-get-image-size",
+    "import_name": "get_image_size",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opsdroid-get-image-size"
+  },
+  "opsgenie-sdk": {
+    "conda_name": "opsgenie-sdk",
+    "import_name": "opsgenie_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opsgenie-sdk"
+  },
+  "opt-einsum-fx": {
+    "conda_name": "opt_einsum_fx",
+    "import_name": "opt_einsum_fx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opt-einsum-fx"
+  },
+  "optax": {
+    "conda_name": "optax",
+    "import_name": "optax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optax"
+  },
+  "optics-functions": {
+    "conda_name": "optics_functions",
+    "import_name": "optics_functions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optics-functions"
+  },
+  "optiland": {
+    "conda_name": "optiland",
+    "import_name": "optiland",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optiland"
+  },
+  "optimade": {
+    "conda_name": "optimade",
+    "import_name": "optimade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimade"
+  },
+  "optimagic": {
+    "conda_name": "optimagic",
+    "import_name": "optimagic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimagic"
+  },
+  "optimask": {
+    "conda_name": "optimask",
+    "import_name": "optimask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimask"
+  },
+  "optimix": {
+    "conda_name": "optimix",
+    "import_name": "optimix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimix"
+  },
+  "optimum": {
+    "conda_name": "optimum",
+    "import_name": "optimum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimum"
+  },
+  "optimum-graphcore": {
+    "conda_name": "optimum-graphcore",
+    "import_name": "optimum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimum-graphcore"
+  },
+  "optimum-habana": {
+    "conda_name": "optimum-habana",
+    "import_name": "optimum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optimum-habana"
+  },
+  "optionsfactory": {
+    "conda_name": "optionsfactory",
+    "import_name": "optionsfactory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optionsfactory"
+  },
+  "optlang": {
+    "conda_name": "optlang",
+    "import_name": "optlang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optlang"
+  },
+  "optmagic": {
+    "conda_name": "optmagic",
+    "import_name": "optmagic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optmagic"
+  },
+  "optodetools": {
+    "conda_name": "optodetools",
+    "import_name": "optodetools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optodetools"
+  },
+  "optophyre": {
+    "conda_name": "optophyre",
+    "import_name": "optopHyre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optophyre"
+  },
+  "optparse-pretty": {
+    "conda_name": "optparse-pretty",
+    "import_name": "optparse_mooi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optparse-pretty"
+  },
+  "optree": {
+    "conda_name": "optree",
+    "import_name": "optree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optree"
+  },
+  "optuna": {
+    "conda_name": "optuna",
+    "import_name": "optuna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optuna"
+  },
+  "optuna-dashboard": {
+    "conda_name": "optuna-dashboard",
+    "import_name": "optuna_dashboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optuna-dashboard"
+  },
+  "optuna-integration": {
+    "conda_name": "optuna-integration",
+    "import_name": "optuna_integration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optuna-integration"
+  },
+  "optunahub": {
+    "conda_name": "optunahub",
+    "import_name": "optunahub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "optunahub"
+  },
+  "opty": {
+    "conda_name": "opty",
+    "import_name": "opty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opty"
+  },
+  "opuslib": {
+    "conda_name": "opuslib",
+    "import_name": "opuslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opuslib"
+  },
+  "opyrator": {
+    "conda_name": "opyrator",
+    "import_name": "opyrator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "opyrator"
+  },
+  "oqpy": {
+    "conda_name": "oqpy",
+    "import_name": "oqpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oqpy"
+  },
+  "oracle-ads": {
+    "conda_name": "oracle-ads",
+    "import_name": "ads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oracle-ads"
+  },
+  "orange-canvas-core": {
+    "conda_name": "orange-canvas-core",
+    "import_name": "orangecanvas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange-canvas-core"
+  },
+  "orange-spectroscopy": {
+    "conda_name": "orange-spectroscopy",
+    "import_name": "orangecontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange-spectroscopy"
+  },
+  "orange-widget-base": {
+    "conda_name": "orange-widget-base",
+    "import_name": "orangewidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange-widget-base"
+  },
+  "orange3": {
+    "conda_name": "orange3",
+    "import_name": "Orange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3"
+  },
+  "orange3-associate": {
+    "conda_name": "orange3-associate",
+    "import_name": "orangecontrib.associate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-associate"
+  },
+  "orange3-bioinformatics": {
+    "conda_name": "orange3-bioinformatics",
+    "import_name": "orangecontrib.bioinformatics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-bioinformatics"
+  },
+  "orange3-educational": {
+    "conda_name": "orange3-educational",
+    "import_name": "orangecontrib.educational",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-educational"
+  },
+  "orange3-explain": {
+    "conda_name": "orange3-explain",
+    "import_name": "orangecontrib.explain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-explain"
+  },
+  "orange3-fairness": {
+    "conda_name": "orange3-fairness",
+    "import_name": "orangecontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-fairness"
+  },
+  "orange3-geo": {
+    "conda_name": "orange3-geo",
+    "import_name": "orangecontrib.geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-geo"
+  },
+  "orange3-imageanalytics": {
+    "conda_name": "orange3-imageanalytics",
+    "import_name": "orangecontrib.imageanalytics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-imageanalytics"
+  },
+  "orange3-network": {
+    "conda_name": "orange3-network",
+    "import_name": "orangecontrib.network",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-network"
+  },
+  "orange3-prototypes": {
+    "conda_name": "orange3-prototypes",
+    "import_name": "orangecontrib.prototypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-prototypes"
+  },
+  "orange3-singlecell": {
+    "conda_name": "orange3-singlecell",
+    "import_name": "orangecontrib.single_cell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-singlecell"
+  },
+  "orange3-survival-analysis": {
+    "conda_name": "orange3-survival-analysis",
+    "import_name": "orangecontrib.survival_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-survival-analysis"
+  },
+  "orange3-text": {
+    "conda_name": "orange3-text",
+    "import_name": "orangecontrib.text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-text"
+  },
+  "orange3-timeseries": {
+    "conda_name": "orange3-timeseries",
+    "import_name": "orangecontrib.timeseries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-timeseries"
+  },
+  "orange3-worldhappiness": {
+    "conda_name": "orange3-worldhappiness",
+    "import_name": "orangecontrib.worldhappiness",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orange3-worldhappiness"
+  },
+  "orator": {
+    "conda_name": "orator",
+    "import_name": "orator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orator"
+  },
+  "orbit-ml": {
+    "conda_name": "orbit-ml",
+    "import_name": "orbit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orbit-ml"
+  },
+  "orca": {
+    "conda_name": "orca",
+    "import_name": "orca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orca"
+  },
+  "orca-pi": {
+    "conda_name": "orca-pi",
+    "import_name": "opi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orca-pi"
+  },
+  "orcid": {
+    "conda_name": "orcid",
+    "import_name": "orcid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orcid"
+  },
+  "ordered-set": {
+    "conda_name": "ordered-set",
+    "import_name": "ordered_set",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ordered-set"
+  },
+  "orderedset": {
+    "conda_name": "orderedset",
+    "import_name": "orderedset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orderedset"
+  },
+  "orekit-jpype": {
+    "conda_name": "orekit_jpype",
+    "import_name": "orekit_jpype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orekit-jpype"
+  },
+  "orgparse": {
+    "conda_name": "orgparse",
+    "import_name": "orgparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orgparse"
+  },
+  "orjsonl": {
+    "conda_name": "orjsonl",
+    "import_name": "orjsonl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orjsonl"
+  },
+  "ornax": {
+    "conda_name": "ornax",
+    "import_name": "ornax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ornax"
+  },
+  "orographic-precipitation": {
+    "conda_name": "orographic_precipitation",
+    "import_name": "orographic_precipitation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orographic-precipitation"
+  },
+  "orsopy": {
+    "conda_name": "orsopy",
+    "import_name": "orsopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orsopy"
+  },
+  "orthopy": {
+    "conda_name": "orthopy",
+    "import_name": "orthopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orthopy"
+  },
+  "orthority": {
+    "conda_name": "orthority",
+    "import_name": "orthority",
+    "mapping_source": "regro-bot",
+    "pypi_name": "orthority"
+  },
+  "ory-client": {
+    "conda_name": "ory-client",
+    "import_name": "ory_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ory-client"
+  },
+  "os-client-config": {
+    "conda_name": "os-client-config",
+    "import_name": "os_client_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "os-client-config"
+  },
+  "os-command-py": {
+    "conda_name": "os_command_py",
+    "import_name": "os_command_py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "os-command-py"
+  },
+  "os-service-types": {
+    "conda_name": "os-service-types",
+    "import_name": "os_service_types",
+    "mapping_source": "regro-bot",
+    "pypi_name": "os-service-types"
+  },
+  "osc-lib": {
+    "conda_name": "osc-lib",
+    "import_name": "osc_lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osc-lib"
+  },
+  "oscan": {
+    "conda_name": "oscan",
+    "import_name": "oscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oscan"
+  },
+  "oschmod": {
+    "conda_name": "oschmod",
+    "import_name": "oschmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oschmod"
+  },
+  "oscrypto": {
+    "conda_name": "oscrypto",
+    "import_name": "oscrypto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oscrypto"
+  },
+  "osdatahub": {
+    "conda_name": "osdatahub",
+    "import_name": "osdatahub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osdatahub"
+  },
+  "oset": {
+    "conda_name": "oset",
+    "import_name": "oset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oset"
+  },
+  "osfclient": {
+    "conda_name": "osfclient",
+    "import_name": "osfclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osfclient"
+  },
+  "oslo-concurrency": {
+    "conda_name": "oslo.concurrency",
+    "import_name": "oslo_concurrency",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-concurrency"
+  },
+  "oslo-config": {
+    "conda_name": "oslo.config",
+    "import_name": "oslo_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-config"
+  },
+  "oslo-context": {
+    "conda_name": "oslo.context",
+    "import_name": "oslo_context",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-context"
+  },
+  "oslo-i18n": {
+    "conda_name": "oslo.i18n",
+    "import_name": "oslo_i18n",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-i18n"
+  },
+  "oslo-log": {
+    "conda_name": "oslo.log",
+    "import_name": "oslo_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-log"
+  },
+  "oslo-serialization": {
+    "conda_name": "oslo.serialization",
+    "import_name": "oslo_serialization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oslo-serialization"
+  },
+  "osm-flex": {
+    "conda_name": "osm-flex",
+    "import_name": "osm_flex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osm-flex"
+  },
+  "osmapi": {
+    "conda_name": "osmapi",
+    "import_name": "osmapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osmapi"
+  },
+  "osmnet": {
+    "conda_name": "osmnet",
+    "import_name": "osmnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osmnet"
+  },
+  "osmpythontools": {
+    "conda_name": "osmpythontools",
+    "import_name": "OSMPythonTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osmpythontools"
+  },
+  "osprofiler": {
+    "conda_name": "osprofiler",
+    "import_name": "osprofiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osprofiler"
+  },
+  "oss2": {
+    "conda_name": "oss2",
+    "import_name": "oss2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oss2"
+  },
+  "ossfs": {
+    "conda_name": "ossfs",
+    "import_name": "ossfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ossfs"
+  },
+  "osyris": {
+    "conda_name": "osyris",
+    "import_name": "osyris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "osyris"
+  },
+  "otpauth": {
+    "conda_name": "otpauth",
+    "import_name": "otpauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "otpauth"
+  },
+  "ott-jax": {
+    "conda_name": "ott-jax",
+    "import_name": "ott",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ott-jax"
+  },
+  "otter-report": {
+    "conda_name": "otter-report",
+    "import_name": "otter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "otter-report"
+  },
+  "otumat": {
+    "conda_name": "otumat",
+    "import_name": "otumat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "otumat"
+  },
+  "outcome": {
+    "conda_name": "outcome",
+    "import_name": "outcome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "outcome"
+  },
+  "outdated": {
+    "conda_name": "outdated",
+    "import_name": "outdated",
+    "mapping_source": "regro-bot",
+    "pypi_name": "outdated"
+  },
+  "outlier-utils": {
+    "conda_name": "outlier-utils",
+    "import_name": "outliers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "outlier-utils"
+  },
+  "overly": {
+    "conda_name": "overly",
+    "import_name": "overly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "overly"
+  },
+  "overpy": {
+    "conda_name": "overpy",
+    "import_name": "overpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "overpy"
+  },
+  "overturemaps": {
+    "conda_name": "overturemaps",
+    "import_name": "overturemaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "overturemaps"
+  },
+  "ovh": {
+    "conda_name": "ovh",
+    "import_name": "ovh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ovh"
+  },
+  "owa": {
+    "conda_name": "owa",
+    "import_name": "owa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa"
+  },
+  "owa-cli": {
+    "conda_name": "owa-cli",
+    "import_name": "owa.cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa-cli"
+  },
+  "owa-core": {
+    "conda_name": "owa-core",
+    "import_name": "owa.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa-core"
+  },
+  "owa-env-desktop": {
+    "conda_name": "owa-env-desktop",
+    "import_name": "owa.env.desktop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa-env-desktop"
+  },
+  "owa-env-gst": {
+    "conda_name": "owa-env-gst",
+    "import_name": "owa.env.gst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa-env-gst"
+  },
+  "owa-msgs": {
+    "conda_name": "owa-msgs",
+    "import_name": "owa.msgs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owa-msgs"
+  },
+  "owlready2": {
+    "conda_name": "owlready2",
+    "import_name": "owlready2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "owlready2"
+  },
+  "oxasl": {
+    "conda_name": "oxasl",
+    "import_name": "oxasl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oxasl"
+  },
+  "oxasl-enable": {
+    "conda_name": "oxasl_enable",
+    "import_name": "oxasl_enable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oxasl-enable"
+  },
+  "oxasl-ve": {
+    "conda_name": "oxasl_ve",
+    "import_name": "oxasl_ve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oxasl-ve"
+  },
+  "oxdna-analysis-tools": {
+    "conda_name": "oxdna-analysis-tools",
+    "import_name": "oxDNA_analysis_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oxdna-analysis-tools"
+  },
+  "oxli": {
+    "conda_name": "oxli",
+    "import_name": "oxli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oxli"
+  },
+  "oyaml": {
+    "conda_name": "oyaml",
+    "import_name": "oyaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "oyaml"
+  },
+  "ozzy-pic": {
+    "conda_name": "ozzy-pic",
+    "import_name": "ozzy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ozzy-pic"
+  },
+  "p-tqdm": {
+    "conda_name": "p-tqdm",
+    "import_name": "p_tqdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "p-tqdm"
+  },
+  "p2j": {
+    "conda_name": "p2j",
+    "import_name": "p2j",
+    "mapping_source": "regro-bot",
+    "pypi_name": "p2j"
+  },
+  "pacemaker-lite": {
+    "conda_name": "pacemaker-lite",
+    "import_name": "pacemaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pacemaker-lite"
+  },
+  "packaging-legacy": {
+    "conda_name": "packaging-legacy",
+    "import_name": "packaging_legacy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "packaging-legacy"
+  },
+  "pacmap": {
+    "conda_name": "pacmap",
+    "import_name": "pacmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pacmap"
+  },
+  "pactools": {
+    "conda_name": "pactools",
+    "import_name": "pactools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pactools"
+  },
+  "padelpy": {
+    "conda_name": "padelpy",
+    "import_name": "padelpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "padelpy"
+  },
+  "pado": {
+    "conda_name": "pado",
+    "import_name": "pado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pado"
+  },
+  "paegan": {
+    "conda_name": "paegan",
+    "import_name": "paegan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paegan"
+  },
+  "page-dewarp": {
+    "conda_name": "page-dewarp",
+    "import_name": "page_dewarp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "page-dewarp"
+  },
+  "paginate": {
+    "conda_name": "paginate",
+    "import_name": "paginate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paginate"
+  },
+  "paicos": {
+    "conda_name": "paicos",
+    "import_name": "paicos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paicos"
+  },
+  "paintera-conversion-helper": {
+    "conda_name": "paintera-conversion-helper",
+    "import_name": "paintera_conversion_helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paintera-conversion-helper"
+  },
+  "palantir-oauth-client": {
+    "conda_name": "palantir-oauth-client",
+    "import_name": "palantir_oauth_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palantir-oauth-client"
+  },
+  "palantir-sdk": {
+    "conda_name": "palantir-sdk",
+    "import_name": "palantir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palantir-sdk"
+  },
+  "palettable": {
+    "conda_name": "palettable",
+    "import_name": "palettable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palettable"
+  },
+  "palmari": {
+    "conda_name": "palmari",
+    "import_name": "palmari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palmari"
+  },
+  "palmerpenguins": {
+    "conda_name": "palmerpenguins",
+    "import_name": "palmerpenguins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palmerpenguins"
+  },
+  "palpy": {
+    "conda_name": "palpy",
+    "import_name": "palpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "palpy"
+  },
+  "pamela": {
+    "conda_name": "pamela",
+    "import_name": "pamela",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pamela"
+  },
+  "pampy": {
+    "conda_name": "pampy",
+    "import_name": "pampy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pampy"
+  },
+  "pamqp": {
+    "conda_name": "pamqp",
+    "import_name": "pamqp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pamqp"
+  },
+  "pan3d": {
+    "conda_name": "pan3d",
+    "import_name": "pan3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pan3d"
+  },
+  "pancritic": {
+    "conda_name": "pancritic",
+    "import_name": "pancritic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pancritic"
+  },
+  "panda3d-viewer": {
+    "conda_name": "panda3d_viewer",
+    "import_name": "panda3d_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panda3d-viewer"
+  },
+  "pandamesh": {
+    "conda_name": "pandamesh",
+    "import_name": "pandamesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandamesh"
+  },
+  "pandana": {
+    "conda_name": "pandana",
+    "import_name": "pandana",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandana"
+  },
+  "pandapower": {
+    "conda_name": "pandapower",
+    "import_name": "pandapower",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandapower"
+  },
+  "pandarallel": {
+    "conda_name": "pandarallel",
+    "import_name": "pandarallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandarallel"
+  },
+  "pandarm": {
+    "conda_name": "pandarm",
+    "import_name": "pandarm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandarm"
+  },
+  "pandas-alive": {
+    "conda_name": "pandas-alive",
+    "import_name": "pandas_alive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-alive"
+  },
+  "pandas-bokeh": {
+    "conda_name": "pandas-bokeh",
+    "import_name": "pandas_bokeh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-bokeh"
+  },
+  "pandas-compat": {
+    "conda_name": "pandas-compat",
+    "import_name": "pandas_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-compat"
+  },
+  "pandas-datapackage-reader": {
+    "conda_name": "pandas-datapackage-reader",
+    "import_name": "pandas_datapackage_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-datapackage-reader"
+  },
+  "pandas-datareader": {
+    "conda_name": "pandas-datareader",
+    "import_name": "pandas_datareader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-datareader"
+  },
+  "pandas-dev-flaker": {
+    "conda_name": "pandas-dev-flaker",
+    "import_name": "pandas_dev_flaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-dev-flaker"
+  },
+  "pandas-dq": {
+    "conda_name": "pandas-dq",
+    "import_name": "pandas_dq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-dq"
+  },
+  "pandas-gbq": {
+    "conda_name": "pandas-gbq",
+    "import_name": "pandas_gbq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-gbq"
+  },
+  "pandas-highcharts": {
+    "conda_name": "pandas-highcharts",
+    "import_name": "pandas_highcharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-highcharts"
+  },
+  "pandas-indexing": {
+    "conda_name": "pandas-indexing",
+    "import_name": "pandas_indexing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-indexing"
+  },
+  "pandas-log": {
+    "conda_name": "pandas-log",
+    "import_name": "pandas_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-log"
+  },
+  "pandas-market-calendars": {
+    "conda_name": "pandas_market_calendars",
+    "import_name": "pandas_market_calendars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-market-calendars"
+  },
+  "pandas-schema": {
+    "conda_name": "pandas_schema",
+    "import_name": "pandas_schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-schema"
+  },
+  "pandas-summary": {
+    "conda_name": "pandas-summary",
+    "import_name": "pandas_summary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-summary"
+  },
+  "pandas-vet": {
+    "conda_name": "pandas-vet",
+    "import_name": "pandas_vet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandas-vet"
+  },
+  "pandasdmx": {
+    "conda_name": "pandasdmx",
+    "import_name": "pandasdmx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandasdmx"
+  },
+  "pandasgui": {
+    "conda_name": "pandasgui",
+    "import_name": "pandasgui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandasgui"
+  },
+  "pandasql": {
+    "conda_name": "pandasql",
+    "import_name": "pandasql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandasql"
+  },
+  "pandavro": {
+    "conda_name": "pandavro",
+    "import_name": "pandavro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandavro"
+  },
+  "pandemy": {
+    "conda_name": "pandemy",
+    "import_name": "pandemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandemy"
+  },
+  "pandera": {
+    "conda_name": "pandera-core",
+    "import_name": "pandera",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandera"
+  },
+  "pandoc-attributes": {
+    "conda_name": "pandoc-attributes",
+    "import_name": "pandocattributes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandoc-attributes"
+  },
+  "pandoc-attrs": {
+    "conda_name": "pandoc-attrs",
+    "import_name": "pandocattrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandoc-attrs"
+  },
+  "pandocfilters": {
+    "conda_name": "pandocfilters",
+    "import_name": "pandocfilters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandocfilters"
+  },
+  "pandoctools": {
+    "conda_name": "pandoctools",
+    "import_name": "pandoctools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pandoctools"
+  },
+  "panedr": {
+    "conda_name": "panedr",
+    "import_name": "panedr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panedr"
+  },
+  "panel-chemistry": {
+    "conda_name": "panel-chemistry",
+    "import_name": "panel_chemistry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panel-chemistry"
+  },
+  "panel-graphic-walker": {
+    "conda_name": "panel-graphic-walker",
+    "import_name": "panel_gwalker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panel-graphic-walker"
+  },
+  "panel-jstree": {
+    "conda_name": "panel-jstree",
+    "import_name": "panel_jstree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panel-jstree"
+  },
+  "panel-material-ui": {
+    "conda_name": "panel-material-ui",
+    "import_name": "panel_material_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panel-material-ui"
+  },
+  "panflute": {
+    "conda_name": "panflute",
+    "import_name": "panflute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panflute"
+  },
+  "pangaea": {
+    "conda_name": "pangaea",
+    "import_name": "pangaea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pangaea"
+  },
+  "pangaeapy": {
+    "conda_name": "pangaeapy",
+    "import_name": "pangaeapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pangaeapy"
+  },
+  "pangeo-forge-recipes": {
+    "conda_name": "pangeo-forge-recipes",
+    "import_name": "pangeo_forge_recipes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pangeo-forge-recipes"
+  },
+  "pangeo-forge-runner": {
+    "conda_name": "pangeo-forge-runner",
+    "import_name": "pangeo_forge_runner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pangeo-forge-runner"
+  },
+  "pangeo-sphinx-book-theme": {
+    "conda_name": "pangeo-sphinx-book-theme",
+    "import_name": "pangeo_sphinx_book_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pangeo-sphinx-book-theme"
+  },
+  "pannb": {
+    "conda_name": "pannb",
+    "import_name": "pannb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pannb"
+  },
+  "panoptica": {
+    "conda_name": "panoptica",
+    "import_name": "panoptica",
+    "mapping_source": "regro-bot",
+    "pypi_name": "panoptica"
+  },
+  "pantable": {
+    "conda_name": "pantable",
+    "import_name": "pantable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pantable"
+  },
+  "pao": {
+    "conda_name": "pao",
+    "import_name": "pao",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pao"
+  },
+  "paper-qa": {
+    "conda_name": "paper-qa",
+    "import_name": "paperqa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paper-qa"
+  },
+  "paper-qa-pypdf": {
+    "conda_name": "paper-qa-pypdf",
+    "import_name": "paperqa_pypdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paper-qa-pypdf"
+  },
+  "papermill-report": {
+    "conda_name": "papermill_report",
+    "import_name": "papermill_report",
+    "mapping_source": "regro-bot",
+    "pypi_name": "papermill-report"
+  },
+  "papillon": {
+    "conda_name": "papillon",
+    "import_name": "papillon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "papillon"
+  },
+  "papylio": {
+    "conda_name": "papylio",
+    "import_name": "papylio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "papylio"
+  },
+  "paquo": {
+    "conda_name": "paquo",
+    "import_name": "paquo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paquo"
+  },
+  "paradict": {
+    "conda_name": "paradict",
+    "import_name": "paradict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paradict"
+  },
+  "paragraph": {
+    "conda_name": "python-paragraph",
+    "import_name": "paragraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paragraph"
+  },
+  "parallel-bilby": {
+    "conda_name": "parallel-bilby",
+    "import_name": "parallel_bilby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parallel-bilby"
+  },
+  "parallel-numpy-rng": {
+    "conda_name": "parallel-numpy-rng",
+    "import_name": "parallel_numpy_rng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parallel-numpy-rng"
+  },
+  "paralleltask": {
+    "conda_name": "paralleltask",
+    "import_name": "paralleltask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paralleltask"
+  },
+  "param-persist": {
+    "conda_name": "param_persist",
+    "import_name": "param_persist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "param-persist"
+  },
+  "paramak": {
+    "conda_name": "paramak",
+    "import_name": "paramak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramak"
+  },
+  "paramax": {
+    "conda_name": "paramax",
+    "import_name": "paramax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramax"
+  },
+  "parameter-sweep": {
+    "conda_name": "parameter-sweep",
+    "import_name": "parameter_sweep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parameter-sweep"
+  },
+  "parameterized": {
+    "conda_name": "parameterized",
+    "import_name": "parameterized",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parameterized"
+  },
+  "paramiko": {
+    "conda_name": "paramiko",
+    "import_name": "paramiko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramiko"
+  },
+  "paramnb": {
+    "conda_name": "paramnb",
+    "import_name": "paramnb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramnb"
+  },
+  "paramspace": {
+    "conda_name": "paramspace",
+    "import_name": "paramspace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramspace"
+  },
+  "paramtools": {
+    "conda_name": "paramtools",
+    "import_name": "paramtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paramtools"
+  },
+  "paranoid-scientist": {
+    "conda_name": "paranoid_scientist",
+    "import_name": "paranoid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paranoid-scientist"
+  },
+  "paraview-trame-components": {
+    "conda_name": "paraview-trame-components",
+    "import_name": "ptc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paraview-trame-components"
+  },
+  "paretobench": {
+    "conda_name": "paretobench",
+    "import_name": "paretobench",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paretobench"
+  },
+  "parfive": {
+    "conda_name": "parfive",
+    "import_name": "parfive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parfive"
+  },
+  "pari-jupyter": {
+    "conda_name": "pari_jupyter",
+    "import_name": "PARIKernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pari-jupyter"
+  },
+  "parliament": {
+    "conda_name": "parliament",
+    "import_name": "parliament",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parliament"
+  },
+  "parmap": {
+    "conda_name": "parmap",
+    "import_name": "parmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parmap"
+  },
+  "parmoo": {
+    "conda_name": "parmoo",
+    "import_name": "parmoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parmoo"
+  },
+  "parprocco": {
+    "conda_name": "parprocco",
+    "import_name": "ParProcCo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parprocco"
+  },
+  "parquet": {
+    "conda_name": "parquet-python",
+    "import_name": "parquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parquet"
+  },
+  "parquet-metadata": {
+    "conda_name": "parquet-metadata",
+    "import_name": "parquet_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parquet-metadata"
+  },
+  "parquet-tools": {
+    "conda_name": "parquet-tools",
+    "import_name": "parquet_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parquet-tools"
+  },
+  "parsac": {
+    "conda_name": "parsac",
+    "import_name": "parsac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsac"
+  },
+  "parse": {
+    "conda_name": "parse",
+    "import_name": "parse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parse"
+  },
+  "parse-fmt": {
+    "conda_name": "parse-fmt",
+    "import_name": "parsefmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parse-fmt"
+  },
+  "parsedatetime": {
+    "conda_name": "parsedatetime",
+    "import_name": "parsedatetime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsedatetime"
+  },
+  "parselglossy": {
+    "conda_name": "parselglossy",
+    "import_name": "parselglossy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parselglossy"
+  },
+  "parserutils": {
+    "conda_name": "parserutils",
+    "import_name": "parserutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parserutils"
+  },
+  "parsevasp": {
+    "conda_name": "parsevasp",
+    "import_name": "parsevasp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsevasp"
+  },
+  "parsim": {
+    "conda_name": "parsim",
+    "import_name": "parsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsim"
+  },
+  "parsimonious": {
+    "conda_name": "parsimonious",
+    "import_name": "parsimonious",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsimonious"
+  },
+  "parsita": {
+    "conda_name": "parsita",
+    "import_name": "parsita",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsita"
+  },
+  "parsy": {
+    "conda_name": "parsy",
+    "import_name": "parsy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "parsy"
+  },
+  "partd": {
+    "conda_name": "partd",
+    "import_name": "partd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partd"
+  },
+  "partial-aligner": {
+    "conda_name": "partial-aligner",
+    "import_name": "Partial_Aligner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partial-aligner"
+  },
+  "partial-json-parser": {
+    "conda_name": "partial-json-parser",
+    "import_name": "partial_json_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partial-json-parser"
+  },
+  "partialjson": {
+    "conda_name": "partialjson",
+    "import_name": "partialjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partialjson"
+  },
+  "partialwrap": {
+    "conda_name": "partialwrap",
+    "import_name": "partialwrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partialwrap"
+  },
+  "particle-tracking-manager": {
+    "conda_name": "particle-tracking-manager",
+    "import_name": "particle_tracking_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "particle-tracking-manager"
+  },
+  "particlespy": {
+    "conda_name": "particlespy",
+    "import_name": "particlespy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "particlespy"
+  },
+  "partseg-smfish": {
+    "conda_name": "partseg-smfish",
+    "import_name": "PartSeg_smfish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partseg-smfish"
+  },
+  "partsegcore-compiled-backend": {
+    "conda_name": "partsegcore-compiled-backend",
+    "import_name": "PartSegCore_compiled_backend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partsegcore-compiled-backend"
+  },
+  "partsegdata": {
+    "conda_name": "partsegdata",
+    "import_name": "PartSegData",
+    "mapping_source": "regro-bot",
+    "pypi_name": "partsegdata"
+  },
+  "passhash": {
+    "conda_name": "passhash",
+    "import_name": "passhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "passhash"
+  },
+  "passlib": {
+    "conda_name": "passlib",
+    "import_name": "passlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "passlib"
+  },
+  "password-strength": {
+    "conda_name": "password-strength",
+    "import_name": "password_strength",
+    "mapping_source": "regro-bot",
+    "pypi_name": "password-strength"
+  },
+  "passwordless": {
+    "conda_name": "passwordless",
+    "import_name": "passwordless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "passwordless"
+  },
+  "pastas": {
+    "conda_name": "pastas",
+    "import_name": "pastas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pastas"
+  },
+  "paste": {
+    "conda_name": "paste",
+    "import_name": "paste",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paste"
+  },
+  "pastedeploy": {
+    "conda_name": "pastedeploy",
+    "import_name": "paste",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pastedeploy"
+  },
+  "pastel": {
+    "conda_name": "pastel",
+    "import_name": "pastel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pastel"
+  },
+  "pastescript": {
+    "conda_name": "pastescript",
+    "import_name": "paste",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pastescript"
+  },
+  "patch": {
+    "conda_name": "python-patch",
+    "import_name": "patch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "patch"
+  },
+  "patchnetvlad": {
+    "conda_name": "patchnetvlad",
+    "import_name": "patchnetvlad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "patchnetvlad"
+  },
+  "path": {
+    "conda_name": "path",
+    "import_name": "path",
+    "mapping_source": "regro-bot",
+    "pypi_name": "path"
+  },
+  "path-and-address": {
+    "conda_name": "path-and-address",
+    "import_name": "path_and_address",
+    "mapping_source": "regro-bot",
+    "pypi_name": "path-and-address"
+  },
+  "path-imports": {
+    "conda_name": "path-imports",
+    "import_name": "path_imports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "path-imports"
+  },
+  "path-py": {
+    "conda_name": "path.py",
+    "import_name": "path",
+    "mapping_source": "regro-bot",
+    "pypi_name": "path-py"
+  },
+  "pathfinder2e-stats": {
+    "conda_name": "pathfinder2e-stats",
+    "import_name": "pathfinder2e_stats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathfinder2e-stats"
+  },
+  "pathlib-abc": {
+    "conda_name": "pathlib-abc",
+    "import_name": "pathlib_abc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathlib-abc"
+  },
+  "pathlib-mate": {
+    "conda_name": "pathlib-mate",
+    "import_name": "pathlib_mate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathlib-mate"
+  },
+  "pathlib2": {
+    "conda_name": "pathlib2",
+    "import_name": "pathlib2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathlib2"
+  },
+  "pathsim": {
+    "conda_name": "pathsim",
+    "import_name": "pathsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathsim"
+  },
+  "pathsimanalysis": {
+    "conda_name": "pathsimanalysis",
+    "import_name": "pathsimanalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathsimanalysis"
+  },
+  "pathtools": {
+    "conda_name": "pathtools",
+    "import_name": "pathtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathtools"
+  },
+  "pathvalidate": {
+    "conda_name": "pathvalidate",
+    "import_name": "pathvalidate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pathvalidate"
+  },
+  "patool": {
+    "conda_name": "patool",
+    "import_name": "patoolib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "patool"
+  },
+  "pattern": {
+    "conda_name": "pattern",
+    "import_name": "pattern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pattern"
+  },
+  "pattern-utils": {
+    "conda_name": "pattern-utils",
+    "import_name": "pattern_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pattern-utils"
+  },
+  "paver": {
+    "conda_name": "paver",
+    "import_name": "paver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "paver"
+  },
+  "pavo": {
+    "conda_name": "pavo",
+    "import_name": "pavo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pavo"
+  },
+  "pawflim": {
+    "conda_name": "pawflim",
+    "import_name": "pawflim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pawflim"
+  },
+  "pbr": {
+    "conda_name": "pbr",
+    "import_name": "pbr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pbr"
+  },
+  "pbs-installer": {
+    "conda_name": "pbs-installer",
+    "import_name": "pbs_installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pbs-installer"
+  },
+  "pbxproj": {
+    "conda_name": "pbxproj",
+    "import_name": "pbxproj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pbxproj"
+  },
+  "pcaspy": {
+    "conda_name": "pcaspy",
+    "import_name": "pcaspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pcaspy"
+  },
+  "pcicrawler": {
+    "conda_name": "pcicrawler",
+    "import_name": "pcicrawler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pcicrawler"
+  },
+  "pcodedmp": {
+    "conda_name": "pcodedmp",
+    "import_name": "pcodedmp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pcodedmp"
+  },
+  "pcpp": {
+    "conda_name": "pcpp",
+    "import_name": "pcpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pcpp"
+  },
+  "pcst-fast": {
+    "conda_name": "pcst-fast",
+    "import_name": "pcst_fast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pcst-fast"
+  },
+  "pdal-parallelizer": {
+    "conda_name": "pdal-parallelizer",
+    "import_name": "pdal_parallelizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdal-parallelizer"
+  },
+  "pdb-manip-py": {
+    "conda_name": "pdb_manip_py",
+    "import_name": "pdb_manip_py.pdb_manip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdb-manip-py"
+  },
+  "pdb2pqr": {
+    "conda_name": "pdb2pqr",
+    "import_name": "pdb2pqr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdb2pqr"
+  },
+  "pdb2pqr-htmd-propka30": {
+    "conda_name": "pdb2pqr_htmd_propka30",
+    "import_name": "pdb2pqr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdb2pqr-htmd-propka30"
+  },
+  "pdb2sql": {
+    "conda_name": "pdb2sql",
+    "import_name": "pdb2sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdb2sql"
+  },
+  "pdbeccdutils": {
+    "conda_name": "pdbeccdutils",
+    "import_name": "pdbeccdutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdbeccdutils"
+  },
+  "pdblp": {
+    "conda_name": "pdblp",
+    "import_name": "pdblp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdblp"
+  },
+  "pdbstore": {
+    "conda_name": "pdbstore",
+    "import_name": "pdbstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdbstore"
+  },
+  "pdemtools": {
+    "conda_name": "pdemtools",
+    "import_name": "pdemtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdemtools"
+  },
+  "pdf2image": {
+    "conda_name": "pdf2image",
+    "import_name": "pdf2image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdf2image"
+  },
+  "pdfkit": {
+    "conda_name": "python-pdfkit",
+    "import_name": "pdfkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfkit"
+  },
+  "pdflatex": {
+    "conda_name": "pdflatex",
+    "import_name": "pdflatex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdflatex"
+  },
+  "pdfminer-six": {
+    "conda_name": "pdfminer-six",
+    "import_name": "pdfminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfminer-six"
+  },
+  "pdfminer3k": {
+    "conda_name": "pdfminer3k",
+    "import_name": "pdfminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfminer3k"
+  },
+  "pdfo": {
+    "conda_name": "pdfo",
+    "import_name": "pdfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfo"
+  },
+  "pdfrw": {
+    "conda_name": "pdfrw",
+    "import_name": "pdfrw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfrw"
+  },
+  "pdfstream": {
+    "conda_name": "pdfstream",
+    "import_name": "pdfstream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdfstream"
+  },
+  "pdftext": {
+    "conda_name": "pdftext",
+    "import_name": "pdftext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdftext"
+  },
+  "pdftotext": {
+    "conda_name": "pdftotext",
+    "import_name": "pdftotext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdftotext"
+  },
+  "pdielec": {
+    "conda_name": "pdielec",
+    "import_name": "PDielec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdielec"
+  },
+  "pdiff": {
+    "conda_name": "pdiff",
+    "import_name": "pdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdiff"
+  },
+  "pdir2": {
+    "conda_name": "pdir2",
+    "import_name": "pdir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdir2"
+  },
+  "pdm-backend": {
+    "conda_name": "pdm-backend",
+    "import_name": "pdm.backend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdm-backend"
+  },
+  "pdm-pep517": {
+    "conda_name": "pdm-pep517",
+    "import_name": "pdm.pep517",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdm-pep517"
+  },
+  "pdoc3": {
+    "conda_name": "pdoc3",
+    "import_name": "pdoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdoc3"
+  },
+  "pdocs": {
+    "conda_name": "pdocs",
+    "import_name": "pdocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdocs"
+  },
+  "pdpbox": {
+    "conda_name": "pdpbox",
+    "import_name": "pdpbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdpbox"
+  },
+  "pdpipe": {
+    "conda_name": "pdpipe",
+    "import_name": "pdpipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdpipe"
+  },
+  "pdpyras": {
+    "conda_name": "pdpyras",
+    "import_name": "pdpyras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdpyras"
+  },
+  "pdr": {
+    "conda_name": "pdr",
+    "import_name": "pdr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdr"
+  },
+  "pds-api-client": {
+    "conda_name": "pds.api-client",
+    "import_name": "pds.api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pds-api-client"
+  },
+  "pds-peppi": {
+    "conda_name": "pds.peppi",
+    "import_name": "pds.peppi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pds-peppi"
+  },
+  "pds4-tools": {
+    "conda_name": "pds4_tools",
+    "import_name": "pds4_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pds4-tools"
+  },
+  "pdtable": {
+    "conda_name": "pdtable",
+    "import_name": "pdtable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdtable"
+  },
+  "pdtypes": {
+    "conda_name": "pdtypes",
+    "import_name": "pdtypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdtypes"
+  },
+  "pdvega": {
+    "conda_name": "pdvega",
+    "import_name": "pdvega",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pdvega"
+  },
+  "pe-configurator": {
+    "conda_name": "pe-configurator",
+    "import_name": "peconfigurator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pe-configurator"
+  },
+  "peakutils": {
+    "conda_name": "peakutils",
+    "import_name": "peakutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peakutils"
+  },
+  "pebble": {
+    "conda_name": "pebble",
+    "import_name": "pebble",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pebble"
+  },
+  "peccary": {
+    "conda_name": "peccary",
+    "import_name": "peccary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peccary"
+  },
+  "pedantic": {
+    "conda_name": "pedantic",
+    "import_name": "pedantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pedantic"
+  },
+  "peepdb": {
+    "conda_name": "peepdb",
+    "import_name": "peepdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peepdb"
+  },
+  "peewee-migrate": {
+    "conda_name": "peewee-migrate",
+    "import_name": "peewee_migrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peewee-migrate"
+  },
+  "pegasus-wms-dax": {
+    "conda_name": "pegasus-wms.dax",
+    "import_name": "Pegasus.DAX3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pegasus-wms-dax"
+  },
+  "pegen": {
+    "conda_name": "pegen",
+    "import_name": "pegen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pegen"
+  },
+  "pelican": {
+    "conda_name": "pelican",
+    "import_name": "pelican",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pelican"
+  },
+  "pelican-bibliography": {
+    "conda_name": "pelican-bibliography",
+    "import_name": "pelican.plugins.bibliography.bibliography",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pelican-bibliography"
+  },
+  "pem": {
+    "conda_name": "pem",
+    "import_name": "pem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pem"
+  },
+  "penaltymodel": {
+    "conda_name": "penaltymodel",
+    "import_name": "penaltymodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "penaltymodel"
+  },
+  "pengwann": {
+    "conda_name": "pengwann",
+    "import_name": "pengwann",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pengwann"
+  },
+  "pentapy": {
+    "conda_name": "pentapy",
+    "import_name": "pentapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pentapy"
+  },
+  "pep440": {
+    "conda_name": "pep440",
+    "import_name": "pep440",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pep440"
+  },
+  "pep562": {
+    "conda_name": "pep562",
+    "import_name": "pep562",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pep562"
+  },
+  "pephubclient": {
+    "conda_name": "pephubclient",
+    "import_name": "pephubclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pephubclient"
+  },
+  "peppy": {
+    "conda_name": "peppy",
+    "import_name": "peppy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peppy"
+  },
+  "pepredicates": {
+    "conda_name": "pepredicates",
+    "import_name": "pepredicates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pepredicates"
+  },
+  "peprs": {
+    "conda_name": "peprs",
+    "import_name": "peprs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peprs"
+  },
+  "pept": {
+    "conda_name": "pept",
+    "import_name": "pept",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pept"
+  },
+  "percy": {
+    "conda_name": "percy",
+    "import_name": "percy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "percy"
+  },
+  "perfmetrics": {
+    "conda_name": "perfmetrics",
+    "import_name": "perfmetrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "perfmetrics"
+  },
+  "performance": {
+    "conda_name": "performance",
+    "import_name": "performance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "performance"
+  },
+  "performer-pytorch": {
+    "conda_name": "performer-pytorch",
+    "import_name": "performer_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "performer-pytorch"
+  },
+  "perfplot": {
+    "conda_name": "perfplot",
+    "import_name": "perfplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "perfplot"
+  },
+  "periodic-table-plotter": {
+    "conda_name": "periodic-table-plotter",
+    "import_name": "ptplotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "periodic-table-plotter"
+  },
+  "periodicgw": {
+    "conda_name": "periodicgw",
+    "import_name": "periodicgw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "periodicgw"
+  },
+  "periodictable": {
+    "conda_name": "periodictable",
+    "import_name": "periodictable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "periodictable"
+  },
+  "permamodel": {
+    "conda_name": "permamodel",
+    "import_name": "permamodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "permamodel"
+  },
+  "permission": {
+    "conda_name": "permission",
+    "import_name": "permission",
+    "mapping_source": "regro-bot",
+    "pypi_name": "permission"
+  },
+  "perplexityai": {
+    "conda_name": "perplexityai",
+    "import_name": "perplexity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "perplexityai"
+  },
+  "perseo-core": {
+    "conda_name": "perseo-core",
+    "import_name": "perseo_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "perseo-core"
+  },
+  "persim": {
+    "conda_name": "persim",
+    "import_name": "persim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "persim"
+  },
+  "persist-ext": {
+    "conda_name": "persist_ext",
+    "import_name": "persist_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "persist-ext"
+  },
+  "persistent": {
+    "conda_name": "persistent",
+    "import_name": "persistent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "persistent"
+  },
+  "perspective-parquet": {
+    "conda_name": "perspective_parquet",
+    "import_name": "perspective_parquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "perspective-parquet"
+  },
+  "pertpy": {
+    "conda_name": "pertpy",
+    "import_name": "pertpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pertpy"
+  },
+  "pescador": {
+    "conda_name": "pescador",
+    "import_name": "pescador",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pescador"
+  },
+  "pesq": {
+    "conda_name": "pesq",
+    "import_name": "pesq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pesq"
+  },
+  "petl": {
+    "conda_name": "petl",
+    "import_name": "petl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "petl"
+  },
+  "petsird": {
+    "conda_name": "petsird",
+    "import_name": "petsird",
+    "mapping_source": "regro-bot",
+    "pypi_name": "petsird"
+  },
+  "pettingzoo": {
+    "conda_name": "pettingzoo",
+    "import_name": "pettingzoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pettingzoo"
+  },
+  "peuqse": {
+    "conda_name": "peuqse",
+    "import_name": "PEUQSE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "peuqse"
+  },
+  "pex": {
+    "conda_name": "pex",
+    "import_name": "pex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pex"
+  },
+  "pexpect": {
+    "conda_name": "pexpect",
+    "import_name": "pexpect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pexpect"
+  },
+  "pfsspy": {
+    "conda_name": "pfsspy",
+    "import_name": "pfsspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pfsspy"
+  },
+  "pfzy": {
+    "conda_name": "pfzy",
+    "import_name": "pfzy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pfzy"
+  },
+  "pg8000": {
+    "conda_name": "pg8000",
+    "import_name": "pg8000",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pg8000"
+  },
+  "pgcli": {
+    "conda_name": "pgcli",
+    "import_name": "pgcli.packages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgcli"
+  },
+  "pgcolorbar": {
+    "conda_name": "pgcolorbar",
+    "import_name": "pgcolorbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgcolorbar"
+  },
+  "pgcopy": {
+    "conda_name": "pgcopy",
+    "import_name": "pgcopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgcopy"
+  },
+  "pgdumplib": {
+    "conda_name": "pgdumplib",
+    "import_name": "pgdumplib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgdumplib"
+  },
+  "pgeocode": {
+    "conda_name": "pgeocode",
+    "import_name": "pgeocode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgeocode"
+  },
+  "pgmpy": {
+    "conda_name": "pgmpy",
+    "import_name": "pgmpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgmpy"
+  },
+  "pgpy": {
+    "conda_name": "pgpy",
+    "import_name": "pgpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgpy"
+  },
+  "pgraph-python": {
+    "conda_name": "pgraph-python",
+    "import_name": "pgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgraph-python"
+  },
+  "pgsanity": {
+    "conda_name": "pgsanity",
+    "import_name": "pgsanity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgsanity"
+  },
+  "pgspecial": {
+    "conda_name": "pgspecial",
+    "import_name": "pgspecial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgspecial"
+  },
+  "pgsqlite": {
+    "conda_name": "pgsqlite",
+    "import_name": "pgsqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgsqlite"
+  },
+  "pgsu": {
+    "conda_name": "pgsu",
+    "import_name": "pgsu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pgsu"
+  },
+  "phasefieldx": {
+    "conda_name": "phasefieldx",
+    "import_name": "phasefieldx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phasefieldx"
+  },
+  "phasegen": {
+    "conda_name": "phasegen",
+    "import_name": "phasegen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phasegen"
+  },
+  "phasorpy": {
+    "conda_name": "phasorpy",
+    "import_name": "phasorpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phasorpy"
+  },
+  "phe": {
+    "conda_name": "phe",
+    "import_name": "phe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phe"
+  },
+  "pheasant": {
+    "conda_name": "pheasant",
+    "import_name": "pheasant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pheasant"
+  },
+  "phidata": {
+    "conda_name": "phidata",
+    "import_name": "phi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phidata"
+  },
+  "phidget22": {
+    "conda_name": "phidget22",
+    "import_name": "Phidget22",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phidget22"
+  },
+  "phidl": {
+    "conda_name": "phidl",
+    "import_name": "phidl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phidl"
+  },
+  "phoebusgen": {
+    "conda_name": "phoebusgen",
+    "import_name": "phoebusgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phoebusgen"
+  },
+  "phonemizer-fork": {
+    "conda_name": "phonemizer-fork",
+    "import_name": "phonemizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phonemizer-fork"
+  },
+  "phonolammps": {
+    "conda_name": "phonolammps",
+    "import_name": "phonolammps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phonolammps"
+  },
+  "photerr": {
+    "conda_name": "photerr",
+    "import_name": "photerr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "photerr"
+  },
+  "phpserialize": {
+    "conda_name": "phpserialize",
+    "import_name": "phpserialize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phpserialize"
+  },
+  "phreeqcrm": {
+    "conda_name": "phreeqcrm",
+    "import_name": "phreeqcrm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phreeqcrm"
+  },
+  "phreeqpy": {
+    "conda_name": "phreeqpy",
+    "import_name": "phreeqpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phreeqpy"
+  },
+  "phroc": {
+    "conda_name": "phroc",
+    "import_name": "phroc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phroc"
+  },
+  "phx-class-registry": {
+    "conda_name": "phx-class-registry",
+    "import_name": "class_registry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phx-class-registry"
+  },
+  "physics-tenpy": {
+    "conda_name": "physics-tenpy",
+    "import_name": "tenpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "physics-tenpy"
+  },
+  "physiocurve": {
+    "conda_name": "physiocurve",
+    "import_name": "physiocurve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "physiocurve"
+  },
+  "physo": {
+    "conda_name": "physo",
+    "import_name": "physo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "physo"
+  },
+  "phytreeviz": {
+    "conda_name": "phytreeviz",
+    "import_name": "phytreeviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "phytreeviz"
+  },
+  "pi-vae-pytorch": {
+    "conda_name": "pi-vae-pytorch",
+    "import_name": "pi_vae_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pi-vae-pytorch"
+  },
+  "piano-fingering": {
+    "conda_name": "piano_fingering",
+    "import_name": "piano_fingering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "piano-fingering"
+  },
+  "picaso": {
+    "conda_name": "picaso",
+    "import_name": "picaso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "picaso"
+  },
+  "piccolo-theme": {
+    "conda_name": "piccolo-theme",
+    "import_name": "piccolo_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "piccolo-theme"
+  },
+  "picharsso": {
+    "conda_name": "picharsso",
+    "import_name": "picharsso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "picharsso"
+  },
+  "pick": {
+    "conda_name": "pick",
+    "import_name": "pick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pick"
+  },
+  "pickle-compat": {
+    "conda_name": "pickle-compat",
+    "import_name": "pickle_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pickle-compat"
+  },
+  "pickleshare": {
+    "conda_name": "pickleshare",
+    "import_name": "pickleshare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pickleshare"
+  },
+  "pickydict": {
+    "conda_name": "pickydict",
+    "import_name": "pickydict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pickydict"
+  },
+  "picologging": {
+    "conda_name": "picologging",
+    "import_name": "picologging",
+    "mapping_source": "regro-bot",
+    "pypi_name": "picologging"
+  },
+  "picosdk": {
+    "conda_name": "picosdk",
+    "import_name": "picosdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "picosdk"
+  },
+  "picwriter": {
+    "conda_name": "picwriter",
+    "import_name": "picwriter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "picwriter"
+  },
+  "pidgen2": {
+    "conda_name": "pidgen2",
+    "import_name": "pidgen2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pidgen2"
+  },
+  "pidibble": {
+    "conda_name": "pidibble",
+    "import_name": "pidibble",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pidibble"
+  },
+  "pidly": {
+    "conda_name": "pidly",
+    "import_name": "pidly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pidly"
+  },
+  "pidng": {
+    "conda_name": "pidng",
+    "import_name": "pidng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pidng"
+  },
+  "piecash": {
+    "conda_name": "piecash",
+    "import_name": "piecash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "piecash"
+  },
+  "pigar": {
+    "conda_name": "pigar",
+    "import_name": "pigar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pigar"
+  },
+  "pigeon-jupyter": {
+    "conda_name": "pigeon-jupyter",
+    "import_name": "pigeon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pigeon-jupyter"
+  },
+  "pigeonxt-jupyter": {
+    "conda_name": "pigeonxt-jupyter",
+    "import_name": "pigeonXT",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pigeonxt-jupyter"
+  },
+  "pika": {
+    "conda_name": "pika",
+    "import_name": "pika",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pika"
+  },
+  "pimpmyclass": {
+    "conda_name": "pimpmyclass",
+    "import_name": "pimpmyclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pimpmyclass"
+  },
+  "pims": {
+    "conda_name": "pims",
+    "import_name": "pims",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pims"
+  },
+  "pimsviewer": {
+    "conda_name": "pimsviewer",
+    "import_name": "pimsviewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pimsviewer"
+  },
+  "pin-pink": {
+    "conda_name": "pink",
+    "import_name": "pink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pin-pink"
+  },
+  "pinecone-plugin-interface": {
+    "conda_name": "pinecone-plugin-interface",
+    "import_name": "pinecone_plugin_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pinecone-plugin-interface"
+  },
+  "pingouin": {
+    "conda_name": "pingouin",
+    "import_name": "pingouin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pingouin"
+  },
+  "pins": {
+    "conda_name": "pins",
+    "import_name": "pins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pins"
+  },
+  "pint-pal": {
+    "conda_name": "pint-pal",
+    "import_name": "pint_pal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pint-pal"
+  },
+  "pint-pandas": {
+    "conda_name": "pint-pandas",
+    "import_name": "pint_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pint-pandas"
+  },
+  "pint-pulsar": {
+    "conda_name": "pint-pulsar",
+    "import_name": "pint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pint-pulsar"
+  },
+  "pint-xarray": {
+    "conda_name": "pint-xarray",
+    "import_name": "pint_xarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pint-xarray"
+  },
+  "pinyin": {
+    "conda_name": "pinyin",
+    "import_name": "pinyin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pinyin"
+  },
+  "pip": {
+    "conda_name": "pip",
+    "import_name": "pip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pip"
+  },
+  "pip-api": {
+    "conda_name": "pip-api",
+    "import_name": "pip_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pip-api"
+  },
+  "pip-audit": {
+    "conda_name": "pip-audit",
+    "import_name": "pip_audit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pip-audit"
+  },
+  "pip-tools": {
+    "conda_name": "pip-tools",
+    "import_name": "piptools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pip-tools"
+  },
+  "pipdate": {
+    "conda_name": "pipdate",
+    "import_name": "pipdate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipdate"
+  },
+  "pipe": {
+    "conda_name": "pipe",
+    "import_name": "pipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipe"
+  },
+  "pipestat": {
+    "conda_name": "pipestat",
+    "import_name": "pipestat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipestat"
+  },
+  "pipettor": {
+    "conda_name": "pipettor",
+    "import_name": "pipettor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipettor"
+  },
+  "pipfile": {
+    "conda_name": "pipfile",
+    "import_name": "pipfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipfile"
+  },
+  "pipreqsnb": {
+    "conda_name": "pipreqsnb",
+    "import_name": "pipreqsnb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipreqsnb"
+  },
+  "pipx": {
+    "conda_name": "pipx",
+    "import_name": "pipx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pipx"
+  },
+  "pisces": {
+    "conda_name": "pisces-db",
+    "import_name": "pisces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pisces"
+  },
+  "piso": {
+    "conda_name": "piso",
+    "import_name": "piso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "piso"
+  },
+  "pit-rift": {
+    "conda_name": "pit-rift",
+    "import_name": "rift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pit-rift"
+  },
+  "pitot": {
+    "conda_name": "pitot",
+    "import_name": "pitot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pitot"
+  },
+  "pixcdust": {
+    "conda_name": "pixcdust",
+    "import_name": "pixcdust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pixcdust"
+  },
+  "pixell": {
+    "conda_name": "pixell",
+    "import_name": "pixell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pixell"
+  },
+  "pixi-kernel": {
+    "conda_name": "pixi-kernel",
+    "import_name": "pixi_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pixi-kernel"
+  },
+  "pixiedust": {
+    "conda_name": "pixiedust",
+    "import_name": "pixiedust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pixiedust"
+  },
+  "pixstem": {
+    "conda_name": "pixstem",
+    "import_name": "pixstem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pixstem"
+  },
+  "pkbar": {
+    "conda_name": "pkbar",
+    "import_name": "pkbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkbar"
+  },
+  "pkce": {
+    "conda_name": "pkce",
+    "import_name": "pkce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkce"
+  },
+  "pkginfo": {
+    "conda_name": "pkginfo",
+    "import_name": "pkginfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkginfo"
+  },
+  "pkgparser": {
+    "conda_name": "pkgparser",
+    "import_name": "pkgparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkgparser"
+  },
+  "pkgutil-resolve-name": {
+    "conda_name": "pkgutil-resolve-name",
+    "import_name": "pkgutil_resolve_name",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkgutil-resolve-name"
+  },
+  "pkgversions": {
+    "conda_name": "pkgversions",
+    "import_name": "pkgversions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkgversions"
+  },
+  "pkld": {
+    "conda_name": "pkld",
+    "import_name": "pkld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pkld"
+  },
+  "placekey": {
+    "conda_name": "placekey",
+    "import_name": "placekey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "placekey"
+  },
+  "planarity": {
+    "conda_name": "python-planarity",
+    "import_name": "planarity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planarity"
+  },
+  "planet": {
+    "conda_name": "planet",
+    "import_name": "planet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planet"
+  },
+  "planetary-computer": {
+    "conda_name": "planetary-computer",
+    "import_name": "planetary_computer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planetary-computer"
+  },
+  "planetary-coverage": {
+    "conda_name": "planetary-coverage",
+    "import_name": "planetary_coverage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planetary-coverage"
+  },
+  "planetaryimage": {
+    "conda_name": "planetaryimage",
+    "import_name": "planetaryimage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planetaryimage"
+  },
+  "planetmapper": {
+    "conda_name": "planetmapper",
+    "import_name": "planetmapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "planetmapper"
+  },
+  "plantcv": {
+    "conda_name": "plantcv",
+    "import_name": "plantcv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plantcv"
+  },
+  "plasmaboundaries": {
+    "conda_name": "plasmaboundaries",
+    "import_name": "plasmaboundaries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plasmaboundaries"
+  },
+  "plasmapy": {
+    "conda_name": "plasmapy",
+    "import_name": "plasmapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plasmapy"
+  },
+  "plaster": {
+    "conda_name": "plaster",
+    "import_name": "plaster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plaster"
+  },
+  "plaster-pastedeploy": {
+    "conda_name": "plaster_pastedeploy",
+    "import_name": "plaster_pastedeploy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plaster-pastedeploy"
+  },
+  "plate-model-manager": {
+    "conda_name": "plate-model-manager",
+    "import_name": "plate_model_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plate-model-manager"
+  },
+  "platelet-unet-watershed": {
+    "conda_name": "platelet-unet-watershed",
+    "import_name": "plateseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "platelet-unet-watershed"
+  },
+  "plateletanalysis": {
+    "conda_name": "plateletanalysis",
+    "import_name": "plateletanalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plateletanalysis"
+  },
+  "platetectonictools": {
+    "conda_name": "platetectonictools",
+    "import_name": "ptt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "platetectonictools"
+  },
+  "platformio": {
+    "conda_name": "platformio",
+    "import_name": "platformio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "platformio"
+  },
+  "platymatch": {
+    "conda_name": "platymatch",
+    "import_name": "platymatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "platymatch"
+  },
+  "playground": {
+    "conda_name": "playground",
+    "import_name": "mujoco_playground",
+    "mapping_source": "regro-bot",
+    "pypi_name": "playground"
+  },
+  "playsound": {
+    "conda_name": "playsound",
+    "import_name": "playsound",
+    "mapping_source": "regro-bot",
+    "pypi_name": "playsound"
+  },
+  "pleiades-neutron": {
+    "conda_name": "pleiades-neutron",
+    "import_name": "pleiades",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pleiades-neutron"
+  },
+  "plenoptic": {
+    "conda_name": "plenoptic",
+    "import_name": "plenoptic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plenoptic"
+  },
+  "plonk": {
+    "conda_name": "plonk",
+    "import_name": "plonk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plonk"
+  },
+  "ploomber-core": {
+    "conda_name": "ploomber-core",
+    "import_name": "ploomber_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ploomber-core"
+  },
+  "ploomber-engine": {
+    "conda_name": "ploomber-engine",
+    "import_name": "ploomber_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ploomber-engine"
+  },
+  "ploomber-extension": {
+    "conda_name": "ploomber-extension",
+    "import_name": "ploomber_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ploomber-extension"
+  },
+  "ploomber-scaffold": {
+    "conda_name": "ploomber-scaffold",
+    "import_name": "ploomber_scaffold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ploomber-scaffold"
+  },
+  "plot-av": {
+    "conda_name": "plot-av",
+    "import_name": "plot_av",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plot-av"
+  },
+  "plot-map": {
+    "conda_name": "plot_map",
+    "import_name": "plot_map",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plot-map"
+  },
+  "plotapi": {
+    "conda_name": "plotapi",
+    "import_name": "plotapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotapi"
+  },
+  "plotastrodata": {
+    "conda_name": "plotastrodata",
+    "import_name": "plotastrodata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotastrodata"
+  },
+  "plotext": {
+    "conda_name": "plotext",
+    "import_name": "plotext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotext"
+  },
+  "plothist": {
+    "conda_name": "plothist",
+    "import_name": "plothist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plothist"
+  },
+  "plothist-utils": {
+    "conda_name": "plothist_utils",
+    "import_name": "plothist_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plothist-utils"
+  },
+  "plotille": {
+    "conda_name": "plotille",
+    "import_name": "plotille",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotille"
+  },
+  "plotly-ecdf": {
+    "conda_name": "plotly-ecdf",
+    "import_name": "plotly_ecdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotly-ecdf"
+  },
+  "plotly-express": {
+    "conda_name": "plotly_express",
+    "import_name": "plotly_express",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotly-express"
+  },
+  "plotlydash-tornado-cmd": {
+    "conda_name": "plotlydash-tornado-cmd",
+    "import_name": "plotlydash_tornado_cmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotlydash-tornado-cmd"
+  },
+  "plotnine": {
+    "conda_name": "plotnine",
+    "import_name": "plotnine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotnine"
+  },
+  "plotnn": {
+    "conda_name": "plotnn",
+    "import_name": "plotnn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plotnn"
+  },
+  "plottable": {
+    "conda_name": "plottable",
+    "import_name": "plottable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plottable"
+  },
+  "plottoolbox": {
+    "conda_name": "plottoolbox",
+    "import_name": "plottoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plottoolbox"
+  },
+  "plottr": {
+    "conda_name": "plottr",
+    "import_name": "plottr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plottr"
+  },
+  "plpygis": {
+    "conda_name": "plpygis",
+    "import_name": "plpygis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plpygis"
+  },
+  "plucky": {
+    "conda_name": "plucky",
+    "import_name": "plucky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plucky"
+  },
+  "plugcli": {
+    "conda_name": "plugcli",
+    "import_name": "plugcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plugcli"
+  },
+  "pluginbase": {
+    "conda_name": "pluginbase",
+    "import_name": "pluginbase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pluginbase"
+  },
+  "plum-dispatch": {
+    "conda_name": "plum-dispatch",
+    "import_name": "plum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plum-dispatch"
+  },
+  "plum-py": {
+    "conda_name": "plum-py",
+    "import_name": "plum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plum-py"
+  },
+  "plumbing": {
+    "conda_name": "plumbing",
+    "import_name": "plumbing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plumbing"
+  },
+  "plumpy": {
+    "conda_name": "plumpy",
+    "import_name": "plumpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plumpy"
+  },
+  "plurmy": {
+    "conda_name": "plurmy",
+    "import_name": "plurmy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plurmy"
+  },
+  "plus-slurm": {
+    "conda_name": "plus_slurm",
+    "import_name": "plus_slurm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plus-slurm"
+  },
+  "plus-sync": {
+    "conda_name": "plus_sync",
+    "import_name": "plus_sync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plus-sync"
+  },
+  "plusplus": {
+    "conda_name": "plusplus",
+    "import_name": "plusplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plusplus"
+  },
+  "ply": {
+    "conda_name": "ply",
+    "import_name": "ply",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ply"
+  },
+  "plyer": {
+    "conda_name": "plyer",
+    "import_name": "plyer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plyer"
+  },
+  "plyfile": {
+    "conda_name": "plyfile",
+    "import_name": "plyfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plyfile"
+  },
+  "plyvel": {
+    "conda_name": "plyvel",
+    "import_name": "plyvel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "plyvel"
+  },
+  "pmda": {
+    "conda_name": "pmda",
+    "import_name": "pmda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pmda"
+  },
+  "pmdarima": {
+    "conda_name": "pmdarima",
+    "import_name": "pmdarima",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pmdarima"
+  },
+  "pmtiles": {
+    "conda_name": "pmtiles",
+    "import_name": "pmtiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pmtiles"
+  },
+  "pmw": {
+    "conda_name": "pmw",
+    "import_name": "Pmw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pmw"
+  },
+  "pnoise": {
+    "conda_name": "pnoise",
+    "import_name": "pnoise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pnoise"
+  },
+  "poap": {
+    "conda_name": "poap",
+    "import_name": "poap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poap"
+  },
+  "pocket": {
+    "conda_name": "pocket",
+    "import_name": "pocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pocket"
+  },
+  "pockets": {
+    "conda_name": "pockets",
+    "import_name": "pockets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pockets"
+  },
+  "podaac-data-subscriber": {
+    "conda_name": "podaac-data-subscriber",
+    "import_name": "subscriber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "podaac-data-subscriber"
+  },
+  "podman": {
+    "conda_name": "podman-py",
+    "import_name": "podman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "podman"
+  },
+  "poe-api-wrapper": {
+    "conda_name": "poe-api-wrapper",
+    "import_name": "poe_api_wrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poe-api-wrapper"
+  },
+  "poethepoet": {
+    "conda_name": "poethepoet",
+    "import_name": "poethepoet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poethepoet"
+  },
+  "poetry-conda": {
+    "conda_name": "poetry-conda",
+    "import_name": "poetry_conda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poetry-conda"
+  },
+  "poetry-dynamic-versioning": {
+    "conda_name": "poetry-dynamic-versioning",
+    "import_name": "poetry_dynamic_versioning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poetry-dynamic-versioning"
+  },
+  "poetry-dynamic-versioning-plugin": {
+    "conda_name": "poetry-dynamic-versioning-plugin",
+    "import_name": "poetry_dynamic_versioning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poetry-dynamic-versioning-plugin"
+  },
+  "poetry-kernel": {
+    "conda_name": "poetry-kernel",
+    "import_name": "poetry_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poetry-kernel"
+  },
+  "point-annotator": {
+    "conda_name": "point-annotator",
+    "import_name": "pointannotator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "point-annotator"
+  },
+  "pointpats": {
+    "conda_name": "pointpats",
+    "import_name": "pointpats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pointpats"
+  },
+  "pokemonpy": {
+    "conda_name": "pokemonpy",
+    "import_name": "pokemonpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pokemonpy"
+  },
+  "pokrok": {
+    "conda_name": "pokrok",
+    "import_name": "pokrok",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pokrok"
+  },
+  "polar2grid": {
+    "conda_name": "polar2grid",
+    "import_name": "polar2grid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polar2grid"
+  },
+  "polarify": {
+    "conda_name": "polarify",
+    "import_name": "polarify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polarify"
+  },
+  "polars-upgrade": {
+    "conda_name": "polars-upgrade",
+    "import_name": "polars_upgrade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polars-upgrade"
+  },
+  "polartoolkit": {
+    "conda_name": "polartoolkit",
+    "import_name": "polartoolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polartoolkit"
+  },
+  "polcart": {
+    "conda_name": "polcart",
+    "import_name": "polcart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polcart"
+  },
+  "polib": {
+    "conda_name": "polib",
+    "import_name": "polib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polib"
+  },
+  "policy-sentry": {
+    "conda_name": "policy_sentry",
+    "import_name": "policy_sentry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "policy-sentry"
+  },
+  "poligrain": {
+    "conda_name": "poligrain",
+    "import_name": "poligrain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poligrain"
+  },
+  "poliscipy": {
+    "conda_name": "poliscipy",
+    "import_name": "poliscipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poliscipy"
+  },
+  "polling": {
+    "conda_name": "polling",
+    "import_name": "polling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polling"
+  },
+  "polling2": {
+    "conda_name": "polling2",
+    "import_name": "polling2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polling2"
+  },
+  "pollster": {
+    "conda_name": "pollster",
+    "import_name": "pollster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pollster"
+  },
+  "poltergeist": {
+    "conda_name": "poltergeist",
+    "import_name": "poltergeist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poltergeist"
+  },
+  "polyagamma": {
+    "conda_name": "polyagamma",
+    "import_name": "polyagamma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyagamma"
+  },
+  "polybeat": {
+    "conda_name": "polybeat",
+    "import_name": "polybeat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polybeat"
+  },
+  "polycircles": {
+    "conda_name": "polycircles",
+    "import_name": "polycircles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polycircles"
+  },
+  "polyfactory": {
+    "conda_name": "polyfactory",
+    "import_name": "polyfactory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyfactory"
+  },
+  "polyglotdb": {
+    "conda_name": "polyglotdb",
+    "import_name": "polyglotdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyglotdb"
+  },
+  "polygon-api-client": {
+    "conda_name": "polygon-api-client",
+    "import_name": "polygon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polygon-api-client"
+  },
+  "polygon3": {
+    "conda_name": "polygon3",
+    "import_name": "Polygon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polygon3"
+  },
+  "polygonation": {
+    "conda_name": "polygonation",
+    "import_name": "polygonation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polygonation"
+  },
+  "polykin": {
+    "conda_name": "polykin",
+    "import_name": "polykin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polykin"
+  },
+  "polyleven": {
+    "conda_name": "polyleven",
+    "import_name": "polyleven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyleven"
+  },
+  "polyline": {
+    "conda_name": "polyline",
+    "import_name": "polyline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyline"
+  },
+  "polyround": {
+    "conda_name": "polyround",
+    "import_name": "PolyRound",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyround"
+  },
+  "polyscope": {
+    "conda_name": "polyscope",
+    "import_name": "polyscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polyscope"
+  },
+  "polytope": {
+    "conda_name": "polytope",
+    "import_name": "polytope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "polytope"
+  },
+  "pondpond": {
+    "conda_name": "pondpond",
+    "import_name": "pond",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pondpond"
+  },
+  "pony": {
+    "conda_name": "pony",
+    "import_name": "pony",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pony"
+  },
+  "pop-tools": {
+    "conda_name": "pop-tools",
+    "import_name": "pop_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pop-tools"
+  },
+  "popclass": {
+    "conda_name": "popclass",
+    "import_name": "popclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "popclass"
+  },
+  "popmon": {
+    "conda_name": "popmon",
+    "import_name": "popmon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "popmon"
+  },
+  "poppy": {
+    "conda_name": "poppy",
+    "import_name": "poppy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "poppy"
+  },
+  "porespy": {
+    "conda_name": "porespy",
+    "import_name": "porespy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "porespy"
+  },
+  "port-for": {
+    "conda_name": "port-for",
+    "import_name": "port_for",
+    "mapping_source": "regro-bot",
+    "pypi_name": "port-for"
+  },
+  "portalocker": {
+    "conda_name": "portalocker",
+    "import_name": "portalocker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "portalocker"
+  },
+  "portion": {
+    "conda_name": "portion",
+    "import_name": "portion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "portion"
+  },
+  "portpicker": {
+    "conda_name": "portpicker",
+    "import_name": "portpicker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "portpicker"
+  },
+  "portray": {
+    "conda_name": "portray",
+    "import_name": "portray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "portray"
+  },
+  "posebusters": {
+    "conda_name": "posebusters",
+    "import_name": "posebusters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "posebusters"
+  },
+  "positional": {
+    "conda_name": "positional",
+    "import_name": "positional",
+    "mapping_source": "regro-bot",
+    "pypi_name": "positional"
+  },
+  "posix-ipc": {
+    "conda_name": "posix_ipc",
+    "import_name": "posix_ipc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "posix-ipc"
+  },
+  "postgrest": {
+    "conda_name": "postgrest",
+    "import_name": "postgrest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "postgrest"
+  },
+  "posthog": {
+    "conda_name": "posthog",
+    "import_name": "posthog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "posthog"
+  },
+  "pot": {
+    "conda_name": "pot",
+    "import_name": "ot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pot"
+  },
+  "potentials": {
+    "conda_name": "potentials",
+    "import_name": "potentials",
+    "mapping_source": "regro-bot",
+    "pypi_name": "potentials"
+  },
+  "potpourri3d": {
+    "conda_name": "potpourri3d",
+    "import_name": "potpourri3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "potpourri3d"
+  },
+  "potranslator": {
+    "conda_name": "potranslator",
+    "import_name": "potranslator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "potranslator"
+  },
+  "pottery": {
+    "conda_name": "pottery",
+    "import_name": "pottery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pottery"
+  },
+  "power-grid-model-io": {
+    "conda_name": "power-grid-model-io",
+    "import_name": "power_grid_model_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "power-grid-model-io"
+  },
+  "powergenome": {
+    "conda_name": "powergenome",
+    "import_name": "powergenome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "powergenome"
+  },
+  "powerlaw": {
+    "conda_name": "powerlaw",
+    "import_name": "powerlaw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "powerlaw"
+  },
+  "powerplantmatching": {
+    "conda_name": "powerplantmatching",
+    "import_name": "powerplantmatching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "powerplantmatching"
+  },
+  "ppci": {
+    "conda_name": "ppci",
+    "import_name": "ppci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ppci"
+  },
+  "ppigrf": {
+    "conda_name": "ppigrf",
+    "import_name": "ppigrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ppigrf"
+  },
+  "pplpy": {
+    "conda_name": "pplpy",
+    "import_name": "ppl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pplpy"
+  },
+  "pprintpp": {
+    "conda_name": "pprintpp",
+    "import_name": "pprintpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pprintpp"
+  },
+  "ppscore": {
+    "conda_name": "ppscore",
+    "import_name": "ppscore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ppscore"
+  },
+  "pptreport": {
+    "conda_name": "pptreport",
+    "import_name": "pptreport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pptreport"
+  },
+  "pqdm": {
+    "conda_name": "pqdm",
+    "import_name": "pqdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pqdm"
+  },
+  "praatio": {
+    "conda_name": "praatio",
+    "import_name": "praatio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "praatio"
+  },
+  "practicalsparql": {
+    "conda_name": "practicalsparql",
+    "import_name": "practicalSPARQL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "practicalsparql"
+  },
+  "prance": {
+    "conda_name": "prance",
+    "import_name": "prance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prance"
+  },
+  "praw": {
+    "conda_name": "praw",
+    "import_name": "praw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "praw"
+  },
+  "prawcore": {
+    "conda_name": "prawcore",
+    "import_name": "prawcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prawcore"
+  },
+  "pre-commit-hooks": {
+    "conda_name": "pre-commit-hooks",
+    "import_name": "pre_commit_hooks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pre-commit-hooks"
+  },
+  "pre-commit-uv": {
+    "conda_name": "pre-commit-uv",
+    "import_name": "pre_commit_uv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pre-commit-uv"
+  },
+  "precession": {
+    "conda_name": "precession",
+    "import_name": "precession",
+    "mapping_source": "regro-bot",
+    "pypi_name": "precession"
+  },
+  "precision-recall-gain": {
+    "conda_name": "precision-recall-gain",
+    "import_name": "precision_recall_gain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "precision-recall-gain"
+  },
+  "predictr": {
+    "conda_name": "predictr",
+    "import_name": "predictr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "predictr"
+  },
+  "prefect": {
+    "conda_name": "prefect",
+    "import_name": "prefect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect"
+  },
+  "prefect-aws": {
+    "conda_name": "prefect-aws",
+    "import_name": "prefect_aws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-aws"
+  },
+  "prefect-azure": {
+    "conda_name": "prefect-azure",
+    "import_name": "prefect_azure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-azure"
+  },
+  "prefect-dask": {
+    "conda_name": "prefect-dask",
+    "import_name": "prefect_dask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-dask"
+  },
+  "prefect-docker": {
+    "conda_name": "prefect-docker",
+    "import_name": "prefect_docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-docker"
+  },
+  "prefect-kubernetes": {
+    "conda_name": "prefect-kubernetes",
+    "import_name": "prefect_kubernetes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-kubernetes"
+  },
+  "prefect-ray": {
+    "conda_name": "prefect-ray",
+    "import_name": "prefect_ray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefect-ray"
+  },
+  "prefixed": {
+    "conda_name": "prefixed",
+    "import_name": "prefixed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefixed"
+  },
+  "prefixmaps": {
+    "conda_name": "prefixmaps",
+    "import_name": "prefixmaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefixmaps"
+  },
+  "prefsync": {
+    "conda_name": "prefsync",
+    "import_name": "prefsync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prefsync"
+  },
+  "pregex": {
+    "conda_name": "pregex",
+    "import_name": "pregex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pregex"
+  },
+  "preliz": {
+    "conda_name": "preliz",
+    "import_name": "preliz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "preliz"
+  },
+  "premai": {
+    "conda_name": "premai",
+    "import_name": "premai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "premai"
+  },
+  "premailer": {
+    "conda_name": "premailer",
+    "import_name": "premailer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "premailer"
+  },
+  "premise": {
+    "conda_name": "premise",
+    "import_name": "premise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "premise"
+  },
+  "premise-gwp": {
+    "conda_name": "premise_gwp",
+    "import_name": "premise_gwp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "premise-gwp"
+  },
+  "presamples": {
+    "conda_name": "presamples",
+    "import_name": "presamples",
+    "mapping_source": "regro-bot",
+    "pypi_name": "presamples"
+  },
+  "prescient-sdk": {
+    "conda_name": "prescient-sdk",
+    "import_name": "prescient_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prescient-sdk"
+  },
+  "preshed": {
+    "conda_name": "preshed",
+    "import_name": "preshed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "preshed"
+  },
+  "presto-python-client": {
+    "conda_name": "presto-python-client",
+    "import_name": "prestodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "presto-python-client"
+  },
+  "pretend": {
+    "conda_name": "pretend",
+    "import_name": "pretend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pretend"
+  },
+  "pretrainedmodels": {
+    "conda_name": "pretrainedmodels",
+    "import_name": "pretrainedmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pretrainedmodels"
+  },
+  "pretty-errors": {
+    "conda_name": "pretty_errors",
+    "import_name": "pretty_errors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pretty-errors"
+  },
+  "pretty-html-table": {
+    "conda_name": "pretty_html_table",
+    "import_name": "pretty_html_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pretty-html-table"
+  },
+  "pretty-midi": {
+    "conda_name": "pretty_midi",
+    "import_name": "pretty_midi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pretty-midi"
+  },
+  "prettydiff": {
+    "conda_name": "prettydiff",
+    "import_name": "prettydiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prettydiff"
+  },
+  "prettypretty": {
+    "conda_name": "prettypretty",
+    "import_name": "prettypretty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prettypretty"
+  },
+  "prettyprinter": {
+    "conda_name": "prettyprinter",
+    "import_name": "prettyprinter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prettyprinter"
+  },
+  "prettypyplot": {
+    "conda_name": "prettypyplot",
+    "import_name": "prettypyplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prettypyplot"
+  },
+  "prettytable": {
+    "conda_name": "prettytable",
+    "import_name": "prettytable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prettytable"
+  },
+  "price-parser": {
+    "conda_name": "price-parser",
+    "import_name": "price_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "price-parser"
+  },
+  "primecountpy": {
+    "conda_name": "primecountpy",
+    "import_name": "primecountpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "primecountpy"
+  },
+  "primesieve": {
+    "conda_name": "python-primesieve",
+    "import_name": "primesieve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "primesieve"
+  },
+  "primod": {
+    "conda_name": "primod",
+    "import_name": "primod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "primod"
+  },
+  "prince": {
+    "conda_name": "prince-factor-analysis",
+    "import_name": "prince",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prince"
+  },
+  "print-on-steroids": {
+    "conda_name": "print-on-steroids",
+    "import_name": "print_on_steroids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "print-on-steroids"
+  },
+  "priority": {
+    "conda_name": "priority",
+    "import_name": "priority",
+    "mapping_source": "regro-bot",
+    "pypi_name": "priority"
+  },
+  "prism-ds": {
+    "conda_name": "prism-ds",
+    "import_name": "prism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prism-ds"
+  },
+  "prismatique": {
+    "conda_name": "prismatique",
+    "import_name": "prismatique",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prismatique"
+  },
+  "prismatools": {
+    "conda_name": "prismatools",
+    "import_name": "prismatools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prismatools"
+  },
+  "prison": {
+    "conda_name": "prison",
+    "import_name": "prison",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prison"
+  },
+  "privacy-meter": {
+    "conda_name": "privacy-meter",
+    "import_name": "privacy_meter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "privacy-meter"
+  },
+  "probableparsing": {
+    "conda_name": "probableparsing",
+    "import_name": "probableparsing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "probableparsing"
+  },
+  "probablepeople": {
+    "conda_name": "probablepeople",
+    "import_name": "probablepeople",
+    "mapping_source": "regro-bot",
+    "pypi_name": "probablepeople"
+  },
+  "probed": {
+    "conda_name": "probed",
+    "import_name": "probed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "probed"
+  },
+  "procodile": {
+    "conda_name": "procodile",
+    "import_name": "procodile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "procodile"
+  },
+  "procrunner": {
+    "conda_name": "procrunner",
+    "import_name": "procrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "procrunner"
+  },
+  "profilehooks": {
+    "conda_name": "profilehooks",
+    "import_name": "profilehooks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "profilehooks"
+  },
+  "proglog": {
+    "conda_name": "proglog",
+    "import_name": "proglog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proglog"
+  },
+  "progress-reporter": {
+    "conda_name": "progress_reporter",
+    "import_name": "progress_reporter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "progress-reporter"
+  },
+  "progress-table": {
+    "conda_name": "progress-table",
+    "import_name": "progress_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "progress-table"
+  },
+  "progressbar": {
+    "conda_name": "progressbar",
+    "import_name": "progressbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "progressbar"
+  },
+  "progressbar2": {
+    "conda_name": "progressbar2",
+    "import_name": "progressbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "progressbar2"
+  },
+  "progressbar33": {
+    "conda_name": "progressbar33",
+    "import_name": "progressbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "progressbar33"
+  },
+  "project-name": {
+    "conda_name": "project_name",
+    "import_name": "project_name",
+    "mapping_source": "regro-bot",
+    "pypi_name": "project-name"
+  },
+  "proliantutils": {
+    "conda_name": "proliantutils",
+    "import_name": "proliantutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proliantutils"
+  },
+  "prolif": {
+    "conda_name": "prolif",
+    "import_name": "prolif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prolif"
+  },
+  "prometheus-client": {
+    "conda_name": "prometheus_client",
+    "import_name": "prometheus_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prometheus-client"
+  },
+  "prometheus-fastapi-instrumentator": {
+    "conda_name": "prometheus-fastapi-instrumentator",
+    "import_name": "prometheus_fastapi_instrumentator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prometheus-fastapi-instrumentator"
+  },
+  "prometheus-flask-exporter": {
+    "conda_name": "prometheus_flask_exporter",
+    "import_name": "prometheus_flask_exporter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prometheus-flask-exporter"
+  },
+  "promise": {
+    "conda_name": "promise",
+    "import_name": "promise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "promise"
+  },
+  "prompt": {
+    "conda_name": "prompt",
+    "import_name": "prompt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prompt"
+  },
+  "proof": {
+    "conda_name": "proof",
+    "import_name": "proof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proof"
+  },
+  "propcache": {
+    "conda_name": "propcache",
+    "import_name": "propcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "propcache"
+  },
+  "properscoring": {
+    "conda_name": "properscoring",
+    "import_name": "properscoring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "properscoring"
+  },
+  "properties": {
+    "conda_name": "properties",
+    "import_name": "properties",
+    "mapping_source": "regro-bot",
+    "pypi_name": "properties"
+  },
+  "property-manager": {
+    "conda_name": "property-manager",
+    "import_name": "property_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "property-manager"
+  },
+  "prophecy-build-tool": {
+    "conda_name": "prophecy-build-tool",
+    "import_name": "pbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prophecy-build-tool"
+  },
+  "prophet": {
+    "conda_name": "prophet",
+    "import_name": "prophet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prophet"
+  },
+  "proplot": {
+    "conda_name": "proplot",
+    "import_name": "proplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proplot"
+  },
+  "prospect": {
+    "conda_name": "prospect",
+    "import_name": "prospect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prospect"
+  },
+  "prospector": {
+    "conda_name": "prospector",
+    "import_name": "prospector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prospector"
+  },
+  "protarrow": {
+    "conda_name": "protarrow",
+    "import_name": "protarrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protarrow"
+  },
+  "protected-classification": {
+    "conda_name": "protected-classification",
+    "import_name": "protected_classification",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protected-classification"
+  },
+  "protlearn": {
+    "conda_name": "protlearn",
+    "import_name": "protlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protlearn"
+  },
+  "proto-parser": {
+    "conda_name": "proto-parser",
+    "import_name": "protoparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proto-parser"
+  },
+  "protobuf-to-pydantic": {
+    "conda_name": "protobuf_to_pydantic",
+    "import_name": "protobuf_to_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protobuf-to-pydantic"
+  },
+  "protobuf3-to-dict": {
+    "conda_name": "protobuf3-to-dict",
+    "import_name": "protobuf_to_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protobuf3-to-dict"
+  },
+  "protoc-gen-openapiv2": {
+    "conda_name": "protoc-gen-openapiv2",
+    "import_name": "protoc_gen_openapiv2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protoc-gen-openapiv2"
+  },
+  "protoc-gen-validate": {
+    "conda_name": "protoc-gen-validate",
+    "import_name": "protoc_gen_validate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protoc-gen-validate"
+  },
+  "protoletariat": {
+    "conda_name": "protoletariat",
+    "import_name": "protoletariat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protoletariat"
+  },
+  "protozfits": {
+    "conda_name": "protozfits",
+    "import_name": "protozfits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "protozfits"
+  },
+  "prov": {
+    "conda_name": "prov",
+    "import_name": "prov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "prov"
+  },
+  "provenance": {
+    "conda_name": "provenance",
+    "import_name": "provenance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "provenance"
+  },
+  "provstore-api": {
+    "conda_name": "provstore-api",
+    "import_name": "provstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "provstore-api"
+  },
+  "proxyspy": {
+    "conda_name": "proxyspy",
+    "import_name": "proxyspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "proxyspy"
+  },
+  "ps2ff": {
+    "conda_name": "ps2ff",
+    "import_name": "ps2ff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ps2ff"
+  },
+  "pscript": {
+    "conda_name": "pscript",
+    "import_name": "pscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pscript"
+  },
+  "psdtags": {
+    "conda_name": "psdtags",
+    "import_name": "psdtags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psdtags"
+  },
+  "psearch": {
+    "conda_name": "psearch",
+    "import_name": "psearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psearch"
+  },
+  "psf": {
+    "conda_name": "psf",
+    "import_name": "psf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psf"
+  },
+  "psfmodels": {
+    "conda_name": "psfmodels",
+    "import_name": "psfmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psfmodels"
+  },
+  "pshell": {
+    "conda_name": "pshell",
+    "import_name": "pshell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pshell"
+  },
+  "pshmem": {
+    "conda_name": "pshmem",
+    "import_name": "pshmem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pshmem"
+  },
+  "psij-zmq": {
+    "conda_name": "psij-zmq",
+    "import_name": "psij",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psij-zmq"
+  },
+  "psimpy": {
+    "conda_name": "psimpy",
+    "import_name": "psimpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psimpy"
+  },
+  "psiturk": {
+    "conda_name": "psiturk",
+    "import_name": "psiturk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psiturk"
+  },
+  "psmpy": {
+    "conda_name": "psmpy",
+    "import_name": "psmpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psmpy"
+  },
+  "pspincalc": {
+    "conda_name": "pspincalc",
+    "import_name": "PSpincalc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pspincalc"
+  },
+  "psrqpy": {
+    "conda_name": "psrqpy",
+    "import_name": "psrqpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psrqpy"
+  },
+  "pss": {
+    "conda_name": "pss",
+    "import_name": "psslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pss"
+  },
+  "psy-maps": {
+    "conda_name": "psy-maps",
+    "import_name": "psy_maps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psy-maps"
+  },
+  "psy-reg": {
+    "conda_name": "psy-reg",
+    "import_name": "psy_reg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psy-reg"
+  },
+  "psy-simple": {
+    "conda_name": "psy-simple",
+    "import_name": "psy_simple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psy-simple"
+  },
+  "psy-view": {
+    "conda_name": "psy-view",
+    "import_name": "psy_view",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psy-view"
+  },
+  "psyclone": {
+    "conda_name": "psyclone",
+    "import_name": "psyclone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psyclone"
+  },
+  "psycogreen": {
+    "conda_name": "psycogreen",
+    "import_name": "psycogreen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psycogreen"
+  },
+  "psycopg2-binary": {
+    "conda_name": "psycopg2",
+    "import_name": "psycopg2",
+    "mapping_source": "static",
+    "pypi_name": "psycopg2-binary"
+  },
+  "psycopg2-yugabytedb": {
+    "conda_name": "psycopg2-yugabytedb",
+    "import_name": "psycopg2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psycopg2-yugabytedb"
+  },
+  "psygnal": {
+    "conda_name": "psygnal",
+    "import_name": "psygnal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psygnal"
+  },
+  "psyplot": {
+    "conda_name": "psyplot",
+    "import_name": "psyplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psyplot"
+  },
+  "psyplot-gui": {
+    "conda_name": "psyplot-gui",
+    "import_name": "psyplot_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "psyplot-gui"
+  },
+  "ptable": {
+    "conda_name": "ptable",
+    "import_name": "prettytable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptable"
+  },
+  "ptac": {
+    "conda_name": "ptac",
+    "import_name": "ptac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptac"
+  },
+  "ptarcade": {
+    "conda_name": "ptarcade",
+    "import_name": "ptarcade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptarcade"
+  },
+  "ptemcee": {
+    "conda_name": "ptemcee",
+    "import_name": "ptemcee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptemcee"
+  },
+  "ptflops": {
+    "conda_name": "ptflops",
+    "import_name": "ptflops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptflops"
+  },
+  "ptgnn": {
+    "conda_name": "ptgnn",
+    "import_name": "ptgnn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptgnn"
+  },
+  "ptir5": {
+    "conda_name": "ptir5",
+    "import_name": "ptir5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptir5"
+  },
+  "ptitprince": {
+    "conda_name": "ptitprince",
+    "import_name": "ptitprince",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptitprince"
+  },
+  "ptm-pose": {
+    "conda_name": "ptm_pose",
+    "import_name": "ptm_pose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptm-pose"
+  },
+  "ptmcmcsampler": {
+    "conda_name": "ptmcmcsampler",
+    "import_name": "PTMCMCSampler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptmcmcsampler"
+  },
+  "ptplot": {
+    "conda_name": "ptplot",
+    "import_name": "ptplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptplot"
+  },
+  "ptpython": {
+    "conda_name": "ptpython",
+    "import_name": "ptpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptpython"
+  },
+  "ptufile": {
+    "conda_name": "ptufile",
+    "import_name": "ptufile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptufile"
+  },
+  "ptyprocess": {
+    "conda_name": "ptyprocess",
+    "import_name": "ptyprocess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptyprocess"
+  },
+  "ptyrad": {
+    "conda_name": "ptyrad",
+    "import_name": "ptyrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ptyrad"
+  },
+  "pubchempy": {
+    "conda_name": "pubchempy",
+    "import_name": "pubchempy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pubchempy"
+  },
+  "publication": {
+    "conda_name": "publication",
+    "import_name": "publication",
+    "mapping_source": "regro-bot",
+    "pypi_name": "publication"
+  },
+  "publicsuffix": {
+    "conda_name": "publicsuffix",
+    "import_name": "publicsuffix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "publicsuffix"
+  },
+  "publicsuffix2": {
+    "conda_name": "publicsuffix2",
+    "import_name": "publicsuffix2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "publicsuffix2"
+  },
+  "publicsuffixlist": {
+    "conda_name": "publicsuffixlist",
+    "import_name": "publicsuffixlist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "publicsuffixlist"
+  },
+  "pubmed-parser": {
+    "conda_name": "pubmed-parser",
+    "import_name": "pubmed_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pubmed-parser"
+  },
+  "pubtator-loader": {
+    "conda_name": "pubtator_loader",
+    "import_name": "pubtator_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pubtator-loader"
+  },
+  "puccinialin": {
+    "conda_name": "puccinialin",
+    "import_name": "puccinialin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "puccinialin"
+  },
+  "pudb": {
+    "conda_name": "pudb",
+    "import_name": "pudb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pudb"
+  },
+  "pudu": {
+    "conda_name": "pudu",
+    "import_name": "pudu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pudu"
+  },
+  "pulp": {
+    "conda_name": "pulp",
+    "import_name": "pulp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pulp"
+  },
+  "pumml": {
+    "conda_name": "pumml",
+    "import_name": "pumml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pumml"
+  },
+  "puncc": {
+    "conda_name": "puncc",
+    "import_name": "deel.puncc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "puncc"
+  },
+  "punx": {
+    "conda_name": "punx",
+    "import_name": "punx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "punx"
+  },
+  "pure-eval": {
+    "conda_name": "pure_eval",
+    "import_name": "pure_eval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pure-eval"
+  },
+  "pure-python-adb": {
+    "conda_name": "pure-python-adb",
+    "import_name": "ppadb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pure-python-adb"
+  },
+  "pure-sasl": {
+    "conda_name": "pure-sasl",
+    "import_name": "puresasl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pure-sasl"
+  },
+  "purepng": {
+    "conda_name": "purepng",
+    "import_name": "png",
+    "mapping_source": "regro-bot",
+    "pypi_name": "purepng"
+  },
+  "purgedcv": {
+    "conda_name": "purgedcv",
+    "import_name": "purgedcv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "purgedcv"
+  },
+  "pvandyken-deprecated": {
+    "conda_name": "pvandyken-deprecated",
+    "import_name": "pvandyken.deprecated",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pvandyken-deprecated"
+  },
+  "pvextractor": {
+    "conda_name": "pvextractor",
+    "import_name": "pvextractor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pvextractor"
+  },
+  "pvl": {
+    "conda_name": "pvl",
+    "import_name": "pvl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pvl"
+  },
+  "pvmail": {
+    "conda_name": "pvmail",
+    "import_name": "PvMail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pvmail"
+  },
+  "pvwebmonitor": {
+    "conda_name": "pvwebmonitor",
+    "import_name": "pvWebMonitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pvwebmonitor"
+  },
+  "pwdlib": {
+    "conda_name": "pwdlib",
+    "import_name": "pwdlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pwdlib"
+  },
+  "pweave": {
+    "conda_name": "pweave",
+    "import_name": "pweave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pweave"
+  },
+  "pwkit": {
+    "conda_name": "pwkit",
+    "import_name": "pwkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pwkit"
+  },
+  "pwlf": {
+    "conda_name": "pwlf",
+    "import_name": "pwlf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pwlf"
+  },
+  "px4tools": {
+    "conda_name": "px4tools",
+    "import_name": "px4tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "px4tools"
+  },
+  "py": {
+    "conda_name": "py",
+    "import_name": "py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py"
+  },
+  "py-build-cmake": {
+    "conda_name": "py-build-cmake",
+    "import_name": "py_build_cmake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-build-cmake"
+  },
+  "py-channelmodel": {
+    "conda_name": "py-channelmodel",
+    "import_name": "channelmodel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-channelmodel"
+  },
+  "py-cid": {
+    "conda_name": "py-cid",
+    "import_name": "cid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-cid"
+  },
+  "py-cordex": {
+    "conda_name": "py-cordex",
+    "import_name": "cordex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-cordex"
+  },
+  "py-cpuinfo": {
+    "conda_name": "py-cpuinfo",
+    "import_name": "cpuinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-cpuinfo"
+  },
+  "py-dag": {
+    "conda_name": "py_dag",
+    "import_name": "dag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-dag"
+  },
+  "py-dom-xpath-six": {
+    "conda_name": "py-dom-xpath-six",
+    "import_name": "xpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-dom-xpath-six"
+  },
+  "py-droplets": {
+    "conda_name": "py-droplets",
+    "import_name": "droplets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-droplets"
+  },
+  "py-ecc": {
+    "conda_name": "py_ecc",
+    "import_name": "py_ecc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-ecc"
+  },
+  "py-entitymatching": {
+    "conda_name": "py_entitymatching",
+    "import_name": "py_entitymatching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-entitymatching"
+  },
+  "py-exe-builder": {
+    "conda_name": "py-exe-builder",
+    "import_name": "pyexebuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-exe-builder"
+  },
+  "py-find-1st": {
+    "conda_name": "py-find-1st",
+    "import_name": "utils_find_1st",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-find-1st"
+  },
+  "py-geth": {
+    "conda_name": "py-geth",
+    "import_name": "geth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-geth"
+  },
+  "py-grpc-prometheus": {
+    "conda_name": "py-grpc-prometheus",
+    "import_name": "py_grpc_prometheus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-grpc-prometheus"
+  },
+  "py-heat": {
+    "conda_name": "py-heat",
+    "import_name": "pyheat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-heat"
+  },
+  "py-linux-ports": {
+    "conda_name": "py-linux-ports",
+    "import_name": "PyLinuxPorts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-linux-ports"
+  },
+  "py-lru-cache": {
+    "conda_name": "py_lru_cache",
+    "import_name": "lru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-lru-cache"
+  },
+  "py-markdown-table": {
+    "conda_name": "py-markdown-table",
+    "import_name": "py_markdown_table",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-markdown-table"
+  },
+  "py-mathjax": {
+    "conda_name": "py-mathjax",
+    "import_name": "pymathjax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-mathjax"
+  },
+  "py-modelrunner": {
+    "conda_name": "py-modelrunner",
+    "import_name": "modelrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-modelrunner"
+  },
+  "py-multibase": {
+    "conda_name": "py-multibase",
+    "import_name": "multibase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-multibase"
+  },
+  "py-multicodec": {
+    "conda_name": "py-multicodec",
+    "import_name": "multicodec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-multicodec"
+  },
+  "py-multihash": {
+    "conda_name": "py-multihash",
+    "import_name": "multihash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-multihash"
+  },
+  "py-open-fonts": {
+    "conda_name": "py-open-fonts",
+    "import_name": "openfonts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-open-fonts"
+  },
+  "py-pde": {
+    "conda_name": "py-pde",
+    "import_name": "pde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-pde"
+  },
+  "py-random-password": {
+    "conda_name": "py-random-password",
+    "import_name": "PyRandomPassword",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-random-password"
+  },
+  "py-readability-metrics": {
+    "conda_name": "py-readability-metrics",
+    "import_name": "readability",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-readability-metrics"
+  },
+  "py-rouge": {
+    "conda_name": "py-rouge",
+    "import_name": "rouge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-rouge"
+  },
+  "py-solc-ast": {
+    "conda_name": "py-solc-ast",
+    "import_name": "solcast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-solc-ast"
+  },
+  "py-solc-x": {
+    "conda_name": "py-solc-x",
+    "import_name": "solcx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-solc-x"
+  },
+  "py-stringmatching": {
+    "conda_name": "py_stringmatching",
+    "import_name": "py_stringmatching",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-stringmatching"
+  },
+  "py-stringsimjoin": {
+    "conda_name": "py_stringsimjoin",
+    "import_name": "py_stringsimjoin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-stringsimjoin"
+  },
+  "py-tes": {
+    "conda_name": "py-tes",
+    "import_name": "tes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-tes"
+  },
+  "py-tools-ds": {
+    "conda_name": "py-tools-ds",
+    "import_name": "py_tools_ds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-tools-ds"
+  },
+  "py-xid": {
+    "conda_name": "py-xid",
+    "import_name": "xid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py-xid"
+  },
+  "py2700": {
+    "conda_name": "py2700",
+    "import_name": "py2700",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2700"
+  },
+  "py2app": {
+    "conda_name": "py2app",
+    "import_name": "py2app",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2app"
+  },
+  "py2cfg": {
+    "conda_name": "py2cfg",
+    "import_name": "py2cfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2cfg"
+  },
+  "py2cytoscape": {
+    "conda_name": "py2cytoscape",
+    "import_name": "py2cytoscape",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2cytoscape"
+  },
+  "py2dm": {
+    "conda_name": "py2dm",
+    "import_name": "py2dm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2dm"
+  },
+  "py2neo": {
+    "conda_name": "py2neo",
+    "import_name": "py2neo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2neo"
+  },
+  "py2puml": {
+    "conda_name": "py2puml",
+    "import_name": "py2puml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2puml"
+  },
+  "py2vega": {
+    "conda_name": "py2vega",
+    "import_name": "py2vega",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py2vega"
+  },
+  "py3dmol": {
+    "conda_name": "py3dmol",
+    "import_name": "py3Dmol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py3dmol"
+  },
+  "py3dns": {
+    "conda_name": "py3dns",
+    "import_name": "DNS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py3dns"
+  },
+  "py4d-browser": {
+    "conda_name": "py4d-browser",
+    "import_name": "py4D_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4d-browser"
+  },
+  "py4d-browser-transform": {
+    "conda_name": "py4d-browser-transform",
+    "import_name": "py4d_browser_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4d-browser-transform"
+  },
+  "py4dstem": {
+    "conda_name": "py4dstem",
+    "import_name": "py4DSTEM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4dstem"
+  },
+  "py4j": {
+    "conda_name": "py4j",
+    "import_name": "py4j",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4j"
+  },
+  "py4vasp": {
+    "conda_name": "py4vasp",
+    "import_name": "py4vasp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4vasp"
+  },
+  "py4xs": {
+    "conda_name": "py4xs",
+    "import_name": "py4xs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py4xs"
+  },
+  "py6s": {
+    "conda_name": "py6s",
+    "import_name": "Py6S",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py6s"
+  },
+  "py7zr": {
+    "conda_name": "py7zr",
+    "import_name": "py7zr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "py7zr"
+  },
+  "pyaaf2": {
+    "conda_name": "pyaaf2",
+    "import_name": "aaf2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaaf2"
+  },
+  "pyabel": {
+    "conda_name": "pyabel",
+    "import_name": "abel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyabel"
+  },
+  "pyacoustid": {
+    "conda_name": "pyacoustid",
+    "import_name": "acoustid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyacoustid"
+  },
+  "pyactivestorage": {
+    "conda_name": "pyactivestorage",
+    "import_name": "activestorage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyactivestorage"
+  },
+  "pyaerocom": {
+    "conda_name": "pyaerocom",
+    "import_name": "pyaerocom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaerocom"
+  },
+  "pyaes": {
+    "conda_name": "pyaes",
+    "import_name": "pyaes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaes"
+  },
+  "pyaescrypt": {
+    "conda_name": "pyaescrypt",
+    "import_name": "pyAesCrypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaescrypt"
+  },
+  "pyaez": {
+    "conda_name": "pyaez",
+    "import_name": "pyaez",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaez"
+  },
+  "pyafv": {
+    "conda_name": "pyafv",
+    "import_name": "pyafv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyafv"
+  },
+  "pyahocorasick": {
+    "conda_name": "pyahocorasick",
+    "import_name": "ahocorasick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyahocorasick"
+  },
+  "pyalveo": {
+    "conda_name": "pyalveo",
+    "import_name": "pyalveo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyalveo"
+  },
+  "pyam-iamc": {
+    "conda_name": "pyam",
+    "import_name": "pyam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyam-iamc"
+  },
+  "pyamg": {
+    "conda_name": "pyamg",
+    "import_name": "pyamg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyamg"
+  },
+  "pyaml-env": {
+    "conda_name": "pyaml-env",
+    "import_name": "pyaml_env",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaml-env"
+  },
+  "pyampute": {
+    "conda_name": "pyampute",
+    "import_name": "pyampute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyampute"
+  },
+  "pyannote-core": {
+    "conda_name": "pyannote.core",
+    "import_name": "pyannote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyannote-core"
+  },
+  "pyannote-database": {
+    "conda_name": "pyannote.database",
+    "import_name": "pyannote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyannote-database"
+  },
+  "pyapacheatlas": {
+    "conda_name": "pyapacheatlas",
+    "import_name": "pyapacheatlas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyapacheatlas"
+  },
+  "pyapp": {
+    "conda_name": "pyapp",
+    "import_name": "pyapp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyapp"
+  },
+  "pyaps3": {
+    "conda_name": "pyaps3",
+    "import_name": "pyaps3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaps3"
+  },
+  "pyaqsapi": {
+    "conda_name": "pyaqsapi",
+    "import_name": "pyaqsapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaqsapi"
+  },
+  "pyarrow-hotfix": {
+    "conda_name": "pyarrow-hotfix",
+    "import_name": "pyarrow_hotfix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyarrow-hotfix"
+  },
+  "pyart-mch": {
+    "conda_name": "pyart_mch",
+    "import_name": "pyart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyart-mch"
+  },
+  "pyasdf": {
+    "conda_name": "pyasdf",
+    "import_name": "pyasdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyasdf"
+  },
+  "pyasn1-modules": {
+    "conda_name": "pyasn1-modules",
+    "import_name": "pyasn1_modules",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyasn1-modules"
+  },
+  "pyaspeller": {
+    "conda_name": "pyaspeller",
+    "import_name": "pyaspeller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaspeller"
+  },
+  "pyassimp": {
+    "conda_name": "pyassimp",
+    "import_name": "pyassimp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyassimp"
+  },
+  "pyasynchat": {
+    "conda_name": "pyasynchat",
+    "import_name": "asynchat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyasynchat"
+  },
+  "pyasyncore": {
+    "conda_name": "pyasyncore",
+    "import_name": "asyncore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyasyncore"
+  },
+  "pyaudio": {
+    "conda_name": "pyaudio",
+    "import_name": "pyaudio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaudio"
+  },
+  "pyautogui": {
+    "conda_name": "pyautogui",
+    "import_name": "pyautogui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyautogui"
+  },
+  "pyavm": {
+    "conda_name": "pyavm",
+    "import_name": "pyavm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyavm"
+  },
+  "pyaztro": {
+    "conda_name": "pyaztro",
+    "import_name": "pyaztro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyaztro"
+  },
+  "pybacktrack": {
+    "conda_name": "pybacktrack",
+    "import_name": "pybacktrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybacktrack"
+  },
+  "pybads": {
+    "conda_name": "pybads",
+    "import_name": "pybads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybads"
+  },
+  "pybaobabdt": {
+    "conda_name": "pybaobabdt",
+    "import_name": "pybaobabdt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybaobabdt"
+  },
+  "pybars3": {
+    "conda_name": "pybars3",
+    "import_name": "pybars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybars3"
+  },
+  "pybase64": {
+    "conda_name": "pybase64",
+    "import_name": "pybase64",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybase64"
+  },
+  "pybaselines": {
+    "conda_name": "pybaselines",
+    "import_name": "pybaselines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybaselines"
+  },
+  "pybasemkit": {
+    "conda_name": "pybasemkit",
+    "import_name": "basemkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybasemkit"
+  },
+  "pybashify": {
+    "conda_name": "pybashify",
+    "import_name": "pybashify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybashify"
+  },
+  "pybaum": {
+    "conda_name": "pybaum",
+    "import_name": "pybaum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybaum"
+  },
+  "pybboxes": {
+    "conda_name": "pybboxes",
+    "import_name": "pybboxes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybboxes"
+  },
+  "pybcj": {
+    "conda_name": "pybcj",
+    "import_name": "bcj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybcj"
+  },
+  "pybcpy": {
+    "conda_name": "pybcpy",
+    "import_name": "pybcpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybcpy"
+  },
+  "pyberny": {
+    "conda_name": "pyberny",
+    "import_name": "berny",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyberny"
+  },
+  "pybigquery": {
+    "conda_name": "pybigquery",
+    "import_name": "pybigquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybigquery"
+  },
+  "pybind11-numpy-example": {
+    "conda_name": "pybind11-numpy-example",
+    "import_name": "pybind11_numpy_example",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybind11-numpy-example"
+  },
+  "pybindgen": {
+    "conda_name": "pybindgen",
+    "import_name": "pybindgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybindgen"
+  },
+  "pybinding": {
+    "conda_name": "pybinding",
+    "import_name": "pybinding",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybinding"
+  },
+  "pybis": {
+    "conda_name": "pybis",
+    "import_name": "pybis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybis"
+  },
+  "pybispectra": {
+    "conda_name": "pybispectra",
+    "import_name": "pybispectra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybispectra"
+  },
+  "pybktree": {
+    "conda_name": "pybktree",
+    "import_name": "pybktree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybktree"
+  },
+  "pyblake2": {
+    "conda_name": "pyblake2",
+    "import_name": "pyblake2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyblake2"
+  },
+  "pybloom-live": {
+    "conda_name": "pybloom_live",
+    "import_name": "pybloom_live",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybloom-live"
+  },
+  "pybmoore": {
+    "conda_name": "pybmoore",
+    "import_name": "pybmoore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybmoore"
+  },
+  "pyboat": {
+    "conda_name": "pyboat",
+    "import_name": "pyboat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyboat"
+  },
+  "pybob": {
+    "conda_name": "pybob",
+    "import_name": "pybob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybob"
+  },
+  "pybroom": {
+    "conda_name": "pybroom",
+    "import_name": "pybroom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybroom"
+  },
+  "pybsm": {
+    "conda_name": "pybsm",
+    "import_name": "pybsm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybsm"
+  },
+  "pybtexnbib": {
+    "conda_name": "pybtexnbib",
+    "import_name": "pybtexnbib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybtexnbib"
+  },
+  "pybtexris": {
+    "conda_name": "pybtexris",
+    "import_name": "pybtexris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybtexris"
+  },
+  "pybufr-ecmwf": {
+    "conda_name": "pybufr-ecmwf",
+    "import_name": "pybufr_ecmwf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybufr-ecmwf"
+  },
+  "pybufrkit": {
+    "conda_name": "pybufrkit",
+    "import_name": "pybufrkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybufrkit"
+  },
+  "pybuilder": {
+    "conda_name": "pybuilder",
+    "import_name": "pybuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybuilder"
+  },
+  "pybuilder-bandit": {
+    "conda_name": "pybuilder-bandit",
+    "import_name": "pybuilder_bandit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybuilder-bandit"
+  },
+  "pybv": {
+    "conda_name": "pybv",
+    "import_name": "pybv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybv"
+  },
+  "pybvrf": {
+    "conda_name": "pybvrf",
+    "import_name": "pybvrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybvrf"
+  },
+  "pybytebuffer": {
+    "conda_name": "pybytebuffer",
+    "import_name": "PyByteBuffer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pybytebuffer"
+  },
+  "pycalceff": {
+    "conda_name": "pycalceff",
+    "import_name": "pycalceff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycalceff"
+  },
+  "pycallgraph2": {
+    "conda_name": "pycallgraph2",
+    "import_name": "pycallgraph2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycallgraph2"
+  },
+  "pycallgraphix": {
+    "conda_name": "pycallgraphix",
+    "import_name": "pycallgraphix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycallgraphix"
+  },
+  "pycalphad": {
+    "conda_name": "pycalphad",
+    "import_name": "pycalphad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycalphad"
+  },
+  "pycalverter": {
+    "conda_name": "pycalverter",
+    "import_name": "calverter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycalverter"
+  },
+  "pycamhd": {
+    "conda_name": "pycamhd",
+    "import_name": "pycamhd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycamhd"
+  },
+  "pycap-dss": {
+    "conda_name": "pycap-dss",
+    "import_name": "pycap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycap-dss"
+  },
+  "pycashier": {
+    "conda_name": "pycashier",
+    "import_name": "pycashier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycashier"
+  },
+  "pycasreg": {
+    "conda_name": "pycasreg",
+    "import_name": "pycasreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycasreg"
+  },
+  "pycatch22": {
+    "conda_name": "pycatch22",
+    "import_name": "pycatch22",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycatch22"
+  },
+  "pycbf": {
+    "conda_name": "pycbf",
+    "import_name": "pycbf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycbf"
+  },
+  "pycdlib": {
+    "conda_name": "pycdlib",
+    "import_name": "pycdlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycdlib"
+  },
+  "pycel": {
+    "conda_name": "pycel",
+    "import_name": "pycel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycel"
+  },
+  "pycentroids": {
+    "conda_name": "pycentroids",
+    "import_name": "pycentroids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycentroids"
+  },
+  "pycep-parser": {
+    "conda_name": "pycep-parser",
+    "import_name": "pycep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycep-parser"
+  },
+  "pycgtool": {
+    "conda_name": "pycgtool",
+    "import_name": "pycgtool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycgtool"
+  },
+  "pychemia": {
+    "conda_name": "pychemia",
+    "import_name": "pychemia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pychemia"
+  },
+  "pychop": {
+    "conda_name": "pychop",
+    "import_name": "pychop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pychop"
+  },
+  "pychromatic": {
+    "conda_name": "pychromatic",
+    "import_name": "pychromatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pychromatic"
+  },
+  "pychx": {
+    "conda_name": "pychx",
+    "import_name": "pyCHX.v2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pychx"
+  },
+  "pycifrw": {
+    "conda_name": "pycifrw",
+    "import_name": "CifFile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycifrw"
+  },
+  "pycirclize": {
+    "conda_name": "pycirclize",
+    "import_name": "pycirclize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycirclize"
+  },
+  "pycirclizely": {
+    "conda_name": "pycirclizely",
+    "import_name": "pycirclizely",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycirclizely"
+  },
+  "pycircos": {
+    "conda_name": "pycircos",
+    "import_name": "pycircos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycircos"
+  },
+  "pycircstat": {
+    "conda_name": "pycircstat",
+    "import_name": "pycircstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycircstat"
+  },
+  "pyclarify": {
+    "conda_name": "pyclarify",
+    "import_name": "pyclarify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclarify"
+  },
+  "pycld2": {
+    "conda_name": "pycld2",
+    "import_name": "pycld2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycld2"
+  },
+  "pyclean": {
+    "conda_name": "pyclean",
+    "import_name": "pyclean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclean"
+  },
+  "pyclesperanto": {
+    "conda_name": "pyclesperanto",
+    "import_name": "pyclesperanto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclesperanto"
+  },
+  "pyclesperanto-prototype": {
+    "conda_name": "pyclesperanto-prototype",
+    "import_name": "pyclesperanto_prototype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclesperanto-prototype"
+  },
+  "pyclibrary": {
+    "conda_name": "pyclibrary",
+    "import_name": "pyclibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclibrary"
+  },
+  "pyclimo": {
+    "conda_name": "pyclimo",
+    "import_name": "pyclimo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclimo"
+  },
+  "pyclipper": {
+    "conda_name": "pyclipper",
+    "import_name": "pyclipper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclipper"
+  },
+  "pyclustering": {
+    "conda_name": "pyclustering",
+    "import_name": "pyclustering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyclustering"
+  },
+  "pycmtensor": {
+    "conda_name": "pycmtensor",
+    "import_name": "pycmtensor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycmtensor"
+  },
+  "pycnite": {
+    "conda_name": "pycnite",
+    "import_name": "pycnite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycnite"
+  },
+  "pyco2sys": {
+    "conda_name": "pyco2sys",
+    "import_name": "PyCO2SYS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyco2sys"
+  },
+  "pycoal": {
+    "conda_name": "pycoal",
+    "import_name": "pycoal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoal"
+  },
+  "pycoalescence": {
+    "conda_name": "pycoalescence",
+    "import_name": "pycoalescence",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoalescence"
+  },
+  "pycoare": {
+    "conda_name": "pycoare",
+    "import_name": "pycoare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoare"
+  },
+  "pycoast": {
+    "conda_name": "pycoast",
+    "import_name": "pycoast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoast"
+  },
+  "pycocoevalcap": {
+    "conda_name": "pycocoevalcap",
+    "import_name": "pycocoevalcap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycocoevalcap"
+  },
+  "pycocotools": {
+    "conda_name": "pycocotools",
+    "import_name": "pycocotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycocotools"
+  },
+  "pycodestyle": {
+    "conda_name": "pycodestyle",
+    "import_name": "pycodestyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycodestyle"
+  },
+  "pycognito": {
+    "conda_name": "pycognito",
+    "import_name": "pycognito",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycognito"
+  },
+  "pycoingecko": {
+    "conda_name": "pycoingecko",
+    "import_name": "pycoingecko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoingecko"
+  },
+  "pycollage": {
+    "conda_name": "pycollage",
+    "import_name": "pycollage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycollage"
+  },
+  "pycollo": {
+    "conda_name": "pycollo",
+    "import_name": "pycollo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycollo"
+  },
+  "pycolorbar": {
+    "conda_name": "pycolorbar",
+    "import_name": "pycolorbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycolorbar"
+  },
+  "pycolt": {
+    "conda_name": "pycolt",
+    "import_name": "colt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycolt"
+  },
+  "pycomm3": {
+    "conda_name": "pycomm3",
+    "import_name": "pycomm3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycomm3"
+  },
+  "pycompare": {
+    "conda_name": "pycompare",
+    "import_name": "pyCompare",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycompare"
+  },
+  "pycompilation": {
+    "conda_name": "pycompilation",
+    "import_name": "pycompilation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycompilation"
+  },
+  "pycomplexheatmap": {
+    "conda_name": "pycomplexheatmap",
+    "import_name": "PyComplexHeatmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycomplexheatmap"
+  },
+  "pyconify": {
+    "conda_name": "pyconify",
+    "import_name": "pyconify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyconify"
+  },
+  "pycontour": {
+    "conda_name": "pycontour",
+    "import_name": "pycontour",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycontour"
+  },
+  "pycontracts": {
+    "conda_name": "pycontracts",
+    "import_name": "contracts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycontracts"
+  },
+  "pycontrails": {
+    "conda_name": "pycontrails",
+    "import_name": "pycontrails",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycontrails"
+  },
+  "pycorerelator": {
+    "conda_name": "pycorerelator",
+    "import_name": "pyCoreRelator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycorerelator"
+  },
+  "pycountry": {
+    "conda_name": "pycountry",
+    "import_name": "pycountry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycountry"
+  },
+  "pycovjson": {
+    "conda_name": "pycovjson",
+    "import_name": "pycovjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycovjson"
+  },
+  "pycox": {
+    "conda_name": "pycox",
+    "import_name": "pycox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycox"
+  },
+  "pycoxmunk": {
+    "conda_name": "pycoxmunk",
+    "import_name": "pycoxmunk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycoxmunk"
+  },
+  "pycraf": {
+    "conda_name": "pycraf",
+    "import_name": "pycraf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycraf"
+  },
+  "pycraf-gui": {
+    "conda_name": "pycraf-gui",
+    "import_name": "pycraf_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycraf-gui"
+  },
+  "pycrc": {
+    "conda_name": "pycrc",
+    "import_name": "PyCRC",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrc"
+  },
+  "pycrdt": {
+    "conda_name": "pycrdt",
+    "import_name": "pycrdt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrdt"
+  },
+  "pycrdt-store": {
+    "conda_name": "pycrdt-store",
+    "import_name": "pycrdt.store",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrdt-store"
+  },
+  "pycromanager": {
+    "conda_name": "pycromanager",
+    "import_name": "pycromanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycromanager"
+  },
+  "pycroscopy": {
+    "conda_name": "pycroscopy",
+    "import_name": "pycroscopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycroscopy"
+  },
+  "pycrostates": {
+    "conda_name": "pycrostates",
+    "import_name": "pycrostates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrostates"
+  },
+  "pycrs": {
+    "conda_name": "pycrs",
+    "import_name": "pycrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrs"
+  },
+  "pycryptodome": {
+    "conda_name": "pycryptodome",
+    "import_name": "Crypto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycryptodome"
+  },
+  "pycryptodomex": {
+    "conda_name": "pycryptodomex",
+    "import_name": "Cryptodome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycryptodomex"
+  },
+  "pycrystal": {
+    "conda_name": "pycrystal",
+    "import_name": "pycrystal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycrystal"
+  },
+  "pycsep": {
+    "conda_name": "pycsep",
+    "import_name": "csep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycsep"
+  },
+  "pycspade": {
+    "conda_name": "pycspade",
+    "import_name": "pycspade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycspade"
+  },
+  "pycsvy": {
+    "conda_name": "pycsvy",
+    "import_name": "csvy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycsvy"
+  },
+  "pycsw": {
+    "conda_name": "pycsw",
+    "import_name": "pycsw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycsw"
+  },
+  "pyct": {
+    "conda_name": "pyct",
+    "import_name": "pyct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyct"
+  },
+  "pyctcdecode": {
+    "conda_name": "pyctcdecode",
+    "import_name": "pyctcdecode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyctcdecode"
+  },
+  "pyctest": {
+    "conda_name": "pyctest",
+    "import_name": "pyctest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyctest"
+  },
+  "pycudadecon": {
+    "conda_name": "pycudadecon",
+    "import_name": "pycudadecon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycudadecon"
+  },
+  "pycups": {
+    "conda_name": "pycups",
+    "import_name": "cups",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycups"
+  },
+  "pycurl-requests": {
+    "conda_name": "pycurl-requests",
+    "import_name": "pycurl_requests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycurl-requests"
+  },
+  "pycustomfocus": {
+    "conda_name": "pycustomfocus",
+    "import_name": "PyFocus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycustomfocus"
+  },
+  "pycvodes": {
+    "conda_name": "pycvodes",
+    "import_name": "pycvodes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycvodes"
+  },
+  "pycwt": {
+    "conda_name": "pycwt",
+    "import_name": "pycwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycwt"
+  },
+  "pycytominer": {
+    "conda_name": "pycytominer",
+    "import_name": "pycytominer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pycytominer"
+  },
+  "pydaily": {
+    "conda_name": "pydaily",
+    "import_name": "pydaily",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydaily"
+  },
+  "pydalle": {
+    "conda_name": "pydalle",
+    "import_name": "pydalle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydalle"
+  },
+  "pydantic-cli": {
+    "conda_name": "pydantic-cli",
+    "import_name": "pydantic_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-cli"
+  },
+  "pydantic-collections": {
+    "conda_name": "pydantic-collections",
+    "import_name": "pydantic_collections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-collections"
+  },
+  "pydantic-compat": {
+    "conda_name": "pydantic-compat",
+    "import_name": "pydantic_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-compat"
+  },
+  "pydantic-config": {
+    "conda_name": "pydantic-config",
+    "import_name": "pydantic_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-config"
+  },
+  "pydantic-mongo": {
+    "conda_name": "pydantic-mongo",
+    "import_name": "pydantic_mongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-mongo"
+  },
+  "pydantic-numpy": {
+    "conda_name": "pydantic-numpy",
+    "import_name": "pydantic_numpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-numpy"
+  },
+  "pydantic-openapi-schema": {
+    "conda_name": "pydantic-openapi-schema",
+    "import_name": "pydantic_openapi_schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-openapi-schema"
+  },
+  "pydantic-pint": {
+    "conda_name": "pydantic-pint",
+    "import_name": "pydantic_pint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-pint"
+  },
+  "pydantic-yaml": {
+    "conda_name": "pydantic-yaml",
+    "import_name": "pydantic_yaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydantic-yaml"
+  },
+  "pydarm": {
+    "conda_name": "pydarm",
+    "import_name": "pydarm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydarm"
+  },
+  "pydash": {
+    "conda_name": "pydash",
+    "import_name": "pydash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydash"
+  },
+  "pydata-google-auth": {
+    "conda_name": "pydata-google-auth",
+    "import_name": "pydata_google_auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydata-google-auth"
+  },
+  "pydatamail-google": {
+    "conda_name": "pydatamail_google",
+    "import_name": "pydatamail_google",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydatamail-google"
+  },
+  "pydatamail-ml": {
+    "conda_name": "pydatamail_ml",
+    "import_name": "pydatamail_ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydatamail-ml"
+  },
+  "pydataverse": {
+    "conda_name": "pydataverse",
+    "import_name": "pyDataverse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydataverse"
+  },
+  "pydaymet": {
+    "conda_name": "pydaymet",
+    "import_name": "pydaymet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydaymet"
+  },
+  "pydda": {
+    "conda_name": "pydda",
+    "import_name": "pydda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydda"
+  },
+  "pydeck": {
+    "conda_name": "pydeck",
+    "import_name": "pydeck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydeck"
+  },
+  "pydeck-carto": {
+    "conda_name": "pydeck-carto",
+    "import_name": "pydeck_carto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydeck-carto"
+  },
+  "pydeck-earthengine-layers": {
+    "conda_name": "pydeck-earthengine-layers",
+    "import_name": "pydeck_earthengine_layers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydeck-earthengine-layers"
+  },
+  "pydecorate": {
+    "conda_name": "pydecorate",
+    "import_name": "pydecorate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydecorate"
+  },
+  "pydelatin": {
+    "conda_name": "pydelatin",
+    "import_name": "pydelatin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydelatin"
+  },
+  "pydensecrf": {
+    "conda_name": "pydensecrf",
+    "import_name": "pydensecrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydensecrf"
+  },
+  "pydeprecate": {
+    "conda_name": "pydeprecate",
+    "import_name": "deprecate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydeprecate"
+  },
+  "pydes": {
+    "conda_name": "pydes",
+    "import_name": "pyDes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydes"
+  },
+  "pydevtool": {
+    "conda_name": "pydevtool",
+    "import_name": "pydevtool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydevtool"
+  },
+  "pydflow": {
+    "conda_name": "pydflow",
+    "import_name": "dflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydflow"
+  },
+  "pydgsa": {
+    "conda_name": "pydgsa",
+    "import_name": "pyDGSA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydgsa"
+  },
+  "pydicth5": {
+    "conda_name": "pydicth5",
+    "import_name": "pyDictH5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydicth5"
+  },
+  "pydivert": {
+    "conda_name": "pydivert",
+    "import_name": "pydivert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydivert"
+  },
+  "pydl": {
+    "conda_name": "pydl",
+    "import_name": "pydl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydl"
+  },
+  "pydlm": {
+    "conda_name": "pydlm",
+    "import_name": "pydlm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydlm"
+  },
+  "pydlpack": {
+    "conda_name": "pydlpack",
+    "import_name": "dlpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydlpack"
+  },
+  "pydm": {
+    "conda_name": "pydm",
+    "import_name": "pydm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydm"
+  },
+  "pydmd": {
+    "conda_name": "pydmd",
+    "import_name": "pydmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydmd"
+  },
+  "pydoas": {
+    "conda_name": "pydoas",
+    "import_name": "pydoas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydoas"
+  },
+  "pydoc-markdown": {
+    "conda_name": "pydoc-markdown",
+    "import_name": "pydoc_markdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydoc-markdown"
+  },
+  "pydocket": {
+    "conda_name": "pydocket",
+    "import_name": "docket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydocket"
+  },
+  "pydocstyle": {
+    "conda_name": "pydocstyle",
+    "import_name": "pydocstyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydocstyle"
+  },
+  "pydoe2": {
+    "conda_name": "pydoe2",
+    "import_name": "pyDOE2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydoe2"
+  },
+  "pydoe3": {
+    "conda_name": "pydoe3",
+    "import_name": "pyDOE3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydoe3"
+  },
+  "pydorado": {
+    "conda_name": "pydorado",
+    "import_name": "dorado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydorado"
+  },
+  "pydotplus": {
+    "conda_name": "pydotplus",
+    "import_name": "pydotplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydotplus"
+  },
+  "pydpc": {
+    "conda_name": "pydpc",
+    "import_name": "pydpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydpc"
+  },
+  "pydrift": {
+    "conda_name": "pydrift",
+    "import_name": "pydrift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydrift"
+  },
+  "pydrill": {
+    "conda_name": "pydrill",
+    "import_name": "pydrill",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydrill"
+  },
+  "pydrive": {
+    "conda_name": "pydrive",
+    "import_name": "pydrive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydrive"
+  },
+  "pydrive2": {
+    "conda_name": "pydrive2",
+    "import_name": "pydrive2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydrive2"
+  },
+  "pydrobert-kaldi": {
+    "conda_name": "pydrobert-kaldi",
+    "import_name": "pydrobert.kaldi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydrobert-kaldi"
+  },
+  "pydron-dataflow": {
+    "conda_name": "pydron-dataflow",
+    "import_name": "pydron_dataflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydron-dataflow"
+  },
+  "pydruid": {
+    "conda_name": "pydruid",
+    "import_name": "pydruid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydruid"
+  },
+  "pydsd": {
+    "conda_name": "pydsd",
+    "import_name": "pydsd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydsd"
+  },
+  "pydstool": {
+    "conda_name": "pydstool",
+    "import_name": "PyDSTool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydstool"
+  },
+  "pydtmc": {
+    "conda_name": "pydtmc",
+    "import_name": "pydtmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydtmc"
+  },
+  "pydub": {
+    "conda_name": "pydub",
+    "import_name": "pydub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydub"
+  },
+  "pydumpling": {
+    "conda_name": "pydumpling",
+    "import_name": "pydumpling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydumpling"
+  },
+  "pydy": {
+    "conda_name": "pydy",
+    "import_name": "pydy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydy"
+  },
+  "pydyf": {
+    "conda_name": "pydyf",
+    "import_name": "pydyf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pydyf"
+  },
+  "pyecharts": {
+    "conda_name": "pyecharts",
+    "import_name": "pyecharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyecharts"
+  },
+  "pyecospold": {
+    "conda_name": "pyecospold",
+    "import_name": "pyecospold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyecospold"
+  },
+  "pyeda": {
+    "conda_name": "pyeda",
+    "import_name": "pyeda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyeda"
+  },
+  "pyeddytracker": {
+    "conda_name": "pyeddytracker",
+    "import_name": "py_eddy_tracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyeddytracker"
+  },
+  "pyedflib": {
+    "conda_name": "pyedflib",
+    "import_name": "pyedflib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyedflib"
+  },
+  "pyeditdistance": {
+    "conda_name": "pyeditdistance",
+    "import_name": "pyeditdistance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyeditdistance"
+  },
+  "pyedr": {
+    "conda_name": "pyedr",
+    "import_name": "pyedr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyedr"
+  },
+  "pyee": {
+    "conda_name": "pyee",
+    "import_name": "pyee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyee"
+  },
+  "pyeee": {
+    "conda_name": "pyeee",
+    "import_name": "pyeee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyeee"
+  },
+  "pyefd": {
+    "conda_name": "pyefd",
+    "import_name": "pyefd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyefd"
+  },
+  "pyemcee": {
+    "conda_name": "pyemcee",
+    "import_name": "pyemcee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyemcee"
+  },
+  "pyemir": {
+    "conda_name": "pyemir",
+    "import_name": "emirdrp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyemir"
+  },
+  "pyemma": {
+    "conda_name": "pyemma",
+    "import_name": "pyemma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyemma"
+  },
+  "pyemojify": {
+    "conda_name": "pyemojify",
+    "import_name": "pyemojify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyemojify"
+  },
+  "pyemu": {
+    "conda_name": "pyemu",
+    "import_name": "pyemu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyemu"
+  },
+  "pyenchant": {
+    "conda_name": "pyenchant",
+    "import_name": "enchant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyenchant"
+  },
+  "pyepal": {
+    "conda_name": "pyepal",
+    "import_name": "pyepal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyepal"
+  },
+  "pyepics": {
+    "conda_name": "pyepics",
+    "import_name": "epics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyepics"
+  },
+  "pyepr": {
+    "conda_name": "pyepr",
+    "import_name": "epr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyepr"
+  },
+  "pyepsg": {
+    "conda_name": "pyepsg",
+    "import_name": "pyepsg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyepsg"
+  },
+  "pyequib": {
+    "conda_name": "pyequib",
+    "import_name": "pyequib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyequib"
+  },
+  "pyerf": {
+    "conda_name": "pyerf",
+    "import_name": "pyerf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyerf"
+  },
+  "pyerfa": {
+    "conda_name": "pyerfa",
+    "import_name": "erfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyerfa"
+  },
+  "pyerrors": {
+    "conda_name": "pyerrors",
+    "import_name": "pyerrors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyerrors"
+  },
+  "pyet": {
+    "conda_name": "pyet",
+    "import_name": "pyet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyet"
+  },
+  "pyeviews": {
+    "conda_name": "pyeviews",
+    "import_name": "pyeviews",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyeviews"
+  },
+  "pyex": {
+    "conda_name": "pyex",
+    "import_name": "pyEX",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyex"
+  },
+  "pyexcel": {
+    "conda_name": "pyexcel",
+    "import_name": "pyexcel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel"
+  },
+  "pyexcel-ezodf": {
+    "conda_name": "pyexcel-ezodf",
+    "import_name": "ezodf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-ezodf"
+  },
+  "pyexcel-io": {
+    "conda_name": "pyexcel-io",
+    "import_name": "pyexcel_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-io"
+  },
+  "pyexcel-ods3": {
+    "conda_name": "pyexcel-ods3",
+    "import_name": "pyexcel_ods3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-ods3"
+  },
+  "pyexcel-webio": {
+    "conda_name": "pyexcel-webio",
+    "import_name": "pyexcel_webio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-webio"
+  },
+  "pyexcel-xls": {
+    "conda_name": "pyexcel-xls",
+    "import_name": "pyexcel_xls",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-xls"
+  },
+  "pyexcel-xlsx": {
+    "conda_name": "pyexcel-xlsx",
+    "import_name": "pyexcel_xlsx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexcel-xlsx"
+  },
+  "pyexecjs": {
+    "conda_name": "pyexecjs",
+    "import_name": "execjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexecjs"
+  },
+  "pyexodus": {
+    "conda_name": "pyexodus",
+    "import_name": "pyexodus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexodus"
+  },
+  "pyexpander": {
+    "conda_name": "pyexpander",
+    "import_name": "pyexpander",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexpander"
+  },
+  "pyexplainer": {
+    "conda_name": "pyexplainer",
+    "import_name": "pyexplainer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyexplainer"
+  },
+  "pyfab": {
+    "conda_name": "pyfab",
+    "import_name": "fabber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfab"
+  },
+  "pyface": {
+    "conda_name": "pyface",
+    "import_name": "pyface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyface"
+  },
+  "pyfai": {
+    "conda_name": "pyfai-base",
+    "import_name": "pyFAI",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfai"
+  },
+  "pyfao56": {
+    "conda_name": "pyfao56",
+    "import_name": "pyfao56",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfao56"
+  },
+  "pyfda": {
+    "conda_name": "pyfda",
+    "import_name": "pyfda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfda"
+  },
+  "pyfect": {
+    "conda_name": "pyfect",
+    "import_name": "pyfect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfect"
+  },
+  "pyfftlog": {
+    "conda_name": "pyfftlog",
+    "import_name": "pyfftlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfftlog"
+  },
+  "pyfilemanager": {
+    "conda_name": "pyfilemanager",
+    "import_name": "pyfilemanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfilemanager"
+  },
+  "pyfinance": {
+    "conda_name": "pyfinance",
+    "import_name": "pyfinance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfinance"
+  },
+  "pyfirmata": {
+    "conda_name": "pyfirmata",
+    "import_name": "pyfirmata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfirmata"
+  },
+  "pyfive": {
+    "conda_name": "pyfive",
+    "import_name": "pyfive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfive"
+  },
+  "pyfizi": {
+    "conda_name": "pyfizi",
+    "import_name": "pyfizi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfizi"
+  },
+  "pyflakes": {
+    "conda_name": "pyflakes",
+    "import_name": "pyflakes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflakes"
+  },
+  "pyflashtext": {
+    "conda_name": "pyflashtext",
+    "import_name": "pyflashtext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflashtext"
+  },
+  "pyflowchart": {
+    "conda_name": "pyflowchart",
+    "import_name": "pyflowchart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflowchart"
+  },
+  "pyflowdiagnostics": {
+    "conda_name": "pyflowdiagnostics",
+    "import_name": "pyflowdiagnostics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflowdiagnostics"
+  },
+  "pyflwdir": {
+    "conda_name": "pyflwdir",
+    "import_name": "pyflwdir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflwdir"
+  },
+  "pyflyby": {
+    "conda_name": "pyflyby",
+    "import_name": "pyflyby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyflyby"
+  },
+  "pyfmmlib": {
+    "conda_name": "pyfmmlib",
+    "import_name": "pyfmmlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfmmlib"
+  },
+  "pyfolio": {
+    "conda_name": "pyfolio",
+    "import_name": "pyfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfolio"
+  },
+  "pyfolio-reloaded": {
+    "conda_name": "pyfolio-reloaded",
+    "import_name": "pyfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfolio-reloaded"
+  },
+  "pyformlang": {
+    "conda_name": "pyformlang",
+    "import_name": "pyformlang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyformlang"
+  },
+  "pyfpgrowth": {
+    "conda_name": "pyfpgrowth",
+    "import_name": "pyfpgrowth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfpgrowth"
+  },
+  "pyfstab": {
+    "conda_name": "pyfstab",
+    "import_name": "pyfstab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfstab"
+  },
+  "pyfstat": {
+    "conda_name": "pyfstat",
+    "import_name": "pyfstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfstat"
+  },
+  "pyftdi": {
+    "conda_name": "pyftdi",
+    "import_name": "pyftdi.ftdi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyftdi"
+  },
+  "pyfume": {
+    "conda_name": "pyfume",
+    "import_name": "pyfume",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfume"
+  },
+  "pyfunctional": {
+    "conda_name": "pyfunctional",
+    "import_name": "functional",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfunctional"
+  },
+  "pyfuse3": {
+    "conda_name": "pyfuse3",
+    "import_name": "pyfuse3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyfuse3"
+  },
+  "pyg4ometry": {
+    "conda_name": "pyg4ometry",
+    "import_name": "pyg4ometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyg4ometry"
+  },
+  "pygadm": {
+    "conda_name": "pygadm",
+    "import_name": "pygadm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygadm"
+  },
+  "pygal": {
+    "conda_name": "pygal",
+    "import_name": "pygal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygal"
+  },
+  "pygalmesh": {
+    "conda_name": "pygalmesh",
+    "import_name": "pygalmesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygalmesh"
+  },
+  "pygam": {
+    "conda_name": "pygam",
+    "import_name": "pygam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygam"
+  },
+  "pygaps": {
+    "conda_name": "pygaps",
+    "import_name": "pygaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygaps"
+  },
+  "pygasflow": {
+    "conda_name": "pygasflow",
+    "import_name": "pygasflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygasflow"
+  },
+  "pygaul": {
+    "conda_name": "pygaul",
+    "import_name": "pygaul",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygaul"
+  },
+  "pygbif": {
+    "conda_name": "pygbif",
+    "import_name": "pygbif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygbif"
+  },
+  "pygc": {
+    "conda_name": "pygc",
+    "import_name": "pygc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygc"
+  },
+  "pygcn": {
+    "conda_name": "pygcn",
+    "import_name": "gcn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygcn"
+  },
+  "pygedm": {
+    "conda_name": "pygedm",
+    "import_name": "pygedm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygedm"
+  },
+  "pygelf": {
+    "conda_name": "pygelf",
+    "import_name": "pygelf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygelf"
+  },
+  "pygenomeviz": {
+    "conda_name": "pygenomeviz",
+    "import_name": "pygenomeviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygenomeviz"
+  },
+  "pygeobase": {
+    "conda_name": "pygeobase",
+    "import_name": "pygeobase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeobase"
+  },
+  "pygeodesic": {
+    "conda_name": "pygeodesic",
+    "import_name": "pygeodesic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeodesic"
+  },
+  "pygeofilter": {
+    "conda_name": "pygeofilter",
+    "import_name": "pygeofilter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeofilter"
+  },
+  "pygeogrids": {
+    "conda_name": "pygeogrids",
+    "import_name": "pygeogrids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeogrids"
+  },
+  "pygeohash": {
+    "conda_name": "pygeohash",
+    "import_name": "pygeohash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeohash"
+  },
+  "pygeohydro": {
+    "conda_name": "pygeohydro",
+    "import_name": "pygeohydro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeohydro"
+  },
+  "pygeoif": {
+    "conda_name": "pygeoif",
+    "import_name": "pygeoif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeoif"
+  },
+  "pygeoip": {
+    "conda_name": "pygeoip",
+    "import_name": "pygeoip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeoip"
+  },
+  "pygeometa": {
+    "conda_name": "pygeometa",
+    "import_name": "pygeometa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeometa"
+  },
+  "pygeoogc": {
+    "conda_name": "pygeoogc",
+    "import_name": "pygeoogc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeoogc"
+  },
+  "pygeoops": {
+    "conda_name": "pygeoops",
+    "import_name": "pygeoops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeoops"
+  },
+  "pygeoprocessing": {
+    "conda_name": "pygeoprocessing",
+    "import_name": "pygeoprocessing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygeoprocessing"
+  },
+  "pygetwindow": {
+    "conda_name": "pygetwindow",
+    "import_name": "pygetwindow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygetwindow"
+  },
+  "pygff": {
+    "conda_name": "pygff",
+    "import_name": "pygff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygff"
+  },
+  "pygfunction": {
+    "conda_name": "pygfunction",
+    "import_name": "pygfunction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygfunction"
+  },
+  "pygfx": {
+    "conda_name": "pygfx",
+    "import_name": "pygfx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygfx"
+  },
+  "pygha": {
+    "conda_name": "pygha",
+    "import_name": "pygha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygha"
+  },
+  "pygifsicle": {
+    "conda_name": "pygifsicle",
+    "import_name": "pygifsicle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygifsicle"
+  },
+  "pygis": {
+    "conda_name": "pygis",
+    "import_name": "pygis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygis"
+  },
+  "pygithub": {
+    "conda_name": "pygithub",
+    "import_name": "github",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygithub"
+  },
+  "pygix": {
+    "conda_name": "pygix",
+    "import_name": "pygix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygix"
+  },
+  "pyglider": {
+    "conda_name": "pyglider",
+    "import_name": "pyglider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyglider"
+  },
+  "pyglmnet": {
+    "conda_name": "pyglmnet",
+    "import_name": "pyglmnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyglmnet"
+  },
+  "pyglotaran": {
+    "conda_name": "pyglotaran",
+    "import_name": "glotaran",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyglotaran"
+  },
+  "pyglotaran-alias": {
+    "conda_name": "pyglotaran-alias",
+    "import_name": "pyglotaran",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyglotaran-alias"
+  },
+  "pyglotaran-extras": {
+    "conda_name": "pyglotaran-extras",
+    "import_name": "pyglotaran_extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyglotaran-extras"
+  },
+  "pygltflib": {
+    "conda_name": "pygltflib",
+    "import_name": "pygltflib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygltflib"
+  },
+  "pygmc": {
+    "conda_name": "pygmc",
+    "import_name": "pygmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygmc"
+  },
+  "pygments": {
+    "conda_name": "pygments",
+    "import_name": "pygments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments"
+  },
+  "pygments-anyscript": {
+    "conda_name": "pygments_anyscript",
+    "import_name": "pygments_anyscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments-anyscript"
+  },
+  "pygments-lexer-solidity": {
+    "conda_name": "pygments-lexer-solidity",
+    "import_name": "pygments_lexer_solidity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments-lexer-solidity"
+  },
+  "pygments-pytest": {
+    "conda_name": "pygments_pytest",
+    "import_name": "pygments_pytest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments-pytest"
+  },
+  "pygments-style-solarized": {
+    "conda_name": "pygments-style-solarized",
+    "import_name": "pygments_style_solarized",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments-style-solarized"
+  },
+  "pygments-styles": {
+    "conda_name": "pygments-styles",
+    "import_name": "pygments_styles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygments-styles"
+  },
+  "pygmentsvexlexer": {
+    "conda_name": "pygmentsvexlexer",
+    "import_name": "PygmentsVexLexer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygmentsvexlexer"
+  },
+  "pygml": {
+    "conda_name": "pygml",
+    "import_name": "pygml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygml"
+  },
+  "pygmsh": {
+    "conda_name": "pygmsh",
+    "import_name": "pygmsh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygmsh"
+  },
+  "pygmtools": {
+    "conda_name": "pygmtools",
+    "import_name": "pygmtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygmtools"
+  },
+  "pygnssutils": {
+    "conda_name": "pygnssutils",
+    "import_name": "pygnssutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygnssutils"
+  },
+  "pygod": {
+    "conda_name": "pygod",
+    "import_name": "pygod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygod"
+  },
+  "pygount": {
+    "conda_name": "pygount",
+    "import_name": "pygount",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygount"
+  },
+  "pygpcca": {
+    "conda_name": "pygpcca",
+    "import_name": "pygpcca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygpcca"
+  },
+  "pygplates": {
+    "conda_name": "pygplates",
+    "import_name": "pygplates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygplates"
+  },
+  "pygraft": {
+    "conda_name": "pygraft",
+    "import_name": "pygraft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygraft"
+  },
+  "pygram11": {
+    "conda_name": "pygram11",
+    "import_name": "pygram11",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygram11"
+  },
+  "pygrametl": {
+    "conda_name": "pygrametl",
+    "import_name": "pygrametl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygrametl"
+  },
+  "pygraphviz": {
+    "conda_name": "pygraphviz",
+    "import_name": "pygraphviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygraphviz"
+  },
+  "pygridmet": {
+    "conda_name": "pygridmet",
+    "import_name": "pygridmet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygridmet"
+  },
+  "pygrin": {
+    "conda_name": "pygrin",
+    "import_name": "pygrin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygrin"
+  },
+  "pygris": {
+    "conda_name": "pygris",
+    "import_name": "pygris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygris"
+  },
+  "pygsheets": {
+    "conda_name": "pygsheets",
+    "import_name": "pygsheets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygsheets"
+  },
+  "pygslodeiv2": {
+    "conda_name": "pygslodeiv2",
+    "import_name": "pygslodeiv2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygslodeiv2"
+  },
+  "pygsp": {
+    "conda_name": "pygsp",
+    "import_name": "pygsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygsp"
+  },
+  "pygsp2": {
+    "conda_name": "pygsp2",
+    "import_name": "pygsp2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygsp2"
+  },
+  "pygtail": {
+    "conda_name": "pygtail",
+    "import_name": "pygtail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygtail"
+  },
+  "pygtc": {
+    "conda_name": "pygtc",
+    "import_name": "pygtc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygtc"
+  },
+  "pygtrie": {
+    "conda_name": "pygtrie",
+    "import_name": "pygtrie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygtrie"
+  },
+  "pygubu": {
+    "conda_name": "pygubu",
+    "import_name": "pygubu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygubu"
+  },
+  "pygwalker": {
+    "conda_name": "pygwalker",
+    "import_name": "pygwalker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygwalker"
+  },
+  "pygwb": {
+    "conda_name": "pygwb",
+    "import_name": "pygwb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pygwb"
+  },
+  "pyhacrf-datamade": {
+    "conda_name": "pyhacrf-datamade",
+    "import_name": "pyhacrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhacrf-datamade"
+  },
+  "pyhamcrest": {
+    "conda_name": "pyhamcrest",
+    "import_name": "hamcrest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhamcrest"
+  },
+  "pyhanko": {
+    "conda_name": "pyhanko",
+    "import_name": "pyhanko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhanko"
+  },
+  "pyhanko-certvalidator": {
+    "conda_name": "pyhanko-certvalidator",
+    "import_name": "pyhanko_certvalidator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhanko-certvalidator"
+  },
+  "pyhardisp": {
+    "conda_name": "pyhardisp",
+    "import_name": "pyhardisp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhardisp"
+  },
+  "pyhash": {
+    "conda_name": "pyhash",
+    "import_name": "pyhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhash"
+  },
+  "pyhdb": {
+    "conda_name": "pyhdb",
+    "import_name": "pyhdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhdb"
+  },
+  "pyhdbpp": {
+    "conda_name": "pyhdbpp",
+    "import_name": "pyhdbpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhdbpp"
+  },
+  "pyhdfe": {
+    "conda_name": "pyhdfe",
+    "import_name": "pyhdfe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhdfe"
+  },
+  "pyhdx": {
+    "conda_name": "pyhdx",
+    "import_name": "pyhdx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhdx"
+  },
+  "pyheatdemand": {
+    "conda_name": "pyheatdemand",
+    "import_name": "pyheatdemand",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyheatdemand"
+  },
+  "pyhepmc": {
+    "conda_name": "pyhepmc",
+    "import_name": "pyhepmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhepmc"
+  },
+  "pyhmc": {
+    "conda_name": "pyhmc",
+    "import_name": "pyhmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhmc"
+  },
+  "pyhough": {
+    "conda_name": "pyhough",
+    "import_name": "pyhough",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhough"
+  },
+  "pyhrf": {
+    "conda_name": "pyhrf",
+    "import_name": "pyhrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhrf"
+  },
+  "pyhull": {
+    "conda_name": "pyhull",
+    "import_name": "pyhull",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhull"
+  },
+  "pyhumps": {
+    "conda_name": "pyhumps",
+    "import_name": "humps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhumps"
+  },
+  "pyhyperscattering": {
+    "conda_name": "pyhyperscattering-base",
+    "import_name": "PyHyperScattering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyhyperscattering"
+  },
+  "pyibs": {
+    "conda_name": "pyibs",
+    "import_name": "pyibs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyibs"
+  },
+  "pyiem": {
+    "conda_name": "pyiem",
+    "import_name": "pyiem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiem"
+  },
+  "pyift": {
+    "conda_name": "pyift",
+    "import_name": "pyift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyift"
+  },
+  "pyignite": {
+    "conda_name": "pyignite",
+    "import_name": "pyignite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyignite"
+  },
+  "pyigrf": {
+    "conda_name": "pyigrf",
+    "import_name": "pyIGRF",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyigrf"
+  },
+  "pyilluminate": {
+    "conda_name": "pyilluminate",
+    "import_name": "pyilluminate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyilluminate"
+  },
+  "pyimagej": {
+    "conda_name": "pyimagej",
+    "import_name": "imagej",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyimagej"
+  },
+  "pyimapsync": {
+    "conda_name": "pyimapsync",
+    "import_name": "pyimapsync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyimapsync"
+  },
+  "pyimgur": {
+    "conda_name": "pyimgur",
+    "import_name": "pyimgur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyimgur"
+  },
+  "pyinaturalist": {
+    "conda_name": "pyinaturalist",
+    "import_name": "pyinaturalist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinaturalist"
+  },
+  "pyinaturalist-convert": {
+    "conda_name": "pyinaturalist-convert",
+    "import_name": "pyinaturalist_convert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinaturalist-convert"
+  },
+  "pyink": {
+    "conda_name": "pyink",
+    "import_name": "pyink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyink"
+  },
+  "pyinotify": {
+    "conda_name": "pyinotify",
+    "import_name": "pyinotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinotify"
+  },
+  "pyinquirer": {
+    "conda_name": "pyinquirer",
+    "import_name": "PyInquirer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinquirer"
+  },
+  "pyinstaller": {
+    "conda_name": "pyinstaller",
+    "import_name": "PyInstaller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinstaller"
+  },
+  "pyinstaller-hooks-contrib": {
+    "conda_name": "pyinstaller-hooks-contrib",
+    "import_name": "_pyinstaller_hooks_contrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinstaller-hooks-contrib"
+  },
+  "pyinstaller-versionfile": {
+    "conda_name": "pyinstaller-versionfile",
+    "import_name": "pyinstaller_versionfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinstaller-versionfile"
+  },
+  "pyinstrument": {
+    "conda_name": "pyinstrument",
+    "import_name": "pyinstrument",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinstrument"
+  },
+  "pyinterpolate": {
+    "conda_name": "pyinterpolate",
+    "import_name": "pyinterpolate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinterpolate"
+  },
+  "pyinterval": {
+    "conda_name": "pyinterval",
+    "import_name": "interval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyinterval"
+  },
+  "pyirf": {
+    "conda_name": "pyirf",
+    "import_name": "pyirf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyirf"
+  },
+  "pyiri": {
+    "conda_name": "pyiri",
+    "import_name": "PyIRI",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiri"
+  },
+  "pyiron-continuum": {
+    "conda_name": "pyiron_continuum",
+    "import_name": "pyiron_continuum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-continuum"
+  },
+  "pyiron-contrib": {
+    "conda_name": "pyiron_contrib",
+    "import_name": "pyiron_contrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-contrib"
+  },
+  "pyiron-database": {
+    "conda_name": "pyiron_database",
+    "import_name": "pyiron_database",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-database"
+  },
+  "pyiron-dft": {
+    "conda_name": "pyiron_dft",
+    "import_name": "pyiron_dft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-dft"
+  },
+  "pyiron-example-job": {
+    "conda_name": "pyiron_example_job",
+    "import_name": "pyiron_example_job",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-example-job"
+  },
+  "pyiron-experimental": {
+    "conda_name": "pyiron_experimental",
+    "import_name": "pyiron_experimental",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-experimental"
+  },
+  "pyiron-gpl": {
+    "conda_name": "pyiron_gpl",
+    "import_name": "pyiron_gpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-gpl"
+  },
+  "pyiron-gui": {
+    "conda_name": "pyiron_gui",
+    "import_name": "pyiron_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-gui"
+  },
+  "pyiron-ontology": {
+    "conda_name": "pyiron_ontology",
+    "import_name": "pyiron_ontology",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-ontology"
+  },
+  "pyiron-potentialfit": {
+    "conda_name": "pyiron_potentialfit",
+    "import_name": "pyiron_potentialfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-potentialfit"
+  },
+  "pyiron-snippets": {
+    "conda_name": "pyiron_snippets",
+    "import_name": "pyiron_snippets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-snippets"
+  },
+  "pyiron-workflow": {
+    "conda_name": "pyiron_workflow",
+    "import_name": "pyiron_workflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-workflow"
+  },
+  "pyiron-workflow-atomistics": {
+    "conda_name": "pyiron-workflow-atomistics",
+    "import_name": "pyiron_workflow_atomistics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyiron-workflow-atomistics"
+  },
+  "pyisemail": {
+    "conda_name": "pyisemail",
+    "import_name": "pyisemail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyisemail"
+  },
+  "pyjams": {
+    "conda_name": "pyjams",
+    "import_name": "pyjams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjams"
+  },
+  "pyjarowinkler": {
+    "conda_name": "pyjarowinkler",
+    "import_name": "pyjarowinkler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjarowinkler"
+  },
+  "pyjks": {
+    "conda_name": "pyjks",
+    "import_name": "jks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjks"
+  },
+  "pyjokes": {
+    "conda_name": "pyjokes",
+    "import_name": "pyjokes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjokes"
+  },
+  "pyjq": {
+    "conda_name": "pyjq",
+    "import_name": "pyjq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjq"
+  },
+  "pyjsg": {
+    "conda_name": "pyjsg",
+    "import_name": "pyjsg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjsg"
+  },
+  "pyjsg-json": {
+    "conda_name": "pyjsg-json",
+    "import_name": "pyjsg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjsg-json"
+  },
+  "pyjsparser": {
+    "conda_name": "pyjsparser",
+    "import_name": "pyjsparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjsparser"
+  },
+  "pyjwkest": {
+    "conda_name": "pyjwkest",
+    "import_name": "jwkest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyjwkest"
+  },
+  "pykafka": {
+    "conda_name": "pykafka",
+    "import_name": "pykafka",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykafka"
+  },
+  "pykalman": {
+    "conda_name": "pykalman",
+    "import_name": "pykalman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykalman"
+  },
+  "pykdtree": {
+    "conda_name": "pykdtree",
+    "import_name": "pykdtree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykdtree"
+  },
+  "pykerberos": {
+    "conda_name": "pykerberos",
+    "import_name": "kerberos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykerberos"
+  },
+  "pykerr": {
+    "conda_name": "pykerr",
+    "import_name": "pykerr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykerr"
+  },
+  "pykicad": {
+    "conda_name": "pykicad",
+    "import_name": "pykicad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykicad"
+  },
+  "pykmip": {
+    "conda_name": "pykmip",
+    "import_name": "kmip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykmip"
+  },
+  "pykml": {
+    "conda_name": "pykml",
+    "import_name": "pykml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykml"
+  },
+  "pyknos": {
+    "conda_name": "pyknos",
+    "import_name": "pyknos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyknos"
+  },
+  "pykrige": {
+    "conda_name": "pykrige",
+    "import_name": "pykrige",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykrige"
+  },
+  "pykube": {
+    "conda_name": "pykube",
+    "import_name": "pykube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykube"
+  },
+  "pykube-ng": {
+    "conda_name": "pykube-ng",
+    "import_name": "pykube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykube-ng"
+  },
+  "pykwalify": {
+    "conda_name": "pykwalify",
+    "import_name": "pykwalify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pykwalify"
+  },
+  "pylabdd": {
+    "conda_name": "pylabdd",
+    "import_name": "pylabdd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylabdd"
+  },
+  "pylabeladjust": {
+    "conda_name": "pylabeladjust",
+    "import_name": "pylabeladjust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylabeladjust"
+  },
+  "pylabfea": {
+    "conda_name": "pylabfea",
+    "import_name": "pylabfea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylabfea"
+  },
+  "pylablib": {
+    "conda_name": "pylablib",
+    "import_name": "pylablib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylablib"
+  },
+  "pyladoc": {
+    "conda_name": "pyladoc",
+    "import_name": "pyladoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyladoc"
+  },
+  "pylama": {
+    "conda_name": "pylama",
+    "import_name": "pylama",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylama"
+  },
+  "pylandstats": {
+    "conda_name": "pylandstats",
+    "import_name": "pylandstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylandstats"
+  },
+  "pylatex": {
+    "conda_name": "pylatex",
+    "import_name": "pylatex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylatex"
+  },
+  "pylbfgs": {
+    "conda_name": "pylbfgs",
+    "import_name": "lbfgs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylbfgs"
+  },
+  "pylcm": {
+    "conda_name": "pylcm",
+    "import_name": "lcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylcm"
+  },
+  "pyldavis": {
+    "conda_name": "pyldavis",
+    "import_name": "pyLDAvis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyldavis"
+  },
+  "pyleak": {
+    "conda_name": "pyleak",
+    "import_name": "pyleak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyleak"
+  },
+  "pyleiden": {
+    "conda_name": "pyleiden",
+    "import_name": "pyleiden",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyleiden"
+  },
+  "pylems": {
+    "conda_name": "pylems",
+    "import_name": "lems",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylems"
+  },
+  "pylev": {
+    "conda_name": "pylev",
+    "import_name": "pylev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylev"
+  },
+  "pylexique": {
+    "conda_name": "pylexique",
+    "import_name": "pylexique",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylexique"
+  },
+  "pylgbst": {
+    "conda_name": "pylgbst",
+    "import_name": "pylgbst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylgbst"
+  },
+  "pylhc-submitter": {
+    "conda_name": "pylhc_submitter",
+    "import_name": "pylhc_submitter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylhc-submitter"
+  },
+  "pylib-essentials": {
+    "conda_name": "pylib-essentials",
+    "import_name": "pylib_essentials",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylib-essentials"
+  },
+  "pylibacl": {
+    "conda_name": "pylibacl",
+    "import_name": "posix1e",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibacl"
+  },
+  "pylibftdi": {
+    "conda_name": "pylibftdi",
+    "import_name": "pylibftdi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibftdi"
+  },
+  "pylibjpeg": {
+    "conda_name": "pylibjpeg",
+    "import_name": "pylibjpeg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibjpeg"
+  },
+  "pylibscrypt": {
+    "conda_name": "pylibscrypt",
+    "import_name": "pylibscrypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibscrypt"
+  },
+  "pylibsrtp": {
+    "conda_name": "pylibsrtp",
+    "import_name": "pylibsrtp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibsrtp"
+  },
+  "pylibtiff": {
+    "conda_name": "pylibtiff",
+    "import_name": "libtiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylibtiff"
+  },
+  "pylinalg": {
+    "conda_name": "pylinalg",
+    "import_name": "pylinalg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylinalg"
+  },
+  "pylink": {
+    "conda_name": "pylink",
+    "import_name": "pylink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylink"
+  },
+  "pylink-square": {
+    "conda_name": "pylink-square",
+    "import_name": "pylink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylink-square"
+  },
+  "pylint-celery": {
+    "conda_name": "pylint-celery",
+    "import_name": "pylint_celery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylint-celery"
+  },
+  "pylint-common": {
+    "conda_name": "pylint-common",
+    "import_name": "pylint_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylint-common"
+  },
+  "pylint-flask": {
+    "conda_name": "pylint-flask",
+    "import_name": "pylint_flask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylint-flask"
+  },
+  "pylint-plugin-utils": {
+    "conda_name": "pylint-plugin-utils",
+    "import_name": "pylint_plugin_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylint-plugin-utils"
+  },
+  "pylint-venv": {
+    "conda_name": "pylint-venv",
+    "import_name": "pylint_venv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylint-venv"
+  },
+  "pyloadprofilegenerator": {
+    "conda_name": "pyloadprofilegenerator",
+    "import_name": "pylpg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyloadprofilegenerator"
+  },
+  "pylogbeat": {
+    "conda_name": "pylogbeat",
+    "import_name": "pylogbeat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylogbeat"
+  },
+  "pylogit": {
+    "conda_name": "pylogit",
+    "import_name": "pylogit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylogit"
+  },
+  "pylook": {
+    "conda_name": "pylook",
+    "import_name": "pylook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylook"
+  },
+  "pylops": {
+    "conda_name": "pylops",
+    "import_name": "pylops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylops"
+  },
+  "pylru": {
+    "conda_name": "pylru",
+    "import_name": "pylru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylru"
+  },
+  "pyls-black": {
+    "conda_name": "pyls-black",
+    "import_name": "pyls_black",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-black"
+  },
+  "pyls-flake8": {
+    "conda_name": "pyls-flake8",
+    "import_name": "pyls_flake8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-flake8"
+  },
+  "pyls-isort": {
+    "conda_name": "pyls-isort",
+    "import_name": "pyls_isort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-isort"
+  },
+  "pyls-memestra": {
+    "conda_name": "pyls-memestra",
+    "import_name": "pyls_memestra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-memestra"
+  },
+  "pyls-mypy": {
+    "conda_name": "pyls-mypy",
+    "import_name": "pyls_mypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-mypy"
+  },
+  "pyls-spyder": {
+    "conda_name": "pyls-spyder",
+    "import_name": "pyls_spyder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyls-spyder"
+  },
+  "pylsp-mypy": {
+    "conda_name": "pylsp-mypy",
+    "import_name": "pylsp_mypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylsp-mypy"
+  },
+  "pylstraight": {
+    "conda_name": "pylstraight",
+    "import_name": "pylstraight",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylstraight"
+  },
+  "pyluach": {
+    "conda_name": "pyluach",
+    "import_name": "pyluach",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyluach"
+  },
+  "pylustrator": {
+    "conda_name": "pylustrator",
+    "import_name": "pylustrator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pylustrator"
+  },
+  "pymagej": {
+    "conda_name": "pymagej",
+    "import_name": "pymagej",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymagej"
+  },
+  "pymagicc": {
+    "conda_name": "pymagicc",
+    "import_name": "pymagicc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymagicc"
+  },
+  "pymannkendall": {
+    "conda_name": "pymannkendall",
+    "import_name": "pymannkendall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymannkendall"
+  },
+  "pymap3d": {
+    "conda_name": "pymap3d",
+    "import_name": "pymap3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymap3d"
+  },
+  "pymarkovclustering": {
+    "conda_name": "pymarkovclustering",
+    "import_name": "pymarkovclustering",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymarkovclustering"
+  },
+  "pymartini": {
+    "conda_name": "pymartini",
+    "import_name": "pymartini",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymartini"
+  },
+  "pymatgen-analysis-defects": {
+    "conda_name": "pymatgen-analysis-defects",
+    "import_name": "pymatgen.analysis.defects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-analysis-defects"
+  },
+  "pymatgen-db": {
+    "conda_name": "pymatgen-db",
+    "import_name": "pymatgen.db",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-db"
+  },
+  "pymatgen-diffusion": {
+    "conda_name": "pymatgen-diffusion",
+    "import_name": "pymatgen_diffusion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-diffusion"
+  },
+  "pymatgen-io-fleur": {
+    "conda_name": "pymatgen-io-fleur",
+    "import_name": "pymatgen.io.fleur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-io-fleur"
+  },
+  "pymatgen-io-validation": {
+    "conda_name": "pymatgen-io-validation",
+    "import_name": "pymatgen.io.validation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-io-validation"
+  },
+  "pymatgen-lammps": {
+    "conda_name": "pymatgen-lammps",
+    "import_name": "pmg_lammps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatgen-lammps"
+  },
+  "pymatreader": {
+    "conda_name": "pymatreader",
+    "import_name": "pymatreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatreader"
+  },
+  "pymatsolver": {
+    "conda_name": "pymatsolver",
+    "import_name": "pymatsolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatsolver"
+  },
+  "pymatviz": {
+    "conda_name": "pymatviz",
+    "import_name": "pymatviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymatviz"
+  },
+  "pymaxflow": {
+    "conda_name": "pymaxflow",
+    "import_name": "maxflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymaxflow"
+  },
+  "pymaxspots": {
+    "conda_name": "pymaxspots",
+    "import_name": "pymaxspots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymaxspots"
+  },
+  "pymbolic": {
+    "conda_name": "pymbolic",
+    "import_name": "pymbolic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymbolic"
+  },
+  "pymc-marketing": {
+    "conda_name": "pymc-marketing",
+    "import_name": "pymc_marketing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymc-marketing"
+  },
+  "pymc-sphinx-theme": {
+    "conda_name": "pymc-sphinx-theme",
+    "import_name": "pymc_sphinx_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymc-sphinx-theme"
+  },
+  "pymc3": {
+    "conda_name": "pymc3",
+    "import_name": "pymc3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymc3"
+  },
+  "pymc3-ext": {
+    "conda_name": "pymc3-ext",
+    "import_name": "pymc3_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymc3-ext"
+  },
+  "pymc3-hmm": {
+    "conda_name": "pymc3-hmm",
+    "import_name": "pymc3_hmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymc3-hmm"
+  },
+  "pymca-zocalo": {
+    "conda_name": "pymca-zocalo",
+    "import_name": "pymca_zocalo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymca-zocalo"
+  },
+  "pymca5": {
+    "conda_name": "pymca",
+    "import_name": "PyMca5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymca5"
+  },
+  "pymcdm": {
+    "conda_name": "pymcdm",
+    "import_name": "pymcdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymcdm"
+  },
+  "pymcr": {
+    "conda_name": "pymcr",
+    "import_name": "pymcr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymcr"
+  },
+  "pymcubes": {
+    "conda_name": "pymcubes",
+    "import_name": "mcubes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymcubes"
+  },
+  "pymde": {
+    "conda_name": "pymde",
+    "import_name": "pymde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymde"
+  },
+  "pymdown-extensions": {
+    "conda_name": "pymdown-extensions",
+    "import_name": "pymdownx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymdown-extensions"
+  },
+  "pymediainfo": {
+    "conda_name": "pymediainfo",
+    "import_name": "pymediainfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymediainfo"
+  },
+  "pymedio": {
+    "conda_name": "pymedio",
+    "import_name": "pymedio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymedio"
+  },
+  "pymedm": {
+    "conda_name": "pymedm",
+    "import_name": "pymedm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymedm"
+  },
+  "pymeeus": {
+    "conda_name": "pymeeus",
+    "import_name": "pymeeus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymeeus"
+  },
+  "pymem3dg": {
+    "conda_name": "pymem3dg",
+    "import_name": "pymem3dg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymem3dg"
+  },
+  "pymemcache": {
+    "conda_name": "pymemcache",
+    "import_name": "pymemcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymemcache"
+  },
+  "pyment": {
+    "conda_name": "pyment",
+    "import_name": "pyment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyment"
+  },
+  "pymeos": {
+    "conda_name": "pymeos",
+    "import_name": "pymeos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymeos"
+  },
+  "pymeos-cffi": {
+    "conda_name": "pymeos-cffi",
+    "import_name": "pymeos_cffi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymeos-cffi"
+  },
+  "pymeshfix": {
+    "conda_name": "pymeshfix",
+    "import_name": "pymeshfix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymeshfix"
+  },
+  "pymeta3": {
+    "conda_name": "pymeta3",
+    "import_name": "pymeta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymeta3"
+  },
+  "pymetalink": {
+    "conda_name": "pymetalink",
+    "import_name": "metalink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymetalink"
+  },
+  "pymetis": {
+    "conda_name": "pymetis",
+    "import_name": "pymetis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymetis"
+  },
+  "pymiescatt": {
+    "conda_name": "pymiescatt",
+    "import_name": "PyMieScatt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymiescatt"
+  },
+  "pyminhash": {
+    "conda_name": "pyminhash",
+    "import_name": "pyminhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyminhash"
+  },
+  "pyminizip": {
+    "conda_name": "pyminizip",
+    "import_name": "pyminizip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyminizip"
+  },
+  "pymirc": {
+    "conda_name": "pymirc",
+    "import_name": "pymirc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymirc"
+  },
+  "pymkl": {
+    "conda_name": "pymkl",
+    "import_name": "pyMKL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymkl"
+  },
+  "pymks": {
+    "conda_name": "pymks",
+    "import_name": "pymks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymks"
+  },
+  "pymmaster": {
+    "conda_name": "pymmaster",
+    "import_name": "pymmaster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymmaster"
+  },
+  "pymmcore": {
+    "conda_name": "pymmcore",
+    "import_name": "pymmcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymmcore"
+  },
+  "pymmcore-plus": {
+    "conda_name": "pymmcore-plus",
+    "import_name": "pymmcore_plus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymmcore-plus"
+  },
+  "pymmcore-widgets": {
+    "conda_name": "pymmcore-widgets",
+    "import_name": "pymmcore_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymmcore-widgets"
+  },
+  "pymodelchecking": {
+    "conda_name": "pymodelchecking",
+    "import_name": "pyModelChecking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodelchecking"
+  },
+  "pymodes": {
+    "conda_name": "pymodes",
+    "import_name": "pyModeS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodes"
+  },
+  "pymodis": {
+    "conda_name": "pymodis",
+    "import_name": "pymodis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodis"
+  },
+  "pymodm": {
+    "conda_name": "pymodm",
+    "import_name": "pymodm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodm"
+  },
+  "pymodsecurity": {
+    "conda_name": "pymodsecurity",
+    "import_name": "ModSecurity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodsecurity"
+  },
+  "pymodulon": {
+    "conda_name": "pymodulon",
+    "import_name": "pymodulon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymodulon"
+  },
+  "pymongo-inmemory": {
+    "conda_name": "pymongo_inmemory",
+    "import_name": "pymongo_inmemory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymongo-inmemory"
+  },
+  "pymoo": {
+    "conda_name": "pymoo",
+    "import_name": "pymoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymoo"
+  },
+  "pymoodef": {
+    "conda_name": "pymoodef",
+    "import_name": "pymoodef",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymoodef"
+  },
+  "pymorphy2": {
+    "conda_name": "pymorphy2",
+    "import_name": "pymorphy2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymorphy2"
+  },
+  "pymorphy2-dicts": {
+    "conda_name": "pymorphy2-dicts",
+    "import_name": "pymorphy2_dicts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymorphy2-dicts"
+  },
+  "pymorphy2-dicts-ru": {
+    "conda_name": "pymorphy2-dicts-ru",
+    "import_name": "pymorphy2_dicts_ru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymorphy2-dicts-ru"
+  },
+  "pymov2gif": {
+    "conda_name": "pymov2gif",
+    "import_name": "pymov2gif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymov2gif"
+  },
+  "pymove-osmnx": {
+    "conda_name": "pymove-osmnx",
+    "import_name": "pymove_osmnx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymove-osmnx"
+  },
+  "pymovements": {
+    "conda_name": "pymovements",
+    "import_name": "pymovements",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymovements"
+  },
+  "pympipool": {
+    "conda_name": "pympipool",
+    "import_name": "pympipool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pympipool"
+  },
+  "pympler": {
+    "conda_name": "pympler",
+    "import_name": "pympler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pympler"
+  },
+  "pymrio": {
+    "conda_name": "pymrio",
+    "import_name": "pymrio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymrio"
+  },
+  "pymsbuild": {
+    "conda_name": "pymsbuild",
+    "import_name": "pymsbuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymsbuild"
+  },
+  "pymsgbox": {
+    "conda_name": "pymsgbox",
+    "import_name": "pymsgbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymsgbox"
+  },
+  "pymsh": {
+    "conda_name": "pymsh",
+    "import_name": "pymsh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymsh"
+  },
+  "pymt-landlab": {
+    "conda_name": "pymt_landlab",
+    "import_name": "pymt_landlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymt-landlab"
+  },
+  "pymt-rafem": {
+    "conda_name": "pymt_rafem",
+    "import_name": "pymt_rafem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymt-rafem"
+  },
+  "pymultihash": {
+    "conda_name": "pymultihash",
+    "import_name": "multihash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymultihash"
+  },
+  "pymultinest": {
+    "conda_name": "pymultinest",
+    "import_name": "pymultinest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymultinest"
+  },
+  "pymumps": {
+    "conda_name": "pymumps",
+    "import_name": "mumps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymumps"
+  },
+  "pymuonsuite": {
+    "conda_name": "pymuonsuite",
+    "import_name": "pymuonsuite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymuonsuite"
+  },
+  "pymupdf-fonts": {
+    "conda_name": "pymupdf-fonts",
+    "import_name": "pymupdf_fonts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymupdf-fonts"
+  },
+  "pymust": {
+    "conda_name": "pymust",
+    "import_name": "pymust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymust"
+  },
+  "pymvpa2": {
+    "conda_name": "pymvpa2",
+    "import_name": "mvpa2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymvpa2"
+  },
+  "pymyami": {
+    "conda_name": "pymyami",
+    "import_name": "pymyami",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pymyami"
+  },
+  "pynacl": {
+    "conda_name": "pynacl",
+    "import_name": "nacl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynacl"
+  },
+  "pynamical": {
+    "conda_name": "pynamical",
+    "import_name": "pynamical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynamical"
+  },
+  "pynamodb": {
+    "conda_name": "pynamodb",
+    "import_name": "pynamodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynamodb"
+  },
+  "pynamodb-encoder": {
+    "conda_name": "pynamodb-encoder",
+    "import_name": "pynamodb_encoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynamodb-encoder"
+  },
+  "pynauty": {
+    "conda_name": "pynauty",
+    "import_name": "pynauty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynauty"
+  },
+  "pyncml": {
+    "conda_name": "pyncml",
+    "import_name": "pyncml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyncml"
+  },
+  "pyncview": {
+    "conda_name": "pyncview",
+    "import_name": "pyncview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyncview"
+  },
+  "pynecone": {
+    "conda_name": "pynecone",
+    "import_name": "pynecone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynecone"
+  },
+  "pynemaiqpet": {
+    "conda_name": "pynemaiqpet",
+    "import_name": "pynemaiqpet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynemaiqpet"
+  },
+  "pyneqsys": {
+    "conda_name": "pyneqsys",
+    "import_name": "pyneqsys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyneqsys"
+  },
+  "pynessie": {
+    "conda_name": "pynessie",
+    "import_name": "pynessie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynessie"
+  },
+  "pynfft": {
+    "conda_name": "pynfft",
+    "import_name": "pynfft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynfft"
+  },
+  "pyngo": {
+    "conda_name": "pyngo",
+    "import_name": "pyngo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyngo"
+  },
+  "pyngrok": {
+    "conda_name": "pyngrok",
+    "import_name": "pyngrok",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyngrok"
+  },
+  "pynhd": {
+    "conda_name": "pynhd",
+    "import_name": "pynhd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynhd"
+  },
+  "pynimate": {
+    "conda_name": "pynimate",
+    "import_name": "pynimate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynimate"
+  },
+  "pynisher": {
+    "conda_name": "pynisher",
+    "import_name": "pynisher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynisher"
+  },
+  "pynldas2": {
+    "conda_name": "pynldas2",
+    "import_name": "pynldas2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynldas2"
+  },
+  "pynlp-lib": {
+    "conda_name": "pynlp-lib",
+    "import_name": "pynlpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynlp-lib"
+  },
+  "pynmea2": {
+    "conda_name": "pynmea2",
+    "import_name": "pynmea2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynmea2"
+  },
+  "pynmeagps": {
+    "conda_name": "pynmeagps",
+    "import_name": "pynmeagps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynmeagps"
+  },
+  "pynndescent": {
+    "conda_name": "pynndescent",
+    "import_name": "pynndescent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynndescent"
+  },
+  "pynng": {
+    "conda_name": "pynng",
+    "import_name": "pynng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynng"
+  },
+  "pynormaliz": {
+    "conda_name": "pynormaliz",
+    "import_name": "PyNormaliz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynormaliz"
+  },
+  "pynsee": {
+    "conda_name": "pynsee",
+    "import_name": "pynsee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynsee"
+  },
+  "pynsid": {
+    "conda_name": "pynsid",
+    "import_name": "pyNSID",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynsid"
+  },
+  "pyntacle": {
+    "conda_name": "pyntacle",
+    "import_name": "pyntacle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyntacle"
+  },
+  "pyntcloud": {
+    "conda_name": "pyntcloud",
+    "import_name": "pyntcloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyntcloud"
+  },
+  "pynucastro": {
+    "conda_name": "pynucastro",
+    "import_name": "pynucastro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynucastro"
+  },
+  "pynufft": {
+    "conda_name": "pynufft",
+    "import_name": "pynufft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynufft"
+  },
+  "pynumpress": {
+    "conda_name": "pynumpress",
+    "import_name": "pynumpress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynumpress"
+  },
+  "pynvml": {
+    "conda_name": "pynvml",
+    "import_name": "pynvml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynvml"
+  },
+  "pynwb": {
+    "conda_name": "pynwb",
+    "import_name": "pynwb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pynwb"
+  },
+  "pyobis": {
+    "conda_name": "pyobis",
+    "import_name": "pyobis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobis"
+  },
+  "pyobjc-framework-coreservices": {
+    "conda_name": "pyobjc-framework-coreservices",
+    "import_name": "CoreServices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobjc-framework-coreservices"
+  },
+  "pyobjc-framework-fsevents": {
+    "conda_name": "pyobjc-framework-fsevents",
+    "import_name": "FSEvents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobjc-framework-fsevents"
+  },
+  "pyobjc-framework-metal": {
+    "conda_name": "pyobjc-framework-metal",
+    "import_name": "Metal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobjc-framework-metal"
+  },
+  "pyobjc-framework-quartz": {
+    "conda_name": "pyobjc-framework-quartz",
+    "import_name": "Quartz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobjc-framework-quartz"
+  },
+  "pyobjc-framework-security": {
+    "conda_name": "pyobjc-framework-security",
+    "import_name": "Security",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyobjc-framework-security"
+  },
+  "pyocclient": {
+    "conda_name": "pyocclient",
+    "import_name": "owncloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyocclient"
+  },
+  "pyocr": {
+    "conda_name": "pyocr",
+    "import_name": "pyocr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyocr"
+  },
+  "pyod": {
+    "conda_name": "pyod",
+    "import_name": "pyod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyod"
+  },
+  "pyodeint": {
+    "conda_name": "pyodeint",
+    "import_name": "pyodeint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyodeint"
+  },
+  "pyodesys": {
+    "conda_name": "pyodesys",
+    "import_name": "pyodesys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyodesys"
+  },
+  "pyodide-py": {
+    "conda_name": "pyodide-py",
+    "import_name": "pyodide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyodide-py"
+  },
+  "pyogg": {
+    "conda_name": "pyogg",
+    "import_name": "pyogg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyogg"
+  },
+  "pyolog": {
+    "conda_name": "pyolog",
+    "import_name": "pyOlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyolog"
+  },
+  "pyoma-2": {
+    "conda_name": "pyoma-2",
+    "import_name": "pyoma2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyoma-2"
+  },
+  "pyomicron": {
+    "conda_name": "pyomicron",
+    "import_name": "omicron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyomicron"
+  },
+  "pyomnisci": {
+    "conda_name": "pyomnisci",
+    "import_name": "pyomnisci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyomnisci"
+  },
+  "pyomo": {
+    "conda_name": "pyomo",
+    "import_name": "pyomo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyomo"
+  },
+  "pyone": {
+    "conda_name": "pyone",
+    "import_name": "pyone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyone"
+  },
+  "pyopenbt": {
+    "conda_name": "pyopenbt",
+    "import_name": "pyopenbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopenbt"
+  },
+  "pyopencl": {
+    "conda_name": "pyopencl",
+    "import_name": "pyopencl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopencl"
+  },
+  "pyopengl": {
+    "conda_name": "pyopengl",
+    "import_name": "OpenGL.GL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopengl"
+  },
+  "pyopengl-accelerate": {
+    "conda_name": "pyopengl-accelerate",
+    "import_name": "OpenGL_accelerate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopengl-accelerate"
+  },
+  "pyopenms-viz": {
+    "conda_name": "pyopenms-viz",
+    "import_name": "pyopenms_viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopenms-viz"
+  },
+  "pyopensky": {
+    "conda_name": "pyopensky",
+    "import_name": "pyopensky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyopensky"
+  },
+  "pyorbital": {
+    "conda_name": "pyorbital",
+    "import_name": "pyorbital",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyorbital"
+  },
+  "pyorc": {
+    "conda_name": "pyorc",
+    "import_name": "pyorc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyorc"
+  },
+  "pyorgmode": {
+    "conda_name": "pyorgmode",
+    "import_name": "PyOrgMode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyorgmode"
+  },
+  "pyospackage": {
+    "conda_name": "pyospackage",
+    "import_name": "pyospackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyospackage"
+  },
+  "pyotf": {
+    "conda_name": "pyotf",
+    "import_name": "pyotf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyotf"
+  },
+  "pyotp": {
+    "conda_name": "pyotp",
+    "import_name": "pyotp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyotp"
+  },
+  "pyout": {
+    "conda_name": "pyout",
+    "import_name": "pyout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyout"
+  },
+  "pyoutlook": {
+    "conda_name": "pyoutlook",
+    "import_name": "pyOutlook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyoutlook"
+  },
+  "pypandoc": {
+    "conda_name": "pypandoc",
+    "import_name": "pypandoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypandoc"
+  },
+  "pypar": {
+    "conda_name": "pypar",
+    "import_name": "pypar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypar"
+  },
+  "pyparam": {
+    "conda_name": "pyparam",
+    "import_name": "pyparam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyparam"
+  },
+  "pypardiso": {
+    "conda_name": "pypardiso",
+    "import_name": "pypardiso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypardiso"
+  },
+  "pyparrm": {
+    "conda_name": "pyparrm",
+    "import_name": "pyparrm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyparrm"
+  },
+  "pypd": {
+    "conda_name": "pypd",
+    "import_name": "pypd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypd"
+  },
+  "pypdb": {
+    "conda_name": "pypdb",
+    "import_name": "pypdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypdb"
+  },
+  "pypdf2-fields": {
+    "conda_name": "pypdf2_fields",
+    "import_name": "PyPDF2_Fields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypdf2-fields"
+  },
+  "pypdf3": {
+    "conda_name": "pypdf3",
+    "import_name": "PyPDF3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypdf3"
+  },
+  "pypeec": {
+    "conda_name": "pypeec",
+    "import_name": "pypeec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypeec"
+  },
+  "pypeg2": {
+    "conda_name": "pypeg2",
+    "import_name": "pypeg2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypeg2"
+  },
+  "pypeit": {
+    "conda_name": "pypeit",
+    "import_name": "pypeit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypeit"
+  },
+  "pypeln": {
+    "conda_name": "pypeln",
+    "import_name": "pypeln",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypeln"
+  },
+  "pyperclip": {
+    "conda_name": "pyperclip",
+    "import_name": "pyperclip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyperclip"
+  },
+  "pyperunner": {
+    "conda_name": "pyperunner",
+    "import_name": "pyperunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyperunner"
+  },
+  "pypette": {
+    "conda_name": "pypette",
+    "import_name": "pypette",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypette"
+  },
+  "pyphen": {
+    "conda_name": "pyphen",
+    "import_name": "pyphen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyphen"
+  },
+  "pypher": {
+    "conda_name": "pypher",
+    "import_name": "pypher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypher"
+  },
+  "pyphonetics": {
+    "conda_name": "pyphonetics",
+    "import_name": "pyphonetics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyphonetics"
+  },
+  "pyphysim": {
+    "conda_name": "pyphysim",
+    "import_name": "pyphysim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyphysim"
+  },
+  "pypi-json": {
+    "conda_name": "pypi-json",
+    "import_name": "pypi_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypi-json"
+  },
+  "pypi-simple": {
+    "conda_name": "pypi-simple",
+    "import_name": "pypi_simple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypi-simple"
+  },
+  "pypif": {
+    "conda_name": "pypif",
+    "import_name": "pypif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypif"
+  },
+  "pypika-gis": {
+    "conda_name": "pypika-gis",
+    "import_name": "pypika_gis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypika-gis"
+  },
+  "pypinfo": {
+    "conda_name": "pypinfo",
+    "import_name": "pypinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypinfo"
+  },
+  "pypiserver": {
+    "conda_name": "pypiserver",
+    "import_name": "pypiserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypiserver"
+  },
+  "pypistats": {
+    "conda_name": "pypistats",
+    "import_name": "pypistats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypistats"
+  },
+  "pyplaces": {
+    "conda_name": "pyplaces",
+    "import_name": "pyplaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyplaces"
+  },
+  "pypmc": {
+    "conda_name": "pypmc",
+    "import_name": "pypmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypmc"
+  },
+  "pypmml": {
+    "conda_name": "pypmml",
+    "import_name": "pypmml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypmml"
+  },
+  "pypolar": {
+    "conda_name": "pypolar",
+    "import_name": "pypolar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypolar"
+  },
+  "pyportfolioopt": {
+    "conda_name": "pyportfolioopt",
+    "import_name": "pypfopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyportfolioopt"
+  },
+  "pypots": {
+    "conda_name": "pypots",
+    "import_name": "pypots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypots"
+  },
+  "pypowder": {
+    "conda_name": "pypowder",
+    "import_name": "PyPOW",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypowder"
+  },
+  "pyppdf": {
+    "conda_name": "pyppdf",
+    "import_name": "pyppdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyppdf"
+  },
+  "pyppeteer": {
+    "conda_name": "pyppeteer",
+    "import_name": "pyppeteer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyppeteer"
+  },
+  "pyppmd": {
+    "conda_name": "pyppmd",
+    "import_name": "pyppmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyppmd"
+  },
+  "pyprctl": {
+    "conda_name": "pyprctl",
+    "import_name": "pyprctl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprctl"
+  },
+  "pyprep": {
+    "conda_name": "pyprep",
+    "import_name": "pyprep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprep"
+  },
+  "pypresseportal": {
+    "conda_name": "pypresseportal",
+    "import_name": "pypresseportal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypresseportal"
+  },
+  "pyprism": {
+    "conda_name": "pyprism",
+    "import_name": "pyPRISM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprism"
+  },
+  "pyprobables": {
+    "conda_name": "pyprobables",
+    "import_name": "probables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprobables"
+  },
+  "pyprocessmacro": {
+    "conda_name": "pyprocessmacro",
+    "import_name": "pyprocessmacro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprocessmacro"
+  },
+  "pyproject-flake8": {
+    "conda_name": "pyproject-flake8",
+    "import_name": "pflake8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject-flake8"
+  },
+  "pyproject-hooks": {
+    "conda_name": "pyproject_hooks",
+    "import_name": "pyproject_hooks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject-hooks"
+  },
+  "pyproject-local-kernel": {
+    "conda_name": "pyproject-local-kernel",
+    "import_name": "pyproject_local_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject-local-kernel"
+  },
+  "pyproject-metadata": {
+    "conda_name": "pyproject-metadata",
+    "import_name": "pyproject_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject-metadata"
+  },
+  "pyproject-parser": {
+    "conda_name": "pyproject-parser",
+    "import_name": "pyproject_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject-parser"
+  },
+  "pyproject2conda": {
+    "conda_name": "pyproject2conda",
+    "import_name": "pyproject2conda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproject2conda"
+  },
+  "pyprojroot": {
+    "conda_name": "pyprojroot",
+    "import_name": "pyprojroot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyprojroot"
+  },
+  "pypromice": {
+    "conda_name": "pypromice",
+    "import_name": "pypromice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypromice"
+  },
+  "pyproprop": {
+    "conda_name": "pyproprop",
+    "import_name": "pyproprop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproprop"
+  },
+  "pyproximal": {
+    "conda_name": "pyproximal",
+    "import_name": "pyproximal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyproximal"
+  },
+  "pypsa": {
+    "conda_name": "pypsa",
+    "import_name": "pypsa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypsa"
+  },
+  "pypsa2smspp": {
+    "conda_name": "pypsa2smspp",
+    "import_name": "pypsa2smspp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypsa2smspp"
+  },
+  "pypsexec": {
+    "conda_name": "pypsexec",
+    "import_name": "pypsexec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypsexec"
+  },
+  "pypugjs": {
+    "conda_name": "pypugjs",
+    "import_name": "pypugjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypugjs"
+  },
+  "pypulse": {
+    "conda_name": "pypulse",
+    "import_name": "pypulse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypulse"
+  },
+  "pypushflow": {
+    "conda_name": "pypushflow",
+    "import_name": "pypushflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypushflow"
+  },
+  "pypydispatcher": {
+    "conda_name": "pypydispatcher",
+    "import_name": "pydispatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypydispatcher"
+  },
+  "pypyr": {
+    "conda_name": "pypyr",
+    "import_name": "pypyr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pypyr"
+  },
+  "pyqalloy": {
+    "conda_name": "pyqalloy",
+    "import_name": "pyqalloy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqalloy"
+  },
+  "pyqg-jax": {
+    "conda_name": "pyqg-jax",
+    "import_name": "pyqg_jax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqg-jax"
+  },
+  "pyqgc": {
+    "conda_name": "pyqgc",
+    "import_name": "pyqgc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqgc"
+  },
+  "pyqode-core": {
+    "conda_name": "pyqode.core",
+    "import_name": "pyqode.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqode-core"
+  },
+  "pyqode-python": {
+    "conda_name": "pyqode.python",
+    "import_name": "pyqode.python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqode-python"
+  },
+  "pyqode-qt": {
+    "conda_name": "pyqode.qt",
+    "import_name": "pyqode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqode-qt"
+  },
+  "pyqparamwidget": {
+    "conda_name": "pyqparamwidget",
+    "import_name": "pyQParamWidget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqparamwidget"
+  },
+  "pyqrcode": {
+    "conda_name": "pyqrcode",
+    "import_name": "pyqrcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqrcode"
+  },
+  "pyqstem": {
+    "conda_name": "pyqstem",
+    "import_name": "pyqstem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqstem"
+  },
+  "pyqstrat": {
+    "conda_name": "pyqstrat",
+    "import_name": "pyqstrat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqstrat"
+  },
+  "pyqt-builder": {
+    "conda_name": "pyqt-builder",
+    "import_name": "pyqtbuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqt-builder"
+  },
+  "pyqt-distutils": {
+    "conda_name": "pyqt_distutils",
+    "import_name": "pyqt_distutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqt-distutils"
+  },
+  "pyqt4": {
+    "conda_name": "pyqt",
+    "delimiter_max": "5.0.0",
+    "delimiter_min": "4.0.0",
+    "import_name": "PyQt4",
+    "mapping_source": "static",
+    "pypi_name": "pyqt4"
+  },
+  "pyqt5": {
+    "conda_name": "pyqt",
+    "delimiter_max": "6.0.0",
+    "delimiter_min": "5.0.0",
+    "import_name": "PyQt5",
+    "mapping_source": "static",
+    "pypi_name": "pyqt5"
+  },
+  "pyqtconsole": {
+    "conda_name": "pyqtconsole",
+    "import_name": "pyqtconsole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqtconsole"
+  },
+  "pyqtree": {
+    "conda_name": "pyqtree",
+    "import_name": "pyqtree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyqtree"
+  },
+  "pyquery": {
+    "conda_name": "pyquery",
+    "import_name": "pyquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyquery"
+  },
+  "pyquickbench": {
+    "conda_name": "pyquickbench",
+    "import_name": "pyquickbench",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyquickbench"
+  },
+  "pyquicksetup": {
+    "conda_name": "pyquicksetup",
+    "import_name": "pyquicksetup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyquicksetup"
+  },
+  "pyraat": {
+    "conda_name": "pyraat",
+    "import_name": "pyraat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyraat"
+  },
+  "pyrad-mch": {
+    "conda_name": "pyrad_arm",
+    "import_name": "pyrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrad-mch"
+  },
+  "pyradios": {
+    "conda_name": "pyradios",
+    "import_name": "pyradios",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyradios"
+  },
+  "pyramid": {
+    "conda_name": "pyramid",
+    "import_name": "pyramid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid"
+  },
+  "pyramid-beaker": {
+    "conda_name": "pyramid_beaker",
+    "import_name": "pyramid_beaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-beaker"
+  },
+  "pyramid-debugtoolbar": {
+    "conda_name": "pyramid_debugtoolbar",
+    "import_name": "pyramid_debugtoolbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-debugtoolbar"
+  },
+  "pyramid-log": {
+    "conda_name": "pyramid_log",
+    "import_name": "pyramid_log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-log"
+  },
+  "pyramid-mako": {
+    "conda_name": "pyramid_mako",
+    "import_name": "pyramid_mako",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-mako"
+  },
+  "pyramid-mongodb2": {
+    "conda_name": "pyramid_mongodb2",
+    "import_name": "pyramid_mongodb2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-mongodb2"
+  },
+  "pyramid-redis": {
+    "conda_name": "pyramid_redis",
+    "import_name": "pyramid_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-redis"
+  },
+  "pyramid-redis-sessions": {
+    "conda_name": "pyramid_redis_sessions",
+    "import_name": "pyramid_redis_sessions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-redis-sessions"
+  },
+  "pyramid-session-redis": {
+    "conda_name": "pyramid_session_redis",
+    "import_name": "pyramid_session_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-session-redis"
+  },
+  "pyramid-tm": {
+    "conda_name": "pyramid_tm",
+    "import_name": "pyramid_tm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyramid-tm"
+  },
+  "pyrams": {
+    "conda_name": "pyrams",
+    "import_name": "pyrams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrams"
+  },
+  "pyrasa": {
+    "conda_name": "pyrasa",
+    "import_name": "pyrasa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrasa"
+  },
+  "pyratbay": {
+    "conda_name": "pyratbay",
+    "import_name": "pyratbay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyratbay"
+  },
+  "pyrate-limiter": {
+    "conda_name": "pyrate-limiter",
+    "import_name": "pyrate_limiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrate-limiter"
+  },
+  "pyratlib": {
+    "conda_name": "pyratlib",
+    "import_name": "pyratlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyratlib"
+  },
+  "pyre-extensions": {
+    "conda_name": "pyre-extensions",
+    "import_name": "pyre_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyre-extensions"
+  },
+  "pyreaddbc": {
+    "conda_name": "pyreaddbc",
+    "import_name": "pyreaddbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyreaddbc"
+  },
+  "pyreadline": {
+    "conda_name": "pyreadline",
+    "import_name": "pyreadline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyreadline"
+  },
+  "pyreadline3": {
+    "conda_name": "pyreadline3",
+    "import_name": "pyreadline3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyreadline3"
+  },
+  "pyreadr": {
+    "conda_name": "pyreadr",
+    "import_name": "pyreadr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyreadr"
+  },
+  "pyreadstat": {
+    "conda_name": "pyreadstat",
+    "import_name": "pyreadstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyreadstat"
+  },
+  "pyrect": {
+    "conda_name": "pyrect",
+    "import_name": "pyrect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrect"
+  },
+  "pyregeon": {
+    "conda_name": "pyregeon",
+    "import_name": "pyregeon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyregeon"
+  },
+  "pyregion": {
+    "conda_name": "pyregion",
+    "import_name": "pyregion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyregion"
+  },
+  "pyremo": {
+    "conda_name": "pyremo",
+    "import_name": "pyremo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyremo"
+  },
+  "pyrepl": {
+    "conda_name": "pyrepl",
+    "import_name": "pyrepl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrepl"
+  },
+  "pyresample": {
+    "conda_name": "pyresample",
+    "import_name": "pyresample",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyresample"
+  },
+  "pyrestcli": {
+    "conda_name": "pyrestcli",
+    "import_name": "pyrestcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrestcli"
+  },
+  "pyresttable": {
+    "conda_name": "pyresttable",
+    "import_name": "pyRestTable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyresttable"
+  },
+  "pyretis": {
+    "conda_name": "pyretis",
+    "import_name": "pyretis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyretis"
+  },
+  "pyrfa": {
+    "conda_name": "pyrfa",
+    "import_name": "pyrfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrfa"
+  },
+  "pyrfr": {
+    "conda_name": "pyrfr",
+    "import_name": "pyrfr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrfr"
+  },
+  "pyriemann": {
+    "conda_name": "pyriemann",
+    "import_name": "pyriemann",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyriemann"
+  },
+  "pyrmt": {
+    "conda_name": "pyrmt",
+    "import_name": "pyRMT",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrmt"
+  },
+  "pyro-api": {
+    "conda_name": "pyro-api",
+    "import_name": "pyroapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyro-api"
+  },
+  "pyro-ppl": {
+    "conda_name": "pyro-ppl",
+    "import_name": "pyro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyro-ppl"
+  },
+  "pyro4": {
+    "conda_name": "pyro4",
+    "import_name": "Pyro4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyro4"
+  },
+  "pyro5": {
+    "conda_name": "pyro5",
+    "import_name": "Pyro5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyro5"
+  },
+  "pyrobex": {
+    "conda_name": "pyrobex",
+    "import_name": "pyrobex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrobex"
+  },
+  "pyrobuf": {
+    "conda_name": "pyrobuf",
+    "import_name": "pyrobuf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrobuf"
+  },
+  "pyrolite": {
+    "conda_name": "pyrolite",
+    "import_name": "pyrolite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrolite"
+  },
+  "pyroma": {
+    "conda_name": "pyroma",
+    "import_name": "pyroma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyroma"
+  },
+  "pyror": {
+    "conda_name": "pyror",
+    "import_name": "pyror",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyror"
+  },
+  "pyrosar": {
+    "conda_name": "pyrosar",
+    "import_name": "pyroSAR",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrosar"
+  },
+  "pyrosm": {
+    "conda_name": "pyrosm",
+    "import_name": "pyrosm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrosm"
+  },
+  "pyrost": {
+    "conda_name": "pyrost",
+    "import_name": "pyrost",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrost"
+  },
+  "pyroute2": {
+    "conda_name": "pyroute2",
+    "import_name": "pyroute2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyroute2"
+  },
+  "pyrr": {
+    "conda_name": "pyrr",
+    "import_name": "pyrr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrr"
+  },
+  "pyrser": {
+    "conda_name": "pyrser",
+    "import_name": "pyrser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrser"
+  },
+  "pyrserve": {
+    "conda_name": "pyrserve",
+    "import_name": "pyRserve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrserve"
+  },
+  "pyrsistent": {
+    "conda_name": "pyrsistent",
+    "import_name": "pyrsistent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrsistent"
+  },
+  "pyrsm": {
+    "conda_name": "pyrsm",
+    "import_name": "pyrsm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrsm"
+  },
+  "pyrsr": {
+    "conda_name": "pyrsr",
+    "import_name": "pyrsr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrsr"
+  },
+  "pyrss2gen": {
+    "conda_name": "pyrss2gen",
+    "import_name": "PyRSS2Gen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrss2gen"
+  },
+  "pyrtcm": {
+    "conda_name": "pyrtcm",
+    "import_name": "pyrtcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrtcm"
+  },
+  "pyrtools": {
+    "conda_name": "pyrtools",
+    "import_name": "pyrtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrtools"
+  },
+  "pyrundeck": {
+    "conda_name": "pyrundeck",
+    "import_name": "pyrundeck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrundeck"
+  },
+  "pyrxiv": {
+    "conda_name": "pyrxiv",
+    "import_name": "pyrxiv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyrxiv"
+  },
+  "pysal": {
+    "conda_name": "pysal",
+    "import_name": "pysal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysal"
+  },
+  "pysaml2": {
+    "conda_name": "pysaml2",
+    "import_name": "saml2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysaml2"
+  },
+  "pysbf2": {
+    "conda_name": "pysbf2",
+    "import_name": "pysbf2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysbf2"
+  },
+  "pyscaffold": {
+    "conda_name": "pyscaffold",
+    "import_name": "pyscaffold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscaffold"
+  },
+  "pyscaffoldext-dsproject": {
+    "conda_name": "pyscaffoldext-dsproject",
+    "import_name": "pyscaffoldext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscaffoldext-dsproject"
+  },
+  "pyscaffoldext-markdown": {
+    "conda_name": "pyscaffoldext-markdown",
+    "import_name": "pyscaffoldext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscaffoldext-markdown"
+  },
+  "pyscal-rdf": {
+    "conda_name": "pyscal-rdf",
+    "import_name": "pyscal_rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscal-rdf"
+  },
+  "pyscamp": {
+    "conda_name": "pyscamp-cpu",
+    "import_name": "pyscamp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscamp"
+  },
+  "pyscenarios": {
+    "conda_name": "pyscenarios",
+    "import_name": "pyscenarios",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscenarios"
+  },
+  "pyschism": {
+    "conda_name": "pyschism",
+    "import_name": "pyschism",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyschism"
+  },
+  "pysciencemode": {
+    "conda_name": "pysciencemode",
+    "import_name": "pysciencemode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysciencemode"
+  },
+  "pyscrap": {
+    "conda_name": "pyscrap",
+    "import_name": "pyscrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscrap"
+  },
+  "pyscreener": {
+    "conda_name": "pyscreener",
+    "import_name": "pyscreener",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscreener"
+  },
+  "pyscreenshot": {
+    "conda_name": "pyscreenshot",
+    "import_name": "pyscreenshot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscreenshot"
+  },
+  "pyscreeze": {
+    "conda_name": "pyscreeze",
+    "import_name": "pyscreeze",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscreeze"
+  },
+  "pyscript-cli": {
+    "conda_name": "pyscript-cli",
+    "import_name": "pyscript",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscript-cli"
+  },
+  "pyscss": {
+    "conda_name": "pyscss",
+    "import_name": "scss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyscss"
+  },
+  "pysd": {
+    "conda_name": "pysd",
+    "import_name": "pysd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysd"
+  },
+  "pyseaweed": {
+    "conda_name": "pyseaweed",
+    "import_name": "pyseaweed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyseaweed"
+  },
+  "pysentiment2": {
+    "conda_name": "pysentiment2",
+    "import_name": "pysentiment2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysentiment2"
+  },
+  "pysepal": {
+    "conda_name": "pysepal",
+    "import_name": "pysepal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysepal"
+  },
+  "pyserial-labgrid": {
+    "conda_name": "pyserial-labgrid",
+    "import_name": "serial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyserial-labgrid"
+  },
+  "pyserini": {
+    "conda_name": "pyserini",
+    "import_name": "pyserini",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyserini"
+  },
+  "pysftp": {
+    "conda_name": "pysftp",
+    "import_name": "pysftp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysftp"
+  },
+  "pysgn": {
+    "conda_name": "pysgn",
+    "import_name": "pysgn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysgn"
+  },
+  "pyshark": {
+    "conda_name": "pyshark",
+    "import_name": "pyshark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshark"
+  },
+  "pysheds": {
+    "conda_name": "pysheds",
+    "import_name": "pysheds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysheds"
+  },
+  "pysher": {
+    "conda_name": "pysher",
+    "import_name": "pysher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysher"
+  },
+  "pyshex": {
+    "conda_name": "pyshex",
+    "import_name": "pyshex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshex"
+  },
+  "pyshexc": {
+    "conda_name": "pyshexc",
+    "import_name": "pyshexc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshexc"
+  },
+  "pyshortcuts": {
+    "conda_name": "pyshortcuts",
+    "import_name": "pyshortcuts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshortcuts"
+  },
+  "pyshqg": {
+    "conda_name": "pyshqg",
+    "import_name": "pyshqg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshqg"
+  },
+  "pyshtools": {
+    "conda_name": "pyshtools",
+    "import_name": "pyshtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshtools"
+  },
+  "pyshtransform": {
+    "conda_name": "pyshtransform",
+    "import_name": "pyshtransform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyshtransform"
+  },
+  "pysimpleguiqt": {
+    "conda_name": "pysimpleguiqt",
+    "import_name": "PySimpleGUIQt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysimpleguiqt"
+  },
+  "pysimpleguiweb": {
+    "conda_name": "pysimpleguiweb",
+    "import_name": "PySimpleGUIWeb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysimpleguiweb"
+  },
+  "pysimpleguiwx": {
+    "conda_name": "pysimpleguiwx",
+    "import_name": "PySimpleGUIWx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysimpleguiwx"
+  },
+  "pysindy": {
+    "conda_name": "pysindy",
+    "import_name": "pysindy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysindy"
+  },
+  "pysingular": {
+    "conda_name": "pysingular",
+    "import_name": "PySingular",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysingular"
+  },
+  "pysipfenn": {
+    "conda_name": "pysipfenn",
+    "import_name": "pysipfenn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysipfenn"
+  },
+  "pysisso": {
+    "conda_name": "pysisso",
+    "import_name": "pysisso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysisso"
+  },
+  "pyslalib": {
+    "conda_name": "pyslalib",
+    "import_name": "pyslalib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyslalib"
+  },
+  "pyslice": {
+    "conda_name": "pyslice",
+    "import_name": "pyslice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyslice"
+  },
+  "pyslim": {
+    "conda_name": "pyslim",
+    "import_name": "pyslim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyslim"
+  },
+  "pysm3": {
+    "conda_name": "pysm3",
+    "import_name": "pysm3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysm3"
+  },
+  "pysmartdl": {
+    "conda_name": "pysmartdl",
+    "import_name": "pySmartDL",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmartdl"
+  },
+  "pysmbclient": {
+    "conda_name": "pysmbclient",
+    "import_name": "smbclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmbclient"
+  },
+  "pysmi": {
+    "conda_name": "pysmi",
+    "import_name": "pysmi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmi"
+  },
+  "pysmiles": {
+    "conda_name": "pysmiles",
+    "import_name": "pysmiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmiles"
+  },
+  "pysmithchart": {
+    "conda_name": "pysmithchart",
+    "import_name": "pysmithchart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmithchart"
+  },
+  "pysmspp": {
+    "conda_name": "pysmspp",
+    "import_name": "pysmspp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysmspp"
+  },
+  "pysnmp": {
+    "conda_name": "pysnmp",
+    "import_name": "pysnmp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysnmp"
+  },
+  "pysnmpcrypto": {
+    "conda_name": "pysnmpcrypto",
+    "import_name": "pysnmpcrypto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysnmpcrypto"
+  },
+  "pysnooper": {
+    "conda_name": "pysnooper",
+    "import_name": "pysnooper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysnooper"
+  },
+  "pysocks": {
+    "conda_name": "pysocks",
+    "import_name": "socks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysocks"
+  },
+  "pysolid": {
+    "conda_name": "pysolid",
+    "import_name": "pysolid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysolid"
+  },
+  "pysonar": {
+    "conda_name": "pysonar",
+    "import_name": "pysonar_scanner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysonar"
+  },
+  "pysp2": {
+    "conda_name": "pysp2",
+    "import_name": "pysp2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysp2"
+  },
+  "pyspainmobility": {
+    "conda_name": "pyspainmobility",
+    "import_name": "pyspainmobility",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspainmobility"
+  },
+  "pyspark-asyncactions": {
+    "conda_name": "pyspark-asyncactions",
+    "import_name": "asyncactions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspark-asyncactions"
+  },
+  "pyspark-flame": {
+    "conda_name": "pyspark-flame",
+    "import_name": "pyspark_flame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspark-flame"
+  },
+  "pyspark-test": {
+    "conda_name": "pyspark-test",
+    "import_name": "pyspark_test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspark-test"
+  },
+  "pysparkling": {
+    "conda_name": "pysparkling",
+    "import_name": "pysparkling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysparkling"
+  },
+  "pysparse": {
+    "conda_name": "pysparse",
+    "import_name": "pysparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysparse"
+  },
+  "pyspartn": {
+    "conda_name": "pyspartn",
+    "import_name": "pyspartn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspartn"
+  },
+  "pyspatialstats": {
+    "conda_name": "pyspatialstats",
+    "import_name": "pyspatialstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspatialstats"
+  },
+  "pyspeckit": {
+    "conda_name": "pyspeckit",
+    "import_name": "pyspeckit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspeckit"
+  },
+  "pyspeckle": {
+    "conda_name": "pyspeckle",
+    "import_name": "pyspeckle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspeckle"
+  },
+  "pyspectral": {
+    "conda_name": "pyspectral",
+    "import_name": "pyspectral",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspectral"
+  },
+  "pyspellchecker": {
+    "conda_name": "pyspellchecker",
+    "import_name": "spellchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspellchecker"
+  },
+  "pyspelling": {
+    "conda_name": "pyspelling",
+    "import_name": "pyspelling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspelling"
+  },
+  "pyspf": {
+    "conda_name": "pyspf",
+    "import_name": "spf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspf"
+  },
+  "pyspnego": {
+    "conda_name": "pyspnego",
+    "import_name": "spnego",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyspnego"
+  },
+  "pysqlite3": {
+    "conda_name": "pysqlite3",
+    "import_name": "pysqlite3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysqlite3"
+  },
+  "pystac-client": {
+    "conda_name": "pystac-client",
+    "import_name": "pystac_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystac-client"
+  },
+  "pystache": {
+    "conda_name": "pystache",
+    "import_name": "pystache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystache"
+  },
+  "pystackreg": {
+    "conda_name": "pystackreg",
+    "import_name": "pystackreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystackreg"
+  },
+  "pystan": {
+    "conda_name": "pystan",
+    "import_name": "stan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystan"
+  },
+  "pystardb": {
+    "conda_name": "pystardb",
+    "import_name": "pyStarDB",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystardb"
+  },
+  "pystem": {
+    "conda_name": "pystem",
+    "import_name": "pystem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystem"
+  },
+  "pystencils-autodiff": {
+    "conda_name": "pystencils-autodiff",
+    "import_name": "pystencils_autodiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystencils-autodiff"
+  },
+  "pystencils-reco": {
+    "conda_name": "pystencils-reco",
+    "import_name": "pystencils_reco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystencils-reco"
+  },
+  "pystencils-walberla": {
+    "conda_name": "pystencils-walberla",
+    "import_name": "pystencils_walberla",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystencils-walberla"
+  },
+  "pysteps": {
+    "conda_name": "pysteps",
+    "import_name": "pysteps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysteps"
+  },
+  "pystoi": {
+    "conda_name": "pystoi",
+    "import_name": "pystoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystoi"
+  },
+  "pystow": {
+    "conda_name": "pystow",
+    "import_name": "pystow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystow"
+  },
+  "pystreamer": {
+    "conda_name": "pystreamer",
+    "import_name": "streamer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pystreamer"
+  },
+  "pysubgroup": {
+    "conda_name": "pysubgroup",
+    "import_name": "pysubgroup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysubgroup"
+  },
+  "pysuerga": {
+    "conda_name": "pysuerga",
+    "import_name": "pysuerga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysuerga"
+  },
+  "pysumma": {
+    "conda_name": "pysumma",
+    "import_name": "pysumma",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysumma"
+  },
+  "pysumreg": {
+    "conda_name": "pysumreg",
+    "import_name": "pysumreg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysumreg"
+  },
+  "pysurvival": {
+    "conda_name": "pysurvival",
+    "import_name": "pysurvival",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysurvival"
+  },
+  "pysvg-py3": {
+    "conda_name": "pysvg-py3",
+    "import_name": "pysvg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysvg-py3"
+  },
+  "pyswarms": {
+    "conda_name": "pyswarms",
+    "import_name": "pyswarms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyswarms"
+  },
+  "pyswashes": {
+    "conda_name": "pyswashes",
+    "import_name": "pyswashes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyswashes"
+  },
+  "pyswmm": {
+    "conda_name": "pyswmm",
+    "import_name": "pyswmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyswmm"
+  },
+  "pysyncrosim": {
+    "conda_name": "pysyncrosim",
+    "import_name": "pysyncrosim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysyncrosim"
+  },
+  "pysynphot": {
+    "conda_name": "pysynphot",
+    "import_name": "pysynphot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysynphot"
+  },
+  "pysyntect": {
+    "conda_name": "pysyntect",
+    "import_name": "syntect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pysyntect"
+  },
+  "pytablewriter": {
+    "conda_name": "pytablewriter",
+    "import_name": "pytablewriter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytablewriter"
+  },
+  "pytalises": {
+    "conda_name": "pytalises",
+    "import_name": "pytalises",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytalises"
+  },
+  "pytao": {
+    "conda_name": "pytao",
+    "import_name": "pytao",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytao"
+  },
+  "pytas": {
+    "conda_name": "pytas",
+    "import_name": "pytas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytas"
+  },
+  "pytask-environment": {
+    "conda_name": "pytask-environment",
+    "import_name": "pytask_environment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-environment"
+  },
+  "pytask-julia": {
+    "conda_name": "pytask-julia",
+    "import_name": "pytask_julia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-julia"
+  },
+  "pytask-latex": {
+    "conda_name": "pytask-latex",
+    "import_name": "pytask_latex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-latex"
+  },
+  "pytask-parallel": {
+    "conda_name": "pytask-parallel",
+    "import_name": "pytask_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-parallel"
+  },
+  "pytask-r": {
+    "conda_name": "pytask-r",
+    "import_name": "pytask_r",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-r"
+  },
+  "pytask-stata": {
+    "conda_name": "pytask-stata",
+    "import_name": "pytask_stata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytask-stata"
+  },
+  "pytcr": {
+    "conda_name": "pytcr",
+    "import_name": "tcr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytcr"
+  },
+  "pytcs": {
+    "conda_name": "pytcs",
+    "import_name": "pytcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytcs"
+  },
+  "pytcube": {
+    "conda_name": "pytcube",
+    "import_name": "pytcube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytcube"
+  },
+  "pytdigest": {
+    "conda_name": "pytdigest",
+    "import_name": "pytdigest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytdigest"
+  },
+  "pytdlm": {
+    "conda_name": "pytdlm",
+    "import_name": "TDLM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytdlm"
+  },
+  "pyte": {
+    "conda_name": "pyte",
+    "import_name": "pyte",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyte"
+  },
+  "pytef": {
+    "conda_name": "pytef",
+    "import_name": "pyTEF",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytef"
+  },
+  "pytemlib": {
+    "conda_name": "pytemlib",
+    "import_name": "pyTEMlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytemlib"
+  },
+  "pytermgui": {
+    "conda_name": "pytermgui",
+    "import_name": "pytermgui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytermgui"
+  },
+  "pytest-aio": {
+    "conda_name": "pytest-aio",
+    "import_name": "pytest_aio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-aio"
+  },
+  "pytest-aiohttp": {
+    "conda_name": "pytest-aiohttp",
+    "import_name": "pytest_aiohttp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-aiohttp"
+  },
+  "pytest-alembic": {
+    "conda_name": "pytest-alembic",
+    "import_name": "pytest_alembic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-alembic"
+  },
+  "pytest-arraydiff": {
+    "conda_name": "pytest-arraydiff",
+    "import_name": "pytest_arraydiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-arraydiff"
+  },
+  "pytest-asdf-plugin": {
+    "conda_name": "pytest-asdf-plugin",
+    "import_name": "pytest_asdf_plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-asdf-plugin"
+  },
+  "pytest-astropy-header": {
+    "conda_name": "pytest-astropy-header",
+    "import_name": "pytest_astropy_header",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-astropy-header"
+  },
+  "pytest-asyncio-cooperative": {
+    "conda_name": "pytest-asyncio-cooperative",
+    "import_name": "pytest_asyncio_cooperative",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-asyncio-cooperative"
+  },
+  "pytest-attrib": {
+    "conda_name": "pytest-attrib",
+    "import_name": "pytest_attrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-attrib"
+  },
+  "pytest-azurepipelines": {
+    "conda_name": "pytest-azurepipelines",
+    "import_name": "pytest_azurepipelines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-azurepipelines"
+  },
+  "pytest-base-url": {
+    "conda_name": "pytest-base-url",
+    "import_name": "pytest_base_url",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-base-url"
+  },
+  "pytest-beartype": {
+    "conda_name": "pytest-beartype",
+    "import_name": "pytest_beartype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-beartype"
+  },
+  "pytest-benchmark": {
+    "conda_name": "pytest-benchmark",
+    "import_name": "pytest_benchmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-benchmark"
+  },
+  "pytest-cache": {
+    "conda_name": "pytest-cache",
+    "import_name": "pytest_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cache"
+  },
+  "pytest-cases": {
+    "conda_name": "pytest-cases",
+    "import_name": "pytest_cases",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cases"
+  },
+  "pytest-catchlog": {
+    "conda_name": "pytest-catchlog",
+    "import_name": "pytest_catchlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-catchlog"
+  },
+  "pytest-chalice": {
+    "conda_name": "pytest-chalice",
+    "import_name": "pytest_chalice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-chalice"
+  },
+  "pytest-check-links": {
+    "conda_name": "pytest-check-links",
+    "import_name": "pytest_check_links",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-check-links"
+  },
+  "pytest-clarity": {
+    "conda_name": "pytest-clarity",
+    "import_name": "pytest_clarity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-clarity"
+  },
+  "pytest-click": {
+    "conda_name": "pytest-click",
+    "import_name": "pytest_click",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-click"
+  },
+  "pytest-cloud": {
+    "conda_name": "pytest-cloud",
+    "import_name": "pytest_cloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cloud"
+  },
+  "pytest-codeblocks": {
+    "conda_name": "pytest-codeblocks",
+    "import_name": "pytest_codeblocks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-codeblocks"
+  },
+  "pytest-console-scripts": {
+    "conda_name": "pytest-console-scripts",
+    "import_name": "pytest_console_scripts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-console-scripts"
+  },
+  "pytest-cookies": {
+    "conda_name": "pytest-cookies",
+    "import_name": "pytest_cookies",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cookies"
+  },
+  "pytest-copie": {
+    "conda_name": "pytest-copie",
+    "import_name": "pytest_copie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-copie"
+  },
+  "pytest-cpp": {
+    "conda_name": "pytest-cpp",
+    "import_name": "pytest_cpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cpp"
+  },
+  "pytest-csv": {
+    "conda_name": "pytest-csv",
+    "import_name": "pytest_csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-csv"
+  },
+  "pytest-custom-exit-code": {
+    "conda_name": "pytest-custom-exit-code",
+    "import_name": "pytest_custom_exit_code",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-custom-exit-code"
+  },
+  "pytest-cython": {
+    "conda_name": "pytest-cython",
+    "import_name": "pytest_cython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-cython"
+  },
+  "pytest-datadir": {
+    "conda_name": "pytest-datadir",
+    "import_name": "pytest_datadir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-datadir"
+  },
+  "pytest-deadfixtures": {
+    "conda_name": "pytest-deadfixtures",
+    "import_name": "pytest_deadfixtures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-deadfixtures"
+  },
+  "pytest-dependency": {
+    "conda_name": "pytest-dependency",
+    "import_name": "pytest_dependency",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-dependency"
+  },
+  "pytest-django": {
+    "conda_name": "pytest-django",
+    "import_name": "pytest_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-django"
+  },
+  "pytest-django-haystack": {
+    "conda_name": "pytest-django-haystack",
+    "import_name": "pytest_django_haystack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-django-haystack"
+  },
+  "pytest-doctestplus": {
+    "conda_name": "pytest-doctestplus",
+    "import_name": "pytest_doctestplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-doctestplus"
+  },
+  "pytest-dotenv": {
+    "conda_name": "pytest-dotenv",
+    "import_name": "pytest_dotenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-dotenv"
+  },
+  "pytest-echo": {
+    "conda_name": "pytest-echo",
+    "import_name": "pytest_echo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-echo"
+  },
+  "pytest-env": {
+    "conda_name": "pytest-env",
+    "import_name": "pytest_env.plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-env"
+  },
+  "pytest-executable": {
+    "conda_name": "pytest-executable",
+    "import_name": "pytest_executable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-executable"
+  },
+  "pytest-fail-slow": {
+    "conda_name": "pytest-fail-slow",
+    "import_name": "pytest_fail_slow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-fail-slow"
+  },
+  "pytest-filter-subpackage": {
+    "conda_name": "pytest-filter-subpackage",
+    "import_name": "pytest_filter_subpackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-filter-subpackage"
+  },
+  "pytest-fixture-config": {
+    "conda_name": "pytest-fixture-config",
+    "import_name": "pytest_fixture_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-fixture-config"
+  },
+  "pytest-flake8": {
+    "conda_name": "pytest-flake8",
+    "import_name": "pytest_flake8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-flake8"
+  },
+  "pytest-flakes": {
+    "conda_name": "pytest-flakes",
+    "import_name": "pytest_flakes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-flakes"
+  },
+  "pytest-flask": {
+    "conda_name": "pytest-flask",
+    "import_name": "pytest_flask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-flask"
+  },
+  "pytest-flask-sqlalchemy": {
+    "conda_name": "pytest-flask-sqlalchemy",
+    "import_name": "pytest_flask_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-flask-sqlalchemy"
+  },
+  "pytest-forked": {
+    "conda_name": "pytest-forked",
+    "import_name": "pytest_forked",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-forked"
+  },
+  "pytest-freezegun": {
+    "conda_name": "pytest-freezegun",
+    "import_name": "pytest_freezegun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-freezegun"
+  },
+  "pytest-freezer": {
+    "conda_name": "pytest-freezer",
+    "import_name": "pytest_freezer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-freezer"
+  },
+  "pytest-gee": {
+    "conda_name": "pytest-gee",
+    "import_name": "pytest_gee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-gee"
+  },
+  "pytest-harvest": {
+    "conda_name": "pytest-harvest",
+    "import_name": "pytest_harvest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-harvest"
+  },
+  "pytest-helpers-namespace": {
+    "conda_name": "pytest-helpers-namespace",
+    "import_name": "pytest_helpers_namespace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-helpers-namespace"
+  },
+  "pytest-html": {
+    "conda_name": "pytest-html",
+    "import_name": "pytest_html",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-html"
+  },
+  "pytest-httpx": {
+    "conda_name": "pytest-httpx",
+    "import_name": "pytest_httpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-httpx"
+  },
+  "pytest-icdiff": {
+    "conda_name": "pytest-icdiff",
+    "import_name": "pytest_icdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-icdiff"
+  },
+  "pytest-ignore-flaky": {
+    "conda_name": "pytest-ignore-flaky",
+    "import_name": "pytest_ignore_flaky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-ignore-flaky"
+  },
+  "pytest-instafail": {
+    "conda_name": "pytest-instafail",
+    "import_name": "pytest_instafail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-instafail"
+  },
+  "pytest-json": {
+    "conda_name": "pytest-json",
+    "import_name": "pytest_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-json"
+  },
+  "pytest-json-report": {
+    "conda_name": "pytest-json-report",
+    "import_name": "pytest_jsonreport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-json-report"
+  },
+  "pytest-lazy-fixture": {
+    "conda_name": "pytest-lazy-fixture",
+    "import_name": "pytest_lazyfixture",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-lazy-fixture"
+  },
+  "pytest-lazy-fixtures": {
+    "conda_name": "pytest-lazy-fixtures",
+    "import_name": "pytest_lazy_fixtures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-lazy-fixtures"
+  },
+  "pytest-localftpserver": {
+    "conda_name": "pytest-localftpserver",
+    "import_name": "pytest_localftpserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-localftpserver"
+  },
+  "pytest-localserver": {
+    "conda_name": "pytest-localserver",
+    "import_name": "pytest_localserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-localserver"
+  },
+  "pytest-localstack": {
+    "conda_name": "pytest-localstack",
+    "import_name": "pytest_localstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-localstack"
+  },
+  "pytest-loguru": {
+    "conda_name": "pytest-loguru",
+    "import_name": "pytest_loguru",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-loguru"
+  },
+  "pytest-memray": {
+    "conda_name": "pytest-memray",
+    "import_name": "pytest_memray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-memray"
+  },
+  "pytest-metadata": {
+    "conda_name": "pytest-metadata",
+    "import_name": "pytest_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-metadata"
+  },
+  "pytest-mock": {
+    "conda_name": "pytest-mock",
+    "import_name": "pytest_mock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-mock"
+  },
+  "pytest-mpi": {
+    "conda_name": "pytest-mpi",
+    "import_name": "pytest_mpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-mpi"
+  },
+  "pytest-mypy": {
+    "conda_name": "pytest-mypy",
+    "import_name": "pytest_mypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-mypy"
+  },
+  "pytest-mypy-plugins": {
+    "conda_name": "pytest-mypy-plugins",
+    "import_name": "pytest_mypy_plugins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-mypy-plugins"
+  },
+  "pytest-notification": {
+    "conda_name": "pytest-notification",
+    "import_name": "pytest_notification",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-notification"
+  },
+  "pytest-nunit": {
+    "conda_name": "pytest-nunit",
+    "import_name": "pytest_nunit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-nunit"
+  },
+  "pytest-openfiles": {
+    "conda_name": "pytest-openfiles",
+    "import_name": "pytest_openfiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-openfiles"
+  },
+  "pytest-parallel": {
+    "conda_name": "pytest-parallel",
+    "import_name": "pytest_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-parallel"
+  },
+  "pytest-pep8": {
+    "conda_name": "pytest-pep8",
+    "import_name": "pytest_pep8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-pep8"
+  },
+  "pytest-picked": {
+    "conda_name": "pytest-picked",
+    "import_name": "pytest_picked",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-picked"
+  },
+  "pytest-playwright": {
+    "conda_name": "pytest-playwright",
+    "import_name": "pytest_playwright",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-playwright"
+  },
+  "pytest-plus": {
+    "conda_name": "pytest-plus",
+    "import_name": "pytest_plus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-plus"
+  },
+  "pytest-postgresql": {
+    "conda_name": "pytest-postgresql",
+    "import_name": "pytest_postgresql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-postgresql"
+  },
+  "pytest-profiling": {
+    "conda_name": "pytest-profiling",
+    "import_name": "pytest_profiling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-profiling"
+  },
+  "pytest-pylint": {
+    "conda_name": "pytest-pylint",
+    "import_name": "pytest_pylint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-pylint"
+  },
+  "pytest-pythonpath": {
+    "conda_name": "pytest-pythonpath",
+    "import_name": "pytest_pythonpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-pythonpath"
+  },
+  "pytest-pytorch": {
+    "conda_name": "pytest-pytorch",
+    "import_name": "pytest_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-pytorch"
+  },
+  "pytest-pyvista": {
+    "conda_name": "pytest-pyvista",
+    "import_name": "pytest_pyvista",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-pyvista"
+  },
+  "pytest-qt": {
+    "conda_name": "pytest-qt",
+    "import_name": "pytestqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-qt"
+  },
+  "pytest-raises": {
+    "conda_name": "pytest-raises",
+    "import_name": "pytest_raises",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-raises"
+  },
+  "pytest-randomly": {
+    "conda_name": "pytest-randomly",
+    "import_name": "pytest_randomly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-randomly"
+  },
+  "pytest-redis": {
+    "conda_name": "pytest-redis",
+    "import_name": "pytest_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-redis"
+  },
+  "pytest-regressions": {
+    "conda_name": "pytest-regressions",
+    "import_name": "pytest_regressions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-regressions"
+  },
+  "pytest-remote-response": {
+    "conda_name": "pytest-remote-response",
+    "import_name": "pytest_response",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-remote-response"
+  },
+  "pytest-remotedata": {
+    "conda_name": "pytest-remotedata",
+    "import_name": "pytest_remotedata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-remotedata"
+  },
+  "pytest-replay": {
+    "conda_name": "pytest-replay",
+    "import_name": "pytest_replay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-replay"
+  },
+  "pytest-reportlog": {
+    "conda_name": "pytest-reportlog",
+    "import_name": "pytest_reportlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-reportlog"
+  },
+  "pytest-reraise": {
+    "conda_name": "pytest-reraise",
+    "import_name": "pytest_reraise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-reraise"
+  },
+  "pytest-rerunfailures": {
+    "conda_name": "pytest-rerunfailures",
+    "import_name": "pytest_rerunfailures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-rerunfailures"
+  },
+  "pytest-retry": {
+    "conda_name": "pytest-retry",
+    "import_name": "pytest_retry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-retry"
+  },
+  "pytest-rich": {
+    "conda_name": "pytest-rich",
+    "import_name": "pytest_rich",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-rich"
+  },
+  "pytest-ruff": {
+    "conda_name": "pytest_ruff",
+    "import_name": "pytest_ruff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-ruff"
+  },
+  "pytest-run-parallel": {
+    "conda_name": "pytest-run-parallel",
+    "import_name": "pytest_run_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-run-parallel"
+  },
+  "pytest-selenium": {
+    "conda_name": "pytest-selenium",
+    "import_name": "pytest_selenium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-selenium"
+  },
+  "pytest-server-fixtures": {
+    "conda_name": "pytest-server-fixtures",
+    "import_name": "pytest_server_fixtures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-server-fixtures"
+  },
+  "pytest-session2file": {
+    "conda_name": "pytest-session2file",
+    "import_name": "pytest_session2file",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-session2file"
+  },
+  "pytest-sftpserver": {
+    "conda_name": "pytest-sftpserver",
+    "import_name": "pytest_sftpserver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-sftpserver"
+  },
+  "pytest-shell": {
+    "conda_name": "pytest-shell",
+    "import_name": "pytest_shell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-shell"
+  },
+  "pytest-shutil": {
+    "conda_name": "pytest-shutil",
+    "import_name": "pytest_shutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-shutil"
+  },
+  "pytest-skip-slow": {
+    "conda_name": "pytest-skip-slow",
+    "import_name": "pytest_skip_slow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-skip-slow"
+  },
+  "pytest-snapshot": {
+    "conda_name": "pytest-snapshot",
+    "import_name": "pytest_snapshot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-snapshot"
+  },
+  "pytest-socket": {
+    "conda_name": "pytest-socket",
+    "import_name": "pytest_socket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-socket"
+  },
+  "pytest-speed": {
+    "conda_name": "pytest-speed",
+    "import_name": "pytest_speed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-speed"
+  },
+  "pytest-sphinx": {
+    "conda_name": "pytest-sphinx",
+    "import_name": "pytest_sphinx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-sphinx"
+  },
+  "pytest-subprocess": {
+    "conda_name": "pytest-subprocess",
+    "import_name": "pytest_subprocess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-subprocess"
+  },
+  "pytest-sugar": {
+    "conda_name": "pytest-sugar",
+    "import_name": "pytest_sugar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-sugar"
+  },
+  "pytest-testinfra": {
+    "conda_name": "pytest-testinfra",
+    "import_name": "testinfra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-testinfra"
+  },
+  "pytest-testmon": {
+    "conda_name": "pytest-testmon",
+    "import_name": "testmon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-testmon"
+  },
+  "pytest-timeout": {
+    "conda_name": "pytest-timeout",
+    "import_name": "pytest_timeout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-timeout"
+  },
+  "pytest-tornado5": {
+    "conda_name": "pytest-tornado5",
+    "import_name": "pytest_tornado5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-tornado5"
+  },
+  "pytest-tornasync": {
+    "conda_name": "pytest-tornasync",
+    "import_name": "pytest_tornasync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-tornasync"
+  },
+  "pytest-trio": {
+    "conda_name": "pytest-trio",
+    "import_name": "pytest_trio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-trio"
+  },
+  "pytest-twisted": {
+    "conda_name": "pytest-twisted",
+    "import_name": "pytest_twisted",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-twisted"
+  },
+  "pytest-unordered": {
+    "conda_name": "pytest-unordered",
+    "import_name": "pytest_unordered",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-unordered"
+  },
+  "pytest-variables": {
+    "conda_name": "pytest-variables",
+    "import_name": "pytest_variables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-variables"
+  },
+  "pytest-vcr": {
+    "conda_name": "pytest-vcr",
+    "import_name": "pytest_vcr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-vcr"
+  },
+  "pytest-verbose-parametrize": {
+    "conda_name": "pytest-verbose-parametrize",
+    "import_name": "pytest_verbose_parametrize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-verbose-parametrize"
+  },
+  "pytest-virtualenv": {
+    "conda_name": "pytest-virtualenv",
+    "import_name": "pytest_virtualenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-virtualenv"
+  },
+  "pytest-watch": {
+    "conda_name": "pytest-watch",
+    "import_name": "pytest_watch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-watch"
+  },
+  "pytest-watcher": {
+    "conda_name": "pytest-watcher",
+    "import_name": "pytest_watcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-watcher"
+  },
+  "pytest-workflow": {
+    "conda_name": "pytest-workflow",
+    "import_name": "pytest_workflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-workflow"
+  },
+  "pytest-xdist": {
+    "conda_name": "pytest-xdist",
+    "import_name": "xdist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-xdist"
+  },
+  "pytest-xflaky": {
+    "conda_name": "pytest-xflaky",
+    "import_name": "pytest_xflaky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-xflaky"
+  },
+  "pytest-xprocess": {
+    "conda_name": "pytest-xprocess",
+    "import_name": "xprocess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-xprocess"
+  },
+  "pytest-xvfb": {
+    "conda_name": "pytest-xvfb",
+    "import_name": "pytest_xvfb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytest-xvfb"
+  },
+  "pytestify": {
+    "conda_name": "pytestify",
+    "import_name": "pytestify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytestify"
+  },
+  "pytextgrid": {
+    "conda_name": "pytextgrid",
+    "import_name": "pytextgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytextgrid"
+  },
+  "pytextrank": {
+    "conda_name": "pytextrank",
+    "import_name": "pytextrank",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytextrank"
+  },
+  "pythae": {
+    "conda_name": "pythae",
+    "import_name": "pythae",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythae"
+  },
+  "pythainlp": {
+    "conda_name": "pythainlp",
+    "import_name": "pythainlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythainlp"
+  },
+  "pythermo": {
+    "conda_name": "pythermo",
+    "import_name": "pythermo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythermo"
+  },
+  "pythia-datasets": {
+    "conda_name": "pythia-datasets",
+    "import_name": "pythia_datasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythia-datasets"
+  },
+  "pythialabelgenerator": {
+    "conda_name": "pythialabelgenerator",
+    "import_name": "labelgenerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythialabelgenerator"
+  },
+  "pythiaphylopredictor": {
+    "conda_name": "pythiaphylopredictor",
+    "import_name": "pypythia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythiaphylopredictor"
+  },
+  "python-ags4": {
+    "conda_name": "python-ags4",
+    "import_name": "python_ags4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-ags4"
+  },
+  "python-augeas": {
+    "conda_name": "python-augeas",
+    "import_name": "augeas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-augeas"
+  },
+  "python-barcode": {
+    "conda_name": "python-barcode",
+    "import_name": "barcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-barcode"
+  },
+  "python-baseconv": {
+    "conda_name": "python-baseconv",
+    "import_name": "baseconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-baseconv"
+  },
+  "python-batch-runner": {
+    "conda_name": "python-batch-runner",
+    "import_name": "pyrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-batch-runner"
+  },
+  "python-benedict": {
+    "conda_name": "python-benedict",
+    "import_name": "benedict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-benedict"
+  },
+  "python-bidi": {
+    "conda_name": "python-bidi",
+    "import_name": "bidi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-bidi"
+  },
+  "python-box": {
+    "conda_name": "python-box",
+    "import_name": "box",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-box"
+  },
+  "python-calamine": {
+    "conda_name": "python-calamine",
+    "import_name": "python_calamine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-calamine"
+  },
+  "python-can": {
+    "conda_name": "python-can",
+    "import_name": "can",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-can"
+  },
+  "python-cas": {
+    "conda_name": "python-cas",
+    "import_name": "cas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-cas"
+  },
+  "python-casacore": {
+    "conda_name": "python-casacore",
+    "import_name": "casacore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-casacore"
+  },
+  "python-certifi-win32": {
+    "conda_name": "python-certifi-win32",
+    "import_name": "certifi_win32",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-certifi-win32"
+  },
+  "python-cinderclient": {
+    "conda_name": "python-cinderclient",
+    "import_name": "cinderclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-cinderclient"
+  },
+  "python-cmethods": {
+    "conda_name": "python_cmethods",
+    "import_name": "cmethods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-cmethods"
+  },
+  "python-cmr": {
+    "conda_name": "python-cmr",
+    "import_name": "cmr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-cmr"
+  },
+  "python-codon-tables": {
+    "conda_name": "python-codon-tables",
+    "import_name": "python_codon_tables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-codon-tables"
+  },
+  "python-configuration": {
+    "conda_name": "python-configuration",
+    "import_name": "config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-configuration"
+  },
+  "python-constraint": {
+    "conda_name": "python-constraint",
+    "import_name": "constraint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-constraint"
+  },
+  "python-consul2": {
+    "conda_name": "python-consul2",
+    "import_name": "consul",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-consul2"
+  },
+  "python-coveralls": {
+    "conda_name": "python-coveralls",
+    "import_name": "coveralls",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-coveralls"
+  },
+  "python-cpl": {
+    "conda_name": "python-cpl",
+    "import_name": "cpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-cpl"
+  },
+  "python-crontab": {
+    "conda_name": "python-crontab",
+    "import_name": "crontab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-crontab"
+  },
+  "python-daemon": {
+    "conda_name": "python-daemon",
+    "import_name": "daemon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-daemon"
+  },
+  "python-decouple": {
+    "conda_name": "python-decouple",
+    "import_name": "decouple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-decouple"
+  },
+  "python-designateclient": {
+    "conda_name": "python-designateclient",
+    "import_name": "designateclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-designateclient"
+  },
+  "python-docker": {
+    "conda_name": "python-docker",
+    "import_name": "python_docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-docker"
+  },
+  "python-docs-theme": {
+    "conda_name": "python-docs-theme",
+    "import_name": "python_docs_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-docs-theme"
+  },
+  "python-docx": {
+    "conda_name": "python-docx",
+    "import_name": "docx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-docx"
+  },
+  "python-dwca-reader": {
+    "conda_name": "python-dwca-reader",
+    "import_name": "dwca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-dwca-reader"
+  },
+  "python-editor": {
+    "conda_name": "python-editor",
+    "import_name": "editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-editor"
+  },
+  "python-fileinspector": {
+    "conda_name": "fileinspector",
+    "import_name": "fileinspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-fileinspector"
+  },
+  "python-flint": {
+    "conda_name": "python-flint",
+    "import_name": "flint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-flint"
+  },
+  "python-frontmatter": {
+    "conda_name": "python-frontmatter",
+    "import_name": "frontmatter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-frontmatter"
+  },
+  "python-fsutil": {
+    "conda_name": "python-fsutil",
+    "import_name": "fsutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-fsutil"
+  },
+  "python-geotiepoints": {
+    "conda_name": "python-geotiepoints",
+    "import_name": "geotiepoints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-geotiepoints"
+  },
+  "python-gflags": {
+    "conda_name": "python-gflags",
+    "import_name": "gflags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-gflags"
+  },
+  "python-gilt": {
+    "conda_name": "python-gilt",
+    "import_name": "gilt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-gilt"
+  },
+  "python-gist": {
+    "conda_name": "python-gist",
+    "import_name": "gist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-gist"
+  },
+  "python-gitlab": {
+    "conda_name": "python-gitlab",
+    "import_name": "gitlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-gitlab"
+  },
+  "python-glanceclient": {
+    "conda_name": "python-glanceclient",
+    "import_name": "glanceclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-glanceclient"
+  },
+  "python-gmail": {
+    "conda_name": "python-gmail",
+    "import_name": "gmail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-gmail"
+  },
+  "python-graphblas": {
+    "conda_name": "python-graphblas",
+    "import_name": "graphblas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-graphblas"
+  },
+  "python-hcl2": {
+    "conda_name": "python-hcl2",
+    "import_name": "hcl2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-hcl2"
+  },
+  "python-highcharts": {
+    "conda_name": "python-highcharts",
+    "import_name": "highcharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-highcharts"
+  },
+  "python-hookman": {
+    "conda_name": "python-hookman",
+    "import_name": "hookman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-hookman"
+  },
+  "python-http-client": {
+    "conda_name": "python_http_client",
+    "import_name": "python_http_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-http-client"
+  },
+  "python-interface": {
+    "conda_name": "python-interface",
+    "import_name": "interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-interface"
+  },
+  "python-io-wrapper": {
+    "conda_name": "python-io-wrapper",
+    "import_name": "io_wrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-io-wrapper"
+  },
+  "python-ipware": {
+    "conda_name": "python-ipware",
+    "import_name": "python_ipware",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-ipware"
+  },
+  "python-irodsclient": {
+    "conda_name": "python-irodsclient",
+    "import_name": "irods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-irodsclient"
+  },
+  "python-ironicclient": {
+    "conda_name": "python-ironicclient",
+    "import_name": "ironicclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-ironicclient"
+  },
+  "python-iso639": {
+    "conda_name": "python-iso639",
+    "import_name": "iso639",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-iso639"
+  },
+  "python-javabridge": {
+    "conda_name": "python-javabridge",
+    "import_name": "javabridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-javabridge"
+  },
+  "python-jenkins": {
+    "conda_name": "python-jenkins",
+    "import_name": "jenkins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jenkins"
+  },
+  "python-jose": {
+    "conda_name": "python-jose",
+    "import_name": "jose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jose"
+  },
+  "python-jose-cryptodome": {
+    "conda_name": "python-jose-cryptodome",
+    "import_name": "jose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jose-cryptodome"
+  },
+  "python-json-logger": {
+    "conda_name": "python-json-logger",
+    "import_name": "pythonjsonlogger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-json-logger"
+  },
+  "python-jsonpath": {
+    "conda_name": "python-jsonpath",
+    "import_name": "jsonpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jsonpath"
+  },
+  "python-jsonrpc-server": {
+    "conda_name": "python-jsonrpc-server",
+    "import_name": "pyls_jsonrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jsonrpc-server"
+  },
+  "python-jsonschema-objects": {
+    "conda_name": "python_jsonschema_objects",
+    "import_name": "python_jsonschema_objects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-jsonschema-objects"
+  },
+  "python-kasa": {
+    "conda_name": "python-kasa",
+    "import_name": "kasa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-kasa"
+  },
+  "python-keycloak": {
+    "conda_name": "python-keycloak",
+    "import_name": "keycloak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-keycloak"
+  },
+  "python-keystoneclient": {
+    "conda_name": "python-keystoneclient",
+    "import_name": "keystoneclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-keystoneclient"
+  },
+  "python-lambda-4dn": {
+    "conda_name": "python-lambda-4dn",
+    "import_name": "aws_lambda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-lambda-4dn"
+  },
+  "python-levenshtein": {
+    "conda_name": "python-levenshtein",
+    "import_name": "Levenshtein",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-levenshtein"
+  },
+  "python-liquid": {
+    "conda_name": "python-liquid",
+    "import_name": "liquid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-liquid"
+  },
+  "python-localvenv-kernel": {
+    "conda_name": "python-localvenv-kernel",
+    "import_name": "localvenv_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-localvenv-kernel"
+  },
+  "python-logging-rabbitmq": {
+    "conda_name": "python-logging-rabbitmq",
+    "import_name": "python_logging_rabbitmq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-logging-rabbitmq"
+  },
+  "python-logstash": {
+    "conda_name": "python-logstash",
+    "import_name": "logstash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-logstash"
+  },
+  "python-logstash-async": {
+    "conda_name": "python-logstash-async",
+    "import_name": "logstash_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-logstash-async"
+  },
+  "python-louvain": {
+    "conda_name": "python-louvain",
+    "import_name": "community",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-louvain"
+  },
+  "python-lsp-black": {
+    "conda_name": "python-lsp-black",
+    "import_name": "pylsp_black",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-lsp-black"
+  },
+  "python-lsp-jsonrpc": {
+    "conda_name": "python-lsp-jsonrpc",
+    "import_name": "pylsp_jsonrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-lsp-jsonrpc"
+  },
+  "python-lzo": {
+    "conda_name": "python-lzo",
+    "import_name": "lzo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-lzo"
+  },
+  "python-magnumclient": {
+    "conda_name": "python-magnumclient",
+    "import_name": "magnumclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-magnumclient"
+  },
+  "python-markdown-math": {
+    "conda_name": "python-markdown-math",
+    "import_name": "mdx_math",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-markdown-math"
+  },
+  "python-memcached": {
+    "conda_name": "python-memcached",
+    "import_name": "memcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-memcached"
+  },
+  "python-mimeparse": {
+    "conda_name": "python-mimeparse",
+    "import_name": "mimeparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-mimeparse"
+  },
+  "python-mistralclient": {
+    "conda_name": "python-mistralclient",
+    "import_name": "mistralclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-mistralclient"
+  },
+  "python-moa": {
+    "conda_name": "python-moa",
+    "import_name": "moa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-moa"
+  },
+  "python-monkey-business": {
+    "conda_name": "python-monkey-business",
+    "import_name": "monkeybiz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-monkey-business"
+  },
+  "python-neutronclient": {
+    "conda_name": "python-neutronclient",
+    "import_name": "neutronclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-neutronclient"
+  },
+  "python-nomad": {
+    "conda_name": "python-nomad",
+    "import_name": "nomad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-nomad"
+  },
+  "python-novaclient": {
+    "conda_name": "python-novaclient",
+    "import_name": "novaclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-novaclient"
+  },
+  "python-nvd3": {
+    "conda_name": "python-nvd3",
+    "import_name": "nvd3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-nvd3"
+  },
+  "python-oauth2": {
+    "conda_name": "python-oauth2",
+    "import_name": "oauth2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-oauth2"
+  },
+  "python-octaviaclient": {
+    "conda_name": "python-octaviaclient",
+    "import_name": "octaviaclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-octaviaclient"
+  },
+  "python-on-whales": {
+    "conda_name": "python-on-whales",
+    "import_name": "python_on_whales",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-on-whales"
+  },
+  "python-openid": {
+    "conda_name": "python-openid",
+    "import_name": "openid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-openid"
+  },
+  "python-openid2": {
+    "conda_name": "python-openid2",
+    "import_name": "openid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-openid2"
+  },
+  "python-openstackclient": {
+    "conda_name": "python-openstackclient",
+    "import_name": "openstackclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-openstackclient"
+  },
+  "python-picard": {
+    "conda_name": "python-picard",
+    "import_name": "picard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-picard"
+  },
+  "python-pkcs11": {
+    "conda_name": "python-pkcs11",
+    "import_name": "pkcs11",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-pkcs11"
+  },
+  "python-poppler": {
+    "conda_name": "python-poppler",
+    "import_name": "poppler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-poppler"
+  },
+  "python-prctl": {
+    "conda_name": "python-prctl",
+    "import_name": "prctl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-prctl"
+  },
+  "python-pseudorandom": {
+    "conda_name": "pseudorandom",
+    "import_name": "pseudorandom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-pseudorandom"
+  },
+  "python-pygaze": {
+    "conda_name": "pygaze",
+    "import_name": "pygaze",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-pygaze"
+  },
+  "python-pypi-mirror": {
+    "conda_name": "python-pypi-mirror",
+    "import_name": "pypi_mirror",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-pypi-mirror"
+  },
+  "python-qdatamatrix": {
+    "conda_name": "qdatamatrix",
+    "import_name": "qdatamatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-qdatamatrix"
+  },
+  "python-qinlingclient": {
+    "conda_name": "python-qinlingclient",
+    "import_name": "qinlingclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-qinlingclient"
+  },
+  "python-qnotifications": {
+    "conda_name": "qnotifications",
+    "import_name": "QNotifications",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-qnotifications"
+  },
+  "python-rake": {
+    "conda_name": "python-rake",
+    "import_name": "RAKE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-rake"
+  },
+  "python-rapidjson": {
+    "conda_name": "python-rapidjson",
+    "import_name": "rapidjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-rapidjson"
+  },
+  "python-redmine": {
+    "conda_name": "python-redmine",
+    "import_name": "redminelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-redmine"
+  },
+  "python-rex": {
+    "conda_name": "python-rex",
+    "import_name": "rex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-rex"
+  },
+  "python-rocksdb": {
+    "conda_name": "python-rocksdb",
+    "import_name": "rocksdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-rocksdb"
+  },
+  "python-seispy": {
+    "conda_name": "seispy",
+    "import_name": "seispy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-seispy"
+  },
+  "python-semantic-release": {
+    "conda_name": "python-semantic-release",
+    "import_name": "semantic_release",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-semantic-release"
+  },
+  "python-simpleconf": {
+    "conda_name": "python-simpleconf",
+    "import_name": "simpleconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-simpleconf"
+  },
+  "python-smail": {
+    "conda_name": "python-smail",
+    "import_name": "smail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-smail"
+  },
+  "python-snappy": {
+    "conda_name": "python-snappy",
+    "import_name": "snappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-snappy"
+  },
+  "python-sonarqube-api": {
+    "conda_name": "python-sonarqube-api",
+    "import_name": "sonarqube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-sonarqube-api"
+  },
+  "python-sscha": {
+    "conda_name": "python-sscha",
+    "import_name": "sscha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-sscha"
+  },
+  "python-stdnum": {
+    "conda_name": "python-stdnum",
+    "import_name": "stdnum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-stdnum"
+  },
+  "python-subunit": {
+    "conda_name": "python-subunit",
+    "import_name": "subunit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-subunit"
+  },
+  "python-swiftclient": {
+    "conda_name": "python-swiftclient",
+    "import_name": "swiftclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-swiftclient"
+  },
+  "python-ternary": {
+    "conda_name": "python-ternary",
+    "import_name": "ternary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-ternary"
+  },
+  "python-troveclient": {
+    "conda_name": "python-troveclient",
+    "import_name": "troveclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-troveclient"
+  },
+  "python-tsp": {
+    "conda_name": "python-tsp",
+    "import_name": "python_tsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-tsp"
+  },
+  "python-twitter": {
+    "conda_name": "python-twitter",
+    "import_name": "twitter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-twitter"
+  },
+  "python-twitter-v2": {
+    "conda_name": "python-twitter-v2",
+    "import_name": "pytwitter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-twitter-v2"
+  },
+  "python-u2flib-server": {
+    "conda_name": "python-u2flib-server",
+    "import_name": "u2flib_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-u2flib-server"
+  },
+  "python-ulid": {
+    "conda_name": "python-ulid",
+    "import_name": "ulid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-ulid"
+  },
+  "python-utilities-jsm": {
+    "conda_name": "python-utilities-jsm",
+    "import_name": "python_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-utilities-jsm"
+  },
+  "python-utils": {
+    "conda_name": "python-utils",
+    "import_name": "python_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-utils"
+  },
+  "python-vagrant": {
+    "conda_name": "python-vagrant",
+    "import_name": "vagrant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-vagrant"
+  },
+  "python-vipaccess": {
+    "conda_name": "vipaccess",
+    "import_name": "vipaccess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-vipaccess"
+  },
+  "python-xlib": {
+    "conda_name": "python-xlib",
+    "import_name": "Xlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-xlib"
+  },
+  "python-xz": {
+    "conda_name": "python-xz",
+    "import_name": "xz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-xz"
+  },
+  "python-yakh": {
+    "conda_name": "python-yakh",
+    "import_name": "yakh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python-yakh"
+  },
+  "python2-secrets": {
+    "conda_name": "python2-secrets",
+    "import_name": "secrets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python2-secrets"
+  },
+  "python3-saml": {
+    "conda_name": "python3-saml",
+    "import_name": "onelogin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "python3-saml"
+  },
+  "pythonds": {
+    "conda_name": "pythonds",
+    "import_name": "pythonds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythonds"
+  },
+  "pythonicdisort": {
+    "conda_name": "pythonicdisort",
+    "import_name": "PythonicDISORT",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythonicdisort"
+  },
+  "pythonnet": {
+    "conda_name": "pythonnet",
+    "import_name": "clr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythonnet"
+  },
+  "pythonradex": {
+    "conda_name": "pythonradex",
+    "import_name": "pythonradex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythonradex"
+  },
+  "pythreejs": {
+    "conda_name": "pythreejs",
+    "import_name": "pythreejs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythreejs"
+  },
+  "pythresh": {
+    "conda_name": "pythresh",
+    "import_name": "pythresh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythresh"
+  },
+  "pythtb": {
+    "conda_name": "pythtb",
+    "import_name": "pythtb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythtb"
+  },
+  "pythx": {
+    "conda_name": "pythx",
+    "import_name": "pythx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pythx"
+  },
+  "pytidylib": {
+    "conda_name": "pytidylib",
+    "import_name": "tidylib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytidylib"
+  },
+  "pytiff": {
+    "conda_name": "pytiff",
+    "import_name": "pytiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytiff"
+  },
+  "pytimeparse": {
+    "conda_name": "pytimeparse",
+    "import_name": "pytimeparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytimeparse"
+  },
+  "pytinytex": {
+    "conda_name": "pytinytex",
+    "import_name": "pytinytex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytinytex"
+  },
+  "pytkdocs": {
+    "conda_name": "pytkdocs",
+    "import_name": "pytkdocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytkdocs"
+  },
+  "pytmatrix": {
+    "conda_name": "pytmatrix",
+    "import_name": "pytmatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytmatrix"
+  },
+  "pytmc": {
+    "conda_name": "pytmc",
+    "import_name": "pytmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytmc"
+  },
+  "pytng": {
+    "conda_name": "pytng",
+    "import_name": "pytng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytng"
+  },
+  "pytometry": {
+    "conda_name": "pytometry",
+    "import_name": "pytometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytometry"
+  },
+  "pytoml": {
+    "conda_name": "pytoml",
+    "import_name": "pytoml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytoml"
+  },
+  "pytomoatt": {
+    "conda_name": "pytomoatt",
+    "import_name": "pytomoatt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytomoatt"
+  },
+  "pytool": {
+    "conda_name": "pytool",
+    "import_name": "pytool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytool"
+  },
+  "pytoolconfig": {
+    "conda_name": "pytoolconfig",
+    "import_name": "pytoolconfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytoolconfig"
+  },
+  "pytools": {
+    "conda_name": "pytools",
+    "import_name": "pytools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytools"
+  },
+  "pytopocomplexity": {
+    "conda_name": "pytopocomplexity",
+    "import_name": "pytopocomplexity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytopocomplexity"
+  },
+  "pytopomap": {
+    "conda_name": "pytopomap",
+    "import_name": "pytopomap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytopomap"
+  },
+  "pytorch-forecasting": {
+    "conda_name": "pytorch-forecasting",
+    "import_name": "pytorch_forecasting",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-forecasting"
+  },
+  "pytorch-frame": {
+    "conda_name": "pytorch-frame",
+    "import_name": "torch_frame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-frame"
+  },
+  "pytorch-ignite": {
+    "conda_name": "pytorch-ignite",
+    "import_name": "ignite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-ignite"
+  },
+  "pytorch-metric-learning": {
+    "conda_name": "pytorch-metric-learning",
+    "import_name": "pytorch_metric_learning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-metric-learning"
+  },
+  "pytorch-minimize": {
+    "conda_name": "pytorch-minimize",
+    "import_name": "torchmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-minimize"
+  },
+  "pytorch-model-summary": {
+    "conda_name": "pytorch-model-summary",
+    "import_name": "pytorch_model_summary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-model-summary"
+  },
+  "pytorch-msssim": {
+    "conda_name": "pytorch-msssim",
+    "import_name": "pytorch_msssim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-msssim"
+  },
+  "pytorch-pfn-extras": {
+    "conda_name": "pytorch-pfn-extras",
+    "import_name": "pytorch_pfn_extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-pfn-extras"
+  },
+  "pytorch-pretrained-bert": {
+    "conda_name": "pytorch-pretrained-bert",
+    "import_name": "pytorch_pretrained_bert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-pretrained-bert"
+  },
+  "pytorch-ranger": {
+    "conda_name": "pytorch-ranger",
+    "import_name": "pytorch_ranger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-ranger"
+  },
+  "pytorch-revgrad": {
+    "conda_name": "pytorch_revgrad",
+    "import_name": "pytorch_revgrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-revgrad"
+  },
+  "pytorch-spiking": {
+    "conda_name": "pytorch-spiking",
+    "import_name": "pytorch_spiking",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-spiking"
+  },
+  "pytorch-tabnet": {
+    "conda_name": "pytorch-tabnet",
+    "import_name": "pytorch_tabnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-tabnet"
+  },
+  "pytorch-toolbelt": {
+    "conda_name": "pytorch_toolbelt",
+    "import_name": "pytorch_toolbelt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-toolbelt"
+  },
+  "pytorch-wpe": {
+    "conda_name": "pytorch-wpe",
+    "import_name": "pytorch_wpe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorch-wpe"
+  },
+  "pytorchcv": {
+    "conda_name": "pytorchcv",
+    "import_name": "pytorchcv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorchcv"
+  },
+  "pytorchvideo": {
+    "conda_name": "pytorchvideo",
+    "import_name": "pytorchvideo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytorchvideo"
+  },
+  "pytradfri": {
+    "conda_name": "pytradfri",
+    "import_name": "pytradfri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytradfri"
+  },
+  "pytrait": {
+    "conda_name": "pytrait",
+    "import_name": "pytrait",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrait"
+  },
+  "pytransform3d": {
+    "conda_name": "pytransform3d",
+    "import_name": "pytransform3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytransform3d"
+  },
+  "pytransit": {
+    "conda_name": "pytransit",
+    "import_name": "pytransit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytransit"
+  },
+  "pytravisci": {
+    "conda_name": "pytravisci",
+    "import_name": "PyTravisCI",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytravisci"
+  },
+  "pytray": {
+    "conda_name": "pytray",
+    "import_name": "pytray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytray"
+  },
+  "pytrends": {
+    "conda_name": "pytrends",
+    "import_name": "pytrends",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrends"
+  },
+  "pytrie": {
+    "conda_name": "pytrie",
+    "import_name": "pytrie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrie"
+  },
+  "pytrinamic": {
+    "conda_name": "pytrinamic",
+    "import_name": "pytrinamic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrinamic"
+  },
+  "pytrms": {
+    "conda_name": "pytrms",
+    "import_name": "pytrms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrms"
+  },
+  "pytrunc": {
+    "conda_name": "pytrunc",
+    "import_name": "pytrunc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytrunc"
+  },
+  "pyts": {
+    "conda_name": "pyts",
+    "import_name": "pyts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyts"
+  },
+  "pytsql": {
+    "conda_name": "pytsql",
+    "import_name": "pytsql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytsql"
+  },
+  "pyttoresque": {
+    "conda_name": "pyttoresque",
+    "import_name": "pyttoresque",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyttoresque"
+  },
+  "pytups": {
+    "conda_name": "pytups",
+    "import_name": "pytups",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytups"
+  },
+  "pytweening": {
+    "conda_name": "pytweening",
+    "import_name": "pytweening",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytweening"
+  },
+  "pytzdata": {
+    "conda_name": "pytzdata",
+    "import_name": "pytzdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytzdata"
+  },
+  "pytzer": {
+    "conda_name": "pytzer",
+    "import_name": "pytzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pytzer"
+  },
+  "pyu2f": {
+    "conda_name": "pyu2f",
+    "import_name": "pyu2f",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyu2f"
+  },
+  "pyubx2": {
+    "conda_name": "pyubx2",
+    "import_name": "pyubx2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyubx2"
+  },
+  "pyubxutils": {
+    "conda_name": "pyubxutils",
+    "import_name": "pyubxutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyubxutils"
+  },
+  "pyuca": {
+    "conda_name": "pyuca",
+    "import_name": "pyuca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyuca"
+  },
+  "pyudev": {
+    "conda_name": "pyudev",
+    "import_name": "pyudev",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyudev"
+  },
+  "pyudunits2": {
+    "conda_name": "pyudunits2",
+    "import_name": "pyudunits2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyudunits2"
+  },
+  "pyunfold": {
+    "conda_name": "pyunfold",
+    "import_name": "pyunfold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyunfold"
+  },
+  "pyunigps": {
+    "conda_name": "pyunigps",
+    "import_name": "pyunigps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyunigps"
+  },
+  "pyunlocbox": {
+    "conda_name": "pyunlocbox",
+    "import_name": "pyunlocbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyunlocbox"
+  },
+  "pyunormalize": {
+    "conda_name": "pyunormalize",
+    "import_name": "pyunormalize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyunormalize"
+  },
+  "pyuoi": {
+    "conda_name": "pyuoi",
+    "import_name": "pyuoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyuoi"
+  },
+  "pyusb": {
+    "conda_name": "pyusb",
+    "import_name": "usb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyusb"
+  },
+  "pyusid": {
+    "conda_name": "pyusid",
+    "import_name": "pyUSID",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyusid"
+  },
+  "pyutilib": {
+    "conda_name": "pyutilib",
+    "import_name": "pyutilib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyutilib"
+  },
+  "pyutilsnrw": {
+    "conda_name": "pyutilsnrw",
+    "import_name": "pyutilsnrw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyutilsnrw"
+  },
+  "pyuv": {
+    "conda_name": "pyuv",
+    "import_name": "pyuv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyuv"
+  },
+  "pyuvdata": {
+    "conda_name": "pyuvdata",
+    "import_name": "pyuvdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyuvdata"
+  },
+  "pyvbmc": {
+    "conda_name": "pyvbmc",
+    "import_name": "pyvbmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvbmc"
+  },
+  "pyvcd": {
+    "conda_name": "pyvcd",
+    "import_name": "vcd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvcd"
+  },
+  "pyvcf": {
+    "conda_name": "pyvcf",
+    "import_name": "vcf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvcf"
+  },
+  "pyvideoreader": {
+    "conda_name": "pyvideoreader",
+    "import_name": "videoreader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvideoreader"
+  },
+  "pyvinecopulib": {
+    "conda_name": "pyvinecopulib",
+    "import_name": "pyvinecopulib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvinecopulib"
+  },
+  "pyvipr": {
+    "conda_name": "pyvipr",
+    "import_name": "pyvipr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvipr"
+  },
+  "pyvirtualdisplay": {
+    "conda_name": "pyvirtualdisplay",
+    "import_name": "pyvirtualdisplay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvirtualdisplay"
+  },
+  "pyvisa": {
+    "conda_name": "pyvisa",
+    "import_name": "pyvisa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvisa"
+  },
+  "pyvisa-sim": {
+    "conda_name": "pyvisa-sim",
+    "import_name": "pyvisa_sim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvisa-sim"
+  },
+  "pyvisfile": {
+    "conda_name": "pyvisfile",
+    "import_name": "pyvisfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvisfile"
+  },
+  "pyvisgraph": {
+    "conda_name": "pyvisgraph",
+    "import_name": "pyvisgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvisgraph"
+  },
+  "pyvista": {
+    "conda_name": "pyvista",
+    "import_name": "pyvista",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvista"
+  },
+  "pyvista-xarray": {
+    "conda_name": "pyvista-xarray",
+    "import_name": "pvxarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvista-xarray"
+  },
+  "pyvistaqt": {
+    "conda_name": "pyvistaqt",
+    "import_name": "pyvistaqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvistaqt"
+  },
+  "pyvitae": {
+    "conda_name": "pyvitae",
+    "import_name": "VITAE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvitae"
+  },
+  "pyviz-comms": {
+    "conda_name": "pyviz_comms",
+    "import_name": "pyviz_comms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyviz-comms"
+  },
+  "pyvkfft": {
+    "conda_name": "pyvkfft",
+    "import_name": "pyvkfft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvkfft"
+  },
+  "pyvo": {
+    "conda_name": "pyvo",
+    "import_name": "pyvo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvo"
+  },
+  "pyvoro-mmalahe": {
+    "conda_name": "pyvoro-mmalahe",
+    "import_name": "pyvoro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvoro-mmalahe"
+  },
+  "pyvpt2": {
+    "conda_name": "pyvpt2",
+    "import_name": "pyvpt2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvpt2"
+  },
+  "pyvtk": {
+    "conda_name": "pyvtk",
+    "import_name": "pyvtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyvtk"
+  },
+  "pywaffle": {
+    "conda_name": "pywaffle",
+    "import_name": "pywaffle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywaffle"
+  },
+  "pywapor": {
+    "conda_name": "pywapor",
+    "import_name": "pywapor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywapor"
+  },
+  "pywaterflood": {
+    "conda_name": "pywaterflood",
+    "import_name": "pywaterflood",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywaterflood"
+  },
+  "pywaterml": {
+    "conda_name": "pywaterml",
+    "import_name": "pywaterml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywaterml"
+  },
+  "pywatershed": {
+    "conda_name": "pywatershed",
+    "import_name": "pywatershed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywatershed"
+  },
+  "pywavelets": {
+    "conda_name": "pywavelets",
+    "import_name": "pywt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywavelets"
+  },
+  "pywbt": {
+    "conda_name": "pywbt",
+    "import_name": "pywbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywbt"
+  },
+  "pywebhdfs": {
+    "conda_name": "pywebhdfs",
+    "import_name": "pywebhdfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywebhdfs"
+  },
+  "pyweed": {
+    "conda_name": "pyweed",
+    "import_name": "pyweed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyweed"
+  },
+  "pywhat": {
+    "conda_name": "pywhat",
+    "import_name": "pywhat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywhat"
+  },
+  "pywhip": {
+    "conda_name": "pywhip",
+    "import_name": "pywhip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywhip"
+  },
+  "pywim": {
+    "conda_name": "pywim",
+    "import_name": "pywim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywim"
+  },
+  "pywin32-ctypes": {
+    "conda_name": "pywin32-ctypes",
+    "import_name": "win32ctypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywin32-ctypes"
+  },
+  "pywinauto": {
+    "conda_name": "pywinauto",
+    "import_name": "pywinauto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywinauto"
+  },
+  "pywinhook": {
+    "conda_name": "pywinhook",
+    "import_name": "pyWinhook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywinhook"
+  },
+  "pywinpty": {
+    "conda_name": "pywinpty",
+    "import_name": "winpty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywinpty"
+  },
+  "pywinrm": {
+    "conda_name": "pywinrm",
+    "import_name": "winrm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywinrm"
+  },
+  "pywinusb": {
+    "conda_name": "pywinusb",
+    "import_name": "pywinusb.hid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywinusb"
+  },
+  "pywis-topics": {
+    "conda_name": "pywis-topics",
+    "import_name": "pywis_topics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywis-topics"
+  },
+  "pywlgk": {
+    "conda_name": "pywlgk",
+    "import_name": "pywlgk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywlgk"
+  },
+  "pyworld": {
+    "conda_name": "pyworld",
+    "import_name": "pyworld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyworld"
+  },
+  "pyworld3": {
+    "conda_name": "pyworld3",
+    "import_name": "pyworld3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyworld3"
+  },
+  "pywr": {
+    "conda_name": "pywr",
+    "import_name": "pywr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywr"
+  },
+  "pywwa": {
+    "conda_name": "pywwa",
+    "import_name": "pywwa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywwa"
+  },
+  "pywwt": {
+    "conda_name": "pywwt",
+    "import_name": "pywwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pywwt"
+  },
+  "pyxattr": {
+    "conda_name": "pyxattr",
+    "import_name": "xattr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxattr"
+  },
+  "pyxdg": {
+    "conda_name": "pyxdg",
+    "import_name": "xdg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxdg"
+  },
+  "pyxel-sim": {
+    "conda_name": "pyxel-sim",
+    "import_name": "pyxel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxel-sim"
+  },
+  "pyxem": {
+    "conda_name": "pyxem",
+    "import_name": "pyxem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxem"
+  },
+  "pyxenium": {
+    "conda_name": "pyxenium",
+    "import_name": "pyXenium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxenium"
+  },
+  "pyxenon": {
+    "conda_name": "pyxenon",
+    "import_name": "xenon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxenon"
+  },
+  "pyxley": {
+    "conda_name": "pyxley",
+    "import_name": "pyxley",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxley"
+  },
+  "pyxlsb": {
+    "conda_name": "pyxlsb",
+    "import_name": "pyxlsb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxlsb"
+  },
+  "pyxlsx": {
+    "conda_name": "pyxlsx",
+    "import_name": "pyxlsx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxlsx"
+  },
+  "pyxrf": {
+    "conda_name": "pyxrf",
+    "import_name": "pyxrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxrf"
+  },
+  "pyxsim": {
+    "conda_name": "pyxsim",
+    "import_name": "pyxsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxsim"
+  },
+  "pyxtal": {
+    "conda_name": "pyxtal",
+    "import_name": "pyxtal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxtal"
+  },
+  "pyxtf": {
+    "conda_name": "pyxtf",
+    "import_name": "pyxtf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxtf"
+  },
+  "pyxylookup": {
+    "conda_name": "pyxylookup",
+    "import_name": "pyxylookup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyxylookup"
+  },
+  "pyyaml": {
+    "conda_name": "pyyaml",
+    "import_name": "yaml",
+    "mapping_source": "static",
+    "pypi_name": "pyyaml"
+  },
+  "pyyaml-env-tag": {
+    "conda_name": "pyyaml-env-tag",
+    "import_name": "yaml_env_tag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyyaml-env-tag"
+  },
+  "pyyaml-include": {
+    "conda_name": "pyyaml-include",
+    "import_name": "yaml_include",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyyaml-include"
+  },
+  "pyzenhub": {
+    "conda_name": "pyzenhub",
+    "import_name": "zenhub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyzenhub"
+  },
+  "pyzenodo3": {
+    "conda_name": "pyzenodo3",
+    "import_name": "pyzenodo3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyzenodo3"
+  },
+  "pyzipper": {
+    "conda_name": "pyzipper",
+    "import_name": "pyzipper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyzipper"
+  },
+  "pyzotero": {
+    "conda_name": "pyzotero",
+    "import_name": "pyzotero.zotero",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyzotero"
+  },
+  "pyzstd": {
+    "conda_name": "pyzstd",
+    "import_name": "pyzstd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pyzstd"
+  },
+  "pz-rail-base": {
+    "conda_name": "pz-rail-base",
+    "import_name": "rail.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pz-rail-base"
+  },
+  "pz-rail-bpz": {
+    "conda_name": "pz-rail-bpz",
+    "import_name": "rail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pz-rail-bpz"
+  },
+  "pz-rail-sklearn": {
+    "conda_name": "pz-rail-sklearn",
+    "import_name": "rail.sklearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "pz-rail-sklearn"
+  },
+  "qarrayrun": {
+    "conda_name": "qarrayrun",
+    "import_name": "qarrayrun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qarrayrun"
+  },
+  "qass-tools-analyzer": {
+    "conda_name": "qass-tools-analyzer",
+    "import_name": "qass.tools.analyzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qass-tools-analyzer"
+  },
+  "qastle": {
+    "conda_name": "qastle",
+    "import_name": "qastle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qastle"
+  },
+  "qasync": {
+    "conda_name": "qasync",
+    "import_name": "qasync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qasync"
+  },
+  "qbatch": {
+    "conda_name": "qbatch",
+    "import_name": "qbatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qbatch"
+  },
+  "qcelemental": {
+    "conda_name": "qcelemental",
+    "import_name": "qcelemental",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qcelemental"
+  },
+  "qcengine": {
+    "conda_name": "qcengine",
+    "import_name": "qcengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qcengine"
+  },
+  "qcmanybody": {
+    "conda_name": "qcmanybody",
+    "import_name": "qcmanybody",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qcmanybody"
+  },
+  "qcodes": {
+    "conda_name": "qcodes",
+    "import_name": "qcodes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qcodes"
+  },
+  "qcs-api-client": {
+    "conda_name": "qcs-api-client",
+    "import_name": "qcs_api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qcs-api-client"
+  },
+  "qdarkstyle": {
+    "conda_name": "qdarkstyle",
+    "import_name": "qdarkstyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qdarkstyle"
+  },
+  "qdrant-client": {
+    "conda_name": "qdrant-client",
+    "import_name": "qdrant_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qdrant-client"
+  },
+  "qe-tools": {
+    "conda_name": "qe-tools",
+    "import_name": "qe_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qe-tools"
+  },
+  "qetpy": {
+    "conda_name": "qetpy",
+    "import_name": "qetpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qetpy"
+  },
+  "qfit": {
+    "conda_name": "qfit",
+    "import_name": "qfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qfit"
+  },
+  "qforce": {
+    "conda_name": "qforce",
+    "import_name": "qforce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qforce"
+  },
+  "qgis-map": {
+    "conda_name": "qgis-map",
+    "import_name": "qgis_map",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qgis-map"
+  },
+  "qgis-plugin-manager": {
+    "conda_name": "qgis-plugin-manager",
+    "import_name": "qgis_plugin_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qgis-plugin-manager"
+  },
+  "qgrid": {
+    "conda_name": "qgrid",
+    "import_name": "qgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qgrid"
+  },
+  "qhub": {
+    "conda_name": "qhub",
+    "import_name": "qhub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qhub"
+  },
+  "qikpropservice": {
+    "conda_name": "qikpropservice",
+    "import_name": "qikpropservice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qikpropservice"
+  },
+  "qiskit-algorithms": {
+    "conda_name": "qiskit-algorithms",
+    "import_name": "qiskit_algorithms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-algorithms"
+  },
+  "qiskit-dynamics": {
+    "conda_name": "qiskit-dynamics",
+    "import_name": "qiskit_dynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-dynamics"
+  },
+  "qiskit-finance": {
+    "conda_name": "qiskit-finance",
+    "import_name": "qiskit_finance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-finance"
+  },
+  "qiskit-ibm-experiment": {
+    "conda_name": "qiskit-ibm-experiment",
+    "import_name": "qiskit_ibm_experiment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-ibm-experiment"
+  },
+  "qiskit-ibmq-provider": {
+    "conda_name": "qiskit-ibmq-provider",
+    "import_name": "qiskit.providers.ibmq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-ibmq-provider"
+  },
+  "qiskit-ignis": {
+    "conda_name": "qiskit-ignis",
+    "import_name": "qiskit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-ignis"
+  },
+  "qiskit-machine-learning": {
+    "conda_name": "qiskit-machine-learning",
+    "import_name": "qiskit_machine_learning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-machine-learning"
+  },
+  "qiskit-optimization": {
+    "conda_name": "qiskit-optimization",
+    "import_name": "qiskit_optimization",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-optimization"
+  },
+  "qiskit-qasm3-import": {
+    "conda_name": "qiskit-qasm3-import",
+    "import_name": "qiskit_qasm3_import",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qiskit-qasm3-import"
+  },
+  "qme": {
+    "conda_name": "qme",
+    "import_name": "qme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qme"
+  },
+  "qmpy": {
+    "conda_name": "qmpy",
+    "import_name": "qmpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qmpy"
+  },
+  "qmsolve": {
+    "conda_name": "qmsolve",
+    "import_name": "qmsolve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qmsolve"
+  },
+  "qnmfits": {
+    "conda_name": "qnmfits",
+    "import_name": "qnmfits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qnmfits"
+  },
+  "qnorm": {
+    "conda_name": "qnorm",
+    "import_name": "qnorm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qnorm"
+  },
+  "qonnx": {
+    "conda_name": "qonnx",
+    "import_name": "qonnx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qonnx"
+  },
+  "qonsole": {
+    "conda_name": "qonsole",
+    "import_name": "qonsole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qonsole"
+  },
+  "qpbenchmark": {
+    "conda_name": "qpbenchmark",
+    "import_name": "qpbenchmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpbenchmark"
+  },
+  "qpmpc": {
+    "conda_name": "qpmpc",
+    "import_name": "qpmpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpmpc"
+  },
+  "qpoint": {
+    "conda_name": "qpoint",
+    "import_name": "qpoint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpoint"
+  },
+  "qpsolvers": {
+    "conda_name": "qpsolvers",
+    "import_name": "qpsolvers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpsolvers"
+  },
+  "qpython": {
+    "conda_name": "qpython",
+    "import_name": "qpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpython"
+  },
+  "qpytorch": {
+    "conda_name": "qpytorch",
+    "import_name": "qpytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qpytorch"
+  },
+  "qrcode": {
+    "conda_name": "qrcode",
+    "import_name": "qrcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qrcode"
+  },
+  "qredis": {
+    "conda_name": "qredis",
+    "import_name": "qredis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qredis"
+  },
+  "qrtools": {
+    "conda_name": "qrtools",
+    "import_name": "qrtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qrtools"
+  },
+  "qrules": {
+    "conda_name": "qrules",
+    "import_name": "qrules",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qrules"
+  },
+  "qscreencast": {
+    "conda_name": "qscreencast",
+    "import_name": "QScreenCast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qscreencast"
+  },
+  "qss": {
+    "conda_name": "qss",
+    "import_name": "qss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qss"
+  },
+  "qstrader": {
+    "conda_name": "qstrader",
+    "import_name": "qstrader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qstrader"
+  },
+  "qsum": {
+    "conda_name": "qsum",
+    "import_name": "qsum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qsum"
+  },
+  "qsymm": {
+    "conda_name": "qsymm",
+    "import_name": "qsymm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qsymm"
+  },
+  "qt-async-threads": {
+    "conda_name": "qt-async-threads",
+    "import_name": "qt_async_threads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-async-threads"
+  },
+  "qt-collapsible-section-pyside6": {
+    "conda_name": "qt-collapsible-section-pyside6",
+    "import_name": "qt_collapsible_section",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-collapsible-section-pyside6"
+  },
+  "qt-command-palette": {
+    "conda_name": "qt-command-palette",
+    "import_name": "qt_command_palette",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-command-palette"
+  },
+  "qt-dev-helper": {
+    "conda_name": "qt-dev-helper",
+    "import_name": "qt_dev_helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-dev-helper"
+  },
+  "qt-epics": {
+    "conda_name": "qt_epics",
+    "import_name": "qt_epics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-epics"
+  },
+  "qt-material": {
+    "conda_name": "qt-material",
+    "import_name": "qt_material",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-material"
+  },
+  "qt-niu": {
+    "conda_name": "qt-niu",
+    "import_name": "qt_niu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-niu"
+  },
+  "qt-py": {
+    "conda_name": "qt.py",
+    "import_name": "Qt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-py"
+  },
+  "qt-style-sheet-inspector": {
+    "conda_name": "qt_style_sheet_inspector",
+    "import_name": "qt_style_sheet_inspector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt-style-sheet-inspector"
+  },
+  "qt5reactor": {
+    "conda_name": "qt5reactor",
+    "import_name": "qt5reactor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qt5reactor"
+  },
+  "qtawesome": {
+    "conda_name": "qtawesome",
+    "import_name": "qtawesome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtawesome"
+  },
+  "qtconsole": {
+    "conda_name": "qtconsole-base",
+    "import_name": "qtconsole",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtconsole"
+  },
+  "qtmodern": {
+    "conda_name": "qtmodern",
+    "import_name": "qtmodern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtmodern"
+  },
+  "qtoml": {
+    "conda_name": "qtoml",
+    "import_name": "qtoml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtoml"
+  },
+  "qtpy": {
+    "conda_name": "qtpy",
+    "import_name": "qtpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtpy"
+  },
+  "qtpynodeeditor": {
+    "conda_name": "qtpynodeeditor",
+    "import_name": "qtpynodeeditor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtpynodeeditor"
+  },
+  "qtsass": {
+    "conda_name": "qtsass",
+    "import_name": "qtsass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtsass"
+  },
+  "qtwirl": {
+    "conda_name": "qtwirl",
+    "import_name": "qtwirl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtwirl"
+  },
+  "qtypes": {
+    "conda_name": "qtypes",
+    "import_name": "qtypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qtypes"
+  },
+  "quaccatoo": {
+    "conda_name": "quaccatoo",
+    "import_name": "quaccatoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quaccatoo"
+  },
+  "quackosm": {
+    "conda_name": "quackosm",
+    "import_name": "quackosm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quackosm"
+  },
+  "quadprog": {
+    "conda_name": "quadprog",
+    "import_name": "quadprog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quadprog"
+  },
+  "quadpy": {
+    "conda_name": "quadpy",
+    "import_name": "quadpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quadpy"
+  },
+  "quak": {
+    "conda_name": "quak",
+    "import_name": "quak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quak"
+  },
+  "quandl": {
+    "conda_name": "quandl",
+    "import_name": "test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quandl"
+  },
+  "quantecon": {
+    "conda_name": "quantecon",
+    "import_name": "quantecon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantecon"
+  },
+  "quantile-forest": {
+    "conda_name": "quantile-forest",
+    "import_name": "quantile_forest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantile-forest"
+  },
+  "quantile-python": {
+    "conda_name": "quantile-python",
+    "import_name": "quantile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantile-python"
+  },
+  "quantiphy": {
+    "conda_name": "quantiphy",
+    "import_name": "quantiphy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantiphy"
+  },
+  "quantiphyse-cest": {
+    "conda_name": "quantiphyse-cest",
+    "import_name": "quanticest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantiphyse-cest"
+  },
+  "quantiphyse-dsc": {
+    "conda_name": "quantiphyse-dsc",
+    "import_name": "quantiphyse_dsc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantiphyse-dsc"
+  },
+  "quantiphyse-perfsim": {
+    "conda_name": "quantiphyse-perfsim",
+    "import_name": "quantiphyse_perfsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantiphyse-perfsim"
+  },
+  "quantiphyse-qbold": {
+    "conda_name": "quantiphyse-qbold",
+    "import_name": "quantiphyse_qbold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantiphyse-qbold"
+  },
+  "quantities": {
+    "conda_name": "quantities",
+    "import_name": "quantities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantities"
+  },
+  "quantized-mesh-encoder": {
+    "conda_name": "quantized-mesh-encoder",
+    "import_name": "quantized_mesh_encoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantized-mesh-encoder"
+  },
+  "quantizer": {
+    "conda_name": "quantizer",
+    "import_name": "quantizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantizer"
+  },
+  "quantlab": {
+    "conda_name": "quantlab",
+    "import_name": "quantlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantlab"
+  },
+  "quantlab-launcher": {
+    "conda_name": "quantlab_launcher",
+    "import_name": "quantlab_launcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantlab-launcher"
+  },
+  "quantulum3": {
+    "conda_name": "quantulum3",
+    "import_name": "quantulum3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantulum3"
+  },
+  "quantum-blackbird": {
+    "conda_name": "quantum-blackbird",
+    "import_name": "blackbird",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantum-blackbird"
+  },
+  "quantumflow": {
+    "conda_name": "quantumflow",
+    "import_name": "quantumflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quantumflow"
+  },
+  "quart": {
+    "conda_name": "quart",
+    "import_name": "quart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quart"
+  },
+  "quart-cors": {
+    "conda_name": "quart-cors",
+    "import_name": "quart_cors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quart-cors"
+  },
+  "quart-openapi": {
+    "conda_name": "quart-openapi",
+    "import_name": "quart_openapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quart-openapi"
+  },
+  "quart-trio": {
+    "conda_name": "quart-trio",
+    "import_name": "quart_trio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quart-trio"
+  },
+  "quartodoc": {
+    "conda_name": "quartodoc",
+    "import_name": "quartodoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quartodoc"
+  },
+  "quaternionarray": {
+    "conda_name": "quaternionarray",
+    "import_name": "quaternionarray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quaternionarray"
+  },
+  "quaternionic": {
+    "conda_name": "quaternionic",
+    "import_name": "quaternionic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quaternionic"
+  },
+  "quboify": {
+    "conda_name": "quboify",
+    "import_name": "quboify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quboify"
+  },
+  "qubovert": {
+    "conda_name": "qubovert",
+    "import_name": "qubovert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qubovert"
+  },
+  "quera-ahs-utils": {
+    "conda_name": "quera-ahs-utils",
+    "import_name": "quera_ahs_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quera-ahs-utils"
+  },
+  "querystring-parser": {
+    "conda_name": "querystring_parser",
+    "import_name": "querystring_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "querystring-parser"
+  },
+  "questionary": {
+    "conda_name": "questionary",
+    "import_name": "questionary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "questionary"
+  },
+  "questplus": {
+    "conda_name": "questplus",
+    "import_name": "questplus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "questplus"
+  },
+  "quetz-frontend": {
+    "conda_name": "quetz-frontend",
+    "import_name": "quetz_frontend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quetz-frontend"
+  },
+  "quicfire-tools": {
+    "conda_name": "quicfire-tools",
+    "import_name": "quicfire_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quicfire-tools"
+  },
+  "quickbayes": {
+    "conda_name": "quickbayes",
+    "import_name": "quickBayes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickbayes"
+  },
+  "quickbin": {
+    "conda_name": "quickbin",
+    "import_name": "quickbin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickbin"
+  },
+  "quickff": {
+    "conda_name": "quickff",
+    "import_name": "quickff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickff"
+  },
+  "quickfix": {
+    "conda_name": "quickfix",
+    "import_name": "quickfix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickfix"
+  },
+  "quickjs": {
+    "conda_name": "python-quickjs",
+    "import_name": "quickjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickjs"
+  },
+  "quickle": {
+    "conda_name": "quickle",
+    "import_name": "quickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickle"
+  },
+  "quickpotato": {
+    "conda_name": "quickpotato",
+    "import_name": "QuickPotato",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickpotato"
+  },
+  "quickseries": {
+    "conda_name": "quickseries",
+    "import_name": "quickseries",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickseries"
+  },
+  "quickxorhash": {
+    "conda_name": "quickxorhash",
+    "import_name": "quickxorhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quickxorhash"
+  },
+  "quimb": {
+    "conda_name": "quimb",
+    "import_name": "quimb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quimb"
+  },
+  "quivr": {
+    "conda_name": "quivr",
+    "import_name": "quivr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "quivr"
+  },
+  "qurro": {
+    "conda_name": "qurro",
+    "import_name": "qurro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "qurro"
+  },
+  "rabbitpy": {
+    "conda_name": "rabbitpy",
+    "import_name": "rabbitpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rabbitpy"
+  },
+  "racerts": {
+    "conda_name": "racerts",
+    "import_name": "racerts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "racerts"
+  },
+  "radar-api": {
+    "conda_name": "radar-api",
+    "import_name": "radar_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radar-api"
+  },
+  "radarx": {
+    "conda_name": "radarx",
+    "import_name": "radarx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radarx"
+  },
+  "radclss": {
+    "conda_name": "radclss",
+    "import_name": "radclss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radclss"
+  },
+  "radian": {
+    "conda_name": "radian",
+    "import_name": "radian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radian"
+  },
+  "radical-analytics": {
+    "conda_name": "radical.analytics",
+    "import_name": "radical.analytics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-analytics"
+  },
+  "radical-entk": {
+    "conda_name": "radical.entk",
+    "import_name": "radical.entk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-entk"
+  },
+  "radical-gtod": {
+    "conda_name": "radical.gtod",
+    "import_name": "radical.gtod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-gtod"
+  },
+  "radical-pilot": {
+    "conda_name": "radical.pilot",
+    "import_name": "radical.pilot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-pilot"
+  },
+  "radical-saga": {
+    "conda_name": "radical.saga",
+    "import_name": "radical.saga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-saga"
+  },
+  "radical-utils": {
+    "conda_name": "radical.utils",
+    "import_name": "radical.utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radical-utils"
+  },
+  "radio-beam": {
+    "conda_name": "radio-beam",
+    "import_name": "radio_beam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radio-beam"
+  },
+  "radioactivedecay": {
+    "conda_name": "radioactivedecay",
+    "import_name": "radioactivedecay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radioactivedecay"
+  },
+  "radiospectra": {
+    "conda_name": "radiospectra",
+    "import_name": "radiospectra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radiospectra"
+  },
+  "radiosphere": {
+    "conda_name": "radiosphere",
+    "import_name": "radioSphere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radiosphere"
+  },
+  "radis": {
+    "conda_name": "radis",
+    "import_name": "radis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radis"
+  },
+  "radon": {
+    "conda_name": "radon",
+    "import_name": "radon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radon"
+  },
+  "radosgw-admin": {
+    "conda_name": "radosgw-admin",
+    "import_name": "radosgw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radosgw-admin"
+  },
+  "radtraq": {
+    "conda_name": "radtraq",
+    "import_name": "radtraq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "radtraq"
+  },
+  "ragas": {
+    "conda_name": "ragas",
+    "import_name": "ragas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ragas"
+  },
+  "ragged": {
+    "conda_name": "ragged",
+    "import_name": "ragged",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ragged"
+  },
+  "ragna": {
+    "conda_name": "ragna",
+    "import_name": "ragna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ragna"
+  },
+  "raimitigations": {
+    "conda_name": "raimitigations",
+    "import_name": "raimitigations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raimitigations"
+  },
+  "rainbow-logging-handler": {
+    "conda_name": "rainbow-logging-handler",
+    "import_name": "rainbow_logging_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rainbow-logging-handler"
+  },
+  "rainbowlog": {
+    "conda_name": "rainbowlog",
+    "import_name": "rainbowlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rainbowlog"
+  },
+  "rainflow": {
+    "conda_name": "rainflow",
+    "import_name": "rainflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rainflow"
+  },
+  "raitracker": {
+    "conda_name": "raitracker",
+    "import_name": "raitracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raitracker"
+  },
+  "rake-nltk": {
+    "conda_name": "rake_nltk",
+    "import_name": "rake_nltk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rake-nltk"
+  },
+  "ramp-core": {
+    "conda_name": "ramp-core",
+    "import_name": "ramp_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ramp-core"
+  },
+  "ramp-endf": {
+    "conda_name": "ramp-endf",
+    "import_name": "ramp_endf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ramp-endf"
+  },
+  "random-name": {
+    "conda_name": "random-name",
+    "import_name": "random_name",
+    "mapping_source": "regro-bot",
+    "pypi_name": "random-name"
+  },
+  "randomgen": {
+    "conda_name": "randomgen",
+    "import_name": "randomgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "randomgen"
+  },
+  "randomname": {
+    "conda_name": "randomname",
+    "import_name": "randomname",
+    "mapping_source": "regro-bot",
+    "pypi_name": "randomname"
+  },
+  "randonneur": {
+    "conda_name": "randonneur",
+    "import_name": "randonneur",
+    "mapping_source": "regro-bot",
+    "pypi_name": "randonneur"
+  },
+  "randonneur-data": {
+    "conda_name": "randonneur_data",
+    "import_name": "randonneur_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "randonneur-data"
+  },
+  "rangehttpserver": {
+    "conda_name": "rangehttpserver",
+    "import_name": "RangeHTTPServer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rangehttpserver"
+  },
+  "ranger-fm": {
+    "conda_name": "ranger-fm",
+    "import_name": "ranger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ranger-fm"
+  },
+  "rapidfuzz": {
+    "conda_name": "rapidfuzz",
+    "import_name": "rapidfuzz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidfuzz"
+  },
+  "rapidfuzz-capi": {
+    "conda_name": "rapidfuzz_capi",
+    "import_name": "rapidfuzz_capi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidfuzz-capi"
+  },
+  "rapidgzip": {
+    "conda_name": "rapidgzip",
+    "import_name": "rapidgzip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidgzip"
+  },
+  "rapidminer": {
+    "conda_name": "rapidminer",
+    "import_name": "rapidminer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidminer"
+  },
+  "rapidpe-rift-pipe": {
+    "conda_name": "rapidpe-rift-pipe",
+    "import_name": "rapidpe_rift_pipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidpe-rift-pipe"
+  },
+  "rapidpy": {
+    "conda_name": "rapidpy",
+    "import_name": "RAPIDpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapidpy"
+  },
+  "rapids": {
+    "conda_name": "rapids",
+    "import_name": "rapids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rapids"
+  },
+  "raster-tools": {
+    "conda_name": "raster-tools",
+    "import_name": "raster_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raster-tools"
+  },
+  "rastervision-aws-batch": {
+    "conda_name": "rastervision-aws-batch",
+    "import_name": "rastervision.aws_batch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rastervision-aws-batch"
+  },
+  "rastervision-aws-s3": {
+    "conda_name": "rastervision-aws-s3",
+    "import_name": "rastervision.aws_s3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rastervision-aws-s3"
+  },
+  "rastervision-core": {
+    "conda_name": "rastervision-core",
+    "import_name": "rastervision",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rastervision-core"
+  },
+  "rastervision-gdal-vsi": {
+    "conda_name": "rastervision-gdal-vsi",
+    "import_name": "rastervision.gdal_vsi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rastervision-gdal-vsi"
+  },
+  "rastervision-pipeline": {
+    "conda_name": "rastervision-pipeline",
+    "import_name": "rastervision.pipeline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rastervision-pipeline"
+  },
+  "rat": {
+    "conda_name": "rat",
+    "import_name": "rat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rat"
+  },
+  "ratarmount": {
+    "conda_name": "ratarmount",
+    "import_name": "ratarmount",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratarmount"
+  },
+  "ratarmountcore": {
+    "conda_name": "ratarmountcore",
+    "import_name": "ratarmountcore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratarmountcore"
+  },
+  "ratelim": {
+    "conda_name": "ratelim",
+    "import_name": "ratelim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratelim"
+  },
+  "ratelimit": {
+    "conda_name": "ratelimit",
+    "import_name": "ratelimit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratelimit"
+  },
+  "ratelimiter": {
+    "conda_name": "ratelimiter",
+    "import_name": "ratelimiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratelimiter"
+  },
+  "ratemate": {
+    "conda_name": "ratemate",
+    "import_name": "ratemate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratemate"
+  },
+  "rateslib": {
+    "conda_name": "rateslib",
+    "import_name": "rateslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rateslib"
+  },
+  "ratingcurve": {
+    "conda_name": "ratingcurve",
+    "import_name": "ratingcurve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ratingcurve"
+  },
+  "rauth": {
+    "conda_name": "rauth",
+    "import_name": "rauth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rauth"
+  },
+  "raven": {
+    "conda_name": "raven",
+    "import_name": "raven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raven"
+  },
+  "raven-aiohttp": {
+    "conda_name": "raven-aiohttp",
+    "import_name": "raven_aiohttp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raven-aiohttp"
+  },
+  "raven-hydro": {
+    "conda_name": "raven-hydro",
+    "import_name": "raven_hydro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raven-hydro"
+  },
+  "ravenpy": {
+    "conda_name": "ravenpy",
+    "import_name": "ravenpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ravenpy"
+  },
+  "ray": {
+    "conda_name": "ray-core",
+    "import_name": "ray",
+    "mapping_source": "static",
+    "pypi_name": "ray"
+  },
+  "raydar": {
+    "conda_name": "raydar",
+    "import_name": "raydar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raydar"
+  },
+  "raynest": {
+    "conda_name": "raynest",
+    "import_name": "raynest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "raynest"
+  },
+  "rayoptics": {
+    "conda_name": "rayoptics",
+    "import_name": "rayoptics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rayoptics"
+  },
+  "razdel": {
+    "conda_name": "razdel",
+    "import_name": "razdel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "razdel"
+  },
+  "rbc-project": {
+    "conda_name": "rbc",
+    "import_name": "rbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rbc-project"
+  },
+  "rbeast": {
+    "conda_name": "rbeast",
+    "import_name": "Rbeast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rbeast"
+  },
+  "rcssmin": {
+    "conda_name": "rcssmin",
+    "import_name": "rcssmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rcssmin"
+  },
+  "rdata": {
+    "conda_name": "rdata",
+    "import_name": "rdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdata"
+  },
+  "rdatasets": {
+    "conda_name": "rdatasets",
+    "import_name": "rdatasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdatasets"
+  },
+  "rdflib-pyld-compat": {
+    "conda_name": "rdflib-pyld-compat",
+    "import_name": "rdflib_pyld_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdflib-pyld-compat"
+  },
+  "rdflib-shim": {
+    "conda_name": "rdflib-shim",
+    "import_name": "rdflib_shim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdflib-shim"
+  },
+  "rdflib-sqlalchemy": {
+    "conda_name": "rdflib-sqlalchemy",
+    "import_name": "rdflib_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdflib-sqlalchemy"
+  },
+  "rdfpy": {
+    "conda_name": "rdfpy",
+    "import_name": "rdfpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdfpy"
+  },
+  "rdkit-utilities": {
+    "conda_name": "rdkit_utilities",
+    "import_name": "rdkit_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdkit-utilities"
+  },
+  "rdp": {
+    "conda_name": "rdp",
+    "import_name": "rdp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdp"
+  },
+  "rdt": {
+    "conda_name": "rdt",
+    "import_name": "rdt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rdt"
+  },
+  "re-assert": {
+    "conda_name": "re-assert",
+    "import_name": "re_assert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "re-assert"
+  },
+  "re-wx": {
+    "conda_name": "re-wx",
+    "import_name": "rewx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "re-wx"
+  },
+  "react-ipywidgets": {
+    "conda_name": "react-ipywidgets",
+    "import_name": "react_ipywidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "react-ipywidgets"
+  },
+  "reactivex": {
+    "conda_name": "reactivex",
+    "import_name": "reactivex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reactivex"
+  },
+  "reacton": {
+    "conda_name": "reacton",
+    "import_name": "reacton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reacton"
+  },
+  "reacttrs": {
+    "conda_name": "reacttrs",
+    "import_name": "reacttrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reacttrs"
+  },
+  "read-roi": {
+    "conda_name": "read-roi",
+    "import_name": "read_roi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "read-roi"
+  },
+  "read-version": {
+    "conda_name": "read-version",
+    "import_name": "read_version",
+    "mapping_source": "regro-bot",
+    "pypi_name": "read-version"
+  },
+  "readability-lxml": {
+    "conda_name": "readability-lxml",
+    "import_name": "readability",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readability-lxml"
+  },
+  "readerwriterlock": {
+    "conda_name": "readerwriterlock",
+    "import_name": "readerwriterlock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readerwriterlock"
+  },
+  "readfcs": {
+    "conda_name": "readfcs",
+    "import_name": "readfcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readfcs"
+  },
+  "readimc": {
+    "conda_name": "readimc",
+    "import_name": "readimc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readimc"
+  },
+  "readthedocs-sphinx-ext": {
+    "conda_name": "readthedocs-sphinx-ext",
+    "import_name": "readthedocs_ext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readthedocs-sphinx-ext"
+  },
+  "readtime": {
+    "conda_name": "readtime",
+    "import_name": "readtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "readtime"
+  },
+  "reaktoro-pse": {
+    "conda_name": "reaktoro-pse",
+    "import_name": "reaktoro_pse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reaktoro-pse"
+  },
+  "realalg": {
+    "conda_name": "realalg",
+    "import_name": "realalg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "realalg"
+  },
+  "realtime": {
+    "conda_name": "realtime",
+    "import_name": "realtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "realtime"
+  },
+  "rebound": {
+    "conda_name": "rebound",
+    "import_name": "rebound",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rebound"
+  },
+  "rechunker": {
+    "conda_name": "rechunker",
+    "import_name": "rechunker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rechunker"
+  },
+  "reciprocalspaceship": {
+    "conda_name": "reciprocalspaceship",
+    "import_name": "reciprocalspaceship",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reciprocalspaceship"
+  },
+  "recommonmark": {
+    "conda_name": "recommonmark",
+    "import_name": "recommonmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recommonmark"
+  },
+  "reconciliation": {
+    "conda_name": "reconciliation",
+    "import_name": "reconciliation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reconciliation"
+  },
+  "recordclass": {
+    "conda_name": "recordclass",
+    "import_name": "recordclass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recordclass"
+  },
+  "recorder-napari": {
+    "conda_name": "recorder-napari",
+    "import_name": "recOrder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recorder-napari"
+  },
+  "recordlinkage": {
+    "conda_name": "recordlinkage",
+    "import_name": "recordlinkage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recordlinkage"
+  },
+  "records": {
+    "conda_name": "records",
+    "import_name": "records",
+    "mapping_source": "regro-bot",
+    "pypi_name": "records"
+  },
+  "rectangle-packer": {
+    "conda_name": "rectangle-packer",
+    "import_name": "rpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rectangle-packer"
+  },
+  "rectpack": {
+    "conda_name": "rectpack",
+    "import_name": "rectpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rectpack"
+  },
+  "recursive-diff": {
+    "conda_name": "recursive_diff",
+    "import_name": "recursive_diff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recursive-diff"
+  },
+  "recursivenodes": {
+    "conda_name": "recursivenodes",
+    "import_name": "recursivenodes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "recursivenodes"
+  },
+  "red-molsim": {
+    "conda_name": "red-molsim",
+    "import_name": "red",
+    "mapping_source": "regro-bot",
+    "pypi_name": "red-molsim"
+  },
+  "redbaron": {
+    "conda_name": "redbaron",
+    "import_name": "redbaron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redbaron"
+  },
+  "redbird": {
+    "conda_name": "redbird",
+    "import_name": "redbird",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redbird"
+  },
+  "redbox": {
+    "conda_name": "redbox",
+    "import_name": "redbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redbox"
+  },
+  "redengine": {
+    "conda_name": "redengine",
+    "import_name": "redengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redengine"
+  },
+  "redflag": {
+    "conda_name": "redflag",
+    "import_name": "redflag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redflag"
+  },
+  "redframes": {
+    "conda_name": "redframes",
+    "import_name": "redframes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redframes"
+  },
+  "redis": {
+    "conda_name": "redis-py",
+    "import_name": "redis",
+    "mapping_source": "static",
+    "pypi_name": "redis"
+  },
+  "redis-dict": {
+    "conda_name": "redis-dict",
+    "import_name": "redis_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redis-dict"
+  },
+  "redis-entraid": {
+    "conda_name": "redis-entraid",
+    "import_name": "redis_entraid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redis-entraid"
+  },
+  "redis-json-dict": {
+    "conda_name": "redis-json-dict",
+    "import_name": "redis_json_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redis-json-dict"
+  },
+  "redis-semaphore": {
+    "conda_name": "redis-semaphore",
+    "import_name": "redis_semaphore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redis-semaphore"
+  },
+  "redis-sentinel-url": {
+    "conda_name": "redis-sentinel-url",
+    "import_name": "redis_sentinel_url",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redis-sentinel-url"
+  },
+  "redistpy": {
+    "conda_name": "redistpy",
+    "import_name": "redist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redistpy"
+  },
+  "redmail": {
+    "conda_name": "redmail",
+    "import_name": "redmail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redmail"
+  },
+  "rednose": {
+    "conda_name": "rednose",
+    "import_name": "test_files",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rednose"
+  },
+  "redo": {
+    "conda_name": "redo",
+    "import_name": "redo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redo"
+  },
+  "redpil": {
+    "conda_name": "redpil",
+    "import_name": "redpil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "redpil"
+  },
+  "reducer": {
+    "conda_name": "reducer",
+    "import_name": "reducer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reducer"
+  },
+  "reedsolo": {
+    "conda_name": "reedsolo",
+    "import_name": "reedsolo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reedsolo"
+  },
+  "refactor": {
+    "conda_name": "refactor",
+    "import_name": "refactor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "refactor"
+  },
+  "refcount": {
+    "conda_name": "refcount",
+    "import_name": "refcount",
+    "mapping_source": "regro-bot",
+    "pypi_name": "refcount"
+  },
+  "reference-handler": {
+    "conda_name": "reference-handler",
+    "import_name": "reference_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reference-handler"
+  },
+  "refet": {
+    "conda_name": "refet",
+    "import_name": "refet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "refet"
+  },
+  "refinenet": {
+    "conda_name": "refinenet",
+    "import_name": "refinenet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "refinenet"
+  },
+  "refinitiv-data": {
+    "conda_name": "refinitiv-data",
+    "import_name": "refinitiv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "refinitiv-data"
+  },
+  "reg": {
+    "conda_name": "reg",
+    "import_name": "reg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reg"
+  },
+  "regain": {
+    "conda_name": "regain",
+    "import_name": "regain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regain"
+  },
+  "regex": {
+    "conda_name": "regex",
+    "import_name": "regex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regex"
+  },
+  "regi0": {
+    "conda_name": "regi0",
+    "import_name": "regi0",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regi0"
+  },
+  "region": {
+    "conda_name": "region",
+    "import_name": "region",
+    "mapping_source": "regro-bot",
+    "pypi_name": "region"
+  },
+  "regional-mom6": {
+    "conda_name": "regional-mom6",
+    "import_name": "regional_mom6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regional-mom6"
+  },
+  "regionate": {
+    "conda_name": "regionate",
+    "import_name": "regionate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regionate"
+  },
+  "regionmask": {
+    "conda_name": "regionmask",
+    "import_name": "regionmask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regionmask"
+  },
+  "regions": {
+    "conda_name": "regions",
+    "import_name": "regions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regions"
+  },
+  "regolith": {
+    "conda_name": "regolith",
+    "import_name": "regolith",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regolith"
+  },
+  "regress": {
+    "conda_name": "regress",
+    "import_name": "regress",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regress"
+  },
+  "regressio": {
+    "conda_name": "regressio",
+    "import_name": "regressio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "regressio"
+  },
+  "reikna": {
+    "conda_name": "reikna",
+    "import_name": "reikna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reikna"
+  },
+  "reindent": {
+    "conda_name": "reindent",
+    "import_name": "reindent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reindent"
+  },
+  "rejected": {
+    "conda_name": "rejected",
+    "import_name": "rejected",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rejected"
+  },
+  "rejson": {
+    "conda_name": "rejson",
+    "import_name": "rejson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rejson"
+  },
+  "reladiff": {
+    "conda_name": "reladiff",
+    "import_name": "reladiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reladiff"
+  },
+  "related": {
+    "conda_name": "related",
+    "import_name": "related",
+    "mapping_source": "regro-bot",
+    "pypi_name": "related"
+  },
+  "releasecmd": {
+    "conda_name": "releasecmd",
+    "import_name": "releasecmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "releasecmd"
+  },
+  "releases": {
+    "conda_name": "sphinx-releases",
+    "import_name": "releases",
+    "mapping_source": "regro-bot",
+    "pypi_name": "releases"
+  },
+  "relentless": {
+    "conda_name": "relentless",
+    "import_name": "relentless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "relentless"
+  },
+  "relion": {
+    "conda_name": "python-relion",
+    "import_name": "relion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "relion"
+  },
+  "remi": {
+    "conda_name": "remi",
+    "import_name": "remi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "remi"
+  },
+  "remotebmi": {
+    "conda_name": "remotebmi",
+    "import_name": "remotebmi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "remotebmi"
+  },
+  "remotezip": {
+    "conda_name": "remotezip",
+    "import_name": "remotezip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "remotezip"
+  },
+  "remotior-sensus": {
+    "conda_name": "remotior-sensus",
+    "import_name": "remotior_sensus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "remotior-sensus"
+  },
+  "remove-dagmc-tags": {
+    "conda_name": "remove_dagmc_tags",
+    "import_name": "remove_dagmc_tags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "remove-dagmc-tags"
+  },
+  "rencode": {
+    "conda_name": "rencode",
+    "import_name": "rencode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rencode"
+  },
+  "rendercanvas": {
+    "conda_name": "rendercanvas",
+    "import_name": "rendercanvas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rendercanvas"
+  },
+  "reno": {
+    "conda_name": "reno",
+    "import_name": "reno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reno"
+  },
+  "reno-sd": {
+    "conda_name": "reno-sd",
+    "import_name": "reno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reno-sd"
+  },
+  "repackage": {
+    "conda_name": "repackage",
+    "import_name": "repackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repackage"
+  },
+  "repath": {
+    "conda_name": "repath",
+    "import_name": "repath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repath"
+  },
+  "repeated-test": {
+    "conda_name": "repeated_test",
+    "import_name": "repeated_test",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repeated-test"
+  },
+  "replicate": {
+    "conda_name": "replicate",
+    "import_name": "replicate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "replicate"
+  },
+  "repo2rocrate": {
+    "conda_name": "repo2rocrate",
+    "import_name": "repo2rocrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repo2rocrate"
+  },
+  "reports": {
+    "conda_name": "reports",
+    "import_name": "reports",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reports"
+  },
+  "reportseff": {
+    "conda_name": "reportseff",
+    "import_name": "reportseff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reportseff"
+  },
+  "repoze-lru": {
+    "conda_name": "repoze.lru",
+    "import_name": "repoze",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repoze-lru"
+  },
+  "repoze-who": {
+    "conda_name": "repoze.who",
+    "import_name": "repoze.who",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repoze-who"
+  },
+  "repoze-who-friendlyform": {
+    "conda_name": "repoze.who-friendlyform",
+    "import_name": "repoze.who.plugins.friendlyform",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repoze-who-friendlyform"
+  },
+  "represent": {
+    "conda_name": "represent",
+    "import_name": "represent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "represent"
+  },
+  "reprexlite": {
+    "conda_name": "reprexlite",
+    "import_name": "reprexlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprexlite"
+  },
+  "reprit": {
+    "conda_name": "reprit",
+    "import_name": "reprit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprit"
+  },
+  "repro-tarfile": {
+    "conda_name": "repro-tarfile",
+    "import_name": "repro_tarfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repro-tarfile"
+  },
+  "repro-zipfile": {
+    "conda_name": "repro-zipfile",
+    "import_name": "repro_zipfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repro-zipfile"
+  },
+  "reproject": {
+    "conda_name": "reproject",
+    "import_name": "reproject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reproject"
+  },
+  "reprostim": {
+    "conda_name": "reprostim",
+    "import_name": "reprostim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprostim"
+  },
+  "reprounzip": {
+    "conda_name": "reprounzip",
+    "import_name": "reprounzip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprounzip"
+  },
+  "reprounzip-docker": {
+    "conda_name": "reprounzip-docker",
+    "import_name": "reprounzip.unpackers.docker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprounzip-docker"
+  },
+  "reprounzip-qt": {
+    "conda_name": "reprounzip-qt",
+    "import_name": "reprounzip_qt.main",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprounzip-qt"
+  },
+  "reprounzip-vagrant": {
+    "conda_name": "reprounzip-vagrant",
+    "import_name": "reprounzip.unpackers.vagrant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprounzip-vagrant"
+  },
+  "reprozip": {
+    "conda_name": "reprozip",
+    "import_name": "reprozip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprozip"
+  },
+  "reprozip-jupyter": {
+    "conda_name": "reprozip-jupyter",
+    "import_name": "reprozip_jupyter.main",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reprozip-jupyter"
+  },
+  "repype": {
+    "conda_name": "repype",
+    "import_name": "repype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repype"
+  },
+  "repytah": {
+    "conda_name": "repytah",
+    "import_name": "repytah",
+    "mapping_source": "regro-bot",
+    "pypi_name": "repytah"
+  },
+  "requests-async": {
+    "conda_name": "requests-async",
+    "import_name": "requests_async",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-async"
+  },
+  "requests-aws4auth": {
+    "conda_name": "requests-aws4auth",
+    "import_name": "requests_aws4auth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-aws4auth"
+  },
+  "requests-cache": {
+    "conda_name": "requests-cache",
+    "import_name": "requests_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-cache"
+  },
+  "requests-file": {
+    "conda_name": "requests-file",
+    "import_name": "requests_file",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-file"
+  },
+  "requests-ftp": {
+    "conda_name": "requests-ftp",
+    "import_name": "requests_ftp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-ftp"
+  },
+  "requests-futures": {
+    "conda_name": "requests-futures",
+    "import_name": "requests_futures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-futures"
+  },
+  "requests-html": {
+    "conda_name": "requests-html",
+    "import_name": "requests_html",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-html"
+  },
+  "requests-magpie": {
+    "conda_name": "requests-magpie",
+    "import_name": "requests_magpie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-magpie"
+  },
+  "requests-mock": {
+    "conda_name": "requests-mock",
+    "import_name": "requests_mock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-mock"
+  },
+  "requests-ntlm": {
+    "conda_name": "requests_ntlm",
+    "import_name": "requests_ntlm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-ntlm"
+  },
+  "requests-oauth2client": {
+    "conda_name": "requests_oauth2client",
+    "import_name": "requests_oauth2client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-oauth2client"
+  },
+  "requests-oauthlib": {
+    "conda_name": "requests-oauthlib",
+    "import_name": "requests_oauthlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-oauthlib"
+  },
+  "requests-ratelimiter": {
+    "conda_name": "requests-ratelimiter",
+    "import_name": "requests_ratelimiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-ratelimiter"
+  },
+  "requests-toolbelt": {
+    "conda_name": "requests-toolbelt",
+    "import_name": "requests_toolbelt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-toolbelt"
+  },
+  "requests-unixsocket": {
+    "conda_name": "requests-unixsocket",
+    "import_name": "requests_unixsocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-unixsocket"
+  },
+  "requests-wsgi-adapter": {
+    "conda_name": "requests-wsgi-adapter",
+    "import_name": "wsgiadapter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requests-wsgi-adapter"
+  },
+  "requestsexceptions": {
+    "conda_name": "requestsexceptions",
+    "import_name": "requestsexceptions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requestsexceptions"
+  },
+  "requirements-detector": {
+    "conda_name": "requirements-detector",
+    "import_name": "requirements_detector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "requirements-detector"
+  },
+  "res-mlp-pytorch": {
+    "conda_name": "res-mlp-pytorch",
+    "import_name": "res_mlp_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "res-mlp-pytorch"
+  },
+  "resample": {
+    "conda_name": "resample",
+    "import_name": "resample",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resample"
+  },
+  "resampy": {
+    "conda_name": "resampy",
+    "import_name": "resampy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resampy"
+  },
+  "researchclaw": {
+    "conda_name": "researchclaw",
+    "import_name": "researchclaw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "researchclaw"
+  },
+  "researchpy": {
+    "conda_name": "researchpy",
+    "import_name": "researchpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "researchpy"
+  },
+  "resmda": {
+    "conda_name": "resmda",
+    "import_name": "resmda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resmda"
+  },
+  "resonance": {
+    "conda_name": "resonance",
+    "import_name": "resonance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resonance"
+  },
+  "resonate": {
+    "conda_name": "resonate",
+    "import_name": "resonate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resonate"
+  },
+  "resource-backed-dask-array": {
+    "conda_name": "resource_backed_dask_array",
+    "import_name": "resource_backed_dask_array",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resource-backed-dask-array"
+  },
+  "resourcecode": {
+    "conda_name": "resourcecode",
+    "import_name": "resourcecode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "resourcecode"
+  },
+  "responder": {
+    "conda_name": "responder",
+    "import_name": "responder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "responder"
+  },
+  "responsibleai": {
+    "conda_name": "responsibleai",
+    "import_name": "responsibleai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "responsibleai"
+  },
+  "responsibleai-text": {
+    "conda_name": "responsibleai-text",
+    "import_name": "responsibleai_text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "responsibleai-text"
+  },
+  "restructuredtext-lint": {
+    "conda_name": "restructuredtext_lint",
+    "import_name": "restructuredtext_lint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "restructuredtext-lint"
+  },
+  "restview": {
+    "conda_name": "restview",
+    "import_name": "restview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "restview"
+  },
+  "result": {
+    "conda_name": "result",
+    "import_name": "result",
+    "mapping_source": "regro-bot",
+    "pypi_name": "result"
+  },
+  "retina-face": {
+    "conda_name": "retina-face",
+    "import_name": "retinaface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retina-face"
+  },
+  "retools": {
+    "conda_name": "retools",
+    "import_name": "retools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retools"
+  },
+  "retriever": {
+    "conda_name": "retriever",
+    "import_name": "retriever",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retriever"
+  },
+  "retrolab": {
+    "conda_name": "retrolab",
+    "import_name": "retrolab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retrolab"
+  },
+  "retry": {
+    "conda_name": "retry",
+    "import_name": "retry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retry"
+  },
+  "retry-decorator": {
+    "conda_name": "retry_decorator",
+    "import_name": "retry_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retry-decorator"
+  },
+  "retype": {
+    "conda_name": "retype",
+    "import_name": "retype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "retype"
+  },
+  "reuse": {
+    "conda_name": "reuse",
+    "import_name": "reuse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reuse"
+  },
+  "reverse-argparse": {
+    "conda_name": "reverse-argparse",
+    "import_name": "reverse_argparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reverse-argparse"
+  },
+  "reverse-geocode": {
+    "conda_name": "reverse-geocode",
+    "import_name": "reverse_geocode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reverse-geocode"
+  },
+  "reverse-geocoder": {
+    "conda_name": "reverse_geocoder",
+    "import_name": "reverse_geocoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "reverse-geocoder"
+  },
+  "rexmex": {
+    "conda_name": "rexmex",
+    "import_name": "rexmex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rexmex"
+  },
+  "rfc3161ng": {
+    "conda_name": "rfc3161ng",
+    "import_name": "rfc3161ng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3161ng"
+  },
+  "rfc3339": {
+    "conda_name": "rfc3339",
+    "import_name": "rfc3339",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3339"
+  },
+  "rfc3339-validator": {
+    "conda_name": "rfc3339-validator",
+    "import_name": "rfc3339_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3339-validator"
+  },
+  "rfc3986": {
+    "conda_name": "rfc3986",
+    "import_name": "rfc3986",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3986"
+  },
+  "rfc3986-validator": {
+    "conda_name": "rfc3986-validator",
+    "import_name": "rfc3986_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3986-validator"
+  },
+  "rfc3987": {
+    "conda_name": "rfc3987",
+    "import_name": "rfc3987",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfc3987"
+  },
+  "rfi-file-monitor": {
+    "conda_name": "rfi-file-monitor",
+    "import_name": "rfi_file_monitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfi-file-monitor"
+  },
+  "rfpimp": {
+    "conda_name": "rfpimp",
+    "import_name": "rfpimp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rfpimp"
+  },
+  "rhapsody": {
+    "conda_name": "rhapsody",
+    "import_name": "rhapsody",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rhapsody"
+  },
+  "rhos": {
+    "conda_name": "rhos",
+    "import_name": "rhos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rhos"
+  },
+  "ria": {
+    "conda_name": "ria",
+    "import_name": "ria",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ria"
+  },
+  "ribasim": {
+    "conda_name": "ribasim",
+    "import_name": "ribasim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ribasim"
+  },
+  "ribasim-api": {
+    "conda_name": "ribasim-api",
+    "import_name": "ribasim_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ribasim-api"
+  },
+  "ribs": {
+    "conda_name": "pyribs-base",
+    "import_name": "ribs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ribs"
+  },
+  "rich-argparse": {
+    "conda_name": "rich-argparse",
+    "import_name": "rich_argparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rich-argparse"
+  },
+  "rich-rst": {
+    "conda_name": "rich-rst",
+    "import_name": "rich_rst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rich-rst"
+  },
+  "rickshaw": {
+    "conda_name": "rickshaw",
+    "import_name": "rickshaw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rickshaw"
+  },
+  "ridgeplot-py": {
+    "conda_name": "ridgeplot-py",
+    "import_name": "ridgeplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ridgeplot-py"
+  },
+  "rift": {
+    "conda_name": "rift",
+    "import_name": "RIFT",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rift"
+  },
+  "rigolwfm": {
+    "conda_name": "rigolwfm",
+    "import_name": "RigolWFM",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rigolwfm"
+  },
+  "ringspy": {
+    "conda_name": "ringspy",
+    "import_name": "ringspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ringspy"
+  },
+  "ringtail": {
+    "conda_name": "ringtail",
+    "import_name": "ringtail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ringtail"
+  },
+  "rinohtype": {
+    "conda_name": "rinohtype",
+    "import_name": "rinoh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rinohtype"
+  },
+  "rio-cogeo": {
+    "conda_name": "rio-cogeo",
+    "import_name": "rio_cogeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-cogeo"
+  },
+  "rio-color": {
+    "conda_name": "rio-color",
+    "import_name": "rio_color",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-color"
+  },
+  "rio-mucho": {
+    "conda_name": "rio-mucho",
+    "import_name": "riomucho",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-mucho"
+  },
+  "rio-tiler": {
+    "conda_name": "rio-tiler",
+    "import_name": "rio_tiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-tiler"
+  },
+  "rio-toa": {
+    "conda_name": "rio-toa",
+    "import_name": "rio_toa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-toa"
+  },
+  "rio-ui": {
+    "conda_name": "rio-ui",
+    "import_name": "rio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-ui"
+  },
+  "rio-viz": {
+    "conda_name": "rio-viz",
+    "import_name": "rio_viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-viz"
+  },
+  "rio-vrt": {
+    "conda_name": "rio-vrt",
+    "import_name": "rio_vrt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rio-vrt"
+  },
+  "ripgrepy": {
+    "conda_name": "ripgrepy",
+    "import_name": "ripgrepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ripgrepy"
+  },
+  "ripser": {
+    "conda_name": "ripser",
+    "import_name": "ripser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ripser"
+  },
+  "rise": {
+    "conda_name": "rise",
+    "import_name": "rise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rise"
+  },
+  "riskfolio-lib": {
+    "conda_name": "riskfolio-lib",
+    "import_name": "riskfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "riskfolio-lib"
+  },
+  "riskmatrix": {
+    "conda_name": "riskmatrix",
+    "import_name": "riskmatrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "riskmatrix"
+  },
+  "riskparityportfolio": {
+    "conda_name": "riskparityportfolio",
+    "import_name": "riskparityportfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "riskparityportfolio"
+  },
+  "ritas": {
+    "conda_name": "ritas",
+    "import_name": "ritas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ritas"
+  },
+  "rixs": {
+    "conda_name": "rixs",
+    "import_name": "rixs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rixs"
+  },
+  "rjieba": {
+    "conda_name": "rjieba",
+    "import_name": "rjieba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rjieba"
+  },
+  "rjsmin": {
+    "conda_name": "rjsmin",
+    "import_name": "rjsmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rjsmin"
+  },
+  "rkstiff": {
+    "conda_name": "rkstiff",
+    "import_name": "rkstiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rkstiff"
+  },
+  "rlic": {
+    "conda_name": "rlic",
+    "import_name": "rlic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rlic"
+  },
+  "rlp": {
+    "conda_name": "rlp",
+    "import_name": "rlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rlp"
+  },
+  "rlpycairo": {
+    "conda_name": "rlpycairo",
+    "import_name": "rlPyCairo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rlpycairo"
+  },
+  "rlpython": {
+    "conda_name": "rlpython",
+    "import_name": "rlpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rlpython"
+  },
+  "rlr": {
+    "conda_name": "rlr",
+    "import_name": "rlr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rlr"
+  },
+  "rms-vax": {
+    "conda_name": "rms-vax",
+    "import_name": "vax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rms-vax"
+  },
+  "rmsd": {
+    "conda_name": "rmsd",
+    "import_name": "rmsd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rmsd"
+  },
+  "rnatools": {
+    "conda_name": "rnatools",
+    "import_name": "RNAtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rnatools"
+  },
+  "rnc2rng": {
+    "conda_name": "rnc2rng",
+    "import_name": "rnc2rng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rnc2rng"
+  },
+  "ro-json": {
+    "conda_name": "ro-json",
+    "import_name": "ro_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ro-json"
+  },
+  "roaring-landmask": {
+    "conda_name": "roaring-landmask",
+    "import_name": "roaring_landmask",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roaring-landmask"
+  },
+  "robert": {
+    "conda_name": "robert",
+    "import_name": "robert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robert"
+  },
+  "robocorp": {
+    "conda_name": "robocorp",
+    "import_name": "robocorp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp"
+  },
+  "robocorp-excel": {
+    "conda_name": "robocorp-excel",
+    "import_name": "robocorp.excel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-excel"
+  },
+  "robocorp-http": {
+    "conda_name": "robocorp-http",
+    "import_name": "robocorp.http",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-http"
+  },
+  "robocorp-log": {
+    "conda_name": "robocorp-log",
+    "import_name": "robocorp.log",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-log"
+  },
+  "robocorp-storage": {
+    "conda_name": "robocorp-storage",
+    "import_name": "robocorp.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-storage"
+  },
+  "robocorp-tasks": {
+    "conda_name": "robocorp-tasks",
+    "import_name": "robocorp.tasks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-tasks"
+  },
+  "robocorp-truststore": {
+    "conda_name": "robocorp-truststore",
+    "import_name": "truststore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-truststore"
+  },
+  "robocorp-vault": {
+    "conda_name": "robocorp-vault",
+    "import_name": "robocorp.vault",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-vault"
+  },
+  "robocorp-workitems": {
+    "conda_name": "robocorp-workitems",
+    "import_name": "robocorp.workitems",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocorp-workitems"
+  },
+  "robocrys": {
+    "conda_name": "robocrys",
+    "import_name": "robocrys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robocrys"
+  },
+  "robomimic": {
+    "conda_name": "robomimic",
+    "import_name": "robomimic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robomimic"
+  },
+  "robot-descriptions": {
+    "conda_name": "robot_descriptions",
+    "import_name": "robot_descriptions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robot-descriptions"
+  },
+  "robotframework-appiumlibrary": {
+    "conda_name": "robotframework-appiumlibrary",
+    "import_name": "AppiumLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-appiumlibrary"
+  },
+  "robotframework-assertion-engine": {
+    "conda_name": "robotframework-assertion-engine",
+    "import_name": "assertionengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-assertion-engine"
+  },
+  "robotframework-axelibrary": {
+    "conda_name": "robotframework-axelibrary",
+    "import_name": "AxeLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-axelibrary"
+  },
+  "robotframework-browser": {
+    "conda_name": "robotframework-browser",
+    "import_name": "Browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-browser"
+  },
+  "robotframework-datadriver": {
+    "conda_name": "robotframework-datadriver",
+    "import_name": "DataDriver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-datadriver"
+  },
+  "robotframework-dependencylibrary": {
+    "conda_name": "robotframework-dependencylibrary",
+    "import_name": "DependencyLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-dependencylibrary"
+  },
+  "robotframework-excellib": {
+    "conda_name": "robotframework-excellib",
+    "import_name": "ExcelLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-excellib"
+  },
+  "robotframework-jupyterlibrary": {
+    "conda_name": "robotframework-jupyterlibrary",
+    "import_name": "JupyterLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-jupyterlibrary"
+  },
+  "robotframework-lint": {
+    "conda_name": "robotframework-lint",
+    "import_name": "rflint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-lint"
+  },
+  "robotframework-mqttlibrary": {
+    "conda_name": "robotframework-mqttlibrary",
+    "import_name": "MQTTLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-mqttlibrary"
+  },
+  "robotframework-requests": {
+    "conda_name": "robotframework-requests",
+    "import_name": "RequestsLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-requests"
+  },
+  "robotframework-sapguilibrary": {
+    "conda_name": "robotframework-sapguilibrary",
+    "import_name": "SapGuiLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-sapguilibrary"
+  },
+  "robotframework-seleniumscreenshots": {
+    "conda_name": "robotframework-seleniumscreenshots",
+    "import_name": "SeleniumScreenshots",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-seleniumscreenshots"
+  },
+  "robotframework-seleniumtestability": {
+    "conda_name": "robotframework-seleniumtestability",
+    "import_name": "SeleniumTestability",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-seleniumtestability"
+  },
+  "robotframework-seriallibrary": {
+    "conda_name": "robotframework-seriallibrary",
+    "import_name": "SerialLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-seriallibrary"
+  },
+  "robotframework-sshlibrary": {
+    "conda_name": "robotframework-sshlibrary",
+    "import_name": "SSHLibrary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-sshlibrary"
+  },
+  "robotframework-stacktrace": {
+    "conda_name": "robotframework-stacktrace",
+    "import_name": "RobotStackTracer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotframework-stacktrace"
+  },
+  "roboticstoolbox-python": {
+    "conda_name": "roboticstoolbox-python",
+    "import_name": "roboticstoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roboticstoolbox-python"
+  },
+  "robotkernel": {
+    "conda_name": "robotkernel",
+    "import_name": "robotkernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robotkernel"
+  },
+  "robustness": {
+    "conda_name": "robustness",
+    "import_name": "robustness",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robustness"
+  },
+  "robyn": {
+    "conda_name": "robyn",
+    "import_name": "robyn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "robyn"
+  },
+  "rocketpy": {
+    "conda_name": "rocketpy",
+    "import_name": "rocketpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rocketpy"
+  },
+  "rocketry": {
+    "conda_name": "rocketry",
+    "import_name": "rocketry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rocketry"
+  },
+  "rockhound": {
+    "conda_name": "rockhound",
+    "import_name": "rockhound",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rockhound"
+  },
+  "rocksdbdict": {
+    "conda_name": "rocksdbdict",
+    "import_name": "rocksdbdict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rocksdbdict"
+  },
+  "rockverse": {
+    "conda_name": "rockverse",
+    "import_name": "rockverse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rockverse"
+  },
+  "rocrate": {
+    "conda_name": "rocrate",
+    "import_name": "rocrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rocrate"
+  },
+  "rocrate-inveniordm": {
+    "conda_name": "rocrate-inveniordm",
+    "import_name": "rocrate_inveniordm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rocrate-inveniordm"
+  },
+  "rodeometric": {
+    "conda_name": "rodeometric",
+    "import_name": "rodeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rodeometric"
+  },
+  "roifile": {
+    "conda_name": "roifile",
+    "import_name": "roifile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roifile"
+  },
+  "roman-numerals": {
+    "conda_name": "roman-numerals",
+    "import_name": "roman_numerals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roman-numerals"
+  },
+  "roman-numerals-py": {
+    "conda_name": "roman-numerals-py",
+    "import_name": "roman_numerals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roman-numerals-py"
+  },
+  "roms-tools": {
+    "conda_name": "roms-tools",
+    "import_name": "roms_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roms-tools"
+  },
+  "romspline": {
+    "conda_name": "romspline",
+    "import_name": "romspline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "romspline"
+  },
+  "roocs-grids": {
+    "conda_name": "roocs-grids",
+    "import_name": "roocs_grids",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roocs-grids"
+  },
+  "rooki": {
+    "conda_name": "rooki",
+    "import_name": "rooki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rooki"
+  },
+  "rootpath": {
+    "conda_name": "rootpath",
+    "import_name": "rootpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rootpath"
+  },
+  "rope": {
+    "conda_name": "rope",
+    "import_name": "rope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rope"
+  },
+  "ropgadget": {
+    "conda_name": "ropgadget",
+    "import_name": "ropgadget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ropgadget"
+  },
+  "rosbags": {
+    "conda_name": "rosbags",
+    "import_name": "rosbags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rosbags"
+  },
+  "roseau-load-flow": {
+    "conda_name": "roseau-load-flow",
+    "import_name": "roseau.load_flow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roseau-load-flow"
+  },
+  "rosegeomap": {
+    "conda_name": "rosegeomap",
+    "import_name": "rosegeomap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rosegeomap"
+  },
+  "roslibpy": {
+    "conda_name": "roslibpy",
+    "import_name": "roslibpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "roslibpy"
+  },
+  "rotamerconvolvemd": {
+    "conda_name": "rotamerconvolvemd",
+    "import_name": "rotcon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rotamerconvolvemd"
+  },
+  "rouge-score": {
+    "conda_name": "rouge-score",
+    "import_name": "rouge_score",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rouge-score"
+  },
+  "routes": {
+    "conda_name": "routes",
+    "import_name": "routes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "routes"
+  },
+  "routingpy": {
+    "conda_name": "routingpy",
+    "import_name": "routingpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "routingpy"
+  },
+  "rowan": {
+    "conda_name": "rowan",
+    "import_name": "rowan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rowan"
+  },
+  "rpaframework": {
+    "conda_name": "rpaframework",
+    "import_name": "RPA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpaframework"
+  },
+  "rpaframework-core": {
+    "conda_name": "rpaframework-core",
+    "import_name": "RPA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpaframework-core"
+  },
+  "rpaframework-pdf": {
+    "conda_name": "rpaframework-pdf",
+    "import_name": "RPA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpaframework-pdf"
+  },
+  "rpaframework-recognition": {
+    "conda_name": "rpaframework-recognition",
+    "import_name": "RPA",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpaframework-recognition"
+  },
+  "rpaths": {
+    "conda_name": "rpaths",
+    "import_name": "rpaths",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpaths"
+  },
+  "rpcq": {
+    "conda_name": "rpcq",
+    "import_name": "rpcq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpcq"
+  },
+  "rpdb": {
+    "conda_name": "rpdb",
+    "import_name": "rpdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpdb"
+  },
+  "rply": {
+    "conda_name": "rply",
+    "import_name": "rply",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rply"
+  },
+  "rpm-vercmp": {
+    "conda_name": "rpm-vercmp",
+    "import_name": "rpm_vercmp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpm-vercmp"
+  },
+  "rpy2-arrow": {
+    "conda_name": "rpy2-arrow",
+    "import_name": "rpy2_arrow.pyarrow_rarrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rpy2-arrow"
+  },
+  "rq-dashboard": {
+    "conda_name": "rq-dashboard",
+    "import_name": "rq_dashboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rq-dashboard"
+  },
+  "rq-geo-toolkit": {
+    "conda_name": "rq_geo_toolkit",
+    "import_name": "rq_geo_toolkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rq-geo-toolkit"
+  },
+  "rq-scheduler": {
+    "conda_name": "rq_scheduler",
+    "import_name": "rq_scheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rq-scheduler"
+  },
+  "rs1090": {
+    "conda_name": "rs1090",
+    "import_name": "rs1090",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rs1090"
+  },
+  "rsa": {
+    "conda_name": "rsa",
+    "import_name": "rsa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rsa"
+  },
+  "rsatoolbox": {
+    "conda_name": "rsatoolbox",
+    "import_name": "rsatoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rsatoolbox"
+  },
+  "rse": {
+    "conda_name": "rse",
+    "import_name": "rse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rse"
+  },
+  "rshiny-server-cmd": {
+    "conda_name": "rshiny-server-cmd",
+    "import_name": "rshiny_server_cmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rshiny-server-cmd"
+  },
+  "rspace-client": {
+    "conda_name": "rspace-client",
+    "import_name": "rspace_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rspace-client"
+  },
+  "rsspolymlp": {
+    "conda_name": "rsspolymlp",
+    "import_name": "rsspolymlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rsspolymlp"
+  },
+  "rst-to-myst": {
+    "conda_name": "rst-to-myst",
+    "import_name": "rst_to_myst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rst-to-myst"
+  },
+  "rst2ansi": {
+    "conda_name": "rst2ansi",
+    "import_name": "rst2ansi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rst2ansi"
+  },
+  "rst2html5": {
+    "conda_name": "rst2html5",
+    "import_name": "rst2html5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rst2html5"
+  },
+  "rst2pdf": {
+    "conda_name": "rst2pdf",
+    "import_name": "rst2pdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rst2pdf"
+  },
+  "rst2txt": {
+    "conda_name": "rst2txt",
+    "import_name": "rst2txt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rst2txt"
+  },
+  "rstcheck": {
+    "conda_name": "rstcheck",
+    "import_name": "rstcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rstcheck"
+  },
+  "rstcheck-core": {
+    "conda_name": "rstcheck-core",
+    "import_name": "rstcheck_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rstcheck-core"
+  },
+  "rstr": {
+    "conda_name": "rstr",
+    "import_name": "rstr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rstr"
+  },
+  "rstream": {
+    "conda_name": "rstream",
+    "import_name": "rstream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rstream"
+  },
+  "rt-eqcorrscan": {
+    "conda_name": "rt-eqcorrscan",
+    "import_name": "rt_eqcorrscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rt-eqcorrscan"
+  },
+  "rt1": {
+    "conda_name": "rt1",
+    "import_name": "rt1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rt1"
+  },
+  "rtb-data": {
+    "conda_name": "rtb-data",
+    "import_name": "rtbdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rtb-data"
+  },
+  "rtd-poetry": {
+    "conda_name": "rtd-poetry",
+    "import_name": "rtd_poetry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rtd-poetry"
+  },
+  "rtdip-sdk": {
+    "conda_name": "rtdip-sdk",
+    "import_name": "rtdip_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rtdip-sdk"
+  },
+  "rtfde": {
+    "conda_name": "rtfde",
+    "import_name": "RTFDE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rtfde"
+  },
+  "rtree": {
+    "conda_name": "rtree",
+    "import_name": "rtree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rtree"
+  },
+  "ruamel-yaml": {
+    "conda_name": "ruamel.yaml",
+    "import_name": "ruamel.yaml",
+    "mapping_source": "static",
+    "pypi_name": "ruamel-yaml"
+  },
+  "ruamel-yaml-jinja2": {
+    "conda_name": "ruamel.yaml.jinja2",
+    "import_name": "ruamel.yaml.jinja2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ruamel-yaml-jinja2"
+  },
+  "rubicon-ml": {
+    "conda_name": "rubicon-ml",
+    "import_name": "rubicon_ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rubicon-ml"
+  },
+  "rubin-nights": {
+    "conda_name": "rubin-nights",
+    "import_name": "rubin_nights",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rubin-nights"
+  },
+  "rubin-scheduler": {
+    "conda_name": "rubin-scheduler",
+    "import_name": "rubin_scheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rubin-scheduler"
+  },
+  "rucio-clients": {
+    "conda_name": "rucio-clients",
+    "import_name": "rucio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rucio-clients"
+  },
+  "ruff-lsp": {
+    "conda_name": "ruff-lsp",
+    "import_name": "ruff_lsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ruff-lsp"
+  },
+  "rule-engine": {
+    "conda_name": "rule-engine",
+    "import_name": "rule_engine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rule-engine"
+  },
+  "rules": {
+    "conda_name": "rules",
+    "import_name": "rules",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rules"
+  },
+  "rumps": {
+    "conda_name": "rumps",
+    "import_name": "rumps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rumps"
+  },
+  "runps": {
+    "conda_name": "runps",
+    "import_name": "runps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "runps"
+  },
+  "runpynb": {
+    "conda_name": "runpynb",
+    "import_name": "runpynb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "runpynb"
+  },
+  "runs": {
+    "conda_name": "runs",
+    "import_name": "runs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "runs"
+  },
+  "runtime-introspect": {
+    "conda_name": "runtime-introspect",
+    "import_name": "runtime_introspect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "runtime-introspect"
+  },
+  "runtype": {
+    "conda_name": "runtype",
+    "import_name": "runtype",
+    "mapping_source": "regro-bot",
+    "pypi_name": "runtype"
+  },
+  "ruptura": {
+    "conda_name": "ruptura",
+    "import_name": "ruptura",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ruptura"
+  },
+  "ruptures": {
+    "conda_name": "ruptures",
+    "import_name": "ruptures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ruptures"
+  },
+  "rush": {
+    "conda_name": "rush-throttle",
+    "import_name": "rush",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rush"
+  },
+  "rustiql": {
+    "conda_name": "rustiql",
+    "import_name": "rustiql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rustiql"
+  },
+  "ruyaml": {
+    "conda_name": "ruyaml",
+    "import_name": "ruyaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ruyaml"
+  },
+  "rvc3python": {
+    "conda_name": "rvc3python",
+    "import_name": "RVC3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rvc3python"
+  },
+  "rvlib": {
+    "conda_name": "rvlib",
+    "import_name": "rvlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rvlib"
+  },
+  "rx": {
+    "conda_name": "rx",
+    "import_name": "rx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rx"
+  },
+  "rxn-chem-utils": {
+    "conda_name": "rxn-chem-utils",
+    "import_name": "rxn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rxn-chem-utils"
+  },
+  "rxn-utils": {
+    "conda_name": "rxn-utils",
+    "import_name": "rxn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rxn-utils"
+  },
+  "rxnmapper": {
+    "conda_name": "rxnmapper",
+    "import_name": "rxnmapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "rxnmapper"
+  },
+  "ryp": {
+    "conda_name": "ryp",
+    "import_name": "ryp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ryp"
+  },
+  "ryven": {
+    "conda_name": "ryven",
+    "import_name": "ryven",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ryven"
+  },
+  "ryvencore": {
+    "conda_name": "ryvencore",
+    "import_name": "ryvencore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ryvencore"
+  },
+  "ryvencore-qt": {
+    "conda_name": "ryvencore-qt",
+    "import_name": "ryvencore_qt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ryvencore-qt"
+  },
+  "s-gd2": {
+    "conda_name": "s_gd2",
+    "import_name": "s_gd2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s-gd2"
+  },
+  "s1-frame-enumerator": {
+    "conda_name": "s1_frame_enumerator",
+    "import_name": "s1_frame_enumerator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s1-frame-enumerator"
+  },
+  "s1-orbits": {
+    "conda_name": "s1_orbits",
+    "import_name": "s1_orbits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s1-orbits"
+  },
+  "s1aux": {
+    "conda_name": "s1aux",
+    "import_name": "s1aux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s1aux"
+  },
+  "s1etad": {
+    "conda_name": "s1etad",
+    "import_name": "s1etad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s1etad"
+  },
+  "s2cloudless": {
+    "conda_name": "s2cloudless",
+    "import_name": "s2cloudless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s2cloudless"
+  },
+  "s2downloader": {
+    "conda_name": "s2downloader",
+    "import_name": "s2downloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s2downloader"
+  },
+  "s2sphere": {
+    "conda_name": "s2sphere",
+    "import_name": "s2sphere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s2sphere"
+  },
+  "s3contents": {
+    "conda_name": "s3contents",
+    "import_name": "s3contents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s3contents"
+  },
+  "s3fs": {
+    "conda_name": "s3fs",
+    "import_name": "s3fs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s3fs"
+  },
+  "s3path": {
+    "conda_name": "s3path",
+    "import_name": "s3path",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s3path"
+  },
+  "s3transfer": {
+    "conda_name": "s3transfer",
+    "import_name": "s3transfer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "s3transfer"
+  },
+  "sacc": {
+    "conda_name": "sacc",
+    "import_name": "sacc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sacc"
+  },
+  "sacrebleu": {
+    "conda_name": "sacrebleu",
+    "import_name": "sacrebleu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sacrebleu"
+  },
+  "sacred": {
+    "conda_name": "sacred",
+    "import_name": "sacred",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sacred"
+  },
+  "sacremoses": {
+    "conda_name": "sacremoses",
+    "import_name": "sacremoses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sacremoses"
+  },
+  "sacroml": {
+    "conda_name": "sacroml",
+    "import_name": "sacroml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sacroml"
+  },
+  "sadisplay": {
+    "conda_name": "sadisplay",
+    "import_name": "sadisplay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sadisplay"
+  },
+  "safe-mol": {
+    "conda_name": "safe-mol",
+    "import_name": "safe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "safe-mol"
+  },
+  "safe-netrc": {
+    "conda_name": "safe-netrc",
+    "import_name": "safe_netrc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "safe-netrc"
+  },
+  "safehttpx": {
+    "conda_name": "safehttpx",
+    "import_name": "safehttpx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "safehttpx"
+  },
+  "saga-python": {
+    "conda_name": "saga-python",
+    "import_name": "saga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "saga-python"
+  },
+  "sage-flatsurf": {
+    "conda_name": "sage-flatsurf",
+    "import_name": "flatsurf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sage-flatsurf"
+  },
+  "sagemaker": {
+    "conda_name": "sagemaker-python-sdk",
+    "import_name": "sagemaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker"
+  },
+  "sagemaker-containers": {
+    "conda_name": "sagemaker_containers",
+    "import_name": "sagemaker_containers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-containers"
+  },
+  "sagemaker-core": {
+    "conda_name": "sagemaker-core",
+    "import_name": "sagemaker.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-core"
+  },
+  "sagemaker-gen-ai-jupyterlab-extension": {
+    "conda_name": "sagemaker-gen-ai-jupyterlab-extension",
+    "import_name": "sagemaker_gen_ai_jupyterlab_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-gen-ai-jupyterlab-extension"
+  },
+  "sagemaker-headless-execution-driver": {
+    "conda_name": "sagemaker-headless-execution-driver",
+    "import_name": "sagemaker_headless_execution_driver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-headless-execution-driver"
+  },
+  "sagemaker-jupyterlab-emr-extension": {
+    "conda_name": "sagemaker-jupyterlab-emr-extension",
+    "import_name": "sagemaker_jupyterlab_emr_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-jupyterlab-emr-extension"
+  },
+  "sagemaker-jupyterlab-extension": {
+    "conda_name": "sagemaker-jupyterlab-extension",
+    "import_name": "sagemaker_jupyterlab_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-jupyterlab-extension"
+  },
+  "sagemaker-jupyterlab-extension-common": {
+    "conda_name": "sagemaker-jupyterlab-extension-common",
+    "import_name": "sagemaker_jupyterlab_extension_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-jupyterlab-extension-common"
+  },
+  "sagemaker-kernel-wrapper": {
+    "conda_name": "sagemaker-kernel-wrapper",
+    "import_name": "sagemaker_kernel_wrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-kernel-wrapper"
+  },
+  "sagemaker-mlflow": {
+    "conda_name": "sagemaker-mlflow",
+    "import_name": "sagemaker_mlflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-mlflow"
+  },
+  "sagemaker-mxnet-training": {
+    "conda_name": "sagemaker_mxnet_container",
+    "import_name": "sagemaker_mxnet_container",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-mxnet-training"
+  },
+  "sagemaker-pyspark": {
+    "conda_name": "sagemaker_pyspark",
+    "import_name": "sagemaker_pyspark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-pyspark"
+  },
+  "sagemaker-studio": {
+    "conda_name": "sagemaker-studio",
+    "import_name": "sagemaker_studio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-studio"
+  },
+  "sagemaker-studio-analytics-extension": {
+    "conda_name": "sagemaker-studio-analytics-extension",
+    "import_name": "sagemaker_studio_analytics_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-studio-analytics-extension"
+  },
+  "sagemaker-studio-cli": {
+    "conda_name": "sagemaker-studio-cli",
+    "import_name": "sagemaker_studio_cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-studio-cli"
+  },
+  "sagemaker-studio-image-build": {
+    "conda_name": "sagemaker-studio-image-build",
+    "import_name": "sagemaker_studio_image_build",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-studio-image-build"
+  },
+  "sagemaker-studio-sparkmagic-lib": {
+    "conda_name": "sagemaker-studio-sparkmagic-lib",
+    "import_name": "sagemaker_studio_sparkmagic_lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sagemaker-studio-sparkmagic-lib"
+  },
+  "salabim": {
+    "conda_name": "salabim",
+    "import_name": "salabim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "salabim"
+  },
+  "salem": {
+    "conda_name": "salem",
+    "import_name": "salem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "salem"
+  },
+  "salesforce-merlion": {
+    "conda_name": "salesforce-merlion",
+    "import_name": "merlion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "salesforce-merlion"
+  },
+  "samplex": {
+    "conda_name": "samplex",
+    "import_name": "samplex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "samplex"
+  },
+  "samsam": {
+    "conda_name": "samsam",
+    "import_name": "samsam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "samsam"
+  },
+  "samsungtvws": {
+    "conda_name": "samsungtvws",
+    "import_name": "samsungtvws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "samsungtvws"
+  },
+  "sanic": {
+    "conda_name": "sanic",
+    "import_name": "sanic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanic"
+  },
+  "sanic-cors": {
+    "conda_name": "sanic-cors",
+    "import_name": "sanic_cors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanic-cors"
+  },
+  "sanic-plugins-framework": {
+    "conda_name": "sanic-plugins-framework",
+    "import_name": "spf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanic-plugins-framework"
+  },
+  "sanic-routing": {
+    "conda_name": "sanic-routing",
+    "import_name": "sanic_routing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanic-routing"
+  },
+  "sanic-testing": {
+    "conda_name": "sanic-testing",
+    "import_name": "sanic_testing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanic-testing"
+  },
+  "sanitize-ml-labels": {
+    "conda_name": "sanitize_ml_labels",
+    "import_name": "sanitize_ml_labels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sanitize-ml-labels"
+  },
+  "sankee": {
+    "conda_name": "sankee",
+    "import_name": "sankee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sankee"
+  },
+  "sansio-multipart": {
+    "conda_name": "sansio-multipart",
+    "import_name": "sansio_multipart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sansio-multipart"
+  },
+  "sapiens": {
+    "conda_name": "sapiens",
+    "import_name": "sapiens",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sapiens"
+  },
+  "saqc": {
+    "conda_name": "saqc",
+    "import_name": "saqc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "saqc"
+  },
+  "sardem": {
+    "conda_name": "sardem",
+    "import_name": "sardem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sardem"
+  },
+  "sarge": {
+    "conda_name": "sarge",
+    "import_name": "sarge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sarge"
+  },
+  "sarif-om": {
+    "conda_name": "sarif-om",
+    "import_name": "sarif_om",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sarif-om"
+  },
+  "sarkit": {
+    "conda_name": "sarkit",
+    "import_name": "sarkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sarkit"
+  },
+  "sarpy": {
+    "conda_name": "sarpy",
+    "import_name": "sarpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sarpy"
+  },
+  "sarsen": {
+    "conda_name": "sarsen",
+    "import_name": "sarsen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sarsen"
+  },
+  "sas-kernel": {
+    "conda_name": "sas_kernel",
+    "import_name": "sas_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sas-kernel"
+  },
+  "sas7bdat": {
+    "conda_name": "sas7bdat",
+    "import_name": "sas7bdat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sas7bdat"
+  },
+  "sasdata": {
+    "conda_name": "sasdata",
+    "import_name": "sasdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sasdata"
+  },
+  "sasmodels": {
+    "conda_name": "sasmodels",
+    "import_name": "sasmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sasmodels"
+  },
+  "saspy": {
+    "conda_name": "saspy",
+    "import_name": "saspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "saspy"
+  },
+  "sat-search": {
+    "conda_name": "sat-search",
+    "import_name": "satsearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sat-search"
+  },
+  "sat-stac": {
+    "conda_name": "sat-stac",
+    "import_name": "satstac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sat-stac"
+  },
+  "satchip": {
+    "conda_name": "satchip",
+    "import_name": "satchip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "satchip"
+  },
+  "satlaspretrain-models": {
+    "conda_name": "satlaspretrain-models",
+    "import_name": "satlaspretrain_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "satlaspretrain-models"
+  },
+  "satmad": {
+    "conda_name": "satmad",
+    "import_name": "satmad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "satmad"
+  },
+  "satpy": {
+    "conda_name": "satpy",
+    "import_name": "satpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "satpy"
+  },
+  "sb3-contrib": {
+    "conda_name": "sb3-contrib",
+    "import_name": "sb3_contrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sb3-contrib"
+  },
+  "sbank": {
+    "conda_name": "sbank",
+    "import_name": "sbank",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sbank"
+  },
+  "sbmlmath": {
+    "conda_name": "sbmlmath",
+    "import_name": "sbmlmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sbmlmath"
+  },
+  "sbpy": {
+    "conda_name": "sbpy",
+    "import_name": "sbpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sbpy"
+  },
+  "sbtab": {
+    "conda_name": "sbtab",
+    "import_name": "sbtab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sbtab"
+  },
+  "sbtabpy": {
+    "conda_name": "sbtabpy",
+    "import_name": "sbtab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sbtabpy"
+  },
+  "sc-3d": {
+    "conda_name": "sc-3d",
+    "import_name": "sc3D",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sc-3d"
+  },
+  "scaleapi": {
+    "conda_name": "scaleapi",
+    "import_name": "scaleapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scaleapi"
+  },
+  "scalene": {
+    "conda_name": "scalene",
+    "import_name": "scalene",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scalene"
+  },
+  "scandir": {
+    "conda_name": "scandir",
+    "import_name": "scandir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scandir"
+  },
+  "scanning-drift-corr": {
+    "conda_name": "scanning_drift_corr",
+    "import_name": "scanning_drift_corr.api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scanning-drift-corr"
+  },
+  "scanpdf": {
+    "conda_name": "scanpdf",
+    "import_name": "scanpdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scanpdf"
+  },
+  "scanpy": {
+    "conda_name": "scanpy",
+    "import_name": "scanpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scanpy"
+  },
+  "scanspec": {
+    "conda_name": "scanspec",
+    "import_name": "scanspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scanspec"
+  },
+  "scapy": {
+    "conda_name": "scapy",
+    "import_name": "scapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scapy"
+  },
+  "scattertext": {
+    "conda_name": "scattertext",
+    "import_name": "scattertext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scattertext"
+  },
+  "sccoda": {
+    "conda_name": "sccoda",
+    "import_name": "sccoda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sccoda"
+  },
+  "sceptre": {
+    "conda_name": "sceptre",
+    "import_name": "sceptre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sceptre"
+  },
+  "sceptre-cmd-resolver": {
+    "conda_name": "sceptre-cmd-resolver",
+    "import_name": "resolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sceptre-cmd-resolver"
+  },
+  "sceptre-file-resolver": {
+    "conda_name": "sceptre-file-resolver",
+    "import_name": "resolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sceptre-file-resolver"
+  },
+  "scgraph": {
+    "conda_name": "scgraph",
+    "import_name": "scgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scgraph"
+  },
+  "schedule": {
+    "conda_name": "schedule",
+    "import_name": "schedule",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schedule"
+  },
+  "scheduler": {
+    "conda_name": "scheduler",
+    "import_name": "scheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scheduler"
+  },
+  "schedview": {
+    "conda_name": "schedview",
+    "import_name": "schedview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schedview"
+  },
+  "scheil": {
+    "conda_name": "scheil",
+    "import_name": "scheil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scheil"
+  },
+  "schema": {
+    "conda_name": "schema",
+    "import_name": "schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schema"
+  },
+  "schema-salad": {
+    "conda_name": "schema-salad",
+    "import_name": "schema_salad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schema-salad"
+  },
+  "schemainspect": {
+    "conda_name": "schemainspect",
+    "import_name": "schemainspect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schemainspect"
+  },
+  "schemaorg": {
+    "conda_name": "schemaorg",
+    "import_name": "schemaorg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schemaorg"
+  },
+  "schematics": {
+    "conda_name": "schematics",
+    "import_name": "schematics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schematics"
+  },
+  "schemdraw": {
+    "conda_name": "schemdraw",
+    "import_name": "schemdraw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schemdraw"
+  },
+  "scherbelberg": {
+    "conda_name": "scherbelberg",
+    "import_name": "scherbelberg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scherbelberg"
+  },
+  "schnetpack": {
+    "conda_name": "schnetpack",
+    "import_name": "schnetpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schnetpack"
+  },
+  "scholarly": {
+    "conda_name": "scholarly",
+    "import_name": "scholarly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scholarly"
+  },
+  "scholarpy": {
+    "conda_name": "scholarpy",
+    "import_name": "scholarpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scholarpy"
+  },
+  "schwimmbad": {
+    "conda_name": "schwimmbad",
+    "import_name": "schwimmbad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "schwimmbad"
+  },
+  "sci-fab": {
+    "conda_name": "sci-fab",
+    "import_name": "fab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sci-fab"
+  },
+  "scico": {
+    "conda_name": "scico",
+    "import_name": "scico",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scico"
+  },
+  "scicookie": {
+    "conda_name": "scicookie",
+    "import_name": "scicookie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scicookie"
+  },
+  "scientific-pydantic": {
+    "conda_name": "scientific-pydantic",
+    "import_name": "scientific_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scientific-pydantic"
+  },
+  "scif": {
+    "conda_name": "scif",
+    "import_name": "scif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scif"
+  },
+  "scifireaders": {
+    "conda_name": "scifireaders",
+    "import_name": "SciFiReaders",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scifireaders"
+  },
+  "scikit-allel": {
+    "conda_name": "scikit-allel",
+    "import_name": "allel.opt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-allel"
+  },
+  "scikit-beam": {
+    "conda_name": "scikit-beam",
+    "import_name": "skbeam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-beam"
+  },
+  "scikit-bio": {
+    "conda_name": "scikit-bio",
+    "import_name": "skbio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-bio"
+  },
+  "scikit-datasets": {
+    "conda_name": "scikit-datasets",
+    "import_name": "skdatasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-datasets"
+  },
+  "scikit-downscale": {
+    "conda_name": "scikit-downscale",
+    "import_name": "skdownscale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-downscale"
+  },
+  "scikit-dsp-comm": {
+    "conda_name": "scikit-dsp-comm",
+    "import_name": "sk_dsp_comm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-dsp-comm"
+  },
+  "scikit-explain": {
+    "conda_name": "scikit-explain",
+    "import_name": "skexplain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-explain"
+  },
+  "scikit-fda": {
+    "conda_name": "scikit-fda",
+    "import_name": "skfda",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-fda"
+  },
+  "scikit-fdiff": {
+    "conda_name": "scikit-fdiff",
+    "import_name": "skfdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-fdiff"
+  },
+  "scikit-fem": {
+    "conda_name": "scikit-fem",
+    "import_name": "skfem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-fem"
+  },
+  "scikit-fmm": {
+    "conda_name": "scikit-fmm",
+    "import_name": "skfmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-fmm"
+  },
+  "scikit-fuzzy": {
+    "conda_name": "scikit-fuzzy",
+    "import_name": "skfuzzy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-fuzzy"
+  },
+  "scikit-garden": {
+    "conda_name": "scikit-garden",
+    "import_name": "skgarden",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-garden"
+  },
+  "scikit-gstat": {
+    "conda_name": "scikit-gstat",
+    "import_name": "skgstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-gstat"
+  },
+  "scikit-learn-extra": {
+    "conda_name": "scikit-learn-extra",
+    "import_name": "sklearn_extra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-learn-extra"
+  },
+  "scikit-mobility": {
+    "conda_name": "scikit-mobility",
+    "import_name": "skmob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-mobility"
+  },
+  "scikit-mol": {
+    "conda_name": "scikit-mol",
+    "import_name": "scikit_mol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-mol"
+  },
+  "scikit-multiflow": {
+    "conda_name": "scikit-multiflow",
+    "import_name": "skmultiflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-multiflow"
+  },
+  "scikit-optimize": {
+    "conda_name": "scikit-optimize",
+    "import_name": "skopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-optimize"
+  },
+  "scikit-partial": {
+    "conda_name": "scikit-partial",
+    "import_name": "skpartial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-partial"
+  },
+  "scikit-plot": {
+    "conda_name": "scikit-plot",
+    "import_name": "scikitplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-plot"
+  },
+  "scikit-posthocs": {
+    "conda_name": "scikit-posthocs",
+    "import_name": "scikit_posthocs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-posthocs"
+  },
+  "scikit-procrustes": {
+    "conda_name": "scikit-procrustes",
+    "import_name": "skprocrustes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-procrustes"
+  },
+  "scikit-spatial": {
+    "conda_name": "scikit-spatial",
+    "import_name": "skspatial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-spatial"
+  },
+  "scikit-surprise": {
+    "conda_name": "scikit-surprise",
+    "import_name": "surprise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-surprise"
+  },
+  "scikit-ued": {
+    "conda_name": "scikit-ued",
+    "import_name": "skued",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scikit-ued"
+  },
+  "scilogger": {
+    "conda_name": "scilogger",
+    "import_name": "scilogger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scilogger"
+  },
+  "sciluigi": {
+    "conda_name": "sciluigi",
+    "import_name": "sciluigi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sciluigi"
+  },
+  "scipy-dae": {
+    "conda_name": "scipy_dae",
+    "import_name": "scipy_dae",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scipy-dae"
+  },
+  "scipy-events": {
+    "conda_name": "scipy-events",
+    "import_name": "scipy_events",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scipy-events"
+  },
+  "scipy-sugar": {
+    "conda_name": "scipy-sugar",
+    "import_name": "scipy_sugar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scipy-sugar"
+  },
+  "scipyconference": {
+    "conda_name": "scipyconference",
+    "import_name": "scipyconference",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scipyconference"
+  },
+  "scipydepr": {
+    "conda_name": "scipydepr",
+    "import_name": "scipydepr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scipydepr"
+  },
+  "sciris": {
+    "conda_name": "sciris",
+    "import_name": "sciris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sciris"
+  },
+  "scisave": {
+    "conda_name": "scisave",
+    "import_name": "scisave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scisave"
+  },
+  "scisoftpy": {
+    "conda_name": "scisoftpy",
+    "import_name": "scisoftpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scisoftpy"
+  },
+  "scisweeper": {
+    "conda_name": "scisweeper",
+    "import_name": "scisweeper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scisweeper"
+  },
+  "scitoolsscianalysis": {
+    "conda_name": "scitoolsscianalysis",
+    "import_name": "SciAnalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scitoolsscianalysis"
+  },
+  "scmdata": {
+    "conda_name": "scmdata",
+    "import_name": "scmdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scmdata"
+  },
+  "scmorph": {
+    "conda_name": "scmorph",
+    "import_name": "scmorph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scmorph"
+  },
+  "scmrepo": {
+    "conda_name": "scmrepo",
+    "import_name": "scmrepo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scmrepo"
+  },
+  "scons": {
+    "conda_name": "scons",
+    "import_name": "SCons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scons"
+  },
+  "scooby": {
+    "conda_name": "scooby",
+    "import_name": "scooby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scooby"
+  },
+  "scope-bio": {
+    "conda_name": "scope-bio",
+    "import_name": "scope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scope-bio"
+  },
+  "scorecardpy": {
+    "conda_name": "scorecardpy",
+    "import_name": "scorecardpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scorecardpy"
+  },
+  "scores": {
+    "conda_name": "scores",
+    "import_name": "scores",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scores"
+  },
+  "scoringrules": {
+    "conda_name": "scoringrules",
+    "import_name": "scoringrules",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scoringrules"
+  },
+  "scour": {
+    "conda_name": "scour",
+    "import_name": "scour.scour",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scour"
+  },
+  "scqubits": {
+    "conda_name": "scqubits",
+    "import_name": "scqubits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scqubits"
+  },
+  "scrapbook": {
+    "conda_name": "scrapbook",
+    "import_name": "scrapbook",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scrapbook"
+  },
+  "scrape-search-engine": {
+    "conda_name": "scrape-search-engine",
+    "import_name": "ScrapeSearchEngine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scrape-search-engine"
+  },
+  "scraps": {
+    "conda_name": "scraps",
+    "import_name": "scraps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scraps"
+  },
+  "scrapy-playwright": {
+    "conda_name": "scrapy-playwright",
+    "import_name": "scrapy_playwright",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scrapy-playwright"
+  },
+  "screed": {
+    "conda_name": "screed",
+    "import_name": "screed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "screed"
+  },
+  "screeninfo": {
+    "conda_name": "screeninfo",
+    "import_name": "screeninfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "screeninfo"
+  },
+  "scri": {
+    "conda_name": "scri",
+    "import_name": "scri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scri"
+  },
+  "scriptconfig": {
+    "conda_name": "scriptconfig",
+    "import_name": "scriptconfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scriptconfig"
+  },
+  "scriptengine": {
+    "conda_name": "scriptengine",
+    "import_name": "scriptengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scriptengine"
+  },
+  "scriptengine-tasks-hpc": {
+    "conda_name": "scriptengine-tasks-hpc",
+    "import_name": "hpctasks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scriptengine-tasks-hpc"
+  },
+  "scriptrunner-gui": {
+    "conda_name": "scriptrunner-gui",
+    "import_name": "scriptrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scriptrunner-gui"
+  },
+  "scripts": {
+    "conda_name": "scripts",
+    "import_name": "scripts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scripts"
+  },
+  "scriv": {
+    "conda_name": "scriv",
+    "import_name": "scriv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scriv"
+  },
+  "scrypt": {
+    "conda_name": "scrypt",
+    "import_name": "scrypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scrypt"
+  },
+  "scspell3k": {
+    "conda_name": "scspell3k",
+    "import_name": "scspell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scspell3k"
+  },
+  "sctour": {
+    "conda_name": "sctour",
+    "import_name": "sctour",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sctour"
+  },
+  "scvelo": {
+    "conda_name": "scvelo",
+    "import_name": "scvelo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scvelo"
+  },
+  "scvi-tools": {
+    "conda_name": "scvi-tools",
+    "import_name": "scvi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scvi-tools"
+  },
+  "scyjava": {
+    "conda_name": "scyjava",
+    "import_name": "scyjava",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scyjava"
+  },
+  "scylla-driver": {
+    "conda_name": "scylla-driver",
+    "import_name": "cassandra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "scylla-driver"
+  },
+  "sdaxen-python-utilities": {
+    "conda_name": "sdaxen_python_utilities",
+    "import_name": "python_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdaxen-python-utilities"
+  },
+  "sdds": {
+    "conda_name": "sdds",
+    "import_name": "sdds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdds"
+  },
+  "sdgym": {
+    "conda_name": "sdgym",
+    "import_name": "sdgym",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdgym"
+  },
+  "sdjson": {
+    "conda_name": "sdjson",
+    "import_name": "sdjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdjson"
+  },
+  "sdmetrics": {
+    "conda_name": "sdmetrics",
+    "import_name": "sdmetrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdmetrics"
+  },
+  "sdnotify": {
+    "conda_name": "sdnotify",
+    "import_name": "sdnotify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdnotify"
+  },
+  "sdtfile": {
+    "conda_name": "sdtfile",
+    "import_name": "sdtfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdtfile"
+  },
+  "sdv": {
+    "conda_name": "sdv",
+    "import_name": "sdv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sdv"
+  },
+  "sea-names": {
+    "conda_name": "sea-names",
+    "import_name": "sea_names",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sea-names"
+  },
+  "seabird": {
+    "conda_name": "seabird",
+    "import_name": "seabird",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seabird"
+  },
+  "seabirdfilehandler": {
+    "conda_name": "seabirdfilehandler",
+    "import_name": "seabirdfilehandler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seabirdfilehandler"
+  },
+  "seabirdscientific": {
+    "conda_name": "seabirdscientific",
+    "import_name": "seabirdscientific",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seabirdscientific"
+  },
+  "seaborn": {
+    "conda_name": "seaborn-base",
+    "import_name": "seaborn",
+    "mapping_source": "static",
+    "pypi_name": "seaborn"
+  },
+  "seaborn-image": {
+    "conda_name": "seaborn-image",
+    "import_name": "seaborn_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seaborn-image"
+  },
+  "seabreeze": {
+    "conda_name": "seabreeze",
+    "import_name": "seabreeze",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seabreeze"
+  },
+  "seaduck": {
+    "conda_name": "seaduck",
+    "import_name": "seaduck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seaduck"
+  },
+  "seamless-3dep": {
+    "conda_name": "seamless-3dep",
+    "import_name": "seamless_3dep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamless-3dep"
+  },
+  "seamm": {
+    "conda_name": "seamm",
+    "import_name": "seamm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm"
+  },
+  "seamm-dashboard-client": {
+    "conda_name": "seamm-dashboard-client",
+    "import_name": "seamm_dashboard_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm-dashboard-client"
+  },
+  "seamm-datastore": {
+    "conda_name": "seamm-datastore",
+    "import_name": "seamm_datastore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm-datastore"
+  },
+  "seamm-installer": {
+    "conda_name": "seamm-installer",
+    "import_name": "seamm_installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm-installer"
+  },
+  "seamm-util": {
+    "conda_name": "seamm-util",
+    "import_name": "seamm_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm-util"
+  },
+  "seamm-widgets": {
+    "conda_name": "seamm-widgets",
+    "import_name": "seamm_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seamm-widgets"
+  },
+  "seapipy": {
+    "conda_name": "seapipy",
+    "import_name": "seapipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seapipy"
+  },
+  "search-engine-parser": {
+    "conda_name": "search-engine-parser",
+    "import_name": "search_engine_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "search-engine-parser"
+  },
+  "seareport-data": {
+    "conda_name": "seareport-data",
+    "import_name": "seareport_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seareport-data"
+  },
+  "searoute": {
+    "conda_name": "searoute",
+    "import_name": "searoute",
+    "mapping_source": "regro-bot",
+    "pypi_name": "searoute"
+  },
+  "seastats": {
+    "conda_name": "seastats",
+    "import_name": "seastats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seastats"
+  },
+  "seawater": {
+    "conda_name": "seawater",
+    "import_name": "seawater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seawater"
+  },
+  "seawater-crm": {
+    "conda_name": "seawater_crm",
+    "import_name": "seawater_crm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seawater-crm"
+  },
+  "secimport": {
+    "conda_name": "secimport",
+    "import_name": "secimport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "secimport"
+  },
+  "seclea-ai": {
+    "conda_name": "seclea_ai",
+    "import_name": "seclea_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seclea-ai"
+  },
+  "secml": {
+    "conda_name": "secml",
+    "import_name": "secml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "secml"
+  },
+  "secondarycoolantprops": {
+    "conda_name": "secondarycoolantprops",
+    "import_name": "scp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "secondarycoolantprops"
+  },
+  "secretstorage": {
+    "conda_name": "secretstorage",
+    "import_name": "secretstorage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "secretstorage"
+  },
+  "sectionate": {
+    "conda_name": "sectionate",
+    "import_name": "sectionate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sectionate"
+  },
+  "securesystemslib": {
+    "conda_name": "securesystemslib",
+    "import_name": "securesystemslib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "securesystemslib"
+  },
+  "seed-isort-config": {
+    "conda_name": "seed-isort-config",
+    "import_name": "seed_isort_config",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seed-isort-config"
+  },
+  "seedbank": {
+    "conda_name": "seedbank",
+    "import_name": "seedbank",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seedbank"
+  },
+  "seedir": {
+    "conda_name": "seedir",
+    "import_name": "seedir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seedir"
+  },
+  "segment-anything-fast": {
+    "conda_name": "segment-anything-fast",
+    "import_name": "fastsam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segment-anything-fast"
+  },
+  "segment-anything-hq": {
+    "conda_name": "segment-anything-hq",
+    "import_name": "segment_anything_hq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segment-anything-hq"
+  },
+  "segment-anything-py": {
+    "conda_name": "segment-anything",
+    "import_name": "segment_anything",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segment-anything-py"
+  },
+  "segment-geospatial": {
+    "conda_name": "segment-geospatial",
+    "import_name": "samgeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segment-geospatial"
+  },
+  "segment-lidar": {
+    "conda_name": "segment-lidar",
+    "import_name": "segment_lidar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segment-lidar"
+  },
+  "segmentation-models-pytorch": {
+    "conda_name": "segmentation-models-pytorch",
+    "import_name": "segmentation_models_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segmentation-models-pytorch"
+  },
+  "segno": {
+    "conda_name": "segno",
+    "import_name": "segno",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segno"
+  },
+  "segregation": {
+    "conda_name": "segregation",
+    "import_name": "segregation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segregation"
+  },
+  "segtok": {
+    "conda_name": "segtok",
+    "import_name": "segtok",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segtok"
+  },
+  "segy": {
+    "conda_name": "segy",
+    "import_name": "segy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "segy"
+  },
+  "seiqrdp-model": {
+    "conda_name": "seiqrdp-model",
+    "import_name": "seiqrdp_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seiqrdp-model"
+  },
+  "seir": {
+    "conda_name": "seir",
+    "import_name": "SEIR",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seir"
+  },
+  "seismon": {
+    "conda_name": "seismon",
+    "import_name": "seismon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seismon"
+  },
+  "sekve": {
+    "conda_name": "sekve",
+    "import_name": "sekve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sekve"
+  },
+  "selectio": {
+    "conda_name": "selectio",
+    "import_name": "selectio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selectio"
+  },
+  "selectolax": {
+    "conda_name": "selectolax",
+    "import_name": "selectolax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selectolax"
+  },
+  "selectors34": {
+    "conda_name": "selectors34",
+    "import_name": "selectors34",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selectors34"
+  },
+  "selenium-requests": {
+    "conda_name": "selenium-requests",
+    "import_name": "seleniumrequests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selenium-requests"
+  },
+  "selfeeg": {
+    "conda_name": "selfeeg",
+    "import_name": "selfeeg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selfeeg"
+  },
+  "selinux": {
+    "conda_name": "python-selinux",
+    "import_name": "selinux",
+    "mapping_source": "regro-bot",
+    "pypi_name": "selinux"
+  },
+  "sella": {
+    "conda_name": "sella",
+    "import_name": "sella",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sella"
+  },
+  "semantic-code-search": {
+    "conda_name": "semantic-code-search",
+    "import_name": "semantic_code_search",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semantic-code-search"
+  },
+  "semantic-version": {
+    "conda_name": "semantic_version",
+    "import_name": "semantic_version",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semantic-version"
+  },
+  "semchunk": {
+    "conda_name": "semchunk",
+    "import_name": "semchunk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semchunk"
+  },
+  "semi-ate": {
+    "conda_name": "semi-ate",
+    "import_name": "ATE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate"
+  },
+  "semi-ate-apps-common": {
+    "conda_name": "semi-ate-apps-common",
+    "import_name": "ate_apps_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-apps-common"
+  },
+  "semi-ate-common": {
+    "conda_name": "semi-ate-common",
+    "import_name": "ate_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-common"
+  },
+  "semi-ate-control-app": {
+    "conda_name": "semi-ate-control-app",
+    "import_name": "ate_control_app",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-control-app"
+  },
+  "semi-ate-installer": {
+    "conda_name": "semi-ate-installer",
+    "import_name": "semi_ate_installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-installer"
+  },
+  "semi-ate-master-app": {
+    "conda_name": "semi-ate-master-app",
+    "import_name": "ate_master_app",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-master-app"
+  },
+  "semi-ate-plugins": {
+    "conda_name": "semi-ate-plugins",
+    "import_name": "ate_semiateplugins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-plugins"
+  },
+  "semi-ate-project-database": {
+    "conda_name": "semi-ate-project-database",
+    "import_name": "ate_projectdatabase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-project-database"
+  },
+  "semi-ate-sammy": {
+    "conda_name": "semi-ate-sammy",
+    "import_name": "ate_sammy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-sammy"
+  },
+  "semi-ate-spyder": {
+    "conda_name": "semi-ate-spyder",
+    "import_name": "ate_spyder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-spyder"
+  },
+  "semi-ate-stil": {
+    "conda_name": "semi-ate-stil",
+    "import_name": "Semi_ATE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-stil"
+  },
+  "semi-ate-test-app": {
+    "conda_name": "semi-ate-test-app",
+    "import_name": "ate_test_app",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-test-app"
+  },
+  "semi-ate-testers": {
+    "conda_name": "semi-ate-testers",
+    "import_name": "semi_ate_testers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semi-ate-testers"
+  },
+  "seml": {
+    "conda_name": "seml",
+    "import_name": "seml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seml"
+  },
+  "semvecpy": {
+    "conda_name": "semvecpy",
+    "import_name": "semvecpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "semvecpy"
+  },
+  "sen2nbar": {
+    "conda_name": "sen2nbar",
+    "import_name": "sen2nbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sen2nbar"
+  },
+  "sendgrid": {
+    "conda_name": "sendgrid",
+    "import_name": "sendgrid.helpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sendgrid"
+  },
+  "sensormapgeo": {
+    "conda_name": "sensormapgeo",
+    "import_name": "sensormapgeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sensormapgeo"
+  },
+  "sentence-transformers": {
+    "conda_name": "sentence-transformers",
+    "import_name": "sentence_transformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentence-transformers"
+  },
+  "sentineleof": {
+    "conda_name": "sentineleof",
+    "import_name": "eof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentineleof"
+  },
+  "sentinelhub": {
+    "conda_name": "sentinelhub",
+    "import_name": "sentinelhub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentinelhub"
+  },
+  "sentinels": {
+    "conda_name": "sentinels",
+    "import_name": "sentinels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentinels"
+  },
+  "sentinelsat": {
+    "conda_name": "sentinelsat",
+    "import_name": "sentinelsat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentinelsat"
+  },
+  "sentry-sdk": {
+    "conda_name": "sentry-sdk",
+    "import_name": "sentry_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sentry-sdk"
+  },
+  "sep": {
+    "conda_name": "sep",
+    "import_name": "sep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sep"
+  },
+  "sepal-ui": {
+    "conda_name": "sepal-ui",
+    "import_name": "sepal_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sepal-ui"
+  },
+  "seqdat": {
+    "conda_name": "seqdat",
+    "import_name": "seqdat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqdat"
+  },
+  "seqdiag": {
+    "conda_name": "seqdiag",
+    "import_name": "seqdiag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqdiag"
+  },
+  "seqeval": {
+    "conda_name": "seqeval",
+    "import_name": "seqeval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqeval"
+  },
+  "seqlike": {
+    "conda_name": "seqlike",
+    "import_name": "seqlike",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqlike"
+  },
+  "seqlog": {
+    "conda_name": "seqlog",
+    "import_name": "seqlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqlog"
+  },
+  "seqsearch": {
+    "conda_name": "seqsearch",
+    "import_name": "seqsearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "seqsearch"
+  },
+  "serialchemy": {
+    "conda_name": "serialchemy",
+    "import_name": "serialchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serialchemy"
+  },
+  "serialio": {
+    "conda_name": "serialio",
+    "import_name": "serialio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serialio"
+  },
+  "serialite": {
+    "conda_name": "serialite",
+    "import_name": "serialite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serialite"
+  },
+  "serializable": {
+    "conda_name": "serializable",
+    "import_name": "serializable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serializable"
+  },
+  "serialize": {
+    "conda_name": "serialize",
+    "import_name": "serialize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serialize"
+  },
+  "serpent": {
+    "conda_name": "serpent",
+    "import_name": "serpent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serpent"
+  },
+  "serpenttools": {
+    "conda_name": "serpenttools",
+    "import_name": "serpentTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serpenttools"
+  },
+  "serpy": {
+    "conda_name": "serpy",
+    "import_name": "serpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serpy"
+  },
+  "sertit": {
+    "conda_name": "sertit",
+    "import_name": "sertit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sertit"
+  },
+  "server-thread": {
+    "conda_name": "server-thread",
+    "import_name": "server_thread",
+    "mapping_source": "regro-bot",
+    "pypi_name": "server-thread"
+  },
+  "serverfiles": {
+    "conda_name": "serverfiles",
+    "import_name": "serverfiles",
+    "mapping_source": "regro-bot",
+    "pypi_name": "serverfiles"
+  },
+  "servicestack": {
+    "conda_name": "servicestack",
+    "import_name": "servicestack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "servicestack"
+  },
+  "servir-aces": {
+    "conda_name": "servir-aces",
+    "import_name": "aces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "servir-aces"
+  },
+  "sess-i": {
+    "conda_name": "sess_i",
+    "import_name": "sess_i",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sess-i"
+  },
+  "session-info": {
+    "conda_name": "session-info",
+    "import_name": "session_info",
+    "mapping_source": "regro-bot",
+    "pypi_name": "session-info"
+  },
+  "session-info2": {
+    "conda_name": "session-info2",
+    "import_name": "session_info2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "session-info2"
+  },
+  "set-calibration": {
+    "conda_name": "set-calibration",
+    "import_name": "set_calibration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "set-calibration"
+  },
+  "setfit": {
+    "conda_name": "setfit",
+    "import_name": "setfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setfit"
+  },
+  "setoptconf": {
+    "conda_name": "setoptconf",
+    "import_name": "setoptconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setoptconf"
+  },
+  "setoptconf-tmp": {
+    "conda_name": "setoptconf-tmp",
+    "import_name": "setoptconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setoptconf-tmp"
+  },
+  "setsimilaritysearch": {
+    "conda_name": "setsimilaritysearch",
+    "import_name": "SetSimilaritySearch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setsimilaritysearch"
+  },
+  "settings-doc": {
+    "conda_name": "settings-doc",
+    "import_name": "settings_doc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "settings-doc"
+  },
+  "setupinit": {
+    "conda_name": "setupinit",
+    "import_name": "setupinit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setupinit"
+  },
+  "setupmeta": {
+    "conda_name": "setupmeta",
+    "import_name": "setupmeta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setupmeta"
+  },
+  "setuptools": {
+    "conda_name": "setuptools",
+    "import_name": "pkg_resources",
+    "mapping_source": "static",
+    "pypi_name": "setuptools"
+  },
+  "setuptools-cythonize": {
+    "conda_name": "setuptools-cythonize",
+    "import_name": "setuptools_cythonize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-cythonize"
+  },
+  "setuptools-dso": {
+    "conda_name": "setuptools_dso",
+    "import_name": "setuptools_dso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-dso"
+  },
+  "setuptools-git": {
+    "conda_name": "setuptools-git",
+    "import_name": "setuptools_git",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-git"
+  },
+  "setuptools-git-version": {
+    "conda_name": "setuptools-git-version",
+    "import_name": "setuptools_git_version",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-git-version"
+  },
+  "setuptools-git-versioning": {
+    "conda_name": "setuptools-git-versioning",
+    "import_name": "setuptools_git_versioning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-git-versioning"
+  },
+  "setuptools-lint": {
+    "conda_name": "setuptools-lint",
+    "import_name": "setuptools_lint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-lint"
+  },
+  "setuptools-markdown": {
+    "conda_name": "setuptools-markdown",
+    "import_name": "setuptools_markdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-markdown"
+  },
+  "setuptools-parcels": {
+    "conda_name": "setuptools-parcels",
+    "import_name": "setuptools_parcels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-parcels"
+  },
+  "setuptools-reproducible": {
+    "conda_name": "setuptools_reproducible",
+    "import_name": "setuptools_reproducible",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-reproducible"
+  },
+  "setuptools-rust": {
+    "conda_name": "setuptools-rust",
+    "import_name": "setuptools_rust",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-rust"
+  },
+  "setuptools-scm-git-archive": {
+    "conda_name": "setuptools_scm_git_archive",
+    "import_name": "setuptools_scm_git_archive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "setuptools-scm-git-archive"
+  },
+  "sevenn": {
+    "conda_name": "sevenn",
+    "import_name": "sevenn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sevenn"
+  },
+  "sexpdata": {
+    "conda_name": "sexpdata",
+    "import_name": "sexpdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sexpdata"
+  },
+  "sf-hamilton": {
+    "conda_name": "sf-hamilton",
+    "import_name": "hamilton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sf-hamilton"
+  },
+  "sf-hamilton-sdk": {
+    "conda_name": "sf-hamilton-sdk",
+    "import_name": "hamilton_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sf-hamilton-sdk"
+  },
+  "sf-hamilton-ui": {
+    "conda_name": "sf-hamilton-ui",
+    "import_name": "hamilton_ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sf-hamilton-ui"
+  },
+  "sfdmap": {
+    "conda_name": "sfdmap",
+    "import_name": "sfdmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sfdmap"
+  },
+  "sfopenboson": {
+    "conda_name": "sfopenboson",
+    "import_name": "sfopenboson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sfopenboson"
+  },
+  "sfrmaker": {
+    "conda_name": "sfrmaker",
+    "import_name": "sfrmaker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sfrmaker"
+  },
+  "sgdpy": {
+    "conda_name": "sgdpy",
+    "import_name": "s_gd2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgdpy"
+  },
+  "sgkit": {
+    "conda_name": "sgkit",
+    "import_name": "sgkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgkit"
+  },
+  "sgmllib3k": {
+    "conda_name": "sgmllib3k",
+    "import_name": "sgmllib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgmllib3k"
+  },
+  "sgp4": {
+    "conda_name": "sgp4",
+    "import_name": "sgp4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgp4"
+  },
+  "sgqlc": {
+    "conda_name": "sgqlc",
+    "import_name": "sgqlc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgqlc"
+  },
+  "sgtlib": {
+    "conda_name": "sgtlib",
+    "import_name": "sgtlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sgtlib"
+  },
+  "sh": {
+    "conda_name": "sh",
+    "import_name": "sh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sh"
+  },
+  "shade": {
+    "conda_name": "shade",
+    "import_name": "shade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shade"
+  },
+  "shadow3": {
+    "conda_name": "shadow3",
+    "import_name": "Shadow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shadow3"
+  },
+  "shadows": {
+    "conda_name": "shadows",
+    "import_name": "shadows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shadows"
+  },
+  "shaffle": {
+    "conda_name": "shaffle",
+    "import_name": "shaffle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shaffle"
+  },
+  "shakenbreak": {
+    "conda_name": "shakenbreak",
+    "import_name": "shakenbreak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shakenbreak"
+  },
+  "shapely": {
+    "conda_name": "shapely",
+    "import_name": "shapely",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shapely"
+  },
+  "shapeography": {
+    "conda_name": "shapeography",
+    "import_name": "shapeography",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shapeography"
+  },
+  "shapicant": {
+    "conda_name": "shapicant",
+    "import_name": "shapicant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shapicant"
+  },
+  "shared": {
+    "conda_name": "shared",
+    "import_name": "shared",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shared"
+  },
+  "sharedarray": {
+    "conda_name": "sharedarray",
+    "import_name": "SharedArray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sharedarray"
+  },
+  "shareplum": {
+    "conda_name": "shareplum",
+    "import_name": "shareplum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shareplum"
+  },
+  "sharplib": {
+    "conda_name": "sharplib",
+    "import_name": "nwsspc.sharp.calc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sharplib"
+  },
+  "sharrow": {
+    "conda_name": "sharrow",
+    "import_name": "sharrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sharrow"
+  },
+  "shell-source": {
+    "conda_name": "shell-source",
+    "import_name": "shell_source",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shell-source"
+  },
+  "shellingham": {
+    "conda_name": "shellingham",
+    "import_name": "shellingham",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shellingham"
+  },
+  "sherlock-lib": {
+    "conda_name": "sherlock-lib",
+    "import_name": "sherlock_lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sherlock-lib"
+  },
+  "sherlockml-dataclean": {
+    "conda_name": "sherlockml-dataclean",
+    "import_name": "dataclean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sherlockml-dataclean"
+  },
+  "shexjsg": {
+    "conda_name": "shexjsg",
+    "import_name": "ShExJSG",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shexjsg"
+  },
+  "shibuya": {
+    "conda_name": "shibuya",
+    "import_name": "shibuya",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shibuya"
+  },
+  "shillelagh": {
+    "conda_name": "shillelagh",
+    "import_name": "shillelagh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shillelagh"
+  },
+  "shiny": {
+    "conda_name": "shiny",
+    "import_name": "shiny",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shiny"
+  },
+  "shiny-validate": {
+    "conda_name": "shiny-validate",
+    "import_name": "shiny_validate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shiny-validate"
+  },
+  "shinywidgets": {
+    "conda_name": "shinywidgets",
+    "import_name": "shinywidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shinywidgets"
+  },
+  "shippinglabel": {
+    "conda_name": "shippinglabel",
+    "import_name": "shippinglabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shippinglabel"
+  },
+  "shippinglabel-pypi": {
+    "conda_name": "shippinglabel-pypi",
+    "import_name": "shippinglabel_pypi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shippinglabel-pypi"
+  },
+  "shiv": {
+    "conda_name": "shiv",
+    "import_name": "shiv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shiv"
+  },
+  "shodan": {
+    "conda_name": "shodan",
+    "import_name": "shodan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shodan"
+  },
+  "shortcutter": {
+    "conda_name": "shortcutter",
+    "import_name": "shortcutter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shortcutter"
+  },
+  "shortid": {
+    "conda_name": "shortid",
+    "import_name": "shortid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shortid"
+  },
+  "shortuuid": {
+    "conda_name": "shortuuid",
+    "import_name": "shortuuid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shortuuid"
+  },
+  "shot-scraper": {
+    "conda_name": "shot-scraper",
+    "import_name": "shot_scraper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shot-scraper"
+  },
+  "showcallstack": {
+    "conda_name": "showcallstack",
+    "import_name": "showcallstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "showcallstack"
+  },
+  "shutilwhich": {
+    "conda_name": "shutilwhich",
+    "import_name": "shutilwhich",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shutilwhich"
+  },
+  "shutilwhich-cwdpatch": {
+    "conda_name": "shutilwhich-cwdpatch",
+    "import_name": "shutilwhich_cwdpatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shutilwhich-cwdpatch"
+  },
+  "shutup": {
+    "conda_name": "shutup",
+    "import_name": "shutup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shutup"
+  },
+  "shyaml": {
+    "conda_name": "shyaml",
+    "import_name": "shyaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "shyaml"
+  },
+  "si-prefix": {
+    "conda_name": "si-prefix",
+    "import_name": "si_prefix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "si-prefix"
+  },
+  "sickle": {
+    "conda_name": "sickle",
+    "import_name": "sickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sickle"
+  },
+  "sicor": {
+    "conda_name": "sicor",
+    "import_name": "sicor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sicor"
+  },
+  "sid-dev": {
+    "conda_name": "sid-dev",
+    "import_name": "sid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sid-dev"
+  },
+  "sidecar": {
+    "conda_name": "sidecar",
+    "import_name": "sidecar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sidecar"
+  },
+  "sidetable": {
+    "conda_name": "sidetable",
+    "import_name": "sidetable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sidetable"
+  },
+  "sierra": {
+    "conda_name": "sierra",
+    "import_name": "sierra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sierra"
+  },
+  "sif-parser": {
+    "conda_name": "sif-parser",
+    "import_name": "sif_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sif-parser"
+  },
+  "sig-decomp": {
+    "conda_name": "sig-decomp",
+    "import_name": "gfosd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sig-decomp"
+  },
+  "sigfig": {
+    "conda_name": "sigfig",
+    "import_name": "sigfig",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sigfig"
+  },
+  "sigima": {
+    "conda_name": "sigima",
+    "import_name": "sigima",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sigima"
+  },
+  "sigmf": {
+    "conda_name": "sigmf",
+    "import_name": "sigmf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sigmf"
+  },
+  "signac-dashboard": {
+    "conda_name": "signac-dashboard",
+    "import_name": "signac_dashboard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "signac-dashboard"
+  },
+  "signalr-client-aio": {
+    "conda_name": "signalr-client-aio",
+    "import_name": "signalr_aio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "signalr-client-aio"
+  },
+  "signalslot": {
+    "conda_name": "signalslot",
+    "import_name": "signalslot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "signalslot"
+  },
+  "sigopt": {
+    "conda_name": "sigopt",
+    "import_name": "sigopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sigopt"
+  },
+  "sigtools": {
+    "conda_name": "sigtools",
+    "import_name": "sigtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sigtools"
+  },
+  "silence-tensorflow": {
+    "conda_name": "silence-tensorflow",
+    "import_name": "silence_tensorflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "silence-tensorflow"
+  },
+  "sim-tools": {
+    "conda_name": "sim-tools",
+    "import_name": "sim_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sim-tools"
+  },
+  "simber": {
+    "conda_name": "simber",
+    "import_name": "simber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simber"
+  },
+  "simdna": {
+    "conda_name": "simdna",
+    "import_name": "simdna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simdna"
+  },
+  "simexpal": {
+    "conda_name": "simexpal",
+    "import_name": "simexpal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simexpal"
+  },
+  "simhash": {
+    "conda_name": "simhash",
+    "import_name": "simhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simhash"
+  },
+  "simhash-py": {
+    "conda_name": "simhash-py",
+    "import_name": "simhash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simhash-py"
+  },
+  "similaritymeasures": {
+    "conda_name": "similaritymeasures",
+    "import_name": "similaritymeasures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "similaritymeasures"
+  },
+  "simmate": {
+    "conda_name": "simmate",
+    "import_name": "simmate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simmate"
+  },
+  "simmer": {
+    "conda_name": "simmer",
+    "import_name": "simmer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simmer"
+  },
+  "simp-sexp": {
+    "conda_name": "simp-sexp",
+    "import_name": "simp_sexp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simp-sexp"
+  },
+  "simpeg": {
+    "conda_name": "simpeg",
+    "import_name": "simpeg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simpeg"
+  },
+  "simpervisor": {
+    "conda_name": "simpervisor",
+    "import_name": "simpervisor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simpervisor"
+  },
+  "simpful": {
+    "conda_name": "simpful",
+    "import_name": "simpful",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simpful"
+  },
+  "simple-azure-blob-downloader": {
+    "conda_name": "simple-azure-blob-downloader",
+    "import_name": "simple_azure_blob_downloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-azure-blob-downloader"
+  },
+  "simple-benchmark": {
+    "conda_name": "simple_benchmark",
+    "import_name": "simple_benchmark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-benchmark"
+  },
+  "simple-di": {
+    "conda_name": "simple-di",
+    "import_name": "simple_di",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-di"
+  },
+  "simple-gcp-object-downloader": {
+    "conda_name": "simple-gcp-object-downloader",
+    "import_name": "simple_gcp_object_downloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-gcp-object-downloader"
+  },
+  "simple-h5py": {
+    "conda_name": "simple_h5py",
+    "import_name": "simple_h5py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-h5py"
+  },
+  "simple-pid": {
+    "conda_name": "simple-pid",
+    "import_name": "simple_pid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-pid"
+  },
+  "simple-salesforce": {
+    "conda_name": "simple-salesforce",
+    "import_name": "simple_salesforce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-salesforce"
+  },
+  "simple-slurm": {
+    "conda_name": "simple_slurm",
+    "import_name": "simple_slurm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-slurm"
+  },
+  "simple-spaced-repetition": {
+    "conda_name": "simple_spaced_repetition",
+    "import_name": "simple_spaced_repetition",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-spaced-repetition"
+  },
+  "simple-template": {
+    "conda_name": "simple_template",
+    "import_name": "simple_template",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-template"
+  },
+  "simple-term-menu": {
+    "conda_name": "simple-term-menu",
+    "import_name": "simple_term_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-term-menu"
+  },
+  "simple-websocket": {
+    "conda_name": "simple-websocket",
+    "import_name": "simple_websocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simple-websocket"
+  },
+  "simplecosine": {
+    "conda_name": "simplecosine",
+    "import_name": "simplecosine.cosine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplecosine"
+  },
+  "simpleeval": {
+    "conda_name": "simpleeval",
+    "import_name": "simpleeval",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simpleeval"
+  },
+  "simplegeneric": {
+    "conda_name": "simplegeneric",
+    "import_name": "simplegeneric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplegeneric"
+  },
+  "simplegmail": {
+    "conda_name": "simplegmail",
+    "import_name": "simplegmail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplegmail"
+  },
+  "simplejson": {
+    "conda_name": "simplejson",
+    "import_name": "simplejson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplejson"
+  },
+  "simplekml": {
+    "conda_name": "simplekml",
+    "import_name": "simplekml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplekml"
+  },
+  "simplekv": {
+    "conda_name": "simplekv",
+    "import_name": "simplekv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplekv"
+  },
+  "simplemachinesforum": {
+    "conda_name": "simplemachinesforum",
+    "import_name": "simplemachinesforum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplemachinesforum"
+  },
+  "simplematch": {
+    "conda_name": "simplematch",
+    "import_name": "simplematch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplematch"
+  },
+  "simplemseed": {
+    "conda_name": "simplemseed",
+    "import_name": "simplemseed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplemseed"
+  },
+  "simplesat": {
+    "conda_name": "simplesat",
+    "import_name": "simplesat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simplesat"
+  },
+  "simpletraj": {
+    "conda_name": "simpletraj",
+    "import_name": "simpletraj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simpletraj"
+  },
+  "simservice": {
+    "conda_name": "simservice",
+    "import_name": "simservice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simservice"
+  },
+  "simwrapper": {
+    "conda_name": "simwrapper",
+    "import_name": "simwrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "simwrapper"
+  },
+  "sinabs": {
+    "conda_name": "sinabs",
+    "import_name": "sinabs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sinabs"
+  },
+  "sinfo": {
+    "conda_name": "sinfo",
+    "import_name": "sinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sinfo"
+  },
+  "single-sample-gsea": {
+    "conda_name": "single-sample-gsea",
+    "import_name": "single_sample_gsea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "single-sample-gsea"
+  },
+  "single-source": {
+    "conda_name": "single-source",
+    "import_name": "single_source",
+    "mapping_source": "regro-bot",
+    "pypi_name": "single-source"
+  },
+  "singledispatch": {
+    "conda_name": "singledispatch",
+    "import_name": "singledispatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "singledispatch"
+  },
+  "singledispatchmethod": {
+    "conda_name": "singledispatchmethod",
+    "import_name": "singledispatchmethod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "singledispatchmethod"
+  },
+  "singleton-decorator": {
+    "conda_name": "singleton-decorator",
+    "import_name": "singleton_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "singleton-decorator"
+  },
+  "singularity-compose": {
+    "conda_name": "singularity-compose",
+    "import_name": "scompose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "singularity-compose"
+  },
+  "sip": {
+    "conda_name": "sip",
+    "import_name": "sipbuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sip"
+  },
+  "siphash24": {
+    "conda_name": "siphash24",
+    "import_name": "siphash24",
+    "mapping_source": "regro-bot",
+    "pypi_name": "siphash24"
+  },
+  "sirepo-bluesky": {
+    "conda_name": "sirepo-bluesky",
+    "import_name": "sirepo_bluesky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sirepo-bluesky"
+  },
+  "sithom": {
+    "conda_name": "sithom",
+    "import_name": "sithom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sithom"
+  },
+  "sixelcrop": {
+    "conda_name": "sixelcrop",
+    "import_name": "sixelcrop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sixelcrop"
+  },
+  "sixtools": {
+    "conda_name": "sixtools",
+    "import_name": "sixtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sixtools"
+  },
+  "sk-dist": {
+    "conda_name": "sk-dist",
+    "import_name": "skdist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sk-dist"
+  },
+  "skan": {
+    "conda_name": "skan",
+    "import_name": "skan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skan"
+  },
+  "skater": {
+    "conda_name": "skater",
+    "import_name": "skater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skater"
+  },
+  "skelly-viewer": {
+    "conda_name": "skelly-viewer",
+    "import_name": "skelly_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skelly-viewer"
+  },
+  "skellyforge": {
+    "conda_name": "skellyforge",
+    "import_name": "skellyforge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skellyforge"
+  },
+  "sketch": {
+    "conda_name": "sketch",
+    "import_name": "sketch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sketch"
+  },
+  "skfolio": {
+    "conda_name": "skfolio",
+    "import_name": "skfolio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skfolio"
+  },
+  "skforecast": {
+    "conda_name": "skforecast",
+    "import_name": "skforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skforecast"
+  },
+  "skglm": {
+    "conda_name": "skglm",
+    "import_name": "skglm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skglm"
+  },
+  "skia-pathops": {
+    "conda_name": "skia-pathops",
+    "import_name": "pathops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skia-pathops"
+  },
+  "skidl": {
+    "conda_name": "skidl",
+    "import_name": "skidl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skidl"
+  },
+  "skijumpdesign": {
+    "conda_name": "skijumpdesign",
+    "import_name": "skijumpdesign",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skijumpdesign"
+  },
+  "skillbridge": {
+    "conda_name": "skillbridge",
+    "import_name": "skillbridge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skillbridge"
+  },
+  "skinnywms": {
+    "conda_name": "skinnywms",
+    "import_name": "skinnywms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skinnywms"
+  },
+  "skipatom": {
+    "conda_name": "skipatom",
+    "import_name": "skipatom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skipatom"
+  },
+  "sklearn-compat": {
+    "conda_name": "sklearn-compat",
+    "import_name": "sklearn_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-compat"
+  },
+  "sklearn-contrib-lightning": {
+    "conda_name": "sklearn-contrib-lightning",
+    "import_name": "lightning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-contrib-lightning"
+  },
+  "sklearn-crfsuite": {
+    "conda_name": "sklearn-crfsuite",
+    "import_name": "sklearn_crfsuite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-crfsuite"
+  },
+  "sklearn-genetic": {
+    "conda_name": "sklearn-genetic",
+    "import_name": "genetic_selection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-genetic"
+  },
+  "sklearn-genetic-opt": {
+    "conda_name": "sklearn-genetic-opt",
+    "import_name": "sklearn_genetic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-genetic-opt"
+  },
+  "sklearn-json": {
+    "conda_name": "sklearn-json",
+    "import_name": "sklearn_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-json"
+  },
+  "sklearn-pandas": {
+    "conda_name": "sklearn-pandas",
+    "import_name": "sklearn_pandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-pandas"
+  },
+  "sklearn-quantile": {
+    "conda_name": "sklearn-quantile",
+    "import_name": "sklearn_quantile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn-quantile"
+  },
+  "sklearn2pmml": {
+    "conda_name": "sklearn2pmml",
+    "import_name": "sklearn2pmml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sklearn2pmml"
+  },
+  "skmatter": {
+    "conda_name": "skmatter",
+    "import_name": "skmatter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skmatter"
+  },
+  "sknw": {
+    "conda_name": "sknw",
+    "import_name": "sknw",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sknw"
+  },
+  "skorch": {
+    "conda_name": "skorch",
+    "import_name": "numpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skorch"
+  },
+  "skore": {
+    "conda_name": "skore",
+    "import_name": "skore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skore"
+  },
+  "skore-hub-project": {
+    "conda_name": "skore-hub-project",
+    "import_name": "skore_hub_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skore-hub-project"
+  },
+  "skore-local-project": {
+    "conda_name": "skore-local-project",
+    "import_name": "skore_local_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skore-local-project"
+  },
+  "skore-mlflow-project": {
+    "conda_name": "skore-mlflow-project",
+    "import_name": "skore_mlflow_project",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skore-mlflow-project"
+  },
+  "skpro": {
+    "conda_name": "skpro",
+    "import_name": "skpro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skpro"
+  },
+  "skranger": {
+    "conda_name": "skranger",
+    "import_name": "skranger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skranger"
+  },
+  "skrebate": {
+    "conda_name": "skrebate",
+    "import_name": "skrebate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skrebate"
+  },
+  "skrub": {
+    "conda_name": "skrub",
+    "import_name": "skrub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skrub"
+  },
+  "skscope": {
+    "conda_name": "skscope",
+    "import_name": "skscope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skscope"
+  },
+  "skutil": {
+    "conda_name": "skutil",
+    "import_name": "skutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skutil"
+  },
+  "skweak": {
+    "conda_name": "skweak",
+    "import_name": "skweak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skweak"
+  },
+  "skyarea": {
+    "conda_name": "skyarea",
+    "import_name": "sky_area",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyarea"
+  },
+  "skyfield": {
+    "conda_name": "skyfield",
+    "import_name": "skyfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyfield"
+  },
+  "skyfield-data": {
+    "conda_name": "skyfield-data",
+    "import_name": "skyfield_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyfield-data"
+  },
+  "skyllh": {
+    "conda_name": "skyllh",
+    "import_name": "skyllh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyllh"
+  },
+  "skymap-convert": {
+    "conda_name": "skymap-convert",
+    "import_name": "skymap_convert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skymap-convert"
+  },
+  "skyproj": {
+    "conda_name": "skyproj",
+    "import_name": "skyproj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyproj"
+  },
+  "skypy": {
+    "conda_name": "skypy",
+    "import_name": "skypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skypy"
+  },
+  "skyrim": {
+    "conda_name": "skyrim",
+    "import_name": "skyrim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skyrim"
+  },
+  "skytag": {
+    "conda_name": "skytag",
+    "import_name": "skytag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "skytag"
+  },
+  "slabdip": {
+    "conda_name": "slabdip",
+    "import_name": "slabdip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slabdip"
+  },
+  "slack-bolt": {
+    "conda_name": "slack-bolt",
+    "import_name": "slack_bolt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slack-bolt"
+  },
+  "slackclient": {
+    "conda_name": "slackclient",
+    "import_name": "slack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slackclient"
+  },
+  "slacker": {
+    "conda_name": "slacker",
+    "import_name": "slacker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slacker"
+  },
+  "slcl1butils": {
+    "conda_name": "slcl1butils",
+    "import_name": "slcl1butils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slcl1butils"
+  },
+  "slcwindinversion": {
+    "conda_name": "slcwindinversion",
+    "import_name": "slcwindinversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slcwindinversion"
+  },
+  "sleapyfaces": {
+    "conda_name": "sleapyfaces",
+    "import_name": "sleapyfaces",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sleapyfaces"
+  },
+  "slearn": {
+    "conda_name": "slearn",
+    "import_name": "slearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slearn"
+  },
+  "sleek-lvalert": {
+    "conda_name": "sleek-lvalert",
+    "import_name": "sleek_lvalert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sleek-lvalert"
+  },
+  "sleekxmpp": {
+    "conda_name": "sleekxmpp",
+    "import_name": "sleekxmpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sleekxmpp"
+  },
+  "sleepecg": {
+    "conda_name": "sleepecg",
+    "import_name": "sleepecg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sleepecg"
+  },
+  "slem-learn": {
+    "conda_name": "slem-learn",
+    "import_name": "slem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slem-learn"
+  },
+  "sliceable-dict": {
+    "conda_name": "sliceable-dict",
+    "import_name": "sliceable_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sliceable-dict"
+  },
+  "slicer": {
+    "conda_name": "slicer",
+    "import_name": "slicer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slicer"
+  },
+  "sliderule": {
+    "conda_name": "sliderule",
+    "import_name": "sliderule",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sliderule"
+  },
+  "slidingwindow": {
+    "conda_name": "slidingwindow",
+    "import_name": "slidingwindow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slidingwindow"
+  },
+  "slipcover": {
+    "conda_name": "slipcover",
+    "import_name": "slipcover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slipcover"
+  },
+  "slixmpp": {
+    "conda_name": "slixmpp",
+    "import_name": "slixmpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slixmpp"
+  },
+  "slovnet": {
+    "conda_name": "slovnet",
+    "import_name": "slovnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slovnet"
+  },
+  "slowapi": {
+    "conda_name": "slowapi",
+    "import_name": "slowapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slowapi"
+  },
+  "sluarch": {
+    "conda_name": "sluarch",
+    "import_name": "sluarch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sluarch"
+  },
+  "slugify": {
+    "conda_name": "slugify",
+    "import_name": "slugify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slugify"
+  },
+  "slumber": {
+    "conda_name": "slumber",
+    "import_name": "slumber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slumber"
+  },
+  "slurm-pipeline": {
+    "conda_name": "slurm-pipeline",
+    "import_name": "slurm_pipeline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slurm-pipeline"
+  },
+  "slurmgen": {
+    "conda_name": "slurmgen",
+    "import_name": "slurmgen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slurmgen"
+  },
+  "slurmgrid": {
+    "conda_name": "slurmgrid",
+    "import_name": "slurmgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slurmgrid"
+  },
+  "slurmio": {
+    "conda_name": "slurmio",
+    "import_name": "slurmio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slurmio"
+  },
+  "slurmpter": {
+    "conda_name": "slurmpter",
+    "import_name": "slurmpter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slurmpter"
+  },
+  "slycot": {
+    "conda_name": "slycot",
+    "import_name": "slycot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "slycot"
+  },
+  "smac": {
+    "conda_name": "smac",
+    "import_name": "smac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smac"
+  },
+  "smact": {
+    "conda_name": "smact",
+    "import_name": "smact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smact"
+  },
+  "small-text": {
+    "conda_name": "small-text",
+    "import_name": "small_text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "small-text"
+  },
+  "smallestai": {
+    "conda_name": "smallestai",
+    "import_name": "smallestai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smallestai"
+  },
+  "smallworld-api": {
+    "conda_name": "smallworld-api",
+    "import_name": "smallworld_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smallworld-api"
+  },
+  "smart-arg": {
+    "conda_name": "smart-arg",
+    "import_name": "smart_arg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smart-arg"
+  },
+  "smartg": {
+    "conda_name": "smartg",
+    "import_name": "smartg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smartg"
+  },
+  "smartystreets-python-sdk": {
+    "conda_name": "smartystreets_python_sdk",
+    "import_name": "smartystreets_python_sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smartystreets-python-sdk"
+  },
+  "smbprotocol": {
+    "conda_name": "smbprotocol",
+    "import_name": "smbprotocol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smbprotocol"
+  },
+  "smbus2": {
+    "conda_name": "smbus2",
+    "import_name": "smbus2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smbus2"
+  },
+  "smi-analysis": {
+    "conda_name": "smi-analysis",
+    "import_name": "smi_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smi-analysis"
+  },
+  "smif": {
+    "conda_name": "smif",
+    "import_name": "smif",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smif"
+  },
+  "smipoly": {
+    "conda_name": "smipoly",
+    "import_name": "smipoly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smipoly"
+  },
+  "smmap2": {
+    "conda_name": "smmap2",
+    "import_name": "smmap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smmap2"
+  },
+  "smmregrid": {
+    "conda_name": "smmregrid",
+    "import_name": "smmregrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smmregrid"
+  },
+  "smo": {
+    "conda_name": "smo",
+    "import_name": "smo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smo"
+  },
+  "smokescreen": {
+    "conda_name": "lsstdesc-smokescreen",
+    "import_name": "smokescreen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smokescreen"
+  },
+  "smokesignal": {
+    "conda_name": "smokesignal",
+    "import_name": "smokesignal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smokesignal"
+  },
+  "smoothify": {
+    "conda_name": "smoothify",
+    "import_name": "smoothify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smoothify"
+  },
+  "smopy": {
+    "conda_name": "smopy",
+    "import_name": "smopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smopy"
+  },
+  "smoqe": {
+    "conda_name": "smoqe",
+    "import_name": "smoqe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smoqe"
+  },
+  "smqtk-classifier": {
+    "conda_name": "smqtk-classifier",
+    "import_name": "smqtk_classifier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-classifier"
+  },
+  "smqtk-core": {
+    "conda_name": "smqtk-core",
+    "import_name": "smqtk_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-core"
+  },
+  "smqtk-dataprovider": {
+    "conda_name": "smqtk-dataprovider",
+    "import_name": "smqtk_dataprovider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-dataprovider"
+  },
+  "smqtk-descriptors": {
+    "conda_name": "smqtk-descriptors",
+    "import_name": "smqtk_descriptors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-descriptors"
+  },
+  "smqtk-detection": {
+    "conda_name": "smqtk-detection",
+    "import_name": "smqtk_detection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-detection"
+  },
+  "smqtk-image-io": {
+    "conda_name": "smqtk-image-io",
+    "import_name": "smqtk_image_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "smqtk-image-io"
+  },
+  "snakebite-py3": {
+    "conda_name": "snakebite-py3",
+    "import_name": "snakebite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snakebite-py3"
+  },
+  "snakefood": {
+    "conda_name": "snakefood",
+    "import_name": "snakefood",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snakefood"
+  },
+  "snakeviz": {
+    "conda_name": "snakeviz",
+    "import_name": "snakeviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snakeviz"
+  },
+  "snaphu": {
+    "conda_name": "snaphu",
+    "import_name": "snaphu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snaphu"
+  },
+  "snapshottest": {
+    "conda_name": "snapshottest",
+    "import_name": "snapshottest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snapshottest"
+  },
+  "snaptime": {
+    "conda_name": "snaptime",
+    "import_name": "snaptime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snaptime"
+  },
+  "sncosmo": {
+    "conda_name": "sncosmo",
+    "import_name": "sncosmo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sncosmo"
+  },
+  "sniffio": {
+    "conda_name": "sniffio",
+    "import_name": "sniffio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sniffio"
+  },
+  "snirf": {
+    "conda_name": "snirf",
+    "import_name": "snirf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snirf"
+  },
+  "snkit": {
+    "conda_name": "snkit",
+    "import_name": "snkit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snkit"
+  },
+  "snmpsim": {
+    "conda_name": "snmpsim",
+    "import_name": "snmpsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snmpsim"
+  },
+  "snntoolbox": {
+    "conda_name": "snntoolbox",
+    "import_name": "snntoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snntoolbox"
+  },
+  "snntorch": {
+    "conda_name": "snntorch",
+    "import_name": "snntorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snntorch"
+  },
+  "snompy": {
+    "conda_name": "snompy",
+    "import_name": "snompy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snompy"
+  },
+  "snoop": {
+    "conda_name": "snoop",
+    "import_name": "snoop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snoop"
+  },
+  "snouty-viewer": {
+    "conda_name": "snouty-viewer",
+    "import_name": "snouty_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snouty-viewer"
+  },
+  "snowballstemmer": {
+    "conda_name": "snowballstemmer",
+    "import_name": "snowballstemmer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowballstemmer"
+  },
+  "snowexsql": {
+    "conda_name": "snowexsql",
+    "import_name": "snowexsql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowexsql"
+  },
+  "snowflake-core": {
+    "conda_name": "snowflake.core",
+    "import_name": "snowflake.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowflake-core"
+  },
+  "snowflake-id": {
+    "conda_name": "snowflake-id",
+    "import_name": "snowflake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowflake-id"
+  },
+  "snowflake-ml-python": {
+    "conda_name": "snowflake-ml-python",
+    "import_name": "snowflake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowflake-ml-python"
+  },
+  "snowflake-snowpark-python": {
+    "conda_name": "snowflake-snowpark-python",
+    "import_name": "snowflake.snowpark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowflake-snowpark-python"
+  },
+  "snowline": {
+    "conda_name": "snowline",
+    "import_name": "snowline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowline"
+  },
+  "snowmaus": {
+    "conda_name": "snowmaus",
+    "import_name": "snowmaus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowmaus"
+  },
+  "snowmeta": {
+    "conda_name": "snowmeta",
+    "import_name": "snowmeta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowmeta"
+  },
+  "snownlp": {
+    "conda_name": "snownlp",
+    "import_name": "snownlp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snownlp"
+  },
+  "snowpark-connect": {
+    "conda_name": "snowpark-connect",
+    "import_name": "snowflake.snowpark_connect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowpark-connect"
+  },
+  "snowpark-connect-deps-1": {
+    "conda_name": "snowpark-connect-deps-1",
+    "import_name": "snowpark_connect_deps_1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowpark-connect-deps-1"
+  },
+  "snowpark-connect-deps-2": {
+    "conda_name": "snowpark-connect-deps-2",
+    "import_name": "snowpark_connect_deps_2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowpark-connect-deps-2"
+  },
+  "snowplow-tracker": {
+    "conda_name": "snowplow-tracker",
+    "import_name": "snowplow_tracker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snowplow-tracker"
+  },
+  "snuggs": {
+    "conda_name": "snuggs",
+    "import_name": "snuggs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "snuggs"
+  },
+  "so4gp": {
+    "conda_name": "so4gp",
+    "import_name": "so4gp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "so4gp"
+  },
+  "soaplite": {
+    "conda_name": "soaplite",
+    "import_name": "soaplite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soaplite"
+  },
+  "soappy": {
+    "conda_name": "soappy",
+    "import_name": "SOAPpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soappy"
+  },
+  "social-auth-app-django": {
+    "conda_name": "social-auth-app-django",
+    "import_name": "social_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "social-auth-app-django"
+  },
+  "social-auth-core": {
+    "conda_name": "social-auth-core",
+    "import_name": "social_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "social-auth-core"
+  },
+  "socketio-client-nexus": {
+    "conda_name": "socketio-client-nexus",
+    "import_name": "socketIO_client_nexus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "socketio-client-nexus"
+  },
+  "sockjs-tornado": {
+    "conda_name": "sockjs-tornado",
+    "import_name": "sockjs.tornado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sockjs-tornado"
+  },
+  "socksio": {
+    "conda_name": "socksio",
+    "import_name": "socksio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "socksio"
+  },
+  "socksipy-branch": {
+    "conda_name": "socksipy-branch",
+    "import_name": "socks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "socksipy-branch"
+  },
+  "sodapy": {
+    "conda_name": "sodapy",
+    "import_name": "sodapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sodapy"
+  },
+  "softworks": {
+    "conda_name": "softworks",
+    "import_name": "softworks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "softworks"
+  },
+  "solar-data-tools": {
+    "conda_name": "solar-data-tools",
+    "import_name": "solardatatools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solar-data-tools"
+  },
+  "solar-system-ephemerides": {
+    "conda_name": "solar_system_ephemerides",
+    "import_name": "solar_system_ephemerides",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solar-system-ephemerides"
+  },
+  "solarforecastarbiter": {
+    "conda_name": "solarforecastarbiter",
+    "import_name": "solarforecastarbiter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solarforecastarbiter"
+  },
+  "solaris": {
+    "conda_name": "solaris",
+    "import_name": "solaris",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solaris"
+  },
+  "solarmach": {
+    "conda_name": "solarmach",
+    "import_name": "solarmach",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solarmach"
+  },
+  "solarwindpy": {
+    "conda_name": "solarwindpy",
+    "import_name": "solarwindpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solarwindpy"
+  },
+  "solo-epd-loader": {
+    "conda_name": "solo-epd-loader",
+    "import_name": "solo_epd_loader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solo-epd-loader"
+  },
+  "solvation-analysis": {
+    "conda_name": "solvation_analysis",
+    "import_name": "solvation_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "solvation-analysis"
+  },
+  "somajo": {
+    "conda_name": "somajo",
+    "import_name": "somajo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "somajo"
+  },
+  "somata": {
+    "conda_name": "somata",
+    "import_name": "somata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "somata"
+  },
+  "somoclu": {
+    "conda_name": "somoclu",
+    "import_name": "somoclu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "somoclu"
+  },
+  "sompy": {
+    "conda_name": "sompy",
+    "import_name": "sompy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sompy"
+  },
+  "son": {
+    "conda_name": "son",
+    "import_name": "son",
+    "mapping_source": "regro-bot",
+    "pypi_name": "son"
+  },
+  "songbird": {
+    "conda_name": "songbird",
+    "import_name": "songbird",
+    "mapping_source": "regro-bot",
+    "pypi_name": "songbird"
+  },
+  "songdkl": {
+    "conda_name": "songdkl",
+    "import_name": "songdkl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "songdkl"
+  },
+  "sopsy": {
+    "conda_name": "sopsy",
+    "import_name": "sopsy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sopsy"
+  },
+  "sorl-thumbnail": {
+    "conda_name": "sorl-thumbnail",
+    "import_name": "sorl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sorl-thumbnail"
+  },
+  "sortedcollections": {
+    "conda_name": "sortedcollections",
+    "import_name": "sortedcollections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sortedcollections"
+  },
+  "sortedcontainers": {
+    "conda_name": "sortedcontainers",
+    "import_name": "sortedcontainers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sortedcontainers"
+  },
+  "sortedcontainers-pydantic": {
+    "conda_name": "sortedcontainers-pydantic",
+    "import_name": "sortedcontainers_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sortedcontainers-pydantic"
+  },
+  "sortedcontainers-stubs": {
+    "conda_name": "sortedcontainers-stubs",
+    "import_name": "sortedcontainers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sortedcontainers-stubs"
+  },
+  "sortednp": {
+    "conda_name": "sortednp",
+    "import_name": "sortednp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sortednp"
+  },
+  "sos-papermill": {
+    "conda_name": "sos-papermill",
+    "import_name": "sos_papermill",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sos-papermill"
+  },
+  "sott": {
+    "conda_name": "sott",
+    "import_name": "sott",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sott"
+  },
+  "sound-field-analysis": {
+    "conda_name": "sound_field_analysis",
+    "import_name": "sound_field_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sound-field-analysis"
+  },
+  "soundcard": {
+    "conda_name": "pysoundcard",
+    "import_name": "soundcard",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soundcard"
+  },
+  "sounddevice": {
+    "conda_name": "python-sounddevice",
+    "import_name": "sounddevice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sounddevice"
+  },
+  "soupsieve": {
+    "conda_name": "soupsieve",
+    "import_name": "soupsieve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soupsieve"
+  },
+  "soupy": {
+    "conda_name": "soupy",
+    "import_name": "soupy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soupy"
+  },
+  "sourcetypes": {
+    "conda_name": "sourcetypes",
+    "import_name": "sourcetypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sourcetypes"
+  },
+  "sourmash-plugin-branchwater": {
+    "conda_name": "sourmash_plugin_branchwater",
+    "import_name": "sourmash_plugin_branchwater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sourmash-plugin-branchwater"
+  },
+  "sourmash-plugin-directsketch": {
+    "conda_name": "sourmash_plugin_directsketch",
+    "import_name": "sourmash_plugin_directsketch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sourmash-plugin-directsketch"
+  },
+  "soxr": {
+    "conda_name": "soxr-python",
+    "import_name": "soxr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soxr"
+  },
+  "soxs": {
+    "conda_name": "soxs",
+    "import_name": "soxs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soxs"
+  },
+  "soxspipe": {
+    "conda_name": "soxspipe",
+    "import_name": "soxspipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "soxspipe"
+  },
+  "spacetrack": {
+    "conda_name": "spacetrack",
+    "import_name": "spacetrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacetrack"
+  },
+  "spacy-alignments": {
+    "conda_name": "spacy-alignments",
+    "import_name": "spacy_alignments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-alignments"
+  },
+  "spacy-curated-transformers": {
+    "conda_name": "spacy-curated-transformers",
+    "import_name": "spacy_curated_transformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-curated-transformers"
+  },
+  "spacy-legacy": {
+    "conda_name": "spacy-legacy",
+    "import_name": "spacy_legacy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-legacy"
+  },
+  "spacy-loggers": {
+    "conda_name": "spacy-loggers",
+    "import_name": "spacy_loggers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-loggers"
+  },
+  "spacy-lookups-data": {
+    "conda_name": "spacy-lookups-data",
+    "import_name": "spacy_lookups_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-lookups-data"
+  },
+  "spacy-pkuseg": {
+    "conda_name": "spacy-pkuseg",
+    "import_name": "spacy_pkuseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-pkuseg"
+  },
+  "spacy-transformers": {
+    "conda_name": "spacy-transformers",
+    "import_name": "spacy_transformers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-transformers"
+  },
+  "spacy-universal-sentence-encoder": {
+    "conda_name": "spacy-universal-sentence-encoder",
+    "import_name": "spacy_universal_sentence_encoder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spacy-universal-sentence-encoder"
+  },
+  "spaghetti": {
+    "conda_name": "spaghetti",
+    "import_name": "spaghetti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spaghetti"
+  },
+  "spams-cython": {
+    "conda_name": "spams-cython",
+    "import_name": "cyspams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spams-cython"
+  },
+  "spark-testing-base": {
+    "conda_name": "spark-testing-base",
+    "import_name": "sparktestingbase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spark-testing-base"
+  },
+  "sparkhpc": {
+    "conda_name": "sparkhpc",
+    "import_name": "sparkhpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparkhpc"
+  },
+  "sparktorch": {
+    "conda_name": "sparktorch",
+    "import_name": "sparktorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparktorch"
+  },
+  "sparkypandy": {
+    "conda_name": "sparkypandy",
+    "import_name": "sparkypandy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparkypandy"
+  },
+  "sparqlslurper": {
+    "conda_name": "sparqlslurper",
+    "import_name": "sparqlslurper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparqlslurper"
+  },
+  "sparqlwrapper": {
+    "conda_name": "sparqlwrapper",
+    "import_name": "SPARQLWrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparqlwrapper"
+  },
+  "sparse-dot-mkl": {
+    "conda_name": "sparse_dot_mkl",
+    "import_name": "sparse_dot_mkl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparse-dot-mkl"
+  },
+  "sparse-dot-topn": {
+    "conda_name": "sparse_dot_topn",
+    "import_name": "sparse_dot_topn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparse-dot-topn"
+  },
+  "sparsearray": {
+    "conda_name": "sparsearray",
+    "import_name": "SparseArray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparsearray"
+  },
+  "sparseconverter": {
+    "conda_name": "sparseconverter",
+    "import_name": "sparseconverter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparseconverter"
+  },
+  "sparsestack": {
+    "conda_name": "sparsestack",
+    "import_name": "sparsestack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sparsestack"
+  },
+  "spatial-image": {
+    "conda_name": "spatial-image",
+    "import_name": "spatial_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatial-image"
+  },
+  "spatialdata": {
+    "conda_name": "spatialdata",
+    "import_name": "spatialdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialdata"
+  },
+  "spatialdata-io": {
+    "conda_name": "spatialdata-io",
+    "import_name": "spatialdata_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialdata-io"
+  },
+  "spatialdata-plot": {
+    "conda_name": "spatialdata-plot",
+    "import_name": "spatialdata_plot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialdata-plot"
+  },
+  "spatialgeometry": {
+    "conda_name": "spatialgeometry",
+    "import_name": "spatialgeometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialgeometry"
+  },
+  "spatialist": {
+    "conda_name": "spatialist",
+    "import_name": "spatialist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialist"
+  },
+  "spatialmath-python": {
+    "conda_name": "spatialmath-python",
+    "import_name": "spatialmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialmath-python"
+  },
+  "spatialpandas": {
+    "conda_name": "spatialpandas",
+    "import_name": "spatialpandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spatialpandas"
+  },
+  "spavro": {
+    "conda_name": "spavro",
+    "import_name": "spavro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spavro"
+  },
+  "spcqe": {
+    "conda_name": "spcqe",
+    "import_name": "spcqe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spcqe"
+  },
+  "spdx-tools": {
+    "conda_name": "spdx-tools",
+    "import_name": "spdx_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spdx-tools"
+  },
+  "spec2nexus": {
+    "conda_name": "spec2nexus",
+    "import_name": "spec2nexus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spec2nexus"
+  },
+  "spec2nii": {
+    "conda_name": "spec2nii",
+    "import_name": "spec2nii",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spec2nii"
+  },
+  "specclassify": {
+    "conda_name": "specclassify",
+    "import_name": "specclassify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "specclassify"
+  },
+  "spechomo": {
+    "conda_name": "spechomo",
+    "import_name": "spechomo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spechomo"
+  },
+  "specialist": {
+    "conda_name": "specialist",
+    "import_name": "specialist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "specialist"
+  },
+  "speclite": {
+    "conda_name": "speclite",
+    "import_name": "speclite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "speclite"
+  },
+  "specreduce": {
+    "conda_name": "specreduce",
+    "import_name": "specreduce",
+    "mapping_source": "regro-bot",
+    "pypi_name": "specreduce"
+  },
+  "specta": {
+    "conda_name": "specta",
+    "import_name": "specta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "specta"
+  },
+  "spectra": {
+    "conda_name": "spectra",
+    "import_name": "spectra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectra"
+  },
+  "spectral": {
+    "conda_name": "spectral",
+    "import_name": "spectral",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectral"
+  },
+  "spectral-cube": {
+    "conda_name": "spectral-cube",
+    "import_name": "spectral_cube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectral-cube"
+  },
+  "spectrally": {
+    "conda_name": "spectrally",
+    "import_name": "spectrally",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectrally"
+  },
+  "spectrapepper": {
+    "conda_name": "spectrapepper",
+    "import_name": "spectrapepper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectrapepper"
+  },
+  "spectrum": {
+    "conda_name": "spectrum",
+    "import_name": "spectrum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spectrum"
+  },
+  "specutils": {
+    "conda_name": "specutils",
+    "import_name": "specutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "specutils"
+  },
+  "speedcopy": {
+    "conda_name": "speedcopy",
+    "import_name": "speedcopy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "speedcopy"
+  },
+  "speedtest-cli": {
+    "conda_name": "speedtest-cli",
+    "import_name": "speedtest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "speedtest-cli"
+  },
+  "speg": {
+    "conda_name": "speg",
+    "import_name": "speg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "speg"
+  },
+  "spenc": {
+    "conda_name": "spenc",
+    "import_name": "spenc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spenc"
+  },
+  "spgl1": {
+    "conda_name": "spgl1",
+    "import_name": "spgl1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spgl1"
+  },
+  "spglm": {
+    "conda_name": "spglm",
+    "import_name": "spglm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spglm"
+  },
+  "spherical-functions": {
+    "conda_name": "spherical_functions",
+    "import_name": "spherical_functions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spherical-functions"
+  },
+  "spherical-geometry": {
+    "conda_name": "spherical-geometry",
+    "import_name": "spherical_geometry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spherical-geometry"
+  },
+  "spheroidal": {
+    "conda_name": "spheroidal",
+    "import_name": "spheroidal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spheroidal"
+  },
+  "sphinx": {
+    "conda_name": "sphinx",
+    "import_name": "sphinx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx"
+  },
+  "sphinx-argparse": {
+    "conda_name": "sphinx-argparse",
+    "import_name": "sphinxarg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-argparse"
+  },
+  "sphinx-asdf": {
+    "conda_name": "sphinx-asdf",
+    "import_name": "sphinx_asdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-asdf"
+  },
+  "sphinx-autoapi": {
+    "conda_name": "sphinx-autoapi",
+    "import_name": "autoapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-autoapi"
+  },
+  "sphinx-autodoc-typehints": {
+    "conda_name": "sphinx-autodoc-typehints",
+    "import_name": "sphinx_autodoc_typehints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-autodoc-typehints"
+  },
+  "sphinx-automodapi": {
+    "conda_name": "sphinx-automodapi",
+    "import_name": "sphinx_automodapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-automodapi"
+  },
+  "sphinx-changelog": {
+    "conda_name": "sphinx_changelog",
+    "import_name": "sphinx_changelog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-changelog"
+  },
+  "sphinx-codeautolink": {
+    "conda_name": "sphinx-codeautolink",
+    "import_name": "sphinx_codeautolink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-codeautolink"
+  },
+  "sphinx-comments": {
+    "conda_name": "sphinx-comments",
+    "import_name": "sphinx_comments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-comments"
+  },
+  "sphinx-copybutton": {
+    "conda_name": "sphinx-copybutton",
+    "import_name": "sphinx_copybutton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-copybutton"
+  },
+  "sphinx-data-viewer": {
+    "conda_name": "sphinx-data-viewer",
+    "import_name": "sphinx_data_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-data-viewer"
+  },
+  "sphinx-exercise": {
+    "conda_name": "sphinx-exercise",
+    "import_name": "sphinx_exercise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-exercise"
+  },
+  "sphinx-external-toc": {
+    "conda_name": "sphinx-external-toc",
+    "import_name": "sphinx_external_toc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-external-toc"
+  },
+  "sphinx-favicon": {
+    "conda_name": "sphinx-favicon",
+    "import_name": "sphinx_favicon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-favicon"
+  },
+  "sphinx-gallery": {
+    "conda_name": "sphinx-gallery",
+    "import_name": "sphinx_gallery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-gallery"
+  },
+  "sphinx-github-changelog": {
+    "conda_name": "sphinx-github-changelog",
+    "import_name": "sphinx_github_changelog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-github-changelog"
+  },
+  "sphinx-gmt": {
+    "conda_name": "sphinx_gmt",
+    "import_name": "sphinx_gmt.gmtplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-gmt"
+  },
+  "sphinx-hoverxref": {
+    "conda_name": "sphinx-hoverxref",
+    "import_name": "hoverxref",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-hoverxref"
+  },
+  "sphinx-inline-tabs": {
+    "conda_name": "sphinx-inline-tabs",
+    "import_name": "sphinx_inline_tabs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-inline-tabs"
+  },
+  "sphinx-intl": {
+    "conda_name": "sphinx-intl",
+    "import_name": "sphinx_intl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-intl"
+  },
+  "sphinx-issues": {
+    "conda_name": "sphinx-issues",
+    "import_name": "sphinx_issues",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-issues"
+  },
+  "sphinx-jinja": {
+    "conda_name": "sphinx-jinja",
+    "import_name": "sphinx_jinja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-jinja"
+  },
+  "sphinx-jinja2-compat": {
+    "conda_name": "sphinx-jinja2-compat",
+    "import_name": "sphinx_jinja2_compat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-jinja2-compat"
+  },
+  "sphinx-jupyterbook-latex": {
+    "conda_name": "sphinx-jupyterbook-latex",
+    "import_name": "sphinx_jupyterbook_latex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-jupyterbook-latex"
+  },
+  "sphinx-lint": {
+    "conda_name": "sphinx-lint",
+    "import_name": "sphinxlint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-lint"
+  },
+  "sphinx-llms-txt": {
+    "conda_name": "sphinx-llms-txt",
+    "import_name": "sphinx_llms_txt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-llms-txt"
+  },
+  "sphinx-markdown-builder": {
+    "conda_name": "sphinx-markdown-builder",
+    "import_name": "sphinx_markdown_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-markdown-builder"
+  },
+  "sphinx-markdown-tables": {
+    "conda_name": "sphinx-markdown-tables",
+    "import_name": "sphinx_markdown_tables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-markdown-tables"
+  },
+  "sphinx-material": {
+    "conda_name": "sphinx-material",
+    "import_name": "sphinx_material",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-material"
+  },
+  "sphinx-math-dollar": {
+    "conda_name": "sphinx-math-dollar",
+    "import_name": "sphinx_math_dollar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-math-dollar"
+  },
+  "sphinx-mdinclude": {
+    "conda_name": "sphinx-mdinclude",
+    "import_name": "sphinx_mdinclude",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-mdinclude"
+  },
+  "sphinx-multiversion": {
+    "conda_name": "sphinx-multiversion",
+    "import_name": "sphinx_multiversion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-multiversion"
+  },
+  "sphinx-nbexamples": {
+    "conda_name": "sphinx-nbexamples",
+    "import_name": "sphinx_nbexamples",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-nbexamples"
+  },
+  "sphinx-notfound-page": {
+    "conda_name": "sphinx-notfound-page",
+    "import_name": "notfound",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-notfound-page"
+  },
+  "sphinx-panels": {
+    "conda_name": "sphinx-panels",
+    "import_name": "sphinx_panels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-panels"
+  },
+  "sphinx-pdj-theme": {
+    "conda_name": "sphinx-pdj-theme",
+    "import_name": "sphinx_pdj_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-pdj-theme"
+  },
+  "sphinx-proof": {
+    "conda_name": "sphinx-proof",
+    "import_name": "sphinx_proof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-proof"
+  },
+  "sphinx-pypi-upload": {
+    "conda_name": "sphinx-pypi-upload",
+    "import_name": "sphinx_pypi_upload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-pypi-upload"
+  },
+  "sphinx-pythia-theme": {
+    "conda_name": "sphinx-pythia-theme",
+    "import_name": "sphinx_pythia_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-pythia-theme"
+  },
+  "sphinx-remove-toctrees": {
+    "conda_name": "sphinx-remove-toctrees",
+    "import_name": "sphinx_remove_toctrees",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-remove-toctrees"
+  },
+  "sphinx-reredirects": {
+    "conda_name": "sphinx-reredirects",
+    "import_name": "sphinx_reredirects",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-reredirects"
+  },
+  "sphinx-subfigure": {
+    "conda_name": "sphinx-subfigure",
+    "import_name": "sphinx_subfigure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-subfigure"
+  },
+  "sphinx-tabs": {
+    "conda_name": "sphinx-tabs",
+    "import_name": "sphinx_tabs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-tabs"
+  },
+  "sphinx-tags": {
+    "conda_name": "sphinx-tags",
+    "import_name": "sphinx_tags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-tags"
+  },
+  "sphinx-testing": {
+    "conda_name": "sphinx-testing",
+    "import_name": "sphinx_testing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-testing"
+  },
+  "sphinx-thebe": {
+    "conda_name": "sphinx-thebe",
+    "import_name": "sphinx_thebe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-thebe"
+  },
+  "sphinx-theme-builder": {
+    "conda_name": "sphinx-theme-builder",
+    "import_name": "sphinx_theme_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-theme-builder"
+  },
+  "sphinx-togglebutton": {
+    "conda_name": "sphinx-togglebutton",
+    "import_name": "sphinx_togglebutton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-togglebutton"
+  },
+  "sphinx-toggleprompt": {
+    "conda_name": "sphinx-toggleprompt",
+    "import_name": "sphinx_toggleprompt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-toggleprompt"
+  },
+  "sphinx-toml": {
+    "conda_name": "sphinx_toml",
+    "import_name": "sphinx_toml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-toml"
+  },
+  "sphinx-toolbox": {
+    "conda_name": "sphinx-toolbox",
+    "import_name": "sphinx_toolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-toolbox"
+  },
+  "sphinx-versioned-docs": {
+    "conda_name": "sphinx-versioned-docs",
+    "import_name": "sphinx_versioned",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-versioned-docs"
+  },
+  "sphinx-wagtail-theme": {
+    "conda_name": "sphinx-wagtail-theme",
+    "import_name": "sphinx_wagtail_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinx-wagtail-theme"
+  },
+  "sphinxawesome-theme": {
+    "conda_name": "sphinxawesome-theme",
+    "import_name": "sphinxawesome_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxawesome-theme"
+  },
+  "sphinxcontrib-apidoc": {
+    "conda_name": "sphinxcontrib-apidoc",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-apidoc"
+  },
+  "sphinxcontrib-applehelp": {
+    "conda_name": "sphinxcontrib-applehelp",
+    "import_name": "sphinxcontrib.applehelp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-applehelp"
+  },
+  "sphinxcontrib-autodoc-doxygen": {
+    "conda_name": "sphinxcontrib-autodoc_doxygen",
+    "import_name": "sphinxcontrib.autodoc_doxygen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-autodoc-doxygen"
+  },
+  "sphinxcontrib-autoprogram": {
+    "conda_name": "sphinxcontrib-autoprogram",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-autoprogram"
+  },
+  "sphinxcontrib-bibtex": {
+    "conda_name": "sphinxcontrib-bibtex",
+    "import_name": "sphinxcontrib.bibtex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-bibtex"
+  },
+  "sphinxcontrib-confluencebuilder": {
+    "conda_name": "sphinxcontrib-confluencebuilder",
+    "import_name": "sphinxcontrib.confluencebuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-confluencebuilder"
+  },
+  "sphinxcontrib-details-directive": {
+    "conda_name": "sphinxcontrib-details-directive",
+    "import_name": "sphinxcontrib.details",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-details-directive"
+  },
+  "sphinxcontrib-devhelp": {
+    "conda_name": "sphinxcontrib-devhelp",
+    "import_name": "sphinxcontrib.devhelp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-devhelp"
+  },
+  "sphinxcontrib-doxylink": {
+    "conda_name": "sphinxcontrib-doxylink",
+    "import_name": "sphinxcontrib.doxylink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-doxylink"
+  },
+  "sphinxcontrib-fulltoc": {
+    "conda_name": "sphinxcontrib-fulltoc",
+    "import_name": "sphinxcontrib.fulltoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-fulltoc"
+  },
+  "sphinxcontrib-golangdomain": {
+    "conda_name": "sphinxcontrib-golangdomain",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-golangdomain"
+  },
+  "sphinxcontrib-googleanalytics": {
+    "conda_name": "sphinxcontrib-googleanalytics",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-googleanalytics"
+  },
+  "sphinxcontrib-htmlhelp": {
+    "conda_name": "sphinxcontrib-htmlhelp",
+    "import_name": "sphinxcontrib.htmlhelp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-htmlhelp"
+  },
+  "sphinxcontrib-jquery": {
+    "conda_name": "sphinxcontrib-jquery",
+    "import_name": "sphinxcontrib.jquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-jquery"
+  },
+  "sphinxcontrib-jsmath": {
+    "conda_name": "sphinxcontrib-jsmath",
+    "import_name": "sphinxcontrib.jsmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-jsmath"
+  },
+  "sphinxcontrib-matlabdomain": {
+    "conda_name": "sphinxcontrib-matlabdomain",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-matlabdomain"
+  },
+  "sphinxcontrib-mermaid": {
+    "conda_name": "sphinxcontrib-mermaid",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-mermaid"
+  },
+  "sphinxcontrib-moderncmakedomain": {
+    "conda_name": "sphinxcontrib-moderncmakedomain",
+    "import_name": "sphinxcontrib.moderncmakedomain",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-moderncmakedomain"
+  },
+  "sphinxcontrib-paverutils": {
+    "conda_name": "sphinxcontrib-paverutils",
+    "import_name": "sphinxcontrib.paverutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-paverutils"
+  },
+  "sphinxcontrib-plantuml": {
+    "conda_name": "sphinxcontrib-plantuml",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-plantuml"
+  },
+  "sphinxcontrib-qthelp": {
+    "conda_name": "sphinxcontrib-qthelp",
+    "import_name": "sphinxcontrib.qthelp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-qthelp"
+  },
+  "sphinxcontrib-redoc": {
+    "conda_name": "sphinxcontrib-redoc",
+    "import_name": "sphinxcontrib.redoc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-redoc"
+  },
+  "sphinxcontrib-restbuilder": {
+    "conda_name": "sphinxcontrib-restbuilder",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-restbuilder"
+  },
+  "sphinxcontrib-seqdiag": {
+    "conda_name": "sphinxcontrib-seqdiag",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-seqdiag"
+  },
+  "sphinxcontrib-serializinghtml": {
+    "conda_name": "sphinxcontrib-serializinghtml",
+    "import_name": "sphinxcontrib.serializinghtml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-serializinghtml"
+  },
+  "sphinxcontrib-shellcheck": {
+    "conda_name": "sphinxcontrib-shellcheck",
+    "import_name": "sphinxcontrib.shellcheck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-shellcheck"
+  },
+  "sphinxcontrib-towncrier": {
+    "conda_name": "sphinxcontrib-towncrier",
+    "import_name": "sphinxcontrib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-towncrier"
+  },
+  "sphinxcontrib-video": {
+    "conda_name": "sphinxcontrib-video",
+    "import_name": "sphinxcontrib.video",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-video"
+  },
+  "sphinxcontrib-websupport": {
+    "conda_name": "sphinxcontrib-websupport",
+    "import_name": "sphinxcontrib.websupport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-websupport"
+  },
+  "sphinxcontrib-youtube": {
+    "conda_name": "sphinxcontrib-youtube",
+    "import_name": "sphinxcontrib.youtube",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxcontrib-youtube"
+  },
+  "sphinxext-altair": {
+    "conda_name": "sphinxext-altair",
+    "import_name": "sphinxext_altair.altairplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxext-altair"
+  },
+  "sphinxext-opengraph": {
+    "conda_name": "sphinxext-opengraph",
+    "import_name": "sphinxext.opengraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxext-opengraph"
+  },
+  "sphinxjp-themecore": {
+    "conda_name": "sphinxjp.themecore",
+    "import_name": "sphinxjp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxjp-themecore"
+  },
+  "sphinxjp-themes-impressjs": {
+    "conda_name": "sphinxjp.themes.impressjs",
+    "import_name": "sphinxjp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxjp-themes-impressjs"
+  },
+  "sphinxjp-themes-solarized": {
+    "conda_name": "sphinxjp.themes.solarized",
+    "import_name": "sphinxjp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxjp-themes-solarized"
+  },
+  "sphinxtesters": {
+    "conda_name": "sphinxtesters",
+    "import_name": "sphinxtesters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphinxtesters"
+  },
+  "sphractal": {
+    "conda_name": "sphractal",
+    "import_name": "sphractal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sphractal"
+  },
+  "spice-hsi": {
+    "conda_name": "spice_hsi",
+    "import_name": "SPICE",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spice-hsi"
+  },
+  "spiceypy": {
+    "conda_name": "spiceypy",
+    "import_name": "spiceypy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spiceypy"
+  },
+  "spikingjelly": {
+    "conda_name": "spikingjelly",
+    "import_name": "spikingjelly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spikingjelly"
+  },
+  "spindry": {
+    "conda_name": "spindry",
+    "import_name": "spindry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spindry"
+  },
+  "spinners": {
+    "conda_name": "spinners",
+    "import_name": "spinners",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spinners"
+  },
+  "spint": {
+    "conda_name": "spint",
+    "import_name": "spint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spint"
+  },
+  "splauncher": {
+    "conda_name": "splauncher",
+    "import_name": "splauncher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splauncher"
+  },
+  "spleaf": {
+    "conda_name": "spleaf",
+    "import_name": "spleaf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spleaf"
+  },
+  "splinedist": {
+    "conda_name": "splinedist",
+    "import_name": "splinedist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splinedist"
+  },
+  "splink": {
+    "conda_name": "splink",
+    "import_name": "splink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splink"
+  },
+  "splinkclickhouse": {
+    "conda_name": "splinkclickhouse",
+    "import_name": "splinkclickhouse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splinkclickhouse"
+  },
+  "split-file-reader": {
+    "conda_name": "split-file-reader",
+    "import_name": "split_file_reader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "split-file-reader"
+  },
+  "splito": {
+    "conda_name": "splito",
+    "import_name": "splito",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splito"
+  },
+  "splits": {
+    "conda_name": "splits",
+    "import_name": "splits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splits"
+  },
+  "splot": {
+    "conda_name": "splot",
+    "import_name": "splot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splot"
+  },
+  "splunk-handler": {
+    "conda_name": "splunk_handler",
+    "import_name": "splunk_handler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "splunk-handler"
+  },
+  "spm1d": {
+    "conda_name": "spm1d",
+    "import_name": "spm1d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spm1d"
+  },
+  "spopt": {
+    "conda_name": "spopt",
+    "import_name": "spopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spopt"
+  },
+  "sporco": {
+    "conda_name": "sporco",
+    "import_name": "sporco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sporco"
+  },
+  "spot2cell": {
+    "conda_name": "spot2cell",
+    "import_name": "spot2cell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spot2cell"
+  },
+  "spotiflow": {
+    "conda_name": "spotiflow",
+    "import_name": "spotiflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spotiflow"
+  },
+  "spotipy": {
+    "conda_name": "spotipy",
+    "import_name": "spotipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spotipy"
+  },
+  "spotpy": {
+    "conda_name": "spotpy",
+    "import_name": "spotpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spotpy"
+  },
+  "spots-in-yeasts": {
+    "conda_name": "spots-in-yeasts",
+    "import_name": "spots_in_yeasts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spots-in-yeasts"
+  },
+  "spqr": {
+    "conda_name": "spqr",
+    "import_name": "SPQR",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spqr"
+  },
+  "spt3g": {
+    "conda_name": "spt3g",
+    "import_name": "spt3g.core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spt3g"
+  },
+  "sputnik": {
+    "conda_name": "sputnik",
+    "import_name": "sputnik",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sputnik"
+  },
+  "spvcm": {
+    "conda_name": "spvcm",
+    "import_name": "spvcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spvcm"
+  },
+  "spyboat": {
+    "conda_name": "spyboat",
+    "import_name": "spyboat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyboat"
+  },
+  "spyder": {
+    "conda_name": "spyder-base",
+    "import_name": "spyder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder"
+  },
+  "spyder-kernels": {
+    "conda_name": "spyder-kernels",
+    "import_name": "spyder_kernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-kernels"
+  },
+  "spyder-modelx": {
+    "conda_name": "spyder-modelx",
+    "import_name": "spyder_modelx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-modelx"
+  },
+  "spyder-remote-client": {
+    "conda_name": "spyder-remote-client",
+    "import_name": "spyder_remote_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-remote-client"
+  },
+  "spyder-remote-server": {
+    "conda_name": "spyder-remote-server",
+    "import_name": "spyder_remote_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-remote-server"
+  },
+  "spyder-screencast": {
+    "conda_name": "spyder-screencast",
+    "import_name": "spyder_screencast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-screencast"
+  },
+  "spyder-unittest": {
+    "conda_name": "spyder-unittest",
+    "import_name": "spyder_unittest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-unittest"
+  },
+  "spyder-vim": {
+    "conda_name": "spyder-vim",
+    "import_name": "spyder_vim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyder-vim"
+  },
+  "spylon": {
+    "conda_name": "spylon",
+    "import_name": "spylon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spylon"
+  },
+  "spylon-kernel": {
+    "conda_name": "spylon-kernel",
+    "import_name": "spylon_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spylon-kernel"
+  },
+  "spymicmac": {
+    "conda_name": "spymicmac",
+    "import_name": "spymicmac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spymicmac"
+  },
+  "spymx-kernels": {
+    "conda_name": "spymx-kernels",
+    "import_name": "spymx_kernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spymx-kernels"
+  },
+  "spyndex": {
+    "conda_name": "spyndex",
+    "import_name": "spyndex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyndex"
+  },
+  "spyne": {
+    "conda_name": "spyne",
+    "import_name": "spyne",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyne"
+  },
+  "spyql": {
+    "conda_name": "spyql",
+    "import_name": "spyql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyql"
+  },
+  "spyrmsd": {
+    "conda_name": "spyrmsd",
+    "import_name": "spyrmsd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyrmsd"
+  },
+  "spython": {
+    "conda_name": "spython",
+    "import_name": "spython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spython"
+  },
+  "spyx": {
+    "conda_name": "spyx",
+    "import_name": "spyx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "spyx"
+  },
+  "sqcircuit": {
+    "conda_name": "sqcircuit",
+    "import_name": "SQcircuit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqcircuit"
+  },
+  "sqeleton": {
+    "conda_name": "sqeleton",
+    "import_name": "sqeleton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqeleton"
+  },
+  "sql-magic": {
+    "conda_name": "sql-magic",
+    "import_name": "sql_magic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sql-magic"
+  },
+  "sql-metadata": {
+    "conda_name": "sql-metadata",
+    "import_name": "sql_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sql-metadata"
+  },
+  "sqlacodegen": {
+    "conda_name": "sqlacodegen",
+    "import_name": "sqlacodegen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlacodegen"
+  },
+  "sqlakeyset": {
+    "conda_name": "sqlakeyset",
+    "import_name": "sqlakeyset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlakeyset"
+  },
+  "sqlalchemy-access": {
+    "conda_name": "sqlalchemy-access",
+    "import_name": "sqlalchemy_access",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-access"
+  },
+  "sqlalchemy-cockroachdb": {
+    "conda_name": "sqlalchemy-cockroachdb",
+    "import_name": "sqlalchemy_cockroachdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-cockroachdb"
+  },
+  "sqlalchemy-continuum": {
+    "conda_name": "sqlalchemy-continuum",
+    "import_name": "sqlalchemy_continuum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-continuum"
+  },
+  "sqlalchemy-databricks": {
+    "conda_name": "sqlalchemy-databricks",
+    "import_name": "sqlalchemy_databricks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-databricks"
+  },
+  "sqlalchemy-exasol": {
+    "conda_name": "sqlalchemy_exasol",
+    "import_name": "sqlalchemy_exasol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-exasol"
+  },
+  "sqlalchemy-heavyai": {
+    "conda_name": "sqlalchemy-heavyai",
+    "import_name": "sqlalchemy_heavyai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-heavyai"
+  },
+  "sqlalchemy-jsonfield": {
+    "conda_name": "sqlalchemy-jsonfield",
+    "import_name": "sqlalchemy_jsonfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-jsonfield"
+  },
+  "sqlalchemy-mate": {
+    "conda_name": "sqlalchemy-mate",
+    "import_name": "sqlalchemy_mate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-mate"
+  },
+  "sqlalchemy-migrate": {
+    "conda_name": "sqlalchemy-migrate",
+    "import_name": "migrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-migrate"
+  },
+  "sqlalchemy-omnisci": {
+    "conda_name": "sqlalchemy-omnisci",
+    "import_name": "sqlalchemy_omnisci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-omnisci"
+  },
+  "sqlalchemy-risingwave": {
+    "conda_name": "sqlalchemy-risingwave",
+    "import_name": "sqlalchemy_risingwave",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-risingwave"
+  },
+  "sqlalchemy-schemadisplay": {
+    "conda_name": "sqlalchemy_schemadisplay",
+    "import_name": "sqlalchemy_schemadisplay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-schemadisplay"
+  },
+  "sqlalchemy-searchable": {
+    "conda_name": "sqlalchemy-searchable",
+    "import_name": "sqlalchemy_searchable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-searchable"
+  },
+  "sqlalchemy-turbodbc": {
+    "conda_name": "sqlalchemy-turbodbc",
+    "import_name": "sqlalchemy_turbodbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-turbodbc"
+  },
+  "sqlalchemy-vertica-python": {
+    "conda_name": "sqlalchemy-vertica-python",
+    "import_name": "sqla_vertica_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-vertica-python"
+  },
+  "sqlalchemy-views": {
+    "conda_name": "sqlalchemy-views",
+    "import_name": "sqlalchemy_views",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlalchemy-views"
+  },
+  "sqlathanor": {
+    "conda_name": "sqlathanor",
+    "import_name": "sqlathanor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlathanor"
+  },
+  "sqlbag": {
+    "conda_name": "sqlbag",
+    "import_name": "sqlbag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlbag"
+  },
+  "sqlcompyre": {
+    "conda_name": "sqlcompyre",
+    "import_name": "sqlcompyre",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlcompyre"
+  },
+  "sqlite-fts4": {
+    "conda_name": "sqlite-fts4",
+    "import_name": "sqlite_fts4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlite-fts4"
+  },
+  "sqlite-history": {
+    "conda_name": "sqlite-history",
+    "import_name": "sqlite_history",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlite-history"
+  },
+  "sqlite-migrate": {
+    "conda_name": "sqlite-migrate",
+    "import_name": "sqlite_migrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlite-migrate"
+  },
+  "sqlitedict": {
+    "conda_name": "sqlitedict",
+    "import_name": "sqlitedict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlitedict"
+  },
+  "sqlmermaid": {
+    "conda_name": "sqlmermaid",
+    "import_name": "sqlmermaid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlmermaid"
+  },
+  "sqlobject": {
+    "conda_name": "sqlobject",
+    "import_name": "sqlobject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlobject"
+  },
+  "sqlparams": {
+    "conda_name": "sqlparams",
+    "import_name": "sqlparams",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqlparams"
+  },
+  "sqltrie": {
+    "conda_name": "sqltrie",
+    "import_name": "sqltrie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sqltrie"
+  },
+  "squarify": {
+    "conda_name": "squarify",
+    "import_name": "squarify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "squarify"
+  },
+  "squidpy": {
+    "conda_name": "squidpy",
+    "import_name": "squidpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "squidpy"
+  },
+  "squirrel-core": {
+    "conda_name": "squirrel-core",
+    "import_name": "squirrel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "squirrel-core"
+  },
+  "src-endpoints": {
+    "conda_name": "src-endpoints",
+    "import_name": "SRC_Endpoints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "src-endpoints"
+  },
+  "sre-yield": {
+    "conda_name": "sre_yield",
+    "import_name": "sre_yield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sre-yield"
+  },
+  "sregistry": {
+    "conda_name": "sregistry",
+    "import_name": "sregistry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sregistry"
+  },
+  "sridentify": {
+    "conda_name": "sridentify",
+    "import_name": "sridentify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sridentify"
+  },
+  "srt": {
+    "conda_name": "srt",
+    "import_name": "srt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "srt"
+  },
+  "srtm-py": {
+    "conda_name": "srtm.py",
+    "import_name": "srtm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "srtm-py"
+  },
+  "sscws": {
+    "conda_name": "sscws",
+    "import_name": "sscws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sscws"
+  },
+  "sse-starlette": {
+    "conda_name": "sse-starlette",
+    "import_name": "sse_starlette",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sse-starlette"
+  },
+  "sseclient-py": {
+    "conda_name": "sseclient-py",
+    "import_name": "sseclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sseclient-py"
+  },
+  "ssgetpy": {
+    "conda_name": "ssgetpy",
+    "import_name": "ssgetpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssgetpy"
+  },
+  "ssh-crypt": {
+    "conda_name": "ssh-crypt",
+    "import_name": "ssh_crypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssh-crypt"
+  },
+  "ssh-ipykernel": {
+    "conda_name": "ssh-ipykernel",
+    "import_name": "ssh_ipykernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssh-ipykernel"
+  },
+  "ssh-ipykernel-interrupt": {
+    "conda_name": "ssh_ipykernel_interrupt",
+    "import_name": "ssh_ipykernel_interrupt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssh-ipykernel-interrupt"
+  },
+  "ssh-utilities": {
+    "conda_name": "ssh-utilities",
+    "import_name": "ssh_utilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssh-utilities"
+  },
+  "ssh2-python": {
+    "conda_name": "ssh2-python",
+    "import_name": "ssh2.session",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssh2-python"
+  },
+  "sshcopyid": {
+    "conda_name": "sshcopyid",
+    "import_name": "sshcopyid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sshcopyid"
+  },
+  "sshfs": {
+    "conda_name": "sshfs",
+    "import_name": "sshfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sshfs"
+  },
+  "sshpubkeys": {
+    "conda_name": "sshpubkeys",
+    "import_name": "sshpubkeys",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sshpubkeys"
+  },
+  "sshtunnel": {
+    "conda_name": "sshtunnel",
+    "import_name": "sshtunnel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sshtunnel"
+  },
+  "sshuttle": {
+    "conda_name": "sshuttle",
+    "import_name": "sshuttle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sshuttle"
+  },
+  "ssm-simulators": {
+    "conda_name": "ssm-simulators",
+    "import_name": "ssms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssm-simulators"
+  },
+  "ssp-detector": {
+    "conda_name": "ssp_detector",
+    "import_name": "SSp_Detector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssp-detector"
+  },
+  "sspilib": {
+    "conda_name": "sspilib",
+    "import_name": "sspilib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sspilib"
+  },
+  "ssqueezepy": {
+    "conda_name": "ssqueezepy",
+    "import_name": "ssqueezepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ssqueezepy"
+  },
+  "st-annotated-text": {
+    "conda_name": "st-annotated-text",
+    "import_name": "annotated_text",
+    "mapping_source": "regro-bot",
+    "pypi_name": "st-annotated-text"
+  },
+  "stable-baselines3": {
+    "conda_name": "stable-baselines3",
+    "import_name": "stable_baselines3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stable-baselines3"
+  },
+  "stac-check": {
+    "conda_name": "stac-check",
+    "import_name": "stac_check",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stac-check"
+  },
+  "stac-geoparquet": {
+    "conda_name": "stac-geoparquet",
+    "import_name": "stac_geoparquet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stac-geoparquet"
+  },
+  "stac-pydantic": {
+    "conda_name": "stac-pydantic",
+    "import_name": "stac_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stac-pydantic"
+  },
+  "stac-validator": {
+    "conda_name": "stac-validator",
+    "import_name": "stac_validator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stac-validator"
+  },
+  "stac-vrt": {
+    "conda_name": "stac-vrt",
+    "import_name": "stac_vrt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stac-vrt"
+  },
+  "stacie": {
+    "conda_name": "stacie",
+    "import_name": "stacie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stacie"
+  },
+  "stack-data": {
+    "conda_name": "stack_data",
+    "import_name": "stack_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stack-data"
+  },
+  "stackeddag": {
+    "conda_name": "stackeddag",
+    "import_name": "stackeddag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stackeddag"
+  },
+  "stackstac": {
+    "conda_name": "stackstac",
+    "import_name": "stackstac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stackstac"
+  },
+  "stackview": {
+    "conda_name": "stackview",
+    "import_name": "stackview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stackview"
+  },
+  "staged-script": {
+    "conda_name": "staged-script",
+    "import_name": "staged_script",
+    "mapping_source": "regro-bot",
+    "pypi_name": "staged-script"
+  },
+  "staircase": {
+    "conda_name": "staircase",
+    "import_name": "staircase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "staircase"
+  },
+  "stakesign": {
+    "conda_name": "stakesign",
+    "import_name": "stakesign",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stakesign"
+  },
+  "standard-aifc": {
+    "conda_name": "standard-aifc",
+    "import_name": "aifc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "standard-aifc"
+  },
+  "standard-chunk": {
+    "conda_name": "standard-chunk",
+    "import_name": "chunk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "standard-chunk"
+  },
+  "standard-sunau": {
+    "conda_name": "standard-sunau",
+    "import_name": "sunau",
+    "mapping_source": "regro-bot",
+    "pypi_name": "standard-sunau"
+  },
+  "standardiser": {
+    "conda_name": "standardiser",
+    "import_name": "standardiser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "standardiser"
+  },
+  "stanio": {
+    "conda_name": "stanio",
+    "import_name": "stanio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stanio"
+  },
+  "stardist-napari": {
+    "conda_name": "stardist-napari",
+    "import_name": "stardist_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stardist-napari"
+  },
+  "starfile": {
+    "conda_name": "starfile",
+    "import_name": "starfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starfile"
+  },
+  "starkbank-ecdsa": {
+    "conda_name": "starkbank-ecdsa",
+    "import_name": "ellipticcurve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starkbank-ecdsa"
+  },
+  "starlette-admin": {
+    "conda_name": "starlette-admin",
+    "import_name": "starlette_admin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlette-admin"
+  },
+  "starlette-csrf": {
+    "conda_name": "starlette-csrf",
+    "import_name": "starlette_csrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlette-csrf"
+  },
+  "starlette-testclient": {
+    "conda_name": "starlette-testclient",
+    "import_name": "starlette_testclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlette-testclient"
+  },
+  "starlink-pyast": {
+    "conda_name": "starlink-pyast",
+    "import_name": "starlink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlink-pyast"
+  },
+  "starlite": {
+    "conda_name": "starlite",
+    "import_name": "starlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlite"
+  },
+  "starlite-jwt": {
+    "conda_name": "starlite-jwt",
+    "import_name": "starlite_jwt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlite-jwt"
+  },
+  "starlite-multipart": {
+    "conda_name": "starlite-multipart",
+    "import_name": "starlite_multipart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlite-multipart"
+  },
+  "starlite-sessions": {
+    "conda_name": "starlite-sessions",
+    "import_name": "starlite_sessions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starlite-sessions"
+  },
+  "starplot": {
+    "conda_name": "starplot",
+    "import_name": "starplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starplot"
+  },
+  "starry": {
+    "conda_name": "starry",
+    "import_name": "starry",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starry"
+  },
+  "starsessions": {
+    "conda_name": "starsessions",
+    "import_name": "starsessions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starsessions"
+  },
+  "start-jupyter-cm": {
+    "conda_name": "start_jupyter_cm",
+    "import_name": "start_jupyter_cm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "start-jupyter-cm"
+  },
+  "startables": {
+    "conda_name": "startables",
+    "import_name": "startables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "startables"
+  },
+  "starz": {
+    "conda_name": "starz",
+    "import_name": "starz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "starz"
+  },
+  "stashy": {
+    "conda_name": "stashy",
+    "import_name": "stashy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stashy"
+  },
+  "statannot": {
+    "conda_name": "statannot",
+    "import_name": "statannot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "statannot"
+  },
+  "stateplane": {
+    "conda_name": "stateplane",
+    "import_name": "stateplane",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stateplane"
+  },
+  "static": {
+    "conda_name": "static",
+    "import_name": "static",
+    "mapping_source": "regro-bot",
+    "pypi_name": "static"
+  },
+  "static-frame": {
+    "conda_name": "static-frame",
+    "import_name": "static_frame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "static-frame"
+  },
+  "staticjinja": {
+    "conda_name": "staticjinja",
+    "import_name": "staticjinja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "staticjinja"
+  },
+  "statistics": {
+    "conda_name": "statistics",
+    "import_name": "statistics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "statistics"
+  },
+  "statmorph": {
+    "conda_name": "statmorph",
+    "import_name": "statmorph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "statmorph"
+  },
+  "stats-can": {
+    "conda_name": "stats_can",
+    "import_name": "stats_can",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stats-can"
+  },
+  "statsforecast": {
+    "conda_name": "statsforecast",
+    "import_name": "statsforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "statsforecast"
+  },
+  "statsmodels": {
+    "conda_name": "statsmodels",
+    "import_name": "statsmodels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "statsmodels"
+  },
+  "stdlib-list": {
+    "conda_name": "stdlib-list",
+    "import_name": "stdlib_list",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stdlib-list"
+  },
+  "stdlibs": {
+    "conda_name": "stdlibs",
+    "import_name": "stdlibs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stdlibs"
+  },
+  "stdpopsim": {
+    "conda_name": "stdpopsim",
+    "import_name": "stdpopsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stdpopsim"
+  },
+  "steemdata": {
+    "conda_name": "steemdata",
+    "import_name": "steemdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "steemdata"
+  },
+  "stefuna": {
+    "conda_name": "stefuna",
+    "import_name": "stefuna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stefuna"
+  },
+  "steinbock": {
+    "conda_name": "steinbock",
+    "import_name": "steinbock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "steinbock"
+  },
+  "stellarmesh": {
+    "conda_name": "stellarmesh",
+    "import_name": "stellarmesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stellarmesh"
+  },
+  "stellarphot": {
+    "conda_name": "stellarphot",
+    "import_name": "stellarphot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stellarphot"
+  },
+  "stem": {
+    "conda_name": "stem",
+    "import_name": "stem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stem"
+  },
+  "stemflow": {
+    "conda_name": "stemflow",
+    "import_name": "stemflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stemflow"
+  },
+  "stempeg": {
+    "conda_name": "stempeg",
+    "import_name": "stempeg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stempeg"
+  },
+  "stepfunctions": {
+    "conda_name": "stepfunctions",
+    "import_name": "stepfunctions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stepfunctions"
+  },
+  "steppyngstounes": {
+    "conda_name": "steppyngstounes",
+    "import_name": "steppyngstounes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "steppyngstounes"
+  },
+  "stestr": {
+    "conda_name": "stestr",
+    "import_name": "stestr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stestr"
+  },
+  "stevedore": {
+    "conda_name": "stevedore",
+    "import_name": "stevedore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stevedore"
+  },
+  "stginga": {
+    "conda_name": "stginga",
+    "import_name": "stginga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stginga"
+  },
+  "stimulus-py": {
+    "conda_name": "stimulus-py",
+    "import_name": "stimulus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stimulus-py"
+  },
+  "stk": {
+    "conda_name": "stk",
+    "import_name": "stk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stk"
+  },
+  "stlearn": {
+    "conda_name": "stlearn",
+    "import_name": "stlearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stlearn"
+  },
+  "stochastic": {
+    "conda_name": "stochastic",
+    "import_name": "stochastic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stochastic"
+  },
+  "stochatreat": {
+    "conda_name": "stochatreat",
+    "import_name": "stochatreat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stochatreat"
+  },
+  "stockwell": {
+    "conda_name": "stockwell",
+    "import_name": "stockwell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stockwell"
+  },
+  "stomp-py": {
+    "conda_name": "stomp.py",
+    "import_name": "stomp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stomp-py"
+  },
+  "stonesoup": {
+    "conda_name": "stonesoup",
+    "import_name": "stonesoup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stonesoup"
+  },
+  "stop-words": {
+    "conda_name": "stop-words",
+    "import_name": "stop_words",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stop-words"
+  },
+  "stopwordsiso": {
+    "conda_name": "stopwordsiso",
+    "import_name": "stopwordsiso",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stopwordsiso"
+  },
+  "storage3": {
+    "conda_name": "storage3",
+    "import_name": "storage3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "storage3"
+  },
+  "storefact": {
+    "conda_name": "storefact",
+    "import_name": "storefact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "storefact"
+  },
+  "stormevents": {
+    "conda_name": "stormevents",
+    "import_name": "stormevents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stormevents"
+  },
+  "storylines": {
+    "conda_name": "storylines",
+    "import_name": "storylines",
+    "mapping_source": "regro-bot",
+    "pypi_name": "storylines"
+  },
+  "strands-agents": {
+    "conda_name": "strands-agents",
+    "import_name": "strands",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strands-agents"
+  },
+  "strands-agents-mcp-server": {
+    "conda_name": "strands-agents-mcp-server",
+    "import_name": "strands",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strands-agents-mcp-server"
+  },
+  "strands-agents-tools": {
+    "conda_name": "strands-agents-tools",
+    "import_name": "strands_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strands-agents-tools"
+  },
+  "stratify": {
+    "conda_name": "python-stratify",
+    "import_name": "stratify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stratify"
+  },
+  "strawberry-graphql-django": {
+    "conda_name": "strawberry-graphql-django",
+    "import_name": "strawberry_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strawberry-graphql-django"
+  },
+  "strawberryfields": {
+    "conda_name": "strawberryfields",
+    "import_name": "strawberryfields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strawberryfields"
+  },
+  "strct": {
+    "conda_name": "strct",
+    "import_name": "strct",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strct"
+  },
+  "stream-inflate": {
+    "conda_name": "stream-inflate",
+    "import_name": "stream_inflate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stream-inflate"
+  },
+  "stream-zip": {
+    "conda_name": "stream-zip",
+    "import_name": "stream_zip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stream-zip"
+  },
+  "streamad": {
+    "conda_name": "streamad",
+    "import_name": "streamad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamad"
+  },
+  "streamlit": {
+    "conda_name": "streamlit",
+    "import_name": "streamlit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit"
+  },
+  "streamlit-aggrid": {
+    "conda_name": "streamlit-aggrid",
+    "import_name": "st_aggrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-aggrid"
+  },
+  "streamlit-bokeh-events": {
+    "conda_name": "streamlit-bokeh-events",
+    "import_name": "streamlit_bokeh_events",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-bokeh-events"
+  },
+  "streamlit-flow-component": {
+    "conda_name": "streamlit-flow-component",
+    "import_name": "streamlit_flow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-flow-component"
+  },
+  "streamlit-folium": {
+    "conda_name": "streamlit-folium",
+    "import_name": "streamlit_folium",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-folium"
+  },
+  "streamlit-keyup": {
+    "conda_name": "streamlit-keyup",
+    "import_name": "st_keyup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-keyup"
+  },
+  "streamlit-option-menu": {
+    "conda_name": "streamlit_option_menu",
+    "import_name": "streamlit_option_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-option-menu"
+  },
+  "streamlit-pandas-profiling": {
+    "conda_name": "streamlit-pandas-profiling",
+    "import_name": "streamlit_pandas_profiling",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-pandas-profiling"
+  },
+  "streamlit-passwordless": {
+    "conda_name": "streamlit_passwordless",
+    "import_name": "streamlit_passwordless",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-passwordless"
+  },
+  "streamlit-paste-button": {
+    "conda_name": "streamlit-paste-button",
+    "import_name": "streamlit_paste_button",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-paste-button"
+  },
+  "streamlit-reveal-slides": {
+    "conda_name": "streamlit-reveal-slides",
+    "import_name": "reveal_slides",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-reveal-slides"
+  },
+  "streamlit-searchbox": {
+    "conda_name": "streamlit-searchbox",
+    "import_name": "streamlit_searchbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-searchbox"
+  },
+  "streamlit-tags": {
+    "conda_name": "streamlit_tags",
+    "import_name": "streamlit_tags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-tags"
+  },
+  "streamlit-vis-timeline": {
+    "conda_name": "streamlit-vis-timeline",
+    "import_name": "streamlit_timeline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamlit-vis-timeline"
+  },
+  "streamtracer": {
+    "conda_name": "streamtracer",
+    "import_name": "streamtracer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamtracer"
+  },
+  "streamz": {
+    "conda_name": "streamz",
+    "import_name": "streamz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "streamz"
+  },
+  "strenum": {
+    "conda_name": "strenum",
+    "import_name": "strenum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strenum"
+  },
+  "strictyaml": {
+    "conda_name": "strictyaml",
+    "import_name": "strictyaml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strictyaml"
+  },
+  "stringcase": {
+    "conda_name": "stringcase",
+    "import_name": "stringcase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stringcase"
+  },
+  "stringparser": {
+    "conda_name": "stringparser",
+    "import_name": "stringparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stringparser"
+  },
+  "strip-hints": {
+    "conda_name": "strip-hints",
+    "import_name": "strip_hints",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strip-hints"
+  },
+  "stripnet": {
+    "conda_name": "stripnet",
+    "import_name": "stripnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stripnet"
+  },
+  "striprtf": {
+    "conda_name": "striprtf",
+    "import_name": "striprtf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "striprtf"
+  },
+  "strsimpy": {
+    "conda_name": "strsimpy",
+    "import_name": "strsimpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "strsimpy"
+  },
+  "struct-lmm": {
+    "conda_name": "struct-lmm",
+    "import_name": "struct_lmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "struct-lmm"
+  },
+  "structout": {
+    "conda_name": "structout",
+    "import_name": "structout",
+    "mapping_source": "regro-bot",
+    "pypi_name": "structout"
+  },
+  "structsvm": {
+    "conda_name": "structsvm",
+    "import_name": "structsvm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "structsvm"
+  },
+  "structuregraph-helpers": {
+    "conda_name": "structuregraph-helpers",
+    "import_name": "structuregraph_helpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "structuregraph-helpers"
+  },
+  "stsynphot": {
+    "conda_name": "stsynphot",
+    "import_name": "stsynphot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stsynphot"
+  },
+  "stua": {
+    "conda_name": "stua",
+    "import_name": "stua",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stua"
+  },
+  "stuf": {
+    "conda_name": "stuf",
+    "import_name": "stuf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stuf"
+  },
+  "stumpy": {
+    "conda_name": "stumpy",
+    "import_name": "stumpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stumpy"
+  },
+  "stylegan2-pytorch": {
+    "conda_name": "stylegan2-pytorch",
+    "import_name": "stylegan2_pytorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stylegan2-pytorch"
+  },
+  "stylist": {
+    "conda_name": "stylist",
+    "import_name": "stylist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "stylist"
+  },
+  "styro": {
+    "conda_name": "styro",
+    "import_name": "styro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "styro"
+  },
+  "subby": {
+    "conda_name": "subby",
+    "import_name": "subby",
+    "mapping_source": "regro-bot",
+    "pypi_name": "subby"
+  },
+  "subgroups": {
+    "conda_name": "subgroups",
+    "import_name": "subgroups",
+    "mapping_source": "regro-bot",
+    "pypi_name": "subgroups"
+  },
+  "submitit": {
+    "conda_name": "submitit",
+    "import_name": "submitit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "submitit"
+  },
+  "subprocess-tee": {
+    "conda_name": "subprocess-tee",
+    "import_name": "subprocess_tee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "subprocess-tee"
+  },
+  "subrun": {
+    "conda_name": "subrun",
+    "import_name": "subrun",
+    "mapping_source": "regro-bot",
+    "pypi_name": "subrun"
+  },
+  "substrait": {
+    "conda_name": "python-substrait",
+    "import_name": "substrait",
+    "mapping_source": "regro-bot",
+    "pypi_name": "substrait"
+  },
+  "substrait-antlr": {
+    "conda_name": "python-substrait-antlr",
+    "import_name": "substrait_antlr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "substrait-antlr"
+  },
+  "substrait-extensions": {
+    "conda_name": "python-substrait-extensions",
+    "import_name": "substrait_extensions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "substrait-extensions"
+  },
+  "substrait-protobuf": {
+    "conda_name": "python-substrait-protobuf",
+    "import_name": "substrait.plan_pb2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "substrait-protobuf"
+  },
+  "substring": {
+    "conda_name": "substring",
+    "import_name": "substring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "substring"
+  },
+  "subsurface": {
+    "conda_name": "subsurface",
+    "import_name": "subsurface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "subsurface"
+  },
+  "sudachidict-core": {
+    "conda_name": "sudachidict-core",
+    "import_name": "sudachidict_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sudachidict-core"
+  },
+  "sudachidict-full": {
+    "conda_name": "sudachidict-full",
+    "import_name": "sudachidict_full",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sudachidict-full"
+  },
+  "sudachidict-small": {
+    "conda_name": "sudachidict-small",
+    "import_name": "sudachidict_small",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sudachidict-small"
+  },
+  "sudospawner": {
+    "conda_name": "sudospawner",
+    "import_name": "sudospawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sudospawner"
+  },
+  "suds": {
+    "conda_name": "suds",
+    "import_name": "suds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suds"
+  },
+  "suds-community": {
+    "conda_name": "suds-community",
+    "import_name": "suds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suds-community"
+  },
+  "suffix-tree": {
+    "conda_name": "suffix-tree",
+    "import_name": "suffix_tree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suffix-tree"
+  },
+  "sugartex": {
+    "conda_name": "sugartex",
+    "import_name": "sugartex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sugartex"
+  },
+  "suggestion": {
+    "conda_name": "suggestion",
+    "import_name": "suggestion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suggestion"
+  },
+  "suitcase-csv": {
+    "conda_name": "suitcase-csv",
+    "import_name": "suitcase.csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-csv"
+  },
+  "suitcase-json-metadata": {
+    "conda_name": "suitcase-json-metadata",
+    "import_name": "suitcase.json_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-json-metadata"
+  },
+  "suitcase-jsonl": {
+    "conda_name": "suitcase-jsonl",
+    "import_name": "suitcase.jsonl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-jsonl"
+  },
+  "suitcase-mongo": {
+    "conda_name": "suitcase-mongo",
+    "import_name": "suitcase.mongo_embedded",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-mongo"
+  },
+  "suitcase-msgpack": {
+    "conda_name": "suitcase-msgpack",
+    "import_name": "suitcase.msgpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-msgpack"
+  },
+  "suitcase-specfile": {
+    "conda_name": "suitcase-specfile",
+    "import_name": "suitcase.specfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-specfile"
+  },
+  "suitcase-tiff": {
+    "conda_name": "suitcase-tiff",
+    "import_name": "suitcase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-tiff"
+  },
+  "suitcase-utils": {
+    "conda_name": "suitcase-utils",
+    "import_name": "suitcase.utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitcase-utils"
+  },
+  "suitesparse-graphblas": {
+    "conda_name": "python-suitesparse-graphblas",
+    "import_name": "suitesparse_graphblas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitesparse-graphblas"
+  },
+  "suitesparsegetpy": {
+    "conda_name": "suitesparsegetpy",
+    "import_name": "suitesparseget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suitesparsegetpy"
+  },
+  "summarytools": {
+    "conda_name": "summarytools",
+    "import_name": "summarytools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "summarytools"
+  },
+  "sumtypes": {
+    "conda_name": "sumtypes",
+    "import_name": "sumtypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sumtypes"
+  },
+  "sumy": {
+    "conda_name": "sumy",
+    "import_name": "sumy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sumy"
+  },
+  "sunkit-image": {
+    "conda_name": "sunkit-image",
+    "import_name": "sunkit_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sunkit-image"
+  },
+  "sunkit-instruments": {
+    "conda_name": "sunkit-instruments",
+    "import_name": "sunkit_instruments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sunkit-instruments"
+  },
+  "sunkit-magex": {
+    "conda_name": "sunkit-magex",
+    "import_name": "sunkit_magex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sunkit-magex"
+  },
+  "sunpy-soar": {
+    "conda_name": "sunpy-soar",
+    "import_name": "sunpy_soar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sunpy-soar"
+  },
+  "sunraster": {
+    "conda_name": "sunraster",
+    "import_name": "sunraster",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sunraster"
+  },
+  "supabase": {
+    "conda_name": "supabase",
+    "import_name": "supabase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supabase"
+  },
+  "supabase-pydantic": {
+    "conda_name": "supabase-pydantic",
+    "import_name": "supabase_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supabase-pydantic"
+  },
+  "supafunc": {
+    "conda_name": "supafunc",
+    "import_name": "supafunc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supafunc"
+  },
+  "super-collections": {
+    "conda_name": "super_collections",
+    "import_name": "super_collections",
+    "mapping_source": "regro-bot",
+    "pypi_name": "super-collections"
+  },
+  "superblockify": {
+    "conda_name": "superblockify",
+    "import_name": "superblockify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "superblockify"
+  },
+  "superlance": {
+    "conda_name": "superlance",
+    "import_name": "superlance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "superlance"
+  },
+  "supermercado": {
+    "conda_name": "supermercado",
+    "import_name": "supermercado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supermercado"
+  },
+  "supermorecado": {
+    "conda_name": "supermorecado",
+    "import_name": "supermorecado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supermorecado"
+  },
+  "superqt": {
+    "conda_name": "superqt",
+    "import_name": "superqt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "superqt"
+  },
+  "supersmoother": {
+    "conda_name": "supersmoother",
+    "import_name": "supersmoother",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supersmoother"
+  },
+  "supertree": {
+    "conda_name": "supertree",
+    "import_name": "supertree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supertree"
+  },
+  "supervision": {
+    "conda_name": "supervision",
+    "import_name": "supervision",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supervision"
+  },
+  "support-developer": {
+    "conda_name": "support_developer",
+    "import_name": "support_developer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "support-developer"
+  },
+  "supportdata": {
+    "conda_name": "supportdata",
+    "import_name": "supportdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "supportdata"
+  },
+  "surfa": {
+    "conda_name": "surfa",
+    "import_name": "surfa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "surfa"
+  },
+  "surface-dynamics": {
+    "conda_name": "surface-dynamics",
+    "import_name": "surface_dynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "surface-dynamics"
+  },
+  "surface-water-network": {
+    "conda_name": "surface-water-network",
+    "import_name": "swn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "surface-water-network"
+  },
+  "surfinbh": {
+    "conda_name": "surfinbh",
+    "import_name": "surfinBH",
+    "mapping_source": "regro-bot",
+    "pypi_name": "surfinbh"
+  },
+  "survey": {
+    "conda_name": "survey",
+    "import_name": "survey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "survey"
+  },
+  "surya-ocr": {
+    "conda_name": "surya-ocr",
+    "import_name": "surya",
+    "mapping_source": "regro-bot",
+    "pypi_name": "surya-ocr"
+  },
+  "sushy": {
+    "conda_name": "sushy",
+    "import_name": "sushy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sushy"
+  },
+  "susi": {
+    "conda_name": "susi",
+    "import_name": "susi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "susi"
+  },
+  "suspect": {
+    "conda_name": "suspect",
+    "import_name": "suspect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "suspect"
+  },
+  "svcs": {
+    "conda_name": "svcs",
+    "import_name": "svcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svcs"
+  },
+  "svgdigitizer": {
+    "conda_name": "svgdigitizer",
+    "import_name": "svgdigitizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svgdigitizer"
+  },
+  "svglib": {
+    "conda_name": "svglib",
+    "import_name": "svglib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svglib"
+  },
+  "svgpath2mpl": {
+    "conda_name": "svgpath2mpl",
+    "import_name": "svgpath2mpl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svgpath2mpl"
+  },
+  "svgpathtools": {
+    "conda_name": "svgpathtools",
+    "import_name": "svgpathtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svgpathtools"
+  },
+  "svgwrite": {
+    "conda_name": "svgwrite",
+    "import_name": "svgwrite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svgwrite"
+  },
+  "svmbir": {
+    "conda_name": "svmbir",
+    "import_name": "svmbir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "svmbir"
+  },
+  "swapper": {
+    "conda_name": "swapper",
+    "import_name": "swapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swapper"
+  },
+  "swashes": {
+    "conda_name": "swashes",
+    "import_name": "swashes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swashes"
+  },
+  "sweetviz": {
+    "conda_name": "sweetviz",
+    "import_name": "sweetviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sweetviz"
+  },
+  "swepy": {
+    "conda_name": "swepy",
+    "import_name": "swepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swepy"
+  },
+  "swiftbat": {
+    "conda_name": "swiftbat",
+    "import_name": "swiftbat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swiftbat"
+  },
+  "swifter": {
+    "conda_name": "swifter",
+    "import_name": "swifter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swifter"
+  },
+  "swifttools": {
+    "conda_name": "swifttools",
+    "import_name": "swifttools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swifttools"
+  },
+  "swisslandstats-geopy": {
+    "conda_name": "swisslandstats-geopy",
+    "import_name": "swisslandstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swisslandstats-geopy"
+  },
+  "switch-model": {
+    "conda_name": "switch_model",
+    "import_name": "switch_model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "switch-model"
+  },
+  "switcheroo": {
+    "conda_name": "switcheroo",
+    "import_name": "switcheroo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "switcheroo"
+  },
+  "swmmanywhere": {
+    "conda_name": "swmmanywhere",
+    "import_name": "swmmanywhere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swmmanywhere"
+  },
+  "swmmtoolbox": {
+    "conda_name": "swmmtoolbox",
+    "import_name": "swmmtoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swmmtoolbox"
+  },
+  "swmr-tools": {
+    "conda_name": "swmr-tools",
+    "import_name": "swmr_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "swmr-tools"
+  },
+  "sxs": {
+    "conda_name": "sxs",
+    "import_name": "sxs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sxs"
+  },
+  "sxscatalog": {
+    "conda_name": "sxscatalog",
+    "import_name": "sxscatalog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sxscatalog"
+  },
+  "sybil": {
+    "conda_name": "sybil",
+    "import_name": "sybil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sybil"
+  },
+  "syft-proto": {
+    "conda_name": "syft-proto",
+    "import_name": "syft_proto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "syft-proto"
+  },
+  "sym": {
+    "conda_name": "sym",
+    "import_name": "sym",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sym"
+  },
+  "symbolfit": {
+    "conda_name": "symbolfit",
+    "import_name": "symbolfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symbolfit"
+  },
+  "symbrim": {
+    "conda_name": "symbrim",
+    "import_name": "symbrim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symbrim"
+  },
+  "symengine": {
+    "conda_name": "python-symengine",
+    "import_name": "symengine",
+    "mapping_source": "static",
+    "pypi_name": "symengine"
+  },
+  "symfem": {
+    "conda_name": "symfem",
+    "import_name": "symfem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symfem"
+  },
+  "symfit": {
+    "conda_name": "symfit",
+    "import_name": "symfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symfit"
+  },
+  "symjit": {
+    "conda_name": "symjit",
+    "import_name": "symjit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symjit"
+  },
+  "symmeplot": {
+    "conda_name": "symmeplot",
+    "import_name": "symmeplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symmeplot"
+  },
+  "symmray": {
+    "conda_name": "symmray",
+    "import_name": "symmray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symmray"
+  },
+  "sympy": {
+    "conda_name": "sympy",
+    "import_name": "sympy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sympy"
+  },
+  "sympy-equation": {
+    "conda_name": "sympy_equation",
+    "import_name": "sympy_equation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sympy-equation"
+  },
+  "sympy-plot-backends": {
+    "conda_name": "sympy_plot_backends",
+    "import_name": "spb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sympy-plot-backends"
+  },
+  "sympytensor": {
+    "conda_name": "sympytensor",
+    "import_name": "sympytensor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sympytensor"
+  },
+  "symstore": {
+    "conda_name": "symstore",
+    "import_name": "symstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "symstore"
+  },
+  "synbiochem-py": {
+    "conda_name": "synbiochem-py",
+    "import_name": "synbiochem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synbiochem-py"
+  },
+  "syncer": {
+    "conda_name": "syncer",
+    "import_name": "syncer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "syncer"
+  },
+  "synchronicity": {
+    "conda_name": "synchronicity",
+    "import_name": "synchronicity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synchronicity"
+  },
+  "syncup": {
+    "conda_name": "syncup",
+    "import_name": "syncup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "syncup"
+  },
+  "synphot": {
+    "conda_name": "synphot",
+    "import_name": "synphot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synphot"
+  },
+  "synr": {
+    "conda_name": "synr",
+    "import_name": "synr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synr"
+  },
+  "synthatdelays": {
+    "conda_name": "synthatdelays",
+    "import_name": "synthatdelays",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synthatdelays"
+  },
+  "synthetic-data": {
+    "conda_name": "synthetic-data",
+    "import_name": "synthetic_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synthetic-data"
+  },
+  "synthpop": {
+    "conda_name": "synthpop",
+    "import_name": "synthpop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "synthpop"
+  },
+  "syntok": {
+    "conda_name": "syntok",
+    "import_name": "syntok",
+    "mapping_source": "regro-bot",
+    "pypi_name": "syntok"
+  },
+  "syrupy": {
+    "conda_name": "syrupy",
+    "import_name": "syrupy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "syrupy"
+  },
+  "sysloss": {
+    "conda_name": "sysloss",
+    "import_name": "sysloss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sysloss"
+  },
+  "sysrsync": {
+    "conda_name": "sysrsync",
+    "import_name": "sysrsync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sysrsync"
+  },
+  "system-slash": {
+    "conda_name": "system-slash",
+    "import_name": "SystemSlash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "system-slash"
+  },
+  "systemd-python": {
+    "conda_name": "python-systemd",
+    "import_name": "systemd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "systemd-python"
+  },
+  "sysv-ipc": {
+    "conda_name": "sysv_ipc",
+    "import_name": "sysv_ipc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "sysv-ipc"
+  },
+  "tabcmd": {
+    "conda_name": "tabcmd",
+    "import_name": "tabcmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabcmd"
+  },
+  "table-evaluator": {
+    "conda_name": "table-evaluator",
+    "import_name": "table_evaluator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "table-evaluator"
+  },
+  "tableau-to-sqlite": {
+    "conda_name": "tableau-to-sqlite",
+    "import_name": "tableau_to_sqlite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableau-to-sqlite"
+  },
+  "tableauscraper": {
+    "conda_name": "tableauscraper",
+    "import_name": "tableauscraper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableauscraper"
+  },
+  "tableauserverclient": {
+    "conda_name": "tableauserverclient",
+    "import_name": "tableauserverclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableauserverclient"
+  },
+  "tableone": {
+    "conda_name": "tableone",
+    "import_name": "tableone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableone"
+  },
+  "tables": {
+    "conda_name": "pytables",
+    "import_name": "pytables",
+    "mapping_source": "static",
+    "pypi_name": "tables"
+  },
+  "tableschema": {
+    "conda_name": "tableschema",
+    "import_name": "tableschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableschema"
+  },
+  "tableschema-sql": {
+    "conda_name": "tableschema-sql",
+    "import_name": "tableschema_sql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableschema-sql"
+  },
+  "tableschema-to-template": {
+    "conda_name": "tableschema-to-template",
+    "import_name": "tableschema_to_template",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tableschema-to-template"
+  },
+  "tablib": {
+    "conda_name": "tablib",
+    "import_name": "tablib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tablib"
+  },
+  "tabloo": {
+    "conda_name": "tabloo",
+    "import_name": "tabloo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabloo"
+  },
+  "tabmat": {
+    "conda_name": "tabmat",
+    "import_name": "tabmat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabmat"
+  },
+  "tabpy": {
+    "conda_name": "tabpy",
+    "import_name": "tabpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabpy"
+  },
+  "tabula-py": {
+    "conda_name": "tabula-py",
+    "import_name": "tabula",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabula-py"
+  },
+  "tabulardelta": {
+    "conda_name": "tabulardelta",
+    "import_name": "tabulardelta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabulardelta"
+  },
+  "tabulator": {
+    "conda_name": "tabulator",
+    "import_name": "tabulator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabulator"
+  },
+  "tabulous": {
+    "conda_name": "tabulous",
+    "import_name": "tabulous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tabulous"
+  },
+  "tacco": {
+    "conda_name": "tacco",
+    "import_name": "tacco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tacco"
+  },
+  "tad-dftd3": {
+    "conda_name": "tad-dftd3",
+    "import_name": "tad_dftd3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tad-dftd3"
+  },
+  "tad-dftd4": {
+    "conda_name": "tad-dftd4",
+    "import_name": "tad_dftd4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tad-dftd4"
+  },
+  "tad-mctc": {
+    "conda_name": "tad-mctc",
+    "import_name": "tad_mctc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tad-mctc"
+  },
+  "tad-multicharge": {
+    "conda_name": "tad-multicharge",
+    "import_name": "tad_multicharge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tad-multicharge"
+  },
+  "tafra": {
+    "conda_name": "tafra",
+    "import_name": "tafra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tafra"
+  },
+  "tag-mne": {
+    "conda_name": "tag-mne",
+    "import_name": "tag_mne",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tag-mne"
+  },
+  "tagmaps": {
+    "conda_name": "tagmaps",
+    "import_name": "tagmaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tagmaps"
+  },
+  "tailer": {
+    "conda_name": "tailer",
+    "import_name": "tailer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tailer"
+  },
+  "tailestim": {
+    "conda_name": "tailestim",
+    "import_name": "tailestim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tailestim"
+  },
+  "taipy-config": {
+    "conda_name": "taipy-config",
+    "import_name": "taipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taipy-config"
+  },
+  "taipy-templates": {
+    "conda_name": "taipy-templates",
+    "import_name": "taipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taipy-templates"
+  },
+  "talipp": {
+    "conda_name": "talipp",
+    "import_name": "talipp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "talipp"
+  },
+  "tangelo": {
+    "conda_name": "tangelo",
+    "import_name": "tangelo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tangelo"
+  },
+  "tango-checkup": {
+    "conda_name": "tango-checkup",
+    "import_name": "tango_checkup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tango-checkup"
+  },
+  "tangods-mcmax": {
+    "conda_name": "tangods-mcmax",
+    "import_name": "mcmax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tangods-mcmax"
+  },
+  "taospy": {
+    "conda_name": "taospy",
+    "import_name": "taosrest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taospy"
+  },
+  "tappy": {
+    "conda_name": "tappy",
+    "import_name": "tappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tappy"
+  },
+  "taqy": {
+    "conda_name": "taqy",
+    "import_name": "taqy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taqy"
+  },
+  "taskgraph": {
+    "conda_name": "taskgraph",
+    "import_name": "taskgraph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taskgraph"
+  },
+  "taskgroup": {
+    "conda_name": "taskgroup",
+    "import_name": "taskgroup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taskgroup"
+  },
+  "taskipy": {
+    "conda_name": "taskipy",
+    "import_name": "taskipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taskipy"
+  },
+  "tasklib": {
+    "conda_name": "tasklib",
+    "import_name": "tasklib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tasklib"
+  },
+  "tastymap": {
+    "conda_name": "tastymap",
+    "import_name": "tastymap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tastymap"
+  },
+  "taxidtools": {
+    "conda_name": "taxidtools",
+    "import_name": "taxidTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "taxidtools"
+  },
+  "tb3py": {
+    "conda_name": "tb3py",
+    "import_name": "tb3py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tb3py"
+  },
+  "tbats": {
+    "conda_name": "tbats",
+    "import_name": "tbats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tbats"
+  },
+  "tbparse": {
+    "conda_name": "tbparse",
+    "import_name": "tbparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tbparse"
+  },
+  "tbump": {
+    "conda_name": "tbump",
+    "import_name": "tbump",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tbump"
+  },
+  "tcfile": {
+    "conda_name": "tcfile",
+    "import_name": "TCFile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tcfile"
+  },
+  "tcmarkers": {
+    "conda_name": "tcmarkers",
+    "import_name": "tcmarkers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tcmarkers"
+  },
+  "tco": {
+    "conda_name": "tco",
+    "import_name": "tco",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tco"
+  },
+  "tcolorpy": {
+    "conda_name": "tcolorpy",
+    "import_name": "tcolorpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tcolorpy"
+  },
+  "tcpypi": {
+    "conda_name": "tcpypi",
+    "import_name": "tcpyPI",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tcpypi"
+  },
+  "tdameritrade": {
+    "conda_name": "tdameritrade",
+    "import_name": "tdameritrade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tdameritrade"
+  },
+  "tdastro": {
+    "conda_name": "tdastro",
+    "import_name": "tdastro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tdastro"
+  },
+  "tdscha": {
+    "conda_name": "tdscha",
+    "import_name": "tdscha",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tdscha"
+  },
+  "teamcity-messages": {
+    "conda_name": "teamcity-messages",
+    "import_name": "teamcity",
+    "mapping_source": "regro-bot",
+    "pypi_name": "teamcity-messages"
+  },
+  "technical": {
+    "conda_name": "technical",
+    "import_name": "technical",
+    "mapping_source": "regro-bot",
+    "pypi_name": "technical"
+  },
+  "tecio": {
+    "conda_name": "tecio",
+    "import_name": "tecio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tecio"
+  },
+  "teensytoany": {
+    "conda_name": "teensytoany",
+    "import_name": "teensytoany",
+    "mapping_source": "regro-bot",
+    "pypi_name": "teensytoany"
+  },
+  "telepath": {
+    "conda_name": "telepath",
+    "import_name": "telepath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "telepath"
+  },
+  "telluric": {
+    "conda_name": "telluric",
+    "import_name": "telluric",
+    "mapping_source": "regro-bot",
+    "pypi_name": "telluric"
+  },
+  "temmeta": {
+    "conda_name": "temmeta",
+    "import_name": "temmeta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "temmeta"
+  },
+  "tempdir": {
+    "conda_name": "tempdir",
+    "import_name": "tempdir",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tempdir"
+  },
+  "tempest-helper": {
+    "conda_name": "tempest-helper",
+    "import_name": "tempest_helper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tempest-helper"
+  },
+  "tempita": {
+    "conda_name": "tempita",
+    "import_name": "tempita",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tempita"
+  },
+  "templateflow": {
+    "conda_name": "templateflow",
+    "import_name": "templateflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "templateflow"
+  },
+  "temporal-cache": {
+    "conda_name": "temporal-cache",
+    "import_name": "temporalcache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "temporal-cache"
+  },
+  "tensorboard-plugin-wit": {
+    "conda_name": "tensorboard-plugin-wit",
+    "import_name": "tensorboard_plugin_wit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorboard-plugin-wit"
+  },
+  "tensorboardx": {
+    "conda_name": "tensorboardx",
+    "import_name": "tensorboardX",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorboardx"
+  },
+  "tensorflow-hub": {
+    "conda_name": "tensorflow-hub",
+    "import_name": "tensorflow_hub",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorflow-hub"
+  },
+  "tensorflow-lattice": {
+    "conda_name": "tensorflow-lattice",
+    "import_name": "tensorflow_lattice",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorflow-lattice"
+  },
+  "tensorflow-metadata": {
+    "conda_name": "tensorflow-metadata",
+    "import_name": "tensorflow_metadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorflow-metadata"
+  },
+  "tensorflowonspark": {
+    "conda_name": "tensorflowonspark",
+    "import_name": "tensorflowonspark",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorflowonspark"
+  },
+  "tensorly-quantum": {
+    "conda_name": "tensorly-quantum",
+    "import_name": "tlquantum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorly-quantum"
+  },
+  "tensorly-torch": {
+    "conda_name": "tensorly-torch",
+    "import_name": "tltorch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorly-torch"
+  },
+  "tensorpac": {
+    "conda_name": "tensorpac",
+    "import_name": "tensorpac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorpac"
+  },
+  "tensorpack": {
+    "conda_name": "tensorpack",
+    "import_name": "tensorpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorpack"
+  },
+  "tensortrade": {
+    "conda_name": "tensortrade",
+    "import_name": "tensortrade",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensortrade"
+  },
+  "tensorwaves": {
+    "conda_name": "tensorwaves",
+    "import_name": "tensorwaves",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tensorwaves"
+  },
+  "teos10": {
+    "conda_name": "teos10",
+    "import_name": "teos10",
+    "mapping_source": "regro-bot",
+    "pypi_name": "teos10"
+  },
+  "tephi": {
+    "conda_name": "tephi",
+    "import_name": "tephi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tephi"
+  },
+  "term-image": {
+    "conda_name": "term-image",
+    "import_name": "term_image",
+    "mapping_source": "regro-bot",
+    "pypi_name": "term-image"
+  },
+  "termcolor": {
+    "conda_name": "termcolor",
+    "import_name": "termcolor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "termcolor"
+  },
+  "termcolor2": {
+    "conda_name": "termcolor2",
+    "import_name": "termcolor2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "termcolor2"
+  },
+  "terminaltables": {
+    "conda_name": "terminaltables",
+    "import_name": "terminaltables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "terminaltables"
+  },
+  "termstyle": {
+    "conda_name": "python-termstyle",
+    "import_name": "termstyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "termstyle"
+  },
+  "ternary-diagram": {
+    "conda_name": "ternary-diagram",
+    "import_name": "ternary_diagram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ternary-diagram"
+  },
+  "tespy": {
+    "conda_name": "tespy",
+    "import_name": "tespy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tespy"
+  },
+  "tesserocr": {
+    "conda_name": "tesserocr",
+    "import_name": "tesserocr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tesserocr"
+  },
+  "tesspy": {
+    "conda_name": "tesspy",
+    "import_name": "tesspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tesspy"
+  },
+  "testcontainers": {
+    "conda_name": "testcontainers",
+    "import_name": "testcontainers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testcontainers"
+  },
+  "testfixtures": {
+    "conda_name": "testfixtures",
+    "import_name": "testfixtures",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testfixtures"
+  },
+  "testflows-asserts": {
+    "conda_name": "testflows.asserts",
+    "import_name": "testflows.asserts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testflows-asserts"
+  },
+  "testinfra": {
+    "conda_name": "testinfra",
+    "import_name": "testinfra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testinfra"
+  },
+  "testmsm": {
+    "conda_name": "testmsm",
+    "import_name": "msmbuilder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testmsm"
+  },
+  "testpath": {
+    "conda_name": "testpath",
+    "import_name": "testpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testpath"
+  },
+  "testslide": {
+    "conda_name": "testslide",
+    "import_name": "testslide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testslide"
+  },
+  "testtools": {
+    "conda_name": "testtools",
+    "import_name": "testtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "testtools"
+  },
+  "tethys-dask-scheduler": {
+    "conda_name": "tethys_dask_scheduler",
+    "import_name": "tethys_dask_scheduler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tethys-dask-scheduler"
+  },
+  "tethys-data-models": {
+    "conda_name": "tethys-data-models",
+    "import_name": "tethys_data_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tethys-data-models"
+  },
+  "tethys-dataset-services": {
+    "conda_name": "tethys_dataset_services",
+    "import_name": "tethys_dataset_services",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tethys-dataset-services"
+  },
+  "tetraframework": {
+    "conda_name": "tetraframework",
+    "import_name": "tetra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tetraframework"
+  },
+  "tex2py": {
+    "conda_name": "tex2py",
+    "import_name": "tex2py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tex2py"
+  },
+  "texext": {
+    "conda_name": "texext",
+    "import_name": "texext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "texext"
+  },
+  "texify": {
+    "conda_name": "texify",
+    "import_name": "texify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "texify"
+  },
+  "texsoup": {
+    "conda_name": "texsoup",
+    "import_name": "TexSoup",
+    "mapping_source": "regro-bot",
+    "pypi_name": "texsoup"
+  },
+  "text-encrypt-decrypt": {
+    "conda_name": "text-encrypt-decrypt",
+    "import_name": "text_encrypt_decrypt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "text-encrypt-decrypt"
+  },
+  "text-models": {
+    "conda_name": "text_models",
+    "import_name": "text_models",
+    "mapping_source": "regro-bot",
+    "pypi_name": "text-models"
+  },
+  "text-unidecode": {
+    "conda_name": "text-unidecode",
+    "import_name": "text_unidecode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "text-unidecode"
+  },
+  "text2emotion": {
+    "conda_name": "text2emotion",
+    "import_name": "text2emotion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "text2emotion"
+  },
+  "textacy": {
+    "conda_name": "textacy",
+    "import_name": "textacy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textacy"
+  },
+  "textblob": {
+    "conda_name": "textblob",
+    "import_name": "textblob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textblob"
+  },
+  "textdistance": {
+    "conda_name": "textdistance",
+    "import_name": "textdistance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textdistance"
+  },
+  "textgrad": {
+    "conda_name": "textgrad",
+    "import_name": "textgrad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textgrad"
+  },
+  "textgrid": {
+    "conda_name": "textgrid",
+    "import_name": "textgrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textgrid"
+  },
+  "texthero": {
+    "conda_name": "texthero",
+    "import_name": "texthero",
+    "mapping_source": "regro-bot",
+    "pypi_name": "texthero"
+  },
+  "textnets": {
+    "conda_name": "textnets",
+    "import_name": "textnets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textnets"
+  },
+  "textract": {
+    "conda_name": "textract",
+    "import_name": "textract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textract"
+  },
+  "textstat": {
+    "conda_name": "textstat",
+    "import_name": "textstat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textstat"
+  },
+  "texttable": {
+    "conda_name": "texttable",
+    "import_name": "texttable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "texttable"
+  },
+  "textual-imageview": {
+    "conda_name": "textual-imageview",
+    "import_name": "textual_imageview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textual-imageview"
+  },
+  "textual-plotext": {
+    "conda_name": "textual-plotext",
+    "import_name": "textual_plotext",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textual-plotext"
+  },
+  "textual-serve": {
+    "conda_name": "textual-serve",
+    "import_name": "textual_serve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textual-serve"
+  },
+  "textwrap3": {
+    "conda_name": "textwrap3",
+    "import_name": "textwrap3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "textwrap3"
+  },
+  "tf2-gnn": {
+    "conda_name": "tf2-gnn",
+    "import_name": "tf2_gnn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tf2-gnn"
+  },
+  "tfcausalimpact": {
+    "conda_name": "tfcausalimpact",
+    "import_name": "causalimpact",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tfcausalimpact"
+  },
+  "tfs-pandas": {
+    "conda_name": "tfs-pandas",
+    "import_name": "tfs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tfs-pandas"
+  },
+  "tftest": {
+    "conda_name": "tftest",
+    "import_name": "tftest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tftest"
+  },
+  "tfv": {
+    "conda_name": "tfv",
+    "import_name": "tfv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tfv"
+  },
+  "tfv-get-tools": {
+    "conda_name": "tfv_get_tools",
+    "import_name": "tfv_get_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tfv-get-tools"
+  },
+  "thalassa": {
+    "conda_name": "thalassa",
+    "import_name": "thalassa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thalassa"
+  },
+  "thatool": {
+    "conda_name": "thatool",
+    "import_name": "thatool.model",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thatool"
+  },
+  "the-segmentation-game": {
+    "conda_name": "the-segmentation-game",
+    "import_name": "the_segmentation_game",
+    "mapping_source": "regro-bot",
+    "pypi_name": "the-segmentation-game"
+  },
+  "thefuzz": {
+    "conda_name": "thefuzz",
+    "import_name": "thefuzz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thefuzz"
+  },
+  "thepipe": {
+    "conda_name": "thepipe",
+    "import_name": "thepipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thepipe"
+  },
+  "thermoextrap": {
+    "conda_name": "thermoextrap",
+    "import_name": "thermoextrap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thermoextrap"
+  },
+  "thermostate": {
+    "conda_name": "thermostate",
+    "import_name": "thermostate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thermostate"
+  },
+  "thermotools": {
+    "conda_name": "thermotools",
+    "import_name": "thermotools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thermotools"
+  },
+  "theseus-ai": {
+    "conda_name": "theseus-ai",
+    "import_name": "theseus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "theseus-ai"
+  },
+  "thevenin": {
+    "conda_name": "thevenin",
+    "import_name": "thevenin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thevenin"
+  },
+  "thorlabs-apt-protocol": {
+    "conda_name": "thorlabs-apt-protocol",
+    "import_name": "thorlabs_apt_protocol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thorlabs-apt-protocol"
+  },
+  "threadloop": {
+    "conda_name": "threadloop",
+    "import_name": "threadloop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "threadloop"
+  },
+  "threadom": {
+    "conda_name": "threadom",
+    "import_name": "threadom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "threadom"
+  },
+  "threddsclient": {
+    "conda_name": "threddsclient",
+    "import_name": "threddsclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "threddsclient"
+  },
+  "three-merge": {
+    "conda_name": "three-merge",
+    "import_name": "three_merge",
+    "mapping_source": "regro-bot",
+    "pypi_name": "three-merge"
+  },
+  "threedigrid": {
+    "conda_name": "threedigrid",
+    "import_name": "threedigrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "threedigrid"
+  },
+  "threeml": {
+    "conda_name": "threeml",
+    "import_name": "threeML",
+    "mapping_source": "regro-bot",
+    "pypi_name": "threeml"
+  },
+  "thrift-sasl": {
+    "conda_name": "thrift_sasl",
+    "import_name": "thrift_sasl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thrift-sasl"
+  },
+  "thriftpy2": {
+    "conda_name": "thriftpy2",
+    "import_name": "thriftpy2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thriftpy2"
+  },
+  "thucyd": {
+    "conda_name": "thucyd",
+    "import_name": "thucyd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thucyd"
+  },
+  "thunder-python": {
+    "conda_name": "thunder-python",
+    "import_name": "thunder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thunder-python"
+  },
+  "thunder-registration": {
+    "conda_name": "thunder-registration",
+    "import_name": "registration",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thunder-registration"
+  },
+  "thztools": {
+    "conda_name": "thztools",
+    "import_name": "thztools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "thztools"
+  },
+  "tiara": {
+    "conda_name": "tiara",
+    "import_name": "tiara",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiara"
+  },
+  "tiatoolbox": {
+    "conda_name": "tiatoolbox",
+    "import_name": "tiatoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiatoolbox"
+  },
+  "tibanna": {
+    "conda_name": "tibanna",
+    "import_name": "tibanna",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tibanna"
+  },
+  "ticlib": {
+    "conda_name": "ticlib",
+    "import_name": "ticlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ticlib"
+  },
+  "ticoi": {
+    "conda_name": "ticoi",
+    "import_name": "ticoi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ticoi"
+  },
+  "tidalpy": {
+    "conda_name": "tidalpy",
+    "import_name": "TidalPy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidalpy"
+  },
+  "tidb-vector": {
+    "conda_name": "tidb-vector",
+    "import_name": "tidb_vector",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidb-vector"
+  },
+  "tidy-headers": {
+    "conda_name": "tidy_headers",
+    "import_name": "tidy_headers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidy-headers"
+  },
+  "tidy-logger": {
+    "conda_name": "tidy-logger",
+    "import_name": "tidy_logger",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidy-logger"
+  },
+  "tidynamics": {
+    "conda_name": "tidynamics",
+    "import_name": "tidynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidynamics"
+  },
+  "tidypandas": {
+    "conda_name": "tidypandas",
+    "import_name": "tidypandas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidypandas"
+  },
+  "tidypolars": {
+    "conda_name": "tidypolars",
+    "import_name": "tidypolars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tidypolars"
+  },
+  "tifffile": {
+    "conda_name": "tifffile",
+    "import_name": "tifffile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tifffile"
+  },
+  "tifffolder": {
+    "conda_name": "tifffolder",
+    "import_name": "tifffolder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tifffolder"
+  },
+  "tiffslide": {
+    "conda_name": "tiffslide",
+    "import_name": "tiffslide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiffslide"
+  },
+  "tifftools": {
+    "conda_name": "tifftools",
+    "import_name": "tifftools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tifftools"
+  },
+  "tigernet": {
+    "conda_name": "tigernet",
+    "import_name": "tigernet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tigernet"
+  },
+  "tigramite": {
+    "conda_name": "tigramite",
+    "import_name": "tigramite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tigramite"
+  },
+  "tika": {
+    "conda_name": "tika",
+    "import_name": "tika",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tika"
+  },
+  "tikzplotlib": {
+    "conda_name": "tikzplotlib",
+    "import_name": "tikzplotlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tikzplotlib"
+  },
+  "tile-mate": {
+    "conda_name": "tile_mate",
+    "import_name": "tile_mate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tile-mate"
+  },
+  "tiledb": {
+    "conda_name": "tiledb-py",
+    "import_name": "tiledb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiledb"
+  },
+  "tiledb-bioimg": {
+    "conda_name": "tiledb-bioimg",
+    "import_name": "tiledb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiledb-bioimg"
+  },
+  "tilematrix": {
+    "conda_name": "tilematrix",
+    "import_name": "tilematrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tilematrix"
+  },
+  "tilepie": {
+    "conda_name": "tilepie",
+    "import_name": "tilepie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tilepie"
+  },
+  "tiler": {
+    "conda_name": "tiler",
+    "import_name": "tiler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiler"
+  },
+  "tilupy": {
+    "conda_name": "tilupy",
+    "import_name": "tilupy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tilupy"
+  },
+  "timbertrek": {
+    "conda_name": "timbertrek",
+    "import_name": "timbertrek",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timbertrek"
+  },
+  "timed-threads": {
+    "conda_name": "timed-threads",
+    "import_name": "timed_threads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timed-threads"
+  },
+  "timefiller": {
+    "conda_name": "timefiller",
+    "import_name": "timefiller",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timefiller"
+  },
+  "timelib": {
+    "conda_name": "timelib",
+    "import_name": "timelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timelib"
+  },
+  "timemory": {
+    "conda_name": "timemory",
+    "import_name": "timemory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timemory"
+  },
+  "timeout-decorator": {
+    "conda_name": "timeout-decorator",
+    "import_name": "timeout_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timeout-decorator"
+  },
+  "timer": {
+    "conda_name": "timer",
+    "import_name": "timer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timer"
+  },
+  "timer-dict": {
+    "conda_name": "timer-dict",
+    "import_name": "timer_dict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timer-dict"
+  },
+  "timerit": {
+    "conda_name": "timerit",
+    "import_name": "timerit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timerit"
+  },
+  "timescale": {
+    "conda_name": "timescale",
+    "import_name": "timescale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timescale"
+  },
+  "timescoring": {
+    "conda_name": "timescoring",
+    "import_name": "timescoring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timescoring"
+  },
+  "timing-asgi": {
+    "conda_name": "timing-asgi",
+    "import_name": "timing_asgi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timing-asgi"
+  },
+  "timml": {
+    "conda_name": "timml",
+    "import_name": "timml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timml"
+  },
+  "timple": {
+    "conda_name": "timple",
+    "import_name": "timple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "timple"
+  },
+  "tintx": {
+    "conda_name": "tintx",
+    "import_name": "tintx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tintx"
+  },
+  "tinuous": {
+    "conda_name": "tinuous",
+    "import_name": "tinuous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinuous"
+  },
+  "tiny-retriever": {
+    "conda_name": "tiny-retriever",
+    "import_name": "tiny_retriever",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiny-retriever"
+  },
+  "tinycss": {
+    "conda_name": "tinycss",
+    "import_name": "tinycss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinycss"
+  },
+  "tinydb": {
+    "conda_name": "tinydb",
+    "import_name": "tinydb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinydb"
+  },
+  "tinynetrc": {
+    "conda_name": "tinynetrc",
+    "import_name": "tinynetrc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinynetrc"
+  },
+  "tinyrecord": {
+    "conda_name": "tinyrecord",
+    "import_name": "tinyrecord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinyrecord"
+  },
+  "tinyrpc": {
+    "conda_name": "tinyrpc",
+    "import_name": "tinyrpc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinyrpc"
+  },
+  "tinysegmenter": {
+    "conda_name": "tinysegmenter",
+    "import_name": "tinysegmenter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tinysegmenter"
+  },
+  "tiobeindexpy": {
+    "conda_name": "tiobeindexpy",
+    "import_name": "tiobeindexpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiobeindexpy"
+  },
+  "tiptop": {
+    "conda_name": "tiptop",
+    "import_name": "tiptop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tiptop"
+  },
+  "titlecase": {
+    "conda_name": "titlecase",
+    "import_name": "titlecase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "titlecase"
+  },
+  "titrate": {
+    "conda_name": "titrate",
+    "import_name": "titrate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "titrate"
+  },
+  "tjpcov": {
+    "conda_name": "tjpcov",
+    "import_name": "tjpcov",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tjpcov"
+  },
+  "tkf": {
+    "conda_name": "tkf",
+    "import_name": "tkf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tkf"
+  },
+  "tkinter-form": {
+    "conda_name": "tkinter_form",
+    "import_name": "tkinter_form",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tkinter-form"
+  },
+  "tkinter-tooltip": {
+    "conda_name": "tkinter-tooltip",
+    "import_name": "tktooltip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tkinter-tooltip"
+  },
+  "tkstyle": {
+    "conda_name": "tkstyle",
+    "import_name": "tkstyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tkstyle"
+  },
+  "tkutil": {
+    "conda_name": "tkutil",
+    "import_name": "tkutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tkutil"
+  },
+  "tld": {
+    "conda_name": "tld",
+    "import_name": "tld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tld"
+  },
+  "tldextract": {
+    "conda_name": "tldextract",
+    "import_name": "tldextract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tldextract"
+  },
+  "tlslite": {
+    "conda_name": "tlslite",
+    "import_name": "tlslite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tlslite"
+  },
+  "tlv8": {
+    "conda_name": "tlv8",
+    "import_name": "tlv8",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tlv8"
+  },
+  "tmm": {
+    "conda_name": "tmm",
+    "import_name": "tmm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tmm"
+  },
+  "tmtk": {
+    "conda_name": "tmtk",
+    "import_name": "tmtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tmtk"
+  },
+  "tmtools": {
+    "conda_name": "tmtools",
+    "import_name": "tmtools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tmtools"
+  },
+  "toasty": {
+    "conda_name": "toasty",
+    "import_name": "toasty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toasty"
+  },
+  "tobler": {
+    "conda_name": "tobler",
+    "import_name": "tobler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tobler"
+  },
+  "tofu": {
+    "conda_name": "tofu",
+    "import_name": "tofu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tofu"
+  },
+  "toil": {
+    "conda_name": "toil",
+    "import_name": "toil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toil"
+  },
+  "tokenize-output": {
+    "conda_name": "tokenize-output",
+    "import_name": "tokenize_output",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tokenize-output"
+  },
+  "tokenize-rt": {
+    "conda_name": "tokenize-rt",
+    "import_name": "tokenize_rt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tokenize-rt"
+  },
+  "tokentrim": {
+    "conda_name": "tokentrim",
+    "import_name": "tokentrim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tokentrim"
+  },
+  "tom-tns": {
+    "conda_name": "tom-tns",
+    "import_name": "tom_tns",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tom-tns"
+  },
+  "tomli-w": {
+    "conda_name": "tomli-w",
+    "import_name": "tomli_w",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tomli-w"
+  },
+  "tomlkit-extras": {
+    "conda_name": "tomlkit-extras",
+    "import_name": "tomlkit_extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tomlkit-extras"
+  },
+  "tonic": {
+    "conda_name": "tonic",
+    "import_name": "tonic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tonic"
+  },
+  "toolbox-utils": {
+    "conda_name": "toolbox_utils",
+    "import_name": "toolbox_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toolbox-utils"
+  },
+  "toolong": {
+    "conda_name": "toolong",
+    "import_name": "toolong",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toolong"
+  },
+  "tools4rdf": {
+    "conda_name": "tools4rdf",
+    "import_name": "tools4rdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tools4rdf"
+  },
+  "toolwrapper": {
+    "conda_name": "toolwrapper",
+    "import_name": "toolwrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toolwrapper"
+  },
+  "tootapari": {
+    "conda_name": "tootapari",
+    "import_name": "tootapari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tootapari"
+  },
+  "top2vec": {
+    "conda_name": "top2vec",
+    "import_name": "top2vec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "top2vec"
+  },
+  "topfarm": {
+    "conda_name": "topfarm",
+    "import_name": "topfarm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "topfarm"
+  },
+  "topika": {
+    "conda_name": "topika",
+    "import_name": "topika",
+    "mapping_source": "regro-bot",
+    "pypi_name": "topika"
+  },
+  "topojson": {
+    "conda_name": "topojson",
+    "import_name": "topojson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "topojson"
+  },
+  "topological-adam": {
+    "conda_name": "topological-adam",
+    "import_name": "topological_adam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "topological-adam"
+  },
+  "topometry": {
+    "conda_name": "topometry",
+    "import_name": "topo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "topometry"
+  },
+  "toposort": {
+    "conda_name": "toposort",
+    "import_name": "toposort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toposort"
+  },
+  "torch": {
+    "conda_name": "pytorch",
+    "import_name": "torch",
+    "mapping_source": "static",
+    "pypi_name": "torch"
+  },
+  "torch-complex": {
+    "conda_name": "torch-complex",
+    "import_name": "torch_complex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-complex"
+  },
+  "torch-ema": {
+    "conda_name": "torch-ema",
+    "import_name": "torch_ema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-ema"
+  },
+  "torch-frft": {
+    "conda_name": "torch-frft",
+    "import_name": "torch_frft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-frft"
+  },
+  "torch-harmonics": {
+    "conda_name": "torch-harmonics",
+    "import_name": "torch_harmonics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-harmonics"
+  },
+  "torch-hd": {
+    "conda_name": "torch-hd",
+    "import_name": "torchhd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-hd"
+  },
+  "torch-nl": {
+    "conda_name": "torch-nl",
+    "import_name": "torch_nl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-nl"
+  },
+  "torch-optimizer": {
+    "conda_name": "torch-optimizer",
+    "import_name": "torch_optimizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-optimizer"
+  },
+  "torch-pme": {
+    "conda_name": "torch-pme",
+    "import_name": "torchpme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-pme"
+  },
+  "torch-runstats": {
+    "conda_name": "torch-runstats",
+    "import_name": "torch_runstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-runstats"
+  },
+  "torch-simplify": {
+    "conda_name": "torch-simplify",
+    "import_name": "simplify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-simplify"
+  },
+  "torch-sparse": {
+    "conda_name": "pytorch_sparse",
+    "import_name": "torch_sparse",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-sparse"
+  },
+  "torch-spline-conv": {
+    "conda_name": "pytorch_spline_conv",
+    "import_name": "torch_spline_conv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torch-spline-conv"
+  },
+  "torchange": {
+    "conda_name": "torchange",
+    "import_name": "torchange",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchange"
+  },
+  "torchapp": {
+    "conda_name": "torchapp",
+    "import_name": "torchapp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchapp"
+  },
+  "torchcam": {
+    "conda_name": "torchcam",
+    "import_name": "torchcam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchcam"
+  },
+  "torchdiffeq": {
+    "conda_name": "torchdiffeq",
+    "import_name": "torchdiffeq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchdiffeq"
+  },
+  "torchfile": {
+    "conda_name": "torchfile",
+    "import_name": "torchfile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchfile"
+  },
+  "torchgeo": {
+    "conda_name": "torchgeo",
+    "import_name": "torchgeo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchgeo"
+  },
+  "torchinfo": {
+    "conda_name": "torchinfo",
+    "import_name": "torchinfo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchinfo"
+  },
+  "torchkbnufft": {
+    "conda_name": "torchkbnufft",
+    "import_name": "torchkbnufft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchkbnufft"
+  },
+  "torchkin": {
+    "conda_name": "torchkin",
+    "import_name": "torchkin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchkin"
+  },
+  "torchlie": {
+    "conda_name": "torchlie",
+    "import_name": "torchlie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchlie"
+  },
+  "torchmd": {
+    "conda_name": "torchmd",
+    "import_name": "torchmd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchmd"
+  },
+  "torchmd-net": {
+    "conda_name": "torchmd-net",
+    "import_name": "torchmdnet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchmd-net"
+  },
+  "torchmetrics": {
+    "conda_name": "torchmetrics",
+    "import_name": "torchmetrics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchmetrics"
+  },
+  "torchopt": {
+    "conda_name": "torchopt",
+    "import_name": "torchopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchopt"
+  },
+  "torchrecurrent": {
+    "conda_name": "torchrecurrent",
+    "import_name": "torchrecurrent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchrecurrent"
+  },
+  "torchscan": {
+    "conda_name": "torchscan",
+    "import_name": "torchscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchscan"
+  },
+  "torchsde": {
+    "conda_name": "torchsde",
+    "import_name": "torchsde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchsde"
+  },
+  "torchseg": {
+    "conda_name": "torchseg",
+    "import_name": "torchseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchseg"
+  },
+  "torchsurv": {
+    "conda_name": "torchsurv",
+    "import_name": "torchsurv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchsurv"
+  },
+  "torchtime": {
+    "conda_name": "torchtime",
+    "import_name": "torchtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchtime"
+  },
+  "torchts": {
+    "conda_name": "torchts",
+    "import_name": "torchts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchts"
+  },
+  "torchtuples": {
+    "conda_name": "torchtuples",
+    "import_name": "torchtuples",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchtuples"
+  },
+  "torchview": {
+    "conda_name": "torchview",
+    "import_name": "torchview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchview"
+  },
+  "torchvista": {
+    "conda_name": "torchvista",
+    "import_name": "torchvista",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torchvista"
+  },
+  "torcpy": {
+    "conda_name": "torcpy",
+    "import_name": "torcpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torcpy"
+  },
+  "tornado": {
+    "conda_name": "tornado",
+    "import_name": "tornado",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tornado"
+  },
+  "tornado-proxy-handlers": {
+    "conda_name": "tornado-proxy-handlers",
+    "import_name": "tornado_proxy_handlers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tornado-proxy-handlers"
+  },
+  "tornado-sqlalchemy": {
+    "conda_name": "tornado-sqlalchemy",
+    "import_name": "tornado_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tornado-sqlalchemy"
+  },
+  "tornado-sqlalchemy-login": {
+    "conda_name": "tornado_sqlalchemy_login",
+    "import_name": "tornado_sqlalchemy_login",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tornado-sqlalchemy-login"
+  },
+  "toro": {
+    "conda_name": "toro",
+    "import_name": "toro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toro"
+  },
+  "torpy": {
+    "conda_name": "torpy",
+    "import_name": "torpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torpy"
+  },
+  "torsiondrive": {
+    "conda_name": "torsiondrive",
+    "import_name": "torsiondrive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "torsiondrive"
+  },
+  "tosholi": {
+    "conda_name": "tosholi",
+    "import_name": "tosholi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tosholi"
+  },
+  "towncrier": {
+    "conda_name": "towncrier",
+    "import_name": "towncrier",
+    "mapping_source": "regro-bot",
+    "pypi_name": "towncrier"
+  },
+  "tox-conda": {
+    "conda_name": "tox-conda",
+    "import_name": "tox_conda.plugin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tox-conda"
+  },
+  "tox-gh": {
+    "conda_name": "tox-gh",
+    "import_name": "tox_gh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tox-gh"
+  },
+  "tox-poetry-installer": {
+    "conda_name": "tox-poetry-installer",
+    "import_name": "tox_poetry_installer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tox-poetry-installer"
+  },
+  "tox-venv": {
+    "conda_name": "tox-venv",
+    "import_name": "tox_venv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tox-venv"
+  },
+  "toyplot": {
+    "conda_name": "toyplot",
+    "import_name": "toyplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "toyplot"
+  },
+  "tpi": {
+    "conda_name": "tpi",
+    "import_name": "tpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tpi"
+  },
+  "tplot": {
+    "conda_name": "tplot",
+    "import_name": "tplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tplot"
+  },
+  "tpot2": {
+    "conda_name": "tpot2",
+    "import_name": "tpot2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tpot2"
+  },
+  "tptp-lark-parser": {
+    "conda_name": "tptp-lark-parser",
+    "import_name": "tptp_lark_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tptp-lark-parser"
+  },
+  "tqdm-joblib": {
+    "conda_name": "tqdm-joblib",
+    "import_name": "tqdm_joblib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tqdm-joblib"
+  },
+  "tqdm-loggable": {
+    "conda_name": "tqdm-loggable",
+    "import_name": "tqdm_loggable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tqdm-loggable"
+  },
+  "tqdm-logging-wrapper": {
+    "conda_name": "tqdm-logging-wrapper",
+    "import_name": "tqdm_logging_wrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tqdm-logging-wrapper"
+  },
+  "tqdmnd": {
+    "conda_name": "tqdmnd",
+    "import_name": "tqdmnd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tqdmnd"
+  },
+  "trace-updater": {
+    "conda_name": "trace-updater",
+    "import_name": "trace_updater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trace-updater"
+  },
+  "traceback-with-variables": {
+    "conda_name": "traceback-with-variables",
+    "import_name": "traceback_with_variables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traceback-with-variables"
+  },
+  "traceback2": {
+    "conda_name": "traceback2",
+    "import_name": "traceback2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traceback2"
+  },
+  "traceloop-sdk": {
+    "conda_name": "traceloop-sdk",
+    "import_name": "traceloop.sdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traceloop-sdk"
+  },
+  "trackpy": {
+    "conda_name": "trackpy",
+    "import_name": "trackpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trackpy"
+  },
+  "tracywidom": {
+    "conda_name": "tracywidom",
+    "import_name": "TracyWidom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tracywidom"
+  },
+  "trading-calendars": {
+    "conda_name": "trading-calendars",
+    "import_name": "trading_calendars",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trading-calendars"
+  },
+  "trafaret": {
+    "conda_name": "trafaret",
+    "import_name": "trafaret",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trafaret"
+  },
+  "traffic": {
+    "conda_name": "traffic",
+    "import_name": "traffic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traffic"
+  },
+  "traffix": {
+    "conda_name": "traffix",
+    "import_name": "traffix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traffix"
+  },
+  "trailrunner": {
+    "conda_name": "trailrunner",
+    "import_name": "trailrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trailrunner"
+  },
+  "trailscraper": {
+    "conda_name": "trailscraper",
+    "import_name": "trailscraper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trailscraper"
+  },
+  "trainstation": {
+    "conda_name": "trainstation",
+    "import_name": "trainstation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trainstation"
+  },
+  "traitlets-paths": {
+    "conda_name": "traitlets_paths",
+    "import_name": "traitlets_paths",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traitlets-paths"
+  },
+  "traits": {
+    "conda_name": "traits",
+    "import_name": "traits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traits"
+  },
+  "traitsui": {
+    "conda_name": "traitsui",
+    "import_name": "traitsui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traitsui"
+  },
+  "traittypes": {
+    "conda_name": "traittypes",
+    "import_name": "traittypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traittypes"
+  },
+  "trajan": {
+    "conda_name": "trajan",
+    "import_name": "trajan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trajan"
+  },
+  "trame": {
+    "conda_name": "trame",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame"
+  },
+  "trame-annotations": {
+    "conda_name": "trame-annotations",
+    "import_name": "trame_annotations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-annotations"
+  },
+  "trame-color-opacity-editor": {
+    "conda_name": "trame-color-opacity-editor",
+    "import_name": "trame_color_opacity_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-color-opacity-editor"
+  },
+  "trame-common": {
+    "conda_name": "trame-common",
+    "import_name": "trame_common",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-common"
+  },
+  "trame-components": {
+    "conda_name": "trame-components",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-components"
+  },
+  "trame-deckgl": {
+    "conda_name": "trame-deckgl",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-deckgl"
+  },
+  "trame-jupyter-extension": {
+    "conda_name": "trame-jupyter-extension",
+    "import_name": "trame_jupyter_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-jupyter-extension"
+  },
+  "trame-markdown": {
+    "conda_name": "trame-markdown",
+    "import_name": "trame.widgets.markdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-markdown"
+  },
+  "trame-matplotlib": {
+    "conda_name": "trame-matplotlib",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-matplotlib"
+  },
+  "trame-plotly": {
+    "conda_name": "trame-plotly",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-plotly"
+  },
+  "trame-radial-menu": {
+    "conda_name": "trame-radial-menu",
+    "import_name": "trame_radial_menu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-radial-menu"
+  },
+  "trame-rca": {
+    "conda_name": "trame-rca",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-rca"
+  },
+  "trame-router": {
+    "conda_name": "trame-router",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-router"
+  },
+  "trame-server": {
+    "conda_name": "trame-server",
+    "import_name": "trame_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-server"
+  },
+  "trame-simput": {
+    "conda_name": "trame-simput",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-simput"
+  },
+  "trame-vega": {
+    "conda_name": "trame-vega",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-vega"
+  },
+  "trame-vtk": {
+    "conda_name": "trame-vtk",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-vtk"
+  },
+  "trame-vuetify": {
+    "conda_name": "trame-vuetify",
+    "import_name": "trame",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trame-vuetify"
+  },
+  "trampolim": {
+    "conda_name": "trampolim",
+    "import_name": "trampolim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trampolim"
+  },
+  "tranquilizer": {
+    "conda_name": "tranquilizer",
+    "import_name": "tranquilizer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tranquilizer"
+  },
+  "tranquilo": {
+    "conda_name": "tranquilo",
+    "import_name": "tranquilo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tranquilo"
+  },
+  "transaction": {
+    "conda_name": "transaction",
+    "import_name": "transaction",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transaction"
+  },
+  "transbigdata": {
+    "conda_name": "transbigdata",
+    "import_name": "transbigdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transbigdata"
+  },
+  "transformations": {
+    "conda_name": "transformations",
+    "import_name": "transformations",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transformations"
+  },
+  "transformer-smaller-training-vocab": {
+    "conda_name": "transformer-smaller-training-vocab",
+    "import_name": "transformer_smaller_training_vocab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transformer-smaller-training-vocab"
+  },
+  "transformers-interpret": {
+    "conda_name": "transformers-interpret",
+    "import_name": "transformers_interpret",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transformers-interpret"
+  },
+  "transforms3d": {
+    "conda_name": "transforms3d",
+    "import_name": "transforms3d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transforms3d"
+  },
+  "transifex-client": {
+    "conda_name": "transifex-client",
+    "import_name": "txclib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transifex-client"
+  },
+  "transitionlistener": {
+    "conda_name": "transitionlistener",
+    "import_name": "transitionlistener",
+    "mapping_source": "regro-bot",
+    "pypi_name": "transitionlistener"
+  },
+  "translationstring": {
+    "conda_name": "translationstring",
+    "import_name": "translationstring",
+    "mapping_source": "regro-bot",
+    "pypi_name": "translationstring"
+  },
+  "translators": {
+    "conda_name": "translators",
+    "import_name": "translators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "translators"
+  },
+  "trash-cli": {
+    "conda_name": "trash-cli",
+    "import_name": "trashcli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trash-cli"
+  },
+  "traviscli": {
+    "conda_name": "traviscli",
+    "import_name": "travisci",
+    "mapping_source": "regro-bot",
+    "pypi_name": "traviscli"
+  },
+  "tree-format": {
+    "conda_name": "tree-format",
+    "import_name": "tree_format",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tree-format"
+  },
+  "tree-math": {
+    "conda_name": "tree-math",
+    "import_name": "tree_math",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tree-math"
+  },
+  "treecorr": {
+    "conda_name": "treecorr",
+    "import_name": "treecorr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treecorr"
+  },
+  "treedecomp": {
+    "conda_name": "treedecomp",
+    "import_name": "treedecomp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treedecomp"
+  },
+  "treedlib": {
+    "conda_name": "treedlib",
+    "import_name": "treedlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treedlib"
+  },
+  "treegp": {
+    "conda_name": "treegp",
+    "import_name": "treegp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treegp"
+  },
+  "treeinterpreter": {
+    "conda_name": "treeinterpreter",
+    "import_name": "treeinterpreter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treeinterpreter"
+  },
+  "treelib": {
+    "conda_name": "treelib",
+    "import_name": "treelib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treelib"
+  },
+  "treepoem": {
+    "conda_name": "treepoem",
+    "import_name": "treepoem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treepoem"
+  },
+  "treetable": {
+    "conda_name": "treetable",
+    "import_name": "treetable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treetable"
+  },
+  "treon": {
+    "conda_name": "treon",
+    "import_name": "treon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "treon"
+  },
+  "trianglesolver": {
+    "conda_name": "trianglesolver",
+    "import_name": "trianglesolver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trianglesolver"
+  },
+  "tributary": {
+    "conda_name": "tributary",
+    "import_name": "tributary",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tributary"
+  },
+  "trict": {
+    "conda_name": "trict",
+    "import_name": "trict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trict"
+  },
+  "tricycle": {
+    "conda_name": "tricycle",
+    "import_name": "tricycle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tricycle"
+  },
+  "trident-chemwidgets": {
+    "conda_name": "trident-chemwidgets",
+    "import_name": "trident_chemwidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trident-chemwidgets"
+  },
+  "trio-aiohttp": {
+    "conda_name": "trio-aiohttp",
+    "import_name": "trio_aiohttp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trio-aiohttp"
+  },
+  "trio-asyncio": {
+    "conda_name": "trio-asyncio",
+    "import_name": "trio_asyncio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trio-asyncio"
+  },
+  "trio-parallel": {
+    "conda_name": "trio-parallel",
+    "import_name": "trio_parallel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trio-parallel"
+  },
+  "trio-typing": {
+    "conda_name": "trio-typing",
+    "import_name": "trio_typing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trio-typing"
+  },
+  "trio-util": {
+    "conda_name": "trio-util",
+    "import_name": "trio_util",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trio-util"
+  },
+  "trodi": {
+    "conda_name": "trodi",
+    "import_name": "trodi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trodi"
+  },
+  "trogon": {
+    "conda_name": "trogon",
+    "import_name": "trogon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trogon"
+  },
+  "trollimage": {
+    "conda_name": "trollimage",
+    "import_name": "trollimage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trollimage"
+  },
+  "trollius": {
+    "conda_name": "trollius",
+    "import_name": "trollius",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trollius"
+  },
+  "trollsift": {
+    "conda_name": "trollsift",
+    "import_name": "trollsift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trollsift"
+  },
+  "tropycal": {
+    "conda_name": "tropycal",
+    "import_name": "tropycal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tropycal"
+  },
+  "trottersuzuki": {
+    "conda_name": "trottersuzuki",
+    "import_name": "trottersuzuki",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trottersuzuki"
+  },
+  "trouve": {
+    "conda_name": "trouve",
+    "import_name": "trouve",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trouve"
+  },
+  "trubar": {
+    "conda_name": "trubar",
+    "import_name": "trubar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trubar"
+  },
+  "trufflehog": {
+    "conda_name": "trufflehog",
+    "import_name": "truffleHog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trufflehog"
+  },
+  "trufflehogregexes": {
+    "conda_name": "trufflehogregexes",
+    "import_name": "truffleHogRegexes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trufflehogregexes"
+  },
+  "trustllm": {
+    "conda_name": "trustllm",
+    "import_name": "trustllm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trustllm"
+  },
+  "trustme": {
+    "conda_name": "trustme",
+    "import_name": "trustme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trustme"
+  },
+  "trustregion": {
+    "conda_name": "trustregion",
+    "import_name": "trustregion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trustregion"
+  },
+  "trx-python": {
+    "conda_name": "trx-python",
+    "import_name": "trx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "trx-python"
+  },
+  "tryceratops": {
+    "conda_name": "tryceratops",
+    "import_name": "tryceratops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tryceratops"
+  },
+  "tryingsnake": {
+    "conda_name": "tryingsnake",
+    "import_name": "tryingsnake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tryingsnake"
+  },
+  "tsblender": {
+    "conda_name": "tsblender",
+    "import_name": "tsblender",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsblender"
+  },
+  "tscv": {
+    "conda_name": "tscv",
+    "import_name": "tscv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tscv"
+  },
+  "tsdisagg": {
+    "conda_name": "tsdisagg",
+    "import_name": "tsdisagg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsdisagg"
+  },
+  "tsdownsample": {
+    "conda_name": "tsdownsample",
+    "import_name": "tsdownsample",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsdownsample"
+  },
+  "tsflex": {
+    "conda_name": "tsflex",
+    "import_name": "tsflex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsflex"
+  },
+  "tsgettoolbox": {
+    "conda_name": "tsgettoolbox",
+    "import_name": "tsgettoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsgettoolbox"
+  },
+  "tsinfer": {
+    "conda_name": "tsinfer",
+    "import_name": "tsinfer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsinfer"
+  },
+  "tskit": {
+    "conda_name": "tskit",
+    "import_name": "tskit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tskit"
+  },
+  "tslearn": {
+    "conda_name": "tslearn",
+    "import_name": "tslearn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tslearn"
+  },
+  "tsod": {
+    "conda_name": "tsod",
+    "import_name": "tsod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsod"
+  },
+  "tsplib95": {
+    "conda_name": "tsplib95",
+    "import_name": "tsplib95",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tsplib95"
+  },
+  "tstoolbox": {
+    "conda_name": "tstoolbox",
+    "import_name": "tstoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tstoolbox"
+  },
+  "tstrait": {
+    "conda_name": "tstrait",
+    "import_name": "tstrait",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tstrait"
+  },
+  "tszip": {
+    "conda_name": "tszip",
+    "import_name": "tszip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tszip"
+  },
+  "ttach": {
+    "conda_name": "ttach",
+    "import_name": "ttach",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttach"
+  },
+  "ttim": {
+    "conda_name": "ttim",
+    "import_name": "ttim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttim"
+  },
+  "ttkwidgets": {
+    "conda_name": "ttkwidgets",
+    "import_name": "ttkwidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttkwidgets"
+  },
+  "ttopt": {
+    "conda_name": "ttopt",
+    "import_name": "ttopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttopt"
+  },
+  "ttp": {
+    "conda_name": "ttp",
+    "import_name": "ttp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttp"
+  },
+  "tts": {
+    "conda_name": "tts",
+    "import_name": "TTS",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tts"
+  },
+  "ttsim-backend": {
+    "conda_name": "ttsim-backend",
+    "import_name": "ttsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ttsim-backend"
+  },
+  "turbo-seti": {
+    "conda_name": "turbo-seti",
+    "import_name": "turbo_seti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "turbo-seti"
+  },
+  "turbodbc": {
+    "conda_name": "turbodbc",
+    "import_name": "turbodbc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "turbodbc"
+  },
+  "turfpy": {
+    "conda_name": "turfpy",
+    "import_name": "turfpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "turfpy"
+  },
+  "turn-by-turn": {
+    "conda_name": "turn_by_turn",
+    "import_name": "turn_by_turn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "turn-by-turn"
+  },
+  "tuspy": {
+    "conda_name": "tuspy",
+    "import_name": "tusclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tuspy"
+  },
+  "tvb-data": {
+    "conda_name": "tvb-data",
+    "import_name": "tvb_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tvb-data"
+  },
+  "tvb-framework": {
+    "conda_name": "tvb-framework",
+    "import_name": "tvb.core.adapters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tvb-framework"
+  },
+  "tvb-gdist": {
+    "conda_name": "tvb-gdist",
+    "import_name": "gdist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tvb-gdist"
+  },
+  "tvb-library": {
+    "conda_name": "tvb-library",
+    "import_name": "tvb.simulator.lab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tvb-library"
+  },
+  "tvb-storage": {
+    "conda_name": "tvb-storage",
+    "import_name": "tvb.storage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tvb-storage"
+  },
+  "twarc": {
+    "conda_name": "twarc",
+    "import_name": "twarc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twarc"
+  },
+  "tweak": {
+    "conda_name": "tweak",
+    "import_name": "tweak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tweak"
+  },
+  "tweedledum": {
+    "conda_name": "tweedledum",
+    "import_name": "tweedledum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tweedledum"
+  },
+  "tweepy": {
+    "conda_name": "tweepy",
+    "import_name": "tweepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tweepy"
+  },
+  "tweetynet": {
+    "conda_name": "tweetynet",
+    "import_name": "tweetynet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tweetynet"
+  },
+  "twilio": {
+    "conda_name": "twilio",
+    "import_name": "twilio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twilio"
+  },
+  "twisted": {
+    "conda_name": "twisted",
+    "import_name": "twisted",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twisted"
+  },
+  "twisted-iocpsupport": {
+    "conda_name": "twisted-iocpsupport",
+    "import_name": "twisted_iocpsupport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twisted-iocpsupport"
+  },
+  "twitchapi": {
+    "conda_name": "twitchapi",
+    "import_name": "twitchAPI",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twitchapi"
+  },
+  "twofish": {
+    "conda_name": "twofish",
+    "import_name": "twofish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twofish"
+  },
+  "twython": {
+    "conda_name": "twython",
+    "import_name": "twython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "twython"
+  },
+  "txl": {
+    "conda_name": "txl",
+    "import_name": "txl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl"
+  },
+  "txl-cell": {
+    "conda_name": "txl-cell",
+    "import_name": "txl_cell",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-cell"
+  },
+  "txl-console": {
+    "conda_name": "txl-console",
+    "import_name": "txl_console",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-console"
+  },
+  "txl-editors": {
+    "conda_name": "txl-editors",
+    "import_name": "txl_editors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-editors"
+  },
+  "txl-file-browser": {
+    "conda_name": "txl-file-browser",
+    "import_name": "txl_file_browser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-file-browser"
+  },
+  "txl-image-viewer": {
+    "conda_name": "txl-image-viewer",
+    "import_name": "txl_image_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-image-viewer"
+  },
+  "txl-jpterm": {
+    "conda_name": "txl-jpterm",
+    "import_name": "txl_jpterm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-jpterm"
+  },
+  "txl-kernel": {
+    "conda_name": "txl-kernel",
+    "import_name": "txl_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-kernel"
+  },
+  "txl-launcher": {
+    "conda_name": "txl-launcher",
+    "import_name": "txl_launcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-launcher"
+  },
+  "txl-local-contents": {
+    "conda_name": "txl-local-contents",
+    "import_name": "txl_local_contents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-local-contents"
+  },
+  "txl-local-kernels": {
+    "conda_name": "txl-local-kernels",
+    "import_name": "txl_local_kernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-local-kernels"
+  },
+  "txl-local-terminals": {
+    "conda_name": "txl-local-terminals",
+    "import_name": "txl_local_terminals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-local-terminals"
+  },
+  "txl-markdown-viewer": {
+    "conda_name": "txl-markdown-viewer",
+    "import_name": "txl_markdown_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-markdown-viewer"
+  },
+  "txl-notebook-editor": {
+    "conda_name": "txl-notebook-editor",
+    "import_name": "txl_notebook_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-notebook-editor"
+  },
+  "txl-remote-contents": {
+    "conda_name": "txl-remote-contents",
+    "import_name": "txl_remote_contents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-remote-contents"
+  },
+  "txl-remote-kernels": {
+    "conda_name": "txl-remote-kernels",
+    "import_name": "txl_remote_kernels",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-remote-kernels"
+  },
+  "txl-remote-terminals": {
+    "conda_name": "txl-remote-terminals",
+    "import_name": "txl_remote_terminals",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-remote-terminals"
+  },
+  "txl-terminal": {
+    "conda_name": "txl-terminal",
+    "import_name": "txl_terminal",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-terminal"
+  },
+  "txl-text-editor": {
+    "conda_name": "txl-text-editor",
+    "import_name": "txl_text_editor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-text-editor"
+  },
+  "txl-widgets": {
+    "conda_name": "txl-widgets",
+    "import_name": "txl_widgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txl-widgets"
+  },
+  "txm-sandbox": {
+    "conda_name": "txm_sandbox",
+    "import_name": "txm_sandbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txm-sandbox"
+  },
+  "txmongo": {
+    "conda_name": "txmongo",
+    "import_name": "txmongo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "txmongo"
+  },
+  "typechecks": {
+    "conda_name": "typechecks",
+    "import_name": "typechecks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typechecks"
+  },
+  "typed-argument-parser": {
+    "conda_name": "typed-argument-parser",
+    "import_name": "tap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typed-argument-parser"
+  },
+  "typed-ast": {
+    "conda_name": "typed-ast",
+    "import_name": "typed_ast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typed-ast"
+  },
+  "typed-configparser": {
+    "conda_name": "typed-configparser",
+    "import_name": "typed_configparser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typed-configparser"
+  },
+  "typed-settings": {
+    "conda_name": "typed-settings",
+    "import_name": "typed_settings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typed-settings"
+  },
+  "typedframe": {
+    "conda_name": "typedframe",
+    "import_name": "typedframe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typedframe"
+  },
+  "typedload": {
+    "conda_name": "typedload",
+    "import_name": "typedload",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typedload"
+  },
+  "typenames": {
+    "conda_name": "typenames",
+    "import_name": "typenames",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typenames"
+  },
+  "typepigeon": {
+    "conda_name": "typepigeon",
+    "import_name": "typepigeon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typepigeon"
+  },
+  "typepy": {
+    "conda_name": "typepy",
+    "import_name": "typepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typepy"
+  },
+  "types-unopy": {
+    "conda_name": "types-unopy",
+    "import_name": "com",
+    "mapping_source": "regro-bot",
+    "pypi_name": "types-unopy"
+  },
+  "typeshed-client": {
+    "conda_name": "typeshed-client",
+    "import_name": "typeshed_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typeshed-client"
+  },
+  "typesystem": {
+    "conda_name": "typesystem",
+    "import_name": "typesystem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typesystem"
+  },
+  "typical": {
+    "conda_name": "typical",
+    "import_name": "typic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typical"
+  },
+  "typing": {
+    "conda_name": "typing",
+    "import_name": "typing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typing"
+  },
+  "typing-extensions": {
+    "conda_name": "typing_extensions",
+    "import_name": "typing_extensions",
+    "mapping_source": "static",
+    "pypi_name": "typing-extensions"
+  },
+  "typing-inspect": {
+    "conda_name": "typing_inspect",
+    "import_name": "typing_inspect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typing-inspect"
+  },
+  "typing-utils": {
+    "conda_name": "typing_utils",
+    "import_name": "typing_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typing-utils"
+  },
+  "typing-validation": {
+    "conda_name": "typing-validation",
+    "import_name": "typing_validation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typing-validation"
+  },
+  "typogrify": {
+    "conda_name": "typogrify",
+    "import_name": "typogrify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "typogrify"
+  },
+  "tyrannosaurus": {
+    "conda_name": "tyrannosaurus",
+    "import_name": "tyrannosaurus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tyrannosaurus"
+  },
+  "tyro": {
+    "conda_name": "tyro",
+    "import_name": "tyro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tyro"
+  },
+  "tzdata": {
+    "conda_name": "python-tzdata",
+    "import_name": "tzdata",
+    "mapping_source": "static",
+    "pypi_name": "tzdata"
+  },
+  "tzwhere": {
+    "conda_name": "tzwhere",
+    "import_name": "tzwhere",
+    "mapping_source": "regro-bot",
+    "pypi_name": "tzwhere"
+  },
+  "u-msgpack-python": {
+    "conda_name": "u-msgpack-python",
+    "import_name": "umsgpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "u-msgpack-python"
+  },
+  "ua-parser": {
+    "conda_name": "ua-parser",
+    "import_name": "ua_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ua-parser"
+  },
+  "ua-parser-builtins": {
+    "conda_name": "ua-parser-builtins",
+    "import_name": "ua_parser_builtins",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ua-parser-builtins"
+  },
+  "uassist": {
+    "conda_name": "uassist",
+    "import_name": "uassist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uassist"
+  },
+  "uavro": {
+    "conda_name": "uavro",
+    "import_name": "uavro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uavro"
+  },
+  "ubelt": {
+    "conda_name": "ubelt",
+    "import_name": "ubelt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubelt"
+  },
+  "ubergauss": {
+    "conda_name": "ubergauss",
+    "import_name": "ubergauss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubergauss"
+  },
+  "ubermag": {
+    "conda_name": "ubermag",
+    "import_name": "ubermag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubermag"
+  },
+  "ubermagtable": {
+    "conda_name": "ubermagtable",
+    "import_name": "ubermagtable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubermagtable"
+  },
+  "ubermagutil": {
+    "conda_name": "ubermagutil",
+    "import_name": "ubermagutil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubermagutil"
+  },
+  "ubiquerg": {
+    "conda_name": "ubiquerg",
+    "import_name": "ubiquerg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubiquerg"
+  },
+  "ubtsl": {
+    "conda_name": "ubtsl",
+    "import_name": "ubtsl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ubtsl"
+  },
+  "uc-micro-py": {
+    "conda_name": "uc-micro-py",
+    "import_name": "uc_micro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uc-micro-py"
+  },
+  "ucimlrepo": {
+    "conda_name": "ucimlrepo",
+    "import_name": "ucimlrepo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ucimlrepo"
+  },
+  "ucs-detect": {
+    "conda_name": "ucs-detect",
+    "import_name": "ucs_detect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ucs-detect"
+  },
+  "udatetime": {
+    "conda_name": "udatetime",
+    "import_name": "udatetime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "udatetime"
+  },
+  "udkm1dsim": {
+    "conda_name": "udkm1dsim",
+    "import_name": "udkm1Dsim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "udkm1dsim"
+  },
+  "udlai": {
+    "conda_name": "udlai",
+    "import_name": "udlai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "udlai"
+  },
+  "udocker": {
+    "conda_name": "udocker",
+    "import_name": "udocker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "udocker"
+  },
+  "udsoncan": {
+    "conda_name": "udsoncan",
+    "import_name": "udsoncan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "udsoncan"
+  },
+  "uf3": {
+    "conda_name": "uf3",
+    "import_name": "uf3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uf3"
+  },
+  "ufal-udpipe": {
+    "conda_name": "ufal.udpipe",
+    "import_name": "ufal.udpipe",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ufal-udpipe"
+  },
+  "ufish": {
+    "conda_name": "ufish",
+    "import_name": "ufish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ufish"
+  },
+  "ufmt": {
+    "conda_name": "ufmt",
+    "import_name": "ufmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ufmt"
+  },
+  "ufolib2": {
+    "conda_name": "ufolib2",
+    "import_name": "ufoLib2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ufolib2"
+  },
+  "uge-drmaa2": {
+    "conda_name": "uge-drmaa2",
+    "import_name": "drmaa2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uge-drmaa2"
+  },
+  "ugly-csv-generator": {
+    "conda_name": "ugly_csv_generator",
+    "import_name": "ugly_csv_generator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ugly-csv-generator"
+  },
+  "ugrid-checks": {
+    "conda_name": "ugrid-checks",
+    "import_name": "ugrid_checks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ugrid-checks"
+  },
+  "uharfbuzz": {
+    "conda_name": "uharfbuzz",
+    "import_name": "uharfbuzz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uharfbuzz"
+  },
+  "uhttp": {
+    "conda_name": "uhttp",
+    "import_name": "uhttp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uhttp"
+  },
+  "uiautomation": {
+    "conda_name": "uiautomation",
+    "import_name": "uiautomation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uiautomation"
+  },
+  "ukb-atlas": {
+    "conda_name": "ukb-atlas",
+    "import_name": "ukb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ukb-atlas"
+  },
+  "ukcensusapi": {
+    "conda_name": "ukcensusapi",
+    "import_name": "ukcensusapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ukcensusapi"
+  },
+  "ukpopulation": {
+    "conda_name": "ukpopulation",
+    "import_name": "ukpopulation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ukpopulation"
+  },
+  "uldaq": {
+    "conda_name": "uldaq",
+    "import_name": "uldaq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uldaq"
+  },
+  "ulmo": {
+    "conda_name": "ulmo",
+    "import_name": "ulmo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ulmo"
+  },
+  "ultimate-sitemap-parser": {
+    "conda_name": "ultimate-sitemap-parser",
+    "import_name": "usp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ultimate-sitemap-parser"
+  },
+  "ultralytics": {
+    "conda_name": "ultralytics",
+    "import_name": "ultralytics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ultralytics"
+  },
+  "ultranest": {
+    "conda_name": "ultranest",
+    "import_name": "ultranest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ultranest"
+  },
+  "ultraplot": {
+    "conda_name": "ultraplot",
+    "import_name": "ultraplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ultraplot"
+  },
+  "umachine-pyio": {
+    "conda_name": "umachine-pyio",
+    "import_name": "umachine_pyio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umachine-pyio"
+  },
+  "umalqurra": {
+    "conda_name": "umalqurra",
+    "import_name": "umalqurra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umalqurra"
+  },
+  "umap-learn": {
+    "conda_name": "umap-learn",
+    "import_name": "umap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umap-learn"
+  },
+  "umarkdown": {
+    "conda_name": "umarkdown",
+    "import_name": "umarkdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umarkdown"
+  },
+  "umetrix": {
+    "conda_name": "umetrix",
+    "import_name": "umetrix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umetrix"
+  },
+  "umnn": {
+    "conda_name": "umnn",
+    "import_name": "UMNN",
+    "mapping_source": "regro-bot",
+    "pypi_name": "umnn"
+  },
+  "unasync": {
+    "conda_name": "unasync",
+    "import_name": "unasync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unasync"
+  },
+  "unbaffeld": {
+    "conda_name": "unbaffeld",
+    "import_name": "unbaffeld",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unbaffeld"
+  },
+  "uncalled-for": {
+    "conda_name": "uncalled-for",
+    "import_name": "uncalled_for",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncalled-for"
+  },
+  "uncertainpy": {
+    "conda_name": "uncertainpy",
+    "import_name": "uncertainpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncertainpy"
+  },
+  "uncertainties": {
+    "conda_name": "uncertainties",
+    "import_name": "uncertainties",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncertainties"
+  },
+  "uncommitted": {
+    "conda_name": "uncommitted",
+    "import_name": "uncommitted",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncommitted"
+  },
+  "uncompresspy": {
+    "conda_name": "uncompresspy",
+    "import_name": "uncompresspy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncompresspy"
+  },
+  "uncurl": {
+    "conda_name": "uncurl",
+    "import_name": "uncurl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uncurl"
+  },
+  "unearth": {
+    "conda_name": "unearth",
+    "import_name": "unearth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unearth"
+  },
+  "unfccc-di-api": {
+    "conda_name": "unfccc_di_api",
+    "import_name": "unfccc_di_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unfccc-di-api"
+  },
+  "unfold": {
+    "conda_name": "unfold",
+    "import_name": "unfold",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unfold"
+  },
+  "unicall": {
+    "conda_name": "unicall",
+    "import_name": "unicall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicall"
+  },
+  "unicaps": {
+    "conda_name": "unicaps",
+    "import_name": "unicaps",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicaps"
+  },
+  "unicode-slugify": {
+    "conda_name": "unicode-slugify",
+    "import_name": "slugify",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicode-slugify"
+  },
+  "unicodecsv": {
+    "conda_name": "unicodecsv",
+    "import_name": "unicodecsv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicodecsv"
+  },
+  "unicodedata2": {
+    "conda_name": "unicodedata2",
+    "import_name": "unicodedata2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicodedata2"
+  },
+  "unicorn-binance-local-depth-cache": {
+    "conda_name": "unicorn-binance-local-depth-cache",
+    "import_name": "unicorn_binance_local_depth_cache",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicorn-binance-local-depth-cache"
+  },
+  "unicorn-binance-rest-api": {
+    "conda_name": "unicorn-binance-rest-api",
+    "import_name": "unicorn_binance_rest_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicorn-binance-rest-api"
+  },
+  "unicorn-binance-trailing-stop-loss": {
+    "conda_name": "unicorn-binance-trailing-stop-loss",
+    "import_name": "unicorn_binance_trailing_stop_loss",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicorn-binance-trailing-stop-loss"
+  },
+  "unicorn-binance-websocket-api": {
+    "conda_name": "unicorn-binance-websocket-api",
+    "import_name": "unicorn_binance_websocket_api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicorn-binance-websocket-api"
+  },
+  "unicorn-fy": {
+    "conda_name": "unicorn-fy",
+    "import_name": "unicorn_fy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unicorn-fy"
+  },
+  "unidic-lite": {
+    "conda_name": "unidic-lite",
+    "import_name": "unidic_lite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unidic-lite"
+  },
+  "unidiff": {
+    "conda_name": "unidiff",
+    "import_name": "unidiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unidiff"
+  },
+  "unionfind": {
+    "conda_name": "unionfind",
+    "import_name": "unionfind",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unionfind"
+  },
+  "unionml": {
+    "conda_name": "unionml",
+    "import_name": "unionml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unionml"
+  },
+  "unique-uncertainty": {
+    "conda_name": "unique-uncertainty",
+    "import_name": "unique",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unique-uncertainty"
+  },
+  "unitpackage": {
+    "conda_name": "unitpackage",
+    "import_name": "unitpackage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unitpackage"
+  },
+  "units": {
+    "conda_name": "units",
+    "import_name": "units",
+    "mapping_source": "regro-bot",
+    "pypi_name": "units"
+  },
+  "unittest-xml-reporting": {
+    "conda_name": "unittest-xml-reporting",
+    "import_name": "xmlrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unittest-xml-reporting"
+  },
+  "universal-analytics-python3": {
+    "conda_name": "universal-analytics-python3",
+    "import_name": "universal_analytics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "universal-analytics-python3"
+  },
+  "universions": {
+    "conda_name": "universions",
+    "import_name": "universions",
+    "mapping_source": "regro-bot",
+    "pypi_name": "universions"
+  },
+  "univi": {
+    "conda_name": "univi",
+    "import_name": "univi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "univi"
+  },
+  "unlzw3": {
+    "conda_name": "unlzw3",
+    "import_name": "unlzw3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unlzw3"
+  },
+  "unpaddedbase64": {
+    "conda_name": "unpaddedbase64",
+    "import_name": "unpaddedbase64",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unpaddedbase64"
+  },
+  "unrar": {
+    "conda_name": "unrar",
+    "import_name": "unrar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unrar"
+  },
+  "unstructured-client": {
+    "conda_name": "unstructured-client",
+    "import_name": "unstructured_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unstructured-client"
+  },
+  "unsync": {
+    "conda_name": "unsync",
+    "import_name": "unsync",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unsync"
+  },
+  "untangle": {
+    "conda_name": "untangle",
+    "import_name": "untangle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "untangle"
+  },
+  "unum": {
+    "conda_name": "unum",
+    "import_name": "unum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unum"
+  },
+  "unyt": {
+    "conda_name": "unyt",
+    "import_name": "unyt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unyt"
+  },
+  "unzip-http": {
+    "conda_name": "unzip-http",
+    "import_name": "unzip_http",
+    "mapping_source": "regro-bot",
+    "pypi_name": "unzip-http"
+  },
+  "up42-py": {
+    "conda_name": "up42-py",
+    "import_name": "up42",
+    "mapping_source": "regro-bot",
+    "pypi_name": "up42-py"
+  },
+  "updater": {
+    "conda_name": "updater",
+    "import_name": "updater",
+    "mapping_source": "regro-bot",
+    "pypi_name": "updater"
+  },
+  "upf-to-json": {
+    "conda_name": "upf_to_json",
+    "import_name": "upf_to_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upf-to-json"
+  },
+  "upkie": {
+    "conda_name": "upkie",
+    "import_name": "upkie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upkie"
+  },
+  "upkie-description": {
+    "conda_name": "upkie_description",
+    "import_name": "upkie_description",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upkie-description"
+  },
+  "upliftml": {
+    "conda_name": "upliftml",
+    "import_name": "upliftml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upliftml"
+  },
+  "uplot-python": {
+    "conda_name": "uplot-python",
+    "import_name": "uplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uplot-python"
+  },
+  "uproot-methods": {
+    "conda_name": "uproot-methods",
+    "import_name": "uproot_methods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uproot-methods"
+  },
+  "uproot3": {
+    "conda_name": "uproot3",
+    "import_name": "uproot3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uproot3"
+  },
+  "uproot3-methods": {
+    "conda_name": "uproot3-methods",
+    "import_name": "uproot3_methods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uproot3-methods"
+  },
+  "upsetplot": {
+    "conda_name": "upsetplot",
+    "import_name": "upsetplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upsetplot"
+  },
+  "upstage-des": {
+    "conda_name": "upstage-des",
+    "import_name": "upstage_des",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upstage-des"
+  },
+  "upstash-ratelimit": {
+    "conda_name": "upstash-ratelimit",
+    "import_name": "upstash_ratelimit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upstash-ratelimit"
+  },
+  "upstash-redis": {
+    "conda_name": "upstash-redis",
+    "import_name": "upstash_redis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "upstash-redis"
+  },
+  "uptime": {
+    "conda_name": "uptime",
+    "import_name": "uptime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uptime"
+  },
+  "uptrace": {
+    "conda_name": "uptrace",
+    "import_name": "uptrace",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uptrace"
+  },
+  "uranography": {
+    "conda_name": "uranography",
+    "import_name": "uranography",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uranography"
+  },
+  "uravu": {
+    "conda_name": "uravu",
+    "import_name": "uravu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uravu"
+  },
+  "urbanaccess": {
+    "conda_name": "urbanaccess",
+    "import_name": "urbanaccess",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urbanaccess"
+  },
+  "urbansim": {
+    "conda_name": "urbansim",
+    "import_name": "urbansim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urbansim"
+  },
+  "urbansim-defaults": {
+    "conda_name": "urbansim_defaults",
+    "import_name": "urbansim_defaults",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urbansim-defaults"
+  },
+  "urbansim-templates": {
+    "conda_name": "urbansim_templates",
+    "import_name": "urbansim_templates",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urbansim-templates"
+  },
+  "uritemplate": {
+    "conda_name": "uritemplate",
+    "import_name": "uritemplate",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uritemplate"
+  },
+  "uritools": {
+    "conda_name": "uritools",
+    "import_name": "uritools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uritools"
+  },
+  "url-into-images": {
+    "conda_name": "url-into-images",
+    "import_name": "url_into_images",
+    "mapping_source": "regro-bot",
+    "pypi_name": "url-into-images"
+  },
+  "url-normalize": {
+    "conda_name": "url-normalize",
+    "import_name": "url_normalize",
+    "mapping_source": "regro-bot",
+    "pypi_name": "url-normalize"
+  },
+  "urlchecker": {
+    "conda_name": "urlchecker",
+    "import_name": "urlchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urlchecker"
+  },
+  "urljsf": {
+    "conda_name": "urljsf",
+    "import_name": "urljsf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urljsf"
+  },
+  "urllib3": {
+    "conda_name": "urllib3",
+    "import_name": "urllib3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urllib3"
+  },
+  "urllib3-secure-extra": {
+    "conda_name": "urllib3-secure-extra",
+    "import_name": "urllib3_secure_extra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urllib3-secure-extra"
+  },
+  "urlobject": {
+    "conda_name": "urlobject",
+    "import_name": "urlobject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urlobject"
+  },
+  "urlpath": {
+    "conda_name": "urlpath",
+    "import_name": "urlpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urlpath"
+  },
+  "urlquote": {
+    "conda_name": "urlquote",
+    "import_name": "urlquote",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urlquote"
+  },
+  "urlscan": {
+    "conda_name": "urlscan",
+    "import_name": "urlscan",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urlscan"
+  },
+  "urwid-readline": {
+    "conda_name": "urwid_readline",
+    "import_name": "urwid_readline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "urwid-readline"
+  },
+  "us": {
+    "conda_name": "us",
+    "import_name": "us",
+    "mapping_source": "regro-bot",
+    "pypi_name": "us"
+  },
+  "usagestats": {
+    "conda_name": "usagestats",
+    "import_name": "usagestats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "usagestats"
+  },
+  "useq-schema": {
+    "conda_name": "useq-schema",
+    "import_name": "useq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "useq-schema"
+  },
+  "user-agents": {
+    "conda_name": "user-agents",
+    "import_name": "user_agents",
+    "mapping_source": "regro-bot",
+    "pypi_name": "user-agents"
+  },
+  "userinput": {
+    "conda_name": "userinput",
+    "import_name": "userinput",
+    "mapping_source": "regro-bot",
+    "pypi_name": "userinput"
+  },
+  "userpath": {
+    "conda_name": "userpath",
+    "import_name": "userpath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "userpath"
+  },
+  "userspacefs": {
+    "conda_name": "userspacefs",
+    "import_name": "userspacefs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "userspacefs"
+  },
+  "usgs": {
+    "conda_name": "usgs",
+    "import_name": "usgs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "usgs"
+  },
+  "usgs-libcomcat": {
+    "conda_name": "usgs-libcomcat",
+    "import_name": "libcomcat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "usgs-libcomcat"
+  },
+  "usgs-strec": {
+    "conda_name": "usgs-strec",
+    "import_name": "strec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "usgs-strec"
+  },
+  "usort": {
+    "conda_name": "usort",
+    "import_name": "usort",
+    "mapping_source": "regro-bot",
+    "pypi_name": "usort"
+  },
+  "ussa1976": {
+    "conda_name": "ussa1976",
+    "import_name": "ussa1976",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ussa1976"
+  },
+  "ustrid": {
+    "conda_name": "ustrid",
+    "import_name": "ustrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ustrid"
+  },
+  "uszipcode": {
+    "conda_name": "uszipcode",
+    "import_name": "uszipcode",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uszipcode"
+  },
+  "utide": {
+    "conda_name": "utide",
+    "import_name": "utide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "utide"
+  },
+  "utilsforecast": {
+    "conda_name": "utilsforecast",
+    "import_name": "utilsforecast",
+    "mapping_source": "regro-bot",
+    "pypi_name": "utilsforecast"
+  },
+  "utm": {
+    "conda_name": "utm",
+    "import_name": "utm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "utm"
+  },
+  "utool": {
+    "conda_name": "utool",
+    "import_name": "utool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "utool"
+  },
+  "uuid6": {
+    "conda_name": "uuid6",
+    "import_name": "uuid6",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uuid6"
+  },
+  "uv-dynamic-versioning": {
+    "conda_name": "uv-dynamic-versioning",
+    "import_name": "uv_dynamic_versioning",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uv-dynamic-versioning"
+  },
+  "uv-secure": {
+    "conda_name": "uv-secure",
+    "import_name": "uv_secure",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uv-secure"
+  },
+  "uvicore": {
+    "conda_name": "uvicore",
+    "import_name": "uvicore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uvicore"
+  },
+  "uvicorn-worker": {
+    "conda_name": "uvicorn-worker",
+    "import_name": "uvicorn_worker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uvicorn-worker"
+  },
+  "uvloop": {
+    "conda_name": "uvloop",
+    "import_name": "uvloop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uvloop"
+  },
+  "uwsift": {
+    "conda_name": "uwsift",
+    "import_name": "uwsift",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uwsift"
+  },
+  "uxf": {
+    "conda_name": "uxf",
+    "import_name": "uxf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "uxf"
+  },
+  "va-am": {
+    "conda_name": "va_am",
+    "import_name": "va_am",
+    "mapping_source": "regro-bot",
+    "pypi_name": "va-am"
+  },
+  "vabene": {
+    "conda_name": "vabene",
+    "import_name": "vabene",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vabene"
+  },
+  "vacumm-data": {
+    "conda_name": "vacumm-data",
+    "import_name": "vacumm_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vacumm-data"
+  },
+  "vadersentiment": {
+    "conda_name": "vadersentiment",
+    "import_name": "vaderSentiment",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vadersentiment"
+  },
+  "vaex-arrow": {
+    "conda_name": "vaex-arrow",
+    "import_name": "vaex_arrow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-arrow"
+  },
+  "vaex-astro": {
+    "conda_name": "vaex-astro",
+    "import_name": "vaex.astro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-astro"
+  },
+  "vaex-core": {
+    "conda_name": "vaex-core",
+    "import_name": "vaex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-core"
+  },
+  "vaex-distributed": {
+    "conda_name": "vaex-distributed",
+    "import_name": "vaex.distributed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-distributed"
+  },
+  "vaex-hdf5": {
+    "conda_name": "vaex-hdf5",
+    "import_name": "vaex.hdf5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-hdf5"
+  },
+  "vaex-jupyter": {
+    "conda_name": "vaex-jupyter",
+    "import_name": "vaex.jupyter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-jupyter"
+  },
+  "vaex-ml": {
+    "conda_name": "vaex-ml",
+    "import_name": "vaex.ml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-ml"
+  },
+  "vaex-server": {
+    "conda_name": "vaex-server",
+    "import_name": "vaex.server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-server"
+  },
+  "vaex-ui": {
+    "conda_name": "vaex-ui",
+    "import_name": "vaex.ui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-ui"
+  },
+  "vaex-viz": {
+    "conda_name": "vaex-viz",
+    "import_name": "vaex.viz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vaex-viz"
+  },
+  "vak": {
+    "conda_name": "vak",
+    "import_name": "vak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vak"
+  },
+  "valida": {
+    "conda_name": "valida",
+    "import_name": "valida",
+    "mapping_source": "regro-bot",
+    "pypi_name": "valida"
+  },
+  "validate-email": {
+    "conda_name": "validate_email",
+    "import_name": "validate_email",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validate-email"
+  },
+  "validate-pyproject": {
+    "conda_name": "validate-pyproject",
+    "import_name": "validate_pyproject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validate-pyproject"
+  },
+  "validate-version-code": {
+    "conda_name": "validate_version_code",
+    "import_name": "validate_version_code",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validate-version-code"
+  },
+  "validator-collection": {
+    "conda_name": "validator-collection",
+    "import_name": "validator_collection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validator-collection"
+  },
+  "validators": {
+    "conda_name": "validators",
+    "import_name": "validators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validators"
+  },
+  "validictory": {
+    "conda_name": "validictory",
+    "import_name": "validictory",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validictory"
+  },
+  "validobj": {
+    "conda_name": "validobj",
+    "import_name": "validobj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "validobj"
+  },
+  "valmix": {
+    "conda_name": "valmix",
+    "import_name": "valmix",
+    "mapping_source": "regro-bot",
+    "pypi_name": "valmix"
+  },
+  "vape4d": {
+    "conda_name": "vape4d",
+    "import_name": "vape4d",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vape4d"
+  },
+  "vapeplot": {
+    "conda_name": "vapeplot",
+    "import_name": "vapeplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vapeplot"
+  },
+  "variable-generators": {
+    "conda_name": "variable_generators",
+    "import_name": "variable_generators",
+    "mapping_source": "regro-bot",
+    "pypi_name": "variable-generators"
+  },
+  "vbmicrolensing": {
+    "conda_name": "vbmicrolensing",
+    "import_name": "VBMicrolensing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vbmicrolensing"
+  },
+  "vbuild": {
+    "conda_name": "vbuild",
+    "import_name": "vbuild",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vbuild"
+  },
+  "vcrpy": {
+    "conda_name": "vcrpy",
+    "import_name": "vcr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vcrpy"
+  },
+  "vcrpy-unittest": {
+    "conda_name": "vcrpy-unittest",
+    "import_name": "vcr_unittest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vcrpy-unittest"
+  },
+  "vcver": {
+    "conda_name": "vcver",
+    "import_name": "vcver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vcver"
+  },
+  "vdm": {
+    "conda_name": "vdm",
+    "import_name": "vdm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vdm"
+  },
+  "vdms": {
+    "conda_name": "vdms",
+    "import_name": "vdms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vdms"
+  },
+  "vdom": {
+    "conda_name": "vdom",
+    "import_name": "vdom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vdom"
+  },
+  "vecstack": {
+    "conda_name": "vecstack",
+    "import_name": "vecstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vecstack"
+  },
+  "vector-vis-graph": {
+    "conda_name": "vector-vis-graph",
+    "import_name": "vector_vis_graph",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vector-vis-graph"
+  },
+  "vectorbt": {
+    "conda_name": "vectorbt",
+    "import_name": "vectorbt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vectorbt"
+  },
+  "vectormath": {
+    "conda_name": "vectormath",
+    "import_name": "vectormath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vectormath"
+  },
+  "vedo": {
+    "conda_name": "vedo",
+    "import_name": "vedo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vedo"
+  },
+  "veerer": {
+    "conda_name": "veerer",
+    "import_name": "veerer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veerer"
+  },
+  "veg2hab": {
+    "conda_name": "veg2hab",
+    "import_name": "veg2hab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veg2hab"
+  },
+  "vega": {
+    "conda_name": "vega",
+    "import_name": "vega",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vega"
+  },
+  "vega-datasets": {
+    "conda_name": "vega_datasets",
+    "import_name": "vega_datasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vega-datasets"
+  },
+  "vegafusion": {
+    "conda_name": "vegafusion",
+    "import_name": "vegafusion",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vegafusion"
+  },
+  "vegafusion-python-embed": {
+    "conda_name": "vegafusion-python-embed",
+    "import_name": "vegafusion_embed",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vegafusion-python-embed"
+  },
+  "vegspec": {
+    "conda_name": "vegspec",
+    "import_name": "vegspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vegspec"
+  },
+  "velocity-profile": {
+    "conda_name": "velocity-profile",
+    "import_name": "velocity_profile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "velocity-profile"
+  },
+  "venn-abers": {
+    "conda_name": "venn-abers",
+    "import_name": "venn_abers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "venn-abers"
+  },
+  "venusian": {
+    "conda_name": "venusian",
+    "import_name": "venusian",
+    "mapping_source": "regro-bot",
+    "pypi_name": "venusian"
+  },
+  "venv-kernel": {
+    "conda_name": "venv-kernel",
+    "import_name": "venv_kernel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "venv-kernel"
+  },
+  "venv-pack": {
+    "conda_name": "venv-pack",
+    "import_name": "venv_pack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "venv-pack"
+  },
+  "veracitools": {
+    "conda_name": "veracitools",
+    "import_name": "veracitools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veracitools"
+  },
+  "verboselogs": {
+    "conda_name": "verboselogs",
+    "import_name": "verboselogs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verboselogs"
+  },
+  "verde": {
+    "conda_name": "verde",
+    "import_name": "verde",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verde"
+  },
+  "vermin": {
+    "conda_name": "vermin",
+    "import_name": "vermin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vermin"
+  },
+  "vermouth": {
+    "conda_name": "vermouth",
+    "import_name": "vermouth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vermouth"
+  },
+  "veros": {
+    "conda_name": "veros",
+    "import_name": "veros",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veros"
+  },
+  "veros-extra-setups": {
+    "conda_name": "veros-extra-setups",
+    "import_name": "veros_extra_setups",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veros-extra-setups"
+  },
+  "verr": {
+    "conda_name": "verr",
+    "import_name": "verr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verr"
+  },
+  "version-information": {
+    "conda_name": "version_information",
+    "import_name": "version_information",
+    "mapping_source": "regro-bot",
+    "pypi_name": "version-information"
+  },
+  "version-parser": {
+    "conda_name": "version-parser",
+    "import_name": "version_parser",
+    "mapping_source": "regro-bot",
+    "pypi_name": "version-parser"
+  },
+  "versioned-hdf5": {
+    "conda_name": "versioned-hdf5",
+    "import_name": "versioned_hdf5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "versioned-hdf5"
+  },
+  "versionfinder": {
+    "conda_name": "versionfinder",
+    "import_name": "versionfinder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "versionfinder"
+  },
+  "versioningit": {
+    "conda_name": "versioningit",
+    "import_name": "versioningit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "versioningit"
+  },
+  "versiontag": {
+    "conda_name": "versiontag",
+    "import_name": "versiontag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "versiontag"
+  },
+  "versiontools": {
+    "conda_name": "versiontools",
+    "import_name": "versiontools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "versiontools"
+  },
+  "verspec": {
+    "conda_name": "verspec",
+    "import_name": "verspec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verspec"
+  },
+  "verstr": {
+    "conda_name": "verstr",
+    "import_name": "verstr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verstr"
+  },
+  "vertica-highcharts": {
+    "conda_name": "vertica_highcharts",
+    "import_name": "vertica_highcharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vertica-highcharts"
+  },
+  "vertica-python": {
+    "conda_name": "vertica-python",
+    "import_name": "vertica_python",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vertica-python"
+  },
+  "verticapy": {
+    "conda_name": "verticapy",
+    "import_name": "verticapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "verticapy"
+  },
+  "vesin": {
+    "conda_name": "python-vesin",
+    "import_name": "vesin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vesin"
+  },
+  "vessel-express-napari": {
+    "conda_name": "vessel-express-napari",
+    "import_name": "vessel_express",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vessel-express-napari"
+  },
+  "vet": {
+    "conda_name": "vet",
+    "import_name": "vet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vet"
+  },
+  "veusz": {
+    "conda_name": "veusz",
+    "import_name": "veusz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "veusz"
+  },
+  "vharfbuzz": {
+    "conda_name": "vharfbuzz",
+    "import_name": "vharfbuzz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vharfbuzz"
+  },
+  "vibegui": {
+    "conda_name": "vibegui",
+    "import_name": "vibegui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vibegui"
+  },
+  "vibehdf5": {
+    "conda_name": "vibehdf5",
+    "import_name": "vibehdf5",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vibehdf5"
+  },
+  "videogrep": {
+    "conda_name": "videogrep",
+    "import_name": "videogrep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "videogrep"
+  },
+  "videohash": {
+    "conda_name": "videohash",
+    "import_name": "videohash",
+    "mapping_source": "regro-bot",
+    "pypi_name": "videohash"
+  },
+  "vidigi": {
+    "conda_name": "vidigi",
+    "import_name": "vidigi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vidigi"
+  },
+  "viewable": {
+    "conda_name": "viewable",
+    "import_name": "viewable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "viewable"
+  },
+  "viewstack": {
+    "conda_name": "viewstack",
+    "import_name": "viewstack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "viewstack"
+  },
+  "vine": {
+    "conda_name": "vine",
+    "import_name": "vine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vine"
+  },
+  "viresclient": {
+    "conda_name": "viresclient",
+    "import_name": "viresclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "viresclient"
+  },
+  "virga-exo": {
+    "conda_name": "virga-exo",
+    "import_name": "virga",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virga-exo"
+  },
+  "virocon": {
+    "conda_name": "virocon",
+    "import_name": "virocon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virocon"
+  },
+  "virtual-glob": {
+    "conda_name": "virtual-glob",
+    "import_name": "virtual_glob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virtual-glob"
+  },
+  "virtualizarr": {
+    "conda_name": "virtualizarr",
+    "import_name": "virtualizarr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virtualizarr"
+  },
+  "virtualship": {
+    "conda_name": "virtualship",
+    "import_name": "virtualship",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virtualship"
+  },
+  "virtue-skill": {
+    "conda_name": "virtue",
+    "import_name": "virtue",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virtue-skill"
+  },
+  "virushostinteractionpredictor": {
+    "conda_name": "virushostinteractionpredictor",
+    "import_name": "vhip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "virushostinteractionpredictor"
+  },
+  "visdom": {
+    "conda_name": "visdom",
+    "import_name": "visdom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "visdom"
+  },
+  "vise": {
+    "conda_name": "vise",
+    "import_name": "vise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vise"
+  },
+  "vision-explanation-methods": {
+    "conda_name": "vision-explanation-methods",
+    "import_name": "vision_explanation_methods",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vision-explanation-methods"
+  },
+  "visioplot": {
+    "conda_name": "visioplot",
+    "import_name": "visioplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "visioplot"
+  },
+  "visisipy": {
+    "conda_name": "visisipy",
+    "import_name": "visisipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "visisipy"
+  },
+  "visitor": {
+    "conda_name": "visitor",
+    "import_name": "visitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "visitor"
+  },
+  "vispy": {
+    "conda_name": "vispy",
+    "import_name": "vispy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vispy"
+  },
+  "visvis": {
+    "conda_name": "visvis",
+    "import_name": "visvis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "visvis"
+  },
+  "vitabel": {
+    "conda_name": "vitabel",
+    "import_name": "vitabel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vitabel"
+  },
+  "vitaldb": {
+    "conda_name": "vitaldb",
+    "import_name": "vitaldb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vitaldb"
+  },
+  "viv": {
+    "conda_name": "viv",
+    "import_name": "viv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "viv"
+  },
+  "vizdet": {
+    "conda_name": "vizdet",
+    "import_name": "vizdet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vizdet"
+  },
+  "vizent": {
+    "conda_name": "vizent",
+    "import_name": "vizent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vizent"
+  },
+  "vizro": {
+    "conda_name": "vizro",
+    "import_name": "vizro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vizro"
+  },
+  "viztracer": {
+    "conda_name": "viztracer",
+    "import_name": "viztracer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "viztracer"
+  },
+  "vl-convert-python": {
+    "conda_name": "vl-convert-python",
+    "import_name": "vl_convert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vl-convert-python"
+  },
+  "vobject": {
+    "conda_name": "vobject",
+    "import_name": "vobject",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vobject"
+  },
+  "vocalpy": {
+    "conda_name": "vocalpy",
+    "import_name": "vocalpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vocalpy"
+  },
+  "vodex": {
+    "conda_name": "vodex",
+    "import_name": "vodex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vodex"
+  },
+  "voila": {
+    "conda_name": "voila",
+    "import_name": "voila",
+    "mapping_source": "regro-bot",
+    "pypi_name": "voila"
+  },
+  "vois": {
+    "conda_name": "vois",
+    "import_name": "vois",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vois"
+  },
+  "volatile": {
+    "conda_name": "volatile",
+    "import_name": "volatile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "volatile"
+  },
+  "vollseg": {
+    "conda_name": "vollseg",
+    "import_name": "vollseg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vollseg"
+  },
+  "vollseg-napari": {
+    "conda_name": "vollseg-napari",
+    "import_name": "vollseg_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vollseg-napari"
+  },
+  "vollseg-napari-mtrack": {
+    "conda_name": "vollseg-napari-mtrack",
+    "import_name": "vollseg_napari_mtrack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vollseg-napari-mtrack"
+  },
+  "voluptuous": {
+    "conda_name": "voluptuous",
+    "import_name": "voluptuous",
+    "mapping_source": "regro-bot",
+    "pypi_name": "voluptuous"
+  },
+  "vose-alias-method": {
+    "conda_name": "vose-alias-method",
+    "import_name": "vose_sampler",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vose-alias-method"
+  },
+  "voxel51-eta": {
+    "conda_name": "voxel51-eta",
+    "import_name": "eta",
+    "mapping_source": "regro-bot",
+    "pypi_name": "voxel51-eta"
+  },
+  "vprtempo": {
+    "conda_name": "vprtempo",
+    "import_name": "vprtempo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vprtempo"
+  },
+  "vpython": {
+    "conda_name": "vpython",
+    "import_name": "vpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vpython"
+  },
+  "vsc-base": {
+    "conda_name": "vsc-base",
+    "import_name": "vsc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vsc-base"
+  },
+  "vsc-install": {
+    "conda_name": "vsc-install",
+    "import_name": "vsc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vsc-install"
+  },
+  "vsketch": {
+    "conda_name": "vsketch",
+    "import_name": "vsketch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vsketch"
+  },
+  "vsts": {
+    "conda_name": "vsts-python-api",
+    "import_name": "vsts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vsts"
+  },
+  "vt-py": {
+    "conda_name": "vt-py",
+    "import_name": "vt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vt-py"
+  },
+  "vtkplotter": {
+    "conda_name": "vtkplotter",
+    "import_name": "vtkplotter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vtkplotter"
+  },
+  "vtkwriters": {
+    "conda_name": "vtkwriters",
+    "import_name": "vtkwriters",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vtkwriters"
+  },
+  "vulp": {
+    "conda_name": "vulp",
+    "import_name": "vulp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vulp"
+  },
+  "vvm": {
+    "conda_name": "vvm",
+    "import_name": "vvm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vvm"
+  },
+  "vyper": {
+    "conda_name": "vyper",
+    "import_name": "vyper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "vyper"
+  },
+  "w3g": {
+    "conda_name": "w3g",
+    "import_name": "w3g",
+    "mapping_source": "regro-bot",
+    "pypi_name": "w3g"
+  },
+  "w3lib": {
+    "conda_name": "w3lib",
+    "import_name": "w3lib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "w3lib"
+  },
+  "wabisabi": {
+    "conda_name": "wabisabi",
+    "import_name": "wabisabi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wabisabi"
+  },
+  "wagtail-accessibility": {
+    "conda_name": "wagtail-accessibility",
+    "import_name": "wagtailaccessibility",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-accessibility"
+  },
+  "wagtail-advanced-form-builder": {
+    "conda_name": "wagtail-advanced-form-builder",
+    "import_name": "wagtail_advanced_form_builder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-advanced-form-builder"
+  },
+  "wagtail-ai": {
+    "conda_name": "wagtail-ai",
+    "import_name": "wagtail_ai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-ai"
+  },
+  "wagtail-app-pages": {
+    "conda_name": "wagtail-app-pages",
+    "import_name": "wagtail_app_pages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-app-pages"
+  },
+  "wagtail-autocomplete": {
+    "conda_name": "wagtail-autocomplete",
+    "import_name": "wagtailautocomplete",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-autocomplete"
+  },
+  "wagtail-bakery": {
+    "conda_name": "wagtail-bakery",
+    "import_name": "wagtailbakery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-bakery"
+  },
+  "wagtail-blocks": {
+    "conda_name": "wagtail-blocks",
+    "import_name": "wagtail_blocks",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-blocks"
+  },
+  "wagtail-charcount": {
+    "conda_name": "wagtail-charcount",
+    "import_name": "wagtailcharcount",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-charcount"
+  },
+  "wagtail-color-panel": {
+    "conda_name": "wagtail-color-panel",
+    "import_name": "wagtail_color_panel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-color-panel"
+  },
+  "wagtail-constance": {
+    "conda_name": "wagtail-constance",
+    "import_name": "wagtailconstance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-constance"
+  },
+  "wagtail-dynamic-dropdown": {
+    "conda_name": "wagtail-dynamic-dropdown",
+    "import_name": "wagtail_dynamic_dropdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-dynamic-dropdown"
+  },
+  "wagtail-experiments": {
+    "conda_name": "wagtail-experiments",
+    "import_name": "experiments",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-experiments"
+  },
+  "wagtail-flags": {
+    "conda_name": "wagtail-flags",
+    "import_name": "wagtailflags",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-flags"
+  },
+  "wagtail-flexible-forms": {
+    "conda_name": "wagtail-flexible-forms",
+    "import_name": "wagtail_flexible_forms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-flexible-forms"
+  },
+  "wagtail-font-awesome-svg": {
+    "conda_name": "wagtail-font-awesome-svg",
+    "import_name": "wagtailfontawesomesvg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-font-awesome-svg"
+  },
+  "wagtail-footnotes": {
+    "conda_name": "wagtail-footnotes",
+    "import_name": "wagtail_footnotes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-footnotes"
+  },
+  "wagtail-grapple": {
+    "conda_name": "wagtail-grapple",
+    "import_name": "grapple",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-grapple"
+  },
+  "wagtail-headless-preview": {
+    "conda_name": "wagtail-headless-preview",
+    "import_name": "wagtail_headless_preview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-headless-preview"
+  },
+  "wagtail-import-export-tool": {
+    "conda_name": "wagtail-import-export-tool",
+    "import_name": "wagtailimportexport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-import-export-tool"
+  },
+  "wagtail-knowledgebase": {
+    "conda_name": "wagtail-knowledgebase",
+    "import_name": "wtknowledgebase",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-knowledgebase"
+  },
+  "wagtail-linkchecker": {
+    "conda_name": "wagtail-linkchecker",
+    "import_name": "wagtaillinkchecker",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-linkchecker"
+  },
+  "wagtail-live": {
+    "conda_name": "wagtail-live",
+    "import_name": "wagtail_live",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-live"
+  },
+  "wagtail-markdown": {
+    "conda_name": "wagtail-markdown",
+    "import_name": "wagtailmarkdown",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-markdown"
+  },
+  "wagtail-meta-preview": {
+    "conda_name": "wagtail-meta-preview",
+    "import_name": "wagtail_meta_preview",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-meta-preview"
+  },
+  "wagtail-metadata": {
+    "conda_name": "wagtail-metadata",
+    "import_name": "wagtailmetadata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-metadata"
+  },
+  "wagtail-modeladmin": {
+    "conda_name": "wagtail-modeladmin",
+    "import_name": "wagtail_modeladmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-modeladmin"
+  },
+  "wagtail-nav-menus": {
+    "conda_name": "wagtail-nav-menus",
+    "import_name": "wagtail_nav_menus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-nav-menus"
+  },
+  "wagtail-periodic-review": {
+    "conda_name": "wagtail-periodic-review",
+    "import_name": "wagtail_periodic_review",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-periodic-review"
+  },
+  "wagtail-plotly": {
+    "conda_name": "wagtail-plotly",
+    "import_name": "wagtail_plotly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-plotly"
+  },
+  "wagtail-rangefilter": {
+    "conda_name": "wagtail-rangefilter",
+    "import_name": "wagtail_rangefilter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-rangefilter"
+  },
+  "wagtail-review": {
+    "conda_name": "wagtail-review",
+    "import_name": "wagtail_review",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-review"
+  },
+  "wagtail-sb-admin-interface": {
+    "conda_name": "wagtail-sb-admin-interface",
+    "import_name": "wagtail_sb_admin_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-sb-admin-interface"
+  },
+  "wagtail-sharing": {
+    "conda_name": "wagtail-sharing",
+    "import_name": "wagtailsharing",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-sharing"
+  },
+  "wagtail-storages": {
+    "conda_name": "wagtail-storages",
+    "import_name": "wagtail_storages",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-storages"
+  },
+  "wagtail-surveyjs": {
+    "conda_name": "wagtail-surveyjs",
+    "import_name": "wagtailsurveyjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-surveyjs"
+  },
+  "wagtail-tag-manager": {
+    "conda_name": "wagtail-tag-manager",
+    "import_name": "wagtail_tag_manager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-tag-manager"
+  },
+  "wagtail-taggable": {
+    "conda_name": "wagtail-taggable",
+    "import_name": "wagtail_taggable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-taggable"
+  },
+  "wagtail-themes": {
+    "conda_name": "wagtail-themes",
+    "import_name": "wagtailthemes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-themes"
+  },
+  "wagtail-tinytableblock": {
+    "conda_name": "wagtail-tinytableblock",
+    "import_name": "wagtail_tinytableblock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-tinytableblock"
+  },
+  "wagtail-transfer": {
+    "conda_name": "wagtail-transfer",
+    "import_name": "wagtail_transfer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-transfer"
+  },
+  "wagtail-treemodeladmin": {
+    "conda_name": "wagtail-treemodeladmin",
+    "import_name": "treemodeladmin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-treemodeladmin"
+  },
+  "wagtail-word": {
+    "conda_name": "wagtail-word",
+    "import_name": "wagtail_word",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtail-word"
+  },
+  "wagtailcharts": {
+    "conda_name": "wagtailcharts",
+    "import_name": "wagtailcharts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailcharts"
+  },
+  "wagtailextraicons": {
+    "conda_name": "wagtailextraicons",
+    "import_name": "wagtailextraicons",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailextraicons"
+  },
+  "wagtailgridder": {
+    "conda_name": "wagtailgridder",
+    "import_name": "wagtailgridder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailgridder"
+  },
+  "wagtailmath": {
+    "conda_name": "wagtailmath",
+    "import_name": "wagtailmath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailmath"
+  },
+  "wagtailmedia": {
+    "conda_name": "wagtailmedia",
+    "import_name": "wagtailmedia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailmedia"
+  },
+  "wagtailnews": {
+    "conda_name": "wagtailnews",
+    "import_name": "wagtailnews",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailnews"
+  },
+  "wagtailstreamforms": {
+    "conda_name": "wagtailstreamforms",
+    "import_name": "wagtailstreamforms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailstreamforms"
+  },
+  "wagtailtables": {
+    "conda_name": "wagtailtables",
+    "import_name": "wagtailtables",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagtailtables"
+  },
+  "wagyu": {
+    "conda_name": "wagyu",
+    "import_name": "wagyu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wagyu"
+  },
+  "wait-for2": {
+    "conda_name": "wait_for2",
+    "import_name": "wait_for2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wait-for2"
+  },
+  "wakatime": {
+    "conda_name": "wakatime",
+    "import_name": "wakatime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wakatime"
+  },
+  "wakepy": {
+    "conda_name": "wakepy",
+    "import_name": "wakepy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wakepy"
+  },
+  "wannier90io": {
+    "conda_name": "wannier90io",
+    "import_name": "wannier90io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wannier90io"
+  },
+  "wannierberri": {
+    "conda_name": "wannierberri",
+    "import_name": "wannierberri",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wannierberri"
+  },
+  "wapordl": {
+    "conda_name": "wapordl",
+    "import_name": "wapordl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wapordl"
+  },
+  "ward": {
+    "conda_name": "ward",
+    "import_name": "ward",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ward"
+  },
+  "warlock": {
+    "conda_name": "warlock",
+    "import_name": "warlock",
+    "mapping_source": "regro-bot",
+    "pypi_name": "warlock"
+  },
+  "warpfield": {
+    "conda_name": "warpfield",
+    "import_name": "warpfield",
+    "mapping_source": "regro-bot",
+    "pypi_name": "warpfield"
+  },
+  "warrant": {
+    "conda_name": "warrant",
+    "import_name": "warrant",
+    "mapping_source": "regro-bot",
+    "pypi_name": "warrant"
+  },
+  "warrant-lite": {
+    "conda_name": "warrant-lite",
+    "import_name": "warrant_lite",
+    "mapping_source": "regro-bot",
+    "pypi_name": "warrant-lite"
+  },
+  "wasabi": {
+    "conda_name": "wasabi",
+    "import_name": "wasabi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wasabi"
+  },
+  "wasmtime": {
+    "conda_name": "wasmtime-py",
+    "import_name": "wasmtime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wasmtime"
+  },
+  "wat-inspector": {
+    "conda_name": "wat-inspector",
+    "import_name": "wat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wat-inspector"
+  },
+  "watch-duck": {
+    "conda_name": "watch-duck",
+    "import_name": "watch_duck",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watch-duck"
+  },
+  "watchdog-gevent": {
+    "conda_name": "watchdog-gevent",
+    "import_name": "watchdog_gevent",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watchdog-gevent"
+  },
+  "watchgod": {
+    "conda_name": "watchgod",
+    "import_name": "watchgod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watchgod"
+  },
+  "watchme": {
+    "conda_name": "watchme",
+    "import_name": "watchme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watchme"
+  },
+  "watchtower": {
+    "conda_name": "watchtower",
+    "import_name": "watchtower",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watchtower"
+  },
+  "waterdynamics": {
+    "conda_name": "waterdynamics",
+    "import_name": "waterdynamics",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waterdynamics"
+  },
+  "waterfallcharts": {
+    "conda_name": "waterfallcharts",
+    "import_name": "waterfall_chart",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waterfallcharts"
+  },
+  "waternetworkanalysis": {
+    "conda_name": "waternetworkanalysis",
+    "import_name": "WaterNetworkAnalysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waternetworkanalysis"
+  },
+  "watertap-solvers": {
+    "conda_name": "watertap-solvers",
+    "import_name": "watertap_solvers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watertap-solvers"
+  },
+  "watex": {
+    "conda_name": "watex",
+    "import_name": "watex",
+    "mapping_source": "regro-bot",
+    "pypi_name": "watex"
+  },
+  "waveorder": {
+    "conda_name": "waveorder",
+    "import_name": "waveorder",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waveorder"
+  },
+  "waver": {
+    "conda_name": "waver",
+    "import_name": "waver",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waver"
+  },
+  "wavespectra": {
+    "conda_name": "wavespectra",
+    "import_name": "wavespectra",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wavespectra"
+  },
+  "wavyopen": {
+    "conda_name": "wavyopen",
+    "import_name": "wavy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wavyopen"
+  },
+  "waybackpy": {
+    "conda_name": "waybackpy",
+    "import_name": "waybackpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "waybackpy"
+  },
+  "wbgapi": {
+    "conda_name": "wbgapi",
+    "import_name": "wbgapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wbgapi"
+  },
+  "wbplot": {
+    "conda_name": "wbplot",
+    "import_name": "wbplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wbplot"
+  },
+  "wcosmo": {
+    "conda_name": "wcosmo",
+    "import_name": "wcosmo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wcosmo"
+  },
+  "wcwidth": {
+    "conda_name": "wcwidth",
+    "import_name": "wcwidth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wcwidth"
+  },
+  "wdl-aid": {
+    "conda_name": "wdl-aid",
+    "import_name": "wdl_aid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wdl-aid"
+  },
+  "wdl-packager": {
+    "conda_name": "wdl-packager",
+    "import_name": "wdl_packager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wdl-packager"
+  },
+  "wdmtoolbox": {
+    "conda_name": "wdmtoolbox",
+    "import_name": "wdmtoolbox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wdmtoolbox"
+  },
+  "weakrefmethod": {
+    "conda_name": "weakrefmethod",
+    "import_name": "weakrefmethod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weakrefmethod"
+  },
+  "weasel": {
+    "conda_name": "weasel",
+    "import_name": "weasel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weasel"
+  },
+  "web-py": {
+    "conda_name": "web.py",
+    "import_name": "web",
+    "mapping_source": "regro-bot",
+    "pypi_name": "web-py"
+  },
+  "webcolors": {
+    "conda_name": "webcolors",
+    "import_name": "webcolors",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webcolors"
+  },
+  "webdataset": {
+    "conda_name": "webdataset",
+    "import_name": "webdataset",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdataset"
+  },
+  "webdav4": {
+    "conda_name": "webdav4",
+    "import_name": "webdav4",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdav4"
+  },
+  "webdavclient2": {
+    "conda_name": "webdavclient2",
+    "import_name": "webdav2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdavclient2"
+  },
+  "webdavclient3": {
+    "conda_name": "webdavclient3",
+    "import_name": "webdav3.client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdavclient3"
+  },
+  "webdiff": {
+    "conda_name": "webdiff",
+    "import_name": "webdiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdiff"
+  },
+  "webdrivermanager": {
+    "conda_name": "webdrivermanager",
+    "import_name": "webdrivermanager",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webdrivermanager"
+  },
+  "weberror": {
+    "conda_name": "weberror",
+    "import_name": "weberror",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weberror"
+  },
+  "webexteamssdk": {
+    "conda_name": "webexteamssdk",
+    "import_name": "webexteamssdk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webexteamssdk"
+  },
+  "webgeocalc": {
+    "conda_name": "webgeocalc",
+    "import_name": "webgeocalc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webgeocalc"
+  },
+  "webhelpers": {
+    "conda_name": "webhelpers",
+    "import_name": "webhelpers",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webhelpers"
+  },
+  "webhelpers2": {
+    "conda_name": "webhelpers2",
+    "import_name": "webhelpers2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webhelpers2"
+  },
+  "webio-jupyter-extension": {
+    "conda_name": "webio-jupyter-extension",
+    "import_name": "webio_jupyter_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webio-jupyter-extension"
+  },
+  "weblogo": {
+    "conda_name": "weblogo",
+    "import_name": "weblogo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weblogo"
+  },
+  "webob": {
+    "conda_name": "webob",
+    "import_name": "webob",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webob"
+  },
+  "webp": {
+    "conda_name": "pywebp",
+    "import_name": "webp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webp"
+  },
+  "webrtcvad": {
+    "conda_name": "webrtcvad",
+    "import_name": "webrtcvad",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webrtcvad"
+  },
+  "webruntime": {
+    "conda_name": "webruntime",
+    "import_name": "webruntime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webruntime"
+  },
+  "websocket-client": {
+    "conda_name": "websocket-client",
+    "import_name": "websocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "websocket-client"
+  },
+  "websocket-server": {
+    "conda_name": "websocket-server",
+    "import_name": "websocket_server",
+    "mapping_source": "regro-bot",
+    "pypi_name": "websocket-server"
+  },
+  "websockets-cli": {
+    "conda_name": "websockets-cli",
+    "import_name": "ws",
+    "mapping_source": "regro-bot",
+    "pypi_name": "websockets-cli"
+  },
+  "webtest": {
+    "conda_name": "webtest",
+    "import_name": "webtest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "webtest"
+  },
+  "wecopttool": {
+    "conda_name": "wecopttool",
+    "import_name": "wecopttool",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wecopttool"
+  },
+  "weightedcalcs": {
+    "conda_name": "weightedcalcs",
+    "import_name": "weightedcalcs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weightedcalcs"
+  },
+  "weightedstats": {
+    "conda_name": "weightedstats",
+    "import_name": "weightedstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weightedstats"
+  },
+  "weldx": {
+    "conda_name": "weldx",
+    "import_name": "weldx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "weldx"
+  },
+  "welltestpy": {
+    "conda_name": "welltestpy",
+    "import_name": "welltestpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "welltestpy"
+  },
+  "wemake-python-styleguide": {
+    "conda_name": "wemake-python-styleguide",
+    "import_name": "wemake_python_styleguide",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wemake-python-styleguide"
+  },
+  "wera2netcdf": {
+    "conda_name": "wera2netcdf",
+    "import_name": "wera2netcdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wera2netcdf"
+  },
+  "west": {
+    "conda_name": "west",
+    "import_name": "west",
+    "mapping_source": "regro-bot",
+    "pypi_name": "west"
+  },
+  "wetlandmapper": {
+    "conda_name": "wetlandmapper",
+    "import_name": "wetlandmapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wetlandmapper"
+  },
+  "wexpect": {
+    "conda_name": "wexpect",
+    "import_name": "wexpect",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wexpect"
+  },
+  "wfastcgi": {
+    "conda_name": "wfastcgi",
+    "import_name": "wfastcgi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wfastcgi"
+  },
+  "wfdb": {
+    "conda_name": "wfdb",
+    "import_name": "wfdb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wfdb"
+  },
+  "wflow": {
+    "conda_name": "wflow",
+    "import_name": "wflow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wflow"
+  },
+  "wget": {
+    "conda_name": "python-wget",
+    "import_name": "wget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wget"
+  },
+  "wgetter": {
+    "conda_name": "wgetter",
+    "import_name": "wgetter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wgetter"
+  },
+  "wgpu": {
+    "conda_name": "wgpu-py",
+    "import_name": "wgpu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wgpu"
+  },
+  "whatrecord": {
+    "conda_name": "whatrecord",
+    "import_name": "whatrecord",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whatrecord"
+  },
+  "whatthepatch": {
+    "conda_name": "whatthepatch",
+    "import_name": "whatthepatch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whatthepatch"
+  },
+  "wheel": {
+    "conda_name": "wheel",
+    "import_name": "wheel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wheel"
+  },
+  "wheelhouse-uploader": {
+    "conda_name": "wheelhouse_uploader",
+    "import_name": "wheelhouse_uploader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wheelhouse-uploader"
+  },
+  "whey": {
+    "conda_name": "whey",
+    "import_name": "whey",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whey"
+  },
+  "whey-pth": {
+    "conda_name": "whey-pth",
+    "import_name": "whey_pth",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whey-pth"
+  },
+  "whichcraft": {
+    "conda_name": "whichcraft",
+    "import_name": "whichcraft",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whichcraft"
+  },
+  "whitebox": {
+    "conda_name": "whitebox",
+    "import_name": "os",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whitebox"
+  },
+  "whiteboxgui": {
+    "conda_name": "whiteboxgui",
+    "import_name": "whiteboxgui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whiteboxgui"
+  },
+  "whitenoise": {
+    "conda_name": "whitenoise",
+    "import_name": "whitenoise",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whitenoise"
+  },
+  "whl2conda": {
+    "conda_name": "whl2conda",
+    "import_name": "whl2conda.api",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whl2conda"
+  },
+  "wholeslidedata": {
+    "conda_name": "wholeslidedata",
+    "import_name": "wholeslidedata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wholeslidedata"
+  },
+  "whoosh": {
+    "conda_name": "whoosh",
+    "import_name": "whoosh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whoosh"
+  },
+  "whos-there": {
+    "conda_name": "whos-there",
+    "import_name": "whos_there",
+    "mapping_source": "regro-bot",
+    "pypi_name": "whos-there"
+  },
+  "widgetsnbextension": {
+    "conda_name": "widgetsnbextension",
+    "import_name": "widgetsnbextension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "widgetsnbextension"
+  },
+  "wield-bunch": {
+    "conda_name": "wield.bunch",
+    "import_name": "wield.bunch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wield-bunch"
+  },
+  "wield-declarative": {
+    "conda_name": "wield.declarative",
+    "import_name": "wield.declarative",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wield-declarative"
+  },
+  "wield-pytest": {
+    "conda_name": "wield.pytest",
+    "import_name": "wield.pytest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wield-pytest"
+  },
+  "wigners": {
+    "conda_name": "wigners",
+    "import_name": "wigners",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wigners"
+  },
+  "wikipedia": {
+    "conda_name": "wikipedia",
+    "import_name": "wikipedia",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wikipedia"
+  },
+  "wikipedia-api": {
+    "conda_name": "wikipedia-api",
+    "import_name": "wikipediaapi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wikipedia-api"
+  },
+  "wikipedia-ql": {
+    "conda_name": "wikipedia_ql",
+    "import_name": "wikipedia_ql",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wikipedia-ql"
+  },
+  "wilds": {
+    "conda_name": "wilds",
+    "import_name": "wilds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wilds"
+  },
+  "willow": {
+    "conda_name": "willow",
+    "import_name": "willow",
+    "mapping_source": "regro-bot",
+    "pypi_name": "willow"
+  },
+  "wily": {
+    "conda_name": "wily",
+    "import_name": "wily",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wily"
+  },
+  "win-inet-pton": {
+    "conda_name": "win_inet_pton",
+    "import_name": "win_inet_pton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "win-inet-pton"
+  },
+  "win-precise-time": {
+    "conda_name": "win-precise-time",
+    "import_name": "win_precise_time",
+    "mapping_source": "regro-bot",
+    "pypi_name": "win-precise-time"
+  },
+  "win32-setctime": {
+    "conda_name": "win32_setctime",
+    "import_name": "win32_setctime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "win32-setctime"
+  },
+  "wind-stats": {
+    "conda_name": "wind-stats",
+    "import_name": "wind_stats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wind-stats"
+  },
+  "windfreak": {
+    "conda_name": "windfreak",
+    "import_name": "windfreak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "windfreak"
+  },
+  "windmapper": {
+    "conda_name": "windmapper",
+    "import_name": "windmapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "windmapper"
+  },
+  "window-ops": {
+    "conda_name": "window-ops",
+    "import_name": "window_ops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "window-ops"
+  },
+  "windpowerlib": {
+    "conda_name": "windpowerlib",
+    "import_name": "windpowerlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "windpowerlib"
+  },
+  "windrose": {
+    "conda_name": "windrose",
+    "import_name": "windrose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "windrose"
+  },
+  "winfiletime": {
+    "conda_name": "winfiletime",
+    "import_name": "winfiletime",
+    "mapping_source": "regro-bot",
+    "pypi_name": "winfiletime"
+  },
+  "winkerberos": {
+    "conda_name": "winkerberos",
+    "import_name": "winkerberos",
+    "mapping_source": "regro-bot",
+    "pypi_name": "winkerberos"
+  },
+  "winloop": {
+    "conda_name": "winloop",
+    "import_name": "winloop",
+    "mapping_source": "regro-bot",
+    "pypi_name": "winloop"
+  },
+  "winter-theme": {
+    "conda_name": "winter-theme",
+    "import_name": "winter_theme",
+    "mapping_source": "regro-bot",
+    "pypi_name": "winter-theme"
+  },
+  "wirerope": {
+    "conda_name": "wirerope",
+    "import_name": "wirerope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wirerope"
+  },
+  "wireviz": {
+    "conda_name": "wireviz",
+    "import_name": "wireviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wireviz"
+  },
+  "wis2downloader": {
+    "conda_name": "wis2downloader",
+    "import_name": "wis2downloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wis2downloader"
+  },
+  "witty": {
+    "conda_name": "witty",
+    "import_name": "witty",
+    "mapping_source": "regro-bot",
+    "pypi_name": "witty"
+  },
+  "wiutils": {
+    "conda_name": "wiutils",
+    "import_name": "wiutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wiutils"
+  },
+  "wlighter": {
+    "conda_name": "wlighter",
+    "import_name": "wlighter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wlighter"
+  },
+  "wmctrl": {
+    "conda_name": "wmctrl",
+    "import_name": "wmctrl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wmctrl"
+  },
+  "wms-tile-get": {
+    "conda_name": "wms-tile-get",
+    "import_name": "scripts",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wms-tile-get"
+  },
+  "wn": {
+    "conda_name": "wn",
+    "import_name": "wn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wn"
+  },
+  "wofpy": {
+    "conda_name": "wofpy",
+    "import_name": "wof",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wofpy"
+  },
+  "wolframclient": {
+    "conda_name": "wolframclient",
+    "import_name": "wolframclient",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wolframclient"
+  },
+  "woodwork": {
+    "conda_name": "woodwork",
+    "import_name": "woodwork",
+    "mapping_source": "regro-bot",
+    "pypi_name": "woodwork"
+  },
+  "woops": {
+    "conda_name": "woops",
+    "import_name": "woops",
+    "mapping_source": "regro-bot",
+    "pypi_name": "woops"
+  },
+  "word2number": {
+    "conda_name": "word2number",
+    "import_name": "word2number",
+    "mapping_source": "regro-bot",
+    "pypi_name": "word2number"
+  },
+  "wordcloud": {
+    "conda_name": "wordcloud",
+    "import_name": "wordcloud",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wordcloud"
+  },
+  "wordfreq": {
+    "conda_name": "wordfreq",
+    "import_name": "wordfreq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wordfreq"
+  },
+  "wordninja": {
+    "conda_name": "wordninja",
+    "import_name": "wordninja",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wordninja"
+  },
+  "workalendar": {
+    "conda_name": "workalendar",
+    "import_name": "workalendar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "workalendar"
+  },
+  "workflows": {
+    "conda_name": "workflows",
+    "import_name": "workflows",
+    "mapping_source": "regro-bot",
+    "pypi_name": "workflows"
+  },
+  "workshop-demo": {
+    "conda_name": "workshop-demo",
+    "import_name": "workshop_demo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "workshop-demo"
+  },
+  "world2data": {
+    "conda_name": "world2data",
+    "import_name": "World_2_Data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "world2data"
+  },
+  "wpca": {
+    "conda_name": "wpca",
+    "import_name": "wpca",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wpca"
+  },
+  "wpextract": {
+    "conda_name": "wpextract",
+    "import_name": "wpextract",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wpextract"
+  },
+  "wq-io": {
+    "conda_name": "wq.io",
+    "import_name": "wq.io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wq-io"
+  },
+  "wradlib": {
+    "conda_name": "wradlib",
+    "import_name": "wradlib",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wradlib"
+  },
+  "wradlib-data": {
+    "conda_name": "wradlib_data",
+    "import_name": "wradlib_data",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wradlib-data"
+  },
+  "wrappy": {
+    "conda_name": "wrappy",
+    "import_name": "wrappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrappy"
+  },
+  "wrapspawner": {
+    "conda_name": "wrapspawner",
+    "import_name": "wrapspawner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrapspawner"
+  },
+  "wrapt": {
+    "conda_name": "wrapt",
+    "import_name": "wrapt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrapt"
+  },
+  "wrapt-timeout-decorator": {
+    "conda_name": "wrapt_timeout_decorator",
+    "import_name": "wrapt_timeout_decorator",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrapt-timeout-decorator"
+  },
+  "wraptile": {
+    "conda_name": "wraptile",
+    "import_name": "wraptile",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wraptile"
+  },
+  "wrds": {
+    "conda_name": "wrds",
+    "import_name": "wrds",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrds"
+  },
+  "wrighttools": {
+    "conda_name": "wrighttools",
+    "import_name": "WrightTools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wrighttools"
+  },
+  "writer-sdk": {
+    "conda_name": "writer-sdk",
+    "import_name": "writerai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "writer-sdk"
+  },
+  "written": {
+    "conda_name": "written",
+    "import_name": "written",
+    "mapping_source": "regro-bot",
+    "pypi_name": "written"
+  },
+  "ws3": {
+    "conda_name": "ws3",
+    "import_name": "ws3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ws3"
+  },
+  "ws4py": {
+    "conda_name": "ws4py",
+    "import_name": "ws4py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ws4py"
+  },
+  "wsgi-request-id": {
+    "conda_name": "wsgi-request-id",
+    "import_name": "wsgi_request_id",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsgi-request-id"
+  },
+  "wsgidav": {
+    "conda_name": "wsgidav",
+    "import_name": "wsgidav",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsgidav"
+  },
+  "wsgiproxy2": {
+    "conda_name": "wsgiproxy2",
+    "import_name": "wsgiproxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsgiproxy2"
+  },
+  "wsgitypes": {
+    "conda_name": "wsgitypes",
+    "import_name": "wsgitypes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsgitypes"
+  },
+  "wsidata": {
+    "conda_name": "wsidata",
+    "import_name": "wsidata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsidata"
+  },
+  "wsidicom": {
+    "conda_name": "wsidicom",
+    "import_name": "wsidicom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsidicom"
+  },
+  "wsinfer": {
+    "conda_name": "wsinfer",
+    "import_name": "wsinfer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsinfer"
+  },
+  "wsinfer-zoo": {
+    "conda_name": "wsinfer-zoo",
+    "import_name": "wsinfer_zoo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsinfer-zoo"
+  },
+  "wslink": {
+    "conda_name": "wslink",
+    "import_name": "wslink",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wslink"
+  },
+  "wslpath": {
+    "conda_name": "wslpath",
+    "import_name": "wslPath",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wslpath"
+  },
+  "wsproto": {
+    "conda_name": "wsproto",
+    "import_name": "wsproto",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wsproto"
+  },
+  "wtforms-appengine": {
+    "conda_name": "wtforms-appengine",
+    "import_name": "wtforms_appengine",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wtforms-appengine"
+  },
+  "wtforms-django": {
+    "conda_name": "wtforms-django",
+    "import_name": "wtforms_django",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wtforms-django"
+  },
+  "wtforms-json": {
+    "conda_name": "wtforms-json",
+    "import_name": "wtforms_json",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wtforms-json"
+  },
+  "wtforms-sqlalchemy": {
+    "conda_name": "wtforms-sqlalchemy",
+    "import_name": "wtforms_sqlalchemy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wtforms-sqlalchemy"
+  },
+  "wulffpack": {
+    "conda_name": "wulffpack",
+    "import_name": "wulffpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wulffpack"
+  },
+  "wurlitzer": {
+    "conda_name": "wurlitzer",
+    "import_name": "wurlitzer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wurlitzer"
+  },
+  "wurst": {
+    "conda_name": "wurst",
+    "import_name": "wurst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wurst"
+  },
+  "wwt-api-client": {
+    "conda_name": "wwt_api_client",
+    "import_name": "wwt_api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wwt-api-client"
+  },
+  "wwt-data-formats": {
+    "conda_name": "wwt_data_formats",
+    "import_name": "wwt_data_formats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wwt-data-formats"
+  },
+  "wwt-jupyterlab-extension": {
+    "conda_name": "wwt_jupyterlab_extension",
+    "import_name": "wwt_jupyterlab_extension",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wwt-jupyterlab-extension"
+  },
+  "wwt-kernel-data-relay": {
+    "conda_name": "wwt_kernel_data_relay",
+    "import_name": "wwt_kernel_data_relay",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wwt-kernel-data-relay"
+  },
+  "wxdata": {
+    "conda_name": "wxdata",
+    "import_name": "wxdata",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wxdata"
+  },
+  "wxee": {
+    "conda_name": "wxee",
+    "import_name": "wxee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wxee"
+  },
+  "wxmplot": {
+    "conda_name": "wxmplot",
+    "import_name": "wxmplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wxmplot"
+  },
+  "wxpython": {
+    "conda_name": "wxpython",
+    "import_name": "wx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wxpython"
+  },
+  "wxutils": {
+    "conda_name": "wxutils",
+    "import_name": "wxutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "wxutils"
+  },
+  "x-wr-timezone": {
+    "conda_name": "x-wr-timezone",
+    "import_name": "x_wr_timezone",
+    "mapping_source": "regro-bot",
+    "pypi_name": "x-wr-timezone"
+  },
+  "xagg": {
+    "conda_name": "xagg",
+    "import_name": "xagg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xagg"
+  },
+  "xai": {
+    "conda_name": "xai",
+    "import_name": "xai",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xai"
+  },
+  "xaitk-jatic": {
+    "conda_name": "xaitk-jatic",
+    "import_name": "xaitk_jatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xaitk-jatic"
+  },
+  "xaitk-saliency": {
+    "conda_name": "xaitk-saliency",
+    "import_name": "xaitk_saliency",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xaitk-saliency"
+  },
+  "xanadu-cloud-client": {
+    "conda_name": "xanadu-cloud-client",
+    "import_name": "xcc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xanadu-cloud-client"
+  },
+  "xarg-python": {
+    "conda_name": "xarg-python",
+    "import_name": "xarg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarg-python"
+  },
+  "xarpes": {
+    "conda_name": "xarpes",
+    "import_name": "xarpes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarpes"
+  },
+  "xarray-beam": {
+    "conda_name": "xarray-beam",
+    "import_name": "xarray_beam",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-beam"
+  },
+  "xarray-ceos-alos2": {
+    "conda_name": "xarray-ceos-alos2",
+    "import_name": "ceos_alos2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-ceos-alos2"
+  },
+  "xarray-dataclasses": {
+    "conda_name": "xarray-dataclasses",
+    "import_name": "xarray_dataclasses",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-dataclasses"
+  },
+  "xarray-datatree": {
+    "conda_name": "xarray-datatree",
+    "import_name": "datatree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-datatree"
+  },
+  "xarray-einstats": {
+    "conda_name": "xarray-einstats",
+    "import_name": "xarray_einstats",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-einstats"
+  },
+  "xarray-extras": {
+    "conda_name": "xarray-extras",
+    "import_name": "xarray_extras",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-extras"
+  },
+  "xarray-leaflet": {
+    "conda_name": "xarray_leaflet",
+    "import_name": "xarray_leaflet",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-leaflet"
+  },
+  "xarray-lmfit": {
+    "conda_name": "xarray-lmfit",
+    "import_name": "xarray_lmfit",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-lmfit"
+  },
+  "xarray-mongodb": {
+    "conda_name": "xarray_mongodb",
+    "import_name": "xarray_mongodb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-mongodb"
+  },
+  "xarray-regrid": {
+    "conda_name": "xarray-regrid",
+    "import_name": "xarray_regrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-regrid"
+  },
+  "xarray-safe-rcm": {
+    "conda_name": "xarray-safe-rcm",
+    "import_name": "safe_rcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-safe-rcm"
+  },
+  "xarray-safe-s1": {
+    "conda_name": "xarray-safe-s1",
+    "import_name": "safe_s1",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-safe-s1"
+  },
+  "xarray-schema": {
+    "conda_name": "xarray-schema",
+    "import_name": "xarray_schema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-schema"
+  },
+  "xarray-selafin": {
+    "conda_name": "xarray_selafin",
+    "import_name": "xarray_selafin",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-selafin"
+  },
+  "xarray-sentinel": {
+    "conda_name": "xarray-sentinel",
+    "import_name": "xarray_sentinel",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-sentinel"
+  },
+  "xarray-simlab": {
+    "conda_name": "xarray-simlab",
+    "import_name": "xsimlab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-simlab"
+  },
+  "xarray-spatial": {
+    "conda_name": "xarray-spatial",
+    "import_name": "xrspatial",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-spatial"
+  },
+  "xarray-subset-grid": {
+    "conda_name": "xarray-subset-grid",
+    "import_name": "xarray_subset_grid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-subset-grid"
+  },
+  "xarray-tensorstore": {
+    "conda_name": "xarray-tensorstore",
+    "import_name": "xarray_tensorstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarray-tensorstore"
+  },
+  "xarraymannkendall": {
+    "conda_name": "xarraymannkendall",
+    "import_name": "xarrayMannKendall",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarraymannkendall"
+  },
+  "xarrayutils": {
+    "conda_name": "xarrayutils",
+    "import_name": "xarrayutils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xarrayutils"
+  },
+  "xattr": {
+    "conda_name": "xattr",
+    "import_name": "xattr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xattr"
+  },
+  "xbatcher": {
+    "conda_name": "xbatcher",
+    "import_name": "xbatcher",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xbatcher"
+  },
+  "xbcausalforest": {
+    "conda_name": "xbcausalforest",
+    "import_name": "xbcausalforest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xbcausalforest"
+  },
+  "xbpch": {
+    "conda_name": "xbpch",
+    "import_name": "xbpch",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xbpch"
+  },
+  "xbudget": {
+    "conda_name": "xbudget",
+    "import_name": "xbudget",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xbudget"
+  },
+  "xclim": {
+    "conda_name": "xclim",
+    "import_name": "xclim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xclim"
+  },
+  "xcmocean": {
+    "conda_name": "xcmocean",
+    "import_name": "xcmocean",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xcmocean"
+  },
+  "xcollection": {
+    "conda_name": "xcollection",
+    "import_name": "xcollection",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xcollection"
+  },
+  "xcube-4d-viewer": {
+    "conda_name": "xcube-4d-viewer",
+    "import_name": "xcube_4d_viewer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xcube-4d-viewer"
+  },
+  "xdatasets": {
+    "conda_name": "xdatasets",
+    "import_name": "xdatasets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xdatasets"
+  },
+  "xdg": {
+    "conda_name": "xdg",
+    "import_name": "xdg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xdg"
+  },
+  "xdggs": {
+    "conda_name": "xdggs",
+    "import_name": "xdggs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xdggs"
+  },
+  "xdoctest": {
+    "conda_name": "xdoctest",
+    "import_name": "xdoctest",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xdoctest"
+  },
+  "xdsmjs": {
+    "conda_name": "xdsmjs",
+    "import_name": "xdsmjs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xdsmjs"
+  },
+  "xee": {
+    "conda_name": "xee",
+    "import_name": "xee",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xee"
+  },
+  "xenon": {
+    "conda_name": "xenon",
+    "import_name": "xenon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xenon"
+  },
+  "xenv": {
+    "conda_name": "xenv",
+    "import_name": "xenv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xenv"
+  },
+  "xeofs": {
+    "conda_name": "xeofs",
+    "import_name": "xeofs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xeofs"
+  },
+  "xerox": {
+    "conda_name": "xerox",
+    "import_name": "xerox",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xerox"
+  },
+  "xesmf": {
+    "conda_name": "xesmf",
+    "import_name": "xesmf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xesmf"
+  },
+  "xesn": {
+    "conda_name": "xesn",
+    "import_name": "xesn",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xesn"
+  },
+  "xfab": {
+    "conda_name": "xfab",
+    "import_name": "xfab",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xfab"
+  },
+  "xgboost-ray": {
+    "conda_name": "xgboost_ray",
+    "import_name": "xgboost_ray",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xgboost-ray"
+  },
+  "xgrads": {
+    "conda_name": "xgrads",
+    "import_name": "xgrads",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xgrads"
+  },
+  "xhistogram": {
+    "conda_name": "xhistogram",
+    "import_name": "xhistogram",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xhistogram"
+  },
+  "xhtml2pdf": {
+    "conda_name": "xhtml2pdf",
+    "import_name": "xhtml2pdf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xhtml2pdf"
+  },
+  "xhydro": {
+    "conda_name": "xhydro",
+    "import_name": "xhydro",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xhydro"
+  },
+  "xibs": {
+    "conda_name": "xibs",
+    "import_name": "xibs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xibs"
+  },
+  "ximage": {
+    "conda_name": "ximage",
+    "import_name": "ximage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ximage"
+  },
+  "xinvert": {
+    "conda_name": "xinvert",
+    "import_name": "xinvert",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xinvert"
+  },
+  "xkcd-cli": {
+    "conda_name": "xkcd-cli",
+    "import_name": "src",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xkcd-cli"
+  },
+  "xkcdpass": {
+    "conda_name": "xkcdpass",
+    "import_name": "xkcdpass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xkcdpass"
+  },
+  "xlandsat": {
+    "conda_name": "xlandsat",
+    "import_name": "xlandsat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlandsat"
+  },
+  "xlcompose": {
+    "conda_name": "xlcompose",
+    "import_name": "xlcompose",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlcompose"
+  },
+  "xllim": {
+    "conda_name": "xllim",
+    "import_name": "xllim",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xllim"
+  },
+  "xlrd3": {
+    "conda_name": "xlrd3",
+    "import_name": "xlrd3",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlrd3"
+  },
+  "xlsx2csv": {
+    "conda_name": "xlsx2csv",
+    "import_name": "xlsx2csv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlsx2csv"
+  },
+  "xlsxdatagrid": {
+    "conda_name": "xlsxdatagrid",
+    "import_name": "xlsxdatagrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlsxdatagrid"
+  },
+  "xlsxwriter": {
+    "conda_name": "xlsxwriter",
+    "import_name": "xlsxwriter",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlsxwriter"
+  },
+  "xlwings": {
+    "conda_name": "xlwings",
+    "import_name": "xlwings",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xlwings"
+  },
+  "xmacis2py": {
+    "conda_name": "xmacis2py",
+    "import_name": "xmacis2py",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmacis2py"
+  },
+  "xmidas": {
+    "conda_name": "xmidas",
+    "import_name": "xmidas",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmidas"
+  },
+  "xmip": {
+    "conda_name": "xmip",
+    "import_name": "xmip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmip"
+  },
+  "xmipy": {
+    "conda_name": "xmipy",
+    "import_name": "xmipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmipy"
+  },
+  "xmitgcm": {
+    "conda_name": "xmitgcm",
+    "import_name": "xmitgcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmitgcm"
+  },
+  "xmljson": {
+    "conda_name": "xmljson",
+    "import_name": "xmljson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmljson"
+  },
+  "xmlplot": {
+    "conda_name": "xmlplot",
+    "import_name": "xmlplot",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmlplot"
+  },
+  "xmlrunner": {
+    "conda_name": "xmlrunner",
+    "import_name": "xmlrunner",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmlrunner"
+  },
+  "xmlschema": {
+    "conda_name": "xmlschema",
+    "import_name": "xmlschema",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmlschema"
+  },
+  "xmlstore": {
+    "conda_name": "xmlstore",
+    "import_name": "xmlstore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmlstore"
+  },
+  "xmod": {
+    "conda_name": "xmod",
+    "import_name": "xmod",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmod"
+  },
+  "xmodem": {
+    "conda_name": "xmodem",
+    "import_name": "xmodem",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmodem"
+  },
+  "xmovie": {
+    "conda_name": "xmovie",
+    "import_name": "xmovie",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmovie"
+  },
+  "xmpppy": {
+    "conda_name": "xmpppy",
+    "import_name": "xmpp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xmpppy"
+  },
+  "xnat": {
+    "conda_name": "xnat",
+    "import_name": "xnat",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xnat"
+  },
+  "xncml": {
+    "conda_name": "xncml",
+    "import_name": "xncml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xncml"
+  },
+  "xnemogcm": {
+    "conda_name": "xnemogcm",
+    "import_name": "xnemogcm",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xnemogcm"
+  },
+  "xnumpy": {
+    "conda_name": "xnumpy",
+    "import_name": "xnumpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xnumpy"
+  },
+  "xoa": {
+    "conda_name": "xoa",
+    "import_name": "xoa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xoa"
+  },
+  "xoak": {
+    "conda_name": "xoak",
+    "import_name": "xoak",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xoak"
+  },
+  "xopen": {
+    "conda_name": "xopen",
+    "import_name": "xopen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xopen"
+  },
+  "xopt": {
+    "conda_name": "xopt",
+    "import_name": "xopt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xopt"
+  },
+  "xorjson": {
+    "conda_name": "xorjson",
+    "import_name": "xorjson",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xorjson"
+  },
+  "xover": {
+    "conda_name": "xover",
+    "import_name": "xover",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xover"
+  },
+  "xpdacq": {
+    "conda_name": "xpdacq",
+    "import_name": "xpdacq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpdacq"
+  },
+  "xpdconf": {
+    "conda_name": "xpdconf",
+    "import_name": "xpdconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpdconf"
+  },
+  "xpersist": {
+    "conda_name": "xpersist",
+    "import_name": "xpersist",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpersist"
+  },
+  "xphyle": {
+    "conda_name": "xphyle",
+    "import_name": "xphyle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xphyle"
+  },
+  "xplique": {
+    "conda_name": "xplique",
+    "import_name": "tests",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xplique"
+  },
+  "xproj": {
+    "conda_name": "xproj",
+    "import_name": "xproj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xproj"
+  },
+  "xpublish": {
+    "conda_name": "xpublish",
+    "import_name": "xpublish",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpublish"
+  },
+  "xpublish-edr": {
+    "conda_name": "xpublish-edr",
+    "import_name": "xpublish_edr",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpublish-edr"
+  },
+  "xpublish-intake-provider": {
+    "conda_name": "xpublish-intake-provider",
+    "import_name": "xpublish_intake_provider",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpublish-intake-provider"
+  },
+  "xpublish-opendap": {
+    "conda_name": "xpublish-opendap",
+    "import_name": "xpublish_opendap",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpublish-opendap"
+  },
+  "xpublish-wms": {
+    "conda_name": "xpublish-wms",
+    "import_name": "xpublish_wms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpublish-wms"
+  },
+  "xpystac": {
+    "conda_name": "xpystac",
+    "import_name": "xpystac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xpystac"
+  },
+  "xradar": {
+    "conda_name": "xradar",
+    "import_name": "xradar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xradar"
+  },
+  "xradarsat2": {
+    "conda_name": "xradarsat2",
+    "import_name": "xradarsat2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xradarsat2"
+  },
+  "xrayutilities": {
+    "conda_name": "xrayutilities",
+    "import_name": "xrayutilities",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrayutilities"
+  },
+  "xrf": {
+    "conda_name": "xrf",
+    "import_name": "xrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrf"
+  },
+  "xrf-tomo": {
+    "conda_name": "xrf-tomo",
+    "import_name": "xrf_tomo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrf-tomo"
+  },
+  "xroms": {
+    "conda_name": "xroms",
+    "import_name": "xroms",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xroms"
+  },
+  "xrst": {
+    "conda_name": "xrst",
+    "import_name": "xrst",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrst"
+  },
+  "xrt": {
+    "conda_name": "xrt",
+    "import_name": "xrt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrt"
+  },
+  "xrtpy": {
+    "conda_name": "xrtpy",
+    "import_name": "xrtpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrtpy"
+  },
+  "xrviz": {
+    "conda_name": "xrviz",
+    "import_name": "xrviz",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xrviz"
+  },
+  "xsar": {
+    "conda_name": "xsar",
+    "import_name": "xsar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xsar"
+  },
+  "xsarsea": {
+    "conda_name": "xsarsea",
+    "import_name": "xsarsea",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xsarsea"
+  },
+  "xscen": {
+    "conda_name": "xscen",
+    "import_name": "xscen",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xscen"
+  },
+  "xsdata-pydantic": {
+    "conda_name": "xsdata-pydantic",
+    "import_name": "xsdata_pydantic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xsdata-pydantic"
+  },
+  "xsdba": {
+    "conda_name": "xsdba",
+    "import_name": "xsdba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xsdba"
+  },
+  "xskillscore": {
+    "conda_name": "xskillscore",
+    "import_name": "xskillscore",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xskillscore"
+  },
+  "xstac": {
+    "conda_name": "xstac",
+    "import_name": "xstac",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xstac"
+  },
+  "xstatic": {
+    "conda_name": "xstatic",
+    "import_name": "xstatic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xstatic"
+  },
+  "xstatic-bootstrap": {
+    "conda_name": "xstatic-bootstrap",
+    "import_name": "xstatic.pkg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xstatic-bootstrap"
+  },
+  "xstatic-font-awesome": {
+    "conda_name": "xstatic-font-awesome",
+    "import_name": "xstatic.pkg.font_awesome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xstatic-font-awesome"
+  },
+  "xstatic-jquery": {
+    "conda_name": "xstatic-jquery",
+    "import_name": "xstatic.pkg.jquery",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xstatic-jquery"
+  },
+  "xsum": {
+    "conda_name": "xsum",
+    "import_name": "xsum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xsum"
+  },
+  "xtal2png": {
+    "conda_name": "xtal2png",
+    "import_name": "xtal2png",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xtal2png"
+  },
+  "xtiff": {
+    "conda_name": "xtiff",
+    "import_name": "xtiff",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xtiff"
+  },
+  "xtrude": {
+    "conda_name": "xtrude",
+    "import_name": "xtrude",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xtrude"
+  },
+  "xugrid": {
+    "conda_name": "xugrid",
+    "import_name": "xugrid",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xugrid"
+  },
+  "xvec": {
+    "conda_name": "xvec",
+    "import_name": "xvec",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xvec"
+  },
+  "xvfbwrapper": {
+    "conda_name": "xvfbwrapper",
+    "import_name": "xvfbwrapper",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xvfbwrapper"
+  },
+  "xwmb": {
+    "conda_name": "xwmb",
+    "import_name": "xwmb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xwmb"
+  },
+  "xwmt": {
+    "conda_name": "xwmt",
+    "import_name": "xwmt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xwmt"
+  },
+  "xwrf": {
+    "conda_name": "xwrf",
+    "import_name": "xwrf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xwrf"
+  },
+  "xxh-xxh": {
+    "conda_name": "xxh-xxh",
+    "import_name": "xxh_xxh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xxh-xxh"
+  },
+  "xxhash": {
+    "conda_name": "python-xxhash",
+    "import_name": "xxhash",
+    "mapping_source": "static",
+    "pypi_name": "xxhash"
+  },
+  "xymol": {
+    "conda_name": "xymol",
+    "import_name": "xymol",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xymol"
+  },
+  "xypattern": {
+    "conda_name": "xypattern",
+    "import_name": "xypattern",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xypattern"
+  },
+  "xyzpy": {
+    "conda_name": "xyzpy",
+    "import_name": "xyzpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xyzpy"
+  },
+  "xyzservices": {
+    "conda_name": "xyzservices",
+    "import_name": "xyzservices",
+    "mapping_source": "regro-bot",
+    "pypi_name": "xyzservices"
+  },
+  "yabadaba": {
+    "conda_name": "yabadaba",
+    "import_name": "yabadaba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yabadaba"
+  },
+  "yacman": {
+    "conda_name": "yacman",
+    "import_name": "yacman",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yacman"
+  },
+  "yacron": {
+    "conda_name": "yacron",
+    "import_name": "yacron",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yacron"
+  },
+  "yagmail": {
+    "conda_name": "yagmail",
+    "import_name": "yagmail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yagmail"
+  },
+  "yail": {
+    "conda_name": "yail",
+    "import_name": "yail",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yail"
+  },
+  "yake": {
+    "conda_name": "yake",
+    "import_name": "yake",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yake"
+  },
+  "yamale": {
+    "conda_name": "yamale",
+    "import_name": "yamale",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yamale"
+  },
+  "yaml-lsp": {
+    "conda_name": "yaml-lsp",
+    "import_name": "yaml_lsp",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaml-lsp"
+  },
+  "yaml2cli": {
+    "conda_name": "yaml2cli",
+    "import_name": "yaml2cli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaml2cli"
+  },
+  "yamlable": {
+    "conda_name": "yamlable",
+    "import_name": "yamlable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yamlable"
+  },
+  "yamlloader": {
+    "conda_name": "yamlloader",
+    "import_name": "yamlloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yamlloader"
+  },
+  "yamlordereddictloader": {
+    "conda_name": "yamlordereddictloader",
+    "import_name": "yamlordereddictloader",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yamlordereddictloader"
+  },
+  "yamlprocessor": {
+    "conda_name": "yamlprocessor",
+    "import_name": "yamlprocessor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yamlprocessor"
+  },
+  "yandex-query-client": {
+    "conda_name": "yandex-query-client",
+    "import_name": "yandex_query_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yandex-query-client"
+  },
+  "yaozarrs": {
+    "conda_name": "yaozarrs",
+    "import_name": "yaozarrs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaozarrs"
+  },
+  "yapic": {
+    "conda_name": "yapic",
+    "import_name": "yapic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yapic"
+  },
+  "yapic-io": {
+    "conda_name": "yapic-io",
+    "import_name": "yapic_io",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yapic-io"
+  },
+  "yappi": {
+    "conda_name": "yappi",
+    "import_name": "yappi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yappi"
+  },
+  "yapsy": {
+    "conda_name": "yapsy",
+    "import_name": "yapsy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yapsy"
+  },
+  "yaq-traits": {
+    "conda_name": "yaq-traits",
+    "import_name": "yaq_traits",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaq-traits"
+  },
+  "yaqc": {
+    "conda_name": "yaqc",
+    "import_name": "yaqc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqc"
+  },
+  "yaqc-bluesky": {
+    "conda_name": "yaqc-bluesky",
+    "import_name": "yaqc_bluesky",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqc-bluesky"
+  },
+  "yaqc-qtpy": {
+    "conda_name": "yaqc-qtpy",
+    "import_name": "yaqc_qtpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqc-qtpy"
+  },
+  "yaqd-acton": {
+    "conda_name": "yaqd-acton",
+    "import_name": "yaqd_acton",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-acton"
+  },
+  "yaqd-control": {
+    "conda_name": "yaqd-control",
+    "import_name": "yaqd_control",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-control"
+  },
+  "yaqd-core": {
+    "conda_name": "yaqd-core",
+    "import_name": "yaqd_core",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-core"
+  },
+  "yaqd-dwyer": {
+    "conda_name": "yaqd-dwyer",
+    "import_name": "yaqd_dwyer",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-dwyer"
+  },
+  "yaqd-edaq": {
+    "conda_name": "yaqd-edaq",
+    "import_name": "yaqd_edaq",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-edaq"
+  },
+  "yaqd-fakes": {
+    "conda_name": "yaqd-fakes",
+    "import_name": "yaqd_fakes",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-fakes"
+  },
+  "yaqd-gage": {
+    "conda_name": "yaqd-gage",
+    "import_name": "yaqd_gage",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-gage"
+  },
+  "yaqd-gdrive": {
+    "conda_name": "yaqd-gdrive",
+    "import_name": "yaqd_gdrive",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-gdrive"
+  },
+  "yaqd-horiba": {
+    "conda_name": "yaqd-horiba",
+    "import_name": "yaqd_horiba",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-horiba"
+  },
+  "yaqd-labjack": {
+    "conda_name": "yaqd-labjack",
+    "import_name": "yaqd_labjack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-labjack"
+  },
+  "yaqd-lightcon": {
+    "conda_name": "yaqd-lightcon",
+    "import_name": "yaqd_lightcon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-lightcon"
+  },
+  "yaqd-microchip": {
+    "conda_name": "yaqd-microchip",
+    "import_name": "yaqd_microchip",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-microchip"
+  },
+  "yaqd-mqtt": {
+    "conda_name": "yaqd-mqtt",
+    "import_name": "yaqd_mqtt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-mqtt"
+  },
+  "yaqd-new-era": {
+    "conda_name": "yaqd-new-era",
+    "import_name": "yaqd_new_era",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-new-era"
+  },
+  "yaqd-newport": {
+    "conda_name": "yaqd-newport",
+    "import_name": "yaqd_newport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-newport"
+  },
+  "yaqd-ni": {
+    "conda_name": "yaqd-ni",
+    "import_name": "yaqd_ni",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-ni"
+  },
+  "yaqd-omega": {
+    "conda_name": "yaqd-omega",
+    "import_name": "yaqd_omega",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-omega"
+  },
+  "yaqd-pmc": {
+    "conda_name": "yaqd-pmc",
+    "import_name": "yaqd_pmc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-pmc"
+  },
+  "yaqd-pololu": {
+    "conda_name": "yaqd-pololu",
+    "import_name": "yaqd_pololu",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-pololu"
+  },
+  "yaqd-rgb": {
+    "conda_name": "yaqd-rgb",
+    "import_name": "yaqd_rgb",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-rgb"
+  },
+  "yaqd-scpi": {
+    "conda_name": "yaqd-scpi",
+    "import_name": "yaqd_scpi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-scpi"
+  },
+  "yaqd-seabreeze": {
+    "conda_name": "yaqd-seabreeze",
+    "import_name": "yaqd_seabreeze",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-seabreeze"
+  },
+  "yaqd-system-monitor": {
+    "conda_name": "yaqd-system-monitor",
+    "import_name": "yaqd_system_monitor",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-system-monitor"
+  },
+  "yaqd-thorlabs": {
+    "conda_name": "yaqd-thorlabs",
+    "import_name": "yaqd_thorlabs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-thorlabs"
+  },
+  "yaqd-ti": {
+    "conda_name": "yaqd-ti",
+    "import_name": "yaqd_ti",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-ti"
+  },
+  "yaqd-vici": {
+    "conda_name": "yaqd-vici",
+    "import_name": "yaqd_vici",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-vici"
+  },
+  "yaqd-wright": {
+    "conda_name": "yaqd-wright",
+    "import_name": "yaqd_wright",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-wright"
+  },
+  "yaqd-zaber": {
+    "conda_name": "yaqd-zaber",
+    "import_name": "yaqd_zaber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yaqd-zaber"
+  },
+  "yardang": {
+    "conda_name": "yardang",
+    "import_name": "yardang",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yardang"
+  },
+  "yargy": {
+    "conda_name": "yargy",
+    "import_name": "yargy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yargy"
+  },
+  "yarl": {
+    "conda_name": "yarl",
+    "import_name": "yarl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yarl"
+  },
+  "yarn-api-client": {
+    "conda_name": "yarn-api-client",
+    "import_name": "yarn_api_client",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yarn-api-client"
+  },
+  "yasa": {
+    "conda_name": "yasa",
+    "import_name": "yasa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yasa"
+  },
+  "yatiml": {
+    "conda_name": "yatiml",
+    "import_name": "yatiml",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yatiml"
+  },
+  "yattag": {
+    "conda_name": "yattag",
+    "import_name": "yattag",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yattag"
+  },
+  "ydata-synthetic": {
+    "conda_name": "ydata-synthetic",
+    "import_name": "ydata_synthetic",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ydata-synthetic"
+  },
+  "yellowbrick": {
+    "conda_name": "yellowbrick",
+    "import_name": "yellowbrick",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yellowbrick"
+  },
+  "yesqa": {
+    "conda_name": "yesqa",
+    "import_name": "yesqa",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yesqa"
+  },
+  "yews": {
+    "conda_name": "yews",
+    "import_name": "yews",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yews"
+  },
+  "yfinance": {
+    "conda_name": "yfinance",
+    "import_name": "yfinance",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yfinance"
+  },
+  "yggdrasil-framework": {
+    "conda_name": "yggdrasil",
+    "import_name": "yggdrasil",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yggdrasil-framework"
+  },
+  "yieldfrom": {
+    "conda_name": "yieldfrom",
+    "import_name": "yieldfrom",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yieldfrom"
+  },
+  "yoda-tools": {
+    "conda_name": "yodatools",
+    "import_name": "yodatools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yoda-tools"
+  },
+  "yodapy": {
+    "conda_name": "yodapy",
+    "import_name": "yodapy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yodapy"
+  },
+  "you-get": {
+    "conda_name": "you-get",
+    "import_name": "you_get",
+    "mapping_source": "regro-bot",
+    "pypi_name": "you-get"
+  },
+  "yourdfpy": {
+    "conda_name": "yourdfpy",
+    "import_name": "yourdfpy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yourdfpy"
+  },
+  "youtokentome": {
+    "conda_name": "youtokentome",
+    "import_name": "youtokentome",
+    "mapping_source": "regro-bot",
+    "pypi_name": "youtokentome"
+  },
+  "youtube-dl": {
+    "conda_name": "youtube-dl",
+    "import_name": "youtube_dl",
+    "mapping_source": "regro-bot",
+    "pypi_name": "youtube-dl"
+  },
+  "youtube-search-python": {
+    "conda_name": "youtube-search-python",
+    "import_name": "youtubesearchpython",
+    "mapping_source": "regro-bot",
+    "pypi_name": "youtube-search-python"
+  },
+  "yoyo-migrations": {
+    "conda_name": "yoyo-migrations",
+    "import_name": "yoyo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yoyo-migrations"
+  },
+  "ypy-websocket": {
+    "conda_name": "ypy-websocket",
+    "import_name": "ypy_websocket",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ypy-websocket"
+  },
+  "ypywidgets": {
+    "conda_name": "ypywidgets",
+    "import_name": "ypywidgets",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ypywidgets"
+  },
+  "ypywidgets-textual": {
+    "conda_name": "ypywidgets-textual",
+    "import_name": "ypywidgets_textual",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ypywidgets-textual"
+  },
+  "yt": {
+    "conda_name": "yt",
+    "import_name": "yt",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yt"
+  },
+  "yt-astro-analysis": {
+    "conda_name": "yt-astro-analysis",
+    "import_name": "yt_astro_analysis",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yt-astro-analysis"
+  },
+  "yt-dlg": {
+    "conda_name": "yt-dlg",
+    "import_name": "youtube_dl_gui",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yt-dlg"
+  },
+  "yt-napari": {
+    "conda_name": "yt-napari",
+    "import_name": "yt_napari",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yt-napari"
+  },
+  "yte": {
+    "conda_name": "yte",
+    "import_name": "yte",
+    "mapping_source": "regro-bot",
+    "pypi_name": "yte"
+  },
+  "ytree": {
+    "conda_name": "ytree",
+    "import_name": "ytree",
+    "mapping_source": "regro-bot",
+    "pypi_name": "ytree"
+  },
+  "zabbix-utils": {
+    "conda_name": "zabbix_utils",
+    "import_name": "zabbix_utils",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zabbix-utils"
+  },
+  "zaber-serial": {
+    "conda_name": "zaber-serial",
+    "import_name": "zaber",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zaber-serial"
+  },
+  "zappend": {
+    "conda_name": "zappend",
+    "import_name": "zappend",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zappend"
+  },
+  "zappy": {
+    "conda_name": "zappy",
+    "import_name": "zappy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zappy"
+  },
+  "zarpaint": {
+    "conda_name": "zarpaint",
+    "import_name": "zarpaint",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zarpaint"
+  },
+  "zarr-checksum": {
+    "conda_name": "zarr-checksum",
+    "import_name": "zarr_checksum",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zarr-checksum"
+  },
+  "zarr-tools": {
+    "conda_name": "zarr-tools",
+    "import_name": "zarr_tools",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zarr-tools"
+  },
+  "zarrtraj": {
+    "conda_name": "zarrtraj",
+    "import_name": "zarrtraj",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zarrtraj"
+  },
+  "zbar-py": {
+    "conda_name": "zbar-py",
+    "import_name": "zbar",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zbar-py"
+  },
+  "zbarlight": {
+    "conda_name": "zbarlight",
+    "import_name": "zbarlight",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zbarlight"
+  },
+  "zc-buildout": {
+    "conda_name": "zc.buildout",
+    "import_name": "zc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zc-buildout"
+  },
+  "zc-lockfile": {
+    "conda_name": "zc.lockfile",
+    "import_name": "zc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zc-lockfile"
+  },
+  "zc-recipe-egg": {
+    "conda_name": "zc.recipe.egg",
+    "import_name": "zc",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zc-recipe-egg"
+  },
+  "zdaemon": {
+    "conda_name": "zdaemon",
+    "import_name": "zdaemon",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zdaemon"
+  },
+  "zdesk": {
+    "conda_name": "zdesk",
+    "import_name": "zdesk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zdesk"
+  },
+  "zeep": {
+    "conda_name": "zeep",
+    "import_name": "zeep",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zeep"
+  },
+  "zemaxglass": {
+    "conda_name": "zemaxglass",
+    "import_name": "ZemaxGlass",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zemaxglass"
+  },
+  "zen3geo": {
+    "conda_name": "zen3geo",
+    "import_name": "zen3geo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zen3geo"
+  },
+  "zencfg": {
+    "conda_name": "zencfg",
+    "import_name": "zencfg",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zencfg"
+  },
+  "zenlog": {
+    "conda_name": "zenlog",
+    "import_name": "zenlog",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zenlog"
+  },
+  "zenodo-backpack": {
+    "conda_name": "zenodo_backpack",
+    "import_name": "zenodo_backpack",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zenodo-backpack"
+  },
+  "zenodo-get": {
+    "conda_name": "zenodo_get",
+    "import_name": "zenodo_get",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zenodo-get"
+  },
+  "zernike": {
+    "conda_name": "zernike",
+    "import_name": "zernike",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zernike"
+  },
+  "zeroconf": {
+    "conda_name": "zeroconf",
+    "import_name": "zeroconf",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zeroconf"
+  },
+  "zeus-mcmc": {
+    "conda_name": "zeus-mcmc",
+    "import_name": "zeus",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zeus-mcmc"
+  },
+  "zfit-interface": {
+    "conda_name": "zfit_interface",
+    "import_name": "zfit_interface",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zfit-interface"
+  },
+  "zhconv": {
+    "conda_name": "zhconv",
+    "import_name": "zhconv",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zhconv"
+  },
+  "zict": {
+    "conda_name": "zict",
+    "import_name": "zict",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zict"
+  },
+  "zipfile-deflate64": {
+    "conda_name": "zipfile-deflate64",
+    "import_name": "zipfile_deflate64",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipfile-deflate64"
+  },
+  "zipfile2": {
+    "conda_name": "zipfile2",
+    "import_name": "zipfile2",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipfile2"
+  },
+  "zipfly": {
+    "conda_name": "zipfly",
+    "import_name": "zipfly",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipfly"
+  },
+  "zipline-reloaded": {
+    "conda_name": "zipline-reloaded",
+    "import_name": "zipline",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipline-reloaded"
+  },
+  "zipstream-new": {
+    "conda_name": "zipstream-new",
+    "import_name": "zipstream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipstream-new"
+  },
+  "zipstream-ng": {
+    "conda_name": "zipstream-ng",
+    "import_name": "zipstream",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zipstream-ng"
+  },
+  "zlib-ng": {
+    "conda_name": "python-zlib-ng",
+    "import_name": "zlib_ng",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zlib-ng"
+  },
+  "zmesh": {
+    "conda_name": "zmesh",
+    "import_name": "zmesh",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zmesh"
+  },
+  "zmq-anyio": {
+    "conda_name": "zmq-anyio",
+    "import_name": "zmq_anyio",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zmq-anyio"
+  },
+  "znfields": {
+    "conda_name": "znfields",
+    "import_name": "znfields",
+    "mapping_source": "regro-bot",
+    "pypi_name": "znfields"
+  },
+  "zocalo": {
+    "conda_name": "zocalo",
+    "import_name": "zocalo",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zocalo"
+  },
+  "zocalo-dls": {
+    "conda_name": "zocalo-dls",
+    "import_name": "zocalo_dls",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zocalo-dls"
+  },
+  "zodbpickle": {
+    "conda_name": "zodbpickle",
+    "import_name": "zodbpickle",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zodbpickle"
+  },
+  "zodburi": {
+    "conda_name": "zodburi",
+    "import_name": "zodburi",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zodburi"
+  },
+  "zodiax": {
+    "conda_name": "zodiax",
+    "import_name": "zodiax",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zodiax"
+  },
+  "zodipy": {
+    "conda_name": "zodipy",
+    "import_name": "zodipy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zodipy"
+  },
+  "zoofs": {
+    "conda_name": "zoofs",
+    "import_name": "zoofs",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zoofs"
+  },
+  "zope-component": {
+    "conda_name": "zope.component",
+    "import_name": "zope.component",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-component"
+  },
+  "zope-deferredimport": {
+    "conda_name": "zope.deferredimport",
+    "import_name": "zope.deferredimport",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-deferredimport"
+  },
+  "zope-deprecation": {
+    "conda_name": "zope.deprecation",
+    "import_name": "zope.deprecation",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-deprecation"
+  },
+  "zope-hookable": {
+    "conda_name": "zope.hookable",
+    "import_name": "zope.hookable",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-hookable"
+  },
+  "zope-index": {
+    "conda_name": "zope.index",
+    "import_name": "zope.index",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-index"
+  },
+  "zope-proxy": {
+    "conda_name": "zope.proxy",
+    "import_name": "zope.proxy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-proxy"
+  },
+  "zope-sqlalchemy": {
+    "conda_name": "zope.sqlalchemy",
+    "import_name": "zope",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zope-sqlalchemy"
+  },
+  "zopfli": {
+    "conda_name": "zopfli",
+    "import_name": "zopfli",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zopfli"
+  },
+  "zospy": {
+    "conda_name": "zospy",
+    "import_name": "zospy",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zospy"
+  },
+  "zstd": {
+    "conda_name": "python-zstd",
+    "import_name": "zstd",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zstd"
+  },
+  "zuko": {
+    "conda_name": "zuko",
+    "import_name": "zuko",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zuko"
+  },
+  "zvtk": {
+    "conda_name": "zvtk",
+    "import_name": "zvtk",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zvtk"
+  },
+  "zxpy": {
+    "conda_name": "zxpy",
+    "import_name": "zx",
+    "mapping_source": "regro-bot",
+    "pypi_name": "zxpy"
+  }
+}
\ No newline at end of file
diff --git a/src/main/resources/cvss/cvss-v4-lookup.json b/src/main/resources/cvss/cvss-v4-lookup.json
new file mode 100644
index 00000000..c8b01a82
--- /dev/null
+++ b/src/main/resources/cvss/cvss-v4-lookup.json
@@ -0,0 +1,272 @@
+{
+  "000000": 10,
+  "000001": 9.9,
+  "000010": 9.8,
+  "000011": 9.5,
+  "000020": 9.5,
+  "000021": 9.2,
+  "000100": 10,
+  "000101": 9.6,
+  "000110": 9.3,
+  "000111": 8.7,
+  "000120": 9.1,
+  "000121": 8.1,
+  "000200": 9.3,
+  "000201": 9,
+  "000210": 8.9,
+  "000211": 8,
+  "000220": 8.1,
+  "000221": 6.8,
+  "001000": 9.8,
+  "001001": 9.5,
+  "001010": 9.5,
+  "001011": 9.2,
+  "001020": 9,
+  "001021": 8.4,
+  "001100": 9.3,
+  "001101": 9.2,
+  "001110": 8.9,
+  "001111": 8.1,
+  "001120": 8.1,
+  "001121": 6.5,
+  "001200": 8.8,
+  "001201": 8,
+  "001210": 7.8,
+  "001211": 7,
+  "001220": 6.9,
+  "001221": 4.8,
+  "002001": 9.2,
+  "002011": 8.2,
+  "002021": 7.2,
+  "002101": 7.9,
+  "002111": 6.9,
+  "002121": 5,
+  "002201": 6.9,
+  "002211": 5.5,
+  "002221": 2.7,
+  "010000": 9.9,
+  "010001": 9.7,
+  "010010": 9.5,
+  "010011": 9.2,
+  "010020": 9.2,
+  "010021": 8.5,
+  "010100": 9.5,
+  "010101": 9.1,
+  "010110": 9,
+  "010111": 8.3,
+  "010120": 8.4,
+  "010121": 7.1,
+  "010200": 9.2,
+  "010201": 8.1,
+  "010210": 8.2,
+  "010211": 7.1,
+  "010220": 7.2,
+  "010221": 5.3,
+  "011000": 9.5,
+  "011001": 9.3,
+  "011010": 9.2,
+  "011011": 8.5,
+  "011020": 8.5,
+  "011021": 7.3,
+  "011100": 9.2,
+  "011101": 8.2,
+  "011110": 8,
+  "011111": 7.2,
+  "011120": 7,
+  "011121": 5.9,
+  "011200": 8.4,
+  "011201": 7,
+  "011210": 7.1,
+  "011211": 5.2,
+  "011220": 5,
+  "011221": 3,
+  "012001": 8.6,
+  "012011": 7.5,
+  "012021": 5.2,
+  "012101": 7.1,
+  "012111": 5.2,
+  "012121": 2.9,
+  "012201": 6.3,
+  "012211": 2.9,
+  "012221": 1.7,
+  "100000": 9.8,
+  "100001": 9.5,
+  "100010": 9.4,
+  "100011": 8.7,
+  "100020": 9.1,
+  "100021": 8.1,
+  "100100": 9.4,
+  "100101": 8.9,
+  "100110": 8.6,
+  "100111": 7.4,
+  "100120": 7.7,
+  "100121": 6.4,
+  "100200": 8.7,
+  "100201": 7.5,
+  "100210": 7.4,
+  "100211": 6.3,
+  "100220": 6.3,
+  "100221": 4.9,
+  "101000": 9.4,
+  "101001": 8.9,
+  "101010": 8.8,
+  "101011": 7.7,
+  "101020": 7.6,
+  "101021": 6.7,
+  "101100": 8.6,
+  "101101": 7.6,
+  "101110": 7.4,
+  "101111": 5.8,
+  "101120": 5.9,
+  "101121": 5,
+  "101200": 7.2,
+  "101201": 5.7,
+  "101210": 5.7,
+  "101211": 5.2,
+  "101220": 5.2,
+  "101221": 2.5,
+  "102001": 8.3,
+  "102011": 7,
+  "102021": 5.4,
+  "102101": 6.5,
+  "102111": 5.8,
+  "102121": 2.6,
+  "102201": 5.3,
+  "102211": 2.1,
+  "102221": 1.3,
+  "110000": 9.5,
+  "110001": 9,
+  "110010": 8.8,
+  "110011": 7.6,
+  "110020": 7.6,
+  "110021": 7,
+  "110100": 9,
+  "110101": 7.7,
+  "110110": 7.5,
+  "110111": 6.2,
+  "110120": 6.1,
+  "110121": 5.3,
+  "110200": 7.7,
+  "110201": 6.6,
+  "110210": 6.8,
+  "110211": 5.9,
+  "110220": 5.2,
+  "110221": 3,
+  "111000": 8.9,
+  "111001": 7.8,
+  "111010": 7.6,
+  "111011": 6.7,
+  "111020": 6.2,
+  "111021": 5.8,
+  "111100": 7.4,
+  "111101": 5.9,
+  "111110": 5.7,
+  "111111": 5.7,
+  "111120": 4.7,
+  "111121": 2.3,
+  "111200": 6.1,
+  "111201": 5.2,
+  "111210": 5.7,
+  "111211": 2.9,
+  "111220": 2.4,
+  "111221": 1.6,
+  "112001": 7.1,
+  "112011": 5.9,
+  "112021": 3,
+  "112101": 5.8,
+  "112111": 2.6,
+  "112121": 1.5,
+  "112201": 2.3,
+  "112211": 1.3,
+  "112221": 0.6,
+  "200000": 9.3,
+  "200001": 8.7,
+  "200010": 8.6,
+  "200011": 7.2,
+  "200020": 7.5,
+  "200021": 5.8,
+  "200100": 8.6,
+  "200101": 7.4,
+  "200110": 7.4,
+  "200111": 6.1,
+  "200120": 5.6,
+  "200121": 3.4,
+  "200200": 7,
+  "200201": 5.4,
+  "200210": 5.2,
+  "200211": 4,
+  "200220": 4,
+  "200221": 2.2,
+  "201000": 8.5,
+  "201001": 7.5,
+  "201010": 7.4,
+  "201011": 5.5,
+  "201020": 6.2,
+  "201021": 5.1,
+  "201100": 7.2,
+  "201101": 5.7,
+  "201110": 5.5,
+  "201111": 4.1,
+  "201120": 4.6,
+  "201121": 1.9,
+  "201200": 5.3,
+  "201201": 3.6,
+  "201210": 3.4,
+  "201211": 1.9,
+  "201220": 1.9,
+  "201221": 0.8,
+  "202001": 6.4,
+  "202011": 5.1,
+  "202021": 2,
+  "202101": 4.7,
+  "202111": 2.1,
+  "202121": 1.1,
+  "202201": 2.4,
+  "202211": 0.9,
+  "202221": 0.4,
+  "210000": 8.8,
+  "210001": 7.5,
+  "210010": 7.3,
+  "210011": 5.3,
+  "210020": 6,
+  "210021": 5,
+  "210100": 7.3,
+  "210101": 5.5,
+  "210110": 5.9,
+  "210111": 4,
+  "210120": 4.1,
+  "210121": 2,
+  "210200": 5.4,
+  "210201": 4.3,
+  "210210": 4.5,
+  "210211": 2.2,
+  "210220": 2,
+  "210221": 1.1,
+  "211000": 7.5,
+  "211001": 5.5,
+  "211010": 5.8,
+  "211011": 4.5,
+  "211020": 4,
+  "211021": 2.1,
+  "211100": 6.1,
+  "211101": 5.1,
+  "211110": 4.8,
+  "211111": 1.8,
+  "211120": 2,
+  "211121": 0.9,
+  "211200": 4.6,
+  "211201": 1.8,
+  "211210": 1.7,
+  "211211": 0.7,
+  "211220": 0.8,
+  "211221": 0.2,
+  "212001": 5.3,
+  "212011": 2.4,
+  "212021": 1.4,
+  "212101": 2.4,
+  "212111": 1.2,
+  "212121": 0.5,
+  "212201": 1,
+  "212211": 0.3,
+  "212221": 0.1
+}
diff --git a/src/main/resources/db/ai_cache_hit_stats.sql b/src/main/resources/db/ai_cache_hit_stats.sql
new file mode 100644
index 00000000..bf33e8ba
--- /dev/null
+++ b/src/main/resources/db/ai_cache_hit_stats.sql
@@ -0,0 +1,4 @@
+-- AI context-hash cache hit/miss counters (run once on PostgreSQL when ddl-auto=validate).
+
+ALTER TABLE ai_daily_usage ADD COLUMN IF NOT EXISTS cache_hits INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE ai_daily_usage ADD COLUMN IF NOT EXISTS cache_misses INTEGER NOT NULL DEFAULT 0;
diff --git a/src/main/resources/db/audit_log_integrity_hash_chain.sql b/src/main/resources/db/audit_log_integrity_hash_chain.sql
new file mode 100644
index 00000000..f517e65a
--- /dev/null
+++ b/src/main/resources/db/audit_log_integrity_hash_chain.sql
@@ -0,0 +1,8 @@
+-- Audit log integrity hash chain (ddl-auto=validate reference).
+-- Run on PostgreSQL when Flyway is disabled.
+-- Statements are idempotent so they are safe to reapply.
+
+ALTER TABLE audit_logs ADD COLUMN IF NOT EXISTS prev_hash VARCHAR(64);
+ALTER TABLE audit_logs ADD COLUMN IF NOT EXISTS hash VARCHAR(64);
+
+CREATE INDEX IF NOT EXISTS ix_audit_logs_hash ON audit_logs (hash);
diff --git a/src/main/resources/db/cache_invalidation.sql b/src/main/resources/db/cache_invalidation.sql
new file mode 100644
index 00000000..2bed5af5
--- /dev/null
+++ b/src/main/resources/db/cache_invalidation.sql
@@ -0,0 +1,8 @@
+-- ddl-auto reference for V27__cache_invalidation.sql
+-- One row per logical JVM-local (Caffeine) cache; version bumps propagate invalidations
+-- across instances via polling.
+create table if not exists cache_invalidation (
+    cache_name varchar(100) primary key,
+    version bigint not null,
+    updated_at timestamp not null
+);
diff --git a/src/main/resources/db/ccpp_coverage.sql b/src/main/resources/db/ccpp_coverage.sql
new file mode 100644
index 00000000..74b75120
--- /dev/null
+++ b/src/main/resources/db/ccpp_coverage.sql
@@ -0,0 +1,4 @@
+-- C/C++ real coverage reference script.
+-- Run once on PostgreSQL when ddl-auto=validate. Idempotent.
+
+ALTER TABLE libraries ADD COLUMN IF NOT EXISTS cpe TEXT;
diff --git a/src/main/resources/db/cve_sources.sql b/src/main/resources/db/cve_sources.sql
new file mode 100644
index 00000000..6c7d8ea5
--- /dev/null
+++ b/src/main/resources/db/cve_sources.sql
@@ -0,0 +1,13 @@
+-- CVE multi-source attribution + CPE match confidence reference script.
+-- Run once on PostgreSQL when ddl-auto=validate. All statements are idempotent.
+
+ALTER TABLE library_cves ADD COLUMN IF NOT EXISTS severity_conflict BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE library_cves ADD COLUMN IF NOT EXISTS match_confidence VARCHAR(10);
+
+CREATE TABLE IF NOT EXISTS library_cve_sources (
+    cve_id BIGINT       NOT NULL REFERENCES library_cves(id) ON DELETE CASCADE,
+    source VARCHAR(20)  NOT NULL,
+    PRIMARY KEY (cve_id, source)
+);
+
+CREATE INDEX IF NOT EXISTS idx_library_cve_sources_cve_id ON library_cve_sources (cve_id);
diff --git a/src/main/resources/db/database_mutation_locks.sql b/src/main/resources/db/database_mutation_locks.sql
new file mode 100644
index 00000000..8b2226d9
--- /dev/null
+++ b/src/main/resources/db/database_mutation_locks.sql
@@ -0,0 +1,3 @@
+CREATE TABLE IF NOT EXISTS database_mutation_locks (id BIGINT PRIMARY KEY);
+INSERT INTO database_mutation_locks (id) SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM database_mutation_locks WHERE id = 1);
+INSERT INTO database_mutation_locks (id) SELECT 2 WHERE NOT EXISTS (SELECT 1 FROM database_mutation_locks WHERE id = 2);
diff --git a/src/main/resources/db/durable_import_jobs.sql b/src/main/resources/db/durable_import_jobs.sql
new file mode 100644
index 00000000..9d545599
--- /dev/null
+++ b/src/main/resources/db/durable_import_jobs.sql
@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS import_coordinator (id BIGINT PRIMARY KEY);
+INSERT INTO import_coordinator (id) SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM import_coordinator WHERE id = 1);
+CREATE TABLE IF NOT EXISTS import_jobs (
+    id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+    job_id VARCHAR(36) NOT NULL UNIQUE,
+    owner_id BIGINT NOT NULL,
+    repo_key VARCHAR(64) NOT NULL,
+    worker_id VARCHAR(36) NOT NULL,
+    phase VARCHAR(20) NOT NULL,
+    snapshot_json TEXT NOT NULL,
+    lease_until TIMESTAMP WITH TIME ZONE NOT NULL,
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    finished_at TIMESTAMP WITH TIME ZONE,
+    canceled BOOLEAN NOT NULL DEFAULT FALSE,
+    worker_active BOOLEAN NOT NULL DEFAULT FALSE
+);
+CREATE INDEX IF NOT EXISTS idx_import_jobs_owner ON import_jobs(owner_id);
+CREATE INDEX IF NOT EXISTS idx_import_jobs_lease ON import_jobs(lease_until);
diff --git a/src/main/resources/db/hot_path_indexes.sql b/src/main/resources/db/hot_path_indexes.sql
new file mode 100644
index 00000000..ad94b651
--- /dev/null
+++ b/src/main/resources/db/hot_path_indexes.sql
@@ -0,0 +1,25 @@
+-- Hot-path index backfill (run once on PostgreSQL when ddl-auto=validate).
+-- Hibernate ddl-auto=update applies the entity-annotated indexes automatically in local dev;
+-- this script mirrors Flyway migration V12 for production deployments.
+-- All statements are idempotent (IF NOT EXISTS).
+
+CREATE INDEX IF NOT EXISTS idx_scan_results_project_status_scanned
+    ON scan_results (project_id, status, scanned_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_scan_results_project_scanned
+    ON scan_results (project_id, scanned_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_scan_results_status_scanned
+    ON scan_results (status, scanned_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_project_members_user_id
+    ON project_members (user_id);
+
+CREATE INDEX IF NOT EXISTS idx_projects_deleted_at
+    ON projects (deleted_at);
+
+CREATE INDEX IF NOT EXISTS idx_api_keys_project_id
+    ON api_keys (project_id);
+
+CREATE INDEX IF NOT EXISTS idx_user_vcs_connections_user_id
+    ON user_vcs_connections (user_id);
diff --git a/src/main/resources/db/migration/V10__spring_session_and_shedlock.sql b/src/main/resources/db/migration/V10__spring_session_and_shedlock.sql
new file mode 100644
index 00000000..6a959565
--- /dev/null
+++ b/src/main/resources/db/migration/V10__spring_session_and_shedlock.sql
@@ -0,0 +1,43 @@
+-- Horizontal scaling / HA: cluster-wide HTTP session storage (Spring Session JDBC)
+-- and a lock table for @Scheduled jobs (ShedLock), so a multi-instance deployment behind a load
+-- balancer keeps users logged in on failover and never runs the nightly monitoring / defer-expiry /
+-- trash-cleanup jobs more than once per cycle. Both are opt-in — see OSWL_SESSION_STORE_TYPE and
+-- OSWL_SCHEDULER_LOCK_ENABLED in application.yaml; a single-instance deployment can leave this
+-- schema unused (in-memory session registry, no scheduler lock).
+--
+-- Table/column names and shapes match the upstream defaults exactly (Spring Session's
+-- JdbcIndexedSessionRepository and ShedLock's JdbcTemplateLockProvider both issue unquoted SQL
+-- against these identifiers) — do not rename without also overriding the corresponding
+-- spring.session.jdbc.* / LockProvider table-name properties.
+
+CREATE TABLE IF NOT EXISTS spring_session (
+    primary_id CHAR(36) NOT NULL,
+    session_id CHAR(36) NOT NULL,
+    creation_time BIGINT NOT NULL,
+    last_access_time BIGINT NOT NULL,
+    max_inactive_interval INT NOT NULL,
+    expiry_time BIGINT NOT NULL,
+    principal_name VARCHAR(100),
+    CONSTRAINT spring_session_pk PRIMARY KEY (primary_id)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS spring_session_ix1 ON spring_session (session_id);
+CREATE INDEX IF NOT EXISTS spring_session_ix2 ON spring_session (expiry_time);
+CREATE INDEX IF NOT EXISTS spring_session_ix3 ON spring_session (principal_name);
+
+CREATE TABLE IF NOT EXISTS spring_session_attributes (
+    session_primary_id CHAR(36) NOT NULL,
+    attribute_name VARCHAR(200) NOT NULL,
+    attribute_bytes BYTEA NOT NULL,
+    CONSTRAINT spring_session_attributes_pk PRIMARY KEY (session_primary_id, attribute_name),
+    CONSTRAINT spring_session_attributes_fk FOREIGN KEY (session_primary_id)
+        REFERENCES spring_session (primary_id) ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS shedlock (
+    name VARCHAR(64) NOT NULL,
+    lock_until TIMESTAMP NOT NULL,
+    locked_at TIMESTAMP NOT NULL,
+    locked_by VARCHAR(255) NOT NULL,
+    PRIMARY KEY (name)
+);
diff --git a/src/main/resources/db/migration/V11__org_team_hierarchy.sql b/src/main/resources/db/migration/V11__org_team_hierarchy.sql
new file mode 100644
index 00000000..678c80e9
--- /dev/null
+++ b/src/main/resources/db/migration/V11__org_team_hierarchy.sql
@@ -0,0 +1,61 @@
+-- Organization → Team → Project hierarchy with team-scoped access grants.
+--
+-- Teams group projects so access can be granted once per team (team_members) instead of
+-- once per project (project_members). The two grant paths are combined by OR in
+-- ProjectAccessService, so existing project_members rows keep working unchanged.
+--
+-- Data migration: every existing project is assigned to a "Default" team inside the single
+-- "Default Organization" row, keeping pre-migration access identical (team grant or direct
+-- project membership). Teams nest at most two levels — enforced by TeamService, not the schema.
+--
+-- All statements are idempotent (IF NOT EXISTS / WHERE NOT EXISTS) so this migration is safe
+-- to (re)apply. db/org_team_hierarchy.sql is the matching ddl-auto=validate reference script.
+
+CREATE TABLE IF NOT EXISTS organizations (
+    id          BIGSERIAL PRIMARY KEY,
+    name        VARCHAR(200) NOT NULL,
+    created_at  TIMESTAMP    NOT NULL DEFAULT now()
+);
+
+-- Single-organization deployment: exactly one row.
+INSERT INTO organizations (name, created_at)
+SELECT 'Default Organization', now()
+WHERE NOT EXISTS (SELECT 1 FROM organizations);
+
+CREATE TABLE IF NOT EXISTS teams (
+    id              BIGSERIAL PRIMARY KEY,
+    organization_id BIGINT       NOT NULL REFERENCES organizations(id),
+    name            VARCHAR(200) NOT NULL,
+    description     VARCHAR(1000),
+    parent_team_id  BIGINT       REFERENCES teams(id) ON DELETE SET NULL,
+    created_at      TIMESTAMP    NOT NULL DEFAULT now(),
+    CONSTRAINT uq_teams_org_name UNIQUE (organization_id, name)
+);
+CREATE INDEX IF NOT EXISTS idx_teams_parent_team_id ON teams (parent_team_id);
+
+-- Every org gets a "Default" team so pre-hierarchy projects have somewhere to land.
+INSERT INTO teams (organization_id, name, description, created_at)
+SELECT o.id, 'Default', 'Projects created before teams were introduced.', now()
+FROM organizations o
+WHERE NOT EXISTS (SELECT 1 FROM teams t WHERE t.organization_id = o.id AND t.name = 'Default');
+
+CREATE TABLE IF NOT EXISTS team_members (
+    id          BIGSERIAL PRIMARY KEY,
+    team_id     BIGINT      NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
+    user_id     BIGINT      NOT NULL,
+    role        VARCHAR(20) NOT NULL DEFAULT 'MEMBER',
+    created_at  TIMESTAMP   NOT NULL DEFAULT now(),
+    CONSTRAINT uq_team_members_team_user UNIQUE (team_id, user_id)
+);
+CREATE INDEX IF NOT EXISTS idx_team_members_user_id ON team_members (user_id);
+
+ALTER TABLE projects ADD COLUMN IF NOT EXISTS team_id BIGINT REFERENCES teams(id) ON DELETE SET NULL;
+ALTER TABLE projects ADD COLUMN IF NOT EXISTS tags VARCHAR(500);
+CREATE INDEX IF NOT EXISTS idx_projects_team_id ON projects (team_id);
+
+-- Fold all existing projects into the Default team. Direct project_members grants are
+-- untouched, so access after migration is identical to access before it.
+UPDATE projects
+SET team_id = (SELECT t.id FROM teams t WHERE t.name = 'Default' ORDER BY t.id LIMIT 1)
+WHERE team_id IS NULL
+  AND EXISTS (SELECT 1 FROM teams t WHERE t.name = 'Default');
diff --git a/src/main/resources/db/migration/V12__hot_path_indexes.sql b/src/main/resources/db/migration/V12__hot_path_indexes.sql
new file mode 100644
index 00000000..c0fdc993
--- /dev/null
+++ b/src/main/resources/db/migration/V12__hot_path_indexes.sql
@@ -0,0 +1,44 @@
+-- Hot-path index backfill.
+--
+-- All statements are idempotent (IF NOT EXISTS), matching the V2+ convention, so this is a
+-- no-op wherever an index already exists (e.g. idx_project_members_user_id on databases built
+-- from the V1 baseline or by ddl-auto=update, which picked it up from the entity annotation).
+
+-- scan_results had no index declaration at all. This composite serves the version-history and
+-- risk-trend queries: ScanResultRepository.findCompletedByProjectId and findRecentCompleted
+-- (WHERE project_id = ? AND status = 'COMPLETED' ORDER BY scanned_at DESC).
+CREATE INDEX IF NOT EXISTS idx_scan_results_project_status_scanned
+    ON scan_results (project_id, status, scanned_at DESC);
+
+-- Serves project_id-only scans ordered by scanned_at across mixed statuses, which the composite
+-- above cannot order: ScanResultRepository.findLatestByProjectId (status polling banner),
+-- findAllByProjectIdOrderByScannedAtDesc (scan history page), findByProjectIdAndVersion (upsert).
+CREATE INDEX IF NOT EXISTS idx_scan_results_project_scanned
+    ON scan_results (project_id, scanned_at DESC);
+
+-- Serves the AI insight backfill: ScanResultRepository.findTop15ByStatusOrderByScannedAtDesc
+-- (WHERE status = ? ORDER BY scanned_at DESC across all projects).
+CREATE INDEX IF NOT EXISTS idx_scan_results_status_scanned
+    ON scan_results (status, scanned_at DESC);
+
+-- project_members is hit on every permission check. Normally already present (declared on the
+-- entity and in the V1 baseline); included defensively for pre-baseline deployments.
+-- Serves ProjectMemberRepository.findProjectIdsByUserId, findAccessibleProjectIds, deleteByUserId.
+CREATE INDEX IF NOT EXISTS idx_project_members_user_id
+    ON project_members (user_id);
+
+-- All project list/search/trash/auto-cleanup queries filter on deleted_at:
+-- ProjectRepository.findAllByDeletedAtIsNullOrderByCreatedAtDesc (list),
+-- findAllByDeletedAtIsNotNullOrderByDeletedAtAsc (trash), findAllByDeletedAtBefore (cleanup).
+CREATE INDEX IF NOT EXISTS idx_projects_deleted_at
+    ON projects (deleted_at);
+
+-- API keys are listed/counted per project on the settings page:
+-- ApiKeyRepository.findByProjectIdOrderByCreatedAtDesc, countByProjectId.
+CREATE INDEX IF NOT EXISTS idx_api_keys_project_id
+    ON api_keys (project_id);
+
+-- VCS connections are loaded per user on the VCS settings page and on user deletion:
+-- UserVcsConnectionRepository.findByUserIdAndActiveTrue, deleteByUser_Id.
+CREATE INDEX IF NOT EXISTS idx_user_vcs_connections_user_id
+    ON user_vcs_connections (user_id);
diff --git a/src/main/resources/db/migration/V13__saml_scim.sql b/src/main/resources/db/migration/V13__saml_scim.sql
new file mode 100644
index 00000000..16daa0b3
--- /dev/null
+++ b/src/main/resources/db/migration/V13__saml_scim.sql
@@ -0,0 +1,14 @@
+-- SAML 2.0 and SCIM 2.0 support.
+--
+-- 1. API keys gain a scope column so the existing api_keys table can also host
+--    dedicated SCIM provisioning tokens. SCIM tokens are not bound to a project,
+--    so project_id becomes nullable.
+--
+-- 2. No SAML-specific tables are required: IdP metadata and verification credentials
+--    are injected via spring.security.saml2.relyingparty.registration.* properties.
+
+ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS scope VARCHAR(20) NOT NULL DEFAULT 'PROJECT';
+ALTER TABLE api_keys ALTER COLUMN project_id DROP NOT NULL;
+
+-- Help the SCIM auth interceptor look up SCIM-only keys quickly.
+CREATE INDEX IF NOT EXISTS idx_api_keys_scope ON api_keys (scope);
diff --git a/src/main/resources/db/migration/V14__webhook_settings.sql b/src/main/resources/db/migration/V14__webhook_settings.sql
new file mode 100644
index 00000000..f525f8ce
--- /dev/null
+++ b/src/main/resources/db/migration/V14__webhook_settings.sql
@@ -0,0 +1,36 @@
+-- OsWL v1.0.5 — Slack/Teams incoming webhook notification settings and delivery history.
+--
+-- Flyway V14 (reserved). The statements are idempotent so they are safe to reapply.
+
+-- ── Webhook configuration (single-row settings) ──
+CREATE TABLE IF NOT EXISTS webhook_settings (
+    id                       BIGSERIAL PRIMARY KEY,
+    provider                 VARCHAR(20)  NOT NULL,
+    webhook_url              VARCHAR(1000),
+    enabled                  BOOLEAN      NOT NULL DEFAULT FALSE,
+    notify_new_cve           BOOLEAN      NOT NULL DEFAULT TRUE,
+    notify_gate_failure      BOOLEAN      NOT NULL DEFAULT TRUE,
+    notify_scan_failure      BOOLEAN      NOT NULL DEFAULT TRUE,
+    notify_waiver_expiry     BOOLEAN      NOT NULL DEFAULT TRUE,
+    created_at               TIMESTAMP,
+    updated_at               TIMESTAMP
+);
+
+-- ── Webhook delivery history (retry / failure exposure) ──
+CREATE TABLE IF NOT EXISTS webhook_deliveries (
+    id               BIGSERIAL PRIMARY KEY,
+    event_type       VARCHAR(30)  NOT NULL,
+    project_id       BIGINT,
+    project_name     VARCHAR(160),
+    reference_id     VARCHAR(40),
+    status           VARCHAR(20)  NOT NULL,
+    http_status      INTEGER,
+    error_message    VARCHAR(500),
+    retry_count      INTEGER      NOT NULL DEFAULT 0,
+    payload_summary  VARCHAR(500),
+    created_at       TIMESTAMP    NOT NULL DEFAULT now()
+);
+
+CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_created_at ON webhook_deliveries (created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_status ON webhook_deliveries (status);
+CREATE INDEX IF NOT EXISTS idx_webhook_deliveries_event_type ON webhook_deliveries (event_type);
diff --git a/src/main/resources/db/migration/V15__cve_sources.sql b/src/main/resources/db/migration/V15__cve_sources.sql
new file mode 100644
index 00000000..23fcd8dc
--- /dev/null
+++ b/src/main/resources/db/migration/V15__cve_sources.sql
@@ -0,0 +1,17 @@
+-- CVE multi-source attribution + CPE match confidence.
+--
+-- CVEs can now be contributed by OSV, GitHub Advisory, and NVD. Each contributing source
+-- is recorded in library_cve_sources so the UI can show "where this finding came from".
+-- severity_conflict flags cases where sources disagree on severity.
+-- match_confidence is used for CPE-based NVD lookups on vendored/system libraries.
+
+ALTER TABLE library_cves ADD COLUMN IF NOT EXISTS severity_conflict BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE library_cves ADD COLUMN IF NOT EXISTS match_confidence VARCHAR(10);
+
+CREATE TABLE IF NOT EXISTS library_cve_sources (
+    cve_id BIGINT       NOT NULL REFERENCES library_cves(id) ON DELETE CASCADE,
+    source VARCHAR(20)  NOT NULL,
+    PRIMARY KEY (cve_id, source)
+);
+
+CREATE INDEX IF NOT EXISTS idx_library_cve_sources_cve_id ON library_cve_sources (cve_id);
diff --git a/src/main/resources/db/migration/V16__ccpp_coverage.sql b/src/main/resources/db/migration/V16__ccpp_coverage.sql
new file mode 100644
index 00000000..73a4ffe3
--- /dev/null
+++ b/src/main/resources/db/migration/V16__ccpp_coverage.sql
@@ -0,0 +1,7 @@
+-- C/C++ real coverage (vcpkg, git submodule, CMake, Conan CPE matching).
+--
+-- C/C++ components that are not covered by deps.dev/OSV are enriched through NVD CPE lookups.
+-- The best-matching CPE name is stored on the shared Library row so the UI can show the
+-- provenance of NVD-derived CVEs and reviewers can spot low-confidence heuristic matches.
+
+ALTER TABLE libraries ADD COLUMN IF NOT EXISTS cpe TEXT;
diff --git a/src/main/resources/db/migration/V17__policy_as_code.sql b/src/main/resources/db/migration/V17__policy_as_code.sql
new file mode 100644
index 00000000..8b369a7c
--- /dev/null
+++ b/src/main/resources/db/migration/V17__policy_as_code.sql
@@ -0,0 +1,62 @@
+-- Policy as Code + waiver/exception approval workflow.
+--
+-- Policies compose hierarchically: organization → team → project.
+-- A locked policy prevents lower levels from overriding the fields it defines.
+-- Policy exceptions are approval-driven waivers that suppress matching gate findings
+-- until they expire.
+--
+-- All statements are idempotent so this migration is safe to reapply.
+
+CREATE TABLE IF NOT EXISTS policies (
+    id                           BIGSERIAL PRIMARY KEY,
+    scope                        VARCHAR(20)  NOT NULL,
+    organization_id              BIGINT       REFERENCES organizations(id) ON DELETE CASCADE,
+    team_id                      BIGINT       REFERENCES teams(id) ON DELETE CASCADE,
+    project_id                   BIGINT       REFERENCES projects(id) ON DELETE CASCADE,
+    name                         VARCHAR(200) NOT NULL,
+    description                  VARCHAR(1000),
+    locked                       BOOLEAN      NOT NULL DEFAULT FALSE,
+    enabled                      BOOLEAN      NOT NULL DEFAULT TRUE,
+    fail_on_severity             VARCHAR(20),
+    fail_on_kev                  BOOLEAN,
+    fail_on_epss                DOUBLE PRECISION,
+    fail_on_license_violation    BOOLEAN,
+    only_new                     BOOLEAN,
+    created_at                   TIMESTAMP    NOT NULL DEFAULT now(),
+    updated_at                   TIMESTAMP    NOT NULL DEFAULT now(),
+    CONSTRAINT uq_policies_organization UNIQUE (organization_id),
+    CONSTRAINT uq_policies_team UNIQUE (team_id),
+    CONSTRAINT uq_policies_project UNIQUE (project_id),
+    CONSTRAINT chk_policies_single_scope CHECK (
+        (scope = 'ORGANIZATION' AND organization_id IS NOT NULL AND team_id IS NULL AND project_id IS NULL) OR
+        (scope = 'TEAM'         AND team_id IS NOT NULL         AND organization_id IS NULL AND project_id IS NULL) OR
+        (scope = 'PROJECT'      AND project_id IS NOT NULL      AND organization_id IS NULL AND team_id IS NULL)
+    )
+);
+
+CREATE INDEX IF NOT EXISTS idx_policies_scope ON policies (scope);
+CREATE INDEX IF NOT EXISTS idx_policies_team_id ON policies (team_id);
+CREATE INDEX IF NOT EXISTS idx_policies_project_id ON policies (project_id);
+
+CREATE TABLE IF NOT EXISTS policy_exceptions (
+    id                    BIGSERIAL PRIMARY KEY,
+    project_id            BIGINT       NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+    requester_user_id     BIGINT       NOT NULL,
+    requester_name        VARCHAR(100),
+    approver_user_id      BIGINT,
+    approver_name         VARCHAR(100),
+    reason                VARCHAR(1000) NOT NULL,
+    expiry                TIMESTAMP    NOT NULL,
+    status                VARCHAR(20)  NOT NULL DEFAULT 'PENDING',
+    target_type           VARCHAR(20)  NOT NULL DEFAULT 'ALL',
+    target_id             VARCHAR(200),
+    component_coordinate  VARCHAR(300),
+    created_at            TIMESTAMP    NOT NULL DEFAULT now(),
+    updated_at            TIMESTAMP    NOT NULL DEFAULT now(),
+    approved_at           TIMESTAMP,
+    revoked_at            TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_project_status ON policy_exceptions (project_id, status);
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_status_expiry ON policy_exceptions (status, expiry);
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_target ON policy_exceptions (component_coordinate, target_type, target_id);
diff --git a/src/main/resources/db/migration/V18__reachability.sql b/src/main/resources/db/migration/V18__reachability.sql
new file mode 100644
index 00000000..564c0d1b
--- /dev/null
+++ b/src/main/resources/db/migration/V18__reachability.sql
@@ -0,0 +1,7 @@
+-- Java call-graph reachability analysis.
+--
+-- Stores the result of bytecode reachability analysis for each scan component.
+-- UNKNOWN is the default for scans that pre-date this feature or for which no
+-- project bytecode was supplied.
+
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability VARCHAR(20) NOT NULL DEFAULT 'UNKNOWN';
diff --git a/src/main/resources/db/migration/V19__audit_log_integrity_hash_chain.sql b/src/main/resources/db/migration/V19__audit_log_integrity_hash_chain.sql
new file mode 100644
index 00000000..035b96d9
--- /dev/null
+++ b/src/main/resources/db/migration/V19__audit_log_integrity_hash_chain.sql
@@ -0,0 +1,10 @@
+-- Audit log integrity hash chain.
+-- Adds previous-hash and current-hash columns so every audit log entry can be
+-- cryptographically linked to the entry that preceded it.
+--
+-- All statements are idempotent so this migration is safe to reapply.
+
+ALTER TABLE audit_logs ADD COLUMN IF NOT EXISTS prev_hash VARCHAR(64);
+ALTER TABLE audit_logs ADD COLUMN IF NOT EXISTS hash VARCHAR(64);
+
+CREATE INDEX IF NOT EXISTS ix_audit_logs_hash ON audit_logs (hash);
diff --git a/src/main/resources/db/migration/V20__user_theme.sql b/src/main/resources/db/migration/V20__user_theme.sql
new file mode 100644
index 00000000..f5233da0
--- /dev/null
+++ b/src/main/resources/db/migration/V20__user_theme.sql
@@ -0,0 +1,2 @@
+-- Persist per-user UI theme preference (light / dark / follow system).
+alter table users add column theme varchar(20) not null default 'SYSTEM';
diff --git a/src/main/resources/db/migration/V21__secret_iac_scan_findings.sql b/src/main/resources/db/migration/V21__secret_iac_scan_findings.sql
new file mode 100644
index 00000000..ac9c27ef
--- /dev/null
+++ b/src/main/resources/db/migration/V21__secret_iac_scan_findings.sql
@@ -0,0 +1,17 @@
+-- Secret and IaC misconfiguration findings from Quick Import clones.
+-- The matched secret value itself is never stored — only location, rule id and a hash fingerprint.
+create table scan_findings (
+    id bigint generated by default as identity primary key,
+    scan_result_id bigint not null references scan_results(id) on delete cascade,
+    type varchar(10) not null,
+    rule_id varchar(100) not null,
+    severity varchar(10) not null,
+    file_path varchar(1000) not null,
+    line_number integer,
+    description varchar(500) not null,
+    fingerprint varchar(12),
+    created_at timestamp not null default current_timestamp
+);
+
+create index idx_scan_findings_scan_result on scan_findings(scan_result_id);
+create index idx_scan_findings_scan_result_type on scan_findings(scan_result_id, type);
diff --git a/src/main/resources/db/migration/V22__scan_archiving.sql b/src/main/resources/db/migration/V22__scan_archiving.sql
new file mode 100644
index 00000000..a1f7571f
--- /dev/null
+++ b/src/main/resources/db/migration/V22__scan_archiving.sql
@@ -0,0 +1,16 @@
+-- Retention policy for old scans: scans beyond the per-project retain count keep
+-- only an aggregate summary here, and their scan_components/dependency_paths rows are deleted.
+alter table scan_results add column archived boolean not null default false;
+alter table scan_results add column archived_at timestamp;
+alter table scan_results add column archived_component_count integer;
+alter table scan_results add column archived_security_critical integer;
+alter table scan_results add column archived_security_high integer;
+alter table scan_results add column archived_security_medium integer;
+alter table scan_results add column archived_security_low integer;
+alter table scan_results add column archived_security_unscored integer;
+alter table scan_results add column archived_license_critical integer;
+alter table scan_results add column archived_license_high integer;
+alter table scan_results add column archived_license_medium integer;
+alter table scan_results add column archived_license_low integer;
+
+create index idx_scan_results_archived on scan_results(project_id, archived);
diff --git a/src/main/resources/db/migration/V23__onboarding_progress.sql b/src/main/resources/db/migration/V23__onboarding_progress.sql
new file mode 100644
index 00000000..5f28ec8a
--- /dev/null
+++ b/src/main/resources/db/migration/V23__onboarding_progress.sql
@@ -0,0 +1,6 @@
+-- Singleton row set once the post-setup onboarding wizard is finished or dismissed.
+create table onboarding_progress (
+    id bigint not null,
+    completed_at timestamp not null,
+    primary key (id)
+);
diff --git a/src/main/resources/db/migration/V24__saved_views.sql b/src/main/resources/db/migration/V24__saved_views.sql
new file mode 100644
index 00000000..2b53a0e2
--- /dev/null
+++ b/src/main/resources/db/migration/V24__saved_views.sql
@@ -0,0 +1,19 @@
+-- Named Security Center filter/sort combinations, scoped per project.
+create table saved_views (
+    id bigint generated by default as identity,
+    project_id bigint not null,
+    created_by_user_id bigint not null,
+    created_by_name varchar(150) not null,
+    name varchar(100) not null,
+    filters_json text not null,
+    shared boolean not null default false,
+    created_at timestamp not null,
+    primary key (id)
+);
+
+create index idx_saved_views_project_id on saved_views (project_id);
+
+alter table if exists saved_views
+   add constraint fk_saved_views_project_id
+   foreign key (project_id)
+   references projects;
diff --git a/src/main/resources/db/migration/V25__report_branding_settings.sql b/src/main/resources/db/migration/V25__report_branding_settings.sql
new file mode 100644
index 00000000..3c858a7c
--- /dev/null
+++ b/src/main/resources/db/migration/V25__report_branding_settings.sql
@@ -0,0 +1,10 @@
+-- Single-row branding settings applied to printable reports (logo, company name, header, cover page).
+create table report_branding_settings (
+    id bigint generated by default as identity,
+    company_name varchar(150),
+    logo_data_uri text,
+    header_text varchar(300),
+    show_cover_page boolean not null default false,
+    updated_at timestamp,
+    primary key (id)
+);
diff --git a/src/main/resources/db/migration/V26__ai_cache_hit_stats.sql b/src/main/resources/db/migration/V26__ai_cache_hit_stats.sql
new file mode 100644
index 00000000..a0edc171
--- /dev/null
+++ b/src/main/resources/db/migration/V26__ai_cache_hit_stats.sql
@@ -0,0 +1,3 @@
+-- Persistent hit/miss counters for the AI context-hash cache, aggregated per day + provider.
+alter table ai_daily_usage add column if not exists cache_hits integer not null default 0;
+alter table ai_daily_usage add column if not exists cache_misses integer not null default 0;
diff --git a/src/main/resources/db/migration/V27__cache_invalidation.sql b/src/main/resources/db/migration/V27__cache_invalidation.sql
new file mode 100644
index 00000000..72b6d562
--- /dev/null
+++ b/src/main/resources/db/migration/V27__cache_invalidation.sql
@@ -0,0 +1,8 @@
+-- One row per logical JVM-local (Caffeine) cache. Services bump `version` inside the same
+-- transaction as a settings mutation; every instance polls this table and evicts its local
+-- cache when a version changes, so multi-instance deployments converge without shared infra.
+create table if not exists cache_invalidation (
+    cache_name varchar(100) primary key,
+    version bigint not null,
+    updated_at timestamp not null
+);
diff --git a/src/main/resources/db/migration/V28__policy_gate_reachability_secrets.sql b/src/main/resources/db/migration/V28__policy_gate_reachability_secrets.sql
new file mode 100644
index 00000000..c202ae54
--- /dev/null
+++ b/src/main/resources/db/migration/V28__policy_gate_reachability_secrets.sql
@@ -0,0 +1,7 @@
+-- Extend the org/team/project policy hierarchy to cover onlyReachable and
+-- failOnSecrets, the two gate options that previously bypassed it and always fell back to the
+-- instance-wide default. Nullable, same as the other five gate fields: null means "not set at
+-- this level, inherit from the parent scope or the instance default".
+
+ALTER TABLE policies ADD COLUMN IF NOT EXISTS only_reachable BOOLEAN;
+ALTER TABLE policies ADD COLUMN IF NOT EXISTS fail_on_secrets BOOLEAN;
diff --git a/src/main/resources/db/migration/V29__reachability_evidence.sql b/src/main/resources/db/migration/V29__reachability_evidence.sql
new file mode 100644
index 00000000..dfe4a368
--- /dev/null
+++ b/src/main/resources/db/migration/V29__reachability_evidence.sql
@@ -0,0 +1,6 @@
+-- Expose the evidence backing a REACHABLE verdict — up to a handful of
+-- "your class X references library class Y" lines from the bytecode call-graph analysis,
+-- rather than storing only the REACHABLE/NOT_REACHABLE/UNKNOWN enum with no way to verify it.
+-- Null for NOT_REACHABLE/UNKNOWN, where there's nothing to point to.
+
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability_evidence TEXT;
diff --git a/src/main/resources/db/migration/V2__v104_features.sql b/src/main/resources/db/migration/V2__v104_features.sql
index d5231675..08298d3b 100644
--- a/src/main/resources/db/migration/V2__v104_features.sql
+++ b/src/main/resources/db/migration/V2__v104_features.sql
@@ -1,4 +1,4 @@
--- OsWL v1.0.4 additive schema (roadmap #13 Flyway introduction).
+-- OsWL v1.0.4 additive schema (Flyway introduction).
 --
 -- Adoption path: Flyway is opt-in (OSWL_FLYWAY_ENABLED, default false). When first enabled on an
 -- existing database, baseline-on-migrate marks the current schema at V1 and applies V2+ forward.
diff --git a/src/main/resources/db/migration/V30__source_analysis_metadata.sql b/src/main/resources/db/migration/V30__source_analysis_metadata.sql
new file mode 100644
index 00000000..7877aba1
--- /dev/null
+++ b/src/main/resources/db/migration/V30__source_analysis_metadata.sql
@@ -0,0 +1 @@
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability_analysis TEXT;
diff --git a/src/main/resources/db/migration/V31__durable_import_jobs.sql b/src/main/resources/db/migration/V31__durable_import_jobs.sql
new file mode 100644
index 00000000..9d545599
--- /dev/null
+++ b/src/main/resources/db/migration/V31__durable_import_jobs.sql
@@ -0,0 +1,18 @@
+CREATE TABLE IF NOT EXISTS import_coordinator (id BIGINT PRIMARY KEY);
+INSERT INTO import_coordinator (id) SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM import_coordinator WHERE id = 1);
+CREATE TABLE IF NOT EXISTS import_jobs (
+    id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+    job_id VARCHAR(36) NOT NULL UNIQUE,
+    owner_id BIGINT NOT NULL,
+    repo_key VARCHAR(64) NOT NULL,
+    worker_id VARCHAR(36) NOT NULL,
+    phase VARCHAR(20) NOT NULL,
+    snapshot_json TEXT NOT NULL,
+    lease_until TIMESTAMP WITH TIME ZONE NOT NULL,
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    finished_at TIMESTAMP WITH TIME ZONE,
+    canceled BOOLEAN NOT NULL DEFAULT FALSE,
+    worker_active BOOLEAN NOT NULL DEFAULT FALSE
+);
+CREATE INDEX IF NOT EXISTS idx_import_jobs_owner ON import_jobs(owner_id);
+CREATE INDEX IF NOT EXISTS idx_import_jobs_lease ON import_jobs(lease_until);
diff --git a/src/main/resources/db/migration/V32__vulnerability_lookup_outcomes.sql b/src/main/resources/db/migration/V32__vulnerability_lookup_outcomes.sql
new file mode 100644
index 00000000..1703ac33
--- /dev/null
+++ b/src/main/resources/db/migration/V32__vulnerability_lookup_outcomes.sql
@@ -0,0 +1,2 @@
+ALTER TABLE libraries ADD COLUMN IF NOT EXISTS vulnerability_lookup_at TIMESTAMP;
+ALTER TABLE libraries ADD COLUMN IF NOT EXISTS vulnerability_lookup_outcomes TEXT;
diff --git a/src/main/resources/db/migration/V33__custom_scan_rules.sql b/src/main/resources/db/migration/V33__custom_scan_rules.sql
new file mode 100644
index 00000000..1747fd4a
--- /dev/null
+++ b/src/main/resources/db/migration/V33__custom_scan_rules.sql
@@ -0,0 +1,5 @@
+CREATE TABLE IF NOT EXISTS custom_scan_rules (
+    id BIGINT PRIMARY KEY,
+    revision BIGINT NOT NULL,
+    rules_json TEXT NOT NULL
+);
diff --git a/src/main/resources/db/migration/V34__web_push_notifications.sql b/src/main/resources/db/migration/V34__web_push_notifications.sql
new file mode 100644
index 00000000..35b7e626
--- /dev/null
+++ b/src/main/resources/db/migration/V34__web_push_notifications.sql
@@ -0,0 +1,22 @@
+CREATE TABLE IF NOT EXISTS web_push_subscriptions (
+ id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+ user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ endpoint_hash VARCHAR(64) NOT NULL UNIQUE,
+ encrypted_subscription TEXT NOT NULL,
+ expires_at TIMESTAMP NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_web_push_user ON web_push_subscriptions(user_id);
+CREATE TABLE IF NOT EXISTS web_push_deliveries (
+ id BIGINT GENERATED BY DEFAULT AS IDENTITY PRIMARY KEY,
+ subscription_id BIGINT NOT NULL REFERENCES web_push_subscriptions(id) ON DELETE CASCADE,
+ project_id BIGINT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+ event_key VARCHAR(100) NOT NULL,
+ event_type VARCHAR(20) NOT NULL,
+ attempts INTEGER NOT NULL,
+ finished BOOLEAN NOT NULL,
+ next_attempt TIMESTAMP NOT NULL,
+ expires_at TIMESTAMP NOT NULL,
+ last_status INTEGER,
+ UNIQUE(subscription_id,event_key)
+);
+CREATE INDEX IF NOT EXISTS idx_web_push_due ON web_push_deliveries(finished,next_attempt);
diff --git a/src/main/resources/db/migration/V35__database_mutation_locks.sql b/src/main/resources/db/migration/V35__database_mutation_locks.sql
new file mode 100644
index 00000000..8b2226d9
--- /dev/null
+++ b/src/main/resources/db/migration/V35__database_mutation_locks.sql
@@ -0,0 +1,3 @@
+CREATE TABLE IF NOT EXISTS database_mutation_locks (id BIGINT PRIMARY KEY);
+INSERT INTO database_mutation_locks (id) SELECT 1 WHERE NOT EXISTS (SELECT 1 FROM database_mutation_locks WHERE id = 1);
+INSERT INTO database_mutation_locks (id) SELECT 2 WHERE NOT EXISTS (SELECT 1 FROM database_mutation_locks WHERE id = 2);
diff --git a/src/main/resources/db/migration/V4__scan_ai_status.sql b/src/main/resources/db/migration/V4__scan_ai_status.sql
index bebb9516..de27d511 100644
--- a/src/main/resources/db/migration/V4__scan_ai_status.sql
+++ b/src/main/resources/db/migration/V4__scan_ai_status.sql
@@ -1,4 +1,4 @@
--- OsWL v1.0.4 — decouple AI enrichment from scan completion (performance plan D1).
+-- OsWL v1.0.4 — decouple AI enrichment from scan completion.
 --
 -- A scan previously stayed ANALYZING until AI summaries finished, even though the CVE/license
 -- data pipeline itself was already done. This column tracks AI progress independently so a scan
diff --git a/src/main/resources/db/migration/V5__library_version_meta_fetched_at.sql b/src/main/resources/db/migration/V5__library_version_meta_fetched_at.sql
index 2bbdfc3f..1d5afa64 100644
--- a/src/main/resources/db/migration/V5__library_version_meta_fetched_at.sql
+++ b/src/main/resources/db/migration/V5__library_version_meta_fetched_at.sql
@@ -1,4 +1,4 @@
--- OsWL performance plan A2 — separate TTL for deps.dev version metadata.
+-- OsWL — separate TTL for deps.dev version metadata.
 --
 -- refreshVersionMetadata() previously called deps.dev GetVersion for every cache-hit library on
 -- every scan, even though the data (isLatestVersion / deprecated / latestVersion / scorecard)
diff --git a/src/main/resources/db/migration/V6__ai_context_hash.sql b/src/main/resources/db/migration/V6__ai_context_hash.sql
index 4bca66d4..e2c6b1a0 100644
--- a/src/main/resources/db/migration/V6__ai_context_hash.sql
+++ b/src/main/resources/db/migration/V6__ai_context_hash.sql
@@ -1,4 +1,4 @@
--- OsWL performance plan F1 — AI response caching (context-hash based re-call skip).
+-- OsWL — AI response caching (context-hash based re-call skip).
 --
 -- Before this, every scan unconditionally cleared and re-requested AI CVE/license summaries
 -- for every candidate, even when nothing relevant had changed since the last scan (CI repeat
diff --git a/src/main/resources/db/migration/V7__snapshot_v2_and_license_raw.sql b/src/main/resources/db/migration/V7__snapshot_v2_and_license_raw.sql
index bff3c20a..4d645af3 100644
--- a/src/main/resources/db/migration/V7__snapshot_v2_and_license_raw.sql
+++ b/src/main/resources/db/migration/V7__snapshot_v2_and_license_raw.sql
@@ -1,4 +1,4 @@
--- OsWL performance/offline plan E1/E4 — snapshot bundle v2 provenance/integrity, and the
+-- OsWL — snapshot bundle v2 provenance/integrity, and the
 -- pre-join per-license list so a multi-license package round-trips exactly through an
 -- offline snapshot export/import instead of being re-split from "MIT AND Apache-2.0" text.
 --
diff --git a/src/main/resources/db/onboarding_progress.sql b/src/main/resources/db/onboarding_progress.sql
new file mode 100644
index 00000000..9c36c71d
--- /dev/null
+++ b/src/main/resources/db/onboarding_progress.sql
@@ -0,0 +1,6 @@
+-- ddl-auto reference copy of V23__onboarding_progress.sql — kept in sync manually.
+create table onboarding_progress (
+    id bigint not null,
+    completed_at timestamp not null,
+    primary key (id)
+);
diff --git a/src/main/resources/db/org_team_hierarchy.sql b/src/main/resources/db/org_team_hierarchy.sql
new file mode 100644
index 00000000..d679a797
--- /dev/null
+++ b/src/main/resources/db/org_team_hierarchy.sql
@@ -0,0 +1,52 @@
+-- Organization → Team → Project hierarchy. Run once on PostgreSQL before deploy with ddl-auto=validate.
+-- Mirrors db/migration/V11__org_team_hierarchy.sql for deployments that manage the schema by hand
+-- instead of enabling Flyway.
+
+CREATE TABLE IF NOT EXISTS organizations (
+    id          BIGSERIAL PRIMARY KEY,
+    name        VARCHAR(200) NOT NULL,
+    created_at  TIMESTAMP    NOT NULL DEFAULT now()
+);
+
+-- Single-organization deployment: exactly one row.
+INSERT INTO organizations (name, created_at)
+SELECT 'Default Organization', now()
+WHERE NOT EXISTS (SELECT 1 FROM organizations);
+
+CREATE TABLE IF NOT EXISTS teams (
+    id              BIGSERIAL PRIMARY KEY,
+    organization_id BIGINT       NOT NULL REFERENCES organizations(id),
+    name            VARCHAR(200) NOT NULL,
+    description     VARCHAR(1000),
+    parent_team_id  BIGINT       REFERENCES teams(id) ON DELETE SET NULL,
+    created_at      TIMESTAMP    NOT NULL DEFAULT now(),
+    CONSTRAINT uq_teams_org_name UNIQUE (organization_id, name)
+);
+CREATE INDEX IF NOT EXISTS idx_teams_parent_team_id ON teams (parent_team_id);
+
+-- Every org gets a "Default" team so pre-hierarchy projects have somewhere to land.
+INSERT INTO teams (organization_id, name, description, created_at)
+SELECT o.id, 'Default', 'Projects created before teams were introduced.', now()
+FROM organizations o
+WHERE NOT EXISTS (SELECT 1 FROM teams t WHERE t.organization_id = o.id AND t.name = 'Default');
+
+CREATE TABLE IF NOT EXISTS team_members (
+    id          BIGSERIAL PRIMARY KEY,
+    team_id     BIGINT      NOT NULL REFERENCES teams(id) ON DELETE CASCADE,
+    user_id     BIGINT      NOT NULL,
+    role        VARCHAR(20) NOT NULL DEFAULT 'MEMBER',
+    created_at  TIMESTAMP   NOT NULL DEFAULT now(),
+    CONSTRAINT uq_team_members_team_user UNIQUE (team_id, user_id)
+);
+CREATE INDEX IF NOT EXISTS idx_team_members_user_id ON team_members (user_id);
+
+ALTER TABLE projects ADD COLUMN IF NOT EXISTS team_id BIGINT REFERENCES teams(id) ON DELETE SET NULL;
+ALTER TABLE projects ADD COLUMN IF NOT EXISTS tags VARCHAR(500);
+CREATE INDEX IF NOT EXISTS idx_projects_team_id ON projects (team_id);
+
+-- Fold all existing projects into the Default team. Direct project_members grants are
+-- untouched, so access after migration is identical to access before it.
+UPDATE projects
+SET team_id = (SELECT t.id FROM teams t WHERE t.name = 'Default' ORDER BY t.id LIMIT 1)
+WHERE team_id IS NULL
+  AND EXISTS (SELECT 1 FROM teams t WHERE t.name = 'Default');
diff --git a/src/main/resources/db/policy_as_code.sql b/src/main/resources/db/policy_as_code.sql
new file mode 100644
index 00000000..da203c74
--- /dev/null
+++ b/src/main/resources/db/policy_as_code.sql
@@ -0,0 +1,59 @@
+-- Policy as Code schema reference.
+-- Run once on PostgreSQL when ddl-auto=validate (Flyway disabled).
+-- Statements are idempotent so they are safe to reapply.
+
+CREATE TABLE IF NOT EXISTS policies (
+    id                           BIGSERIAL PRIMARY KEY,
+    scope                        VARCHAR(20)  NOT NULL,
+    organization_id              BIGINT       REFERENCES organizations(id) ON DELETE CASCADE,
+    team_id                      BIGINT       REFERENCES teams(id) ON DELETE CASCADE,
+    project_id                   BIGINT       REFERENCES projects(id) ON DELETE CASCADE,
+    name                         VARCHAR(200) NOT NULL,
+    description                  VARCHAR(1000),
+    locked                       BOOLEAN      NOT NULL DEFAULT FALSE,
+    enabled                      BOOLEAN      NOT NULL DEFAULT TRUE,
+    fail_on_severity             VARCHAR(20),
+    fail_on_kev                  BOOLEAN,
+    fail_on_epss                DOUBLE PRECISION,
+    fail_on_license_violation    BOOLEAN,
+    only_new                     BOOLEAN,
+    only_reachable               BOOLEAN,
+    fail_on_secrets              BOOLEAN,
+    created_at                   TIMESTAMP    NOT NULL DEFAULT now(),
+    updated_at                   TIMESTAMP    NOT NULL DEFAULT now(),
+    CONSTRAINT uq_policies_organization UNIQUE (organization_id),
+    CONSTRAINT uq_policies_team UNIQUE (team_id),
+    CONSTRAINT uq_policies_project UNIQUE (project_id),
+    CONSTRAINT chk_policies_single_scope CHECK (
+        (scope = 'ORGANIZATION' AND organization_id IS NOT NULL AND team_id IS NULL AND project_id IS NULL) OR
+        (scope = 'TEAM'         AND team_id IS NOT NULL         AND organization_id IS NULL AND project_id IS NULL) OR
+        (scope = 'PROJECT'      AND project_id IS NOT NULL      AND organization_id IS NULL AND team_id IS NULL)
+    )
+);
+
+CREATE INDEX IF NOT EXISTS idx_policies_scope ON policies (scope);
+CREATE INDEX IF NOT EXISTS idx_policies_team_id ON policies (team_id);
+CREATE INDEX IF NOT EXISTS idx_policies_project_id ON policies (project_id);
+
+CREATE TABLE IF NOT EXISTS policy_exceptions (
+    id                    BIGSERIAL PRIMARY KEY,
+    project_id            BIGINT       NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+    requester_user_id     BIGINT       NOT NULL,
+    requester_name        VARCHAR(100),
+    approver_user_id      BIGINT,
+    approver_name         VARCHAR(100),
+    reason                VARCHAR(1000) NOT NULL,
+    expiry                TIMESTAMP    NOT NULL,
+    status                VARCHAR(20)  NOT NULL DEFAULT 'PENDING',
+    target_type           VARCHAR(20)  NOT NULL DEFAULT 'ALL',
+    target_id             VARCHAR(200),
+    component_coordinate  VARCHAR(300),
+    created_at            TIMESTAMP    NOT NULL DEFAULT now(),
+    updated_at            TIMESTAMP    NOT NULL DEFAULT now(),
+    approved_at           TIMESTAMP,
+    revoked_at            TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_project_status ON policy_exceptions (project_id, status);
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_status_expiry ON policy_exceptions (status, expiry);
+CREATE INDEX IF NOT EXISTS idx_policy_exceptions_target ON policy_exceptions (component_coordinate, target_type, target_id);
diff --git a/src/main/resources/db/policy_gate_reachability_secrets.sql b/src/main/resources/db/policy_gate_reachability_secrets.sql
new file mode 100644
index 00000000..01d545fb
--- /dev/null
+++ b/src/main/resources/db/policy_gate_reachability_secrets.sql
@@ -0,0 +1,5 @@
+-- DDL reference for the onlyReachable/failOnSecrets policy columns.
+-- Applied via Flyway in V28__policy_gate_reachability_secrets.sql; kept here as a ddl-auto reference.
+
+ALTER TABLE policies ADD COLUMN IF NOT EXISTS only_reachable BOOLEAN;
+ALTER TABLE policies ADD COLUMN IF NOT EXISTS fail_on_secrets BOOLEAN;
diff --git a/src/main/resources/db/project_members.sql b/src/main/resources/db/project_members.sql
index c1a91ba6..8eb31552 100644
--- a/src/main/resources/db/project_members.sql
+++ b/src/main/resources/db/project_members.sql
@@ -1,4 +1,4 @@
--- Project-scoped ACL (Sprint 3). Run once on PostgreSQL before deploy with ddl-auto=validate.
+-- Project-scoped ACL. Run once on PostgreSQL before deploy with ddl-auto=validate.
 
 CREATE TABLE IF NOT EXISTS project_members (
     id          BIGSERIAL PRIMARY KEY,
diff --git a/src/main/resources/db/reachability.sql b/src/main/resources/db/reachability.sql
new file mode 100644
index 00000000..920e01c7
--- /dev/null
+++ b/src/main/resources/db/reachability.sql
@@ -0,0 +1,7 @@
+-- DDL reference for the reachability column.
+-- Applied via Flyway in V18__reachability.sql; kept here as a ddl-auto reference.
+
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability VARCHAR(20) NOT NULL DEFAULT 'UNKNOWN';
+
+-- Evidence backing a REACHABLE verdict. Applied via Flyway in V29__reachability_evidence.sql.
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability_evidence TEXT;
diff --git a/src/main/resources/db/report_branding_settings.sql b/src/main/resources/db/report_branding_settings.sql
new file mode 100644
index 00000000..be511424
--- /dev/null
+++ b/src/main/resources/db/report_branding_settings.sql
@@ -0,0 +1,11 @@
+-- Single-row branding settings applied to printable reports.
+-- Run once on PostgreSQL before deploy with ddl-auto=validate.
+
+CREATE TABLE IF NOT EXISTS report_branding_settings (
+    id               BIGSERIAL PRIMARY KEY,
+    company_name     VARCHAR(150),
+    logo_data_uri    TEXT,
+    header_text      VARCHAR(300),
+    show_cover_page  BOOLEAN NOT NULL DEFAULT FALSE,
+    updated_at       TIMESTAMP
+);
diff --git a/src/main/resources/db/saml_scim.sql b/src/main/resources/db/saml_scim.sql
new file mode 100644
index 00000000..9c337fce
--- /dev/null
+++ b/src/main/resources/db/saml_scim.sql
@@ -0,0 +1,8 @@
+-- SAML 2.0 and SCIM 2.0 support. Run once on PostgreSQL before deploy with ddl-auto=validate.
+-- Mirrors db/migration/V13__saml_scim.sql for deployments that manage the schema by hand
+-- instead of enabling Flyway.
+
+ALTER TABLE api_keys ADD COLUMN IF NOT EXISTS scope VARCHAR(20) NOT NULL DEFAULT 'PROJECT';
+ALTER TABLE api_keys ALTER COLUMN project_id DROP NOT NULL;
+
+CREATE INDEX IF NOT EXISTS idx_api_keys_scope ON api_keys (scope);
diff --git a/src/main/resources/db/saved_views.sql b/src/main/resources/db/saved_views.sql
new file mode 100644
index 00000000..bcc828ce
--- /dev/null
+++ b/src/main/resources/db/saved_views.sql
@@ -0,0 +1,15 @@
+-- Named Security Center filter/sort combinations, scoped per project.
+-- Run once on PostgreSQL before deploy with ddl-auto=validate.
+
+CREATE TABLE IF NOT EXISTS saved_views (
+    id                  BIGSERIAL PRIMARY KEY,
+    project_id          BIGINT NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+    created_by_user_id  BIGINT NOT NULL,
+    created_by_name     VARCHAR(150) NOT NULL,
+    name                VARCHAR(100) NOT NULL,
+    filters_json        TEXT NOT NULL,
+    shared              BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at          TIMESTAMP NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_saved_views_project_id ON saved_views (project_id);
diff --git a/src/main/resources/db/scan_archiving.sql b/src/main/resources/db/scan_archiving.sql
new file mode 100644
index 00000000..953ecc78
--- /dev/null
+++ b/src/main/resources/db/scan_archiving.sql
@@ -0,0 +1,15 @@
+-- ddl-auto reference copy of V22__scan_archiving.sql — kept in sync manually.
+alter table scan_results add column archived boolean not null default false;
+alter table scan_results add column archived_at timestamp;
+alter table scan_results add column archived_component_count integer;
+alter table scan_results add column archived_security_critical integer;
+alter table scan_results add column archived_security_high integer;
+alter table scan_results add column archived_security_medium integer;
+alter table scan_results add column archived_security_low integer;
+alter table scan_results add column archived_security_unscored integer;
+alter table scan_results add column archived_license_critical integer;
+alter table scan_results add column archived_license_high integer;
+alter table scan_results add column archived_license_medium integer;
+alter table scan_results add column archived_license_low integer;
+
+create index idx_scan_results_archived on scan_results(project_id, archived);
diff --git a/src/main/resources/db/secret_iac_scan_findings.sql b/src/main/resources/db/secret_iac_scan_findings.sql
new file mode 100644
index 00000000..e39f5a91
--- /dev/null
+++ b/src/main/resources/db/secret_iac_scan_findings.sql
@@ -0,0 +1,16 @@
+-- ddl-auto reference copy of V21__secret_iac_scan_findings.sql — kept in sync manually.
+create table scan_findings (
+    id bigint generated by default as identity primary key,
+    scan_result_id bigint not null references scan_results(id) on delete cascade,
+    type varchar(10) not null,
+    rule_id varchar(100) not null,
+    severity varchar(10) not null,
+    file_path varchar(1000) not null,
+    line_number integer,
+    description varchar(500) not null,
+    fingerprint varchar(12),
+    created_at timestamp not null default current_timestamp
+);
+
+create index idx_scan_findings_scan_result on scan_findings(scan_result_id);
+create index idx_scan_findings_scan_result_type on scan_findings(scan_result_id, type);
diff --git a/src/main/resources/db/source_analysis_metadata.sql b/src/main/resources/db/source_analysis_metadata.sql
new file mode 100644
index 00000000..7877aba1
--- /dev/null
+++ b/src/main/resources/db/source_analysis_metadata.sql
@@ -0,0 +1 @@
+ALTER TABLE scan_components ADD COLUMN IF NOT EXISTS reachability_analysis TEXT;
diff --git a/src/main/resources/db/spring_session_and_shedlock.sql b/src/main/resources/db/spring_session_and_shedlock.sql
new file mode 100644
index 00000000..12673394
--- /dev/null
+++ b/src/main/resources/db/spring_session_and_shedlock.sql
@@ -0,0 +1,36 @@
+-- Run once when upgrading production (ddl-auto=validate). Same shapes as
+-- db/migration/V10__spring_session_and_shedlock.sql — apply this file OR run the
+-- Flyway migration, not both. Only needed when opting into multi-instance deployment
+-- (OSWL_SESSION_STORE_TYPE=jdbc and/or OSWL_SCHEDULER_LOCK_ENABLED=true).
+
+CREATE TABLE IF NOT EXISTS spring_session (
+    primary_id CHAR(36) NOT NULL,
+    session_id CHAR(36) NOT NULL,
+    creation_time BIGINT NOT NULL,
+    last_access_time BIGINT NOT NULL,
+    max_inactive_interval INT NOT NULL,
+    expiry_time BIGINT NOT NULL,
+    principal_name VARCHAR(100),
+    CONSTRAINT spring_session_pk PRIMARY KEY (primary_id)
+);
+
+CREATE UNIQUE INDEX IF NOT EXISTS spring_session_ix1 ON spring_session (session_id);
+CREATE INDEX IF NOT EXISTS spring_session_ix2 ON spring_session (expiry_time);
+CREATE INDEX IF NOT EXISTS spring_session_ix3 ON spring_session (principal_name);
+
+CREATE TABLE IF NOT EXISTS spring_session_attributes (
+    session_primary_id CHAR(36) NOT NULL,
+    attribute_name VARCHAR(200) NOT NULL,
+    attribute_bytes BYTEA NOT NULL,
+    CONSTRAINT spring_session_attributes_pk PRIMARY KEY (session_primary_id, attribute_name),
+    CONSTRAINT spring_session_attributes_fk FOREIGN KEY (session_primary_id)
+        REFERENCES spring_session (primary_id) ON DELETE CASCADE
+);
+
+CREATE TABLE IF NOT EXISTS shedlock (
+    name VARCHAR(64) NOT NULL,
+    lock_until TIMESTAMP NOT NULL,
+    locked_at TIMESTAMP NOT NULL,
+    locked_by VARCHAR(255) NOT NULL,
+    PRIMARY KEY (name)
+);
diff --git a/src/main/resources/db/supply_chain_heuristics.sql b/src/main/resources/db/supply_chain_heuristics.sql
index 1f6ef9d2..ec3d6794 100644
--- a/src/main/resources/db/supply_chain_heuristics.sql
+++ b/src/main/resources/db/supply_chain_heuristics.sql
@@ -1,4 +1,4 @@
--- Supply-chain heuristics (roadmap #16): typosquat / dependency-confusion flags on libraries
+-- Supply-chain heuristics: typosquat / dependency-confusion flags on libraries
 -- (run once on PostgreSQL when ddl-auto=validate; local H2 applies this automatically via ddl-auto=update).
 ALTER TABLE libraries ADD COLUMN IF NOT EXISTS typosquat_risk BOOLEAN NOT NULL DEFAULT FALSE;
 ALTER TABLE libraries ADD COLUMN IF NOT EXISTS typosquat_reason VARCHAR(300);
diff --git a/src/main/resources/db/user_theme.sql b/src/main/resources/db/user_theme.sql
new file mode 100644
index 00000000..9a1d78b4
--- /dev/null
+++ b/src/main/resources/db/user_theme.sql
@@ -0,0 +1,3 @@
+-- ddl-auto reference for V20__user_theme.sql
+-- Adds the per-user UI theme column to the users table.
+alter table users add column theme varchar(20) not null default 'SYSTEM';
diff --git a/src/main/resources/db/webhook_settings.sql b/src/main/resources/db/webhook_settings.sql
new file mode 100644
index 00000000..439c57c5
--- /dev/null
+++ b/src/main/resources/db/webhook_settings.sql
@@ -0,0 +1,35 @@
+-- Slack/Teams incoming webhook notification settings and delivery history.
+-- Used for ddl-auto=validate; Flyway applies the same statements in V14.
+
+create table webhook_settings (
+    id bigint generated by default as identity,
+    provider varchar(20) not null,
+    webhook_url varchar(1000),
+    enabled boolean not null,
+    notify_new_cve boolean not null,
+    notify_gate_failure boolean not null,
+    notify_scan_failure boolean not null,
+    notify_waiver_expiry boolean not null,
+    created_at timestamp(6),
+    updated_at timestamp(6),
+    primary key (id)
+);
+
+create table webhook_deliveries (
+    id bigint generated by default as identity,
+    event_type varchar(30) not null,
+    project_id bigint,
+    project_name varchar(160),
+    reference_id varchar(40),
+    status varchar(20) not null,
+    http_status integer,
+    error_message varchar(500),
+    retry_count integer not null,
+    payload_summary varchar(500),
+    created_at timestamp(6) not null,
+    primary key (id)
+);
+
+create index idx_webhook_deliveries_created_at on webhook_deliveries (created_at desc);
+create index idx_webhook_deliveries_status on webhook_deliveries (status);
+create index idx_webhook_deliveries_event_type on webhook_deliveries (event_type);
diff --git a/src/main/resources/logback-spring.xml b/src/main/resources/logback-spring.xml
new file mode 100644
index 00000000..c06be49f
--- /dev/null
+++ b/src/main/resources/logback-spring.xml
@@ -0,0 +1,40 @@
+
+
+    
+
+    
+    
+
+    
+        
+            ${OSWL_CONSOLE_PATTERN}
+        
+    
+
+    
+    
+        
+
+        
+            ${OSWL_LOG_DIR}/oswl.log
+            
+                ${OSWL_LOG_DIR}/oswl.%d{yyyy-MM-dd}.%i.log.gz
+                100MB
+                30
+                5GB
+            
+            
+        
+    
+
+    
+        
+        
+            
+        
+    
+
diff --git a/src/main/resources/messages.properties b/src/main/resources/messages.properties
index d8e0a417..f49ee492 100644
--- a/src/main/resources/messages.properties
+++ b/src/main/resources/messages.properties
@@ -11,6 +11,8 @@ common.applyToSelected=Apply to selected
 common.bulkActions=Bulk Actions
 common.cancel=Cancel
 common.dismiss=Dismiss
+common.edit=Edit
+common.hideValue=Hide value
 common.clear=Clear
 common.clearAll=Clear All
 common.close=Close
@@ -28,6 +30,10 @@ common.loading=Loading\u2026
 common.no=No
 common.nonPatchable=Non-Patchable
 common.outdated=Outdated
+common.pagination.first=First page
+common.pagination.previous=Previous page
+common.pagination.next=Next page
+common.pagination.last=Last page
 common.patchable=Patchable
 common.pdf=PDF
 common.project=Project
@@ -38,6 +44,9 @@ common.saved=Saved.
 common.saving=Saving\u2026
 common.select=Select
 common.selectAll=Select All
+common.selectItem=Select {0}
+common.selectOne=Select one…
+common.showValue=Show value
 common.unignore=Unignore
 common.unknown=Unknown
 common.unreviewed=Unreviewed
@@ -70,6 +79,7 @@ topbar.nav.riskTrend=Risk Trend
 topbar.nav.scanHistory=Scan History
 topbar.nav.securityCenter=Security Center
 topbar.nav.versionDiff=Version Diff\u2026
+topbar.mobileView=Mobile notifications
 topbar.noScanYet=No scans yet
 topbar.projects=Projects
 topbar.settings=Settings
@@ -142,6 +152,31 @@ auth.setup.label.name=Name
 auth.setup.label.password=Password
 auth.setup.label.passwordConfirm=Confirm Password
 auth.setup.pageTitle=Setup
+onboarding.pageTitle=Onboarding
+onboarding.step1.heading=SSO & team access
+onboarding.step1.body=Connect OIDC/SAML single sign-on, or invite teammates directly. You can always change this later in Settings.
+onboarding.step1.linkSso=Configure SSO →
+onboarding.step1.linkInvite=Invite users →
+onboarding.step2.heading=Connect a repository
+onboarding.step2.body=Connect GitHub, GitLab, or Bitbucket to browse repositories and import private projects. Public repositories can also be imported directly by URL.
+onboarding.step2.link=Connect a VCS provider →
+onboarding.step2.linkQuickImport=Quick Import a project →
+onboarding.step3.heading=Policy defaults
+onboarding.step3.body=Review license classifications and security-gate thresholds. Gates evaluate scan results; organization, team, and project overrides are available through the Policy API.
+onboarding.step3.link=Review license policy →
+onboarding.step4.heading=Notifications
+onboarding.step4.body=Add a Slack or Teams webhook so new CVEs and gate failures reach the channel your team actually watches, instead of only email.
+onboarding.step4.link=Set up webhooks →
+onboarding.btn.skipAll=Skip for now
+onboarding.btn.back=Back
+onboarding.btn.next=Next
+onboarding.btn.finish=Finish
+onboarding.step.done=Done
+onboarding.inline.provider=Provider
+onboarding.inline.username=Username
+onboarding.inline.connect=Connect
+onboarding.inline.connecting=Connecting…
+onboarding.inline.connectFailed=Connection failed. Check your input and try again.
 auth.setup.placeholder.email=oswl@company.com
 auth.setup.placeholder.name=Enter your name
 auth.setup.placeholder.password=Enter your password
@@ -181,6 +216,7 @@ projects.card.lastScanned=Last Scanned : {0}
 projects.card.newCves={0} new CVE
 projects.card.newCves.dismiss=Dismiss new CVE alerts
 projects.card.openActions=Open project actions
+projects.emptyActive=No active projects yet. Import or create a project to get started.
 projects.github.connected=GitHub connected successfully.
 projects.github.denied=GitHub authorization was denied.
 projects.github.disconnected=GitHub disconnected.
@@ -255,12 +291,15 @@ security.outboundUrl.error.loopback=Connections to localhost and loopback addres
 security.outboundUrl.error.metadata=Connections to cloud metadata or link-local addresses (169.254.x.x) are not allowed.
 security.outboundUrl.error.unresolvable=The hostname could not be resolved. Check the URL and try again.
 quickImport.error.sessionExpired=Import session expired. The server may have been restarted \u2014 please try again.
+quickImport.status.trackingUnauthorized=Import tracking stopped because your session expired or access changed. Sign in again to continue.
+quickImport.status.jobMissing=This import job is no longer available. Refresh the page or start a new import.
+quickImport.status.unavailable=Import status is temporarily unavailable. Retrying with a slower interval…
 quickImport.error.startFailed=Failed to start import: {0}
 quickImport.error.unexpected=Import failed due to an unexpected error. Check server logs for details or try again later.
 quickImport.error.scanSubmitFailed=Import completed but the security scan could not be submitted. Try running a scan from the CLI.
 quickImport.error.parseFailed=Dependency parsing failed. The repository may be missing lock files or use an unsupported layout.
 quickImport.error.javaRequired=Java/JDK is required on the OsWL server to resolve Gradle or Maven dependencies. Install JDK 25+ and restart the server.
-quickImport.error.noManifests=No supported manifest files were found in the repository. Check that lock files (pom.xml, package-lock.json, etc.) are committed.
+quickImport.error.noManifests=No supported dependency files were found. Check that manifests (such as pom.xml) or lock files (such as package-lock.json) are committed.
 quickImport.error.gradleFailed=Gradle dependency resolution failed on the server. Ensure JDK 25+ is installed and the repository builds with ./gradlew.
 quickImport.error.clonePathTooLong=Clone failed: repository paths exceed Windows limits. Enable long paths in Git or clone on Linux/macOS.
 quickImport.error.cloneFailed=Repository clone failed. Check the URL, branch, and your VCS connection.
@@ -352,7 +391,9 @@ gitIntegration.btn.importAll=Import All
 gitIntegration.btn.imported=\u2713 Imported!
 gitIntegration.btn.reloadRepos=Reload repos
 gitIntegration.error.connectionFailed=Connection failed. Check your token.
+gitIntegration.error.importFailed={0} import(s) failed. Check repository access and try again.
 gitIntegration.error.networkError=Network error. Please try again.
+gitIntegration.error.reposLoadFailed=Could not load repositories. Check your token, then retry.
 gitIntegration.heading=Connect to Git
 gitIntegration.label.addNewAccount=Add a new GitHub account
 gitIntegration.loading.checkingConnection=Checking connection\u2026
@@ -369,6 +410,7 @@ gitIntegration.status.loading=Loading\u2026
 gitIntegration.status.notConnected=Not connected
 gitIntegration.status.updated=Updated!
 gitIntegration.table.col.title=Repository
+gitIntegration.table.empty=No repositories found for this account.
 
 # ── Security Center ──
 
@@ -392,6 +434,10 @@ securityCenter.filter.outdated=Outdated
 securityCenter.filter.patchabilityLabel=Patchability
 securityCenter.filter.patchable=Patchable
 securityCenter.filter.permitted=Permitted
+securityCenter.filter.reachability=Reachability
+securityCenter.filter.reachable=Reachable
+securityCenter.filter.notReachable=Not Reachable
+securityCenter.filter.unknownReachability=Usage not verified
 securityCenter.filter.restricted=Restricted
 securityCenter.filter.reviewStatus=Review Status
 securityCenter.filter.reviewed=Reviewed
@@ -401,11 +447,13 @@ securityCenter.filter.unknown=Unknown
 securityCenter.filter.unscored=Unscored
 securityCenter.filter.upToDate=Up to date
 securityCenter.pageTitle=Security Center
+securityCenter.componentPanel.ariaLabel=Component detail
+securityCenter.panel.loadFailed=Could not load the component detail.
 securityCenter.malicious.badge=Malicious
 securityCenter.malicious.tooltip=OSV flags this package version as malicious (MAL- advisory). Remove it immediately.
 riskGraph.security.total={0} vulnerabilities found
 riskGraph.license.total={0} components by license status
-securityCenter.deferReminder=The deferral period for {0} component(s) has ended. Still not fixing them? Take another look below.
+securityCenter.deferReminder=The deferral period has ended for {0} component(s). Review them below and update the remediation plan.
 securityCenter.scanning=Analysis in progress \u2014 results will update automatically when complete.
 securityCenter.aiGenerating=Generating AI summary\u2026
 securityCenter.error.actionFailed=Failed to apply the change. Please try again.
@@ -418,15 +466,43 @@ securityCenter.sort.label=Sort
 securityCenter.sort.risk=Risk (default)
 securityCenter.sort.name=Name
 securityCenter.sort.license=License risk
+securityCenter.views.label=Views
+securityCenter.views.empty=No saved views yet.
+securityCenter.views.loading=Loading saved views…
+securityCenter.views.loadFailed=Saved views could not be loaded. Check your connection and try again.
+securityCenter.views.save=Save current view
+securityCenter.views.namePlaceholder=View name
+securityCenter.views.shared=Shared with team
+securityCenter.views.sharedBadge=Shared
+securityCenter.views.saveBtn=Save
+securityCenter.views.copyLink=Copy shareable link
+securityCenter.views.deleteBtn=Delete saved view
 securityCenter.table.component=Component
 securityCenter.table.license=License
+securityCenter.table.loadMore=Load more
 securityCenter.table.noResults=No scan results yet
+securityCenter.table.notAnalyzed=Not analyzed
+securityCenter.table.notAnalyzedTooltip=Vulnerability lookup has not completed successfully for this component (unsupported ecosystem, unavailable source, or missing offline data). Zero CVEs does not establish that it is clean.
 securityCenter.table.patchability=Patchability
 securityCenter.table.review=Review
 securityCenter.table.runScan=Run a scan via CLI or Git integration to see discovered components.
 securityCenter.table.securityIssues=Security Issues
+securityCenter.table.selectAllLoadedTooltip=Selects only the components currently loaded on screen, not every component matching your filters. Use Load more first to bring more into the selection.
+securityCenter.table.showingCount=Showing {0} of {1} components
 securityCenter.updateChangeMessage=Library changes found. Please review.
 securityCenter.updateDetected=update detected.
+securityCenter.findings.heading=Secret & IaC Findings
+securityCenter.findings.count=({0} findings)
+securityCenter.findings.noValueNote=The matched value is never stored — only its location and a non-reversible fingerprint.
+securityCenter.findings.table.type=Type
+securityCenter.findings.table.severity=Severity
+securityCenter.findings.table.rule=Rule
+securityCenter.findings.table.file=File
+securityCenter.findings.table.description=Description
+securityCenter.findings.empty=No secrets or IaC misconfigurations were found in this scan.
+securityCenter.findings.notRun=No completed scan is available yet. Run a scan to populate security findings.
+securityCenter.findings.type.secret=Secret
+securityCenter.findings.type.iac=IaC Misconfiguration
 
 # ── Component Detail ──
 
@@ -440,6 +516,8 @@ componentDetail.btn.deferException=Defer (Exception)
 componentDetail.cve.affects=Affects
 componentDetail.cve.aiSummary=AI Plain Summary
 componentDetail.cve.cvssVector=CVSS Vector
+componentDetail.cve.envScore=Environmental Score
+componentDetail.cve.envScore.tooltip=CVSS base score adjusted for this project's deployment profile and this component's runtime scope — how much this vulnerability actually matters here, not just its generic severity.
 componentDetail.cve.empty=No security vulnerabilities detected for this component.
 componentDetail.cve.fix=Fix
 componentDetail.cve.ghsaId=GHSA
@@ -486,7 +564,7 @@ componentDetail.defer.success=Deferral confirmed successfully.
 componentDetail.defer.title=Defer Vulnerability
 componentDetail.depPath.direct=Direct dependency (depth 1)
 componentDetail.depPath.fallbackOurProject=(our project)
-componentDetail.depPath.noPathData=Full path tree not available \u2014 rescan with an updated CLI version to see the complete dependency tree.
+componentDetail.depPath.noPathData=No dependency paths are available for this scan. Rescan with supported lock files or dependency graph data; coverage depends on the ecosystem and input.
 componentDetail.depPath.viaIntermediate=Via {0} intermediate (depth {1})
 componentDetail.depPath.viaIntermediates=Via {0} intermediates (depth {1})
 componentDetail.deprecated.hint=No known CVEs, but this version is no longer maintained. Upgrade to a supported release.
@@ -510,7 +588,7 @@ componentDetail.license.legalRisk=Legal risk \u2014 recommend legal review befor
 componentDetail.license.nonStandard=Non-standard license identifier \u2014 not found in the SPDX policy list.
 componentDetail.license.nonStandardHint1=The identifier
 componentDetail.license.nonStandardHint2=is not a recognised SPDX expression. Manual review is required before production use.
-componentDetail.license.permissive=Permissive license \u2014 free to use commercially, modify, and distribute without restrictions.
+componentDetail.license.permissive=Permissive license — commercial use, modification, and redistribution are generally allowed subject to its terms, including any notice requirements.
 componentDetail.license.unknown=No license information found \u2014 manual review is recommended before production use.
 componentDetail.malicious.label=Malicious package
 componentDetail.outdated.hint=No known vulnerabilities detected, but this is not the latest version.
@@ -546,12 +624,14 @@ componentDetail.patch.success.changedFile=Changed file
 componentDetail.patch.success.showChange=What changed?
 componentDetail.patch.success.hideChange=Hide change details
 componentDetail.patch.title=Apply Patch
+componentDetail.reachabilityEvidence.description=Your code references the vulnerable library through these:
 componentDetail.safe.hint=No known vulnerabilities detected. This component is safe to use.
 componentDetail.scorecard.label=Scorecard
 componentDetail.scorecard.tooltip=OpenSSF Scorecard overall score (0-10) from deps.dev. Higher means better maintained security practices.
 componentDetail.section.dependencyPath=Where did this come from? (Dependency Path)
 componentDetail.section.description=Component Description
 componentDetail.section.licenseInfo=License Info
+componentDetail.section.reachabilityEvidence=Why reachable?
 componentDetail.section.vulnerabilityDetails=Vulnerability Details
 componentDetail.status.notReviewed=Not Reviewed
 componentDetail.status.reviewed=Reviewed
@@ -659,6 +739,8 @@ riskTrend.ai.notEnoughData=Not enough scan data to generate an insight.
 riskTrend.chart.license=License Risk
 riskTrend.chart.security=Security Risk
 riskTrend.chart.xAxis=Version
+riskTrend.chart.viewAsTable=View as table
+riskTrend.chart.viewAsChart=View as chart
 report.compliance.title=Compliance Report
 report.compliance.type=Compliance Report · CRA / ISMS-P
 report.compliance.toolbarSubtitle={0} — Compliance Report
@@ -716,6 +798,7 @@ riskTrend.pageTitle=Risk Trend
 # ── Scan History ──
 
 scanHistory.col.components=Components
+scanHistory.archived.label=Archived
 scanHistory.col.scannedAt=Scanned At
 scanHistory.col.source=Source
 scanHistory.col.status=Status
@@ -753,6 +836,7 @@ versionDiff.tab.all=All
 versionDiff.tab.newThreats=New Threats
 versionDiff.tab.removed=Removed
 versionDiff.tab.updated=Updated
+versionDiff.tabEmpty=No entries in this category.
 
 # ── Settings ──
 
@@ -840,7 +924,7 @@ settings.admin.snapshot.import.button=Import
 settings.admin.snapshot.import.failed=Failed to import snapshot bundle.
 settings.admin.snapshot.import.fromPath.button=Import from Path
 settings.admin.snapshot.import.fromPath.placeholder=Path relative to the server's import directory
-settings.admin.snapshot.import.fromPath.toggle=The bundle is already on the server — import it by path
+settings.admin.snapshot.import.fromPath.toggle=Use a file already on the server
 settings.admin.snapshot.import.mode.auto=Do what the bundle says (recommended)
 settings.admin.snapshot.import.mode.merge=Merge — add and update records, and remove the ones the bundle marks as withdrawn
 settings.admin.snapshot.import.mode.replace=Replace — delete everything from that source first, then import
@@ -865,7 +949,7 @@ settings.admin.snapshot.table.records=Records
 settings.admin.snapshot.table.source=Source
 settings.admin.snapshot.unresolvedNote=These components were on the wanted-list, but the builder found no upstream data for them. They count as "no data available", which is not the same as "no known vulnerabilities".
 settings.admin.snapshot.wanted.button=Download wanted-list
-settings.admin.snapshot.wanted.desc=The wanted-list names every ecosystem, package and version this instance has scanned. The builder uses it to fetch definitions for exactly those components instead of the whole database, which keeps the bundle small.
+settings.admin.snapshot.wanted.desc=Download the packages and versions used by this server. The bundle builder fetches data for this list.
 settings.admin.snapshot.wanted.failed=Failed to export the wanted-list.
 settings.admin.snapshot.wanted.privacyNote=The file contains only ecosystem, package name and version — no project names, repository URLs or file paths.
 settings.admin.template.builtIn=Built-in templates cannot be deleted.
@@ -909,15 +993,15 @@ settings.ai.enrichment.license.description=Components with Restricted, Caution,
 settings.ai.enrichment.license.title=License AI summaries
 settings.ai.enrichment.model.title=Model parameters
 settings.ai.enrichment.model.description=Temperature and token limits for LLM calls. Leave blank to use template defaults.
-settings.ai.enrichment.prompts.title=Prompt templates
-settings.ai.enrichment.prompts.description=Preview and override key prompts (saved with AI settings; no restart required).
+settings.ai.enrichment.prompts.title=Analysis instructions
+settings.ai.enrichment.prompts.description=Customize the instructions sent to AI. Save to apply changes.
 settings.ai.label.temperature=Temperature
 settings.ai.label.maxTokens=Max tokens
 settings.ai.label.dailyCallCap=Daily API cap
 settings.ai.hint.dailyCallCap=0 = unlimited. When exceeded, AI enrichment is skipped until the next day.
-settings.ai.hint.temperature=Lower means more repeatable, factual output; higher means more varied wording. Triage notes read best at 0.1–0.3 (range 0–2).
+settings.ai.hint.temperature=Default: 0.15. Range: 0–2. Lower values produce more consistent wording.
 settings.ai.hint.temperature.anthropic=Not used by Anthropic — current Claude models reject a temperature setting, so response style is steered by the prompt instead.
-settings.ai.hint.maxTokens=Ceiling on the length of a single AI response (256–8192). Set it too low and batch results are cut off mid-JSON and discarded; 1200 suits the default templates.
+settings.ai.hint.maxTokens=Default: 1200. Range: 256–8192. Limits response length; individual analysis tasks may use their own limit.
 settings.ai.label.deploymentProfile=Default deployment
 settings.ai.deployment.commercial=Commercial product
 settings.ai.deployment.saas=SaaS / network service
@@ -990,6 +1074,9 @@ settings.ai.local.hint.endpoint=Use http://localhost:11434/v1 — the /v1 suffix
 settings.ai.local.hint.model=Include the full model tag (e.g. llama3.2:latest). Run ollama pull if the model is missing.
 settings.ai.local.hint.serve=Start Ollama first: run ollama serve in a terminal, then test the connection.
 settings.ai.heading=AI Analysis Settings
+settings.ai.subtab.provider=Provider
+settings.ai.subtab.context=Analysis scope & context
+settings.ai.subtab.prompts=Instructions & past scans
 settings.ai.usage.heading=Usage today
 settings.ai.usage.calls=API calls
 settings.ai.usage.tokens=Tokens (in / out / total)
@@ -1004,17 +1091,31 @@ settings.ai.usage.pricingDisclaimer=Estimated from each model''s published per-m
 settings.ai.usage.page=Page
 settings.ai.usage.of=of
 settings.ai.usage.project=Project
+settings.ai.usage.cache.heading=Context cache efficiency (all time)
+settings.ai.usage.cache.hits=Hits
+settings.ai.usage.cache.misses=misses
+settings.ai.usage.cache.avoided=Est. avoided
+settings.ai.usage.cache.note=Unchanged CVEs/licenses reuse their previous AI summary instead of a new API call. Avoided cost is a rough estimate from your recorded average cost per summarized item.
 settings.ai.privacy.title=What is sent to AI providers
 settings.ai.privacy.body=Only vulnerability and license metadata (CVE IDs, severity, library name/version, license names) is sent to your configured provider. Full source code and repository contents are never uploaded for AI analysis.
 settings.ai.embedded.title=Embedded AI (built-in local model)
-settings.ai.embedded.description=Runs a bundled llama.cpp server on this machine (No API key, nothing leaves your machine). Preferred model: Qwen3 1.7B; any other .gguf you add to the folder is also picked up.
+settings.ai.embedded.description=Runs llama.cpp on this server without an API key or GPU. Default: Qwen3.5 2B; optional: Gemma 4 E2B. Inference data stays on this server.
 settings.ai.embedded.running=Running
 settings.ai.embedded.stopped=Stopped
 settings.ai.embedded.model=Model
 settings.ai.embedded.folder=Folder
-settings.ai.embedded.binaryMissing=llama-server binary not found. Download it from https://github.com/ggml-org/llama.cpp/releases and place llama-server(.exe) in the folder below.
-settings.ai.embedded.modelMissing=No .gguf model yet — clicking Start downloads the Qwen3-1.7B model automatically (~1.2 GB, one-time). Or place your own .gguf (e.g. qwen3-1.7b-q4_k_m.gguf) in the folder below.
-settings.ai.embedded.modelMissingAirgapped=No .gguf model yet. This host runs in air-gapped mode, so the model cannot be downloaded — copy a .gguf file (e.g. qwen3-1.7b-q4_k_m.gguf) into the folder below, then click Start.
+settings.ai.embedded.binaryMissing=Place llama-server and its companion libraries in the llama/ subfolder (https://github.com/ggml-org/llama.cpp/releases).
+settings.ai.embedded.modelMissing=No model installed. Start downloads Qwen3.5-2B Q4_K_M (1.28 GB) into model/Qwen and verifies its checksum.
+settings.ai.embedded.modelMissingAirgapped=Air-gapped mode: place a verified GGUF in model/Qwen or model/Gemma before starting.
+settings.ai.embedded.defaultLabel=Default
+ossNotices.embedded.title=Embedded AI runtime and models
+ossNotices.embedded.description=Optional downloads, not included in the application JAR. Model weights are Unsloth GGUF Q4_K_M quantizations. Preserve the licenses and attribution when redistributing.
+ossNotices.embedded.licenseLink=Full licenses, source revisions and distribution notices
+settings.ai.embedded.qwenHint=Qwen3.5 2B · 1.28 GB download · CPU default. Planning minimum: 2 vCPU / 8 GB server RAM; recommended: 4 vCPU / 8–16 GB.
+settings.ai.embedded.gemmaHint=Gemma 4 E2B · 3.11 GB download · optional CPU model. Planning minimum: 4 vCPU / 8 GB server RAM; recommended: 4 vCPU / 16 GB.
+settings.ai.embedded.customHint=Custom model: check its CPU, memory and license requirements before use.
+settings.ai.embedded.hardwareNote=Estimates include OsWL and PostgreSQL for small, occasional scans with one AI generation at a time. Burstable CPU credits affect latency. Select English, Korean or Japanese output under Scope / Context; quality varies by model.
+settings.ai.embedded.layoutHint=Folder is the embedded AI root: llama/ for the runtime, model/Qwen/ and model/Gemma/ for models. To switch: Stop → select model → Save → Start. Only installed models are listed.
 settings.ai.embedded.btn.start=Start
 settings.ai.embedded.btn.starting=Starting… (model load can take a minute)
 settings.ai.embedded.btn.downloading=Downloading model… {0}%
@@ -1031,7 +1132,7 @@ settings.ai.embedded.config.saving=Saving…
 settings.ai.embedded.config.saved=Embedded AI settings saved.
 settings.ai.embedded.config.dirNotFound=Folder not found or not a directory: {0}
 settings.ai.embedded.config.invalidModel=Invalid model file name.
-settings.ai.backfillNote=After connecting a provider, insights for recent scans are generated automatically in the background (this can take a minute). Per-CVE summaries apply to scans run after the connection — re-scan a project to fill them in.
+settings.ai.backfillNote=New scans use the saved AI settings. To update past insights, open Analysis instructions and past scans.
 settings.ai.hint.cveLimit=Caps API cost: if a scan has more matching CVEs, only the top N by severity are summarized (1–50).
 settings.ai.hint.licenseLimit=If more components qualify, only the highest-risk N are summarized per scan (1–50).
 settings.ai.label.apiKey=API Key
@@ -1047,7 +1148,7 @@ settings.ai.msg.disabled=AI analysis disabled.
 settings.ai.msg.saved=AI settings saved successfully.
 settings.ai.msg.activated={0} is now the active AI provider.
 settings.ai.msg.activatedEmbeddedStillRunning=Embedded AI is still running in the background — click Stop above to free resources.
-settings.ai.msg.enrichmentSaved=Scan enrichment settings saved.
+settings.ai.msg.enrichmentSaved=AI analysis settings saved.
 settings.ai.msg.testOk=Connection successful!
 settings.ai.provider.anthropic=Anthropic (Claude)
 settings.ai.provider.anthropic.description=Use Anthropic Claude models with an API key.
@@ -1068,13 +1169,13 @@ settings.cache.error.loadFailed=Failed to load cache settings.
 settings.cache.error.saveFailed=Save failed.
 settings.cache.heading=Cache Settings
 settings.cache.policy.always=Always Refresh
-settings.cache.policy.always.description=Fetch the latest data from deps.dev and OSV on every scan.
+settings.cache.policy.always.description=Fetch vulnerability and license data again on each scan. Existing scan results stay unchanged until rescanned.
 settings.cache.policy.custom=Custom TTL
 settings.cache.policy.custom.description=Refresh data after the specified period.
 settings.cache.policy.heading=Automatic Cache Policy
 settings.cache.policy.permanent=Permanent Cache
 settings.cache.policy.permanent.description=Library data fetched once will not be automatically refreshed.
-settings.cache.policy.savedAlways=Cache policy set to Always Refresh.
+settings.cache.policy.savedAlways=Cache policy set to refresh on every scan.
 settings.cache.policy.savedPermanent=Cache policy set to Permanent.
 settings.cache.ttl.days=day(s)
 settings.cache.ttl.hours=hour(s)
@@ -1123,14 +1224,126 @@ settings.cli.slideout.title=Create New Key
 settings.cli.status.active=Active
 settings.cli.status.inactive=Inactive
 settings.noAccess=No accessible settings. Please contact your administrator.
+settings.onboarding.rerun=↻ Revisit onboarding
 settings.pageTitle=Settings
 settings.tab.admin=Administration
 settings.tab.security=Security
 settings.tab.licensePolicy=License Policy
+settings.tab.policy=Policy & Waivers
 settings.tab.ai=AI Settings
 settings.tab.vcs=VCS Connections
 settings.tab.cli=CLI API Keys
 settings.tab.cache=Cache Settings
+settings.group.access=Access
+settings.group.policy=Analysis & policy
+settings.group.connections=Connections
+settings.group.operations=Operations
+
+# ── Policy as Code (settings tab) ──
+
+settings.policy.heading=Policy as Code
+settings.policy.description=Define security-gate policies at the organization, team, or project level, and manage waiver approvals for exceptions.
+settings.policy.subtab.policies=Policies
+settings.policy.subtab.waivers=Waivers
+settings.policy.subtab.sync=Import / Export / GitOps
+settings.policy.newPolicy=+ New Policy
+settings.policy.editPolicy=Edit Policy
+settings.policy.form.scopeType=Scope
+settings.policy.form.scopeType.organization=Organization
+settings.policy.form.scopeType.team=Team
+settings.policy.form.scopeType.project=Project
+settings.policy.form.scopeId=Applies to
+settings.policy.form.name=Name
+settings.policy.form.namePlaceholder=e.g. Default gate policy
+settings.policy.form.description=Description
+settings.policy.form.locked=Locked (lower levels cannot override this policy's fields)
+settings.policy.form.enabled=Enabled
+settings.policy.form.failOnSeverity=Fail on severity
+settings.policy.form.failOnKev=Fail on known-exploited vulnerabilities (KEV)
+settings.policy.form.failOnEpss=Fail on EPSS score ≥
+settings.policy.form.failOnLicenseViolation=Fail on license violation
+settings.policy.form.onlyNew=Only newly introduced components
+settings.policy.form.onlyReachable=Evaluate only referenced libraries (excludes UNKNOWN; opt-in)
+settings.policy.form.failOnSecrets=Fail on CRITICAL/HIGH secret findings
+settings.policy.inherit=Inherit from parent
+settings.policy.severity.critical=Critical
+settings.policy.severity.high=High
+settings.policy.severity.medium=Medium
+settings.policy.severity.low=Low
+settings.policy.severity.none=Never fail on severity
+settings.policy.noOverrides=No overrides (inherits everything)
+settings.policy.table.scope=Scope
+settings.policy.table.name=Name
+settings.policy.table.status=Status
+settings.policy.table.gate=Gate summary
+settings.policy.table.actions=Actions
+settings.policy.table.empty=No policies defined yet. The instance falls back to its global defaults.
+settings.policy.locked.badge=Locked
+settings.policy.disabled.badge=Disabled
+settings.policy.confirmDelete=Delete this policy? Lower levels will fall back to the next policy up the hierarchy.
+settings.policy.saved=Policy saved.
+settings.policy.deleted=Policy deleted.
+settings.policy.error.loadFailed=Failed to load policies.
+settings.policy.scopeOptions.error=Could not load policy scopes. Retry to try again.
+settings.policy.scopeOptions.empty=No available scope options.
+settings.policy.error.saveFailed=Failed to save policy.
+settings.policy.error.deleteFailed=Failed to delete policy.
+settings.policy.error.scopeRequired=Select where this policy applies.
+settings.policy.error.nameRequired=Name is required.
+settings.policy.waivers.selectProject=Select a project
+settings.policy.waivers.selectProjectHint=Select a project above to view or request waivers.
+settings.policy.waivers.newException=+ Request Waiver
+settings.policy.waivers.form.reason=Reason
+settings.policy.waivers.form.expiry=Expires
+settings.policy.waivers.form.targetType=Applies to
+settings.policy.waivers.targetType.cve=A specific CVE
+settings.policy.waivers.targetType.license=A specific license
+settings.policy.waivers.targetType.malicious=Malicious package flag
+settings.policy.waivers.targetType.all=Everything (whole component)
+settings.policy.waivers.form.targetId=CVE ID or SPDX license ID
+settings.policy.waivers.form.componentCoordinate=Component (optional — leave blank to apply project-wide)
+settings.policy.waivers.submit=Request Waiver
+settings.policy.waivers.requested=Waiver requested — pending approval.
+settings.policy.waivers.table.requester=Requested by
+settings.policy.waivers.table.reason=Reason
+settings.policy.waivers.table.target=Target
+settings.policy.waivers.table.expiry=Expires
+settings.policy.waivers.table.status=Status
+settings.policy.waivers.table.actions=Actions
+settings.policy.waivers.table.empty=No waivers requested for this project.
+settings.policy.waivers.approve=Approve
+settings.policy.waivers.revoke=Revoke
+settings.policy.waivers.approved=Waiver approved.
+settings.policy.waivers.revoked=Waiver revoked.
+settings.policy.waivers.error.loadFailed=Failed to load waivers.
+settings.policy.waivers.error.requestFailed=Failed to request waiver.
+settings.policy.waivers.error.actionFailed=Failed to update waiver.
+settings.policy.sync.exportAll=Export all policies (YAML)
+settings.policy.sync.exportFailed=Failed to export policies.
+settings.policy.sync.import.heading=Import from YAML
+settings.policy.sync.import.placeholder=Paste policy YAML here
+settings.policy.sync.import.submit=Import
+settings.policy.sync.import.result={0} polic(y/ies) imported.
+settings.policy.sync.import.failed=Import failed — check the YAML.
+settings.policy.sync.gitops.heading=GitOps sync
+settings.policy.sync.gitops.description=Pull .oswl/policy.yaml from a repository and apply it as the project's policy.
+settings.policy.sync.gitops.project=Project
+settings.policy.sync.gitops.repoUrl=Repository URL
+settings.policy.sync.gitops.token=Access token (optional, for private repos)
+settings.policy.sync.gitops.branch=Branch (optional — defaults to the repo's default branch)
+settings.policy.sync.gitops.submit=Sync Now
+settings.policy.sync.gitops.success=Synced — project policy updated.
+settings.policy.sync.gitops.failed=GitOps sync failed.
+settings.policy.sync.effective.heading=Effective policy viewer
+settings.policy.sync.effective.project=Project
+settings.policy.sync.effective.load=View Effective Policy
+settings.policy.sync.effective.export=Export as YAML
+settings.policy.sync.effective.loadFailed=Failed to resolve the effective policy.
+settings.policy.sync.effective.noOverride=No policy defined at this level.
+settings.policy.sync.effective.org=Organization
+settings.policy.sync.effective.team=Team
+settings.policy.sync.effective.projectLevel=Project
+
 settings.security.description=Configure the mail server and two-factor authentication for this OsWL instance.
 settings.security.error.backendNotConnected=Backend not yet connected.
 settings.security.error.mailTestFailed=Failed ({0}).
@@ -1243,7 +1456,7 @@ ossNotices.col.license=License
 ossNotices.col.source=Source
 ossNotices.col.usedFor=Used For
 ossNotices.col.version=Version
-ossNotices.data.depsdev.license=CC-BY 4.0 (generated data)
+ossNotices.data.depsdev.license=CC-BY 4.0 (generated); upstream terms also apply
 ossNotices.data.depsdev.name=deps.dev
 ossNotices.data.depsdev.usedFor=License and advisory-key lookups, dependency resolution, and OpenSSF Scorecard scores
 ossNotices.data.epss.license=Free access, attribution requested
@@ -1251,14 +1464,23 @@ ossNotices.data.epss.name=FIRST.org EPSS
 ossNotices.data.epss.usedFor=Exploit-probability scoring per CVE
 ossNotices.data.ghsa.license=CC-BY 4.0
 ossNotices.data.ghsa.name=GitHub Advisory Database
-ossNotices.data.ghsa.usedFor=Primary advisory source for npm, Maven, RubyGems, and NuGet, surfaced through OSV
+ossNotices.data.ghsa.usedFor=Package advisories queried directly and through OSV; retain original attribution
 ossNotices.data.kev.license=CC0 1.0 (Public Domain)
 ossNotices.data.kev.name=CISA KEV Catalog
 ossNotices.data.kev.usedFor=Known-exploited-vulnerability flagging
-ossNotices.data.osv.license=CC-BY 4.0 / CC0 1.0 (varies by ecosystem)
+ossNotices.data.osv.license=Varies by source, including CC-BY-SA 4.0
 ossNotices.data.osv.name=OSV (Open Source Vulnerabilities)
-ossNotices.data.osv.usedFor=Live per-component vulnerability lookups across npm, Maven, PyPI, Go, RubyGems, NuGet, and Cargo
-ossNotices.dataSources.subtitle=OsWL enriches component data live from these public feeds — data, not bundled code. Full attribution detail for each is in THIRD_PARTY_LICENSES.md.
+ossNotices.data.osv.usedFor=Package vulnerability lookups and offline snapshots; coverage and rights depend on each upstream source
+ossNotices.data.conda.license=Combined BSD-style / BSD 3-Clause / MIT notices
+ossNotices.data.conda.name=conda-forge-bot-data mapping
+ossNotices.data.conda.usedFor=Bundled Conda-to-PyPI name mapping; full upstream notices in META-INF/licenses/conda-forge-bot-data-LICENSE.txt
+ossNotices.data.cocoapods.license=MIT (specifications; each pod has its own license)
+ossNotices.data.cocoapods.name=CocoaPods Specs
+ossNotices.data.cocoapods.usedFor=Repository and package-license metadata from pod specifications
+ossNotices.data.nvd.license=NIST / CVE source terms; redistribution review pending
+ossNotices.data.nvd.name=NIST NVD
+ossNotices.data.nvd.usedFor=CVE and CPE lookup; OsWL is not endorsed or certified by the NVD
+ossNotices.dataSources.subtitle=Sources include remote feeds and bundled reference data. See THIRD_PARTY_LICENSES.md and packaged META-INF notices for attribution and unresolved redistribution terms.
 ossNotices.dataSources.title=External Data Sources
 ossNotices.footer=Full license texts are available in THIRD_PARTY_LICENSES.md in the source repository.
 ossNotices.githubLink=View Source on GitHub
@@ -1431,7 +1653,7 @@ componentDetail.defer.placeholder.date=YYYY-MM-DD
 settings.security.mail.configureNow=Configure now ↑
 settings.security.mail.notConfigured=Mail Server is not configured.
 
-# ── Roadmap #12 Organization dashboard / #16 typosquat / #17 SIEM export / #7 lockfile (added in v1.0.4 wrap-up) ──
+# ── Organization dashboard / typosquat / SIEM export / lockfile (added in v1.0.4 wrap-up) ──
 topbar.nav.orgDashboard=Organization Dashboard
 orgDashboard.topbar.label=Organization Dashboard
 orgDashboard.pageTitle=Organization Dashboard
@@ -1464,7 +1686,10 @@ componentDetail.typosquat.label=Possible typosquat
 componentDetail.typosquat.tooltip=This package name is suspiciously similar to a popular package. Verify it is the intended dependency before use.
 securityCenter.typosquat.badge=Typosquat?
 securityCenter.typosquat.tooltip=This package name is suspiciously similar to a popular package. Verify it is the intended dependency before use.
-quickImport.sbom.lockHint=You can also upload a composer.lock or conan.lock file directly.
+securityCenter.reachability.tooltip.reachable=Bytecode or a supported source import references this library; runtime execution is not proven.
+securityCenter.reachability.tooltip.notReachable=No reference to this library was found in the analyzed project bytecode.
+securityCenter.reachability.tooltip.unknown=Insufficient evidence: missing source/bytecode, unsupported syntax, partial coverage, or no static reference.
+quickImport.sbom.lockHint=You can also upload lock files directly: composer.lock (PHP), conan.lock (C/C++), Podfile.lock (CocoaPods), conda-lock.yml / pixi.lock / a conda explicit spec (Conda).
 settings.admin.auditLog.btn.exportCef=Export CEF
 settings.admin.auditLog.btn.exportJsonl=Export JSON Lines
 orgDashboard.summary.scannedProjects={0} of {1} projects scanned
@@ -1492,6 +1717,7 @@ permission.auditGroup.administration=Administration
 permission.ORG_DASHBOARD_VIEW=View Organization Dashboard
 permission.AUDIT_LOG_VIEW=View Audit Log
 permission.AUDIT_LOG_EXPORT=Export Audit Log (SIEM)
+permission.AUDIT_LOG_VERIFY=Verify Audit Log Integrity
 permission.SETTINGS_JIRA_MANAGE=Manage Jira Integration
 permission.SETTINGS_SNAPSHOT_MANAGE=Manage Offline Snapshot Bundles
 settings.ai.usage.branch=Branch
@@ -1506,15 +1732,21 @@ ossNotices.lib.flyway.name=Flyway
 ossNotices.lib.flyway.description=Versioned database schema migrations
 ossNotices.lib.springOauth2.name=Spring Security OAuth2 Client
 ossNotices.lib.springOauth2.description=OIDC / OAuth2 single sign-on client support
+ossNotices.lib.springSessionJdbc.name=Spring Session JDBC
+ossNotices.lib.springSessionJdbc.description=Cluster-wide HTTP sessions in PostgreSQL for multi-instance deployments
+ossNotices.lib.shedlock.name=ShedLock
+ossNotices.lib.shedlock.description=Cluster-wide lock preventing scheduled jobs from double-running across instances
+ossNotices.lib.cvssV4Lookup.name=CVSS v4.0 Lookup Table (cvss-v4-calculator)
+ossNotices.lib.cvssV4Lookup.description=FIRST.org's MacroVector score table, vendored for CVSS v4.0 Base/Environmental scoring
 
 # === v1.0.4 QA follow-up (AI effort / insight backfill / offline snapshot rewrite) ===
-settings.admin.snapshot.step1.heading=Step 1 — Download the wanted-list from this instance
-settings.admin.snapshot.step2.heading=Step 2 — Build the bundle on a machine with internet access
-settings.admin.snapshot.step2.desc=Copy the wanted-list to a machine that can reach the internet, then run the OsWL bundle builder there:
-settings.admin.snapshot.step2.note=The command writes bundle.zip. Copy that file back to this machine for step 3.
+settings.admin.snapshot.step1.heading=1. Download the package list
+settings.admin.snapshot.step2.heading=2. Build a bundle online
+settings.admin.snapshot.step2.desc=Move the list to an internet-connected machine, then run:
+settings.admin.snapshot.step2.note=Copy the generated bundle.zip back to this server.
 settings.admin.snapshot.build.command=./gradlew vdbBuild --args="build --wanted wanted-list.jsonl --sources osv,epss,kev,depsdev --out bundle.zip"
-settings.admin.snapshot.step3.heading=Step 3 — Import the bundle here
-settings.admin.snapshot.step3.desc=Loads the definitions into this instance. Scans from then on are answered from them.
+settings.admin.snapshot.step3.heading=3. Import the bundle
+settings.admin.snapshot.step3.desc=Choose bundle.zip to update offline vulnerability and license data.
 settings.admin.snapshot.import.mode.label=If a source already has data:
 settings.admin.snapshot.import.importing=Importing…
 settings.admin.snapshot.export.heading=Export from this instance (optional)
@@ -1529,13 +1761,13 @@ settings.ai.effort.max=Max — most detailed, most tokens
 settings.ai.effort.wire.none=Sent as: nothing — the provider decides.
 settings.ai.effort.wire.openai=Sent as: reasoning_effort="{0}"
 settings.ai.effort.wire.anthropic=Sent as: output_config.effort="{0}"
-settings.ai.enrichment.backfill.title=Existing scans
-settings.ai.enrichment.backfill.description=New scans always get AI insights. Scans that already finished are left untouched unless you ask for them here.
-settings.ai.label.autoBackfill=Regenerate automatically after a provider or language change
-settings.ai.hint.autoBackfill=Off by default. When on, saving a provider or a new prompt language re-runs the AI for recent scans in the background, which costs one API call per scan.
-settings.ai.hint.backfillButtons="Fill in missing" only touches scans without an insight. "Regenerate all" re-runs recent scans that already have one — use it after changing the language or model.
-settings.ai.backfill.btn.missing=Fill in missing insights
-settings.ai.backfill.btn.all=Regenerate all
+settings.ai.enrichment.backfill.title=AI insights for past scans
+settings.ai.enrichment.backfill.description=Generate or update AI insights for recent completed scans. Vulnerability and license findings stay unchanged.
+settings.ai.label.autoBackfill=Update past insights automatically
+settings.ai.hint.autoBackfill=When enabled, changing the provider or analysis language updates recent AI insights. This uses the AI provider and may incur charges.
+settings.ai.hint.backfillButtons=Generate missing insights, or replace existing insights with a new analysis.
+settings.ai.backfill.btn.missing=Generate missing insights
+settings.ai.backfill.btn.all=Regenerate recent insights
 settings.ai.backfill.btn.running=Starting…
 settings.ai.backfill.msg.started=Regenerating insights in the background. Reload the project pages in a minute.
 settings.ai.backfill.error.failed=Could not start the regeneration.
@@ -1557,9 +1789,292 @@ settings.ai.provider.activeBadge=Active
 settings.ai.enrichment.scope.heading=What AI summarises
 settings.ai.enrichment.context.heading=Language and deployment context
 settings.ai.enrichment.model.heading=Model parameters
-settings.ai.enrichment.prompts.heading=Prompt templates
-settings.ai.enrichment.backfill.runTitle=Run now
-settings.ai.label.autoBackfillShort=Automatic
+settings.ai.enrichment.prompts.heading=Analysis instructions
+settings.ai.enrichment.backfill.runTitle=Run analysis
+settings.ai.label.autoBackfillShort=Auto-update
 settings.ai.autoBackfill.on=On
 settings.ai.autoBackfill.off=Off
 settings.ai.hint.backfillNeedsProvider=Select and save an AI provider above first.
+
+# SAML / SCIM audit log filter group label
+permission.auditGroup.scim=SCIM Provisioning
+
+# === v1.0.5 — Slack/Teams webhook notifications ===
+
+settings.tab.webhooks=Webhooks
+permission.SETTINGS_WEBHOOK_MANAGE=Manage Webhook Notifications
+permission.auditGroup.webhook=Webhook
+permission.POLICY_MANAGE=Manage Security Policies
+permission.auditGroup.policy=Policy
+
+# === v1.0.5 — report branding ===
+
+settings.tab.reports=Reports
+permission.SETTINGS_REPORTING_MANAGE=Manage Report Branding
+settings.reports.heading=Report Branding
+settings.reports.description=Add your logo, company name, and a custom header to the compliance report.
+settings.reports.logo.label=Logo
+settings.reports.logo.upload=Upload image
+settings.reports.logo.help=PNG, JPEG, or SVG, under 350KB. Falls back to the OsWL logo when empty.
+settings.reports.companyName.label=Company name
+settings.reports.companyName.placeholder=Acme Corp
+settings.reports.companyName.help=Replaces "OsWL" in the report header. Leave blank to keep the OsWL branding.
+settings.reports.headerText.label=Header text
+settings.reports.headerText.placeholder=Confidential — internal distribution only
+settings.reports.headerText.help=Shown under the report title, e.g. a confidentiality notice.
+settings.reports.coverPage.label=Add a cover page
+settings.reports.coverPage.help=A separate title page with your logo, company name, and the project name, before the report contents.
+settings.reports.error.backend=Could not reach the server.
+settings.reports.error.logoTooLarge=Image is too large — please use a file under 350KB.
+settings.reports.error.logoInvalid=Please select a PNG, JPEG, or SVG image.
+
+# === v1.0.5 — self-diagnostics tab ===
+
+settings.tab.diagnostics=Diagnostics
+settings.diagnostics.heading=Diagnostics
+settings.diagnostics.description=Check service health and external connections.
+settings.diagnostics.results.heading=Results
+settings.diagnostics.empty=Run diagnostics to check service health.
+settings.diagnostics.btn.run=Run diagnostics
+settings.diagnostics.btn.running=Running…
+settings.diagnostics.btn.copy=Copy for support
+settings.diagnostics.copied=Copied to clipboard.
+settings.diagnostics.error.loadFailed=Diagnostics run failed.
+settings.diagnostics.status.up=Available
+settings.diagnostics.status.down=Failed
+settings.diagnostics.status.skipped=Not checked
+settings.diagnostics.status.unknown=Needs review
+
+settings.diagnostics.archive.heading=Scan archiving
+settings.diagnostics.archive.domainHeading=Data retention
+settings.diagnostics.archive.description=Keep recent scans in full. Export older scans before removing their component and CVE details. Summary counts remain available.
+settings.diagnostics.archive.loading=Loading projects…
+settings.diagnostics.archive.noProjects=No active projects to archive.
+settings.diagnostics.archive.field.project=Project
+settings.diagnostics.archive.field.retainCount=Scans to keep
+settings.diagnostics.archive.retainCount.placeholder=Server default
+settings.diagnostics.archive.selectProject=Select a project…
+settings.diagnostics.archive.btn.preview=Export older scans
+settings.diagnostics.archive.btn.previewing=Loading…
+settings.diagnostics.archive.btn.archive=Remove older scan details
+settings.diagnostics.archive.btn.archiving=Archiving…
+settings.diagnostics.archive.preview.summary={0} scan(s) pending archival, {1} component(s) total. Export downloaded.
+settings.diagnostics.archive.preview.empty=No scans to export: all completed scans are within the retention count.
+settings.diagnostics.archive.confirm=Archive {0} scan(s) of this project? Their component/CVE detail will be permanently deleted.
+settings.diagnostics.archive.confirmNoExport=WARNING: you have not downloaded the export in this session. Archiving {0} scan(s) permanently deletes their component/CVE detail with no copy kept. Continue?
+settings.diagnostics.archive.result=Archived {0} scan(s). {1} completed scan(s) total, {2} retained in full detail.
+settings.diagnostics.archive.error.projectsFailed=Could not load projects.
+settings.diagnostics.archive.error.loadFailed=Request failed.
+
+# === v1.0.5 — config export/import tab ===
+
+settings.tab.configTransfer=Config Transfer
+settings.configTransfer.heading=Config Export / Import
+settings.configTransfer.description=Move settings between OsWL servers. API keys, passwords and other secrets are excluded.
+settings.configTransfer.export.heading=Export
+settings.configTransfer.export.description=Downloads a JSON file. It never contains secrets, API keys, or passwords.
+settings.configTransfer.import.heading=Import
+settings.configTransfer.import.description=Select a bundle file to preview what would change before anything is written.
+settings.configTransfer.field.roleTemplates=Role templates
+settings.configTransfer.field.licensePolicy=License policy
+settings.configTransfer.field.aiSettings=AI settings
+settings.configTransfer.field.promptOverrides=AI prompt overrides
+settings.configTransfer.field.cache=Cache TTLs
+settings.configTransfer.field.policies=Policies
+settings.configTransfer.btn.export=Export
+settings.configTransfer.btn.exporting=Exporting…
+settings.configTransfer.btn.apply=Apply import
+settings.configTransfer.btn.applying=Applying…
+settings.configTransfer.error.exportFailed=Export failed.
+settings.configTransfer.error.previewFailed=Could not read this file as a config bundle.
+settings.configTransfer.error.applyFailed=Import failed.
+settings.configTransfer.applied=Import applied.
+settings.configTransfer.skippedBuiltIn={0} built-in role template(s) in the bundle were skipped.
+settings.configTransfer.skippedUnresolvedPolicies={0} policy(ies) were skipped — their scope could not be matched by name on this instance. See the list below for details.
+settings.webhooks.heading=Webhook Notifications
+settings.webhooks.description=Send security alerts to Slack or Teams.
+settings.webhooks.provider.label=Provider
+settings.webhooks.url.label=Webhook URL
+settings.webhooks.url.placeholder=https://hooks.slack.com/services/...
+settings.webhooks.url.help=Leave blank to keep the existing URL. The URL is encrypted at rest.
+settings.webhooks.enabled.label=Enable webhook notifications
+settings.webhooks.events.label=Notify on
+settings.webhooks.events.newCve=New CVE detected
+settings.webhooks.events.gateFailure=Gate failure
+settings.webhooks.events.scanFailure=Scan failure
+settings.webhooks.events.waiverExpiry=Waiver expiry imminent
+settings.webhooks.btn.test=Test
+settings.webhooks.btn.testing=Testing…
+settings.webhooks.test.success=Test message sent.
+settings.webhooks.test.failed=Test failed.
+settings.webhooks.error.backend=Could not reach the server.
+settings.webhooks.error.urlRequired=Enter a webhook URL to test.
+settings.webhooks.history.heading=Delivery History
+settings.webhooks.history.description=Recent webhook attempts including retries and failures.
+settings.webhooks.history.filter.all=All statuses
+settings.webhooks.history.filter.success=Success
+settings.webhooks.history.filter.failed=Failed
+settings.webhooks.history.filter.allEvents=All events
+settings.webhooks.history.event.newCve=New CVE
+settings.webhooks.history.event.gateFailure=Gate failure
+settings.webhooks.history.event.scanFailure=Scan failure
+settings.webhooks.history.event.waiverExpiry=Waiver expiry
+settings.webhooks.history.col.time=Time
+settings.webhooks.history.col.event=Event
+settings.webhooks.history.col.project=Project
+settings.webhooks.history.col.status=Status
+settings.webhooks.history.col.attempt=Attempt
+settings.webhooks.history.col.error=Error
+settings.webhooks.history.error=Could not load delivery history.
+settings.webhooks.history.empty=No deliveries yet.
+common.refresh=Refresh
+common.retry=Retry
+
+# === Dark mode theme switcher ===
+topbar.theme=Theme
+topbar.theme.light=Light
+topbar.theme.dark=Dark
+topbar.theme.system=System
+topbar.theme.saveFailed=Theme preference could not be saved. It will be retried automatically.
+security.outboundUrl.error.public=Public internet addresses are not allowed in air-gapped mode.
+
+# === Global search palette ===
+search.button=Search
+search.dialogLabel=Global search
+search.placeholder=Search projects, components, CVEs…
+search.group.projects=Projects
+search.group.components=Components
+search.group.cves=CVEs
+search.loading=Searching…
+search.empty=No results found.
+search.error=Search failed. Please try again.
+search.footer.hint=↑↓ Navigate · Enter Open · esc Close
+
+# ── Mobile notifications view ──
+
+mobile.pageTitle=Notifications
+mobile.desktopSite=Desktop site
+mobile.waivers.heading=Waivers awaiting approval
+mobile.waivers.empty=No pending waivers.
+mobile.waivers.approve=Approve
+mobile.waivers.revoke=Revoke
+mobile.waivers.approved=Waiver approved.
+mobile.waivers.revoked=Waiver revoked.
+mobile.waivers.error.approveFailed=Failed to approve waiver.
+mobile.waivers.error.revokeFailed=Failed to revoke waiver.
+mobile.action.retry=Retry
+settings.dirty.summary={0} unsaved change(s)
+settings.ai.embedded.error.stopFailed=Failed to stop Embedded AI.
+mobile.alerts.heading=New CVE alerts
+mobile.alerts.empty=All clear — no new alerts.
+mobile.alerts.acknowledgeAll=Mark all seen
+mobile.alerts.acknowledged=Marked as seen.
+mobile.alerts.error.ackFailed=Failed to mark alerts as seen.
+
+componentDetail.sourceAnalysis=Source import analysis shows references, not runtime execution. Missing references remain unknown.
+
+componentDetail.sourceFiles={0}: {1} source files read
+
+componentDetail.sourcePartial=Coverage is partial: some files could not be analyzed within the limits.
+
+componentDetail.sourceSubset=Coverage includes supported static import syntax only.
+
+componentDetail.sourceReason.REFERENCE_FOUND=An import reference was found. Python distribution-to-module names are inferred; this does not prove execution.
+
+componentDetail.sourceReason.NO_PACKAGE_MAPPING=No supported package-to-module mapping is available.
+
+componentDetail.sourceReason.NO_LANGUAGE_FILES=No source files for this language were read.
+
+componentDetail.sourceReason.ABSENCE_NOT_PROVEN=No supported import matched. Dynamic and transitive imports remain unknown.
+
+securityCenter.archivedSummary=This scan is archived. Saved totals are shown; component details are no longer available.
+
+common.http.unauthenticated=Your session expired. Sign in again.
+
+common.http.forbidden=You do not have permission for this action.
+
+common.http.timeout=The request timed out. Try again.
+
+common.http.network=Connection failed. Check your connection and retry.
+
+quickImport.error.interrupted=Import interrupted after its worker stopped. Start a new import to retry.
+
+componentDetail.lookup.title=Latest lookup status
+componentDetail.lookup.RESOLVED=Completed
+componentDetail.lookup.UNAVAILABLE=Unavailable — retry required
+componentDetail.lookup.UNSUPPORTED=Unsupported package mapping
+componentDetail.lookup.NOT_CONFIGURED=Not configured
+
+onboarding.team.heading=Add a teammate
+onboarding.team.help=Create access with a temporary password. Share it securely; the user must change it on first login.
+onboarding.team.success=Account created.
+onboarding.team.name=Name
+onboarding.team.email=Email
+onboarding.team.password=Temporary password
+onboarding.team.role=Role template
+onboarding.team.selectRole=Select a role template
+onboarding.team.create=Create account
+orgSummary.title=Organization risk briefing
+orgSummary.actions=Decisions and follow-up
+orgSummary.back=Organization dashboard
+orgSummary.print=Print / Save PDF
+orgSummary.generated=Prepared: {0}
+orgSummary.kev={0} exploited-vulnerability findings awaiting triage
+orgSummary.kevAction=Assign an owner and remediation date; verify deployment before closing the action.
+orgSummary.high={0} critical and {1} high-severity findings
+orgSummary.highAction=Review exposure in the priority projects and confirm upgrade or exception decisions.
+orgSummary.license={0} license-policy violations
+orgSummary.licenseAction=Confirm distribution obligations and record the responsible reviewer.
+orgSummary.coverage=Coverage and interpretation
+orgSummary.scanned={0} of {1} projects have a completed scan.
+orgSummary.caveat=Uses each project’s latest completed scan. Counts are finding occurrences, not unique CVEs. Reviewed or deferred does not mean fixed. A completed scan does not guarantee full analysis coverage; check the scan date and component analysis status before making decisions.
+orgSummary.projects=Priority projects (up to five)
+orgSummary.project=Project
+orgSummary.lastScan=Last scan
+orgSummary.kevShort=KEV awaiting triage
+orgSummary.empty=Run a project scan to populate this briefing.
+
+onboarding.team.noRoles=Create a role template in Settings, then retry.
+
+webPush.title=Browser security alerts
+webPush.back=Projects
+webPush.help=Choose security alerts for this browser. Open OsWL to view details. Renew the subscription within 30 days to keep receiving alerts.
+webPush.unconfigured=Notifications are not available on this server. Ask an administrator to enable web push and configure the VAPID keys.
+webPush.unsupported=This browser needs a secure connection and Push API support.
+webPush.active=This browser is subscribed.
+webPush.events=Events
+webPush.high=New high or critical vulnerabilities
+webPush.gate=Security gate failures
+webPush.enable=Save notification settings
+webPush.disable=Unsubscribe this browser
+webPush.failed=Request failed. Retry; if it continues, unsubscribe this browser and enable again.
+webPush.denied=Allow notifications in browser settings to subscribe.
+webPush.event.NEW_HIGH_RISK=A new high-risk vulnerability needs review. Open OsWL for details.
+webPush.event.GATE_FAILURE=A security gate failed. Open OsWL to review the result.
+
+ossNotices.lib.re2j.name=RE2/J
+ossNotices.lib.re2j.description=Bounded regular-expression engine
+ossNotices.lib.webPush.name=web-push
+ossNotices.lib.webPush.description=Browser push encryption and VAPID
+ossNotices.lib.bouncyCastle.name=Bouncy Castle
+ossNotices.lib.bouncyCastle.description=Cryptographic provider for browser push
+ossNotices.lib.jose4j.name=jose4j
+ossNotices.lib.jose4j.description=VAPID JSON Web Signature support
+settings.cache.policy.savedCustom=Cache duration set to {0} {1}.
+settings.ai.invalidParameters=Enter response variability from 0 to 2 and an integer token limit from 256 to 8192. The daily limit must be an integer from 0 to 1000000.
+settings.ai.defaultTemperature=Default: 0.15
+settings.ai.defaultMaxTokens=Default: 1200
+settings.cli.delete.confirm=Delete API key "{0}"? Clients using it will no longer be able to authenticate.
+settings.cli.delete.failed=Could not delete the API key. Try again.
+settings.diagnostics.diskSpace={0} free / {1} total ({2}% free)
+settings.diagnostics.copyFailed=Could not copy. Check clipboard permissions.
+settings.diagnostics.label.db=Database
+settings.diagnostics.label.disk=Disk space
+settings.diagnostics.label.snapshot=Offline data
+settings.diagnostics.label.sidecar=Embedded AI
+componentDetail.version.unresolved=Version unresolved
+settings.ai.temperatureInvalid=Enter a number from 0 to 2.
+settings.ai.maxTokensInvalid=Enter an integer from 256 to 8192.
+settings.ai.dailyCallCapInvalid=Enter an integer from 0 to 1000000.
+settings.ai.checkFields=Not saved. Check the highlighted fields.
+componentDetail.cve.openNvd=Open {0} in NVD (new tab)
diff --git a/src/main/resources/messages_ja.properties b/src/main/resources/messages_ja.properties
index bb251986..c5009632 100644
--- a/src/main/resources/messages_ja.properties
+++ b/src/main/resources/messages_ja.properties
@@ -1,7 +1,8 @@
 # =====================================================
-# OsWL — messages_ja.properties (Japanese / 日本語)
+# OsWL — messages.properties (English)
 # =====================================================
-# キーは機能領域ごとにグループ化されています。
+# Keys are grouped by feature area. Unused keys removed during i18n cleanup.
+
 
 # ── Common ──
 
@@ -10,6 +11,8 @@ common.applyToSelected=選択項目に適用
 common.bulkActions=一括操作
 common.cancel=キャンセル
 common.dismiss=閉じる
+common.edit=編集
+common.hideValue=値を隠す
 common.clear=クリア
 common.clearAll=すべてクリア
 common.close=閉じる
@@ -27,6 +30,10 @@ common.loading=読み込み中…
 common.no=いいえ
 common.nonPatchable=パッチ不可
 common.outdated=旧バージョン
+common.pagination.first=最初のページ
+common.pagination.previous=前のページ
+common.pagination.next=次のページ
+common.pagination.last=最後のページ
 common.patchable=パッチ可能
 common.pdf=PDF
 common.project=プロジェクト
@@ -37,6 +44,9 @@ common.saved=保存しました。
 common.saving=保存中…
 common.select=選択
 common.selectAll=すべて選択
+common.selectItem={0} を選択
+common.selectOne=選択してください
+common.showValue=値を表示
 common.unignore=無視を解除
 common.unknown=不明
 common.unreviewed=未レビュー
@@ -69,6 +79,7 @@ topbar.nav.riskTrend=リスク推移
 topbar.nav.scanHistory=スキャン履歴
 topbar.nav.securityCenter=セキュリティセンター
 topbar.nav.versionDiff=バージョン差分…
+topbar.mobileView=モバイル通知
 topbar.noScanYet=スキャンはまだありません
 topbar.projects=プロジェクト
 topbar.settings=設定
@@ -141,6 +152,31 @@ auth.setup.label.name=名前
 auth.setup.label.password=パスワード
 auth.setup.label.passwordConfirm=パスワード（確認）
 auth.setup.pageTitle=セットアップ
+onboarding.pageTitle=オンボーディング
+onboarding.step1.heading=SSO とチームアクセス
+onboarding.step1.body=OIDC/SAML シングルサインオンを接続するか、チームメンバーを直接招待できます。後で設定からいつでも変更できます。
+onboarding.step1.linkSso=SSO を設定 →
+onboarding.step1.linkInvite=ユーザーを招待 →
+onboarding.step2.heading=リポジトリを接続
+onboarding.step2.body=GitHub、GitLab、Bitbucket を連携すると、リポジトリの一覧表示や非公開プロジェクトのインポートができます。公開リポジトリは URL だけでもインポートできます。
+onboarding.step2.link=VCS プロバイダーを接続 →
+onboarding.step2.linkQuickImport=プロジェクトを Quick Import →
+onboarding.step3.heading=ポリシーのデフォルト
+onboarding.step3.body=ライセンスの分類とセキュリティゲートの判定基準を確認してください。ゲートはスキャン結果を評価します。Policy API で組織・チーム・プロジェクト別の基準を設定できます。
+onboarding.step3.link=ライセンスポリシーを確認 →
+onboarding.step4.heading=通知
+onboarding.step4.body=Slack や Teams の Webhook を追加すると、新規 CVE やゲート失敗の通知がメールだけでなくチームが実際に見るチャンネルにも届きます。
+onboarding.step4.link=Webhook を設定 →
+onboarding.btn.skipAll=後で行う
+onboarding.btn.back=戻る
+onboarding.btn.next=次へ
+onboarding.btn.finish=完了
+onboarding.step.done=完了済み
+onboarding.inline.provider=プロバイダー
+onboarding.inline.username=ユーザー名
+onboarding.inline.connect=接続
+onboarding.inline.connecting=接続中…
+onboarding.inline.connectFailed=接続に失敗しました。入力内容を確認して再試行してください。
 auth.setup.placeholder.email=oswl@company.com
 auth.setup.placeholder.name=名前を入力
 auth.setup.placeholder.password=パスワードを入力
@@ -180,6 +216,7 @@ projects.card.lastScanned=最終スキャン : {0}
 projects.card.newCves=新規 CVE {0}件
 projects.card.newCves.dismiss=新規 CVE アラートを閉じる
 projects.card.openActions=プロジェクト操作を開く
+projects.emptyActive=アクティブなプロジェクトがありません。プロジェクトをインポートまたは作成して始めましょう。
 projects.github.connected=GitHub に接続しました。
 projects.github.denied=GitHub の認可が拒否されました。
 projects.github.disconnected=GitHub の接続を解除しました。
@@ -249,17 +286,20 @@ quickImport.error.loadRepos=VCS プロバイダーからリポジトリを読み
 quickImport.error.tokenDecrypt=保存された VCS トークンを復号できませんでした（暗号化キーが変更された可能性があります）。設定 → VCS でアカウントを再接続してください。
 security.outboundUrl.error.scheme=http:// および https:// の URL のみ許可されています。
 security.outboundUrl.error.invalid=スキームを含む有効な URL を入力してください（例：https://gitlab.example.com）。
-security.outboundUrl.error.private=この URL はプライベートまたはローカルネットワークアドレスを指しています。公開到達可能なホスト名を使用してください。
+security.outboundUrl.error.private=この URL はプライベートまたはローカルネットワークのアドレスを指しています。インターネットから接続できるホスト名を使用してください。
 security.outboundUrl.error.loopback=localhost およびループバックアドレス（127.0.0.1）への接続は許可されていません。
 security.outboundUrl.error.metadata=クラウドメタデータまたはリンクローカルアドレス（169.254.x.x）への接続は許可されていません。
 security.outboundUrl.error.unresolvable=ホスト名を解決できませんでした。URL を確認して再度お試しください。
 quickImport.error.sessionExpired=インポートセッションの有効期限が切れました。サーバーが再起動された可能性があります — 再度お試しください。
+quickImport.status.trackingUnauthorized=セッションの期限切れまたはアクセス権の変更により、インポートの追跡を停止しました。再度サインインしてください。
+quickImport.status.jobMissing=このインポートジョブは利用できなくなりました。ページを更新するか、新しいインポートを開始してください。
+quickImport.status.unavailable=インポートの状態を一時的に確認できません。再試行間隔を延ばして確認します…
 quickImport.error.startFailed=インポートの開始に失敗しました：{0}
 quickImport.error.unexpected=予期しないエラーによりインポートに失敗しました。サーバーログを確認するか後で再試行してください。
 quickImport.error.scanSubmitFailed=インポートは完了しましたが、セキュリティスキャンを送信できませんでした。CLI からスキャンを実行してください。
 quickImport.error.parseFailed=依存関係の解析に失敗しました。ロックファイルが無いか、非対応のレイアウトの可能性があります。
 quickImport.error.javaRequired=Gradle/Maven の依存関係解決には OsWL サーバーに Java/JDK が必要です。JDK 25 以上をインストールしてサーバーを再起動してください。
-quickImport.error.noManifests=対応するマニフェストファイルがリポジトリに見つかりませんでした。ロックファイル（pom.xml、package-lock.json 等）がコミットされているか確認してください。
+quickImport.error.noManifests=対応する依存関係ファイルが見つかりません。pom.xml などのマニフェスト、または package-lock.json などのロックファイルがコミットされているか確認してください。
 quickImport.error.gradleFailed=サーバー上での Gradle 依存関係解決に失敗しました。JDK 25 以上がインストールされ、./gradlew でビルドできることを確認してください。
 quickImport.error.clonePathTooLong=クローンに失敗しました：リポジトリのパスが Windows の制限を超えています。Git の長いパスを有効にするか、Linux/macOS でクローンしてください。
 quickImport.error.cloneFailed=リポジトリのクローンに失敗しました。URL、ブランチ、VCS 接続を確認してください。
@@ -323,7 +363,6 @@ quickImport.sbom.failed=SBOM のインポートに失敗しました。有効な
 quickImport.sbom.success={0} 個のコンポーネントを "{1}" にインポートしました — スキャンを開始しました。
 quickImport.sbom.skipped=（{0} 個のコンポーネントをスキップ — 対応 purl なし）
 quickImport.sbom.open=セキュリティセンターを開く →
-quickImport.sbom.lockHint=composer.lock または conan.lock ファイルを直接アップロードすることもできます。
 quickImport.url.hint=公開リポジトリは URL だけでインポート・スキャンできます（アカウント接続不要）。プライベートリポジトリは設定で VCS アカウントの接続が必要です。トークンは暗号化して保存され、VCS プロバイダーの呼び出し以外でサーバー外に出ることはありません。
 quickImport.url.placeholder=https://github.com/owner/repository
 
@@ -352,7 +391,9 @@ gitIntegration.btn.importAll=すべてインポート
 gitIntegration.btn.imported=✓ インポート済み！
 gitIntegration.btn.reloadRepos=リポジトリを再読み込み
 gitIntegration.error.connectionFailed=接続に失敗しました。トークンを確認してください。
+gitIntegration.error.importFailed={0}件のインポートに失敗しました。リポジトリへのアクセス権を確認して再試行してください。
 gitIntegration.error.networkError=ネットワークエラーです。再度お試しください。
+gitIntegration.error.reposLoadFailed=リポジトリを読み込めませんでした。トークンを確認して再試行してください。
 gitIntegration.heading=Git に接続
 gitIntegration.label.addNewAccount=新しい GitHub アカウントを追加
 gitIntegration.loading.checkingConnection=接続を確認中…
@@ -369,6 +410,7 @@ gitIntegration.status.loading=読み込み中…
 gitIntegration.status.notConnected=未接続
 gitIntegration.status.updated=更新しました！
 gitIntegration.table.col.title=リポジトリ
+gitIntegration.table.empty=このアカウントのリポジトリが見つかりません。
 
 # ── Security Center ──
 
@@ -392,6 +434,10 @@ securityCenter.filter.outdated=旧バージョン
 securityCenter.filter.patchabilityLabel=パッチ可否
 securityCenter.filter.patchable=パッチ可能
 securityCenter.filter.permitted=許可
+securityCenter.filter.reachability=到達可能性
+securityCenter.filter.reachable=到達可能
+securityCenter.filter.notReachable=到達不可
+securityCenter.filter.unknownReachability=呼び出し未確認
 securityCenter.filter.restricted=制限
 securityCenter.filter.reviewStatus=レビューステータス
 securityCenter.filter.reviewed=レビュー済み
@@ -401,13 +447,15 @@ securityCenter.filter.unknown=不明
 securityCenter.filter.unscored=未評価
 securityCenter.filter.upToDate=最新
 securityCenter.pageTitle=セキュリティセンター
+securityCenter.componentPanel.ariaLabel=コンポーネント詳細
+securityCenter.panel.loadFailed=コンポーネントの詳細を読み込めませんでした。
 securityCenter.malicious.badge=悪意あり
 securityCenter.malicious.tooltip=OSV はこのパッケージバージョンを悪意ありと判定しています（MAL- アドバイザリ）。直ちに削除してください。
 riskGraph.security.total=脆弱性 {0} 件を検出
 riskGraph.license.total=ライセンスステータス別コンポーネント {0} 個
-securityCenter.deferReminder={0} 個のコンポーネントの保留期間が終了しました。まだ修正しませんか？以下を再確認してください。
-securityCenter.aiGenerating=AI要約を生成中…
+securityCenter.deferReminder={0} 個のコンポーネントの保留期間が終了しました。以下の項目を確認し、対応計画を更新してください。
 securityCenter.scanning=分析を実行中 — 完了すると結果が自動的に更新されます。
+securityCenter.aiGenerating=AI要約を生成中…
 securityCenter.error.actionFailed=変更の適用に失敗しました。再度お試しください。
 securityCenter.export.cyclonedx=CycloneDX
 securityCenter.export.sbom=SBOM（CycloneDX）
@@ -418,17 +466,43 @@ securityCenter.sort.label=並び替え
 securityCenter.sort.risk=リスク（デフォルト）
 securityCenter.sort.name=名前
 securityCenter.sort.license=ライセンスリスク
+securityCenter.views.label=保存済みビュー
+securityCenter.views.empty=保存済みビューはまだありません。
+securityCenter.views.loading=保存されたビューを読み込み中…
+securityCenter.views.loadFailed=保存されたビューを読み込めませんでした。接続を確認して再試行してください。
+securityCenter.views.save=現在のビューを保存
+securityCenter.views.namePlaceholder=ビュー名
+securityCenter.views.shared=チームと共有
+securityCenter.views.sharedBadge=共有中
+securityCenter.views.saveBtn=保存
+securityCenter.views.copyLink=共有リンクをコピー
+securityCenter.views.deleteBtn=保存済みビューを削除
 securityCenter.table.component=コンポーネント
 securityCenter.table.license=ライセンス
+securityCenter.table.loadMore=もっと見る
 securityCenter.table.noResults=スキャン結果はまだありません
+securityCenter.table.notAnalyzed=未分析
+securityCenter.table.notAnalyzedTooltip=未対応のエコシステム、照会障害、またはオフラインデータ不足により、このコンポーネントの脆弱性照会は正常に完了していません。CVE 0 件は安全性を保証しません。
 securityCenter.table.patchability=パッチ可否
 securityCenter.table.review=レビュー
 securityCenter.table.runScan=CLI または Git 連携でスキャンを実行すると、検出されたコンポーネントが表示されます。
 securityCenter.table.securityIssues=セキュリティ問題
+securityCenter.table.selectAllLoadedTooltip=現在画面に読み込まれているコンポーネントのみが選択されます。フィルターに一致するすべてのコンポーネントではありません。もっと選択するには、先に「もっと見る」で読み込んでください。
+securityCenter.table.showingCount=全 {1} 件中 {0} 件を表示中
 securityCenter.updateChangeMessage=ライブラリの変更が見つかりました。ご確認ください。
 securityCenter.updateDetected=更新を検出しました。
-securityCenter.typosquat.badge=タイポスクワット？
-securityCenter.typosquat.tooltip=このパッケージ名は有名なパッケージと酷似しています。使用前に意図した依存関係か確認してください。
+securityCenter.findings.heading=シークレット & IaC 検出
+securityCenter.findings.count=（{0}件検出）
+securityCenter.findings.noValueNote=一致した値そのものは保存されません — 場所と復元不可能なフィンガープリントのみを保存します。
+securityCenter.findings.table.type=種類
+securityCenter.findings.table.severity=深刻度
+securityCenter.findings.table.rule=ルール
+securityCenter.findings.table.file=ファイル
+securityCenter.findings.table.description=説明
+securityCenter.findings.empty=このスキャンではシークレットや IaC の設定ミスは検出されませんでした。
+securityCenter.findings.notRun=完了したスキャンはまだありません。スキャンを実行するとセキュリティ検出結果が表示されます。
+securityCenter.findings.type.secret=シークレット
+securityCenter.findings.type.iac=IaC 設定ミス
 
 # ── Component Detail ──
 
@@ -442,6 +516,8 @@ componentDetail.btn.deferException=保留（例外）
 componentDetail.cve.affects=影響範囲
 componentDetail.cve.aiSummary=AI 平易な要約
 componentDetail.cve.cvssVector=CVSS ベクトル
+componentDetail.cve.envScore=環境スコア
+componentDetail.cve.envScore.tooltip=このプロジェクトのデプロイメントプロファイルとコンポーネントのランタイムスコープを反映して調整した CVSS 基本スコアです — 一般的な深刻度ではなく、ここで実際にどれだけ重要かを示します。
 componentDetail.cve.empty=このコンポーネントにセキュリティ脆弱性は検出されませんでした。
 componentDetail.cve.fix=修正
 componentDetail.cve.ghsaId=GHSA
@@ -488,7 +564,7 @@ componentDetail.defer.success=保留を確定しました。
 componentDetail.defer.title=脆弱性を保留
 componentDetail.depPath.direct=直接依存関係（深さ 1）
 componentDetail.depPath.fallbackOurProject=（自プロジェクト）
-componentDetail.depPath.noPathData=完全なパスツリーは利用できません — 更新版 CLI で再スキャンすると依存関係ツリー全体が表示されます。
+componentDetail.depPath.noPathData=このスキャンには依存関係のパス情報がありません。対応するロックファイルまたは依存関係グラフを含めて再スキャンしてください。確認できる範囲はエコシステムと入力データによって異なります。
 componentDetail.depPath.viaIntermediate={0} 個の中間依存を経由（深さ {1}）
 componentDetail.depPath.viaIntermediates={0} 個の中間依存を経由（深さ {1}）
 componentDetail.deprecated.hint=既知の CVE はありませんが、このバージョンはメンテナンスされていません。サポート対象のリリースにアップグレードしてください。
@@ -512,7 +588,7 @@ componentDetail.license.legalRisk=法的リスク — 出荷前の法務レビ
 componentDetail.license.nonStandard=非標準のライセンス識別子 — SPDX ポリシーリストに見つかりません。
 componentDetail.license.nonStandardHint1=識別子
 componentDetail.license.nonStandardHint2=は認識される SPDX 表現ではありません。本番利用前に手動レビューが必要です。
-componentDetail.license.permissive=寛容なライセンス — 商用利用・改変・再配布を制限なく行えます。
+componentDetail.license.permissive=パーミッシブライセンス — 一般に商用利用・改変・再配布を認めますが、表示義務など、そのライセンスの条件を守る必要があります。
 componentDetail.license.unknown=ライセンス情報が見つかりません — 本番利用前に手動レビューを推奨します。
 componentDetail.malicious.label=悪意あるパッケージ
 componentDetail.outdated.hint=既知の脆弱性は検出されていませんが、最新バージョンではありません。
@@ -548,12 +624,14 @@ componentDetail.patch.success.changedFile=変更されたファイル
 componentDetail.patch.success.showChange=変更内容は？
 componentDetail.patch.success.hideChange=変更詳細を隠す
 componentDetail.patch.title=パッチ適用
+componentDetail.reachabilityEvidence.description=あなたのコードは次を通じて脆弱なライブラリを参照しています:
 componentDetail.safe.hint=既知の脆弱性は検出されていません。このコンポーネントは安全に使用できます。
 componentDetail.scorecard.label=Scorecard
 componentDetail.scorecard.tooltip=deps.dev の OpenSSF Scorecard 総合スコア（0〜10）。高いほどセキュリティプラクティスが良好に維持されています。
 componentDetail.section.dependencyPath=これはどこから来た？（依存関係パス）
 componentDetail.section.description=コンポーネントの説明
 componentDetail.section.licenseInfo=ライセンス情報
+componentDetail.section.reachabilityEvidence=なぜ到達可能なのか？
 componentDetail.section.vulnerabilityDetails=脆弱性の詳細
 componentDetail.status.notReviewed=未レビュー
 componentDetail.status.reviewed=レビュー済み
@@ -567,8 +645,6 @@ componentDetail.patch.latestUpgrade=最新リリースへのアップグレー
 componentDetail.vuln.noPrSupport=CLI インポートのプロジェクトは自動 PR 作成に対応していません。
 componentDetail.vuln.upgradeHint=次のバージョンにアップグレード：
 componentDetail.vuln.upgradeHint2=既知の CVE を解決します。
-componentDetail.typosquat.label=タイポスクワットの疑い
-componentDetail.typosquat.tooltip=このパッケージ名は有名なパッケージと酷似しています。使用前に意図した依存関係か確認してください。
 
 # ── Risk tags ──
 
@@ -597,7 +673,7 @@ license.deployment.binary=オンプレミスバイナリ
 license.deployment.embedded=組み込みデバイス
 license.deployment.library=ライブラリ / SDK
 license.deployment.saas=SaaS / ホスティングのみ
-license.disclaimer=義務の分類、競合警告、エクスポートされる成果物は SPDX メタデータに基づき自動生成され、ベストエフォートのガイダンスを提供します。これらは法的助言ではありません。配布、M&A のデューデリジェンス、規制開示、顧客契約で利用する前に有資格の法律専門家にご相談ください。
+license.disclaimer=義務の分類、競合警告、エクスポートしたファイルは、SPDX メタデータに基づく自動生成の参考情報であり、法的助言ではありません。配布、M&A のデューデリジェンス、規制上の開示、顧客契約に利用する前に、法律の専門家による確認を受けてください。
 license.disclaimer.prefix=免責事項。
 license.empty=ライセンスデータがありません。
 license.empty.hint=スキャンを実行してこのプロジェクトで使用されているライセンスを検出してください。
@@ -643,7 +719,7 @@ license.obligations.orChoice.hint=OR 式の1つの選択肢として提供され
 license.obligations.viewSpdx=SPDX ライセンス全文を表示
 license.pageTitle=プロジェクトのライセンス
 license.review.affectedLibraries=影響を受けるライブラリ
-license.review.description=ライセンス宣言が欠落・プロプライエタリ・非 SPDX のコンポーネント — 手動の法務レビュー対象としてフラグします。
+license.review.description=ライセンス情報がない、プロプライエタリである、または SPDX 識別子で確認できないコンポーネントです。個別の法務レビューが必要です。
 license.review.empty=すべてのコンポーネントに認識される SPDX ライセンスがあります。
 license.review.empty.hint=このスキャンでは手動レビューは不要です。
 license.review.heading=レビューが必要な項目
@@ -663,6 +739,8 @@ riskTrend.ai.notEnoughData=インサイトを生成するためのスキャン
 riskTrend.chart.license=ライセンスリスク
 riskTrend.chart.security=セキュリティリスク
 riskTrend.chart.xAxis=バージョン
+riskTrend.chart.viewAsTable=表で表示
+riskTrend.chart.viewAsChart=グラフで表示
 report.compliance.title=コンプライアンスレポート
 report.compliance.type=コンプライアンスレポート · CRA / ISMS-P
 report.compliance.toolbarSubtitle={0} — コンプライアンスレポート
@@ -720,6 +798,7 @@ riskTrend.pageTitle=リスク推移
 # ── Scan History ──
 
 scanHistory.col.components=コンポーネント
+scanHistory.archived.label=アーカイブ済み
 scanHistory.col.scannedAt=スキャン日時
 scanHistory.col.source=ソース
 scanHistory.col.status=ステータス
@@ -757,6 +836,7 @@ versionDiff.tab.all=すべて
 versionDiff.tab.newThreats=新規の脅威
 versionDiff.tab.removed=削除
 versionDiff.tab.updated=更新
+versionDiff.tabEmpty=このカテゴリの項目はありません。
 
 # ── Settings ──
 
@@ -844,7 +924,7 @@ settings.admin.snapshot.import.button=インポート
 settings.admin.snapshot.import.failed=スナップショットバンドルのインポートに失敗しました。
 settings.admin.snapshot.import.fromPath.button=パスからインポート
 settings.admin.snapshot.import.fromPath.placeholder=サーバーの取り込みディレクトリからの相対パス
-settings.admin.snapshot.import.fromPath.toggle=バンドルはすでにサーバー上にある — パスを指定して取り込む
+settings.admin.snapshot.import.fromPath.toggle=サーバー上のファイルを使用
 settings.admin.snapshot.import.mode.auto=バンドルの指定に従う（推奨）
 settings.admin.snapshot.import.mode.merge=マージ — レコードを追加・更新し、バンドルが取り下げとしたものは削除します
 settings.admin.snapshot.import.mode.replace=置換 — そのソースの既存データをすべて削除してから取り込みます
@@ -869,7 +949,7 @@ settings.admin.snapshot.table.records=レコード数
 settings.admin.snapshot.table.source=ソース
 settings.admin.snapshot.unresolvedNote=要求リストにはあったものの、ビルダーが上流データを見つけられなかったコンポーネントです。「データなし」として扱われ、「脆弱性なし」という意味ではありません。
 settings.admin.snapshot.wanted.button=ウォンテッドリストをダウンロード
-settings.admin.snapshot.wanted.desc=要求リストには、このインスタンスがスキャンしたエコシステム・パッケージ・バージョンが含まれます。ビルダーはこのリストを元に、DB 全体ではなく対象コンポーネントの定義だけを取得するため、バンドルが小さく済みます。
+settings.admin.snapshot.wanted.desc=このサーバーで使用するパッケージとバージョンの一覧を取得します。バンドル作成ツールはこの一覧の情報を収集します。
 settings.admin.snapshot.wanted.failed=ウォンテッドリストのエクスポートに失敗しました。
 settings.admin.snapshot.wanted.privacyNote=ファイルに含まれるのはエコシステム・パッケージ名・バージョンだけです。プロジェクト名・リポジトリ URL・ファイルパスは含まれません。
 settings.admin.template.builtIn=組み込みテンプレートは削除できません。
@@ -913,15 +993,15 @@ settings.ai.enrichment.license.description=制限・注意・不明のライセ
 settings.ai.enrichment.license.title=ライセンス AI 要約
 settings.ai.enrichment.model.title=モデルパラメータ
 settings.ai.enrichment.model.description=LLM 呼び出しの Temperature とトークン上限。空欄の場合はテンプレートの既定値を使用します。
-settings.ai.enrichment.prompts.title=プロンプトテンプレート
-settings.ai.enrichment.prompts.description=主要なプロンプトをプレビュー・上書きします（AI 設定とともに保存、再起動不要）。
+settings.ai.enrichment.prompts.title=分析指示
+settings.ai.enrichment.prompts.description=AIに渡す指示を編集し、保存してください。
 settings.ai.label.temperature=応答の多様性
 settings.ai.label.maxTokens=最大トークン数
 settings.ai.label.dailyCallCap=1日の API 上限
 settings.ai.hint.dailyCallCap=0 = 無制限。超過した場合、翌日まで AI 強化はスキップされます。
-settings.ai.hint.temperature=低いほど一貫した事実重視の出力に、高いほど表現が多様になります。トリアージノートは 0.1〜0.3 が適しています（範囲 0〜2）。
+settings.ai.hint.temperature=既定値は0.15、範囲は0～2です。低いほど一貫した回答になります。
 settings.ai.hint.temperature.anthropic=Anthropic では使用されません — 現行の Claude モデルは temperature の指定を受け付けないため、応答スタイルはプロンプトで調整します。
-settings.ai.hint.maxTokens=AI 応答 1 件あたりの最大長です（256〜8192）。低すぎるとバッチ結果が JSON の途中で切れ、まとめて破棄されます。既定のテンプレートには 1200 が適しています。
+settings.ai.hint.maxTokens=既定値は1200、範囲は256～8192です。応答の長さを制限します。分析処理ごとの上限が優先される場合があります。
 settings.ai.label.deploymentProfile=既定のデプロイ形態
 settings.ai.deployment.commercial=商用製品
 settings.ai.deployment.saas=SaaS / ネットワークサービス
@@ -994,6 +1074,9 @@ settings.ai.local.hint.endpoint=http://localhost:11434/v1 を使用します —
 settings.ai.local.hint.model=完全なモデルタグを含めてください（例：llama3.2:latest）。モデルが無い場合は ollama pull を実行します。
 settings.ai.local.hint.serve=まず Ollama を起動：ターミナルで ollama serve を実行してから接続をテストします。
 settings.ai.heading=AI 分析設定
+settings.ai.subtab.provider=プロバイダー
+settings.ai.subtab.context=分析範囲・コンテキスト
+settings.ai.subtab.prompts=分析指示・過去のスキャン
 settings.ai.usage.heading=本日の使用状況
 settings.ai.usage.calls=API 呼び出し
 settings.ai.usage.tokens=トークン（入力 / 出力 / 合計）
@@ -1008,17 +1091,31 @@ settings.ai.usage.pricingDisclaimer=各モデルの公開されている 100 万
 settings.ai.usage.page=ページ
 settings.ai.usage.of=/
 settings.ai.usage.project=プロジェクト
+settings.ai.usage.cache.heading=コンテキストキャッシュ効率（全期間）
+settings.ai.usage.cache.hits=ヒット
+settings.ai.usage.cache.misses=ミス
+settings.ai.usage.cache.avoided=削減見込み
+settings.ai.usage.cache.note=変更のない CVE/ライセンスは新しい API 呼び出しの代わりに以前の AI 要約を再利用します。削減コストは記録された要約項目あたりの平均コストに基づく概算です。
 settings.ai.privacy.title=AI プロバイダーに送信される内容
 settings.ai.privacy.body=脆弱性とライセンスのメタデータ（CVE ID、深刻度、ライブラリ名/バージョン、ライセンス名）のみが設定済みプロバイダーに送信されます。ソースコード全体やリポジトリの内容が AI 分析のためにアップロードされることはありません。
 settings.ai.embedded.title=組み込み AI（内蔵ローカルモデル）
-settings.ai.embedded.description=このマシンで同梱の llama.cpp サーバーを実行します（API キー不要、データはマシン外に出ません）。推奨モデル：Qwen3 1.7B。フォルダに追加した他の .gguf ファイルも認識されます。
+settings.ai.embedded.description=このサーバー上でAPIキーやGPUなしでllama.cppを実行します。既定: Qwen3.5 2B、選択肢: Gemma 4 E2B。推論データはサーバー内で処理されます。
 settings.ai.embedded.running=実行中
 settings.ai.embedded.stopped=停止
 settings.ai.embedded.model=モデル
 settings.ai.embedded.folder=フォルダ
-settings.ai.embedded.binaryMissing=llama-server バイナリが見つかりません。https://github.com/ggml-org/llama.cpp/releases からダウンロードし、下のフォルダに llama-server(.exe) を配置してください。
-settings.ai.embedded.modelMissing=.gguf モデルがまだありません — 「開始」をクリックすると Qwen3-1.7B モデルが自動でダウンロードされます（約1.2 GB、初回のみ）。または独自の .gguf（例：qwen3-1.7b-q4_k_m.gguf）を下のフォルダに配置してください。
-settings.ai.embedded.modelMissingAirgapped=.gguf モデルがまだありません。このホストは閉域網（エアギャップ）モードで動作しているためモデルをダウンロードできません — .gguf ファイル（例：qwen3-1.7b-q4_k_m.gguf）を下のフォルダに手動でコピーしてから「開始」をクリックしてください。
+settings.ai.embedded.binaryMissing=llama/ サブフォルダーにllama-serverと同梱ライブラリを配置してください (https://github.com/ggml-org/llama.cpp/releases)。
+settings.ai.embedded.modelMissing=モデルがありません。開始するとQwen3.5-2B Q4_K_M (1.28 GB) をmodel/Qwenにダウンロードし、チェックサムを検証します。
+settings.ai.embedded.modelMissingAirgapped=閉域モード: 検証済みGGUFをmodel/Qwenまたはmodel/Gemmaに配置してから開始してください。
+settings.ai.embedded.defaultLabel=既定
+ossNotices.embedded.title=内蔵AIランタイムとモデル
+ossNotices.embedded.description=別途ダウンロードするもので、アプリケーションJARには含まれません。モデルはUnsloth GGUF Q4_K_M量子化版です。再配布時にはライセンスと出典の告知を維持してください。
+ossNotices.embedded.licenseLink=ライセンス全文・ソースリビジョン・再配布告知
+settings.ai.embedded.qwenHint=Qwen3.5 2B · ダウンロード1.28 GB · CPU既定モデル。想定最小: サーバー2 vCPU / RAM 8 GB、推奨: 4 vCPU / RAM 8～16 GB。
+settings.ai.embedded.gemmaHint=Gemma 4 E2B · ダウンロード3.11 GB · CPU選択モデル。想定最小: サーバー4 vCPU / RAM 8 GB、推奨: 4 vCPU / RAM 16 GB。
+settings.ai.embedded.customHint=追加モデル: 使用前にCPU・メモリ要件とライセンスを確認してください。
+settings.ai.embedded.hardwareNote=OsWLとPostgreSQLを同居させ、小規模スキャンとAI生成を1件ずつ断続的に処理する場合の推定です。バーストCPUのクレジットにより遅延が変わります。分析範囲/コンテキストで英語・韓国語・日本語を選択でき、品質はモデルにより異なります。
+settings.ai.embedded.layoutHint=フォルダーは内蔵AIのルートです。実行ファイルはllama/、モデルはmodel/Qwen/またはmodel/Gemma/に配置します。変更手順: 停止 → モデル選択 → 保存 → 開始。インストール済みモデルのみ表示します。
 settings.ai.embedded.btn.start=開始
 settings.ai.embedded.btn.starting=開始中…（モデルの読み込みに数分かかる場合があります）
 settings.ai.embedded.btn.downloading=モデルをダウンロード中… {0}%
@@ -1035,7 +1132,7 @@ settings.ai.embedded.config.saving=保存中…
 settings.ai.embedded.config.saved=組み込み AI 設定を保存しました。
 settings.ai.embedded.config.dirNotFound=フォルダが見つからないか、ディレクトリではありません：{0}
 settings.ai.embedded.config.invalidModel=モデルファイル名が無効です。
-settings.ai.backfillNote=プロバイダー接続後、最近のスキャンのインサイトはバックグラウンドで自動生成されます（数分かかる場合があります）。CVE ごとの要約は接続後に実行されたスキャンに適用されます — 反映するにはプロジェクトを再スキャンしてください。
+settings.ai.backfillNote=新しいスキャンには保存したAI設定が適用されます。過去の分析は「分析指示・過去のスキャン」で更新できます。
 settings.ai.hint.cveLimit=API コストを抑えます：一致する CVE がこれより多い場合、深刻度の高い上位 N 件のみ要約されます（1〜50）。
 settings.ai.hint.licenseLimit=対象コンポーネントがこれより多い場合、スキャンごとにリスクの高い上位 N 件のみ要約されます（1〜50）。
 settings.ai.label.apiKey=API キー
@@ -1051,7 +1148,7 @@ settings.ai.msg.disabled=AI 分析を無効にしました。
 settings.ai.msg.saved=AI 設定を保存しました。
 settings.ai.msg.activated={0} がアクティブな AI プロバイダーになりました。
 settings.ai.msg.activatedEmbeddedStillRunning=組み込み AI はまだバックグラウンドで実行中です — リソースを解放するには上の「停止」をクリックしてください。
-settings.ai.msg.enrichmentSaved=スキャン強化の設定を保存しました。
+settings.ai.msg.enrichmentSaved=AI分析設定を保存しました。
 settings.ai.msg.testOk=接続に成功しました！
 settings.ai.provider.anthropic=Anthropic（Claude）
 settings.ai.provider.anthropic.description=API キーで Anthropic Claude モデルを使用します。
@@ -1072,13 +1169,13 @@ settings.cache.error.loadFailed=キャッシュ設定の読み込みに失敗し
 settings.cache.error.saveFailed=保存に失敗しました。
 settings.cache.heading=キャッシュ設定
 settings.cache.policy.always=常に更新
-settings.cache.policy.always.description=スキャンごとに deps.dev と OSV から最新データを取得します。
+settings.cache.policy.always.description=スキャンごとに脆弱性とライセンス情報を再取得します。既存の結果を更新するには再スキャンが必要です。
 settings.cache.policy.custom=カスタム TTL
 settings.cache.policy.custom.description=指定した期間の経過後にデータを更新します。
 settings.cache.policy.heading=自動キャッシュポリシー
 settings.cache.policy.permanent=永続キャッシュ
 settings.cache.policy.permanent.description=一度取得したライブラリデータは自動更新されません。
-settings.cache.policy.savedAlways=キャッシュポリシーを「常に更新」に設定しました。
+settings.cache.policy.savedAlways=スキャンごとに更新する設定を保存しました。
 settings.cache.policy.savedPermanent=キャッシュポリシーを「永続」に設定しました。
 settings.cache.ttl.days=日
 settings.cache.ttl.hours=時間
@@ -1127,14 +1224,126 @@ settings.cli.slideout.title=新しいキーを作成
 settings.cli.status.active=有効
 settings.cli.status.inactive=無効
 settings.noAccess=アクセスできる設定がありません。管理者にお問い合わせください。
+settings.onboarding.rerun=↻ オンボーディングを見直す
 settings.pageTitle=設定
 settings.tab.admin=管理
 settings.tab.security=セキュリティ
 settings.tab.licensePolicy=ライセンスポリシー
+settings.tab.policy=ポリシーと例外
 settings.tab.ai=AI 設定
 settings.tab.vcs=VCS 接続
 settings.tab.cli=CLI API キー
 settings.tab.cache=キャッシュ設定
+settings.group.access=アクセスとユーザー
+settings.group.policy=分析とポリシー
+settings.group.connections=接続と通知
+settings.group.operations=運用とデータ
+
+# ── Policy as Code（設定タブ） ──
+
+settings.policy.heading=Policy as Code
+settings.policy.description=組織・チーム・プロジェクト単位でセキュリティゲートポリシーを定義し、例外（ウェイバー）の承認を管理します。
+settings.policy.subtab.policies=ポリシー
+settings.policy.subtab.waivers=例外
+settings.policy.subtab.sync=インポート / エクスポート / GitOps
+settings.policy.newPolicy=+ 新規ポリシー
+settings.policy.editPolicy=ポリシーを編集
+settings.policy.form.scopeType=スコープ
+settings.policy.form.scopeType.organization=組織
+settings.policy.form.scopeType.team=チーム
+settings.policy.form.scopeType.project=プロジェクト
+settings.policy.form.scopeId=適用先
+settings.policy.form.name=名前
+settings.policy.form.namePlaceholder=例: デフォルトゲートポリシー
+settings.policy.form.description=説明
+settings.policy.form.locked=ロック（下位レベルはこのポリシーの値を上書きできません）
+settings.policy.form.enabled=有効
+settings.policy.form.failOnSeverity=重大度でブロック
+settings.policy.form.failOnKev=既知の悪用（KEV）でブロック
+settings.policy.form.failOnEpss=EPSS スコア ≥ でブロック
+settings.policy.form.failOnLicenseViolation=ライセンス違反でブロック
+settings.policy.form.onlyNew=新規導入されたコンポーネントのみ
+settings.policy.form.onlyReachable=参照を確認したライブラリのみ評価（UNKNOWN を除外、任意）
+settings.policy.form.failOnSecrets=CRITICAL/HIGHのシークレット検出でブロック
+settings.policy.inherit=親から継承
+settings.policy.severity.critical=重大（Critical）
+settings.policy.severity.high=高（High）
+settings.policy.severity.medium=中（Medium）
+settings.policy.severity.low=低（Low）
+settings.policy.severity.none=重大度ではブロックしない
+settings.policy.noOverrides=上書きなし（すべて継承）
+settings.policy.table.scope=スコープ
+settings.policy.table.name=名前
+settings.policy.table.status=ステータス
+settings.policy.table.gate=ゲート概要
+settings.policy.table.actions=操作
+settings.policy.table.empty=まだポリシーが定義されていません。インスタンスはグローバルデフォルトを使用します。
+settings.policy.locked.badge=ロック済み
+settings.policy.disabled.badge=無効
+settings.policy.confirmDelete=このポリシーを削除しますか？下位レベルは階層の上位にある次のポリシーにフォールバックします。
+settings.policy.saved=ポリシーを保存しました。
+settings.policy.deleted=ポリシーを削除しました。
+settings.policy.error.loadFailed=ポリシーの読み込みに失敗しました。
+settings.policy.scopeOptions.error=ポリシーの適用範囲を読み込めませんでした。もう一度お試しください。
+settings.policy.scopeOptions.empty=利用できる適用範囲がありません。
+settings.policy.error.saveFailed=ポリシーの保存に失敗しました。
+settings.policy.error.deleteFailed=ポリシーの削除に失敗しました。
+settings.policy.error.scopeRequired=このポリシーの適用先を選択してください。
+settings.policy.error.nameRequired=名前は必須です。
+settings.policy.waivers.selectProject=プロジェクトを選択
+settings.policy.waivers.selectProjectHint=上でプロジェクトを選択すると、例外を表示・リクエストできます。
+settings.policy.waivers.newException=+ 例外をリクエスト
+settings.policy.waivers.form.reason=理由
+settings.policy.waivers.form.expiry=有効期限
+settings.policy.waivers.form.targetType=適用先
+settings.policy.waivers.targetType.cve=特定の CVE
+settings.policy.waivers.targetType.license=特定のライセンス
+settings.policy.waivers.targetType.malicious=悪意のあるパッケージフラグ
+settings.policy.waivers.targetType.all=すべて（コンポーネント全体）
+settings.policy.waivers.form.targetId=CVE ID または SPDX ライセンス ID
+settings.policy.waivers.form.componentCoordinate=コンポーネント（任意 — 空欄にするとプロジェクト全体に適用）
+settings.policy.waivers.submit=例外をリクエスト
+settings.policy.waivers.requested=例外をリクエストしました — 承認待ちです。
+settings.policy.waivers.table.requester=リクエスト者
+settings.policy.waivers.table.reason=理由
+settings.policy.waivers.table.target=対象
+settings.policy.waivers.table.expiry=有効期限
+settings.policy.waivers.table.status=ステータス
+settings.policy.waivers.table.actions=操作
+settings.policy.waivers.table.empty=このプロジェクトにリクエストされた例外はありません。
+settings.policy.waivers.approve=承認
+settings.policy.waivers.revoke=取り消し
+settings.policy.waivers.approved=例外を承認しました。
+settings.policy.waivers.revoked=例外を取り消しました。
+settings.policy.waivers.error.loadFailed=例外の読み込みに失敗しました。
+settings.policy.waivers.error.requestFailed=例外のリクエストに失敗しました。
+settings.policy.waivers.error.actionFailed=例外の更新に失敗しました。
+settings.policy.sync.exportAll=すべてのポリシーをエクスポート（YAML）
+settings.policy.sync.exportFailed=ポリシーのエクスポートに失敗しました。
+settings.policy.sync.import.heading=YAML からインポート
+settings.policy.sync.import.placeholder=ここにポリシー YAML を貼り付けてください
+settings.policy.sync.import.submit=インポート
+settings.policy.sync.import.result=ポリシー {0} 件をインポートしました。
+settings.policy.sync.import.failed=インポートに失敗しました — YAML を確認してください。
+settings.policy.sync.gitops.heading=GitOps 同期
+settings.policy.sync.gitops.description=リポジトリから .oswl/policy.yaml を取得し、プロジェクトのポリシーとして適用します。
+settings.policy.sync.gitops.project=プロジェクト
+settings.policy.sync.gitops.repoUrl=リポジトリ URL
+settings.policy.sync.gitops.token=アクセストークン（プライベートリポジトリの場合、任意）
+settings.policy.sync.gitops.branch=ブランチ（任意 — 空欄の場合はリポジトリの既定ブランチを使用）
+settings.policy.sync.gitops.submit=今すぐ同期
+settings.policy.sync.gitops.success=同期しました — プロジェクトのポリシーを更新しました。
+settings.policy.sync.gitops.failed=GitOps 同期に失敗しました。
+settings.policy.sync.effective.heading=適用ポリシービューア
+settings.policy.sync.effective.project=プロジェクト
+settings.policy.sync.effective.load=適用ポリシーを表示
+settings.policy.sync.effective.export=YAML でエクスポート
+settings.policy.sync.effective.loadFailed=適用ポリシーの解決に失敗しました。
+settings.policy.sync.effective.noOverride=このレベルにはポリシーが定義されていません。
+settings.policy.sync.effective.org=組織
+settings.policy.sync.effective.team=チーム
+settings.policy.sync.effective.projectLevel=プロジェクト
+
 settings.security.description=この OsWL インスタンスのメールサーバーと二要素認証を設定します。
 settings.security.error.backendNotConnected=バックエンドがまだ接続されていません。
 settings.security.error.mailTestFailed=失敗しました（{0}）。
@@ -1247,7 +1456,7 @@ ossNotices.col.license=ライセンス
 ossNotices.col.source=ソース
 ossNotices.col.usedFor=用途
 ossNotices.col.version=バージョン
-ossNotices.data.depsdev.license=CC-BY 4.0（生成データ）
+ossNotices.data.depsdev.license=生成データは CC-BY 4.0、原典の条件も適用
 ossNotices.data.depsdev.name=deps.dev
 ossNotices.data.depsdev.usedFor=ライセンス・アドバイザリキーの参照、依存関係解決、OpenSSF Scorecard スコア
 ossNotices.data.epss.license=無料で利用可能、クレジット表記を推奨
@@ -1255,14 +1464,23 @@ ossNotices.data.epss.name=FIRST.org EPSS
 ossNotices.data.epss.usedFor=CVE ごとの悪用確率スコアリング
 ossNotices.data.ghsa.license=CC-BY 4.0
 ossNotices.data.ghsa.name=GitHub Advisory Database
-ossNotices.data.ghsa.usedFor=OSV 経由で提供される npm、Maven、RubyGems、NuGet の主要な脆弱性情報源
+ossNotices.data.ghsa.usedFor=直接および OSV 経由のパッケージ脆弱性情報。原典の帰属表示を保持
 ossNotices.data.kev.license=CC0 1.0（パブリックドメイン）
 ossNotices.data.kev.name=CISA KEV カタログ
 ossNotices.data.kev.usedFor=実際に悪用が確認された脆弱性（KEV）のフラグ付け
-ossNotices.data.osv.license=CC-BY 4.0 / CC0 1.0（エコシステムにより異なる）
+ossNotices.data.osv.license=原典ごとに異なる（CC-BY-SA 4.0 を含む）
 ossNotices.data.osv.name=OSV（Open Source Vulnerabilities）
-ossNotices.data.osv.usedFor=npm、Maven、PyPI、Go、RubyGems、NuGet、Cargo にわたるリアルタイムのコンポーネント別脆弱性検索
-ossNotices.dataSources.subtitle=OsWL はこれらの公開フィードからコンポーネントデータをリアルタイムで拡充しています — 同梱されるコードではなくデータです。各ソースの詳細な出典情報は THIRD_PARTY_LICENSES.md をご覧ください。
+ossNotices.data.osv.usedFor=パッケージ脆弱性検索とオフラインスナップショット。対象範囲と利用条件は原典ごとに異なる
+ossNotices.data.conda.license=BSD 系 / BSD 3-Clause / MIT の複合通知
+ossNotices.data.conda.name=conda-forge-bot-data 名前マッピング
+ossNotices.data.conda.usedFor=同梱の Conda-PyPI 名前マッピング。原文の通知は META-INF/licenses/conda-forge-bot-data-LICENSE.txt に収録
+ossNotices.data.cocoapods.license=MIT（仕様）、各 pod には個別ライセンスを適用
+ossNotices.data.cocoapods.name=CocoaPods Specs
+ossNotices.data.cocoapods.usedFor=pod 仕様のリポジトリ情報とパッケージライセンス情報
+ossNotices.data.nvd.license=NIST / CVE 原典の条件。再配布の確認は未完了
+ossNotices.data.nvd.name=NIST NVD
+ossNotices.data.nvd.usedFor=CVE・CPE 検索。OsWL は NVD の推奨・認証を受けた製品ではありません
+ossNotices.dataSources.subtitle=外部フィードと同梱の参照データを案内します。帰属表示と再配布条件の確認状況は THIRD_PARTY_LICENSES.md および配布物の META-INF 通知をご覧ください。
 ossNotices.dataSources.title=外部データソース
 ossNotices.footer=ライセンス全文はソースリポジトリの THIRD_PARTY_LICENSES.md にあります。
 ossNotices.githubLink=GitHub でソースを表示
@@ -1435,7 +1653,7 @@ componentDetail.defer.placeholder.date=YYYY-MM-DD
 settings.security.mail.configureNow=今すぐ設定 ↑
 settings.security.mail.notConfigured=メールサーバーが設定されていません。
 
-# ── Roadmap #12 Organization dashboard / #16 typosquat / #17 SIEM export / #7 lockfile ──
+# ── Organization dashboard / typosquat / SIEM export / lockfile (added in v1.0.4 wrap-up) ──
 topbar.nav.orgDashboard=組織ダッシュボード
 orgDashboard.topbar.label=組織ダッシュボード
 orgDashboard.pageTitle=組織ダッシュボード
@@ -1468,7 +1686,10 @@ componentDetail.typosquat.label=タイポスクワットの疑い
 componentDetail.typosquat.tooltip=このパッケージ名は有名なパッケージと酷似しています。使用前に意図した依存関係か確認してください。
 securityCenter.typosquat.badge=タイポスクワット？
 securityCenter.typosquat.tooltip=このパッケージ名は有名なパッケージと酷似しています。使用前に意図した依存関係か確認してください。
-quickImport.sbom.lockHint=composer.lock または conan.lock ファイルを直接アップロードすることもできます。
+securityCenter.reachability.tooltip.reachable=バイトコードまたは対応するソース import で参照を確認しました。実行は証明されていません。
+securityCenter.reachability.tooltip.notReachable=解析したプロジェクトのバイトコードにこのライブラリへの参照は見つかりませんでした。
+securityCenter.reachability.tooltip.unknown=ソース・バイトコードの欠落、未対応構文、不完全な範囲、静的参照の未検出により証拠が不足しています。
+quickImport.sbom.lockHint=ロックファイルも直接アップロードできます: composer.lock (PHP)、conan.lock (C/C++)、Podfile.lock (CocoaPods)、conda-lock.yml / pixi.lock / conda explicit スペック (Conda)。
 settings.admin.auditLog.btn.exportCef=CEF エクスポート
 settings.admin.auditLog.btn.exportJsonl=JSON Lines エクスポート
 orgDashboard.summary.scannedProjects=全 {1} 件中 {0} 件のプロジェクトをスキャン済み
@@ -1496,6 +1717,7 @@ permission.auditGroup.administration=管理
 permission.ORG_DASHBOARD_VIEW=組織ダッシュボードの表示
 permission.AUDIT_LOG_VIEW=監査ログの表示
 permission.AUDIT_LOG_EXPORT=監査ログのエクスポート（SIEM）
+permission.AUDIT_LOG_VERIFY=監査ログの整合性検証
 permission.SETTINGS_JIRA_MANAGE=Jira 連携の管理
 permission.SETTINGS_SNAPSHOT_MANAGE=オフラインスナップショットの管理
 settings.ai.usage.branch=ブランチ
@@ -1510,15 +1732,21 @@ ossNotices.lib.flyway.name=Flyway
 ossNotices.lib.flyway.description=バージョン管理されたデータベーススキーマのマイグレーション
 ossNotices.lib.springOauth2.name=Spring Security OAuth2 Client
 ossNotices.lib.springOauth2.description=OIDC / OAuth2 シングルサインオンのクライアント機能
+ossNotices.lib.springSessionJdbc.name=Spring Session JDBC
+ossNotices.lib.springSessionJdbc.description=マルチインスタンス構成向けの、PostgreSQLに保存するクラスタ全体のHTTPセッション
+ossNotices.lib.shedlock.name=ShedLock
+ossNotices.lib.shedlock.description=複数インスタンスでスケジュールジョブが重複実行されないようにするクラスタ全体のロック
+ossNotices.lib.cvssV4Lookup.name=CVSS v4.0 ルックアップテーブル(cvss-v4-calculator)
+ossNotices.lib.cvssV4Lookup.description=CVSS v4.0 基本/環境スコア算出に使う FIRST.org の MacroVector スコアテーブル(バンドル)
 
 # === v1.0.4 QA follow-up (AI effort / insight backfill / offline snapshot rewrite) ===
-settings.admin.snapshot.step1.heading=ステップ 1 — このインスタンスから要求リストをダウンロード
-settings.admin.snapshot.step2.heading=ステップ 2 — インターネットに接続できるマシンでバンドルを作成
-settings.admin.snapshot.step2.desc=要求リストをインターネットに接続できるマシンにコピーし、そこで OsWL バンドルビルダーを実行します:
-settings.admin.snapshot.step2.note=コマンドを実行すると bundle.zip が生成されます。ステップ 3 のために、このファイルをこのマシンに戻してください。
+settings.admin.snapshot.step1.heading=1. パッケージ一覧をダウンロード
+settings.admin.snapshot.step2.heading=2. オンライン環境でバンドルを作成
+settings.admin.snapshot.step2.desc=一覧ファイルをインターネット接続端末に移し、次のコマンドを実行します。
+settings.admin.snapshot.step2.note=作成されたbundle.zipをこのサーバーに戻します。
 settings.admin.snapshot.build.command=./gradlew vdbBuild --args="build --wanted wanted-list.jsonl --sources osv,epss,kev,depsdev --out bundle.zip"
-settings.admin.snapshot.step3.heading=ステップ 3 — バンドルを取り込む
-settings.admin.snapshot.step3.desc=定義をこのインスタンスに読み込みます。以降のスキャンはこの定義を基に判定されます。
+settings.admin.snapshot.step3.heading=3. バンドルを取り込む
+settings.admin.snapshot.step3.desc=bundle.zipを選び、オフラインの脆弱性・ライセンス情報を更新します。
 settings.admin.snapshot.import.mode.label=そのソースに既にデータがある場合:
 settings.admin.snapshot.import.importing=取り込み中…
 settings.admin.snapshot.export.heading=このインスタンスからエクスポート（任意）
@@ -1533,13 +1761,13 @@ settings.ai.effort.max=最大 — 最も詳細でトークン消費も最大
 settings.ai.effort.wire.none=送信内容: なし — プロバイダー既定が適用されます。
 settings.ai.effort.wire.openai=送信内容: reasoning_effort="{0}"
 settings.ai.effort.wire.anthropic=送信内容: output_config.effort="{0}"
-settings.ai.enrichment.backfill.title=完了済みスキャン
-settings.ai.enrichment.backfill.description=新しいスキャンには常に AI インサイトが生成されます。完了済みのスキャンは、ここで指示しない限りそのままです。
-settings.ai.label.autoBackfill=プロバイダー・言語変更時に自動で再生成
-settings.ai.hint.autoBackfill=既定はオフです。オンにすると、プロバイダーやプロンプト言語を保存した際に最近のスキャンをバックグラウンドで再実行します。スキャン 1 件につき API 呼び出し 1 回分の費用がかかります。
-settings.ai.hint.backfillButtons=「不足分を生成」はインサイトがないスキャンだけを処理します。「すべて再生成」は既存のものも作り直します — 言語やモデルを変更したときに使ってください。
-settings.ai.backfill.btn.missing=不足分を生成
-settings.ai.backfill.btn.all=すべて再生成
+settings.ai.enrichment.backfill.title=過去のスキャンのAI分析
+settings.ai.enrichment.backfill.description=最近完了したスキャンのAI分析を生成・更新します。脆弱性とライセンスの判定は変わりません。
+settings.ai.label.autoBackfill=過去のAI分析を自動更新
+settings.ai.hint.autoBackfill=有効にすると、プロバイダーや分析言語の変更時に最近のAI分析も更新します。AIの利用料金が発生する場合があります。
+settings.ai.hint.backfillButtons=未生成のAI分析だけを生成するか、既存の分析も含めて再生成できます。
+settings.ai.backfill.btn.missing=未生成分を分析
+settings.ai.backfill.btn.all=最近の分析を再生成
 settings.ai.backfill.btn.running=開始中…
 settings.ai.backfill.msg.started=バックグラウンドでインサイトを生成しています。しばらくしてからプロジェクトページを再読み込みしてください。
 settings.ai.backfill.error.failed=再生成を開始できませんでした。
@@ -1561,9 +1789,292 @@ settings.ai.provider.activeBadge=使用中
 settings.ai.enrichment.scope.heading=AI 要約の範囲
 settings.ai.enrichment.context.heading=言語・デプロイコンテキスト
 settings.ai.enrichment.model.heading=モデルパラメータ
-settings.ai.enrichment.prompts.heading=プロンプトテンプレート
-settings.ai.enrichment.backfill.runTitle=今すぐ実行
-settings.ai.label.autoBackfillShort=自動実行
+settings.ai.enrichment.prompts.heading=AI分析の指示
+settings.ai.enrichment.backfill.runTitle=分析を実行
+settings.ai.label.autoBackfillShort=自動更新
 settings.ai.autoBackfill.on=オン
 settings.ai.autoBackfill.off=オフ
 settings.ai.hint.backfillNeedsProvider=先に上で AI プロバイダーを選択して保存してください。
+
+# SAML / SCIM audit log filter group label
+permission.auditGroup.scim=SCIM プロビジョニング
+
+# === v1.0.5 — Slack/Teams webhook notifications ===
+
+settings.tab.webhooks=Webhook
+permission.SETTINGS_WEBHOOK_MANAGE=Webhook通知の管理
+permission.auditGroup.webhook=Webhook
+permission.POLICY_MANAGE=セキュリティポリシーの管理
+permission.auditGroup.policy=ポリシー
+
+# === v1.0.5 — レポートブランディング ===
+
+settings.tab.reports=レポート
+permission.SETTINGS_REPORTING_MANAGE=レポートブランディングの管理
+settings.reports.heading=レポートブランディング
+settings.reports.description=コンプライアンスレポートにロゴ、会社名、カスタムヘッダーを追加します。
+settings.reports.logo.label=ロゴ
+settings.reports.logo.upload=画像をアップロード
+settings.reports.logo.help=PNG、JPEG、SVG、350KB未満。空の場合はOsWLロゴが表示されます。
+settings.reports.companyName.label=会社名
+settings.reports.companyName.placeholder=Acme Corp
+settings.reports.companyName.help=レポートヘッダーの「OsWL」を置き換えます。空欄の場合はOsWLブランディングのままです。
+settings.reports.headerText.label=ヘッダーテキスト
+settings.reports.headerText.placeholder=社外秘 — 社内配布のみ
+settings.reports.headerText.help=レポートタイトルの下に表示されます(例:機密情報の注記)。
+settings.reports.coverPage.label=表紙ページを追加
+settings.reports.coverPage.help=本文の前に、ロゴ・会社名・プロジェクト名を含む独立した表紙ページを追加します。
+settings.reports.error.backend=サーバーに接続できませんでした。
+settings.reports.error.logoTooLarge=画像が大きすぎます — 350KB未満のファイルを使用してください。
+settings.reports.error.logoInvalid=PNG、JPEG、SVG画像を選択してください。
+
+# === v1.0.5 — セルフ診断タブ ===
+
+settings.tab.diagnostics=診断
+settings.diagnostics.heading=診断
+settings.diagnostics.description=サーバーの機能と外部サービスへの接続を確認します。
+settings.diagnostics.results.heading=結果
+settings.diagnostics.empty=診断を実行すると、各項目の状態を確認できます。
+settings.diagnostics.btn.run=診断を実行
+settings.diagnostics.btn.running=実行中…
+settings.diagnostics.btn.copy=サポート用にコピー
+settings.diagnostics.copied=クリップボードにコピーしました。
+settings.diagnostics.error.loadFailed=診断の実行に失敗しました。
+settings.diagnostics.status.up=正常
+settings.diagnostics.status.down=失敗
+settings.diagnostics.status.skipped=対象外
+settings.diagnostics.status.unknown=要確認
+
+settings.diagnostics.archive.heading=スキャンアーカイブ
+settings.diagnostics.archive.domainHeading=データ保持
+settings.diagnostics.archive.description=最近のスキャンは詳細を保持します。古いスキャンを書き出してから、コンポーネント・CVEの詳細を削除できます。集計値は残ります。
+settings.diagnostics.archive.loading=プロジェクトを読み込み中…
+settings.diagnostics.archive.noProjects=アーカイブ対象のアクティブなプロジェクトがありません。
+settings.diagnostics.archive.field.project=プロジェクト
+settings.diagnostics.archive.field.retainCount=保持するスキャン数
+settings.diagnostics.archive.retainCount.placeholder=サーバーデフォルト
+settings.diagnostics.archive.selectProject=プロジェクトを選択…
+settings.diagnostics.archive.btn.preview=古いスキャンを書き出す
+settings.diagnostics.archive.btn.previewing=読み込み中…
+settings.diagnostics.archive.btn.archive=古いスキャンの詳細を削除
+settings.diagnostics.archive.btn.archiving=アーカイブ中…
+settings.diagnostics.archive.preview.summary=アーカイブ待ちスキャン {0} 件、コンポーネント合計 {1} 件。エクスポートをダウンロードしました。
+settings.diagnostics.archive.preview.empty=書き出すスキャンはありません。完了済みスキャンはすべて保持件数以内です。
+settings.diagnostics.archive.confirm=このプロジェクトのスキャン {0} 件をアーカイブしますか？コンポーネント/CVE詳細は完全に削除されます。
+settings.diagnostics.archive.confirmNoExport=警告: このセッションでエクスポートをダウンロードしていません。スキャン {0} 件をアーカイブすると、コンポーネント/CVE詳細がコピーなしで完全に削除されます。続行しますか？
+settings.diagnostics.archive.result=スキャン {0} 件をアーカイブしました。完了スキャン全 {1} 件中 {2} 件を詳細保持します。
+settings.diagnostics.archive.error.projectsFailed=プロジェクトを読み込めませんでした。
+settings.diagnostics.archive.error.loadFailed=リクエストに失敗しました。
+
+# === v1.0.5 — 設定エクスポート/インポートタブ ===
+
+settings.tab.configTransfer=設定移行
+settings.configTransfer.heading=設定のエクスポート / インポート
+settings.configTransfer.description=OsWLサーバー間で設定を移します。APIキーやパスワードなどの秘密情報は含みません。
+settings.configTransfer.export.heading=エクスポート
+settings.configTransfer.export.description=JSONファイルをダウンロードします。シークレット、APIキー、パスワードは一切含まれません。
+settings.configTransfer.import.heading=インポート
+settings.configTransfer.import.description=バンドルファイルを選択すると、実際に書き込む前に変更内容をプレビューできます。
+settings.configTransfer.field.roleTemplates=ロールテンプレート
+settings.configTransfer.field.licensePolicy=ライセンスポリシー
+settings.configTransfer.field.aiSettings=AI設定
+settings.configTransfer.field.promptOverrides=AIプロンプトオーバーライド
+settings.configTransfer.field.cache=キャッシュTTL
+settings.configTransfer.field.policies=ポリシー
+settings.configTransfer.btn.export=エクスポート
+settings.configTransfer.btn.exporting=エクスポート中…
+settings.configTransfer.btn.apply=インポートを適用
+settings.configTransfer.btn.applying=適用中…
+settings.configTransfer.error.exportFailed=エクスポートに失敗しました。
+settings.configTransfer.error.previewFailed=このファイルを設定バンドルとして読み込めません。
+settings.configTransfer.error.applyFailed=インポートに失敗しました。
+settings.configTransfer.applied=インポートが適用されました。
+settings.configTransfer.skippedUnresolvedPolicies={0}件のポリシーはスキップされました — このインスタンスでスコープを名前で照合できませんでした。詳細は下のリストを参照してください。
+settings.configTransfer.skippedBuiltIn=バンドル内の組み込みロールテンプレート{0}件はスキップされました。
+settings.webhooks.heading=Webhook通知
+settings.webhooks.description=SlackまたはTeamsにセキュリティ通知を送信します。
+settings.webhooks.provider.label=プロバイダー
+settings.webhooks.url.label=Webhook URL
+settings.webhooks.url.placeholder=https://hooks.slack.com/services/...
+settings.webhooks.url.help=既存のURLを保持する場合は空白のままにしてください。URLは暗号化して保存されます。
+settings.webhooks.enabled.label=Webhook通知を有効化
+settings.webhooks.events.label=通知イベント
+settings.webhooks.events.newCve=新規CVE検出
+settings.webhooks.events.gateFailure=ゲート失敗
+settings.webhooks.events.scanFailure=スキャン失敗
+settings.webhooks.events.waiverExpiry=例外期限迫近
+settings.webhooks.btn.test=テスト
+settings.webhooks.btn.testing=テスト中…
+settings.webhooks.test.success=テストメッセージを送信しました。
+settings.webhooks.test.failed=テストに失敗しました。
+settings.webhooks.error.backend=サーバーに接続できません。
+settings.webhooks.error.urlRequired=テストするWebhook URLを入力してください。
+settings.webhooks.history.heading=送信履歴
+settings.webhooks.history.description=再試行や失敗を含む最近のWebhook送信履歴です。
+settings.webhooks.history.filter.all=すべての状態
+settings.webhooks.history.filter.success=成功
+settings.webhooks.history.filter.failed=失敗
+settings.webhooks.history.filter.allEvents=すべてのイベント
+settings.webhooks.history.event.newCve=新規CVE
+settings.webhooks.history.event.gateFailure=ゲート失敗
+settings.webhooks.history.event.scanFailure=スキャン失敗
+settings.webhooks.history.event.waiverExpiry=例外期限切れ
+settings.webhooks.history.col.time=時刻
+settings.webhooks.history.col.event=イベント
+settings.webhooks.history.col.project=プロジェクト
+settings.webhooks.history.col.status=ステータス
+settings.webhooks.history.col.attempt=試行
+settings.webhooks.history.col.error=エラー
+settings.webhooks.history.error=送信履歴を読み込めませんでした。
+settings.webhooks.history.empty=送信履歴がありません。
+common.refresh=更新
+common.retry=再試行
+
+# === ダークモード テーマ切り替え ===
+topbar.theme=テーマ
+topbar.theme.light=ライト
+topbar.theme.dark=ダーク
+topbar.theme.system=システム設定
+topbar.theme.saveFailed=テーマ設定を保存できませんでした。自動的に再試行します。
+security.outboundUrl.error.public=クローズドネットワークモードではパブリックインターネットアドレスは使用できません。
+
+# === グローバル検索パレット ===
+search.button=検索
+search.dialogLabel=グローバル検索
+search.placeholder=プロジェクト、コンポーネント、CVEを検索…
+search.group.projects=プロジェクト
+search.group.components=コンポーネント
+search.group.cves=CVE
+search.loading=検索中…
+search.empty=結果が見つかりません。
+search.error=検索に失敗しました。もう一度お試しください。
+search.footer.hint=↑↓ 移動 · Enter 開く · esc 閉じる
+
+# ── モバイル通知ビュー ──
+
+mobile.pageTitle=通知
+mobile.desktopSite=デスクトップサイト
+mobile.waivers.heading=承認待ちの例外
+mobile.waivers.empty=承認待ちの例外はありません。
+mobile.waivers.approve=承認
+mobile.waivers.revoke=取り消し
+mobile.waivers.approved=例外を承認しました。
+mobile.waivers.revoked=例外を取り消しました。
+mobile.waivers.error.approveFailed=例外の承認に失敗しました。
+mobile.waivers.error.revokeFailed=例外の取り消しに失敗しました。
+mobile.action.retry=再試行
+settings.dirty.summary=未保存の変更 {0}件
+settings.ai.embedded.error.stopFailed=Embedded AIを停止できませんでした。
+mobile.alerts.heading=新規 CVE アラート
+mobile.alerts.empty=新しいアラートはありません。
+mobile.alerts.acknowledgeAll=すべて既読にする
+mobile.alerts.acknowledged=既読にしました。
+mobile.alerts.error.ackFailed=アラートの既読処理に失敗しました。
+
+componentDetail.sourceAnalysis=ソースのimport解析は参照を示し、実際の実行を証明しません。参照が見つからない場合は不明と表示します。
+
+componentDetail.sourceFiles={0}: ソースファイル {1} 件を解析
+
+componentDetail.sourcePartial=解析範囲は部分的です。制限内で読み取りまたは解析できなかったファイルがあります。
+
+componentDetail.sourceSubset=対応する静的 import 構文のみを解析した結果です。
+
+componentDetail.sourceReason.REFERENCE_FOUND=import 参照を検出しました。Python の配布名とモジュール名は推定であり、実行を証明しません。
+
+componentDetail.sourceReason.NO_PACKAGE_MAPPING=対応するパッケージとモジュール名の対応付けがありません。
+
+componentDetail.sourceReason.NO_LANGUAGE_FILES=この言語のソースファイルを読み取れませんでした。
+
+componentDetail.sourceReason.ABSENCE_NOT_PROVEN=一致する静的 import はありません。動的・間接 import の有無は不明です。
+
+securityCenter.archivedSummary=アーカイブ済みスキャンです。保存された集計を表示します。コンポーネント詳細は利用できません。
+
+common.http.unauthenticated=セッションが切れました。再度ログインしてください。
+
+common.http.forbidden=この操作を実行する権限がありません。
+
+common.http.timeout=リクエストがタイムアウトしました。再試行してください。
+
+common.http.network=接続に失敗しました。接続を確認して再試行してください。
+
+quickImport.error.interrupted=実行プロセスが停止し、インポートが中断されました。再度インポートを開始してください。
+
+componentDetail.lookup.title=最新の照会状態
+componentDetail.lookup.RESOLVED=照会完了
+componentDetail.lookup.UNAVAILABLE=照会不可 — 再試行が必要
+componentDetail.lookup.UNSUPPORTED=未対応のパッケージマッピング
+componentDetail.lookup.NOT_CONFIGURED=未設定
+
+onboarding.team.heading=チームメンバーの追加
+onboarding.team.help=仮パスワードでアカウントを作成します。安全な方法で共有してください。初回ログイン時に変更が必要です。
+onboarding.team.success=アカウントを作成しました。
+onboarding.team.name=名前
+onboarding.team.email=メールアドレス
+onboarding.team.password=仮パスワード
+onboarding.team.role=ロールテンプレート
+onboarding.team.selectRole=ロールテンプレートを選択
+onboarding.team.create=アカウント作成
+orgSummary.title=組織リスク概要
+orgSummary.actions=判断と対応
+orgSummary.back=組織ダッシュボード
+orgSummary.print=印刷 / PDF 保存
+orgSummary.generated=作成日時: {0}
+orgSummary.kev=悪用済み脆弱性の未確認検出 {0}件
+orgSummary.kevAction=担当者と対応期限を決め、配備結果を確認してから対応を完了してください。
+orgSummary.high=重大 {0}件、高リスク {1}件
+orgSummary.highAction=優先プロジェクトの露出を確認し、更新または例外の判断を確認してください。
+orgSummary.license=ライセンスポリシー違反 {0}件
+orgSummary.licenseAction=配布義務を確認し、担当レビュー者を記録してください。
+orgSummary.coverage=集計範囲と解釈
+orgSummary.scanned=全{1}プロジェクト中、{0}件に完了したスキャンがあります。
+orgSummary.caveat=各プロジェクトの最新完了スキャンを集計します。件数は固有CVE数ではなく検出件数です。確認・猶予は修正完了を意味しません。スキャン完了は完全な分析を保証しないため、日付とコンポーネントの分析状態を確認してください。
+orgSummary.projects=優先プロジェクト（最大5件）
+orgSummary.project=プロジェクト
+orgSummary.lastScan=最終スキャン
+orgSummary.kevShort=KEV未確認
+orgSummary.empty=プロジェクトをスキャンすると概要が表示されます。
+
+onboarding.team.noRoles=設定でロールテンプレートを作成してから再試行してください。
+
+webPush.title=ブラウザーのセキュリティ通知
+webPush.back=プロジェクト
+webPush.help=このブラウザーで受け取るセキュリティ通知を選択してください。詳細はOsWLで確認できます。受信を続けるには30日以内に購読を更新してください。
+webPush.unconfigured=このサーバーではブラウザー通知が設定されていません。管理者にWebプッシュの有効化とVAPIDキーの設定を依頼してください。
+webPush.unsupported=安全な接続とPush APIに対応したブラウザーが必要です。
+webPush.active=このブラウザーで通知を購読しています。
+webPush.events=通知するイベント
+webPush.high=新しい高・重大リスクの脆弱性
+webPush.gate=セキュリティゲートの失敗
+webPush.enable=通知設定を保存
+webPush.disable=このブラウザーの購読を解除
+webPush.failed=処理に失敗しました。再試行し、続く場合はこのブラウザーの購読を解除して再設定してください。
+webPush.denied=購読するにはブラウザー設定で通知を許可してください。
+webPush.event.NEW_HIGH_RISK=新しい高リスク脆弱性の確認が必要です。OsWLで詳細を確認してください。
+webPush.event.GATE_FAILURE=セキュリティゲートが失敗しました。OsWLで結果を確認してください。
+
+ossNotices.lib.re2j.name=RE2/J
+ossNotices.lib.re2j.description=実行量を制限する正規表現エンジン
+ossNotices.lib.webPush.name=web-push
+ossNotices.lib.webPush.description=ブラウザプッシュ暗号化とVAPID
+ossNotices.lib.bouncyCastle.name=Bouncy Castle
+ossNotices.lib.bouncyCastle.description=ブラウザプッシュ用暗号プロバイダー
+ossNotices.lib.jose4j.name=jose4j
+ossNotices.lib.jose4j.description=VAPID JSON Web Signatureサポート
+settings.cache.policy.savedCustom=キャッシュ保持期間を{0}{1}に設定しました。
+settings.ai.invalidParameters=応答の多様性は0～2、最大トークン数は256～8192の整数で入力してください。1日の呼び出し上限は0～1000000の整数です。
+settings.ai.defaultTemperature=既定値: 0.15
+settings.ai.defaultMaxTokens=既定値: 1200
+settings.cli.delete.confirm=APIキー「{0}」を削除しますか？このキーを使うCLIは認証できなくなります。
+settings.cli.delete.failed=APIキーを削除できませんでした。もう一度お試しください。
+settings.diagnostics.diskSpace=空き {0} / 合計 {1}（空き {2}%）
+settings.diagnostics.copyFailed=コピーできませんでした。クリップボードの権限を確認してください。
+settings.diagnostics.label.db=データベース
+settings.diagnostics.label.disk=ディスク容量
+settings.diagnostics.label.snapshot=オフラインデータ
+settings.diagnostics.label.sidecar=内蔵AI
+componentDetail.version.unresolved=バージョン未確認
+settings.ai.temperatureInvalid=0〜2の数値を入力してください。
+settings.ai.maxTokensInvalid=256〜8192の整数を入力してください。
+settings.ai.dailyCallCapInvalid=0〜1000000の整数を入力してください。
+settings.ai.checkFields=保存できませんでした。表示された入力値を確認してください。
+componentDetail.cve.openNvd=NVDで{0}を開く（新しいタブ）
diff --git a/src/main/resources/messages_ko.properties b/src/main/resources/messages_ko.properties
index 544436c6..4e7b9375 100644
--- a/src/main/resources/messages_ko.properties
+++ b/src/main/resources/messages_ko.properties
@@ -1,5 +1,5 @@
 # =====================================================
-# OsWL — messages_ko.properties (Korean)
+# OsWL — messages.properties (English)
 # =====================================================
 # Keys are grouped by feature area. Unused keys removed during i18n cleanup.
 
@@ -11,6 +11,8 @@ common.applyToSelected=선택 항목에 적용
 common.bulkActions=일괄 작업
 common.cancel=취소
 common.dismiss=닫기
+common.edit=수정
+common.hideValue=값 숨기기
 common.clear=해제
 common.clearAll=전체 해제
 common.close=닫기
@@ -28,6 +30,10 @@ common.loading=불러오는 중\u2026
 common.no=아니요
 common.nonPatchable=패치 불가
 common.outdated=구버전
+common.pagination.first=첫 페이지
+common.pagination.previous=이전 페이지
+common.pagination.next=다음 페이지
+common.pagination.last=마지막 페이지
 common.patchable=패치 가능
 common.pdf=PDF
 common.project=개 프로젝트
@@ -38,6 +44,9 @@ common.saved=저장되었습니다.
 common.saving=저장 중\u2026
 common.select=선택
 common.selectAll=전체 선택
+common.selectItem={0} 선택
+common.selectOne=선택하세요
+common.showValue=값 표시
 common.unignore=무시 해제
 common.unknown=알 수 없음
 common.unreviewed=미검토
@@ -56,6 +65,13 @@ footer.ossNotices=오픈소스 고지
 # ── Navigation / Topbar ──
 
 topbar.changePassword=비밀번호 변경
+topbar.deleteAccount=회원 탈퇴
+topbar.deleteAccount.title=계정을 삭제하시겠어요?
+topbar.deleteAccount.body=로그인 정보가 영구적으로 삭제됩니다. 프로젝트, 스캔, 임포트 이력, 감사 로그는 그대로 유지됩니다.
+topbar.deleteAccount.password=현재 비밀번호
+topbar.deleteAccount.confirm=계정 삭제
+topbar.deleteAccount.failed=계정을 삭제하지 못했습니다. 비밀번호를 확인하고 다시 시도해 주세요.
+topbar.deleteAccount.adminBlocked=기본 시스템 관리자 계정은 삭제할 수 없습니다.
 topbar.error.deleteFailed=삭제에 실패했습니다.
 topbar.logOut=로그아웃
 topbar.nav.license=라이선스
@@ -63,6 +79,7 @@ topbar.nav.riskTrend=리스크 트렌드
 topbar.nav.scanHistory=스캔 기록
 topbar.nav.securityCenter=보안 센터
 topbar.nav.versionDiff=버전 비교\u2026
+topbar.mobileView=모바일 알림
 topbar.noScanYet=스캔 없음
 topbar.projects=프로젝트
 topbar.settings=설정
@@ -135,6 +152,31 @@ auth.setup.label.name=이름
 auth.setup.label.password=비밀번호
 auth.setup.label.passwordConfirm=비밀번호 확인
 auth.setup.pageTitle=초기 설정
+onboarding.pageTitle=온보딩
+onboarding.step1.heading=SSO 및 팀 접근 권한
+onboarding.step1.body=OIDC/SAML 싱글 사인온을 연결하거나 팀원을 바로 초대하세요. 나중에 언제든 설정에서 바꿀 수 있습니다.
+onboarding.step1.linkSso=SSO 설정하기 →
+onboarding.step1.linkInvite=사용자 초대하기 →
+onboarding.step2.heading=저장소 연결
+onboarding.step2.body=GitHub, GitLab, Bitbucket을 연결하면 저장소 목록을 탐색하고 비공개 프로젝트를 가져올 수 있습니다. 공개 저장소는 URL만으로도 가져올 수 있습니다.
+onboarding.step2.link=VCS 공급자 연결하기 →
+onboarding.step2.linkQuickImport=프로젝트 Quick Import →
+onboarding.step3.heading=정책 기본값
+onboarding.step3.body=라이선스 분류와 보안 게이트의 판정 기준을 확인하세요. 게이트는 스캔 결과를 평가하며, 정책 API에서 조직·팀·프로젝트별 기준을 설정할 수 있습니다.
+onboarding.step3.link=라이선스 정책 확인하기 →
+onboarding.step4.heading=알림
+onboarding.step4.body=Slack이나 Teams 웹훅을 추가하면 신규 CVE와 게이트 실패 알림이 이메일뿐 아니라 팀이 실제로 보는 채널로도 도착합니다.
+onboarding.step4.link=웹훅 설정하기 →
+onboarding.btn.skipAll=나중에 하기
+onboarding.btn.back=이전
+onboarding.btn.next=다음
+onboarding.btn.finish=완료
+onboarding.step.done=완료됨
+onboarding.inline.provider=프로바이더
+onboarding.inline.username=사용자 이름
+onboarding.inline.connect=연결
+onboarding.inline.connecting=연결 중…
+onboarding.inline.connectFailed=연결에 실패했습니다. 입력 값을 확인하고 다시 시도하세요.
 auth.setup.placeholder.email=oswl@company.com
 auth.setup.placeholder.name=이름을 입력하세요
 auth.setup.placeholder.password=비밀번호를 입력하세요
@@ -174,6 +216,7 @@ projects.card.lastScanned=마지막 스캔 : {0}
 projects.card.newCves=신규 CVE {0}건
 projects.card.newCves.dismiss=신규 CVE 알림 확인
 projects.card.openActions=프로젝트 작업 열기
+projects.emptyActive=활성 프로젝트가 없습니다. 프로젝트를 가져오거나 생성해 시작하세요.
 projects.github.connected=GitHub 연결이 완료되었습니다.
 projects.github.denied=GitHub 인증이 거부되었습니다.
 projects.github.disconnected=GitHub 연결이 해제되었습니다.
@@ -248,9 +291,16 @@ security.outboundUrl.error.loopback=localhost 및 루프백 주소(127.0.0.1)로
 security.outboundUrl.error.metadata=클라우드 메타데이터 또는 링크 로컬 주소(169.254.x.x)로의 연결은 허용되지 않습니다.
 security.outboundUrl.error.unresolvable=호스트명을 확인할 수 없습니다. URL을 확인한 뒤 다시 시도하세요.
 quickImport.error.sessionExpired=가져오기 세션이 만료되었습니다. 서버가 재시작되었을 수 있습니다. 다시 시도해 주세요.
+quickImport.status.trackingUnauthorized=세션이 만료되었거나 접근 권한이 변경되어 가져오기 추적을 중지했습니다. 다시 로그인해 주세요.
+quickImport.status.jobMissing=이 가져오기 작업을 더 이상 찾을 수 없습니다. 페이지를 새로 고치거나 새 가져오기를 시작해 주세요.
+quickImport.status.unavailable=가져오기 상태를 일시적으로 확인할 수 없습니다. 재시도 간격을 늘려 다시 확인합니다…
 quickImport.error.startFailed=가져오기를 시작하지 못했습니다: {0}
-quickImport.error.unexpected=예상치 못한 오류로 가져오기에 실패했습니다. 다시 시도해 주세요.
+quickImport.error.unexpected=예기치 않은 오류로 가져오기에 실패했습니다. 서버 로그를 확인하거나 잠시 후 다시 시도해 주세요.
 quickImport.error.scanSubmitFailed=가져오기는 완료되었으나 보안 스캔을 제출하지 못했습니다. CLI에서 스캔을 실행해 보세요.
+quickImport.error.parseFailed=의존성 파싱에 실패했습니다. 저장소에 잠금 파일이 없거나 지원하지 않는 구조일 수 있습니다.
+quickImport.error.javaRequired=Gradle/Maven 의존성 해석을 위해 OsWL 서버에 Java(JDK)가 필요합니다. JDK 25+ 설치 후 서버를 재시작해 주세요.
+quickImport.error.noManifests=지원되는 의존성 파일을 찾지 못했습니다. pom.xml 같은 매니페스트나 package-lock.json 같은 잠금 파일이 커밋되어 있는지 확인하세요.
+quickImport.error.gradleFailed=서버에서 Gradle 의존성 해석에 실패했습니다. JDK 25+가 설치되어 있고 ./gradlew 빌드가 되는 저장소인지 확인해 주세요.
 quickImport.error.clonePathTooLong=복제 실패: 저장소 경로가 Windows 경로 길이 제한을 초과했습니다. Git long path를 활성화하거나 Linux/macOS에서 복제해 보세요.
 quickImport.error.cloneFailed=리포지토리 복제에 실패했습니다. URL, 브랜치, VCS 연결을 확인해 주세요.
 quickImport.error.cloneTimeout=리포지토리 복제가 5분 후 시간 초과되었습니다.
@@ -274,7 +324,7 @@ quickImport.queue.waiting=대기열 #{0}번…
 quickImport.slots.running=실행 중 {0}/{1}
 quickImport.slots.queued=대기 {0}/{1}
 quickImport.error.queueFull=대기열은 최대 {0}개까지 가능합니다. 대기 중인 작업이 시작될 때까지 기다려 주세요.
-quickImport.error.duplicateImport={0}은(는) 이미 임포트가 진행 중입니다. 현재 임포트가 끝난 뒤 다시 시도해 주세요.
+quickImport.error.duplicateImport={0}은(는) 대기 중이거나 가져오기가 진행 중입니다. 현재 작업이 끝난 뒤 다시 시도해 주세요.
 quickImport.error.canceled=가져오기가 취소되었습니다.
 quickImport.btn.cancel=취소
 quickImport.btn.canceling=취소 중…
@@ -328,6 +378,7 @@ cli.step3.description=프로젝트 디렉토리로 이동해 다음을 실행하
 cli.step3.title=첫 번째 스캔 실행
 cli.subtitle=로컬 머신이나 빌드 서버에서 빠르고 안전하게 스캔합니다.
 cli.warning=API 키는 프로젝트 단위입니다 \u2014 스캔 전에 프로젝트 설정에서 발급하세요.
+cli.terminalHint=터미널에서 OsWL을 실행한 경우(./gradlew bootRun), 해당 창에서 Ctrl+C를 누르면 서버가 종료됩니다.
 
 # ── Git Integration ──
 
@@ -340,7 +391,9 @@ gitIntegration.btn.importAll=모두 가져오기
 gitIntegration.btn.imported=\u2713 가져오기 완료!
 gitIntegration.btn.reloadRepos=저장소 새로고침
 gitIntegration.error.connectionFailed=연결에 실패했습니다. 토큰을 확인해 주세요.
+gitIntegration.error.importFailed={0}개 가져오기에 실패했습니다. 저장소 접근 권한을 확인하고 다시 시도해 주세요.
 gitIntegration.error.networkError=네트워크 오류가 발생했습니다. 다시 시도해 주세요.
+gitIntegration.error.reposLoadFailed=저장소를 불러오지 못했습니다. 토큰을 확인한 후 다시 시도해 주세요.
 gitIntegration.heading=Git 연결
 gitIntegration.label.addNewAccount=새 GitHub 계정 추가
 gitIntegration.loading.checkingConnection=연결 상태 확인 중\u2026
@@ -357,6 +410,7 @@ gitIntegration.status.loading=불러오는 중\u2026
 gitIntegration.status.notConnected=연결되지 않음
 gitIntegration.status.updated=업데이트됨!
 gitIntegration.table.col.title=저장소
+gitIntegration.table.empty=이 계정에서 저장소를 찾을 수 없습니다.
 
 # ── Security Center ──
 
@@ -380,6 +434,10 @@ securityCenter.filter.outdated=구버전
 securityCenter.filter.patchabilityLabel=패치 가능 여부
 securityCenter.filter.patchable=패치 가능
 securityCenter.filter.permitted=허용됨
+securityCenter.filter.reachability=도달 가능성
+securityCenter.filter.reachable=도달 가능
+securityCenter.filter.notReachable=도달 불가
+securityCenter.filter.unknownReachability=호출 여부 미확인
 securityCenter.filter.restricted=제한됨
 securityCenter.filter.reviewStatus=검토 상태
 securityCenter.filter.reviewed=검토 완료
@@ -389,11 +447,15 @@ securityCenter.filter.unknown=알 수 없음
 securityCenter.filter.unscored=미점수
 securityCenter.filter.upToDate=최신
 securityCenter.pageTitle=보안 센터
+securityCenter.componentPanel.ariaLabel=컴포넌트 상세
+securityCenter.panel.loadFailed=컴포넌트 상세 정보를 불러오지 못했습니다.
 securityCenter.malicious.badge=악성
 securityCenter.malicious.tooltip=OSV가 이 버전을 악성 패키지(MAL- 권고)로 분류했습니다. 즉시 제거하세요.
-securityCenter.deferReminder=연기해 두신 컴포넌트 {0}개의 연기 기간이 끝났어요. 이제 안 고치실 건가요? 아래에서 다시 검토해 주세요!
 riskGraph.security.total=발견된 취약점 {0}건
 riskGraph.license.total=라이선스 상태별 컴포넌트 {0}개
+securityCenter.deferReminder=컴포넌트 {0}개의 유예 기간이 만료되었습니다. 아래 항목을 검토하고 조치 계획을 갱신해 주세요.
+securityCenter.scanning=분석 중 \u2014 완료되면 결과가 자동으로 업데이트됩니다.
+securityCenter.aiGenerating=AI 요약 생성 중…
 securityCenter.error.actionFailed=변경 사항을 적용하지 못했습니다. 다시 시도해 주세요.
 securityCenter.export.cyclonedx=CycloneDX
 securityCenter.export.sbom=SBOM (CycloneDX)
@@ -404,17 +466,43 @@ securityCenter.sort.label=정렬
 securityCenter.sort.risk=위험도순 (기본)
 securityCenter.sort.name=이름순
 securityCenter.sort.license=라이선스 위험순
-securityCenter.aiGenerating=AI 요약 생성 중…
-securityCenter.scanning=분석 중 \u2014 완료되면 결과가 자동으로 업데이트됩니다.
+securityCenter.views.label=저장된 뷰
+securityCenter.views.empty=저장된 뷰가 없습니다.
+securityCenter.views.loading=저장된 뷰를 불러오는 중…
+securityCenter.views.loadFailed=저장된 뷰를 불러오지 못했습니다. 연결을 확인한 뒤 다시 시도해 주세요.
+securityCenter.views.save=현재 뷰 저장
+securityCenter.views.namePlaceholder=뷰 이름
+securityCenter.views.shared=팀과 공유
+securityCenter.views.sharedBadge=공유됨
+securityCenter.views.saveBtn=저장
+securityCenter.views.copyLink=공유 링크 복사
+securityCenter.views.deleteBtn=저장된 뷰 삭제
 securityCenter.table.component=컴포넌트
 securityCenter.table.license=라이선스
+securityCenter.table.loadMore=더 보기
 securityCenter.table.noResults=스캔 결과가 없습니다
+securityCenter.table.notAnalyzed=분석 안 됨
+securityCenter.table.notAnalyzedTooltip=지원되지 않는 에코시스템, 조회 장애 또는 오프라인 데이터 부족으로 이 컴포넌트의 취약점 조회가 성공적으로 완료되지 않았습니다. CVE 0건이 안전함을 의미하지 않습니다.
 securityCenter.table.patchability=패치 가능 여부
 securityCenter.table.review=검토
 securityCenter.table.runScan=CLI 또는 Git 연동으로 스캔을 실행하면 발견된 컴포넌트가 표시됩니다.
 securityCenter.table.securityIssues=보안 이슈
+securityCenter.table.selectAllLoadedTooltip=현재 화면에 로드된 컴포넌트만 선택됩니다. 필터에 일치하는 전체 컴포넌트가 아닙니다. 더 많이 선택하려면 먼저 "더 보기"로 불러오세요.
+securityCenter.table.showingCount=전체 {1}개 중 {0}개 표시 중
 securityCenter.updateChangeMessage=라이브러리 변경이 감지되었습니다. 검토해 주세요.
 securityCenter.updateDetected=업데이트 감지됨.
+securityCenter.findings.heading=시크릿 및 IaC 탐지 결과
+securityCenter.findings.count=({0}건 발견)
+securityCenter.findings.noValueNote=일치한 값 자체는 저장되지 않습니다 — 위치와 복원 불가능한 지문만 저장됩니다.
+securityCenter.findings.table.type=유형
+securityCenter.findings.table.severity=심각도
+securityCenter.findings.table.rule=규칙
+securityCenter.findings.table.file=파일
+securityCenter.findings.table.description=설명
+securityCenter.findings.empty=이 스캔에서 시크릿 또는 IaC 설정 오류가 발견되지 않았습니다.
+securityCenter.findings.notRun=완료된 스캔이 아직 없습니다. 스캔을 실행하면 보안 탐지 결과가 표시됩니다.
+securityCenter.findings.type.secret=시크릿
+securityCenter.findings.type.iac=IaC 설정 오류
 
 # ── Component Detail ──
 
@@ -428,6 +516,8 @@ componentDetail.btn.deferException=연기 (예외 처리)
 componentDetail.cve.affects=영향 범위
 componentDetail.cve.aiSummary=AI 요약
 componentDetail.cve.cvssVector=CVSS 벡터
+componentDetail.cve.envScore=환경 점수
+componentDetail.cve.envScore.tooltip=이 프로젝트의 배포 프로필과 컴포넌트의 런타임 범위를 반영해 조정한 CVSS 기본 점수입니다 — 일반적인 심각도가 아니라 여기서 실제로 얼마나 중요한지를 보여줍니다.
 componentDetail.cve.empty=이 컴포넌트에서 보안 취약점이 발견되지 않았습니다.
 componentDetail.cve.fix=수정 버전
 componentDetail.cve.ghsaId=GHSA
@@ -474,7 +564,7 @@ componentDetail.defer.success=연기가 성공적으로 확인되었습니다.
 componentDetail.defer.title=취약점 연기
 componentDetail.depPath.direct=직접 의존성 (깊이 1)
 componentDetail.depPath.fallbackOurProject=(내 프로젝트)
-componentDetail.depPath.noPathData=전체 경로 트리를 사용할 수 없습니다 \u2014 최신 CLI 버전으로 재스캔하면 전체 의존 트리를 확인할 수 있습니다.
+componentDetail.depPath.noPathData=이 스캔에는 의존성 경로 정보가 없습니다. 지원되는 잠금 파일이나 의존성 그래프를 포함해 다시 스캔하세요. 확인 가능한 경로는 생태계와 입력 데이터에 따라 달라집니다.
 componentDetail.depPath.viaIntermediate={0}개 중간 의존성 경유 (깊이 {1})
 componentDetail.depPath.viaIntermediates={0}개 중간 의존성 경유 (깊이 {1})
 componentDetail.deprecated.hint=알려진 CVE는 없으나, 이 버전은 더 이상 유지보수되지 않습니다. 지원되는 버전으로 업그레이드하세요.
@@ -498,7 +588,7 @@ componentDetail.license.legalRisk=법적 위험 \u2014 배포 전 법적 검토
 componentDetail.license.nonStandard=비표준 라이선스 식별자 \u2014 SPDX 정책 목록에 없습니다.
 componentDetail.license.nonStandardHint1=식별자
 componentDetail.license.nonStandardHint2=는 인식된 SPDX 표현식이 아닙니다. 프로덕션 사용 전 수동 검토가 필요합니다.
-componentDetail.license.permissive=허용적 라이선스 \u2014 제한 없이 상업적 사용, 수정 및 배포가 가능합니다.
+componentDetail.license.permissive=허용적 라이선스 — 일반적으로 상업적 사용, 수정 및 재배포를 허용하지만, 고지 의무 등 해당 라이선스의 조건을 준수해야 합니다.
 componentDetail.license.unknown=라이선스 정보가 없습니다 \u2014 프로덕션 사용 전 수동 검토를 권장합니다.
 componentDetail.malicious.label=악성 패키지
 componentDetail.outdated.hint=알려진 취약점은 없으나, 최신 버전이 아닙니다.
@@ -534,12 +624,14 @@ componentDetail.patch.success.changedFile=변경된 파일
 componentDetail.patch.success.showChange=어떤 코드가 바뀌었나요?
 componentDetail.patch.success.hideChange=변경 내용 접기
 componentDetail.patch.title=패치 적용
+componentDetail.reachabilityEvidence.description=사용자 코드가 다음을 통해 취약한 라이브러리를 참조하고 있습니다:
 componentDetail.safe.hint=알려진 취약점이 없습니다. 이 컴포넌트는 안전하게 사용할 수 있습니다.
 componentDetail.scorecard.label=Scorecard
 componentDetail.scorecard.tooltip=deps.dev에서 가져온 OpenSSF Scorecard 종합 점수(0~10)입니다. 점수가 높을수록 보안 관리가 잘 되고 있는 프로젝트입니다.
 componentDetail.section.dependencyPath=이 라이브러리는 어디서 왔나요? (의존 경로)
 componentDetail.section.description=컴포넌트 설명
 componentDetail.section.licenseInfo=라이선스 정보
+componentDetail.section.reachabilityEvidence=왜 도달 가능한가요?
 componentDetail.section.vulnerabilityDetails=취약점 상세
 componentDetail.status.notReviewed=미검토
 componentDetail.status.reviewed=검토 완료
@@ -581,7 +673,7 @@ license.deployment.binary=온프레미스 바이너리
 license.deployment.embedded=임베디드 장치
 license.deployment.library=라이브러리 / SDK
 license.deployment.saas=SaaS / 호스팅 전용
-license.disclaimer=의무 분류, 충돌 경고 및 내보낸 아티팩트는 SPDX 메타데이터를 기반으로 자동 생성되며, 최선의 지침을 제공합니다. 법적 조언을 구성하지 않습니다. 배포, M&A 실사, 규제 공시 또는 고객 계약에 이 결과물을 사용하기 전에 자격을 갖춘 법률 전문가와 상담하세요.
+license.disclaimer=의무 분류, 충돌 경고 및 내보낸 파일은 SPDX 메타데이터를 기반으로 자동 생성된 참고 자료이며 법률 자문이 아닙니다. 배포, M&A 실사, 규제 공시 또는 고객 계약에 활용하기 전에 법률 전문가의 검토를 받으세요.
 license.disclaimer.prefix=면책 조항.
 license.empty=라이선스 데이터가 없습니다.
 license.empty.hint=스캔을 실행하여 이 프로젝트에서 사용된 라이선스를 확인하세요.
@@ -627,7 +719,7 @@ license.obligations.orChoice.hint=OR 표현식에서 하나의 옵션으로 제
 license.obligations.viewSpdx=전체 SPDX 라이선스 텍스트 보기
 license.pageTitle=프로젝트 라이선스
 license.review.affectedLibraries=영향받는 라이브러리
-license.review.description=라이선스 정보가 누락되거나 독점적이거나 비SPDX 선언인 컴포넌트 — 수동 법적 검토가 필요합니다.
+license.review.description=라이선스 정보가 없거나, 독점 라이선스이거나, SPDX 식별자로 확인되지 않는 컴포넌트입니다. 개별 법무 검토가 필요합니다.
 license.review.empty=모든 컴포넌트에 인식된 SPDX 라이선스가 있습니다.
 license.review.empty.hint=이 스캔에는 수동 검토가 필요하지 않습니다.
 license.review.heading=개 수동 검토 필요
@@ -641,11 +733,14 @@ license.status.unknown=알 수 없음
 
 riskTrend.ai.insight=AI 인사이트
 riskTrend.ai.notConfigured=AI 공급자가 구성되지 않았습니다. 설정에서 AI 인사이트를 활성화하세요.
+settings.vcs.bb.cloudGuideDual.option1=① Atlassian API Token (id.atlassian.com): Atlassian 이메일, workspace slug, 토큰 입력 (Basic 인증).
+settings.vcs.bb.cloudGuideDual.option2=② Workspace HTTP Access Token (Bitbucket workspace 설정): workspace slug와 토큰만 입력 (Bearer 인증).
 riskTrend.ai.notEnoughData=인사이트를 생성할 스캔 데이터가 충분하지 않습니다.
 riskTrend.chart.license=라이선스 위험
 riskTrend.chart.security=보안 위험
 riskTrend.chart.xAxis=버전
-riskTrend.chart.yAxis=이슈 수
+riskTrend.chart.viewAsTable=표로 보기
+riskTrend.chart.viewAsChart=차트로 보기
 report.compliance.title=컴플라이언스 리포트
 report.compliance.type=컴플라이언스 리포트 · CRA / ISMS-P
 report.compliance.toolbarSubtitle={0} — 컴플라이언스 리포트
@@ -683,6 +778,7 @@ report.compliance.kev.col.severity=심각도
 report.compliance.kev.col.fix=수정 버전
 report.compliance.kev.col.triage=트리아지 상태
 report.compliance.footer.disclaimer=OsWL에서 생성했습니다. 모든 수치는 가장 최근 완료된 스캔을 기준으로 합니다. CRA / ISMS-P 증적용 자료입니다.
+riskTrend.chart.yAxis=이슈 수
 riskTrend.label.fromPrevious=이전 버전 대비
 riskTrend.label.issues=건
 riskTrend.legend.caution=주의
@@ -702,6 +798,7 @@ riskTrend.pageTitle=위험 추세
 # ── Scan History ──
 
 scanHistory.col.components=컴포넌트
+scanHistory.archived.label=보관됨
 scanHistory.col.scannedAt=스캔 일시
 scanHistory.col.source=유입 경로
 scanHistory.col.status=상태
@@ -739,6 +836,7 @@ versionDiff.tab.all=전체
 versionDiff.tab.newThreats=새 위협
 versionDiff.tab.removed=제거됨
 versionDiff.tab.updated=업데이트됨
+versionDiff.tabEmpty=이 분류에 해당하는 항목이 없습니다.
 
 # ── Settings ──
 
@@ -826,7 +924,7 @@ settings.admin.snapshot.import.button=가져오기
 settings.admin.snapshot.import.failed=스냅샷 번들 가져오기에 실패했습니다.
 settings.admin.snapshot.import.fromPath.button=경로에서 가져오기
 settings.admin.snapshot.import.fromPath.placeholder=서버의 가져오기 디렉터리 기준 경로
-settings.admin.snapshot.import.fromPath.toggle=번들이 이미 서버에 있습니다 — 경로로 가져오기
+settings.admin.snapshot.import.fromPath.toggle=서버에 있는 파일 선택
 settings.admin.snapshot.import.mode.auto=번들에 지정된 방식 따르기 (권장)
 settings.admin.snapshot.import.mode.merge=병합 — 레코드를 추가·갱신하고, 번들이 철회로 표시한 레코드는 삭제합니다
 settings.admin.snapshot.import.mode.replace=교체 — 해당 출처의 기존 데이터를 모두 지우고 가져옵니다
@@ -851,7 +949,7 @@ settings.admin.snapshot.table.records=레코드 수
 settings.admin.snapshot.table.source=소스
 settings.admin.snapshot.unresolvedNote=요청 목록에는 있었지만 빌더가 원본 데이터를 찾지 못한 컴포넌트입니다. “데이터 없음”으로 처리되며, “취약점이 없다”는 뜻이 아닙니다.
 settings.admin.snapshot.wanted.button=요청 목록(wanted-list) 내려받기
-settings.admin.snapshot.wanted.desc=요청 목록에는 이 인스턴스가 스캔한 생태계·패키지·버전이 들어 있습니다. 빌더는 이 목록을 보고 전체 DB가 아니라 해당 컴포넌트의 정의만 내려받으므로 번들 크기가 작게 유지됩니다.
+settings.admin.snapshot.wanted.desc=이 서버에서 사용하는 패키지·버전 목록을 내려받습니다. 번들 생성기는 이 목록의 데이터를 수집합니다.
 settings.admin.snapshot.wanted.failed=요청 목록 내보내기에 실패했습니다.
 settings.admin.snapshot.wanted.privacyNote=파일에는 생태계·패키지명·버전만 들어 있습니다. 프로젝트명·저장소 URL·파일 경로는 포함되지 않습니다.
 settings.admin.template.builtIn=내장 템플릿은 삭제할 수 없습니다.
@@ -895,15 +993,15 @@ settings.ai.enrichment.license.description=Restricted·Caution·Unknown 라이
 settings.ai.enrichment.license.title=라이선스 AI 요약
 settings.ai.enrichment.model.title=모델 파라미터
 settings.ai.enrichment.model.description=LLM 호출 temperature·토큰 상한. 비우면 템플릿 기본값을 사용합니다.
-settings.ai.enrichment.prompts.title=프롬프트 템플릿
-settings.ai.enrichment.prompts.description=주요 프롬프트 미리보기·덮어쓰기 (저장 즉시 반영, 재시작 불필요).
+settings.ai.enrichment.prompts.title=분석 지침
+settings.ai.enrichment.prompts.description=AI에 전달할 지침을 수정한 뒤 저장하세요.
 settings.ai.label.temperature=응답 다양성
 settings.ai.label.maxTokens=최대 토큰 수
 settings.ai.label.dailyCallCap=일일 API 상한
 settings.ai.hint.dailyCallCap=0 = 무제한. 초과 시 당일 AI enrichment를 건너뜁니다.
-settings.ai.hint.temperature=값이 낮을수록 일관되고 사실 위주의 답변이, 높을수록 표현이 다양해집니다. 취약점 분류 노트는 0.1–0.3이 적당합니다 (범위 0–2).
+settings.ai.hint.temperature=기본값 0.15, 범위 0~2. 낮을수록 일관된 답변을 생성합니다.
 settings.ai.hint.temperature.anthropic=Anthropic에서는 적용되지 않습니다 — 최신 Claude 모델은 temperature 설정을 거부하므로, 응답 스타일은 프롬프트로 조정됩니다.
-settings.ai.hint.maxTokens=AI 응답 1건의 최대 길이입니다 (256–8192). 너무 낮으면 배치 결과가 JSON 중간에서 잘려 통째로 버려집니다. 기본 템플릿에는 1200이 적당합니다.
+settings.ai.hint.maxTokens=기본값 1200, 범위 256~8192. 응답 길이의 상한이며 분석 작업별 한도가 우선 적용될 수 있습니다.
 settings.ai.label.deploymentProfile=기본 배포 맥락
 settings.ai.deployment.commercial=상용 제품
 settings.ai.deployment.saas=SaaS / 네트워크 서비스
@@ -976,17 +1074,48 @@ settings.ai.local.hint.endpoint=http://localhost:11434/v1 을 사용하세요 
 settings.ai.local.hint.model=전체 모델 태그를 입력하세요 (예: llama3.2:latest). 없으면 ollama pull 로 받으세요.
 settings.ai.local.hint.serve=먼저 Ollama를 실행하세요: 터미널에서 ollama serve 실행 후 연결 테스트하세요.
 settings.ai.heading=AI 분석 설정
+settings.ai.subtab.provider=공급자
+settings.ai.subtab.context=분석 범위·컨텍스트
+settings.ai.subtab.prompts=분석 지침·기존 스캔
+settings.ai.usage.heading=오늘 사용량
+settings.ai.usage.calls=API 호출
+settings.ai.usage.tokens=토큰 (입력 / 출력 / 합계)
+settings.ai.usage.time=시각
+settings.ai.usage.operation=작업
+settings.ai.usage.totalTokens=토큰
+settings.ai.usage.estCost=예상 비용($)
+settings.ai.usage.estimatedCost=오늘 예상 비용
+settings.ai.usage.recent=최근 호출
+settings.ai.usage.noProvider=AI 프로바이더를 활성화하면 사용량이 여기에 표시됩니다.
+settings.ai.usage.pricingDisclaimer=각 모델의 공식 100만 토큰당 정가를 기준으로 산출한 추정치입니다. 캐시 입력·배치·롱컨텍스트 할인은 반영되지 않으므로 참고용으로만 사용하세요. 실제 금액은 프로바이더 청구서를 기준으로 합니다. 정가 정보가 없는 모델은 프로바이더별 기본 단가로 계산됩니다.
+settings.ai.usage.page=페이지
+settings.ai.usage.of=/
+settings.ai.usage.project=프로젝트
+settings.ai.usage.cache.heading=컨텍스트 캐시 효율 (전체 기간)
+settings.ai.usage.cache.hits=히트
+settings.ai.usage.cache.misses=미스
+settings.ai.usage.cache.avoided=절감 추정
+settings.ai.usage.cache.note=변경되지 않은 CVE/라이선스는 새 API 호출 대신 이전 AI 요약을 재사용합니다. 절감 비용은 기록된 항목당 평균 비용을 기준으로 한 대략적인 추정치입니다.
 settings.ai.privacy.title=AI 제공자에 전송되는 데이터
 settings.ai.privacy.body=CVE ID·심각도·라이브러리 이름/버전·라이선스명 등 메타데이터만 전송됩니다. 전체 소스 코드나 저장소 내용은 AI 분석을 위해 업로드되지 않습니다.
 settings.ai.embedded.title=내장 AI (기본 제공 로컬 모델)
-settings.ai.embedded.description=이 컴퓨터에서 llama.cpp 서버를 직접 실행합니다 (API 키 불필요, 데이터가 외부로 나가지 않음). 기본 모델: Qwen3 1.7B, 폴더에 넣은 다른 .gguf 파일도 인식됩니다.
+settings.ai.embedded.description=이 서버에서 API 키나 GPU 없이 llama.cpp를 실행합니다. 기본: Qwen3.5 2B, 선택: Gemma 4 E2B. 추론 데이터는 이 서버 안에서 처리됩니다.
 settings.ai.embedded.running=실행 중
 settings.ai.embedded.stopped=중지됨
 settings.ai.embedded.model=모델
 settings.ai.embedded.folder=폴더
-settings.ai.embedded.binaryMissing=llama-server 바이너리를 찾을 수 없습니다. https://github.com/ggml-org/llama.cpp/releases 에서 받아 아래 폴더에 llama-server(.exe)를 넣어주세요.
-settings.ai.embedded.modelMissing=아직 .gguf 모델이 없습니다 — 시작을 누르면 Qwen3-1.7B 모델(약 1.2GB, 최초 1회)이 자동으로 다운로드됩니다. 직접 준비한 .gguf(예: qwen3-1.7b-q4_k_m.gguf)를 아래 폴더에 넣어도 됩니다.
-settings.ai.embedded.modelMissingAirgapped=아직 .gguf 모델이 없습니다. 이 호스트는 폐쇄망 모드로 동작하므로 모델을 다운로드할 수 없습니다 — .gguf 파일(예: qwen3-1.7b-q4_k_m.gguf)을 아래 폴더에 직접 복사한 뒤 시작을 누르세요.
+settings.ai.embedded.binaryMissing=llama/ 하위 폴더에 llama-server와 함께 배포된 라이브러리를 넣어주세요 (https://github.com/ggml-org/llama.cpp/releases).
+settings.ai.embedded.modelMissing=설치된 모델이 없습니다. 시작하면 Qwen3.5-2B Q4_K_M(1.28 GB)을 model/Qwen에 다운로드하고 체크섬을 검증합니다.
+settings.ai.embedded.modelMissingAirgapped=폐쇄망 모드: 검증된 GGUF 파일을 model/Qwen 또는 model/Gemma에 넣은 뒤 시작하세요.
+settings.ai.embedded.defaultLabel=기본
+ossNotices.embedded.title=내장 AI 실행 환경과 모델
+ossNotices.embedded.description=별도 다운로드 항목이며 애플리케이션 JAR에 포함되지 않습니다. 모델은 Unsloth GGUF Q4_K_M 양자화본입니다. 재배포할 때 라이선스와 출처 고지를 유지해야 합니다.
+ossNotices.embedded.licenseLink=라이선스 전문·소스 리비전·재배포 고지
+settings.ai.embedded.qwenHint=Qwen3.5 2B · 다운로드 1.28 GB · CPU 기본 모델. 예상 최소: 서버 2 vCPU / RAM 8 GB, 권장: 4 vCPU / RAM 8~16 GB.
+settings.ai.embedded.gemmaHint=Gemma 4 E2B · 다운로드 3.11 GB · CPU 선택 모델. 예상 최소: 서버 4 vCPU / RAM 8 GB, 권장: 4 vCPU / RAM 16 GB.
+settings.ai.embedded.customHint=사용자 추가 모델: 사용 전 CPU·메모리 요구사항과 라이선스를 확인하세요.
+settings.ai.embedded.hardwareNote=OsWL·PostgreSQL을 함께 실행하고 소규모 스캔과 AI 생성 1건씩을 간헐적으로 처리하는 기준의 추정치입니다. 버스터블 CPU 크레딧에 따라 지연이 달라집니다. 분석 범위/컨텍스트에서 영어·한국어·일본어를 선택할 수 있으며 품질은 모델마다 다릅니다.
+settings.ai.embedded.layoutHint=폴더는 내장 AI의 최상위 경로입니다. 실행 파일은 llama/, 모델은 model/Qwen/ 또는 model/Gemma/에 넣으세요. 변경 순서: 중지 → 모델 선택 → 저장 → 시작. 설치된 모델만 표시됩니다.
 settings.ai.embedded.btn.start=시작
 settings.ai.embedded.btn.starting=시작 중… (모델 로딩에 몇 분 걸릴 수 있어요)
 settings.ai.embedded.btn.downloading=모델 다운로드 중… {0}%
@@ -1003,7 +1132,7 @@ settings.ai.embedded.config.saving=저장 중…
 settings.ai.embedded.config.saved=내장 AI 설정이 저장되었습니다.
 settings.ai.embedded.config.dirNotFound=폴더가 없거나 디렉터리가 아닙니다: {0}
 settings.ai.embedded.config.invalidModel=올바르지 않은 모델 파일 이름입니다.
-settings.ai.backfillNote=AI를 연동하면 최근 스캔의 인사이트가 백그라운드에서 자동 생성됩니다 (몇 분 걸릴 수 있어요). CVE별 상세 요약은 연동 이후의 새 스캔부터 적용되니, 기존 프로젝트는 다시 스캔해 주세요.
+settings.ai.backfillNote=새 스캔에는 저장된 AI 설정이 적용됩니다. 기존 분석은 분석 지침·기존 스캔 탭에서 갱신하세요.
 settings.ai.hint.cveLimit=API 비용 상한: 매칭 CVE가 더 많으면 심각도 순 상위 N건만 AI 요약합니다 (1–50).
 settings.ai.hint.licenseLimit=대상 컴포넌트가 더 많으면 위험도 순 상위 N건만 스캔당 요약합니다 (1–50).
 settings.ai.label.apiKey=API 키
@@ -1019,7 +1148,7 @@ settings.ai.msg.disabled=AI 분석이 비활성화되었습니다.
 settings.ai.msg.saved=AI 설정이 저장되었습니다.
 settings.ai.msg.activated={0}이(가) 활성 AI 프로바이더로 설정되었습니다.
 settings.ai.msg.activatedEmbeddedStillRunning=내장 AI는 백그라운드에서 계속 실행 중입니다 — 리소스를 아끼려면 위에서 중지를 누르세요.
-settings.ai.msg.enrichmentSaved=스캔 enrichment 설정이 저장되었습니다.
+settings.ai.msg.enrichmentSaved=AI 분석 설정을 저장했습니다.
 settings.ai.msg.testOk=연결 성공!
 settings.ai.provider.anthropic=Anthropic (Claude)
 settings.ai.provider.anthropic.description=API 키로 Anthropic Claude 모델 사용.
@@ -1040,13 +1169,13 @@ settings.cache.error.loadFailed=캐시 설정을 불러오지 못했습니다.
 settings.cache.error.saveFailed=저장에 실패했습니다.
 settings.cache.heading=캐시 설정
 settings.cache.policy.always=항상 새로고침
-settings.cache.policy.always.description=스캔마다 deps.dev와 OSV에서 최신 데이터를 가져옵니다.
+settings.cache.policy.always.description=스캔마다 취약점과 라이선스 데이터를 다시 조회합니다. 기존 결과는 다시 스캔해야 갱신됩니다.
 settings.cache.policy.custom=사용자 정의 TTL
 settings.cache.policy.custom.description=지정된 기간 이후 데이터를 새로고침합니다.
 settings.cache.policy.heading=자동 캐시 정책
 settings.cache.policy.permanent=영구 캐시
 settings.cache.policy.permanent.description=한 번 가져온 라이브러리 데이터는 자동으로 갱신되지 않습니다.
-settings.cache.policy.savedAlways=캐시 정책이 항상 새로 고침으로 설정되었습니다.
+settings.cache.policy.savedAlways=캐시 정책을 항상 새로고침으로 설정했습니다.
 settings.cache.policy.savedPermanent=캐시 정책이 영구 캐시로 설정되었습니다.
 settings.cache.ttl.days=일
 settings.cache.ttl.hours=시간
@@ -1095,14 +1224,126 @@ settings.cli.slideout.title=새 키 생성
 settings.cli.status.active=활성
 settings.cli.status.inactive=비활성
 settings.noAccess=접근 가능한 설정이 없습니다. 관리자에게 문의하세요.
+settings.onboarding.rerun=↻ 온보딩 다시 보기
 settings.pageTitle=설정
 settings.tab.admin=관리
 settings.tab.security=보안
 settings.tab.licensePolicy=라이선스 정책
+settings.tab.policy=정책 및 예외
 settings.tab.ai=AI 설정
 settings.tab.vcs=VCS 연결
 settings.tab.cli=CLI API 키
 settings.tab.cache=캐시 설정
+settings.group.access=접근 및 사용자
+settings.group.policy=분석 및 정책
+settings.group.connections=연결 및 알림
+settings.group.operations=운영 및 데이터
+
+# ── Policy as Code (설정 탭) ──
+
+settings.policy.heading=Policy as Code
+settings.policy.description=조직, 팀, 프로젝트 단위로 보안 게이트 정책을 정의하고, 예외(waiver) 승인을 관리합니다.
+settings.policy.subtab.policies=정책
+settings.policy.subtab.waivers=예외
+settings.policy.subtab.sync=가져오기/내보내기/GitOps
+settings.policy.newPolicy=+ 새 정책
+settings.policy.editPolicy=정책 수정
+settings.policy.form.scopeType=범위
+settings.policy.form.scopeType.organization=조직
+settings.policy.form.scopeType.team=팀
+settings.policy.form.scopeType.project=프로젝트
+settings.policy.form.scopeId=적용 대상
+settings.policy.form.name=이름
+settings.policy.form.namePlaceholder=예: 기본 게이트 정책
+settings.policy.form.description=설명
+settings.policy.form.locked=잠금(하위 단계에서 이 정책의 값을 재정의할 수 없음)
+settings.policy.form.enabled=활성화
+settings.policy.form.failOnSeverity=심각도 기준 차단
+settings.policy.form.failOnKev=알려진 악용(KEV) 발견 시 차단
+settings.policy.form.failOnEpss=EPSS 점수 ≥ 기준 차단
+settings.policy.form.failOnLicenseViolation=라이선스 위반 시 차단
+settings.policy.form.onlyNew=신규 도입된 컴포넌트만
+settings.policy.form.onlyReachable=참조가 확인된 라이브러리만 평가 (UNKNOWN 제외, 선택 사항)
+settings.policy.form.failOnSecrets=CRITICAL/HIGH 등급 시크릿 발견 시 차단
+settings.policy.inherit=상위에서 상속
+settings.policy.severity.critical=치명적(Critical)
+settings.policy.severity.high=높음(High)
+settings.policy.severity.medium=보통(Medium)
+settings.policy.severity.low=낮음(Low)
+settings.policy.severity.none=심각도로 차단하지 않음
+settings.policy.noOverrides=재정의 없음(전부 상속)
+settings.policy.table.scope=범위
+settings.policy.table.name=이름
+settings.policy.table.status=상태
+settings.policy.table.gate=게이트 요약
+settings.policy.table.actions=작업
+settings.policy.table.empty=아직 정의된 정책이 없습니다. 인스턴스는 전역 기본값을 따릅니다.
+settings.policy.locked.badge=잠김
+settings.policy.disabled.badge=비활성
+settings.policy.confirmDelete=이 정책을 삭제할까요? 하위 단계는 상위 계층의 다음 정책으로 대체됩니다.
+settings.policy.saved=정책이 저장되었습니다.
+settings.policy.deleted=정책이 삭제되었습니다.
+settings.policy.error.loadFailed=정책을 불러오지 못했습니다.
+settings.policy.scopeOptions.error=정책 적용 범위를 불러오지 못했습니다. 다시 시도해 주세요.
+settings.policy.scopeOptions.empty=사용 가능한 적용 범위가 없습니다.
+settings.policy.error.saveFailed=정책 저장에 실패했습니다.
+settings.policy.error.deleteFailed=정책 삭제에 실패했습니다.
+settings.policy.error.scopeRequired=정책이 적용될 대상을 선택하세요.
+settings.policy.error.nameRequired=이름은 필수입니다.
+settings.policy.waivers.selectProject=프로젝트를 선택하세요
+settings.policy.waivers.selectProjectHint=위에서 프로젝트를 선택하면 예외를 조회하거나 요청할 수 있습니다.
+settings.policy.waivers.newException=+ 예외 요청
+settings.policy.waivers.form.reason=사유
+settings.policy.waivers.form.expiry=만료일
+settings.policy.waivers.form.targetType=적용 대상
+settings.policy.waivers.targetType.cve=특정 CVE
+settings.policy.waivers.targetType.license=특정 라이선스
+settings.policy.waivers.targetType.malicious=악성 패키지 플래그
+settings.policy.waivers.targetType.all=전체(컴포넌트 전체)
+settings.policy.waivers.form.targetId=CVE ID 또는 SPDX 라이선스 ID
+settings.policy.waivers.form.componentCoordinate=컴포넌트(선택 사항 — 비워두면 프로젝트 전체에 적용)
+settings.policy.waivers.submit=예외 요청
+settings.policy.waivers.requested=예외가 요청되었습니다 — 승인 대기 중.
+settings.policy.waivers.table.requester=요청자
+settings.policy.waivers.table.reason=사유
+settings.policy.waivers.table.target=대상
+settings.policy.waivers.table.expiry=만료일
+settings.policy.waivers.table.status=상태
+settings.policy.waivers.table.actions=작업
+settings.policy.waivers.table.empty=이 프로젝트에 요청된 예외가 없습니다.
+settings.policy.waivers.approve=승인
+settings.policy.waivers.revoke=철회
+settings.policy.waivers.approved=예외가 승인되었습니다.
+settings.policy.waivers.revoked=예외가 철회되었습니다.
+settings.policy.waivers.error.loadFailed=예외를 불러오지 못했습니다.
+settings.policy.waivers.error.requestFailed=예외 요청에 실패했습니다.
+settings.policy.waivers.error.actionFailed=예외 처리에 실패했습니다.
+settings.policy.sync.exportAll=모든 정책 내보내기(YAML)
+settings.policy.sync.exportFailed=정책 내보내기에 실패했습니다.
+settings.policy.sync.import.heading=YAML로 가져오기
+settings.policy.sync.import.placeholder=정책 YAML을 여기에 붙여넣으세요
+settings.policy.sync.import.submit=가져오기
+settings.policy.sync.import.result=정책 {0}건을 가져왔습니다.
+settings.policy.sync.import.failed=가져오기에 실패했습니다 — YAML을 확인하세요.
+settings.policy.sync.gitops.heading=GitOps 동기화
+settings.policy.sync.gitops.description=저장소에서 .oswl/policy.yaml을 가져와 프로젝트 정책으로 적용합니다.
+settings.policy.sync.gitops.project=프로젝트
+settings.policy.sync.gitops.repoUrl=저장소 URL
+settings.policy.sync.gitops.token=액세스 토큰(비공개 저장소인 경우, 선택 사항)
+settings.policy.sync.gitops.branch=브랜치(선택 사항 — 비워두면 저장소 기본 브랜치 사용)
+settings.policy.sync.gitops.submit=지금 동기화
+settings.policy.sync.gitops.success=동기화되었습니다 — 프로젝트 정책이 갱신되었습니다.
+settings.policy.sync.gitops.failed=GitOps 동기화에 실패했습니다.
+settings.policy.sync.effective.heading=적용 정책 뷰어
+settings.policy.sync.effective.project=프로젝트
+settings.policy.sync.effective.load=적용 정책 보기
+settings.policy.sync.effective.export=YAML로 내보내기
+settings.policy.sync.effective.loadFailed=적용 정책을 계산하지 못했습니다.
+settings.policy.sync.effective.noOverride=이 단계에는 정의된 정책이 없습니다.
+settings.policy.sync.effective.org=조직
+settings.policy.sync.effective.team=팀
+settings.policy.sync.effective.projectLevel=프로젝트
+
 settings.security.description=OsWL 인스턴스의 메일 서버 및 2단계 인증을 설정합니다.
 settings.security.error.backendNotConnected=백엔드가 아직 연결되지 않았습니다.
 settings.security.error.mailTestFailed=실패했습니다 ({0}).
@@ -1131,9 +1372,7 @@ settings.security.twoFa.otpHint.trustedDevice=신뢰할 수 있는 기기는 5분간 유효합니다
 settings.security.twoFa.totp=인증 앱 (TOTP)
 settings.security.twoFa.totp.descriptionFull=사용자가 Google Authenticator, Authy 또는 TOTP 호환 앱에 QR 코드를 등록합니다. 이메일이 필요하지 않습니다.
-settings.vcs.bb.cloudGuideDual.option1=① Atlassian API Token (id.atlassian.com): Atlassian 이메일, workspace slug, 토큰 입력 (Basic 인증).
-settings.vcs.bb.cloudGuideDual.option2=② Workspace HTTP Access Token (Bitbucket workspace 설정): workspace slug와 토큰만 입력 (Bearer 인증).
-settings.vcs.bb.cloudGuideSimple=Create a Workspace HTTP Access Token in Bitbucket workspace settings \u2192 Access management \u2192 Access tokens. Enter the workspace slug and token below. Uses Bitbucket Cloud REST API 2.0 (api.bitbucket.org/2.0).
+settings.vcs.bb.cloudGuideSimple=Bitbucket 워크스페이스 설정 → Access management → Access tokens에서 워크스페이스 HTTP 액세스 토큰을 만드세요. 아래에 워크스페이스 식별자(slug)와 토큰을 입력하세요. Bitbucket Cloud REST API 2.0(api.bitbucket.org/2.0)을 사용합니다.
 settings.vcs.bb.guide1.username=Atlassian \uacc4\uc815 \uc774\uba54\uc77c
 settings.vcs.bb.label.workspaceSlug=Workspace Slug
 settings.vcs.bb.modeCloud=Bitbucket Cloud
@@ -1207,7 +1446,7 @@ error.500.title=서버 내부 오류
 error.503.btn=홈으로
 error.503.description=서비스를 일시적으로 이용할 수 없습니다. 잠시 후 다시 시도해 주세요.
 error.503.title=서비스 이용 불가
-error.api.internal=예기치 않은 오류가 발생했습니다. 잠시 후 다시 시도해 주세요.
+error.api.internal=예기치 않은 서버 오류가 발생했습니다. 문제가 계속되면 서버 로그를 확인하거나 관리자에게 문의하세요.
 
 # ── OSS Notices ──
 
@@ -1217,7 +1456,7 @@ ossNotices.col.license=라이선스
 ossNotices.col.source=소스
 ossNotices.col.usedFor=활용 목적
 ossNotices.col.version=버전
-ossNotices.data.depsdev.license=CC-BY 4.0(생성 데이터)
+ossNotices.data.depsdev.license=생성 데이터 CC-BY 4.0; 원천별 조건 별도 적용
 ossNotices.data.depsdev.name=deps.dev
 ossNotices.data.depsdev.usedFor=라이선스·권고(advisory) 조회, 의존성 해석, OpenSSF Scorecard 점수
 ossNotices.data.epss.license=무료 접근, 출처 표시 요청
@@ -1225,14 +1464,23 @@ ossNotices.data.epss.name=FIRST.org EPSS
 ossNotices.data.epss.usedFor=CVE별 악용 확률 점수
 ossNotices.data.ghsa.license=CC-BY 4.0
 ossNotices.data.ghsa.name=GitHub Advisory Database
-ossNotices.data.ghsa.usedFor=OSV를 통해 노출되는 npm, Maven, RubyGems, NuGet의 주요 취약점 정보 출처
+ossNotices.data.ghsa.usedFor=직접 조회 및 OSV 경유 패키지 취약점 정보; 원출처 고지 보존 필요
 ossNotices.data.kev.license=CC0 1.0(퍼블릭 도메인)
 ossNotices.data.kev.name=CISA KEV 카탈로그
 ossNotices.data.kev.usedFor=실제 악용 확인된 취약점(KEV) 표시
-ossNotices.data.osv.license=CC-BY 4.0 / CC0 1.0(에코시스템별 상이)
+ossNotices.data.osv.license=원천별 상이, CC-BY-SA 4.0 포함
 ossNotices.data.osv.name=OSV(Open Source Vulnerabilities)
-ossNotices.data.osv.usedFor=npm, Maven, PyPI, Go, RubyGems, NuGet, Cargo 전반의 실시간 컴포넌트별 취약점 조회
-ossNotices.dataSources.subtitle=OsWL은 아래 공개 피드에서 실시간으로 컴포넌트 데이터를 보강합니다 — 번들에 포함된 코드가 아니라 데이터입니다. 각 소스의 전체 출처표시 내역은 THIRD_PARTY_LICENSES.md에서 확인할 수 있습니다.
+ossNotices.data.osv.usedFor=패키지 취약점 조회와 오프라인 스냅샷; 조회 범위와 이용 조건은 원천별로 다름
+ossNotices.data.conda.license=BSD 계열 / BSD 3-Clause / MIT 복합 고지
+ossNotices.data.conda.name=conda-forge-bot-data 이름 매핑
+ossNotices.data.conda.usedFor=내장 Conda-PyPI 이름 매핑; 원문 고지는 META-INF/licenses/conda-forge-bot-data-LICENSE.txt에 포함
+ossNotices.data.cocoapods.license=MIT(명세); 실제 pod는 개별 라이선스 적용
+ossNotices.data.cocoapods.name=CocoaPods Specs
+ossNotices.data.cocoapods.usedFor=pod 명세의 저장소 및 패키지 라이선스 메타데이터
+ossNotices.data.nvd.license=NIST / CVE 원천 조건; 재배포 검토 미완료
+ossNotices.data.nvd.name=NIST NVD
+ossNotices.data.nvd.usedFor=CVE·CPE 조회; OsWL은 NVD의 추천 또는 인증을 받은 제품이 아님
+ossNotices.dataSources.subtitle=원격 피드와 내장 참조 데이터를 함께 안내합니다. 출처 고지와 재배포 조건 확인 상태는 THIRD_PARTY_LICENSES.md 및 배포물의 META-INF 고지를 확인하세요.
 ossNotices.dataSources.title=외부 데이터 소스
 ossNotices.footer=전체 라이선스 본문은 소스 저장소의 THIRD_PARTY_LICENSES.md에서 확인할 수 있습니다.
 ossNotices.githubLink=GitHub에서 소스 보기
@@ -1405,35 +1653,7 @@ componentDetail.defer.placeholder.date=YYYY-MM-DD
 settings.security.mail.configureNow=지금 설정 ↑
 settings.security.mail.notConfigured=메일 서버가 설정되지 않았습니다.
 
-# ── Added in 1.0.3: previously missing Korean translations ──
-topbar.deleteAccount=회원 탈퇴
-topbar.deleteAccount.title=계정을 삭제하시겠어요?
-topbar.deleteAccount.body=로그인 정보가 영구적으로 삭제됩니다. 프로젝트, 스캔, 임포트 이력, 감사 로그는 그대로 유지됩니다.
-topbar.deleteAccount.password=현재 비밀번호
-topbar.deleteAccount.confirm=계정 삭제
-topbar.deleteAccount.failed=계정을 삭제하지 못했습니다. 비밀번호를 확인하고 다시 시도해 주세요.
-topbar.deleteAccount.adminBlocked=기본 시스템 관리자 계정은 삭제할 수 없습니다.
-quickImport.error.parseFailed=의존성 파싱에 실패했습니다. 저장소에 잠금 파일이 없거나 지원하지 않는 구조일 수 있습니다.
-quickImport.error.javaRequired=Gradle/Maven 의존성 해석을 위해 OsWL 서버에 Java(JDK)가 필요합니다. JDK 25+ 설치 후 서버를 재시작해 주세요.
-quickImport.error.noManifests=저장소에서 지원되는 매니페스트 파일을 찾지 못했습니다. 잠금 파일(pom.xml, package-lock.json 등)이 커밋되어 있는지 확인해 주세요.
-quickImport.error.gradleFailed=서버에서 Gradle 의존성 해석에 실패했습니다. JDK 25+가 설치되어 있고 ./gradlew 빌드가 되는 저장소인지 확인해 주세요.
-cli.terminalHint=터미널에서 OsWL을 실행한 경우(./gradlew bootRun), 해당 창에서 Ctrl+C를 누르면 서버가 종료됩니다.
-settings.ai.usage.heading=오늘 사용량
-settings.ai.usage.calls=API 호출
-settings.ai.usage.tokens=토큰 (입력 / 출력 / 합계)
-settings.ai.usage.time=시각
-settings.ai.usage.operation=작업
-settings.ai.usage.totalTokens=토큰
-settings.ai.usage.estCost=예상 비용($)
-settings.ai.usage.estimatedCost=오늘 예상 비용
-settings.ai.usage.recent=최근 호출
-settings.ai.usage.noProvider=AI 프로바이더를 활성화하면 사용량이 여기에 표시됩니다.
-settings.ai.usage.pricingDisclaimer=각 모델의 공식 100만 토큰당 정가를 기준으로 산출한 추정치입니다. 캐시 입력·배치·롱컨텍스트 할인은 반영되지 않으므로 참고용으로만 사용하세요. 실제 금액은 프로바이더 청구서를 기준으로 합니다. 정가 정보가 없는 모델은 프로바이더별 기본 단가로 계산됩니다.
-settings.ai.usage.page=페이지
-settings.ai.usage.of=/
-settings.ai.usage.project=프로젝트
-
-# ── 로드맵 #12 조직 대시보드 / #16 타이포스쿼팅 / #17 SIEM 내보내기 / #7 lockfile (v1.0.4 마무리에서 추가) ──
+# ── Organization dashboard / typosquat / SIEM export / lockfile (added in v1.0.4 wrap-up) ──
 topbar.nav.orgDashboard=조직 대시보드
 orgDashboard.topbar.label=조직 대시보드
 orgDashboard.pageTitle=조직 대시보드
@@ -1466,7 +1686,10 @@ componentDetail.typosquat.label=이름 유사 패키지 의심
 componentDetail.typosquat.tooltip=이 패키지 이름이 널리 쓰이는 패키지와 매우 비슷합니다. 설치하려던 패키지가 맞는지 확인하세요.
 securityCenter.typosquat.badge=이름 유사 의심
 securityCenter.typosquat.tooltip=이 패키지 이름이 널리 쓰이는 패키지와 매우 비슷합니다. 설치하려던 패키지가 맞는지 확인하세요.
-quickImport.sbom.lockHint=composer.lock, conan.lock 파일을 그대로 올려도 됩니다.
+securityCenter.reachability.tooltip.reachable=바이트코드 또는 지원되는 소스 import에서 참조를 확인했습니다. 실제 실행을 입증하지는 않습니다.
+securityCenter.reachability.tooltip.notReachable=분석한 프로젝트 바이트코드에서 이 라이브러리에 대한 참조를 찾지 못했습니다.
+securityCenter.reachability.tooltip.unknown=소스·바이트코드 누락, 미지원 구문, 불완전한 범위 또는 정적 참조 미발견으로 판단 근거가 부족합니다.
+quickImport.sbom.lockHint=잠금 파일도 직접 업로드할 수 있습니다: composer.lock(PHP), conan.lock(C/C++), Podfile.lock(CocoaPods), conda-lock.yml / pixi.lock / conda explicit 스펙(Conda).
 settings.admin.auditLog.btn.exportCef=CEF 내보내기
 settings.admin.auditLog.btn.exportJsonl=JSON Lines 내보내기
 orgDashboard.summary.scannedProjects=전체 {1}개 프로젝트 중 {0}개 스캔 완료
@@ -1494,6 +1717,7 @@ permission.auditGroup.administration=관리
 permission.ORG_DASHBOARD_VIEW=조직 대시보드 보기
 permission.AUDIT_LOG_VIEW=감사 로그 보기
 permission.AUDIT_LOG_EXPORT=감사 로그 내보내기(SIEM)
+permission.AUDIT_LOG_VERIFY=감사 로그 무결성 검증
 permission.SETTINGS_JIRA_MANAGE=Jira 연동 관리
 permission.SETTINGS_SNAPSHOT_MANAGE=오프라인 스냅샷 번들 관리
 settings.ai.usage.branch=브랜치
@@ -1508,15 +1732,21 @@ ossNotices.lib.flyway.name=Flyway
 ossNotices.lib.flyway.description=버전 관리 기반 데이터베이스 스키마 마이그레이션
 ossNotices.lib.springOauth2.name=Spring Security OAuth2 Client
 ossNotices.lib.springOauth2.description=OIDC / OAuth2 싱글 사인온 클라이언트 지원
+ossNotices.lib.springSessionJdbc.name=Spring Session JDBC
+ossNotices.lib.springSessionJdbc.description=다중 인스턴스 배포를 위한 PostgreSQL 기반 클러스터 전역 HTTP 세션
+ossNotices.lib.shedlock.name=ShedLock
+ossNotices.lib.shedlock.description=예약 작업이 인스턴스마다 중복 실행되지 않도록 막는 클러스터 전역 락
+ossNotices.lib.cvssV4Lookup.name=CVSS v4.0 조회 테이블 (cvss-v4-calculator)
+ossNotices.lib.cvssV4Lookup.description=CVSS v4.0 기본/환경 점수 계산에 사용하는 FIRST.org의 MacroVector 점수 테이블(벤더링됨)
 
 # === v1.0.4 QA follow-up (AI effort / insight backfill / offline snapshot rewrite) ===
-settings.admin.snapshot.step1.heading=1단계 — 이 인스턴스에서 요청 목록 내려받기
-settings.admin.snapshot.step2.heading=2단계 — 인터넷이 되는 장비에서 번들 만들기
-settings.admin.snapshot.step2.desc=요청 목록을 인터넷이 되는 장비로 옮긴 뒤, 그곳에서 OsWL 번들 빌더를 실행하세요:
-settings.admin.snapshot.step2.note=명령을 실행하면 bundle.zip이 생성됩니다. 3단계를 위해 이 파일을 다시 이 장비로 가져오세요.
+settings.admin.snapshot.step1.heading=1. 패키지 목록 다운로드
+settings.admin.snapshot.step2.heading=2. 인터넷 연결 장비에서 번들 생성
+settings.admin.snapshot.step2.desc=목록 파일을 인터넷 연결 장비로 옮긴 뒤 다음 명령을 실행하세요.
+settings.admin.snapshot.step2.note=생성된 bundle.zip을 이 서버로 가져오세요.
 settings.admin.snapshot.build.command=./gradlew vdbBuild --args="build --wanted wanted-list.jsonl --sources osv,epss,kev,depsdev --out bundle.zip"
-settings.admin.snapshot.step3.heading=3단계 — 번들 가져오기
-settings.admin.snapshot.step3.desc=정의를 이 인스턴스에 적재합니다. 이후 스캔은 이 정의를 기준으로 판단합니다.
+settings.admin.snapshot.step3.heading=3. 번들 가져오기
+settings.admin.snapshot.step3.desc=bundle.zip을 선택해 오프라인 취약점·라이선스 데이터를 갱신하세요.
 settings.admin.snapshot.import.mode.label=해당 출처에 이미 데이터가 있을 때:
 settings.admin.snapshot.import.importing=가져오는 중…
 settings.admin.snapshot.export.heading=이 인스턴스에서 내보내기 (선택)
@@ -1531,13 +1761,13 @@ settings.ai.effort.max=최대 — 가장 상세하고 토큰을 가장 많이 
 settings.ai.effort.wire.none=전송 내용: 없음 — 공급자 기본값이 적용됩니다.
 settings.ai.effort.wire.openai=전송 내용: reasoning_effort="{0}"
 settings.ai.effort.wire.anthropic=전송 내용: output_config.effort="{0}"
-settings.ai.enrichment.backfill.title=이미 끝난 스캔
-settings.ai.enrichment.backfill.description=새로 실행하는 스캔에는 항상 AI 인사이트가 생성됩니다. 이미 끝난 스캔은 여기서 요청하지 않는 한 그대로 둡니다.
-settings.ai.label.autoBackfill=공급자·언어 변경 시 자동 재생성
-settings.ai.hint.autoBackfill=기본값은 꺼짐입니다. 켜 두면 공급자나 프롬프트 언어를 저장할 때 최근 스캔들을 백그라운드에서 다시 돌리며, 스캔 1건당 API 호출 1회가 발생합니다.
-settings.ai.hint.backfillButtons=“빠진 것만 생성”은 인사이트가 없는 스캔만 처리합니다. “전체 재생성”은 이미 있는 것까지 다시 만듭니다 — 언어나 모델을 바꿔을 때 쓰세요.
-settings.ai.backfill.btn.missing=빠진 것만 생성
-settings.ai.backfill.btn.all=전체 재생성
+settings.ai.enrichment.backfill.title=기존 스캔의 AI 분석
+settings.ai.enrichment.backfill.description=최근 완료된 스캔의 AI 분석을 생성하거나 갱신합니다. 취약점·라이선스 판정은 바뀌지 않습니다.
+settings.ai.label.autoBackfill=기존 AI 분석 자동 갱신
+settings.ai.hint.autoBackfill=켜면 공급자나 분석 언어를 변경할 때 최근 스캔의 AI 분석도 갱신합니다. AI 호출 비용이 발생할 수 있습니다.
+settings.ai.hint.backfillButtons=아직 없는 AI 분석만 생성하거나, 기존 분석까지 모두 다시 생성할 수 있습니다.
+settings.ai.backfill.btn.missing=없는 분석 생성
+settings.ai.backfill.btn.all=최근 분석 다시 생성
 settings.ai.backfill.btn.running=시작하는 중…
 settings.ai.backfill.msg.started=백그라운드에서 인사이트를 생성하고 있습니다. 잠시 후 프로젝트 페이지를 새로고침하세요.
 settings.ai.backfill.error.failed=재생성을 시작하지 못했습니다.
@@ -1559,9 +1789,292 @@ settings.ai.provider.activeBadge=사용 중
 settings.ai.enrichment.scope.heading=AI 요약 범위
 settings.ai.enrichment.context.heading=언어·배포 컨텍스트
 settings.ai.enrichment.model.heading=모델 파라미터
-settings.ai.enrichment.prompts.heading=프롬프트 템플릿
-settings.ai.enrichment.backfill.runTitle=지금 실행
-settings.ai.label.autoBackfillShort=자동 실행
+settings.ai.enrichment.prompts.heading=AI 분석 지침
+settings.ai.enrichment.backfill.runTitle=분석 실행
+settings.ai.label.autoBackfillShort=자동 갱신
 settings.ai.autoBackfill.on=켬
 settings.ai.autoBackfill.off=끔
 settings.ai.hint.backfillNeedsProvider=먼저 위에서 AI 공급자를 선택하고 저장하세요.
+
+# SAML / SCIM audit log filter group label
+permission.auditGroup.scim=SCIM 프로비저닝
+
+# === v1.0.5 — Slack/Teams webhook notifications ===
+
+settings.tab.webhooks=웹훅
+permission.SETTINGS_WEBHOOK_MANAGE=웹훅 알림 관리
+permission.auditGroup.webhook=웹훅
+permission.POLICY_MANAGE=보안 정책 관리
+permission.auditGroup.policy=정책
+
+# === v1.0.5 — 보고서 브랜딩 ===
+
+settings.tab.reports=보고서
+permission.SETTINGS_REPORTING_MANAGE=보고서 브랜딩 관리
+settings.reports.heading=보고서 브랜딩
+settings.reports.description=컴플라이언스 리포트에 로고, 회사명, 커스텀 머리말을 추가합니다.
+settings.reports.logo.label=로고
+settings.reports.logo.upload=이미지 업로드
+settings.reports.logo.help=PNG, JPEG, SVG, 350KB 이하. 비워두면 OsWL 로고가 표시됩니다.
+settings.reports.companyName.label=회사명
+settings.reports.companyName.placeholder=Acme Corp
+settings.reports.companyName.help=리포트 헤더의 "OsWL"을 대체합니다. 비워두면 OsWL 브랜딩이 유지됩니다.
+settings.reports.headerText.label=머리말
+settings.reports.headerText.placeholder=대외비 — 사내 배포용
+settings.reports.headerText.help=리포트 제목 아래에 표시됩니다(예: 기밀 고지 문구).
+settings.reports.coverPage.label=표지 페이지 추가
+settings.reports.coverPage.help=본문 앞에 로고, 회사명, 프로젝트명이 들어간 별도의 표지 페이지를 추가합니다.
+settings.reports.error.backend=서버에 연결할 수 없습니다.
+settings.reports.error.logoTooLarge=이미지가 너무 큽니다 — 350KB 이하의 파일을 사용하세요.
+settings.reports.error.logoInvalid=PNG, JPEG, SVG 이미지를 선택하세요.
+
+# === v1.0.5 — 셀프 진단 탭 ===
+
+settings.tab.diagnostics=진단
+settings.diagnostics.heading=진단
+settings.diagnostics.description=서버 기능과 외부 서비스의 연결 상태를 확인합니다.
+settings.diagnostics.results.heading=결과
+settings.diagnostics.empty=진단을 실행하면 항목별 정상 여부를 확인할 수 있습니다.
+settings.diagnostics.btn.run=진단 실행
+settings.diagnostics.btn.running=실행 중…
+settings.diagnostics.btn.copy=지원 요청용 복사
+settings.diagnostics.copied=클립보드에 복사되었습니다.
+settings.diagnostics.error.loadFailed=진단 실행에 실패했습니다.
+settings.diagnostics.status.up=정상
+settings.diagnostics.status.down=실패
+settings.diagnostics.status.skipped=검사 제외
+settings.diagnostics.status.unknown=확인 필요
+
+settings.diagnostics.archive.heading=스캔 아카이빙
+settings.diagnostics.archive.domainHeading=데이터 보존
+settings.diagnostics.archive.description=최근 스캔은 상세 정보를 보존합니다. 오래된 스캔은 먼저 내보낸 뒤 컴포넌트·CVE 상세를 정리할 수 있습니다. 집계 수치는 유지됩니다.
+settings.diagnostics.archive.loading=프로젝트 불러오는 중…
+settings.diagnostics.archive.noProjects=아카이빙할 활성 프로젝트가 없습니다.
+settings.diagnostics.archive.field.project=프로젝트
+settings.diagnostics.archive.field.retainCount=보존할 스캔 수
+settings.diagnostics.archive.retainCount.placeholder=서버 기본값
+settings.diagnostics.archive.selectProject=프로젝트를 선택하세요…
+settings.diagnostics.archive.btn.preview=오래된 스캔 내보내기
+settings.diagnostics.archive.btn.previewing=불러오는 중…
+settings.diagnostics.archive.btn.archive=오래된 스캔 상세 정리
+settings.diagnostics.archive.btn.archiving=아카이빙 중…
+settings.diagnostics.archive.preview.summary=아카이빙 대기 스캔 {0}건, 컴포넌트 총 {1}개. export를 다운로드했습니다.
+settings.diagnostics.archive.preview.empty=내보낼 스캔이 없습니다. 완료된 스캔이 모두 보존 개수 이내입니다.
+settings.diagnostics.archive.confirm=이 프로젝트의 스캔 {0}건을 아카이빙할까요? 컴포넌트/CVE 상세가 영구적으로 삭제됩니다.
+settings.diagnostics.archive.confirmNoExport=경고: 이 세션에서 export를 다운로드하지 않았습니다. 스캔 {0}건을 아카이빙하면 컴포넌트/CVE 상세가 사본 없이 영구 삭제됩니다. 계속할까요?
+settings.diagnostics.archive.result=스캔 {0}건을 아카이빙했습니다. 완료 스캔 총 {1}건 중 {2}건을 상세 보존합니다.
+settings.diagnostics.archive.error.projectsFailed=프로젝트를 불러오지 못했습니다.
+settings.diagnostics.archive.error.loadFailed=요청에 실패했습니다.
+
+# === v1.0.5 — 설정 export/import 탭 ===
+
+settings.tab.configTransfer=설정 이관
+settings.configTransfer.heading=설정 내보내기 / 가져오기
+settings.configTransfer.description=OsWL 서버 간에 설정을 옮깁니다. API 키와 비밀번호 등 비밀 정보는 포함하지 않습니다.
+settings.configTransfer.export.heading=내보내기
+settings.configTransfer.export.description=JSON 파일을 다운로드합니다. 비밀, API 키, 비밀번호는 절대 포함되지 않습니다.
+settings.configTransfer.import.heading=가져오기
+settings.configTransfer.import.description=번들 파일을 선택하면 실제로 저장하기 전에 변경될 내용을 미리 볼 수 있습니다.
+settings.configTransfer.field.roleTemplates=역할 템플릿
+settings.configTransfer.field.licensePolicy=라이선스 정책
+settings.configTransfer.field.aiSettings=AI 설정
+settings.configTransfer.field.promptOverrides=AI 프롬프트 오버라이드
+settings.configTransfer.field.cache=캐시 TTL
+settings.configTransfer.field.policies=정책
+settings.configTransfer.btn.export=내보내기
+settings.configTransfer.btn.exporting=내보내는 중…
+settings.configTransfer.btn.apply=가져오기 적용
+settings.configTransfer.btn.applying=적용 중…
+settings.configTransfer.error.exportFailed=내보내기에 실패했습니다.
+settings.configTransfer.error.previewFailed=이 파일을 설정 번들로 읽을 수 없습니다.
+settings.configTransfer.error.applyFailed=가져오기에 실패했습니다.
+settings.configTransfer.applied=가져오기가 적용되었습니다.
+settings.configTransfer.skippedUnresolvedPolicies=정책 {0}개는 적용되지 않았습니다 — 이 인스턴스에서 스코프를 이름으로 매칭할 수 없습니다. 자세한 내용은 아래 목록을 참고하세요.
+settings.configTransfer.skippedBuiltIn=번들에 포함된 내장 역할 템플릿 {0}개는 건너뛰었습니다.
+settings.webhooks.heading=웹훅 알림
+settings.webhooks.description=Slack 또는 Teams로 보안 알림을 보냅니다.
+settings.webhooks.provider.label=제공자
+settings.webhooks.url.label=웹훅 URL
+settings.webhooks.url.placeholder=https://hooks.slack.com/services/...
+settings.webhooks.url.help=기존 URL을 유지하려면 비워 두세요. URL은 암호화되어 저장됩니다.
+settings.webhooks.enabled.label=웹훅 알림 사용
+settings.webhooks.events.label=알림 이벤트
+settings.webhooks.events.newCve=신규 CVE 발생
+settings.webhooks.events.gateFailure=게이트 실패
+settings.webhooks.events.scanFailure=스캔 실패
+settings.webhooks.events.waiverExpiry=예외 만료 임박
+settings.webhooks.btn.test=테스트
+settings.webhooks.btn.testing=테스트 중…
+settings.webhooks.test.success=테스트 메시지를 보냈습니다.
+settings.webhooks.test.failed=테스트에 실패했습니다.
+settings.webhooks.error.backend=서버에 연결할 수 없습니다.
+settings.webhooks.error.urlRequired=테스트할 웹훅 URL을 입력하세요.
+settings.webhooks.history.heading=전송 이력
+settings.webhooks.history.description=재시도 및 실패를 포함한 최근 웹훅 전송 기록입니다.
+settings.webhooks.history.filter.all=모든 상태
+settings.webhooks.history.filter.success=성공
+settings.webhooks.history.filter.failed=실패
+settings.webhooks.history.filter.allEvents=모든 이벤트
+settings.webhooks.history.event.newCve=신규 CVE
+settings.webhooks.history.event.gateFailure=게이트 실패
+settings.webhooks.history.event.scanFailure=스캔 실패
+settings.webhooks.history.event.waiverExpiry=예외 만료
+settings.webhooks.history.col.time=시간
+settings.webhooks.history.col.event=이벤트
+settings.webhooks.history.col.project=프로젝트
+settings.webhooks.history.col.status=상태
+settings.webhooks.history.col.attempt=시도
+settings.webhooks.history.col.error=오류
+settings.webhooks.history.error=전송 기록을 불러오지 못했습니다.
+settings.webhooks.history.empty=전송 기록이 없습니다.
+common.refresh=새로고침
+common.retry=다시 시도
+
+# === 다크 모드 테마 전환 ===
+topbar.theme=테마
+topbar.theme.light=밝게
+topbar.theme.dark=어둡게
+topbar.theme.system=시스템 설정
+topbar.theme.saveFailed=테마 설정을 저장하지 못했습니다. 자동으로 다시 시도합니다.
+security.outboundUrl.error.public=폐쇄망 모드에서는 공인 인터넷 주소를 사용할 수 없습니다.
+
+# === 전역 검색 팔레트 ===
+search.button=검색
+search.dialogLabel=전역 검색
+search.placeholder=프로젝트, 컴포넌트, CVE 검색…
+search.group.projects=프로젝트
+search.group.components=컴포넌트
+search.group.cves=CVE
+search.loading=검색 중…
+search.empty=검색 결과가 없습니다.
+search.error=검색에 실패했습니다. 다시 시도해 주세요.
+search.footer.hint=↑↓ 이동 · Enter 열기 · esc 닫기
+
+# ── 모바일 알림 화면 ──
+
+mobile.pageTitle=알림
+mobile.desktopSite=데스크톱 사이트
+mobile.waivers.heading=승인 대기 중인 예외
+mobile.waivers.empty=대기 중인 예외가 없습니다.
+mobile.waivers.approve=승인
+mobile.waivers.revoke=철회
+mobile.waivers.approved=예외가 승인되었습니다.
+mobile.waivers.revoked=예외가 철회되었습니다.
+mobile.waivers.error.approveFailed=예외 승인에 실패했습니다.
+mobile.waivers.error.revokeFailed=예외 철회에 실패했습니다.
+mobile.action.retry=다시 시도
+settings.dirty.summary=저장하지 않은 변경 {0}건
+settings.ai.embedded.error.stopFailed=Embedded AI를 중지하지 못했습니다.
+mobile.alerts.heading=신규 CVE 알림
+mobile.alerts.empty=새 알림이 없습니다.
+mobile.alerts.acknowledgeAll=모두 확인 처리
+mobile.alerts.acknowledged=확인 처리되었습니다.
+mobile.alerts.error.ackFailed=알림 확인 처리에 실패했습니다.
+
+componentDetail.sourceAnalysis=소스 import 분석은 참조 여부를 보여주며 실제 실행을 증명하지 않습니다. 참조를 찾지 못한 경우 알 수 없음으로 표시합니다.
+
+componentDetail.sourceFiles={0}: 소스 파일 {1}개 분석
+
+componentDetail.sourcePartial=분석 범위가 불완전합니다. 제한 내에서 읽거나 분석하지 못한 파일이 있습니다.
+
+componentDetail.sourceSubset=지원되는 정적 import 구문만 분석한 결과입니다.
+
+componentDetail.sourceReason.REFERENCE_FOUND=import 참조를 발견했습니다. Python 배포판과 모듈 이름은 추정값이며 실제 실행을 입증하지 않습니다.
+
+componentDetail.sourceReason.NO_PACKAGE_MAPPING=지원되는 패키지와 모듈 이름 매핑이 없습니다.
+
+componentDetail.sourceReason.NO_LANGUAGE_FILES=해당 언어의 소스 파일을 읽지 못했습니다.
+
+componentDetail.sourceReason.ABSENCE_NOT_PROVEN=일치하는 정적 import가 없습니다. 동적·간접 import 여부는 알 수 없습니다.
+
+securityCenter.archivedSummary=아카이브된 스캔입니다. 보존된 집계를 표시하며 컴포넌트 상세는 더 이상 제공되지 않습니다.
+
+common.http.unauthenticated=세션이 만료되었습니다. 다시 로그인하세요.
+
+common.http.forbidden=이 작업을 수행할 권한이 없습니다.
+
+common.http.timeout=요청 시간이 초과되었습니다. 다시 시도하세요.
+
+common.http.network=연결에 실패했습니다. 연결 상태를 확인하고 다시 시도하세요.
+
+quickImport.error.interrupted=작업 프로세스가 중지되어 가져오기가 중단되었습니다. 다시 가져오기를 시작하세요.
+
+componentDetail.lookup.title=최근 조회 상태
+componentDetail.lookup.RESOLVED=조회 완료
+componentDetail.lookup.UNAVAILABLE=조회 불가 — 재시도 필요
+componentDetail.lookup.UNSUPPORTED=지원하지 않는 패키지 매핑
+componentDetail.lookup.NOT_CONFIGURED=미설정
+
+onboarding.team.heading=팀원 추가
+onboarding.team.help=임시 비밀번호로 계정을 만듭니다. 안전한 방법으로 전달해 주세요. 첫 로그인 시 비밀번호를 변경해야 합니다.
+onboarding.team.success=계정을 만들었습니다.
+onboarding.team.name=이름
+onboarding.team.email=이메일
+onboarding.team.password=임시 비밀번호
+onboarding.team.role=역할 템플릿
+onboarding.team.selectRole=역할 템플릿 선택
+onboarding.team.create=계정 만들기
+orgSummary.title=조직 위험 요약
+orgSummary.actions=판단 및 후속 조치
+orgSummary.back=조직 대시보드
+orgSummary.print=인쇄 / PDF 저장
+orgSummary.generated=작성 시각: {0}
+orgSummary.kev=악용 취약점 검토 대기 {0}건
+orgSummary.kevAction=담당자와 조치 기한을 지정하고, 배포 결과를 확인한 뒤 조치를 종료하세요.
+orgSummary.high=치명적 위험 {0}건, 높은 위험 {1}건
+orgSummary.highAction=우선 검토 프로젝트의 노출 여부를 확인하고 업그레이드 또는 예외 결정을 검토하세요.
+orgSummary.license=라이선스 정책 위반 {0}건
+orgSummary.licenseAction=배포 의무를 확인하고 담당 검토자를 기록하세요.
+orgSummary.coverage=집계 범위 및 해석
+orgSummary.scanned=전체 {1}개 프로젝트 중 {0}개에 완료된 스캔이 있습니다.
+orgSummary.caveat=프로젝트별 최근 완료 스캔을 집계합니다. 건수는 고유 CVE 수가 아닌 검출 횟수입니다. 검토·유예는 수정 완료를 의미하지 않습니다. 스캔 완료가 전체 분석을 보증하지 않으므로 스캔 날짜와 컴포넌트 분석 상태를 확인하세요.
+orgSummary.projects=우선 검토 프로젝트 (최대 5개)
+orgSummary.project=프로젝트
+orgSummary.lastScan=최근 스캔
+orgSummary.kevShort=KEV 검토 대기
+orgSummary.empty=프로젝트 스캔을 실행하면 요약이 표시됩니다.
+
+onboarding.team.noRoles=설정에서 역할 템플릿을 만든 뒤 다시 시도하세요.
+
+webPush.title=브라우저 보안 알림
+webPush.back=프로젝트
+webPush.help=이 브라우저에서 받을 보안 알림을 선택하세요. 상세 내용은 OsWL에서 확인합니다. 계속 수신하려면 30일 이내에 구독을 갱신하세요.
+webPush.unconfigured=서버에서 브라우저 알림이 설정되지 않았습니다. 관리자에게 웹 푸시 활성화와 VAPID 키 설정을 요청하세요.
+webPush.unsupported=보안 연결과 Push API를 지원하는 브라우저가 필요합니다.
+webPush.active=이 브라우저에서 알림을 구독 중입니다.
+webPush.events=알림 종류
+webPush.high=신규 높음·치명적 취약점
+webPush.gate=보안 gate 실패
+webPush.enable=알림 설정 저장
+webPush.disable=이 브라우저 구독 해제
+webPush.failed=요청에 실패했습니다. 다시 시도하고, 계속 실패하면 브라우저 구독을 해제한 뒤 다시 설정하세요.
+webPush.denied=구독하려면 브라우저 설정에서 알림을 허용하세요.
+webPush.event.NEW_HIGH_RISK=신규 고위험 취약점 검토가 필요합니다. OsWL에서 확인하세요.
+webPush.event.GATE_FAILURE=보안 gate가 실패했습니다. OsWL에서 결과를 확인하세요.
+
+ossNotices.lib.re2j.name=RE2/J
+ossNotices.lib.re2j.description=실행량을 제한하는 정규식 엔진
+ossNotices.lib.webPush.name=web-push
+ossNotices.lib.webPush.description=브라우저 푸시 암호화 및 VAPID
+ossNotices.lib.bouncyCastle.name=Bouncy Castle
+ossNotices.lib.bouncyCastle.description=브라우저 푸시용 암호화 공급자
+ossNotices.lib.jose4j.name=jose4j
+ossNotices.lib.jose4j.description=VAPID JSON 웹 서명 지원
+settings.cache.policy.savedCustom=캐시를 {0}{1} 동안 유지하도록 설정했습니다.
+settings.ai.invalidParameters=응답 다양성은 0~2, 최대 토큰 수는 256~8192의 정수로 입력하세요. 일일 호출 한도는 0~1000000의 정수입니다.
+settings.ai.defaultTemperature=기본값: 0.15
+settings.ai.defaultMaxTokens=기본값: 1200
+settings.cli.delete.confirm=API 키 "{0}"을 삭제할까요? 이 키를 사용하는 CLI는 더 이상 인증할 수 없습니다.
+settings.cli.delete.failed=API 키를 삭제하지 못했습니다. 다시 시도하세요.
+settings.diagnostics.diskSpace=사용 가능 {0} / 전체 {1} ({2}% 여유)
+settings.diagnostics.copyFailed=복사하지 못했습니다. 클립보드 권한을 확인하세요.
+settings.diagnostics.label.db=데이터베이스
+settings.diagnostics.label.disk=디스크 공간
+settings.diagnostics.label.snapshot=오프라인 데이터
+settings.diagnostics.label.sidecar=내장 AI
+componentDetail.version.unresolved=버전 확인 필요
+settings.ai.temperatureInvalid=0~2 사이의 숫자를 입력하세요.
+settings.ai.maxTokensInvalid=256~8192 사이의 정수를 입력하세요.
+settings.ai.dailyCallCapInvalid=0~1000000 사이의 정수를 입력하세요.
+settings.ai.checkFields=저장하지 못했습니다. 표시된 입력값을 확인하세요.
+componentDetail.cve.openNvd=NVD에서 {0} 보기 (새 탭)
diff --git a/src/main/resources/secretscan/secret-rules.json b/src/main/resources/secretscan/secret-rules.json
new file mode 100644
index 00000000..5fd31c20
--- /dev/null
+++ b/src/main/resources/secretscan/secret-rules.json
@@ -0,0 +1,68 @@
+[
+  {
+    "id": "aws-access-key-id",
+    "description": "AWS access key ID",
+    "severity": "HIGH",
+    "regex": "\\b(AKIA|ASIA)[0-9A-Z]{16}\\b"
+  },
+  {
+    "id": "aws-secret-access-key",
+    "description": "AWS secret access key",
+    "severity": "HIGH",
+    "regex": "(?i)aws_secret_access_key\\s*[:=]\\s*['\"]?[A-Za-z0-9/+=]{40}['\"]?"
+  },
+  {
+    "id": "github-token",
+    "description": "GitHub personal access / OAuth / app token",
+    "severity": "HIGH",
+    "regex": "\\bgh[pousr]_[A-Za-z0-9]{36,255}\\b"
+  },
+  {
+    "id": "gitlab-pat",
+    "description": "GitLab personal access token",
+    "severity": "HIGH",
+    "regex": "\\bglpat-[A-Za-z0-9_-]{20}\\b"
+  },
+  {
+    "id": "slack-token",
+    "description": "Slack API token",
+    "severity": "HIGH",
+    "regex": "\\bxox[baprs]-[0-9A-Za-z-]{10,48}\\b"
+  },
+  {
+    "id": "slack-webhook-url",
+    "description": "Slack incoming webhook URL",
+    "severity": "MEDIUM",
+    "regex": "https://hooks\\.slack\\.com/services/[A-Za-z0-9/]+"
+  },
+  {
+    "id": "google-api-key",
+    "description": "Google API key",
+    "severity": "MEDIUM",
+    "regex": "\\bAIza[0-9A-Za-z_-]{35}\\b"
+  },
+  {
+    "id": "stripe-live-key",
+    "description": "Stripe live secret key",
+    "severity": "CRITICAL",
+    "regex": "\\bsk_live_[0-9A-Za-z]{24,}\\b"
+  },
+  {
+    "id": "npm-token",
+    "description": "npm publish token",
+    "severity": "HIGH",
+    "regex": "\\bnpm_[A-Za-z0-9]{36}\\b"
+  },
+  {
+    "id": "private-key-block",
+    "description": "Embedded private key block",
+    "severity": "CRITICAL",
+    "regex": "-----BEGIN\\s?(RSA|EC|DSA|OPENSSH)?\\s?PRIVATE KEY-----"
+  },
+  {
+    "id": "generic-password-assignment",
+    "description": "Hardcoded password assignment",
+    "severity": "LOW",
+    "regex": "(?i)\\b(password|passwd|pwd)\\s*[:=]\\s*['\"][^'\"\\s]{8,}['\"]"
+  }
+]
diff --git a/src/main/resources/static/css/globals.css b/src/main/resources/static/css/globals.css
index 3fe5c48b..89e615a1 100644
--- a/src/main/resources/static/css/globals.css
+++ b/src/main/resources/static/css/globals.css
@@ -1,4 +1,5 @@
 :root {
+    color-scheme: only light;
     --background-dark:  #001d35;
     --background-light: #ffffff;
 
@@ -17,7 +18,7 @@
 
     --primary-140:   #009086;
     --primary-120:   #00a093;
-    --primary-100:   #00b0a0;
+    --primary-100:   #00b9a3;
     --primary-80:    #33d1b7;
     --primary-40:    #99ebd9;
     --primary-20:    #d3fcf3;
@@ -41,8 +42,21 @@
 
     --surface:        #ffffff;
     --surface-soft:   #f3f5f6;
+    --surface-elevated: #ffffff;
     --border-default: #dbe4e7;
 
+    --primary-10: #e9faf6;
+    --primary-5: #f4fdfb;
+    --brand-primary: #00a093;
+    --brand-primary-hover: #009086;
+    --secondary-120: #18c7a5;
+    --grayscale-45: #718087;
+    --grayscale-25: #d1dce0;
+    --grayscale-3: #fcfdfd;
+
+    --text-accent: #00766d;
+    --text-critical: #b42318;
+    --text-caution: #8a5800;
     --copy-info:      #00659c;
 }
 
@@ -245,3 +259,57 @@ a { color: inherit; text-decoration: none; }
 }
 .tag-status-scanning .tag-dot,
 .tag-status-analyzing .tag-dot { background: var(--risk-medium); }
+
+/* Settings navigation and wide data tables scroll within the viewport on small screens. */
+html:has(body.settings-page), body.settings-page { min-width: 0; }
+html:has(body.onboarding-page), body.onboarding-page { min-width: 0; }
+html:has(body.mobile-page), body.mobile-page { min-width: 0; width: 100%; }
+html:has(body.notification-page), body.notification-page { min-width: 0; }
+@media (max-width: 767px) {
+    .settings-page > header { height: auto; min-height: 64px; flex-wrap: wrap; padding: 12px 16px; gap: 16px; }
+    .settings-page > header > div { min-width: 0; flex-wrap: wrap; gap: 16px; }
+    .settings-page > header > div:last-child { width: 100%; justify-content: space-between; }
+    .settings-page > header button span { white-space: normal; overflow-wrap: anywhere; }
+    .settings-page [class*="w-[440px]"] { width: 100%; max-width: calc(100vw - 32px); }
+    .settings-page [class*="w-[130px]"], .settings-page [class*="w-[110px]"] { width: 100%; }
+    .settings-page [class*="pl-[126px]"] { padding-left: 0; }
+}
+
+@media (prefers-reduced-motion: reduce) {
+    *, *::before, *::after { animation-duration: 0.01ms !important; animation-iteration-count: 1 !important; scroll-behavior: auto !important; transition-duration: 0.01ms !important; }
+}
+
+/* Shared controls follow the light OsWL palette and preserve keyboard focus. */
+:where(button, a, [role="button"]):focus:not(:focus-visible) { outline: none; }
+:where(button, a, [tabindex]):not(input):not(select):not(textarea):focus-visible { outline: 2px solid var(--primary-120); outline-offset: 3px; }
+.oswl-search-trigger { width: clamp(150px, 17vw, 240px); min-height: 36px; }
+.notification-page > footer { margin-top: auto; }
+.notification-card { font-size: 14px; line-height: 1.6; }
+.notification-card fieldset:disabled { opacity: .55; }
+.oswl-checkbox { appearance: none; width: 16px; height: 16px; flex-shrink: 0; border: 1px solid var(--grayscale-40); border-radius: 4px; background: white; }
+.oswl-checkbox:checked { background: var(--primary-120); position: relative; border-color: var(--primary-120); }
+.oswl-switch { width: 36px; height: 20px; padding: 2px; border-radius: 10px; background: var(--grayscale-30); flex-shrink: 0; }
+.oswl-switch > span { display: block; width: 16px; height: 16px; background: white; border-radius: 50%; transition: transform .15s; }
+.oswl-switch.is-on { background: var(--primary-120); }
+.oswl-switch.is-on > span { transform: translateX(16px); }
+.settings-page select { appearance: none; background: white url('/icon/icon-chevron-down.svg') right 12px center/12px no-repeat; padding: 8px 36px 8px 12px; min-height: 36px; border: 1px solid var(--grayscale-20); border-radius: 6px; color: var(--grayscale-80); font: inherit; font-size: 13px; }
+.oswl-filter-row { display: flex; flex-wrap: wrap; align-items: center; gap: 12px; }
+.oswl-filter-row select { min-width: 180px; }
+.oswl-button-secondary { display: inline-flex; align-items: center; justify-content: center; gap: 8px; min-height: 36px; padding: 8px 16px; border: 1px solid var(--grayscale-20); border-radius: 6px; background: white; color: var(--text-accent); font-size: 13px; font-weight: 500; }
+.oswl-button-secondary:hover { background: var(--grayscale-5); }
+.oswl-toast { max-width: calc(100vw - 32px); }
+.oswl-toast span { white-space: normal; }
+
+.config-transfer-panel > div { max-width: 960px; }
+.config-transfer-preview > div { display: flex; justify-content: space-between; gap: 24px; border-bottom: 1px solid var(--grayscale-10); padding: 10px 0; }
+.settings-page input[type=file] { max-width: 100%; color: var(--grayscale-70); font-size: 13px; }
+.settings-page input[type=file]::file-selector-button { background: white; border: 1px solid var(--grayscale-20); color: var(--primary-120); border-radius: 6px; padding: 8px 16px; margin-right: 12px; cursor: pointer; }
+
+.oswl-checkbox:checked::after { content: ""; position: absolute; left: 5px; top: 2px; width: 4px; height: 8px; border: solid white; border-width: 0 1.5px 1.5px 0; transform: rotate(45deg); }
+
+/* Inputs already use a border on the field or its wrapper; avoid a second inner ring. */
+:where(input, select, textarea):focus-visible { outline: none; }
+:where(input, select, textarea):focus { border-color: var(--primary-120); }
+.oswl-field:has([aria-invalid="true"]) { border-color: var(--risk-critical); }
+.oswl-save-feedback { font-size: 13px; color: var(--grayscale-70); }
+.oswl-save-feedback.is-error { color: #b42318; }
diff --git a/src/main/resources/static/js/a11y.js b/src/main/resources/static/js/a11y.js
new file mode 100644
index 00000000..8ffd6392
--- /dev/null
+++ b/src/main/resources/static/js/a11y.js
@@ -0,0 +1,122 @@
+/**
+ * Minimal focus trap for modal/slide-over overlays — not a full ARIA APG implementation,
+ * just Tab/Shift+Tab wrapping plus restoring focus to whatever triggered the overlay on close.
+ * Call oswlTrapFocus(el) right after the overlay becomes visible and oswlReleaseFocus() right
+ * before/as it closes.
+ *
+ * While an overlay is trapped, everything outside it is marked `inert` so screen readers
+ * stop announcing the background page and browsers skip it in sequential focus navigation.
+ *
+ * Also installs the ARIA APG menu keyboard pattern site-wide: ArrowUp/ArrowDown/Home/End
+ * move focus between the items of whichever [role="menu"] currently has focus. Menus in
+ * this project mark their items as plain links/buttons (no menuitem roles), so the handler
+ * walks those.
+ */
+(function (global) {
+    let trapEl = null;
+    let previouslyFocused = null;
+    let inerted = [];
+    const parents = [];
+
+    function focusableElements(container) {
+        return Array.from(container.querySelectorAll(
+            'a[href], button:not([disabled]), textarea:not([disabled]), input:not([disabled]), select:not([disabled]), [tabindex]:not([tabindex="-1"])'
+        )).filter(el => el.offsetParent !== null);
+    }
+
+    function handleKeydown(e) {
+        if (e.key !== 'Tab' || !trapEl) return;
+        const focusables = focusableElements(trapEl);
+        if (!focusables.length) { e.preventDefault(); trapEl.focus(); return; }
+        const first = focusables[0];
+        const last = focusables[focusables.length - 1];
+        if (!trapEl.contains(document.activeElement)) {
+            e.preventDefault(); first.focus();
+        } else if (e.shiftKey && document.activeElement === first) {
+            e.preventDefault();
+            last.focus();
+        } else if (!e.shiftKey && document.activeElement === last) {
+            e.preventDefault();
+            first.focus();
+        }
+    }
+
+    // Walk from the overlay up to , inert-ing siblings at each level so the
+    // overlay's own ancestors stay reachable. Elements already inert are left alone
+    // (and left inert on release — we only undo what we set).
+    function inertBackground(el) {
+        releaseBackground();
+        let node = el;
+        while (node && node !== document.body) {
+            const parent = node.parentElement;
+            if (!parent) break;
+            for (const sibling of parent.children) {
+                if (sibling !== node && !sibling.hasAttribute('inert')) {
+                    sibling.setAttribute('inert', '');
+                    inerted.push(sibling);
+                }
+            }
+            node = parent;
+        }
+    }
+
+    function releaseBackground() {
+        for (const el of inerted) el.removeAttribute('inert');
+        inerted = [];
+    }
+
+    global.oswlTrapFocus = function (el) {
+        if (!el || trapEl === el) return;
+        if (trapEl) parents.push({el: trapEl, returnTo: previouslyFocused});
+        previouslyFocused = document.activeElement;
+        trapEl = el;
+        if (!el.hasAttribute('tabindex')) el.setAttribute('tabindex', '-1');
+        document.addEventListener('keydown', handleKeydown, true);
+        inertBackground(el);
+        // A tick lets HTMX-injected content and enter transitions finish rendering first.
+        setTimeout(() => {
+            if (trapEl !== el) return;
+            const focusables = focusableElements(el);
+            (focusables[0] || el).focus();
+        }, 50);
+    };
+
+    global.oswlReleaseFocus = function () {
+        const returnTo = previouslyFocused;
+        releaseBackground();
+        let parent = parents.pop();
+        while (parent && !parent.el.isConnected) parent = parents.pop();
+        trapEl = parent ? parent.el : null;
+        previouslyFocused = parent ? parent.returnTo : null;
+        if (trapEl) {
+            inertBackground(trapEl);
+            const target = returnTo && trapEl.contains(returnTo) ? returnTo : (focusableElements(trapEl)[0] || trapEl);
+            target.focus();
+        } else {
+            document.removeEventListener('keydown', handleKeydown, true);
+            if (returnTo && returnTo.isConnected && typeof returnTo.focus === 'function') returnTo.focus();
+        }
+    };
+
+    // Arrow-key navigation for [role="menu"] containers (ARIA APG menu pattern).
+    // Tab is deliberately untouched — per APG it moves focus out of the menu.
+    document.addEventListener('keydown', (e) => {
+        if (e.key !== 'ArrowDown' && e.key !== 'ArrowUp' && e.key !== 'Home' && e.key !== 'End') return;
+        if (!(e.target instanceof Element)) return;
+        const menu = e.target.closest('[role="menu"]');
+        if (!menu) return;
+        const items = focusableElements(menu);
+        if (!items.length) return;
+        const idx = items.indexOf(document.activeElement);
+        e.preventDefault();
+        if (e.key === 'Home') {
+            items[0].focus();
+        } else if (e.key === 'End') {
+            items[items.length - 1].focus();
+        } else if (e.key === 'ArrowDown') {
+            items[idx < 0 ? 0 : (idx + 1) % items.length].focus();
+        } else {
+            items[idx < 0 ? items.length - 1 : (idx - 1 + items.length) % items.length].focus();
+        }
+    });
+})(window);
diff --git a/src/main/resources/static/js/onboarding-team.js b/src/main/resources/static/js/onboarding-team.js
new file mode 100644
index 00000000..753ec8bf
--- /dev/null
+++ b/src/main/resources/static/js/onboarding-team.js
@@ -0,0 +1,37 @@
+function inlineTeamInvite() {
+    return {
+        roles: [], selected: '', email: '', name: '', password: '', loaded: false, loading: false, saving: false, error: '', success: false,
+        async init() { await this.load(); },
+        async load() {
+            if (this.loading) return;
+            this.loading = true; this.loaded = false; this.error = '';
+            try {
+                const response = await fetch('/api/admin/role-templates');
+                if (!response.ok) throw new Error();
+                const roles = await response.json();
+                if (!Array.isArray(roles)) throw new Error();
+                if (!roles.length) { this.error = _onbI18n.noRoles; return; }
+                this.roles = roles; this.loaded = true;
+            } catch (_) { this.error = _onbI18n.connectFailed; }
+            finally { this.loading = false; }
+        },
+        async invite() {
+            if (!this.loaded || this.saving || !this.selected) return;
+            this.saving = true; this.error = ''; this.success = false;
+            try {
+                const response = await fetch('/api/admin/users', {
+                    method: 'POST', headers: oswlJsonHeaders(),
+                    body: JSON.stringify({displayName: this.name.trim(), email: this.email.trim(), temporaryPassword: this.password, templateIds: [Number(this.selected)]})
+                });
+                if (!response.ok) {
+                    const body = await response.json().catch(() => ({}));
+                    this.error = body.message || body.error || _onbI18n.connectFailed;
+                    return;
+                }
+                this.password = ''; this.email = ''; this.name = ''; this.success = true;
+                this.done.teamReady = true;
+            } catch (_) { this.error = _onbI18n.connectFailed; }
+            finally { this.saving = false; }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/org-dashboard/org-dashboard.js b/src/main/resources/static/js/org-dashboard/org-dashboard.js
index 5d8b6786..079bdfbc 100644
--- a/src/main/resources/static/js/org-dashboard/org-dashboard.js
+++ b/src/main/resources/static/js/org-dashboard/org-dashboard.js
@@ -2,6 +2,54 @@
  * Org-wide vulnerability trend line chart (admin org dashboard).
  * Data and labels are injected by Thymeleaf into window.orgDashboardData / window.orgDashboardI18n.
  */
+
+// Builds an accessible  mirror of the chart's series so screen-reader users get the
+// same numbers the canvas shows (Chart.js canvases expose nothing to assistive tech).
+function buildChartDataTable(xLabel, labels, series, captionText) {
+    const table = document.createElement('table');
+    table.className = 'w-full text-[13px]';
+    const caption = document.createElement('caption');
+    caption.className = 'sr-only';
+    caption.textContent = captionText;
+    table.appendChild(caption);
+
+    const headRow = document.createElement('tr');
+    headRow.className = 'text-left text-[var(--grayscale-70)] border-b border-[var(--grayscale-20)]';
+    const cornerTh = document.createElement('th');
+    cornerTh.className = 'px-[16px] py-[12px] font-bold';
+    cornerTh.textContent = xLabel;
+    headRow.appendChild(cornerTh);
+    series.forEach(s => {
+        const th = document.createElement('th');
+        th.className = 'px-[16px] py-[12px] font-bold text-right';
+        th.textContent = s.label;
+        headRow.appendChild(th);
+    });
+    const thead = document.createElement('thead');
+    thead.appendChild(headRow);
+    table.appendChild(thead);
+
+    const tbody = document.createElement('tbody');
+    labels.forEach((label, i) => {
+        const tr = document.createElement('tr');
+        tr.className = 'border-b border-[var(--grayscale-10)]';
+        const th = document.createElement('th');
+        th.scope = 'row';
+        th.className = 'px-[16px] py-[12px] text-left font-medium text-[var(--grayscale-80)]';
+        th.textContent = label;
+        tr.appendChild(th);
+        series.forEach(s => {
+            const td = document.createElement('td');
+            td.className = 'px-[16px] py-[12px] text-right text-[var(--grayscale-80)]';
+            td.textContent = s.data[i] != null ? s.data[i] : 0;
+            tr.appendChild(td);
+        });
+        tbody.appendChild(tr);
+    });
+    table.appendChild(tbody);
+    return table;
+}
+
 document.addEventListener('DOMContentLoaded', () => {
     const i18n = window.orgDashboardI18n || {
         xAxis: 'Week',
@@ -14,19 +62,23 @@ document.addEventListener('DOMContentLoaded', () => {
     const canvas = document.getElementById('orgVulnTrendChart');
     if (!canvas) return;
 
+    const tableToggle = document.getElementById('orgVulnTrendTableToggle');
+    const hideTableToggle = () => { if (tableToggle) tableToggle.style.display = 'none'; };
+
     const showPlaceholder = (title, hint) => {
         const container = canvas.closest('.relative') || canvas.parentElement;
         canvas.style.display = 'none';
         const msg = document.createElement('div');
         msg.className = 'flex flex-col items-center justify-center h-full gap-[8px] text-center';
-        msg.innerHTML = `
    ${title}
    ` +
-                        (hint ? `
    ${hint}
    ` : '');
+        msg.innerHTML = `
    ${title}
    ` +
+                        (hint ? `
    ${hint}
    ` : '');
         container.appendChild(msg);
     };
 
     if (typeof Chart === 'undefined') {
         console.warn('Chart.js is not loaded. Please include it in your layout.');
         showPlaceholder(i18n.chartLoadFailed || 'Chart could not be loaded.', null);
+        hideTableToggle();
         return;
     }
 
@@ -37,18 +89,31 @@ document.addEventListener('DOMContentLoaded', () => {
 
     if (!hasData) {
         showPlaceholder(i18n.noData, i18n.noDataHint);
+        hideTableToggle();
         return;
     }
 
+    const themeVar = (name, fallback) => {
+        if (window.OswlTheme && window.OswlTheme.cssVar) {
+            return window.OswlTheme.cssVar(name, fallback);
+        }
+        return fallback;
+    };
+
     const palette = {
-        critical: '#e62727',
-        high: '#f47a29',
-        medium: '#f5bd26',
-        low: '#97a5ab',
-        unknown: '#d0d9dd'
+        critical: themeVar('--risk-critical', '#e62727'),
+        high:     themeVar('--risk-high',     '#f47a29'),
+        medium:   themeVar('--risk-medium',   '#f5bd26'),
+        low:      themeVar('--risk-low',       '#97a5ab'),
+        unknown:  themeVar('--risk-unknown',   '#d0d9dd')
     };
 
-    new Chart(canvas, {
+    const axisColor = themeVar('--grayscale-50', '#5e6b70');
+    const tickColor = themeVar('--grayscale-60', '#425055');
+    const gridColor = themeVar('--grayscale-15', '#dce4e7');
+    const pointBorder = themeVar('--surface', '#ffffff');
+
+    const chart = new Chart(canvas, {
         type: 'line',
         data: {
             labels: data.labels,
@@ -73,14 +138,14 @@ document.addEventListener('DOMContentLoaded', () => {
                         display: true,
                         text: i18n.xAxis,
                         align: 'end',
-                        color: '#5e6b70',
+                        color: axisColor,
                         font: { size: 14, family: 'Inter', weight: '500' },
                         padding: { top: 8 }
                     },
                     grid: { display: false },
                     border: { display: false },
                     ticks: {
-                        color: '#425055',
+                        color: tickColor,
                         font: { size: 14, family: 'Inter', weight: '500' },
                         maxRotation: 0
                     }
@@ -90,18 +155,18 @@ document.addEventListener('DOMContentLoaded', () => {
                         display: true,
                         text: i18n.yAxis,
                         align: 'end',
-                        color: '#5e6b70',
+                        color: axisColor,
                         font: { size: 14, family: 'Inter' },
                         padding: { bottom: 8 }
                     },
                     grid: {
-                        color: '#dce4e7',
+                        color: gridColor,
                         drawBorder: false
                     },
                     border: { display: false, dash: [0] },
                     min: 0,
                     ticks: {
-                        color: '#425055',
+                        color: tickColor,
                         font: { size: 14, family: 'Inter', weight: '500' },
                         stepSize: 1,
                         callback: (val) => {
@@ -113,9 +178,69 @@ document.addEventListener('DOMContentLoaded', () => {
             },
             elements: {
                 line: { tension: 0.3, borderWidth: 2 },
-                point: { radius: 4, hoverRadius: 6, borderWidth: 2, borderColor: 'white' }
+                point: { radius: 4, hoverRadius: 6, borderWidth: 2, borderColor: pointBorder }
             },
             interaction: { mode: 'nearest', axis: 'x', intersect: false }
         }
     });
+
+    const refreshTheme = () => {
+        const colors = {
+            critical: themeVar('--risk-critical', '#e62727'),
+            high: themeVar('--risk-high', '#f47a29'),
+            medium: themeVar('--risk-medium', '#f5bd26'),
+            low: themeVar('--risk-low', '#97a5ab'),
+            unknown: themeVar('--risk-unknown', '#d0d9dd')
+        };
+        const axis = themeVar('--grayscale-50', '#5e6b70');
+        const tick = themeVar('--grayscale-60', '#425055');
+        const grid = themeVar('--grayscale-15', '#dce4e7');
+        const point = themeVar('--surface', '#ffffff');
+        const seriesColors = [colors.critical, colors.high, colors.medium, colors.low, colors.unknown];
+        chart.data.datasets.forEach((dataset, index) => {
+            dataset.borderColor = seriesColors[index];
+            dataset.backgroundColor = seriesColors[index];
+        });
+        chart.options.scales.x.title.color = axis;
+        chart.options.scales.x.ticks.color = tick;
+        chart.options.scales.y.title.color = axis;
+        chart.options.scales.y.ticks.color = tick;
+        chart.options.scales.y.grid.color = grid;
+        chart.options.elements.point.borderColor = point;
+        chart.update('none');
+    };
+    if (window.OswlTheme) window.OswlTheme.subscribe(refreshTheme);
+
+    // "View as table" toggle: swaps the canvas for a lazily built data table and back.
+    const tableContainer = document.getElementById('orgVulnTrendChartTable');
+    if (tableToggle && tableContainer) {
+        const series = [
+            { label: i18n.critical || 'Critical', data: data.critical },
+            { label: i18n.high     || 'High',     data: data.high },
+            { label: i18n.medium   || 'Medium',   data: data.medium },
+            { label: i18n.low      || 'Low',      data: data.low },
+            { label: i18n.unscored || 'Unscored', data: data.unscored }
+        ];
+        const chartWrap = canvas.closest('.relative') || canvas.parentElement;
+        let table = null;
+        tableToggle.addEventListener('click', () => {
+            const showing = tableToggle.getAttribute('aria-pressed') === 'true';
+            if (showing) {
+                tableContainer.classList.add('hidden');
+                chartWrap.classList.remove('hidden');
+                tableToggle.setAttribute('aria-pressed', 'false');
+                tableToggle.textContent = i18n.viewAsTable || 'View as table';
+            } else {
+                if (!table) {
+                    table = buildChartDataTable(i18n.xAxis || 'Week', data.labels, series,
+                        i18n.trendHeading || 'Org-wide Vulnerability Trend');
+                    tableContainer.appendChild(table);
+                }
+                tableContainer.classList.remove('hidden');
+                chartWrap.classList.add('hidden');
+                tableToggle.setAttribute('aria-pressed', 'true');
+                tableToggle.textContent = i18n.viewAsChart || 'View as chart';
+            }
+        });
+    }
 });
diff --git a/src/main/resources/static/js/oswl-http.js b/src/main/resources/static/js/oswl-http.js
new file mode 100644
index 00000000..518a296b
--- /dev/null
+++ b/src/main/resources/static/js/oswl-http.js
@@ -0,0 +1,35 @@
+(function (global) {
+    'use strict';
+    class HttpError extends Error {
+        constructor(kind, status) { super(kind); this.kind = kind; this.status = status; }
+    }
+    async function request(url, options = {}) {
+        const { timeoutMs = 30000, responseType, ...init } = options;
+        const timeout = AbortSignal.timeout(timeoutMs);
+        init.signal = init.signal ? AbortSignal.any([init.signal, timeout]) : timeout;
+        try {
+            const response = await fetch(url, init);
+            if (response.status === 401 || (response.redirected && /\/(login|otp-verify)(?:[/?]|$)/.test(new URL(response.url).pathname))) {
+                throw new HttpError('unauthenticated', 401);
+            }
+            if (!response.ok) throw new HttpError(response.status === 403 ? 'forbidden' : 'server', response.status);
+            if (responseType === 'text') return await response.text();
+            if (responseType === 'json') return await response.json();
+            return response;
+        } catch (error) {
+            if (error instanceof HttpError || options.signal?.aborted) throw error;
+            if (error instanceof SyntaxError) throw new HttpError('server', 0);
+            throw new HttpError(timeout.aborted ? 'timeout' : 'network', 0);
+        }
+    }
+    function fragment(container, html, append = false) {
+        if (append) container.insertAdjacentHTML('beforeend', html);
+        else container.innerHTML = html;
+        if (global.htmx) global.htmx.process(container);
+        // Alpine observes inserted nodes itself; manually initTree would register handlers twice.
+    }
+    global.OswlHttp = { request, fragment, HttpError,
+        text: (url, options = {}) => request(url, { ...options, responseType: 'text' }),
+        json: (url, options = {}) => request(url, { ...options, responseType: 'json' })
+    };
+})(window);
diff --git a/src/main/resources/static/js/oswl-theme.js b/src/main/resources/static/js/oswl-theme.js
new file mode 100644
index 00000000..bb12c347
--- /dev/null
+++ b/src/main/resources/static/js/oswl-theme.js
@@ -0,0 +1,26 @@
+/** Shared appearance helpers. OsWL supports the light design only. */
+(function (global) {
+    'use strict';
+
+    function applyLight() {
+        document.documentElement.classList.remove('dark');
+        document.documentElement.setAttribute('data-theme', 'light');
+        try { localStorage.setItem('oswl-theme', 'LIGHT'); } catch (e) { /* Storage is optional. */ }
+    }
+
+    applyLight();
+    // Reapply when a page is restored from the browser's back/forward cache.
+    global.addEventListener('pageshow', applyLight);
+
+    global.OswlTheme = {
+        LIGHT: 'LIGHT',
+        getMode: function () { return 'LIGHT'; },
+        getEffectiveMode: function () { return 'LIGHT'; },
+        isDark: function () { return false; },
+        setMode: applyLight,
+        subscribe: function () { return function () {}; },
+        cssVar: function (name, fallback) {
+            return getComputedStyle(document.documentElement).getPropertyValue(name).trim() || fallback;
+        }
+    };
+})(window);
diff --git a/src/main/resources/static/js/projects/projects.js b/src/main/resources/static/js/projects/projects.js
index 732f86b4..34fa79d4 100644
--- a/src/main/resources/static/js/projects/projects.js
+++ b/src/main/resources/static/js/projects/projects.js
@@ -83,7 +83,7 @@ function deleteProject(projectId, projectName, cardEl) {
     })
     .then(r => {
         if (r.ok) {
-            setTimeout(() => cardEl.remove(), 200);
+            setTimeout(() => { cardEl.remove(); checkActiveEmpty(); }, 200);
             const option = document.querySelector(`select option[value="${projectId}"]`);
             if (option) option.remove();
             updateCounts(-1, 1);
@@ -116,6 +116,9 @@ function restoreOne(projectId, projectName, cardEl) {
         } else {
             showToast('', _p.restoreFailed || 'Failed to restore project.');
         }
+    })
+    .catch(() => {
+        showToast('', _p.restoreFailed || 'Failed to restore project.');
     });
 }
 
@@ -132,6 +135,9 @@ function permanentDeleteOne(projectId, projectName, cardEl) {
         } else {
             showToast('', _p.permanentDeleteFailed || 'Failed to permanently delete project.');
         }
+    })
+    .catch(() => {
+        showToast('', _p.permanentDeleteFailed || 'Failed to permanently delete project.');
     });
 }
 
@@ -149,6 +155,9 @@ function deleteAllPermanently() {
         } else {
             showToast('', _p.deleteAllFailed || 'Failed to delete all trashed projects.');
         }
+    })
+    .catch(() => {
+        showToast('', _p.deleteAllFailed || 'Failed to delete all trashed projects.');
     });
 }
 
@@ -174,6 +183,9 @@ function restoreSelected() {
         } else {
             showToast('', _p.restoreSelectedFailed || 'Failed to restore selected projects.');
         }
+    })
+    .catch(() => {
+        showToast('', _p.restoreSelectedFailed || 'Failed to restore selected projects.');
     });
 }
 
@@ -198,9 +210,30 @@ function deleteSelected() {
         } else {
             showToast('', _p.deleteSelectedFailed || 'Failed to delete selected projects.');
         }
+    })
+    .catch(() => {
+        showToast('', _p.deleteSelectedFailed || 'Failed to delete selected projects.');
     });
 }
 
+// 활성 프로젝트가 하나도 없을 때 empty-state 표시 ─────────────────────────────
+function checkActiveEmpty() {
+    const container = document.getElementById('project-cards-container');
+    if (!container) return;
+    const cards = container.querySelectorAll('.project-card');
+    const existing = container.querySelector('#projects-empty-state');
+    if (cards.length === 0 && !existing) {
+        const emptyDiv = document.createElement('div');
+        emptyDiv.id = 'projects-empty-state';
+        emptyDiv.className = 'col-span-3 flex flex-col items-center gap-[12px] py-[60px] text-[var(--grayscale-40)]';
+        const label = _p.activeEmpty || 'No active projects yet. Import or create a project to get started.';
+        emptyDiv.innerHTML = `
+            
+            
    ${label}
    `;
+        container.appendChild(emptyDiv);
+    }
+}
+
 // 휴지통 비었을 때 empty-state 표시 ─────────────────────────────────────────
 function checkTrashEmpty() {
     const container = document.getElementById('trash-cards-container');
diff --git a/src/main/resources/static/js/projects/quick-import.js b/src/main/resources/static/js/projects/quick-import.js
index 4a7f7272..ed8ffbc6 100644
--- a/src/main/resources/static/js/projects/quick-import.js
+++ b/src/main/resources/static/js/projects/quick-import.js
@@ -14,6 +14,11 @@ const PROGRESS_DISMISS_MS = 2 * 60 * 1000;
 const COMPLETE_DISMISS_MS = 60 * 1000;
 const ETA_MAX_MS = 2 * 60 * 60 * 1000;
 const ETA_MIN_SAMPLE_MS = 5000;
+const SSE_HEARTBEAT_TIMEOUT_MS = 25 * 1000;
+const STATUS_POLL_BASE_MS = 2000;
+const STATUS_RETRY_MAX_MS = 30 * 1000;
+const SSE_RECONNECT_BASE_MS = 1500;
+const SSE_RECONNECT_MAX_MS = 30 * 1000;
 
 /** Bundle accessor: a missing key surfaces as the key name itself (see oswl-i18n.js). */
 function _qi(key) {
@@ -68,10 +73,39 @@ function quickImportPage() {
         /* ── Background scan watchers (one EventSource per project) ── */
         _scanWatchers: new Map(),
         _nowTickTimer: null,
+        _pageHideHandler: null,
 
 
         /* ─────────────────────────────────────────── */
 
+        init() {
+            this._pageHideHandler = () => this._disposeWatchers();
+            window.addEventListener('pagehide', this._pageHideHandler);
+        },
+
+        destroy() {
+            if (this._pageHideHandler) {
+                window.removeEventListener('pagehide', this._pageHideHandler);
+                this._pageHideHandler = null;
+            }
+            this._disposeWatchers();
+        },
+
+        _disposeWatchers() {
+            this._stopNowTickTimer();
+            this.activeJobs.forEach(job => {
+                this._clearProgressDismiss(job);
+                this._stopJobWatch(job);
+            });
+            this.completedResults.forEach(result => {
+                this._clearCompleteDismiss(result);
+                if (result._copyFeedbackTimer) clearTimeout(result._copyFeedbackTimer);
+                result._copyFeedbackTimer = null;
+            });
+            this._scanWatchers.forEach(watcher => watcher.close());
+            this._scanWatchers.clear();
+        },
+
         /** 1s heartbeat so elapsed/ETA texts on job cards re-render. Guarded so re-entry can't stack timers. */
         _ensureNowTickTimer() {
             if (this._nowTickTimer) return;
@@ -442,6 +476,13 @@ function quickImportPage() {
                     _eventSource: null,
                     _pollTimer: null,
                     _pollInFlight: false,
+                    _pollFailures: 0,
+                    _sseFailures: 0,
+                    _sseHeartbeatTimer: null,
+                    _sseReconnectTimer: null,
+                    _watchStopped: false,
+                    watchError: '',
+                    watchErrorKind: null,
                     _etaAnchorPct: null,
                     _etaAnchorAtEpochMs: null,
                     revealedApiToken: null,
@@ -455,64 +496,189 @@ function quickImportPage() {
         },
 
         _startJobWatch(tracker) {
-            // Poll immediately (pre–multi-job behavior); SSE is an optional fast path.
-            if (!tracker._pollTimer) {
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            tracker._watchStopped = false;
+            if (tracker._eventSource || tracker._sseReconnectTimer) return;
+            if (typeof EventSource === 'undefined') {
                 this._startPollingFallback(tracker);
+                return;
             }
-            if (tracker._eventSource || typeof EventSource === 'undefined') {
+            this._connectJobStream(tracker);
+        },
+
+        _connectJobStream(tracker) {
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            if (tracker._watchStopped || tracker._eventSource || this._isTerminalPhase(this._normalizePhase(tracker.phase))) {
                 return;
             }
             try {
                 const es = new EventSource('/api/quick-import/job/' + tracker.jobId + '/stream');
                 tracker._eventSource = es;
+                // Also covers a connection that neither opens nor reports an error promptly.
+                this._armSseHeartbeat(tracker);
+                es.onopen = () => {
+                    const current = this._findTracker(tracker.jobId);
+                    if (current && current._eventSource === es) this._markSseHealthy(current);
+                };
                 es.addEventListener('job-update', (e) => {
                     try {
+                        const current = this._findTracker(tracker.jobId);
+                        if (!current || current._eventSource !== es) return;
+                        this._markSseHealthy(current);
                         const job = this._normalizeJob(JSON.parse(e.data));
-                        this._applyJobUpdate(tracker, job);
+                        this._applyJobUpdate(current, job);
                     } catch (err) {
                         console.error('[QuickImport] SSE parse error:', err);
                     }
                 });
+                es.addEventListener('heartbeat', () => {
+                    const current = this._findTracker(tracker.jobId);
+                    if (current && current._eventSource === es) this._markSseHealthy(current);
+                });
                 es.onerror = () => {
-                    es.close();
-                    // _syncTracker replaces activeJobs entries, so this closure's
-                    // tracker may be stale; clear the ref on the live tracker.
                     const current = this._findTracker(tracker.jobId);
-                    if (current) current._eventSource = null;
+                    if (!current || current._eventSource !== es) return;
+                    this._closeJobStream(current);
+                    if (current._watchStopped) return;
+                    this._startPollingFallback(current);
+                    this._scheduleSseReconnect(current);
                 };
-            } catch (_) { /* polling already active */ }
+            } catch (err) {
+                console.error('[QuickImport] SSE connection failed:', err);
+                this._startPollingFallback(tracker);
+                this._scheduleSseReconnect(tracker);
+            }
+        },
+
+        _markSseHealthy(tracker) {
+            tracker._sseFailures = 0;
+            tracker._pollFailures = 0;
+            tracker.watchError = '';
+            tracker.watchErrorKind = null;
+            this._clearPollTimer(tracker);
+            this._clearSseReconnect(tracker);
+            this._armSseHeartbeat(tracker);
+        },
+
+        _armSseHeartbeat(tracker) {
+            this._clearSseHeartbeat(tracker);
+            tracker._sseHeartbeatTimer = setTimeout(() => {
+                const current = this._findTracker(tracker.jobId);
+                if (!current || current._watchStopped) return;
+                current._sseHeartbeatTimer = null;
+                this._closeJobStream(current);
+                current.watchError = _qi('statusUnavailable');
+                current.watchErrorKind = 'unavailable';
+                this._startPollingFallback(current);
+                this._scheduleSseReconnect(current);
+            }, SSE_HEARTBEAT_TIMEOUT_MS);
+        },
+
+        _scheduleSseReconnect(tracker) {
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            if (tracker._watchStopped || tracker._eventSource || tracker._sseReconnectTimer
+                    || typeof EventSource === 'undefined') return;
+            tracker._sseFailures = (tracker._sseFailures || 0) + 1;
+            const base = Math.min(
+                SSE_RECONNECT_MAX_MS,
+                SSE_RECONNECT_BASE_MS * (2 ** Math.min(tracker._sseFailures - 1, 5))
+            );
+            tracker._sseReconnectTimer = setTimeout(() => {
+                const current = this._findTracker(tracker.jobId);
+                if (!current) return;
+                current._sseReconnectTimer = null;
+                this._connectJobStream(current);
+            }, this._jitter(base));
         },
 
         _startPollingFallback(tracker) {
-            if (tracker._pollTimer) return;
-            tracker._pollInFlight = false;
-            const poll = () => this._pollJob(tracker);
-            poll();
-            tracker._pollTimer = setInterval(() => {
-                if (!tracker._pollInFlight) poll();
-            }, 1500);
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            if (tracker._watchStopped || tracker._eventSource || tracker._pollTimer || tracker._pollInFlight) return;
+            this._schedulePoll(tracker, 0);
+        },
+
+        _schedulePoll(tracker, delayMs) {
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            if (tracker._watchStopped || tracker._eventSource || tracker._pollTimer
+                    || this._isTerminalPhase(this._normalizePhase(tracker.phase))) return;
+            tracker._pollTimer = setTimeout(() => {
+                const current = this._findTracker(tracker.jobId);
+                if (!current) return;
+                current._pollTimer = null;
+                this._pollJob(current);
+            }, delayMs);
+        },
+
+        _jitter(delayMs) {
+            return Math.round(delayMs * (0.8 + Math.random() * 0.4));
+        },
+
+        _isAuthenticationResponse(res) {
+            if (res.status === 401 || res.status === 403) return true;
+            if (!res.redirected || !res.url) return false;
+            try { return new URL(res.url).pathname === '/login'; }
+            catch (_) { return false; }
+        },
+
+        _setWatchError(tracker, kind, messageKey) {
+            tracker.watchErrorKind = kind;
+            tracker.watchError = _qi(messageKey);
         },
 
         async _pollJob(tracker) {
-            if (tracker._pollInFlight) return;
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            if (tracker._watchStopped || tracker._eventSource || tracker._pollInFlight) return;
             tracker._pollInFlight = true;
             try {
                 const res = await fetch('/api/quick-import/job/' + tracker.jobId);
+                if (this._isAuthenticationResponse(res)) {
+                    this._setWatchError(tracker, 'authentication', 'trackingUnauthorized');
+                    this._stopJobWatch(tracker, true, true);
+                    return;
+                }
                 if (res.status === 404) {
-                    this._stopJobWatch(tracker);
-                    this._appendLogToJob(tracker, 'error', _qi('sessionExpired'));
+                    this._setWatchError(tracker, 'missing', 'jobMissing');
+                    this._stopJobWatch(tracker, true, true);
+                    return;
+                }
+                if (!res.ok) {
+                    tracker._pollFailures = (tracker._pollFailures || 0) + 1;
+                    this._setWatchError(tracker, 'unavailable', 'statusUnavailable');
+                    this._schedulePoll(tracker, this._pollRetryDelay(tracker));
+                    this._scheduleSseReconnect(tracker);
                     return;
                 }
-                if (!res.ok) return;
                 const job = this._normalizeJob(await res.json());
+                tracker._pollFailures = 0;
+                tracker.watchError = '';
+                tracker.watchErrorKind = null;
                 this._applyJobUpdate(tracker, job);
+                const current = this._findTracker(tracker.jobId);
+                if (current && !this._isTerminalPhase(this._normalizePhase(current.phase))) {
+                    this._schedulePoll(current, this._jitter(STATUS_POLL_BASE_MS));
+                    this._scheduleSseReconnect(current);
+                }
             } catch (err) {
                 console.error('[QuickImport] Poll error:', err);
+                const current = this._findTracker(tracker.jobId) || tracker;
+                current._pollFailures = (current._pollFailures || 0) + 1;
+                this._setWatchError(current, 'unavailable', 'statusUnavailable');
+                this._schedulePoll(current, this._pollRetryDelay(current));
+                this._scheduleSseReconnect(current);
             } finally {
-                tracker._pollInFlight = false;
+                const current = this._findTracker(tracker.jobId) || tracker;
+                current._pollInFlight = false;
             }
         },
 
+        _pollRetryDelay(tracker) {
+            const base = Math.min(
+                STATUS_RETRY_MAX_MS,
+                STATUS_POLL_BASE_MS * (2 ** Math.min(Math.max((tracker._pollFailures || 1) - 1, 0), 4))
+            );
+            return this._jitter(base);
+        },
+
         _applyJobUpdate(tracker, job) {
             if (!tracker || !job) return;
             job = this._normalizeJob(job);
@@ -525,7 +691,7 @@ function quickImportPage() {
             tracker.messageArgs = job.messageArgs || [];
             tracker.percent = job.percent != null ? job.percent : tracker.percent;
             tracker.queuePosition = job.queuePosition;
-            // D2/D4: live enrichment details — preview joins the rolling tail chunks into one
+            // live enrichment details — preview joins the rolling tail chunks into one
             // string; the cache badge keeps its last known values once the job is DONE.
             if (Array.isArray(job.detailLines)) tracker.detailLines = job.detailLines;
             if (Array.isArray(job.aiPreviews)) tracker.aiPreview = job.aiPreviews.join('');
@@ -546,8 +712,9 @@ function quickImportPage() {
                 // The elapsed-time gate keeps the very first anchor (set the instant CLONING
                 // starts, with ~0ms of real data) from freezing a near-zero estimate that then
                 // sits hidden for the rest of that phase — some phases still report a near-fixed
-                // percent (D3 made PARSING/ENRICHING gradually climbing, but CLONING/SCANNING
-                // have no in-phase signal), so without this gate the ETA could surface only once
+                // percent (PARSING/ENRICHING report gradually climbing progress, but CLONING/
+                // SCANNING have no in-phase signal), so without this gate the ETA could surface
+                // only once
                 // a *later* phase transition happened to accumulate 5s of elapsed time.
                 // Requiring 5s of real elapsed time up front instead means the estimate appears
                 // as soon as there's a real sample, regardless of which phase we're in.
@@ -666,7 +833,7 @@ function quickImportPage() {
         },
 
         /**
-         * D4 cache badge. Hidden on a first scan (0 hits) — "0 of N served from cache" would
+         * Cache-hit badge. Hidden on a first scan (0 hits) — "0 of N served from cache" would
          * read as if something went wrong, so the badge only appears once there is a real hit.
          */
         cacheBadgeText(job) {
@@ -694,7 +861,7 @@ function quickImportPage() {
                 return this._localizedMessage(job);
             }
             if (phase === 'DONE') {
-                // D1: the job reaches DONE as soon as the CVE/license data pipeline finishes —
+                // the job reaches DONE as soon as the CVE/license data pipeline finishes —
                 // AI summaries (aiStatus) may still be generating in the background.
                 const aiPending = job.aiStatus === 'PENDING' || job.aiStatus === 'RUNNING';
                 const base = job.messageKey === 'importComplete'
@@ -732,17 +899,46 @@ function quickImportPage() {
             tracker.progressLog = [...tracker.progressLog, { status, text }];
         },
 
-        _stopJobWatch(tracker) {
+        _clearPollTimer(tracker) {
             if (tracker._pollTimer) {
-                clearInterval(tracker._pollTimer);
+                clearTimeout(tracker._pollTimer);
                 tracker._pollTimer = null;
             }
+        },
+
+        _clearSseHeartbeat(tracker) {
+            if (!tracker._sseHeartbeatTimer) return;
+            clearTimeout(tracker._sseHeartbeatTimer);
+            tracker._sseHeartbeatTimer = null;
+        },
+
+        _clearSseReconnect(tracker) {
+            if (!tracker._sseReconnectTimer) return;
+            clearTimeout(tracker._sseReconnectTimer);
+            tracker._sseReconnectTimer = null;
+        },
+
+        _closeJobStream(tracker) {
+            this._clearSseHeartbeat(tracker);
             if (tracker._eventSource) {
+                tracker._eventSource.onerror = null;
                 tracker._eventSource.close();
                 tracker._eventSource = null;
             }
         },
 
+        _stopJobWatch(tracker, permanent = true, preserveWatchError = false) {
+            tracker = this._findTracker(tracker.jobId) || tracker;
+            tracker._watchStopped = permanent;
+            this._clearPollTimer(tracker);
+            this._clearSseReconnect(tracker);
+            this._closeJobStream(tracker);
+            if (!preserveWatchError) {
+                tracker.watchError = '';
+                tracker.watchErrorKind = null;
+            }
+        },
+
         _clearProgressDismiss(tracker) {
             if (!tracker?._progressDismissTimer) return;
             clearTimeout(tracker._progressDismissTimer);
@@ -914,13 +1110,17 @@ function quickImportPage() {
             try {
                 await navigator.clipboard.writeText(key);
                 const idx = this.completedResults.findIndex(r => r.jobId === result.jobId);
+                let visibleResult = result;
                 if (idx >= 0) {
-                    this.completedResults.splice(idx, 1, { ...result, keyCopied: true });
+                    visibleResult = { ...result, keyCopied: true };
+                    this.completedResults.splice(idx, 1, visibleResult);
                 }
-                setTimeout(() => {
+                visibleResult._copyFeedbackTimer = setTimeout(() => {
                     const i = this.completedResults.findIndex(r => r.jobId === result.jobId);
                     if (i >= 0) {
-                        this.completedResults.splice(i, 1, { ...this.completedResults[i], keyCopied: false });
+                        this.completedResults.splice(i, 1, {
+                            ...this.completedResults[i], keyCopied: false, _copyFeedbackTimer: null
+                        });
                     }
                 }, 2000);
             } catch (err) {
diff --git a/src/main/resources/static/js/risk-trend/risk-trend.js b/src/main/resources/static/js/risk-trend/risk-trend.js
index 03f5d7ff..85ead12e 100644
--- a/src/main/resources/static/js/risk-trend/risk-trend.js
+++ b/src/main/resources/static/js/risk-trend/risk-trend.js
@@ -8,11 +8,94 @@ function showChartPlaceholder(canvasId, title, hint) {
     canvas.style.display = 'none';
     const msg = document.createElement('div');
     msg.className = 'flex flex-col items-center justify-center h-full gap-[8px] text-center';
-    msg.innerHTML = `
    ${title}
    ` +
-                    (hint ? `
    ${hint}
    ` : '');
+    msg.innerHTML = `
    ${title}
    ` +
+                    (hint ? `
    ${hint}
    ` : '');
     container.appendChild(msg);
 }
 
+// Builds an accessible 
     mirror of a chart's series so screen-reader users get the
+// same numbers the canvas shows (Chart.js canvases expose nothing to assistive tech).
+function buildChartDataTable(xLabel, labels, series, captionText) {
+    const table = document.createElement('table');
+    table.className = 'w-full text-[13px]';
+    const caption = document.createElement('caption');
+    caption.className = 'sr-only';
+    caption.textContent = captionText;
+    table.appendChild(caption);
+
+    const headRow = document.createElement('tr');
+    headRow.className = 'text-left text-[var(--grayscale-70)] border-b border-[var(--grayscale-20)]';
+    const cornerTh = document.createElement('th');
+    cornerTh.className = 'px-[16px] py-[12px] font-bold';
+    cornerTh.textContent = xLabel;
+    headRow.appendChild(cornerTh);
+    series.forEach(s => {
+        const th = document.createElement('th');
+        th.className = 'px-[16px] py-[12px] font-bold text-right';
+        th.textContent = s.label;
+        headRow.appendChild(th);
+    });
+    const thead = document.createElement('thead');
+    thead.appendChild(headRow);
+    table.appendChild(thead);
+
+    const tbody = document.createElement('tbody');
+    labels.forEach((label, i) => {
+        const tr = document.createElement('tr');
+        tr.className = 'border-b border-[var(--grayscale-10)]';
+        const th = document.createElement('th');
+        th.scope = 'row';
+        th.className = 'px-[16px] py-[12px] text-left font-medium text-[var(--grayscale-80)]';
+        th.textContent = label;
+        tr.appendChild(th);
+        series.forEach(s => {
+            const td = document.createElement('td');
+            td.className = 'px-[16px] py-[12px] text-right text-[var(--grayscale-80)]';
+            td.textContent = s.data[i] != null ? s.data[i] : 0;
+            tr.appendChild(td);
+        });
+        tbody.appendChild(tr);
+    });
+    table.appendChild(tbody);
+    return table;
+}
+
+// Wires a "view as table" toggle: swaps the chart's canvas wrapper for a lazily built
+// data table and back. i18n needs viewAsTable/viewAsChart labels.
+function setupChartTableToggle(toggleId, tableContainerId, canvasId, xLabel, labels, series, captionText, i18n) {
+    const toggle = document.getElementById(toggleId);
+    const tableContainer = document.getElementById(tableContainerId);
+    const canvas = document.getElementById(canvasId);
+    if (!toggle || !tableContainer || !canvas) return;
+    const chartWrap = canvas.closest('.relative') || canvas.parentElement;
+    let table = null;
+    toggle.addEventListener('click', () => {
+        const showing = toggle.getAttribute('aria-pressed') === 'true';
+        if (showing) {
+            tableContainer.classList.add('hidden');
+            chartWrap.classList.remove('hidden');
+            toggle.setAttribute('aria-pressed', 'false');
+            toggle.textContent = (i18n && i18n.viewAsTable) || 'View as table';
+        } else {
+            if (!table) {
+                table = buildChartDataTable(xLabel, labels, series, captionText);
+                tableContainer.appendChild(table);
+            }
+            tableContainer.classList.remove('hidden');
+            chartWrap.classList.add('hidden');
+            toggle.setAttribute('aria-pressed', 'true');
+            toggle.textContent = (i18n && i18n.viewAsChart) || 'View as chart';
+        }
+    });
+}
+
+function hideChartTableToggles(ids) {
+    ids.forEach(id => {
+        const toggle = document.getElementById(id);
+        if (toggle) toggle.style.display = 'none';
+    });
+}
+
 document.addEventListener('DOMContentLoaded', () => {
     const i18nEarly = window.riskTrendI18n || {
         noData: 'No scan data yet',
@@ -25,24 +108,37 @@ document.addEventListener('DOMContentLoaded', () => {
         ['securityRiskChart', 'licenseRiskChart'].forEach(id => {
             showChartPlaceholder(id, i18nEarly.chartLoadFailed || 'Chart could not be loaded.', null);
         });
+        hideChartTableToggles(['securityRiskTableToggle', 'licenseRiskTableToggle']);
         return;
     }
 
+    const themeVar = (name, fallback) => {
+        if (window.OswlTheme && window.OswlTheme.cssVar) {
+            return window.OswlTheme.cssVar(name, fallback);
+        }
+        return fallback;
+    };
+
     const palette = {
-        critical: '#e62727',
-        high: '#f47a29',
-        medium: '#f5bd26',
-        low: '#97a5ab',
-        unknown: '#d0d9dd'
+        critical: themeVar('--risk-critical', '#e62727'),
+        high:     themeVar('--risk-high',     '#f47a29'),
+        medium:   themeVar('--risk-medium',   '#f5bd26'),
+        low:      themeVar('--risk-low',       '#97a5ab'),
+        unknown:  themeVar('--risk-unknown',   '#d0d9dd')
     };
 
     const licensePalette = {
-        restricted: '#e62727',
-        caution:    '#f59126',
-        permitted:  '#84dca5',
-        unknown:    '#abb8be'
+        restricted: themeVar('--risk-critical', '#e62727'),
+        caution:    themeVar('--risk-caution',  '#f59126'),
+        permitted:  themeVar('--risk-permitted','#84dca5'),
+        unknown:    themeVar('--risk-unknown',   '#abb8be')
     };
 
+    const axisColor = themeVar('--grayscale-50', '#5e6b70');
+    const tickColor = themeVar('--grayscale-60', '#425055');
+    const gridColor = themeVar('--grayscale-15', '#dce4e7');
+    const pointBorder = themeVar('--surface', '#ffffff');
+
     // 백엔드에서 주입된 실제 데이터, 없으면 빈 배열로 폴백
     const trendData = (window.riskTrendData && window.riskTrendData.versions.length > 0)
         ? window.riskTrendData
@@ -62,6 +158,7 @@ document.addEventListener('DOMContentLoaded', () => {
         });
         // Hide AI insight boxes when no data
         document.querySelectorAll('.ai-insight-box').forEach(el => el.style.display = 'none');
+        hideChartTableToggles(['securityRiskTableToggle', 'licenseRiskTableToggle']);
         return;
     }
 
@@ -80,14 +177,14 @@ document.addEventListener('DOMContentLoaded', () => {
                     display: true,
                     text: i18n.xAxis,
                     align: 'end',
-                    color: '#5e6b70',
+                    color: axisColor,
                     font: { size: 14, family: 'Inter', weight: '500' },
                     padding: { top: 8 }
                 },
                 grid: { display: false },
                 border: { display: false },
                 ticks: {
-                    color: '#425055',
+                    color: tickColor,
                     font: { size: 14, family: 'Inter', weight: '500' },
                     maxRotation: 0
                 }
@@ -97,18 +194,18 @@ document.addEventListener('DOMContentLoaded', () => {
                     display: true,
                     text: i18n.yAxis,
                     align: 'end',
-                    color: '#5e6b70',
+                    color: axisColor,
                     font: { size: 14, family: 'Inter' },
                     padding: { bottom: 8 }
                 },
                 grid: {
-                    color: '#dce4e7',
+                    color: gridColor,
                     drawBorder: false
                 },
                 border: { display: false, dash: [0] },
                 min: 0,
                 ticks: {
-                    color: '#425055',
+                    color: tickColor,
                     font: { size: 14, family: 'Inter', weight: '500' },
                     stepSize: 1,
                     callback: (val) => {
@@ -120,7 +217,7 @@ document.addEventListener('DOMContentLoaded', () => {
         },
         elements: {
             line: { tension: 0.3, borderWidth: 2 },
-            point: { radius: 4, hoverRadius: 6, borderWidth: 2, borderColor: 'white' }
+            point: { radius: 4, hoverRadius: 6, borderWidth: 2, borderColor: pointBorder }
         },
         interaction: { mode: 'nearest', axis: 'x', intersect: false }
     };
@@ -145,21 +242,59 @@ document.addEventListener('DOMContentLoaded', () => {
         ];
     };
 
+    const charts = [];
     const ctxSecurity = document.getElementById('securityRiskChart');
     if (ctxSecurity) {
-        new Chart(ctxSecurity, {
+        charts.push(new Chart(ctxSecurity, {
             type: 'line',
             data: { labels: versions, datasets: createDatasets('security') },
             options: commonOptions
-        });
+        }));
+        setupChartTableToggle('securityRiskTableToggle', 'securityRiskChartTable', 'securityRiskChart',
+            i18n.xAxis || 'Version', versions, createDatasets('security'), i18n.chartSecurity || 'Security Risk', i18n);
     }
 
     const ctxLicense = document.getElementById('licenseRiskChart');
     if (ctxLicense) {
-        new Chart(ctxLicense, {
+        charts.push(new Chart(ctxLicense, {
             type: 'line',
             data: { labels: versions, datasets: createDatasets('license') },
             options: commonOptions
-        });
+        }));
+        setupChartTableToggle('licenseRiskTableToggle', 'licenseRiskChartTable', 'licenseRiskChart',
+            i18n.xAxis || 'Version', versions, createDatasets('license'), i18n.chartLicense || 'License Risk', i18n);
     }
+
+    const refreshTheme = () => {
+        const colors = {
+            critical: themeVar('--risk-critical', '#e62727'),
+            high: themeVar('--risk-high', '#f47a29'),
+            medium: themeVar('--risk-medium', '#f5bd26'),
+            low: themeVar('--risk-low', '#97a5ab'),
+            unknown: themeVar('--risk-unknown', '#d0d9dd'),
+            caution: themeVar('--risk-caution', '#f59126'),
+            permitted: themeVar('--risk-permitted', '#84dca5')
+        };
+        const axis = themeVar('--grayscale-50', '#5e6b70');
+        const tick = themeVar('--grayscale-60', '#425055');
+        const grid = themeVar('--grayscale-15', '#dce4e7');
+        const point = themeVar('--surface', '#ffffff');
+        commonOptions.scales.x.title.color = axis;
+        commonOptions.scales.x.ticks.color = tick;
+        commonOptions.scales.y.title.color = axis;
+        commonOptions.scales.y.ticks.color = tick;
+        commonOptions.scales.y.grid.color = grid;
+        commonOptions.elements.point.borderColor = point;
+        charts.forEach(chart => {
+            const colorsForChart = chart.canvas.id === 'licenseRiskChart'
+                ? [colors.critical, colors.caution, colors.permitted, colors.unknown]
+                : [colors.critical, colors.high, colors.medium, colors.low, colors.unknown];
+            chart.data.datasets.forEach((dataset, index) => {
+                dataset.borderColor = colorsForChart[index];
+                dataset.backgroundColor = colorsForChart[index];
+            });
+            chart.update('none');
+        });
+    };
+    if (window.OswlTheme) window.OswlTheme.subscribe(refreshTheme);
 });
diff --git a/src/main/resources/static/js/security-center/page.js b/src/main/resources/static/js/security-center/page.js
new file mode 100644
index 00000000..b78ad8d4
--- /dev/null
+++ b/src/main/resources/static/js/security-center/page.js
@@ -0,0 +1,450 @@
+function securityCenterPage() {
+    return {
+          componentPanelOpen: false,
+          activeCompId: null,
+          searchQuery: '',
+          bulkActionsOpen: false,
+          bulkSaving: false,
+          exportOpen: false,
+          sortOpen: false,
+          sortMode: 'risk',
+          // Injected via the th:inline script block below (attribute values are not JS-inlined).
+          sortLabels: window.securityCenterData.sortLabels,
+          rowsAbort: null,
+          selectedComponents: [],
+          selectAll: false,
+          filters: {
+              reviewed: false,
+              nonReviewed: false,
+              ignored: false,
+              nonIgnored: true,
+              deferred: false,
+              reachable: false,
+              notReachable: false,
+              unknownReachability: false,
+              secCritical: false,
+              secHigh: false,
+              secMedium: false,
+              secLow: false,
+              secUnknown: false,
+              licRestricted: false,
+              licCaution: false,
+              licUnknown: false,
+              licPermitted: false,
+              patchable: false,
+              nonPatchable: false,
+              patchDeprecated: false,
+              patchOutdated: false,
+              patchUpToDate: false,
+              hideNonRuntime: true
+          },
+          // ── Server-side pagination state ──────────────────
+          totalComponentCount: window.securityCenterData.totalComponentCount,
+          hasMoreComponents: window.securityCenterData.hasMoreComponents,
+          loadedComponentCount: 0,
+          rowsLoaded: false,
+          rowsLoading: false,
+          rowsError: null,
+          currentPage: 0,
+          rowsFetchToken: 0,
+          views: [],
+          viewsLoading: true,
+          viewsError: null,
+          viewsRequestToken: 0,
+          viewsOpen: false,
+          savingView: false,
+          newViewName: '',
+          newViewShared: false,
+          _viewStateRevision: 0,
+          _pendingViewId: null,
+          _applyingView: false,
+          _searchDebounceTimer: null,
+          scanStatus: window.securityCenterData.scanStatus,
+          latestScanId: window.securityCenterData.latestScanId,
+          currentScanId: window.securityCenterData.currentScanId,
+          aiStatus: window.securityCenterData.aiStatus,
+          aiPostureInsight: window.securityCenterData.securityPostureInsight,
+          aiRetrying: false,
+          scanPollTimer: null,
+          aiPollTimer: null,
+          // ── Server-side filtered/sorted/paginated rows ─────────
+          // Filtering used to run in the browser (rowVisible(), against every already-rendered
+          // row's data-* attributes) — that meant shipping and DOM-rendering all 5,000+ rows up
+          // front just so JS could hide most of them (measured ~15s at 5,000 components). Filter
+          // changes now re-fetch just the matching page from /security-center/rows instead.
+          buildRowsQueryParams(page) {
+              const p = new URLSearchParams();
+              p.set('scanId', this.currentScanId);
+              if (this.searchQuery.trim()) p.set('search', this.searchQuery.trim());
+              p.set('sortMode', this.sortMode);
+              p.set('page', page);
+              for (const [k, v] of Object.entries(this.filters)) {
+                  if (v) p.set(k, 'true');
+              }
+              return p;
+          },
+          async refetchRows() {
+              if (!this.currentScanId) return;
+              const token = ++this.rowsFetchToken;
+              this.rowsAbort?.abort();
+              this.rowsAbort = new AbortController();
+              const signal = this.rowsAbort.signal;
+              this.rowsLoading = true;
+              this.rowsError = null;
+              this.currentPage = 0;
+              this.clearSelected();
+              try {
+                  const projectId = document.body.dataset.projectId;
+                  const html = await OswlHttp.text('/projects/' + projectId + '/security-center/rows?'
+                                        + this.buildRowsQueryParams(0).toString(), { signal });
+                  if (token !== this.rowsFetchToken || signal.aborted) return;
+                  const container = document.getElementById('component-rows-container');
+                  OswlHttp.fragment(container, html);
+                  this.applyRowsMeta(container);
+              } catch (e) {
+                  if (token === this.rowsFetchToken && !signal.aborted)
+                      this.rowsError = window.securityCenterData.i18n[e.kind] || window.securityCenterData.i18n.actionFailed;
+              } finally {
+                  if (token === this.rowsFetchToken) this.rowsLoading = false;
+              }
+          },
+          async loadMoreRows() {
+              if (!this.currentScanId || this.rowsLoading || !this.hasMoreComponents) return;
+              const token = ++this.rowsFetchToken;
+              this.rowsAbort?.abort();
+              this.rowsAbort = new AbortController();
+              const signal = this.rowsAbort.signal;
+              this.rowsLoading = true;
+              this.rowsError = null;
+              const nextPage = this.currentPage + 1;
+              try {
+                  const projectId = document.body.dataset.projectId;
+                  const html = await OswlHttp.text('/projects/' + projectId + '/security-center/rows?'
+                                        + this.buildRowsQueryParams(nextPage).toString(), { signal });
+                  if (token !== this.rowsFetchToken || signal.aborted) return;
+                  const container = document.getElementById('component-rows-container');
+                  OswlHttp.fragment(container, html, true);
+                  this.currentPage = nextPage;
+                  this.applyRowsMeta(container);
+              } catch (e) {
+                  if (token === this.rowsFetchToken && !signal.aborted)
+                      this.rowsError = window.securityCenterData.i18n[e.kind] || window.securityCenterData.i18n.actionFailed;
+              } finally {
+                  if (token === this.rowsFetchToken) this.rowsLoading = false;
+              }
+          },
+          // Reads the most recently swapped-in fragment's data-total-count/data-has-more (set
+          // from the Page<> the /rows endpoint queried) and updates the pagination footer state.
+          // Load-more appends another [data-total-count] wrapper rather than replacing the
+          // first one, so the *last* one in the container reflects the page that was just fetched.
+          applyRowsMeta(container) {
+              const metas = container.querySelectorAll('[data-total-count]');
+              const meta = metas.length ? metas[metas.length - 1] : null;
+              this.totalComponentCount = meta ? (parseInt(meta.dataset.totalCount) || 0) : 0;
+              this.hasMoreComponents = meta ? meta.dataset.hasMore === 'true' : false;
+              this.loadedComponentCount = container.querySelectorAll('.component-row').length;
+              this.rowsLoaded = true;
+          },
+          startPolling() {
+              if (this.scanPollTimer) return;
+              this.scanPollTimer = setInterval(async () => {
+                  if (!this.latestScanId) return;
+                  const r = await fetch('/api/scan/' + this.latestScanId + '/status');
+                  if (!r.ok) return;
+                  const d = await r.json();
+                  this.scanStatus = d.status;
+                  if (d.status === 'COMPLETED' || d.status === 'FAILED') {
+                      clearInterval(this.scanPollTimer);
+                      this.scanPollTimer = null;
+                      // The CVE/license data pipeline just finished — reload once to show it.
+                      // AI summaries (aiStatus) may still be generating; startAiPolling() on the
+                      // freshly-reloaded page fills those in without a second reload.
+                      if (d.status === 'COMPLETED') { location.reload(); }
+                  }
+              }, 2500);
+          },
+          // Polls AI enrichment progress for the scan being viewed. Only runs after the data
+          // pipeline is already COMPLETED (see init()) — never triggers a reload; the posture
+          // insight is filled in reactively via aiPostureInsight once aiStatus reaches COMPLETED.
+          startAiPolling() {
+              if (this.aiPollTimer || !this.currentScanId) return;
+              this.aiPollTimer = setInterval(async () => {
+                  const r = await fetch('/api/scan/' + this.currentScanId + '/status');
+                  if (!r.ok) return;
+                  const d = await r.json();
+                  if (d.securityPostureInsight) {
+                      this.aiPostureInsight = d.securityPostureInsight;
+                  }
+                  if (['COMPLETED', 'FAILED', 'NOT_APPLICABLE'].includes(d.aiStatus)) {
+                      clearInterval(this.aiPollTimer);
+                      this.aiPollTimer = null;
+                      // One more read a moment later: the insight and the status are written in
+                      // two separate transactions, so a poll can land between them and see
+                      // COMPLETED with the insight column still empty. Without this the card
+                      // would claim nothing was produced for an insight that did arrive.
+                      if (!this.aiPostureInsight) {
+                          setTimeout(() => this.refetchAiInsight(), 1500);
+                      }
+                  }
+                  // Assigned last so the generating card is only torn down once the insight
+                  // that goes in its place has been read.
+                  this.aiStatus = d.aiStatus;
+              }, 2500);
+          },
+          // Single non-looping read of the current scan's insight.
+          async refetchAiInsight() {
+              try {
+                  const r = await fetch('/api/scan/' + this.currentScanId + '/status');
+                  if (!r.ok) return;
+                  const d = await r.json();
+                  if (d.securityPostureInsight) this.aiPostureInsight = d.securityPostureInsight;
+                  this.aiStatus = d.aiStatus;
+              } catch (e) { /* leave the empty state in place */ }
+          },
+          // Re-runs insight generation for the scan being viewed.
+          async retryAiInsight() {
+              if (!this.currentScanId) return;
+              this.aiRetrying = true;
+              try {
+                  const projectId = document.body.dataset.projectId;
+                  const r = await fetch('/projects/' + projectId + '/security-center/refresh-insights?scanId='
+                                        + this.currentScanId, { method: 'POST', headers: oswlJsonHeaders() });
+                  const d = await r.json().catch(() => ({}));
+                  if (!r.ok || !d.success) {
+                      alert(d.message || window.securityCenterData.i18n.actionFailed);
+                      return;
+                  }
+                  await this.refetchAiInsight();
+                  if (!this.aiPostureInsight) alert(window.securityCenterData.i18n.aiRetryEmpty);
+              } catch (e) {
+                  alert(window.securityCenterData.i18n.actionFailed);
+              } finally {
+                  this.aiRetrying = false;
+              }
+          },
+          // Sorting moved server-side — SecurityCenterService.resolveSort() applies
+          // the equivalent risk/name/license ordering via the /rows query. Setting sortMode here
+          // triggers the $watch in init() that re-fetches the current page.
+          applySort(mode) {
+              this.sortMode = mode;
+              this.sortOpen = false;
+          },
+          async applyBulkAction(action) {
+              if (this.bulkSaving || !this.selectedComponents.length || !['reviewed','unreviewed','ignore','unignore'].includes(action)) return;
+              const projectId = document.body.dataset.projectId;
+              const ids = this.selectedComponents.map(Number);
+              const review = action === 'reviewed' || action === 'unreviewed';
+              const value = action === 'reviewed' || action === 'ignore';
+              this.bulkActionsOpen = false;
+              this.bulkSaving = true;
+              try {
+                  const response = await fetch('/projects/' + projectId + '/security-center/bulk-status', {
+                      method: 'PATCH', headers: oswlJsonHeaders(),
+                      body: JSON.stringify({ids, [review ? 'reviewed' : 'ignored']: value})
+                  });
+                  if (!response.ok) throw new Error();
+                  window.dispatchEvent(new CustomEvent(review ? 'bulk-review' : 'bulk-ignore', {
+                      detail: {ids: ids.map(String), value}
+                  }));
+                  this.clearSelected();
+                  await this.refetchRows();
+              } catch (_) {
+                  alert(window.securityCenterData.i18n.actionFailed);
+              } finally { this.bulkSaving = false; }
+          },
+          async batchUpgradePrs() {
+              const projectId = document.body.dataset.projectId;
+              const i18n = window.securityCenterData.i18n || {};
+              const branch = prompt(i18n.batchPrPrompt || 'Base branch for the upgrade PRs:', 'main');
+              if (!branch || !branch.trim()) return;
+              try {
+                  const r = await fetch('/projects/' + projectId + '/security-center/batch-pr', {
+                      method: 'POST', headers: oswlJsonHeaders(),
+                      body: JSON.stringify({ targetBranch: branch.trim() })
+                  });
+                  const body = await r.json().catch(() => ({}));
+                  if (!r.ok) { alert(body.error || (i18n.actionFailed || 'Failed.')); return; }
+                  if (body.candidates === 0) { alert(i18n.batchPrNone || 'No patchable components found.'); return; }
+                  const tmpl = i18n.batchPrResult || 'Batch PRs: {0} created, {1} failed (of {2} candidates).';
+                  alert(tmpl.replace('{0}', body.created).replace('{1}', body.failed).replace('{2}', body.candidates));
+              } catch (e) {
+                  alert((window.securityCenterData.i18n || {}).actionFailed || 'Failed.');
+              }
+          },
+          exportAs(format) {
+              this.exportOpen = false;
+              const projectId = document.body.dataset.projectId;
+              if (format === 'pdf') {
+                  let url = '/projects/' + projectId + '/security-center/print';
+                  const scanId = new URLSearchParams(window.location.search).get('scanId');
+                  if (scanId) url += '?scanId=' + scanId;
+                  window.open(url, '_blank');
+                  return;
+              }
+              if (format === 'sbom') {
+                  window.location.href = '/api/projects/' + projectId + '/sbom?format=json';
+                  return;
+              }
+              if (format === 'vex') {
+                  window.location.href = '/api/projects/' + projectId + '/vex?format=json';
+                  return;
+              }
+              if (format === 'sarif') {
+                  window.location.href = '/api/projects/' + projectId + '/sarif';
+                  return;
+              }
+              if (format === 'compliance') {
+                  window.open('/projects/' + projectId + '/security-center/compliance-report', '_blank');
+                  return;
+              }
+              // CSV download
+              let url = '/projects/' + projectId + '/security-center/export?format=csv';
+              if (this.latestScanId) url += '&scanId=' + this.latestScanId;
+              window.location.href = url;
+          },
+          toggleSelectAll() {
+              if (this.selectAll) {
+                  const values = Array.from(document.querySelectorAll('input[name=selectedComponent]')).map(el => el.value);
+                  this.selectedComponents = values;
+              } else {
+                  this.selectedComponents = [];
+              }
+          },
+          clearSelected() {
+              this.selectedComponents = [];
+              this.selectAll = false;
+          },
+          // ── Saved views ───────────────────────────────────────────────
+          async loadViews() {
+              const token = ++this.viewsRequestToken;
+              const projectId = document.body.dataset.projectId;
+              this.viewsLoading = true;
+              this.viewsError = null;
+              try {
+                  const views = await OswlHttp.json('/api/projects/' + projectId + '/saved-views', {
+                      headers: oswlJsonHeaders()
+                  });
+                  if (token !== this.viewsRequestToken) return false;
+                  this.views = Array.isArray(views) ? views : [];
+                  if (this._pendingViewId) {
+                      if (this._viewStateRevision === 0) this.applyViewFromUrl();
+                      this._pendingViewId = null;
+                  }
+                  return true;
+              } catch (e) {
+                  if (token !== this.viewsRequestToken) return false;
+                  this.viewsError = window.securityCenterData.i18n.viewsLoadFailed;
+                  return false;
+              } finally {
+                  if (token === this.viewsRequestToken) this.viewsLoading = false;
+              }
+          },
+          currentViewState() {
+              return { filters: this.filters, sortMode: this.sortMode, searchQuery: this.searchQuery };
+          },
+          applyView(view) {
+              let state;
+              try { state = JSON.parse(view.filtersJson); } catch (e) { return; }
+              this._applyingView = true;
+              if (state.filters) {
+                  const nextFilters = { ...this.filters };
+                  for (const key of Object.keys(nextFilters)) {
+                      if (typeof state.filters[key] === 'boolean') nextFilters[key] = state.filters[key];
+                  }
+                  this.filters = nextFilters;
+              }
+              if (['risk', 'name', 'license'].includes(state.sortMode)) this.sortMode = state.sortMode;
+              if (typeof state.searchQuery === 'string') this.searchQuery = state.searchQuery;
+              if (this._searchDebounceTimer) {
+                  clearTimeout(this._searchDebounceTimer);
+                  this._searchDebounceTimer = null;
+              }
+              this.clearSelected();
+              this.viewsOpen = false;
+              this.$nextTick(() => {
+                  this._applyingView = false;
+                  this.refetchRows();
+              });
+          },
+          async saveCurrentView() {
+              const name = this.newViewName.trim();
+              if (!name) return;
+              const projectId = document.body.dataset.projectId;
+              try {
+                  const r = await fetch('/api/projects/' + projectId + '/saved-views', {
+                      method: 'POST', headers: oswlJsonHeaders(),
+                      body: JSON.stringify({
+                          name: name,
+                          shared: this.newViewShared,
+                          filtersJson: JSON.stringify(this.currentViewState())
+                      })
+                  });
+                  if (!r.ok) { alert(window.securityCenterData.i18n.actionFailed); return; }
+                  const saved = await r.json();
+                  this.views.unshift(saved);
+                  this.newViewName = '';
+                  this.newViewShared = false;
+                  this.savingView = false;
+              } catch (e) {
+                  alert(window.securityCenterData.i18n.actionFailed);
+              }
+          },
+          async deleteView(view) {
+              const projectId = document.body.dataset.projectId;
+              try {
+                  const r = await fetch('/api/projects/' + projectId + '/saved-views/' + view.id, {
+                      method: 'DELETE', headers: oswlJsonHeaders()
+                  });
+                  if (!r.ok) { alert(window.securityCenterData.i18n.actionFailed); return; }
+                  this.views = this.views.filter(v => v.id !== view.id);
+              } catch (e) {
+                  alert(window.securityCenterData.i18n.actionFailed);
+              }
+          },
+          copyViewLink(view) {
+              const url = new URL(window.location.href);
+              url.searchParams.set('view', view.id);
+              navigator.clipboard?.writeText(url.toString());
+          },
+          applyViewFromUrl() {
+              const viewId = this._pendingViewId
+                  || new URLSearchParams(window.location.search).get('view');
+              if (!viewId) return;
+              const match = this.views.find(v => String(v.id) === viewId);
+              if (match) this.applyView(match);
+          },
+          init() {
+              if (['SCANNING', 'ANALYZING', 'PENDING'].includes(this.scanStatus)) {
+                  this.startPolling();
+              } else if (['PENDING', 'RUNNING'].includes(this.aiStatus)) {
+                  this.startAiPolling();
+              }
+
+              // The initial page load already rendered the first (default-filtered, risk-sorted)
+              // page server-side — seed the pagination footer from that DOM instead of an extra
+              // fetch, then start watching for user-driven filter/sort/search changes.
+              this.loadedComponentCount = document.querySelectorAll('.component-row').length;
+              this.rowsLoaded = true;
+
+              this._pendingViewId = new URLSearchParams(window.location.search).get('view');
+              const refetchForCriteriaChange = () => {
+                  if (this._applyingView) return;
+                  this._viewStateRevision++;
+                  this.refetchRows();
+              };
+              this.$watch('filters', refetchForCriteriaChange);
+              this.$watch('sortMode', refetchForCriteriaChange);
+              this.$watch('searchQuery', () => {
+                  if (this._applyingView) return;
+                  this._viewStateRevision++;
+                  clearTimeout(this._searchDebounceTimer);
+                  this._searchDebounceTimer = setTimeout(() => {
+                      this._searchDebounceTimer = null;
+                      this.refetchRows();
+                  }, 300);
+              });
+
+              this.loadViews();
+          }
+      };
+}
diff --git a/src/main/resources/static/js/security-center/slideout.js b/src/main/resources/static/js/security-center/slideout.js
new file mode 100644
index 00000000..56642f71
--- /dev/null
+++ b/src/main/resources/static/js/security-center/slideout.js
@@ -0,0 +1,36 @@
+// Slide-over load feedback: HTMX swaps into #slideout-content; toggle the overlay on
+    // request start/end and show the retry card on failure. Retry re-clicks the originating
+    // row so the exact original request (incl. hx-select) is re-issued.
+    (function () {
+        var lastRow = null;
+        function show(id, on) {
+            var n = document.getElementById(id);
+            if (n) n.style.display = on ? 'flex' : 'none';
+        }
+        function isDetailRequest(evt) {
+            return evt.detail.target && evt.detail.target.id === 'slideout-content';
+        }
+        document.body.addEventListener('htmx:beforeRequest', function (evt) {
+            if (!isDetailRequest(evt)) return;
+            lastRow = evt.detail.elt;
+            show('slideout-loading', true);
+            show('slideout-error', false);
+        });
+        document.body.addEventListener('htmx:afterRequest', function (evt) {
+            if (!isDetailRequest(evt)) return;
+            show('slideout-loading', false);
+        });
+        function onError(evt) {
+            if (!isDetailRequest(evt)) return;
+            show('slideout-loading', false);
+            show('slideout-error', true);
+        }
+        document.body.addEventListener('htmx:responseError', onError);
+        document.body.addEventListener('htmx:sendError', onError);
+        document.body.addEventListener('htmx:timeout', onError);
+        document.getElementById('slideout-retry').addEventListener('click', function () {
+            if (!lastRow) return;
+            show('slideout-error', false);
+            lastRow.click();
+        });
+    })();
diff --git a/src/main/resources/static/js/settings/admin.js b/src/main/resources/static/js/settings/admin.js
new file mode 100644
index 00000000..cf419da8
--- /dev/null
+++ b/src/main/resources/static/js/settings/admin.js
@@ -0,0 +1,480 @@
+function adminTab() {
+    return {
+        // Restored from the URL's `section` query param when the requester has access to
+        // that sub-tab, so a documentation link like /settings?tab=admin§ion=audit opens
+        // directly on it. Falls back to the same default as before otherwise.
+        subTab: (function() {
+            const fallback = _adminAccess.systemAdmin ? 'users' : (_adminAccess.auditView ? 'audit' : 'snapshot');
+            const requested = initialSettingsSection(null, ['users', 'templates', 'audit', 'snapshot']);
+            const allowedFor = {
+                users: _adminAccess.systemAdmin,
+                templates: _adminAccess.systemAdmin,
+                audit: _adminAccess.auditView || _adminAccess.systemAdmin,
+                snapshot: _adminAccess.snapshotManage || _adminAccess.systemAdmin
+            };
+            return (requested && allowedFor[requested]) ? requested : fallback;
+        })(),
+        users: [], templates: [], allPermissions: [],
+        initialLoading: true,   // true until the first users/templates/permissions load settles
+        sidebarMode: null,  // 'invite' | 'editUser' | 'newTemplate' | 'editTemplate' | null
+        apiError: null,
+        inviteError: null,
+        inviteErrorField: null,
+        toast: null,
+        _toastTimer: null,
+        page: 1, pageSize: 10,
+        tplPage: 1, tplPageSize: 10,
+        deletingTemplate: null,
+        deletingUser: null,
+        invite: { email: '', displayName: '', temporaryPassword: '', templateId: null, message: '' },
+        editingUser: null, editingDisplayName: '', editingNameError: '', editingTemplateId: null, editingMessage: '',
+        editingTpl: null, tplForm: { name: '', description: '', permissions: [] },
+        auditFilter: { dateRange: '7', actorEmail: '', action: '', dateFrom: '', dateTo: '' },
+        auditLogs: [],
+        auditLoading: false,
+        auditPage: 0, auditTotalPages: 0, auditTotalElements: 0, auditPageSize: 20,
+        auditPsOpen: false,
+        actorDropdownOpen: false,
+        actorSearchQuery: '',
+        actionDropdownOpen: false,
+        dateDropdownOpen: false,
+        minPasswordLength: 8,
+        snapshotAirgapped: false,
+        snapshotSources: [],
+        snapshotOldestAsOf: null,
+        snapshotStalenessWarnDays: 7,
+        snapshotStalenessCriticalDays: 30,
+        snapshotFile: null,
+        snapshotImportMode: '',
+        snapshotImporting: false,
+        snapshotShowPathImport: false,
+        snapshotImportPath: '',
+        actionGroups: [
+            { label: _auditGroupLabels['Auth'],             items: ['AUTH.LOGIN_SUCCESS', 'AUTH.LOGIN_FAILURE', 'AUTH.LOGOUT', 'AUTH.OTP_FAILURE', 'AUTH.OTP_RESEND', 'AUTH.TRUSTED_DEVICE', 'AUTH.PASSWORD_CHANGE', 'SAML.LOGIN_SUCCESS', 'SAML.LOGIN_FAILURE'] },
+            { label: _auditGroupLabels['User'],             items: ['USER.CREATE', 'USER.UPDATE_NAME', 'USER.UPDATE_ROLES', 'USER.UPDATE_THEME', 'USER.ACTIVATE', 'USER.DEACTIVATE', 'USER.DELETE', 'USER.SELF_DELETE'] },
+            { label: _auditGroupLabels['Role Template'],    items: ['ROLE_TEMPLATE.CREATE', 'ROLE_TEMPLATE.UPDATE', 'ROLE_TEMPLATE.DELETE'] },
+            { label: _auditGroupLabels['Project'],          items: ['PROJECT.CREATE', 'PROJECT.DELETE', 'PROJECT.RESTORE', 'PROJECT.PERMANENT_DELETE', 'QUICK_IMPORT.START', 'QUICK_IMPORT.CANCEL', 'PROJECT.DEPLOYMENT_PROFILE', 'PROJECT.BATCH_PR', 'SBOM.IMPORT'] },
+            { label: _auditGroupLabels['VCS'],              items: ['VCS.CONNECT', 'VCS.DISCONNECT', 'GITHUB.PAT_CONNECT', 'GITHUB.PAT_DISCONNECT'] },
+            { label: _auditGroupLabels['CLI Key'],          items: ['CLI_KEY.CREATE', 'CLI_KEY.ACTIVATE', 'CLI_KEY.REVOKE'] },
+            { label: _auditGroupLabels['Security'],         items: ['SECURITY_SETTING.UPDATE', 'SECURITY_SETTING.MAIL_TEST'] },
+            { label: _auditGroupLabels['AI Setting'],       items: ['AI_SETTING.SAVE', 'AI_SETTING.ACTIVATE', 'AI_SETTING.DEACTIVATE', 'AI_SETTING.TEST', 'AI_SETTING.PREFERENCES_UPDATE', 'AI_SETTING.BACKFILL', 'AI_SETTING.EMBEDDED_START', 'AI_SETTING.EMBEDDED_STOP', 'AI_SETTING.EMBEDDED_CONFIG'] },
+            { label: _auditGroupLabels['Cache'],            items: ['CACHE.UPDATE_TTL', 'CACHE.CLEAR'] },
+            { label: _auditGroupLabels['External Setting'], items: ['EXTERNAL_SETTING.CACHE_POLICY_UPDATE', 'EXTERNAL_SETTING.GITHUB_UPDATE', 'REPORT_BRANDING.UPDATE'] },
+            { label: _auditGroupLabels['License'],          items: ['LICENSE_POLICY.UPDATE', 'LICENSE.EXPORT', 'LICENSE.REFRESH_AI_INSIGHT'] },
+            { label: _auditGroupLabels['Scan'],             items: ['SCAN.INGEST', 'SCAN.DELETE', 'SCAN.AUTH_FAILURE', 'SCAN.AUTH_RATE_LIMITED', 'SCAN.API_KEY_FAILURE', 'GATE.EVALUATE', 'GATE.GITHUB_PUBLISH'] },
+            { label: _auditGroupLabels['Component'],        items: ['COMPONENT.DEFER', 'COMPONENT.DEFER_ALL', 'COMPONENT.CREATE_PR', 'COMPONENT.CVE_AI_REGENERATE', 'COMPONENT.CVE_AI_REGENERATE_FAILED', 'COMPONENT.BULK_STATUS_UPDATE', 'COMPONENT.DEFER_EXPIRE', 'COMPONENT.JIRA_TICKET'] },
+            { label: _auditGroupLabels['Security Center'],  items: ['SECURITY_CENTER.EXPORT', 'SECURITY_CENTER.PRINT', 'SECURITY_CENTER.REFRESH_AI_INSIGHT', 'SBOM.EXPORT', 'VEX.EXPORT', 'SARIF.EXPORT', 'COMPLIANCE_REPORT.VIEW'] },
+            { label: _auditGroupLabels['Monitoring'],       items: ['MONITOR.NEW_CVE', 'MONITOR.ALERT_EMAIL', 'MONITOR.ALERT_ACK'] },
+            { label: _auditGroupLabels['Integration'],      items: ['JIRA.SETTINGS_UPDATE'] },
+            { label: _auditGroupLabels['Webhook'],          items: ['WEBHOOK.SETTINGS_UPDATE', 'WEBHOOK.SENT', 'WEBHOOK.FAILED'] },
+            { label: _auditGroupLabels['Administration'],   items: ['ORG_DASHBOARD.VIEW', 'AUDIT_LOG.EXPORT', 'AUDIT_LOG.VERIFY', 'SNAPSHOT.IMPORT', 'SNAPSHOT.EXPORT', 'SNAPSHOT.WANTED_LIST_EXPORT'] },
+            { label: _auditGroupLabels['SCIM Provisioning'],items: ['SCIM.USER_CREATE', 'SCIM.USER_UPDATE', 'SCIM.USER_DEACTIVATE', 'SCIM.GROUP_CREATE', 'SCIM.GROUP_UPDATE', 'SCIM.GROUP_DELETE', 'SCIM.GROUP_MEMBER_ADD', 'SCIM.GROUP_MEMBER_REMOVE', 'SCIM.AUTH_FAILURE', 'SCIM_KEY.CREATE'] },
+            { label: _auditGroupLabels['Policy'],           items: ['POLICY.CREATE', 'POLICY.UPDATE', 'POLICY.DELETE', 'POLICY.IMPORT', 'POLICY.GITOPS_SYNC', 'POLICY_EXCEPTION.REQUEST', 'POLICY_EXCEPTION.APPROVE', 'POLICY_EXCEPTION.REVOKE', 'POLICY_EXCEPTION.EXPIRE'] },
+            { label: 'System',                              items: ['SYSTEM.SETUP'] },
+        ],
+        get filteredAuditUsers() {
+            const q = this.actorSearchQuery.toLowerCase();
+            return this.users.filter(u =>
+                !q ||
+                (u.email || '').toLowerCase().includes(q) ||
+                (u.displayName || '').toLowerCase().includes(q)
+            );
+        },
+        csrf() { return window.OswlCsrf ? window.OswlCsrf.token() : ''; },
+
+        // ── Permission grouping ──
+        // Every Permission enum value must be matched by exactly one prefix here. Anything
+        // unmatched silently disappears from the template editor and becomes ungrantable —
+        // which is what happened to ORG_DASHBOARD_VIEW and AUDIT_LOG_* when they were added.
+        // The catch-all group below makes a future omission visible instead of silent.
+        permissionGroups: {
+            'Project': ['PROJECT_'],
+            'Scan': ['SCAN_'],
+            'Security Center': ['SECURITY_CENTER_'],
+            'License': ['LICENSE_'],
+            'Analysis': ['COMPONENT_', 'VERSION_', 'RISK_'],
+            'Settings': ['SETTINGS_'],
+            'Administration': ['ORG_DASHBOARD_', 'AUDIT_LOG_']
+        },
+        get groupedPermissions() {
+            const result = {};
+            const claimed = new Set();
+            for (const [name, prefixes] of Object.entries(this.permissionGroups)) {
+                const label = _permGroupLabels[name] || name;
+                const matched = this.allPermissions.filter(p => prefixes.some(pref => p.code.startsWith(pref)));
+                matched.forEach(p => claimed.add(p.code));
+                result[label] = matched;
+            }
+            const ungrouped = this.allPermissions.filter(p => !claimed.has(p.code));
+            if (ungrouped.length) {
+                result[_permGroupLabels['Other'] || 'Other'] = ungrouped;
+            }
+            return result;
+        },
+        // ── Pagination ──
+        get totalPages() { return Math.max(1, Math.ceil(this.users.length / this.pageSize)); },
+        get pagedUsers() {
+            const start = (this.page - 1) * this.pageSize;
+            return this.users.slice(start, start + this.pageSize);
+        },
+        get tplTotalPages() { return Math.max(1, Math.ceil(this.templates.length / this.tplPageSize)); },
+        get pagedTemplates() {
+            const start = (this.tplPage - 1) * this.tplPageSize;
+            return this.templates.slice(start, start + this.tplPageSize);
+        },
+        // ── Avatar color from name ──
+        avatarColor(s) {
+            const palette = ['#0d9488','#0891b2','#059669','#0284c7','#0f766e','#0369a1','#14b8a6','#0ea5e9'];
+            let h = 0; for (const c of (s||'?')) h = (h * 31 + c.charCodeAt(0)) >>> 0;
+            return palette[h % palette.length];
+        },
+
+        async init() {
+            onSettingsSectionPopstate(() => {
+                const fallback = _adminAccess.systemAdmin ? 'users' : (_adminAccess.auditView ? 'audit' : 'snapshot');
+                const requested = initialSettingsSection(null, ['users', 'templates', 'audit', 'snapshot']);
+                const allowed = { users: _adminAccess.systemAdmin, templates: _adminAccess.systemAdmin,
+                    audit: _adminAccess.auditView || _adminAccess.systemAdmin,
+                    snapshot: _adminAccess.snapshotManage || _adminAccess.systemAdmin };
+                if (requested && allowed[requested]) this.subTab = requested; else this.subTab = fallback;
+            });
+            // Users, templates and permissions are all SYSTEM_ADMIN-only APIs; skip them
+            // entirely for a delegated user and open their panel instead.
+            if (_adminAccess.systemAdmin) {
+                try {
+                    await Promise.all([this.loadUsers(), this.loadTemplates(), this.loadPermissions()]);
+                } catch(e) {
+                    this.apiError = e.message || _adminI18n.loadDataFailed;
+                } finally {
+                    this.initialLoading = false;
+                }
+                try {
+                    const r = await fetch('/api/settings/security');
+                    if (r.ok) {
+                        const s = await r.json();
+                        if (s.minPasswordLength) this.minPasswordLength = s.minPasswordLength;
+                    }
+                } catch(_) {}
+                return;
+            }
+            this.initialLoading = false;
+            if (this.subTab === 'audit') this.loadAudit(0);
+            else if (this.subTab === 'snapshot') this.loadSnapshotStatus();
+        },
+        headers() { return oswlJsonHeaders(); },
+        async apiGet(url) {
+            const r = await fetch(url);
+            if (r.status === 401) { location.href = '/login'; throw new Error('Unauthorized'); }
+            if (!r.ok) throw new Error(_fetchErr(r, `API error ${r.status}: ${url}`));
+            return r.json();
+        },
+        async loadUsers() { this.users = await this.apiGet('/api/admin/users'); },
+        async loadTemplates() { this.templates = await this.apiGet('/api/admin/role-templates'); },
+        async loadPermissions() { this.allPermissions = await this.apiGet('/api/admin/role-templates/permissions'); },
+        randomPwd() {
+            const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+            let pwd = '';
+            for (let i = 0; i < 12; i++) pwd += chars[Math.floor(Math.random() * chars.length)];
+            return pwd;
+        },
+
+        selectSubTab(key) {
+            this.subTab = key;
+            this.closeSidebar();
+            syncSettingsSection(key);
+            if (key === 'templates') this.loadTemplates();
+            else if (key === 'audit') this.loadAudit(0);
+            else if (key === 'snapshot') this.loadSnapshotStatus();
+        },
+
+        // ── Sidebar control (mutually exclusive) ──
+        closeSidebar() {
+            this.sidebarMode = null;
+            this.editingUser = null;
+            this.editingTpl = null;
+            this.inviteError = null;
+            this.inviteErrorField = null;
+            oswlReleaseFocus();
+        },
+        showToast(msg, duration = 3500) {
+            this.toast = msg;
+            clearTimeout(this._toastTimer);
+            this._toastTimer = setTimeout(() => { this.toast = null; }, duration);
+        },
+        sanitizeDate(val) {
+            if (!val) return '';
+            const parts = val.split('-');
+            if (parts.length !== 3 || parts[0].length !== 4) return '';
+            return val;
+        },
+        openInvite() {
+            this.invite = { email: '', displayName: '', temporaryPassword: '', templateId: null, message: '' };
+            this.editingUser = null;
+            this.inviteError = null;
+            this.inviteErrorField = null;
+            this.sidebarMode = 'invite';
+            this.$nextTick(() => oswlTrapFocus(this.$refs.userPanel));
+        },
+        openEditUser(u) {
+            this.editingUser = u;
+            this.editingDisplayName = u.displayName || '';
+            this.editingNameError = '';
+            this.editingTemplateId = (u.roleTemplates && u.roleTemplates.length > 0) ? u.roleTemplates[0].id : null;
+            this.editingMessage = '';
+            this.sidebarMode = 'editUser';
+            this.$nextTick(() => oswlTrapFocus(this.$refs.userPanel));
+        },
+        openNewTemplate() {
+            this.editingTpl = null;
+            this.tplForm = { name: '', description: '', permissions: [] };
+            this.sidebarMode = 'newTemplate';
+            this.$nextTick(() => oswlTrapFocus(this.$refs.templatePanel));
+        },
+        openEditTemplate(t) {
+            this.editingTpl = t;
+            this.tplForm = { name: t.name, description: t.description||'', permissions: [...(t.permissions||[])] };
+            this.sidebarMode = 'editTemplate';
+            this.$nextTick(() => oswlTrapFocus(this.$refs.templatePanel));
+        },
+
+        // ── Permission Select All ──
+        allSelected() { return this.allPermissions.length > 0 && this.tplForm.permissions.length === this.allPermissions.length; },
+        toggleAllPermissions() {
+            if (this.allSelected()) this.tplForm.permissions = [];
+            else this.tplForm.permissions = this.allPermissions.map(p => p.code);
+        },
+        groupAllSelected(group) { return group.length > 0 && group.every(p => this.tplForm.permissions.includes(p.code)); },
+        toggleGroup(group) {
+            if (this.groupAllSelected(group)) {
+                this.tplForm.permissions = this.tplForm.permissions.filter(c => !group.some(p => p.code === c));
+            } else {
+                const codes = new Set(this.tplForm.permissions);
+                group.forEach(p => codes.add(p.code));
+                this.tplForm.permissions = [...codes];
+            }
+        },
+
+        async submitInvite() {
+            this.inviteError = null;
+            this.inviteErrorField = null;
+            const emailRe = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+            if (!this.invite.displayName.trim()) {
+                this.inviteError = _adminI18n.validateNameRequired; this.inviteErrorField = 'name'; return;
+            }
+            if (!this.invite.email.trim()) {
+                this.inviteError = _adminI18n.validateEmailRequired; this.inviteErrorField = 'email'; return;
+            }
+            if (!emailRe.test(this.invite.email.trim())) {
+                this.inviteError = _adminI18n.validateEmailInvalid; this.inviteErrorField = 'email'; return;
+            }
+            if (!this.invite.temporaryPassword.trim()) {
+                this.inviteError = _adminI18n.validatePasswordRequired; this.inviteErrorField = 'password'; return;
+            }
+            if (this.invite.temporaryPassword.trim().length < this.minPasswordLength) {
+                this.inviteError = _adminI18n.validatePasswordTooShort.replace('{0}', this.minPasswordLength); this.inviteErrorField = 'password'; return;
+            }
+            const { templateId, ...rest } = this.invite;
+            const payload = { ...rest, templateIds: templateId ? [templateId] : [] };
+            const r = await fetch('/api/admin/users', { method: 'POST', headers: this.headers(), body: JSON.stringify(payload) });
+            if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { this.inviteError = _fetchErr(r, _adminI18n.inviteFailed); return; }
+            if (!templateId) {
+                const created = await r.json();
+                await fetch(`/api/admin/users/${created.id}/deactivate`, { method: 'PUT', headers: this.headers() });
+            }
+            this.closeSidebar();
+            await this.loadUsers();
+        },
+        async saveRoles() {
+            const name = this.editingDisplayName.trim();
+            if (name.length < 1) { this.editingNameError = _adminI18n.nameTooShort; return; }
+            if (name.length > 20) { this.editingNameError = _adminI18n.nameTooLong; return; }
+            if (name !== (this.editingUser.displayName || '').trim()) {
+                const nr = await fetch(`/api/admin/users/${this.editingUser.id}/display-name`, { method: 'PUT', headers: this.headers(), body: JSON.stringify({ displayName: name }) });
+                if (nr.status === 401) { location.href = '/login'; return; }
+                if (!nr.ok) { alert(_fetchErr(nr, _adminI18n.updateNameFailed)); return; }
+            }
+            const r = await fetch(`/api/admin/users/${this.editingUser.id}/roles`, { method: 'PUT', headers: this.headers(), body: JSON.stringify({ templateIds: this.editingTemplateId ? [this.editingTemplateId] : [] }) });
+            if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { alert(_fetchErr(r, _adminI18n.actionFailed)); return; }
+            // Auto-deactivate if no role assigned and user is currently active
+            if (!this.editingTemplateId && this.editingUser.enabled) {
+                const dr = await fetch(`/api/admin/users/${this.editingUser.id}/deactivate`, { method: 'PUT', headers: this.headers() });
+                if (dr.status === 401) { location.href = '/login'; return; }
+            }
+            this.closeSidebar();
+            await Promise.all([this.loadUsers(), this.loadTemplates()]);
+        },
+        async toggleEnabled(u, enabled) {
+            const url = `/api/admin/users/${u.id}/${enabled ? 'activate' : 'deactivate'}`;
+            const r = await fetch(url, { method: 'PUT', headers: this.headers() });
+            if (r.status === 401) { location.href = '/login'; return; }
+            await this.loadUsers();
+        },
+        async deleteUser(u) {
+            this.deletingUser = null;
+            const r = await fetch(`/api/admin/users/${u.id}`, { method: 'DELETE', headers: this.headers() });
+            if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { alert(_fetchErr(r, _adminI18n.actionFailed)); return; }
+            await this.loadUsers();
+        },
+        async saveTemplate() {
+            const url = this.editingTpl?.id ? `/api/admin/role-templates/${this.editingTpl.id}` : '/api/admin/role-templates';
+            const method = this.editingTpl?.id ? 'PUT' : 'POST';
+            const r = await fetch(url, { method, headers: this.headers(), body: JSON.stringify(this.tplForm) });
+            if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { alert(_fetchErr(r, _adminI18n.actionFailed)); return; }
+            this.closeSidebar(); await this.loadTemplates();
+        },
+        async deleteTemplate(t) {
+            const r = await fetch(`/api/admin/role-templates/${t.id}`, { method: 'DELETE', headers: this.headers() });
+            if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { alert(_fetchErr(r, _adminI18n.actionFailed)); return; }
+            this.deletingTemplate = null;
+            await this.loadTemplates();
+        },
+        async loadAudit(page) {
+            if (page !== undefined) this.auditPage = page;
+            const params = new URLSearchParams();
+            if (this.auditFilter.dateRange === 'custom') {
+                if (this.auditFilter.dateFrom) params.set('startDate', this.auditFilter.dateFrom + 'T00:00:00');
+                if (this.auditFilter.dateTo)   params.set('endDate',   this.auditFilter.dateTo   + 'T23:59:59');
+            } else if (this.auditFilter.dateRange) {
+                const days = parseInt(this.auditFilter.dateRange, 10);
+                const start = new Date();
+                start.setDate(start.getDate() - days);
+                params.set('startDate', start.toISOString().slice(0, 19));
+            }
+            if (this.auditFilter.actorEmail) params.set('actorEmail', this.auditFilter.actorEmail);
+            if (this.auditFilter.action) params.set('action', this.auditFilter.action);
+            params.set('page', this.auditPage);
+            params.set('size', this.auditPageSize);
+            this.auditLoading = true;
+            try {
+                const r = await fetch('/api/admin/audit-logs?' + params.toString());
+                if (r.status === 401) { location.href = '/login'; return; }
+            if (!r.ok) { this.apiError = _fetchErr(r, _adminI18n.auditLoadFailed); return; }
+                const data = await r.json();
+                this.auditLogs = data.content || [];
+                this.auditTotalPages = data.page?.totalPages || data.totalPages || 0;
+                this.auditTotalElements = data.page?.totalElements || data.totalElements || 0;
+            } catch(e) { this.apiError = e.message || _adminI18n.auditLoadFailed; }
+            finally { this.auditLoading = false; }
+        },
+        pageRange() {
+            const total = this.auditTotalPages;
+            const cur = this.auditPage + 1;
+            if (total <= 7) return Array.from({ length: total }, (_, i) => i + 1);
+            const range = [1];
+            if (cur > 3) range.push('...');
+            for (let i = Math.max(2, cur - 1); i <= Math.min(total - 1, cur + 1); i++) range.push(i);
+            if (cur < total - 2) range.push('...');
+            range.push(total);
+            return range;
+        },
+        auditExportUrl(format) {
+            const params = new URLSearchParams();
+            if (this.auditFilter.dateRange === 'custom') {
+                if (this.auditFilter.dateFrom) params.set('startDate', this.auditFilter.dateFrom + 'T00:00:00');
+                if (this.auditFilter.dateTo)   params.set('endDate',   this.auditFilter.dateTo   + 'T23:59:59');
+            } else if (this.auditFilter.dateRange) {
+                const days = parseInt(this.auditFilter.dateRange, 10);
+                const start = new Date();
+                start.setDate(start.getDate() - days);
+                params.set('startDate', start.toISOString().slice(0, 19));
+            }
+            if (this.auditFilter.actorEmail) params.set('actorEmail', this.auditFilter.actorEmail);
+            if (this.auditFilter.action) params.set('action', this.auditFilter.action);
+            const qs = params.toString();
+            if (!format || format === 'csv') return '/api/admin/audit-logs/export.csv' + (qs ? '?' + qs : '');
+            return '/api/admin/audit-logs/export?format=' + format + (qs ? '&' + qs : '');
+        },
+        dateRangeLabel() {
+            if (this.auditFilter.dateRange === 'custom') {
+                if (this.auditFilter.dateFrom || this.auditFilter.dateTo) {
+                    const from = this.auditFilter.dateFrom || '...';
+                    const to   = this.auditFilter.dateTo   || '...';
+                    return from + ' – ' + to;
+                }
+                return _adminI18n.customRange;
+            }
+            const map = {
+                '':   _adminI18n.allTime,
+                '7':  _adminI18n.last7Days,
+                '30': _adminI18n.last30Days,
+                '90': _adminI18n.last90Days
+            };
+            return map[this.auditFilter.dateRange] ?? _adminI18n.last7Days;
+        },
+
+        // ── Snapshot (offline VDB) ──
+        async loadSnapshotStatus() {
+            try {
+                const r = await this.apiGet('/api/admin/snapshot');
+                this.snapshotAirgapped = r.airgapped;
+                this.snapshotSources = r.sources || [];
+                this.snapshotOldestAsOf = r.oldestSourceAsOf || null;
+                this.snapshotStalenessWarnDays = r.stalenessWarnDays;
+                this.snapshotStalenessCriticalDays = r.stalenessCriticalDays;
+            } catch(e) {
+                this.apiError = e.message || _adminI18n.loadDataFailed;
+            }
+        },
+        stalenessDays() {
+            if (!this.snapshotOldestAsOf) return null;
+            const asOf = new Date(this.snapshotOldestAsOf + 'T00:00:00');
+            return Math.floor((Date.now() - asOf.getTime()) / 86400000);
+        },
+        stalenessLevel() {
+            const days = this.stalenessDays();
+            if (days === null) return 'none';
+            if (days > this.snapshotStalenessCriticalDays) return 'critical';
+            if (days > this.snapshotStalenessWarnDays) return 'warn';
+            return 'fresh';
+        },
+        stalenessLabel() {
+            return { fresh: _snapshotI18n.freshnessFresh, warn: _snapshotI18n.freshnessWarn,
+                     critical: _snapshotI18n.freshnessCritical, none: _snapshotI18n.freshnessNone }[this.stalenessLevel()];
+        },
+        async importSnapshotFile() {
+            if (!this.snapshotFile) return;
+            this.snapshotImporting = true;
+            try {
+                const form = new FormData();
+                form.append('file', this.snapshotFile);
+                const url = '/api/admin/snapshot/import' + (this.snapshotImportMode ? '?mode=' + this.snapshotImportMode : '');
+                const r = await fetch(url, { method: 'POST', headers: { 'X-XSRF-TOKEN': this.csrf() }, body: form });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.showToast(_fetchErr(r, _snapshotI18n.importFailed)); return; }
+                const result = await r.json();
+                this.snapshotFile = null;
+                this.showToast(_snapshotI18n.importSuccess.replace('{0}', result.totalRecords).replace('{1}', Object.keys(result.sources||{}).length));
+                await this.loadSnapshotStatus();
+            } catch(e) {
+                this.showToast(e.message || _snapshotI18n.importFailed);
+            } finally {
+                this.snapshotImporting = false;
+            }
+        },
+        async importSnapshotFromPath() {
+            if (!this.snapshotImportPath) return;
+            this.snapshotImporting = true;
+            try {
+                const r = await fetch('/api/admin/snapshot/import-from-path', {
+                    method: 'POST', headers: this.headers(),
+                    body: JSON.stringify({ path: this.snapshotImportPath, mode: this.snapshotImportMode || null })
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.showToast(_fetchErr(r, _snapshotI18n.importFailed)); return; }
+                const result = await r.json();
+                this.snapshotImportPath = '';
+                this.showToast(_snapshotI18n.importSuccess.replace('{0}', result.totalRecords).replace('{1}', Object.keys(result.sources||{}).length));
+                await this.loadSnapshotStatus();
+            } catch(e) {
+                this.showToast(e.message || _snapshotI18n.importFailed);
+            } finally {
+                this.snapshotImporting = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/ai.js b/src/main/resources/static/js/settings/ai.js
new file mode 100644
index 00000000..0b1c0007
--- /dev/null
+++ b/src/main/resources/static/js/settings/ai.js
@@ -0,0 +1,700 @@
+function aiTab() {
+    return {
+        // Which radio is selected. 'EMBEDDED' is a UI-only value: on the wire the embedded
+        // sidecar is the LOCAL provider, told apart by its base URL (see activeProviderKind).
+        mode: 'off', // 'off' | 'OPENAI' | 'ANTHROPIC' | 'GEMINI' | 'LOCAL' | 'EMBEDDED'
+        // Server's answer to "which one is actually serving calls right now" — the radio only
+        // reflects what the user is looking at, which is why an active provider and a running
+        // embedded model used to look identical.
+        activeProviderKind: 'OFF',
+        // Sub-tab: 'provider' | 'context' | 'prompts'. Restored from the URL's `section`
+        // query param so a documentation link like /settings?tab=ai§ion=prompts opens
+        // directly on that panel.
+        subTab: initialSettingsSection('provider', ['provider', 'context', 'prompts']),
+        _contextLoaded: false, _promptsLoaded: false, _providerLoaded: false,
+        forms: {
+            OPENAI:    { apiKey: '', modelName: 'gpt-5.6-terra',   baseUrl: '' },
+            ANTHROPIC: { apiKey: '', modelName: 'claude-opus-5',   baseUrl: '' },
+            GEMINI:    { apiKey: '', modelName: 'gemini-3.1-pro',  baseUrl: '' },
+            LOCAL:     { apiKey: '', modelName: 'llama3.3',        baseUrl: 'http://localhost:11434/v1' }
+        },
+        // Suggestions only — any id can be typed in. Kept here rather than inline in each
+        // dropdown so a model refresh is a one-line change instead of eight duplicated
+        // array literals (each dropdown previously repeated its list twice).
+        models: {
+            OPENAI: ['gpt-5.6-sol', 'gpt-5.6-terra', 'gpt-5.6-luna',
+                     'gpt-5.5-pro', 'gpt-5.5',
+                     'gpt-5.4-pro', 'gpt-5.4', 'gpt-5.4-mini', 'gpt-5.4-nano'],
+            ANTHROPIC: ['claude-opus-5', 'claude-fable-5', 'claude-sonnet-5', 'claude-haiku-4-5',
+                        'claude-opus-4-8', 'claude-opus-4-7', 'claude-sonnet-4-6'],
+            GEMINI: ['gemini-3.1-pro', 'gemini-3.6-flash', 'gemini-3.5-flash', 'gemini-3.1-flash-lite',
+                     'gemini-3-pro', 'gemini-3-flash',
+                     'gemini-2.5-pro', 'gemini-2.5-flash', 'gemini-2.5-flash-lite'],
+            // Popular Ollama tags. Small models first — an 8B-class model on CPU is what
+            // most self-hosted setups can actually run at a usable speed.
+            LOCAL: ['llama3.3', 'llama3.2', 'llama3.1',
+                    'qwen3', 'qwen3-coder', 'qwen2.5', 'qwen2.5-coder',
+                    'gemma3', 'gemma3n', 'phi4', 'phi4-mini',
+                    'deepseek-r1', 'deepseek-v3',
+                    'mistral', 'mistral-nemo', 'mixtral',
+                    'codellama', 'granite3.3', 'smollm2']
+        },
+
+        /** Case-insensitive substring filter over the suggestion list for one provider. */
+        filterModels(provider, query) {
+            const list = this.models[provider] || [];
+            if (!query) return list;
+            const q = query.toLowerCase();
+            return list.filter(o => o.toLowerCase().includes(q));
+        },
+        preferences: {
+            promptsLocale: 'en', cveLimit: 10, licenseLimit: 8, cveSeverities: ['CRITICAL', 'HIGH'],
+            temperature: null, maxTokens: null, dailyCallCap: 0,
+            defaultDeploymentProfile: 'COMMERCIAL_PRODUCT',
+            reasoningEffort: 'DEFAULT', autoBackfillInsights: false
+        },
+        promptKeys: [], promptOverrides: {}, promptEditKey: 'system.default', promptEditText: '',
+        localeDropdownOpen: false,
+        deploymentDropdownOpen: false,
+        effortDropdownOpen: false,
+        promptKeyDropdownOpen: false,
+        backfilling: false,
+        effortOptions: [
+            { value: 'DEFAULT', label: _aiI18n.effortDefault },
+            { value: 'LOW',     label: _aiI18n.effortLow },
+            { value: 'MEDIUM',  label: _aiI18n.effortMedium },
+            { value: 'HIGH',    label: _aiI18n.effortHigh },
+            { value: 'XHIGH',   label: _aiI18n.effortXhigh },
+            { value: 'MAX',     label: _aiI18n.effortMax }
+        ],
+        // Mirror of AiEffort (Java): what each provider actually receives. XHIGH/MAX exist only
+        // on Anthropic's output_config.effort — everywhere else reasoning_effort tops out at
+        // "high", so those two levels are sent as "high" rather than being rejected.
+        effortWire: {
+            DEFAULT: { openai: null,     anthropic: null },
+            LOW:     { openai: 'low',    anthropic: 'low' },
+            MEDIUM:  { openai: 'medium', anthropic: 'medium' },
+            HIGH:    { openai: 'high',   anthropic: 'high' },
+            XHIGH:   { openai: 'high',   anthropic: 'xhigh' },
+            MAX:     { openai: 'high',   anthropic: 'max' }
+        },
+        deploymentOptions: [
+            { value: 'COMMERCIAL_PRODUCT',      label: _aiI18n.deployCommercial },
+            { value: 'SAAS',                    label: _aiI18n.deploySaas },
+            { value: 'INTERNAL_TOOL',           label: _aiI18n.deployInternal },
+            { value: 'ON_PREMISE_DISTRIBUTION', label: _aiI18n.deployOnPrem }
+        ],
+        savingProvider: false, savingEnrichment: false, testing: false,
+        parameterErrors: {}, saveFeedback: '',
+        apiError: null, apiErrorHint: null, toastVisible: false, toastMsg: '', toastKind: 'success', _toastTimer: null,
+        usageStats: null,
+        usageEvents: [], usageEventPage: 0, usageEventTotalPages: 0,
+        embedded: { binaryFound: false, running: false, modelFile: null, activeModel: null, fallbackUsed: false, lastError: null, modelsDir: null, availableModels: [], downloading: false, downloadedBytes: 0, downloadTotalBytes: 0, airgapped: false },
+        embeddedBusy: false, embeddedError: null, _embeddedPollActive: false,
+        embeddedModel: '', embeddedDirInput: '', embeddedSaving: false,
+
+        /**
+         * Token counts run into the millions on a busy instance, where a raw 12847362 is
+         * unreadable. Below 1000 the exact number is still the most useful thing to show.
+         * One decimal is kept only when it carries information (1.2K, but 15K not 15.0K).
+         */
+        fmtTokens(value) {
+            const n = Number(value) || 0;
+            if (n < 1000) return String(n);
+            const [scaled, unit] = n < 1000000 ? [n / 1000, 'K'] : [n / 1000000, 'M'];
+            // 3 significant digits: 9.87K, 98.7K, 987K
+            const decimals = scaled < 10 ? 2 : (scaled < 100 ? 1 : 0);
+            return scaled.toFixed(decimals).replace(/(\.\d*?)0+$/, '$1').replace(/\.$/, '') + unit;
+        },
+
+        /** Full count with thousands separators — used as the title of an abbreviated value. */
+        exactTokens(value) {
+            return (Number(value) || 0).toLocaleString();
+        },
+
+        /** Integer hit-rate percentage; 0 until at least one cache outcome is recorded. */
+        cacheHitRate(stats) {
+            const hits = Number(stats && stats.cacheHitCount) || 0;
+            const misses = Number(stats && stats.cacheMissCount) || 0;
+            const total = hits + misses;
+            return total > 0 ? Math.round((hits / total) * 100) : 0;
+        },
+
+        localeLabel() {
+            if (this.preferences.promptsLocale === 'ko') return _aiI18n.localeKo;
+            if (this.preferences.promptsLocale === 'ja') return _aiI18n.localeJa;
+            return _aiI18n.localeEn;
+        },
+        deploymentLabel() {
+            const opt = this.deploymentOptions.find(o => o.value === this.preferences.defaultDeploymentProfile);
+            return opt ? opt.label : this.preferences.defaultDeploymentProfile;
+        },
+
+        effortLabel() {
+            const opt = this.effortOptions.find(o => o.value === this.preferences.reasoningEffort);
+            return opt ? opt.label : _aiI18n.effortDefault;
+        },
+
+        /** One line naming the exact request field and value the selected provider will receive. */
+        effortWireHint() {
+            const wire = this.effortWire[this.preferences.reasoningEffort] || this.effortWire.DEFAULT;
+            const isAnthropic = this.mode === 'ANTHROPIC';
+            const value = isAnthropic ? wire.anthropic : wire.openai;
+            if (!value) return _aiI18n.effortWireNone;
+            return isAnthropic
+                ? _aiI18n.effortWireAnthropic.replace('{0}', value)
+                : _aiI18n.effortWireOpenai.replace('{0}', value);
+        },
+
+        /**
+         * Regenerates scan-level insights on demand. Confirmed first because each scan in
+         * scope is a paid provider call — this is the whole reason the automatic version is
+         * opt-in.
+         */
+        async runBackfill(force) {
+            const question = force ? _aiI18n.backfillConfirmAll : _aiI18n.backfillConfirmMissing;
+            if (!window.confirm(question)) return;
+            this.backfilling = true;
+            try {
+                const r = await fetch('/api/settings/ai/backfill?force=' + (force ? 'true' : 'false'), {
+                    method: 'POST',
+                    headers: this.headers()
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                const data = await r.json().catch(() => ({}));
+                if (!r.ok || !data.success) {
+                    this.showToast(data.message || _aiI18n.backfillFailed, 'error');
+                    return;
+                }
+                this.showToast(_aiI18n.backfillStarted);
+            } catch (e) {
+                this.showToast(_aiI18n.backfillFailed, 'error');
+            } finally {
+                this.backfilling = false;
+            }
+        },
+
+        csrf() {
+            return window.OswlCsrf ? window.OswlCsrf.token() : '';
+        },
+
+        async init() {
+            onSettingsSectionPopstate(() => {
+                const section = initialSettingsSection('provider', ['provider', 'context', 'prompts']);
+                if (this.subTab !== section) this.subTab = section;
+            });
+            // A stale error from the previously selected provider would be misleading once
+            // the user switches — clear it as soon as the selection changes.
+            this.$watch('mode', () => { this.apiError = null; this.apiErrorHint = null; });
+            try {
+                const r = await fetch('/api/settings/ai');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _aiI18n.loadFailed); return; }
+                const data = await r.json();
+                if (data.activeProviderKind) this.activeProviderKind = data.activeProviderKind;
+                if (data && data.active && data.provider) {
+                    // Land on the entry that is actually live — for a running embedded model
+                    // that is the Embedded option, not the Local/Ollama one it borrows.
+                    this.mode = this.activeProviderKind === 'EMBEDDED' ? 'EMBEDDED' : data.provider;
+                    const f = this.forms[data.provider];
+                    if (f) {
+                        if (data.baseUrl)   f.baseUrl   = data.baseUrl;
+                        if (data.modelName) f.modelName = data.modelName;
+                    }
+                }
+                if (data.promptsLocale) this.preferences.promptsLocale = data.promptsLocale;
+                if (data.cveLimit)      this.preferences.cveLimit = data.cveLimit;
+                if (data.licenseLimit)  this.preferences.licenseLimit = data.licenseLimit;
+                if (data.cveSeverities) {
+                    this.preferences.cveSeverities = data.cveSeverities.split(',').map(s => s.trim()).filter(Boolean);
+                }
+                if (data.temperature != null) this.preferences.temperature = data.temperature;
+                if (data.maxTokens != null) this.preferences.maxTokens = data.maxTokens;
+                if (data.dailyCallCap != null) this.preferences.dailyCallCap = data.dailyCallCap;
+                if (data.defaultDeploymentProfile) {
+                    this.preferences.defaultDeploymentProfile = data.defaultDeploymentProfile;
+                }
+                if (data.reasoningEffort) this.preferences.reasoningEffort = data.reasoningEffort;
+                this.preferences.autoBackfillInsights = !!data.autoBackfillInsights;
+                // The 'context' group's fields all come from this single response — nothing
+                // further to fetch for it. 'provider' (usage/embedded status) and 'prompts'
+                // each have their own calls, deferred until that sub-tab is actually opened.
+                await this.loadSection(this.subTab);
+            } catch (e) { this.apiError = _aiI18n.loadFailed; }
+        },
+
+        /** Loads a sub-tab's own data on first visit only — repeat visits reuse what's cached. */
+        async loadSection(key) {
+            if (key === 'provider' && !this._providerLoaded) {
+                this._providerLoaded = true;
+                await this.loadUsageStats();
+                await this.loadUsageEvents(0);
+                await this.loadEmbeddedStatus();
+            } else if (key === 'prompts' && !this._promptsLoaded) {
+                this._promptsLoaded = true;
+                await this.loadPrompts();
+            } else if (key === 'context') {
+                this._contextLoaded = true;
+            }
+        },
+
+        selectSubTab(key) {
+            this.subTab = key;
+            syncSettingsSection(key);
+            this.loadSection(key);
+        },
+
+        async loadEmbeddedStatus() {
+            try {
+                const r = await fetch('/api/settings/ai/embedded');
+                if (r.ok) {
+                    this.embedded = await r.json();
+                    this.syncEmbeddedInputs();
+                    if (this.embedded.downloading && !this._embeddedPollActive) {
+                        // A page reload landed mid-download (it runs server-side, independent
+                        // of any browser session) — resume polling instead of leaving a stale
+                        // progress snapshot on screen forever.
+                        this.embeddedBusy = true;
+                        this._pollEmbeddedUntilSettled().finally(() => { this.embeddedBusy = false; });
+                    }
+                }
+            } catch (e) { /* non-fatal */ }
+        },
+
+        syncEmbeddedInputs() {
+            this.embeddedModel = this.embedded.modelFile || '';
+            this.embeddedDirInput = this.embedded.modelsDir || '';
+        },
+
+        embeddedModelLabel(model) {
+            if (model === 'Qwen3.5-2B-Q4_K_M.gguf') return 'Qwen3.5 2B · Q4_K_M · ' + _aiI18n.embeddedDefault;
+            if (model === 'gemma-4-E2B-it-Q4_K_M.gguf') return 'Gemma 4 E2B · Q4_K_M';
+            return model;
+        },
+
+        embeddedModelHint() {
+            const model = this.embeddedModel || this.embedded.modelFile || 'Qwen3.5-2B-Q4_K_M.gguf';
+            if (model === 'Qwen3.5-2B-Q4_K_M.gguf') return _aiI18n.embeddedQwenHint;
+            if (model === 'gemma-4-E2B-it-Q4_K_M.gguf') return _aiI18n.embeddedGemmaHint;
+            return _aiI18n.embeddedCustomHint;
+        },
+
+        async startEmbedded() {
+            this.embeddedBusy = true;
+            this.embeddedError = null;
+            try {
+                const url = '/api/settings/ai/embedded/start'
+                    + (this.embeddedModel ? '?model=' + encodeURIComponent(this.embeddedModel) : '');
+                const r = await fetch(url, {
+                    method: 'POST',
+                    headers: this.headers()
+                });
+                const data = await r.json();
+                this.embedded = data;
+                if (!r.ok) {
+                    this.embeddedError = data.message || _aiI18n.embeddedFailed;
+                    return;
+                }
+                if (data.downloading) {
+                    // No .gguf present yet — the server started downloading Qwen3 in the
+                    // background and returned immediately. Poll until it settles.
+                    await this._pollEmbeddedUntilSettled();
+                } else {
+                    this._applyEmbeddedStartResult(data);
+                }
+            } catch (e) {
+                this.embeddedError = _aiI18n.embeddedFailed;
+            } finally {
+                this.embeddedBusy = false;
+            }
+        },
+
+        _applyEmbeddedStartResult(data) {
+            if (data.success && data.running) {
+                // Stay on (and light up) the Embedded entry. It previously jumped the radio to
+                // Local/Ollama, which is where the "which one is on?" confusion came from.
+                this.mode = 'EMBEDDED';
+                this.activeProviderKind = 'EMBEDDED';
+                if (data.baseUrl) this.forms.LOCAL.baseUrl = data.baseUrl;
+                if (data.activeModel) this.forms.LOCAL.modelName = data.activeModel.replace(/\.gguf$/i, '');
+                this.showToast(_aiI18n.embeddedStarted);
+            } else {
+                this.embeddedError = data.message || data.lastError || _aiI18n.embeddedFailed;
+            }
+        },
+
+        /**
+         * Polls GET /embedded every 1.5s while a background download and/or llama-server
+         * launch is in flight (download progress, then the same ~90s health wait a normal
+         * start already blocks on). Stops as soon as the outcome is decided: running, or
+         * lastError set. A generous 20-minute cap guards against polling forever if the
+         * server-side state machine ever gets stuck without reporting either.
+         */
+        async _pollEmbeddedUntilSettled() {
+            if (this._embeddedPollActive) return;
+            this._embeddedPollActive = true;
+            const deadline = Date.now() + 20 * 60 * 1000;
+            try {
+                while (Date.now() < deadline) {
+                    await new Promise(resolve => setTimeout(resolve, 1500));
+                    let data;
+                    try {
+                        const r = await fetch('/api/settings/ai/embedded');
+                        if (!r.ok) continue;
+                        data = await r.json();
+                    } catch (e) { continue; }
+                    this.embedded = data;
+                    if (data.running) {
+                        this._applyEmbeddedStartResult({ ...data, success: true });
+                        return;
+                    }
+                    if (data.lastError) {
+                        this.embeddedError = data.lastError;
+                        return;
+                    }
+                    // Still downloading, or still waiting for llama-server to become healthy.
+                }
+                this.embeddedError = _aiI18n.embeddedFailed;
+            } finally {
+                this._embeddedPollActive = false;
+            }
+        },
+
+        embeddedButtonLabel() {
+            if (this.embedded.downloading) {
+                return _aiI18n.embeddedDownloading.replace('{0}', this.embeddedDownloadPercent());
+            }
+            return this.embeddedBusy ? _aiI18n.embeddedStarting : _aiI18n.embeddedStart;
+        },
+
+        embeddedDownloadPercent() {
+            const total = this.embedded.downloadTotalBytes || 0;
+            if (!total) return 0;
+            return Math.min(100, Math.round((this.embedded.downloadedBytes || 0) / total * 100));
+        },
+
+        embeddedDownloadMB() {
+            return {
+                done: Math.round((this.embedded.downloadedBytes || 0) / 1024 / 1024),
+                total: Math.round((this.embedded.downloadTotalBytes || 0) / 1024 / 1024)
+            };
+        },
+
+        async saveEmbeddedConfig() {
+            const dirtyRevision = window.OswlDirty?.revision('ai-embedded');
+            this.embeddedSaving = true;
+            this.embeddedError = null;
+            try {
+                const r = await fetch('/api/settings/ai/embedded/config', {
+                    method: 'PUT',
+                    headers: this.headers(),
+                    body: JSON.stringify({ dir: this.embeddedDirInput, model: this.embeddedModel })
+                });
+                const data = await r.json();
+                this.embedded = data;
+                if (r.ok && data.success) {
+                    const savedCurrentRevision = !window.OswlDirty
+                        || window.OswlDirty.clear('ai-embedded', dirtyRevision);
+                    if (savedCurrentRevision) this.syncEmbeddedInputs();
+                    this.showToast(_aiI18n.embeddedConfigSaved);
+                } else {
+                    this.embeddedError = data.message || _aiI18n.embeddedFailed;
+                }
+            } catch (e) {
+                this.embeddedError = _aiI18n.embeddedFailed;
+            } finally {
+                this.embeddedSaving = false;
+            }
+        },
+
+        async stopEmbedded() {
+            this.embeddedBusy = true;
+            this.embeddedError = null;
+            try {
+                const r = await fetch('/api/settings/ai/embedded/stop', {
+                    method: 'POST',
+                    headers: this.headers()
+                });
+                const data = await r.json().catch(() => ({}));
+                if (!r.ok) {
+                    this.embeddedError = data.message || _aiI18n.embeddedStopFailed;
+                    return;
+                }
+                this.embedded = data;
+                // Stopping the sidecar deactivates the LOCAL provider server-side, so
+                // nothing is serving calls until another entry is saved.
+                this.activeProviderKind = 'OFF';
+                this.showToast(_aiI18n.embeddedStopped);
+            } catch (e) {
+                this.embeddedError = _aiI18n.embeddedStopFailed;
+            } finally {
+                this.embeddedBusy = false;
+            }
+        },
+
+        async loadUsageStats() {
+            try {
+                const r = await fetch('/api/settings/ai/usage');
+                if (r.ok) this.usageStats = await r.json();
+            } catch (e) { /* non-fatal */ }
+        },
+
+        async loadUsageEvents(page) {
+            try {
+                const r = await fetch('/api/settings/ai/usage/events?page=' + page + '&size=10');
+                if (!r.ok) return;
+                const data = await r.json();
+                this.usageEvents = data.content || [];
+                this.usageEventPage = data.number || 0;
+                this.usageEventTotalPages = Math.min(data.totalPages || 0, 10);
+            } catch (e) { /* non-fatal */ }
+        },
+
+        usageEventsPrevPage() { if (this.usageEventPage > 0) this.loadUsageEvents(this.usageEventPage - 1); },
+        usageEventsNextPage() { if (this.usageEventPage + 1 < this.usageEventTotalPages) this.loadUsageEvents(this.usageEventPage + 1); },
+
+        async loadPrompts() {
+            try {
+                const r = await fetch('/api/settings/ai/prompts');
+                if (!r.ok) return;
+                const data = await r.json();
+                this.promptKeys = data.editableKeys || [];
+                this.promptOverrides = data.overrides || {};
+                if (this.promptKeys.length && !this.promptKeys.includes(this.promptEditKey)) {
+                    this.promptEditKey = this.promptKeys[0];
+                }
+                await this.loadPromptEditor(data);
+            } catch (_) { /* optional */ }
+        },
+
+        async loadPromptEditor(cachedPrompts) {
+            const key = this.promptEditKey;
+            if (this.promptOverrides[key]) {
+                this.promptEditText = this.promptOverrides[key];
+                return;
+            }
+            const data = cachedPrompts || await fetch('/api/settings/ai/prompts').then(r => r.json());
+            this.promptEditText = (data.resolvedTemplates && data.resolvedTemplates[key]) || '';
+        },
+
+        toggleCveSeverity(level, checked) {
+            if (checked && !this.preferences.cveSeverities.includes(level)) {
+                this.preferences.cveSeverities.push(level);
+            } else if (!checked) {
+                this.preferences.cveSeverities = this.preferences.cveSeverities.filter(s => s !== level);
+            }
+        },
+
+        headers() { return oswlJsonHeaders(); },
+
+        providerLabel(mode) {
+            const map = {
+                OPENAI: _aiI18n.providerOpenai,
+                ANTHROPIC: _aiI18n.providerAnthropic,
+                GEMINI: _aiI18n.providerGemini,
+                LOCAL: _aiI18n.providerLocal,
+            };
+            return map[mode] || mode;
+        },
+
+        showToast(msg, kind = 'success') {
+            this._toastTimer && clearTimeout(this._toastTimer);
+            this.toastMsg = msg;
+            this.toastKind = kind;
+            this.toastVisible = true;
+            this._toastTimer = setTimeout(() => { this.toastVisible = false; }, kind === 'error' ? 5000 : 3000);
+        },
+
+        preferencePayload() {
+            const severities = this.preferences.cveSeverities.length
+                ? this.preferences.cveSeverities
+                : ['CRITICAL', 'HIGH'];
+            const overrides = { ...this.promptOverrides };
+            if (this.promptEditKey && this.promptEditText) {
+                overrides[this.promptEditKey] = this.promptEditText;
+            }
+            return {
+                promptsLocale: this.preferences.promptsLocale || 'en',
+                cveLimit:      Number(this.preferences.cveLimit) || 10,
+                licenseLimit:  Number(this.preferences.licenseLimit) || 8,
+                cveSeverities: severities.join(','),
+                temperature:   this.preferences.temperature,
+                maxTokens:     this.preferences.maxTokens,
+                dailyCallCap:  Number(this.preferences.dailyCallCap) || 0,
+                defaultDeploymentProfile: this.preferences.defaultDeploymentProfile || 'COMMERCIAL_PRODUCT',
+                reasoningEffort: this.preferences.reasoningEffort || 'DEFAULT',
+                autoBackfillInsights: !!this.preferences.autoBackfillInsights,
+                promptOverrides: Object.keys(overrides).length ? JSON.stringify(overrides) : null
+            };
+        },
+
+        async saveProvider() {
+            if (!this.validParameters()) return;
+            // Embedded AI has no Save: its Start button both activates it and health-checks
+            // the sidecar. The button is hidden for that mode; this is the belt-and-braces.
+            if (this.mode === 'EMBEDDED') return;
+            const providerMode = this.mode;
+            const dirtyRevision = window.OswlDirty?.revision('ai-provider');
+            this.savingProvider = true; this.apiError = null; this.apiErrorHint = null;
+            try {
+                if (providerMode === 'off') {
+                    const r = await fetch('/api/settings/ai/deactivate', {
+                        method: 'PUT',
+                        headers: this.headers()
+                    });
+                    if (r.status === 401) { location.href = '/login'; return; }
+                    if (!r.ok) { this.apiError = _fetchErr(r, _aiI18n.disableFailed); return; }
+                    this.activeProviderKind = 'OFF';
+                    if (window.OswlDirty) window.OswlDirty.clear('ai-provider', dirtyRevision);
+                    this.showToast(this.embedded.running
+                        ? _aiI18n.disabled + ' ' + _aiI18n.activatedEmbeddedStillRunning
+                        : _aiI18n.disabled);
+                    return;
+                }
+                const f = this.forms[providerMode];
+                const body = {
+                    provider:  providerMode,
+                    apiKey:    f.apiKey    || null,
+                    modelName: f.modelName || null,
+                    baseUrl:   f.baseUrl   || null,
+                    activate:  true
+                };
+                const r = await fetch('/api/settings/ai', {
+                    method: 'PUT',
+                    headers: this.headers(),
+                    body: JSON.stringify(body)
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _aiI18n.saveFailed); return; }
+                this.activeProviderKind = providerMode;
+                if (window.OswlDirty) window.OswlDirty.clear('ai-provider', dirtyRevision);
+                let msg = _aiI18n.activated.replace('{0}', this.providerLabel(providerMode));
+                // The sidecar process is a separate on/off control — saving a different
+                // provider does not stop it. Say so, otherwise it keeps consuming memory
+                // while nothing routes to it.
+                if (this.embedded.running) {
+                    msg += ' ' + _aiI18n.activatedEmbeddedStillRunning;
+                }
+                this.showToast(msg);
+            } catch (e) { this.apiError = String(e); }
+            finally { this.savingProvider = false; }
+        },
+
+        parameterEdited(key) {
+            delete this.parameterErrors[key];
+            this.saveFeedback = '';
+            this.apiError = null;
+        },
+        validParameters() {
+            this.parameterErrors = {};
+            this.saveFeedback = '';
+            for (const [key, min, max, integer] of [['temperature', 0, 2, false], ['maxTokens', 256, 8192, true], ['dailyCallCap', 0, 1000000, true]]) {
+                const raw = this.preferences[key];
+                if (raw === null || raw === '') { this.preferences[key] = null; continue; }
+                const value = Number(raw);
+                if (!Number.isFinite(value) || value < min || value > max || (integer && !Number.isInteger(value))) {
+                    this.parameterErrors[key] = _aiI18n[key + 'Invalid'];
+                    continue;
+                }
+                this.preferences[key] = value;
+            }
+            if (Object.keys(this.parameterErrors).length) {
+                this.apiError = _aiI18n.invalidParameters;
+                return false;
+            }
+            return true;
+        },
+        async saveEnrichment() {
+            if (!this.validParameters()) return;
+            const contextRevision = window.OswlDirty?.revision('ai-context');
+            const promptsRevision = window.OswlDirty?.revision('ai-prompts');
+            this.savingEnrichment = true; this.apiError = null; this.apiErrorHint = null;
+            try {
+                const prefs = this.preferencePayload();
+                if (this.mode === 'off') {
+                    const r = await fetch('/api/settings/ai/deactivate', {
+                        method: 'PUT',
+                        headers: this.headers(),
+                        body: JSON.stringify(prefs)
+                    });
+                    if (r.status === 401) { location.href = '/login'; return; }
+                    if (!r.ok) { this.apiError = _fetchErr(r, _aiI18n.saveFailed); return; }
+                    if (window.OswlDirty) {
+                        window.OswlDirty.clear('ai-context', contextRevision);
+                        window.OswlDirty.clear('ai-prompts', promptsRevision);
+                    }
+                    this.saveFeedback = !window.OswlDirty || (window.OswlDirty.revision('ai-context') === contextRevision
+                        && window.OswlDirty.revision('ai-prompts') === promptsRevision) ? _aiI18n.enrichmentSaved : '';
+                    this.showToast(_aiI18n.enrichmentSaved);
+                    return;
+                }
+                const body = {
+                    provider: this.mode === 'EMBEDDED' ? 'LOCAL' : this.mode,
+                    activate: this.mode !== 'EMBEDDED',
+                    ...prefs
+                };
+                const r = await fetch('/api/settings/ai', {
+                    method: 'PUT',
+                    headers: this.headers(),
+                    body: JSON.stringify(body)
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _aiI18n.saveFailed); return; }
+                if (window.OswlDirty) {
+                    window.OswlDirty.clear('ai-context', contextRevision);
+                    window.OswlDirty.clear('ai-prompts', promptsRevision);
+                }
+                this.saveFeedback = !window.OswlDirty || (window.OswlDirty.revision('ai-context') === contextRevision
+                        && window.OswlDirty.revision('ai-prompts') === promptsRevision) ? _aiI18n.enrichmentSaved : '';
+                    this.showToast(_aiI18n.enrichmentSaved);
+            } catch (e) { this.apiError = String(e); }
+            finally { this.savingEnrichment = false; }
+        },
+
+        async testConnection() {
+            // Embedded AI is health-checked by Start itself, and has no API key or
+            // endpoint form to probe.
+            if (this.mode === 'off' || this.mode === 'EMBEDDED') return;
+            this.testing = true;
+            this.apiError = null;
+            this.apiErrorHint = null;
+            try {
+                const f = this.forms[this.mode];
+                const body = {
+                    provider:  this.mode,
+                    apiKey:    f.apiKey    || null,
+                    modelName: f.modelName || null,
+                    baseUrl:   f.baseUrl   || null
+                };
+                const r = await fetch('/api/settings/ai/test-connection', {
+                    method: 'POST',
+                    headers: this.headers(),
+                    body: JSON.stringify(body)
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                const data = await r.json();
+                // The toast is the only notice. A success may still carry a hint (e.g. the
+                // model id was not in the provider's catalogue) — that is a warning, not an
+                // error, so it is toasted rather than left on the page. Hard failures keep the
+                // top banner too, because it is the only place long provider diagnostics fit.
+                const success = !!(r.ok && data.success);
+                const message = data.message
+                    || (success ? _aiI18n.testOk : _aiI18n.testFailed);
+                if (success) {
+                    this.showToast(data.hint ? message + ' — ' + data.hint : message,
+                                   data.hint ? 'error' : 'success');
+                } else {
+                    this.apiError = message;
+                    this.apiErrorHint = data.hint || null;
+                    this.showToast(message, 'error');
+                }
+            } catch (e) {
+                this.apiError = _aiI18n.testFailed;
+                this.apiErrorHint = e.message;
+                this.showToast(this.apiError, 'error');
+            } finally {
+                this.testing = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/cache.js b/src/main/resources/static/js/settings/cache.js
new file mode 100644
index 00000000..033047c5
--- /dev/null
+++ b/src/main/resources/static/js/settings/cache.js
@@ -0,0 +1,92 @@
+function cacheTab() {
+    return {
+        policy: 'custom',           // 'custom' | 'always' | 'permanent'
+        customAmount: 7, customUnit: 'day',
+        unitDropdownOpen: false,
+        items: [],
+        loaded: false, loading: false,
+        saving: false, apiError: null, toast: null, clearConfirm: false,
+        csrf() { return window.OswlCsrf ? window.OswlCsrf.token() : ''; },
+        headers() { return oswlJsonHeaders(); },
+        showToast(msg) { this.toast = msg; setTimeout(()=> this.toast = null, 2500); },
+        formatTtl(hours) {
+            if (!hours || hours <= 0) return _cacheI18n.policyAlways;
+            if (hours >= 24*365*10) return _cacheI18n.permanent;
+            if (hours % 24 === 0) return (hours/24) + ' ' + _cacheI18n.days;
+            return hours + ' ' + _cacheI18n.hours;
+        },
+        async load() {
+            if (this.loading) return;
+            this.loading = true; this.loaded = false; this.apiError = null;
+            try {
+                const r = await fetch('/api/settings/cache');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cacheI18n.loadFailed); return; }
+                this.items = await r.json();
+                // Infer current policy from first item's ttlHours
+                if (this.items.length) {
+                    const h = this.items[0].ttlHours;
+                    if (h === null || h === undefined) { this.policy = 'custom'; this.customAmount = 7; this.customUnit = 'day'; }
+                    else if (h <= 0) this.policy = 'always';
+                    else if (h >= 24*365*10) this.policy = 'permanent';
+                    else {
+                        this.policy = 'custom';
+                        if (h % 24 === 0) { this.customAmount = h/24; this.customUnit = 'day'; }
+                        else { this.customAmount = h; this.customUnit = 'hour'; }
+                    }
+                }
+                this.loaded = true;
+            } catch(e) { this.apiError = _cacheI18n.loadFailed; }
+            finally { this.loading = false; }
+        },
+        ttlSecondsForPolicy() {
+            if (this.policy === 'always') return 1;
+            if (this.policy === 'permanent') return 50 * 365 * 24 * 3600; // 50 years, fits in long
+            const hours = (this.customUnit === 'day') ? this.customAmount * 24 : this.customAmount;
+            return Math.max(1, hours) * 3600;
+        },
+        savedPolicyLabel() {
+            if (this.policy === 'always') return _cacheI18n.policyAlways;
+            if (this.policy === 'permanent') return _cacheI18n.policyPermanent;
+            const unit = this.customUnit === 'day' ? _cacheI18n.days : _cacheI18n.hours;
+            return _cacheI18n.savedCustom.replace('{0}', this.customAmount).replace('{1}', unit);
+        },
+        async save() {
+            if (!this.loaded || this.loading || this.saving) return;
+            const dirtyRevision = window.OswlDirty?.revision('cache');
+            this.saving = true; this.apiError = null;
+            const label = this.savedPolicyLabel(); // capture before any await
+            try {
+                const ttlSeconds = this.ttlSecondsForPolicy();
+                // Apply to every existing cache key
+                for (const c of this.items) {
+                    const r = await fetch('/api/settings/cache', { method: 'PUT', headers: this.headers(), body: JSON.stringify({ cacheKey: c.cacheKey, ttlSeconds }) });
+                    if (r.status === 401) { location.href = '/login'; return; }
+                    if (!r.ok) { this.apiError = _fetchErr(r, _cacheI18n.saveFailed); return; }
+                }
+                // Update items in-place so a re-fetch doesn't overwrite the policy
+                this.items = this.items.map(c => ({
+                    ...c, ttlSeconds, ttlHours: Math.floor(ttlSeconds / 3600)
+                }));
+                if (window.OswlDirty) window.OswlDirty.clear('cache', dirtyRevision);
+                this.showToast(label);
+            } catch (e) { this.apiError = _cacheI18n.saveFailed; }
+            finally { this.saving = false; }
+        },
+        async clearAll() {
+            const dirtyRevision = window.OswlDirty?.revision('cache');
+            this.clearConfirm = false;
+            try {
+                const r = await fetch('/api/settings/cache/clear?cacheKey=ALL', { method: 'POST', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cacheI18n.saveFailed); return; }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('cache', dirtyRevision);
+                if (savedCurrentRevision) await this.load();
+                this.showToast(_cacheI18n.cleared);
+            } catch (e) {
+                this.apiError = _cacheI18n.saveFailed;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/cli.js b/src/main/resources/static/js/settings/cli.js
new file mode 100644
index 00000000..13bb91f8
--- /dev/null
+++ b/src/main/resources/static/js/settings/cli.js
@@ -0,0 +1,86 @@
+function cliTab() {
+    return {
+        keys: [],
+        projects: [],
+        loading: true,
+        slideout: false,
+        creating: false,
+        apiError: null,
+        newTokenBanner: null,
+        form: { projectId: '', label: '' },
+        csrf() { return window.OswlCsrf ? window.OswlCsrf.token() : ''; },
+        headers() { return oswlJsonHeaders(); },
+        formatDate(s) { return s ? s.replace('T', ' ').slice(0, 16) : '—'; },
+
+        async init() {
+            await Promise.all([this.loadKeys(), this.loadProjects()]);
+        },
+        async loadKeys() {
+            this.loading = true;
+            try {
+                const r = await fetch('/api/admin/cli-keys');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cliI18n.loadFailed); return; }
+                this.keys = await r.json();
+            } catch(e) {
+                this.apiError = _cliI18n.loadFailed;
+            } finally {
+                this.loading = false;
+            }
+        },
+        async loadProjects() {
+            try {
+                const r = await fetch('/projects/list');
+                if (r.ok) this.projects = await r.json();
+            } catch(e) { /* non-critical */ }
+        },
+        openCreate() {
+            this.form = { projectId: '', label: '' };
+            this.newTokenBanner = null;
+            this.slideout = true;
+            this.$nextTick(() => oswlTrapFocus(this.$refs.createPanel));
+        },
+        closeCreate() {
+            this.slideout = false;
+            oswlReleaseFocus();
+        },
+        async createKey() {
+            if (!this.form.projectId) return;
+            this.creating = true;
+            try {
+                const body = {
+                    projectId: this.form.projectId,
+                    label: this.form.label.trim() || 'CLI Key'
+                };
+                const r = await fetch('/api/admin/cli-keys', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cliI18n.createFailed); return; }
+                const data = await r.json();
+                this.newTokenBanner = data.token;
+                this.closeCreate();
+                await this.loadKeys();
+            } finally {
+                this.creating = false;
+            }
+        },
+        async toggleKey(k) {
+            try {
+                const r = await fetch(`/api/admin/cli-keys/${k.id}/toggle`, { method: 'PATCH', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cliI18n.updateFailed); return; }
+                await this.loadKeys();
+            } catch(e) { this.apiError = _cliI18n.updateFailed; }
+        },
+        async deleteKey(k) {
+            if (!window.confirm(_cliI18n.deleteConfirm.replace('{0}', k.label || k.projectName || ''))) return;
+            try {
+                const r = await fetch('/api/admin/cli-keys/' + k.id, {method: 'DELETE', headers: this.headers()});
+                if (!r.ok) { this.apiError = _fetchErr(r, _cliI18n.deleteFailed); return; }
+                await this.loadKeys();
+            } catch (_) { this.apiError = _cliI18n.deleteFailed; }
+        },
+        copyToken() {
+            if (this.newTokenBanner) navigator.clipboard.writeText(this.newTokenBanner);
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/config-transfer.js b/src/main/resources/static/js/settings/config-transfer.js
new file mode 100644
index 00000000..58e959b5
--- /dev/null
+++ b/src/main/resources/static/js/settings/config-transfer.js
@@ -0,0 +1,75 @@
+function configTransferTab() {
+    return {
+        exporting: false, applying: false, apiError: null, toast: null,
+        bundle: null, preview: null,
+        showToast(msg) { this.toast = msg; setTimeout(()=> this.toast = null, 2500); },
+        headers() { return oswlJsonHeaders(); },
+        async exportBundle() {
+            this.exporting = true; this.apiError = null;
+            try {
+                const r = await fetch('/api/settings/config-transfer/export');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cfgI18n.exportFailed); return; }
+                const data = await r.json();
+                const blob = new Blob([JSON.stringify(data, null, 2)], { type: 'application/json' });
+                const url = URL.createObjectURL(blob);
+                const a = document.createElement('a');
+                a.href = url;
+                a.download = 'oswl-config-' + new Date().toISOString().slice(0, 10) + '.json';
+                document.body.appendChild(a);
+                a.click();
+                a.remove();
+                setTimeout(() => URL.revokeObjectURL(url), 60000);
+            } catch (e) {
+                this.apiError = _cfgI18n.exportFailed;
+            } finally {
+                this.exporting = false;
+            }
+        },
+        onFileSelected(evt) {
+            const file = evt.target.files && evt.target.files[0];
+            if (!file) return;
+            this.apiError = null; this.preview = null; this.bundle = null;
+            const reader = new FileReader();
+            reader.onload = async () => {
+                try {
+                    this.bundle = JSON.parse(reader.result);
+                } catch (e) {
+                    this.apiError = _cfgI18n.previewFailed;
+                    return;
+                }
+                await this.runPreview();
+            };
+            reader.readAsText(file);
+        },
+        async runPreview() {
+            try {
+                const r = await fetch('/api/settings/config-transfer/import?dryRun=true', {
+                    method: 'POST', headers: this.headers(), body: JSON.stringify(this.bundle)
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cfgI18n.previewFailed); return; }
+                this.preview = await r.json();
+            } catch (e) {
+                this.apiError = _cfgI18n.previewFailed;
+            }
+        },
+        async applyImport() {
+            if (!this.bundle) return;
+            this.applying = true; this.apiError = null;
+            try {
+                const r = await fetch('/api/settings/config-transfer/import?dryRun=false', {
+                    method: 'POST', headers: this.headers(), body: JSON.stringify(this.bundle)
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _cfgI18n.applyFailed); return; }
+                this.preview = await r.json();
+                this.showToast(_cfgI18n.applied);
+            } catch (e) {
+                this.apiError = _cfgI18n.applyFailed;
+            } finally {
+                this.applying = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/diagnostics.js b/src/main/resources/static/js/settings/diagnostics.js
new file mode 100644
index 00000000..75071cae
--- /dev/null
+++ b/src/main/resources/static/js/settings/diagnostics.js
@@ -0,0 +1,128 @@
+function diagnosticsTab() {
+    return {
+        results: [],
+        running: false, apiError: null, toast: null,
+        showToast(msg) { this.toast = msg; setTimeout(()=> this.toast = null, 2500); },
+        statusLabel(s) { return _diagI18n[ (s || '').toLowerCase() ] || s; },
+        statusClass(s) {
+            switch (s) {
+                case 'UP': return 'bg-[rgba(34,197,94,0.12)] text-[#15803d]';
+                case 'DOWN': return 'bg-[rgba(239,68,68,0.12)] text-[#b91c1c]';
+                case 'SKIPPED': return 'bg-[var(--grayscale-10)] text-[var(--grayscale-60)]';
+                default: return 'bg-[rgba(234,179,8,0.12)] text-[#a16207]';
+            }
+        },
+        detailText(r) {
+            if (r.id !== 'disk') return r.detail;
+            const parts = Object.fromEntries((r.detail || '').split(', ').map(p => { const i = p.indexOf('='); return [p.slice(0, i), p.slice(i + 1)]; }));
+            const gib = value => (Number(value) / 1073741824).toLocaleString(document.documentElement.lang, {maximumFractionDigits: 1}) + ' GiB';
+            return _diagI18n.diskSpace.replace('{0}', gib(parts.freeBytes)).replace('{1}', gib(parts.totalBytes)).replace('{2}', parts.freePercent) + '\n' + (parts.path || '');
+        },
+        async run() {
+            this.running = true; this.apiError = null;
+            try {
+                const r = await fetch('/api/settings/diagnostics');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _diagI18n.loadFailed); return; }
+                this.results = await r.json();
+            } catch (e) {
+                this.apiError = _diagI18n.loadFailed;
+            } finally {
+                this.running = false;
+            }
+        },
+        copyForSupport() {
+            const lines = this.results.map(r => `[${r.status}] ${r.label} — ${r.detail}`);
+            const text = lines.join('\n');
+            navigator.clipboard.writeText(text).then(() => this.showToast(_diagI18n.copied)).catch(() => { this.apiError = _diagI18n.copyFailed; });
+        }
+    };
+}
+
+function scanArchivingPanel() {
+    return {
+        projects: [], projectsLoading: false, archError: null,
+        projectId: '', retainCount: '',
+        previewing: false, archiving: false,
+        preview: null, result: null, exportDownloaded: false,
+        resetRun() { this.preview = null; this.result = null; this.exportDownloaded = false; },
+        retainQuery() {
+            const n = parseInt(this.retainCount, 10);
+            return Number.isInteger(n) && n >= 1 ? '?retainCount=' + n : '';
+        },
+        previewText() {
+            if (!this.preview) return '';
+            return this.preview.scans > 0
+                ? _archI18n.previewSummary.replace('{0}', this.preview.scans).replace('{1}', this.preview.components)
+                : _archI18n.previewEmpty;
+        },
+        async loadProjects() {
+            this.projectsLoading = true; this.archError = null;
+            try {
+                const r = await fetch('/api/admin/projects');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.archError = _fetchErr(r, _archI18n.projectsFailed); return; }
+                this.projects = await r.json();
+            } catch (e) {
+                this.archError = _archI18n.projectsFailed;
+            } finally {
+                this.projectsLoading = false;
+            }
+        },
+        async previewExport() {
+            if (!this.projectId) return;
+            this.previewing = true; this.archError = null; this.result = null;
+            try {
+                const r = await fetch('/api/admin/projects/' + this.projectId + '/archive-scans/export' + this.retainQuery());
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.archError = _fetchErr(r, _archI18n.loadFailed); return; }
+                const data = await r.json();
+                this.preview = {
+                    scans: data.length,
+                    components: data.reduce((sum, s) => sum + (s.components ? s.components.length : 0), 0)
+                };
+                if (data.length === 0) { this.exportDownloaded = false; return; }
+                const blob = new Blob([JSON.stringify(data, null, 2)], { type: 'application/json' });
+                const url = URL.createObjectURL(blob);
+                const a = document.createElement('a');
+                a.href = url;
+                a.download = 'oswl-scan-archive-export-p' + this.projectId + '-' + new Date().toISOString().slice(0, 10) + '.json';
+                document.body.appendChild(a);
+                a.click();
+                a.remove();
+                setTimeout(() => URL.revokeObjectURL(url), 60000);
+                this.exportDownloaded = true;
+            } catch (e) {
+                this.archError = _archI18n.loadFailed;
+            } finally {
+                this.previewing = false;
+            }
+        },
+        async archiveNow() {
+            if (!this.projectId) return;
+            const pending = this.preview ? this.preview.scans : '?';
+            const msg = (this.exportDownloaded ? _archI18n.confirm : _archI18n.confirmNoExport)
+                .replace('{0}', pending);
+            if (!window.confirm(msg)) return;
+            this.archiving = true; this.archError = null; this.result = null;
+            try {
+                const r = await fetch('/api/admin/projects/' + this.projectId + '/archive-scans' + this.retainQuery(), {
+                    method: 'POST',
+                    headers: { 'X-XSRF-TOKEN': window.OswlCsrf ? window.OswlCsrf.token() : '' }
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.archError = _fetchErr(r, _archI18n.loadFailed); return; }
+                const data = await r.json();
+                this.result = _archI18n.result
+                    .replace('{0}', data.archivedNow)
+                    .replace('{1}', data.totalCompletedScans)
+                    .replace('{2}', data.retainCount);
+                this.preview = null; this.exportDownloaded = false;
+            } catch (e) {
+                this.archError = _archI18n.loadFailed;
+            } finally {
+                this.archiving = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/license-policy.js b/src/main/resources/static/js/settings/license-policy.js
new file mode 100644
index 00000000..9df386fb
--- /dev/null
+++ b/src/main/resources/static/js/settings/license-policy.js
@@ -0,0 +1,178 @@
+function licensePolicyTab() {
+    return {
+        entries: [],
+        searchQuery: '',
+        page: 0,
+        pageSize: 50,
+        renderCount: 50,
+        total: 0,
+        hasMore: false,
+        allLoaded: false,
+        fetching: false,
+        prefetching: false,
+        _prefetchToken: 0,
+        _scrollObserver: null,
+        openStatusDropdown: null,
+        statusOptions: [
+            { value: 'PERMITTED',  label: _licensePolicyI18n.statusPermitted },
+            { value: 'CAUTION',    label: _licensePolicyI18n.statusCaution },
+            { value: 'RESTRICTED', label: _licensePolicyI18n.statusRestricted },
+            { value: 'UNKNOWN',    label: _licensePolicyI18n.statusUnknown }
+        ],
+        apiError: null,
+        toastVisible: false,
+        toastMsg: '',
+        headers() { return oswlJsonHeaders(); },
+        statusLabel(status) {
+            const opt = this.statusOptions.find(o => o.value === status);
+            return opt ? opt.label : status;
+        },
+        get filteredPool() {
+            const q = this.searchQuery.trim().toLowerCase();
+            if (!q) return this.entries;
+            if (!this.allLoaded) return this.entries;
+            return this.entries.filter(entry => {
+                const id = (entry.spdxId || '').toLowerCase();
+                const name = (entry.displayName || '').toLowerCase();
+                return id.includes(q) || name.includes(q);
+            });
+        },
+        get visibleEntries() {
+            return this.filteredPool.slice(0, this.renderCount);
+        },
+        get canExpandRender() {
+            return this.allLoaded && this.renderCount < this.filteredPool.length;
+        },
+        resultSummary() {
+            const q = this.searchQuery.trim();
+            if (q) {
+                const count = this.allLoaded ? this.filteredPool.length : this.total;
+                return _licensePolicyI18n.searchSummary.replace('{0}', String(count));
+            }
+            return _licensePolicyI18n.resultSummary.replace('{0}', String(this.total));
+        },
+        init() {
+            this.$nextTick(() => {
+                this._scrollObserver = new IntersectionObserver((hits) => {
+                    if (hits.some(h => h.isIntersecting)) this.loadMore();
+                }, { rootMargin: '320px' });
+                if (this.$refs.scrollSentinel) {
+                    this._scrollObserver.observe(this.$refs.scrollSentinel);
+                }
+            });
+            this.resetAndLoad();
+        },
+        showToast(msg) {
+            this.toastMsg = msg;
+            this.toastVisible = true;
+            setTimeout(() => { this.toastVisible = false; }, 2500);
+        },
+        onSearchChange() {
+            if (this.allLoaded) {
+                this.renderCount = this.pageSize;
+                return;
+            }
+            this.resetAndLoad();
+        },
+        async resetAndLoad() {
+            this._prefetchToken++;
+            const token = this._prefetchToken;
+            // Rows are discarded here, so any unsaved status edits are gone too.
+            if (window.OswlDirty) window.OswlDirty.clear('license-policy');
+            this.prefetching = false;
+            this.allLoaded = false;
+            this.renderCount = this.pageSize;
+            this.page = 0;
+            this.entries = [];
+            this.hasMore = false;
+            this.total = 0;
+            await this.fetchPage(0, false, token);
+            if (token !== this._prefetchToken) return;
+            if (!this.searchQuery.trim()) {
+                this.prefetchRemaining(token);
+            }
+        },
+        async loadMore() {
+            if (this.canExpandRender) {
+                this.renderCount = Math.min(this.renderCount + this.pageSize, this.filteredPool.length);
+                return;
+            }
+            if (!this.hasMore || this.fetching || this.prefetching) return;
+            if (this.searchQuery.trim() && !this.allLoaded) return;
+            const token = this._prefetchToken;
+            await this.fetchPage(this.page + 1, true, token);
+        },
+        async prefetchRemaining(token) {
+            if (this.prefetching || token !== this._prefetchToken) return;
+            this.prefetching = true;
+            try {
+                while (this.hasMore && token === this._prefetchToken && !this.searchQuery.trim()) {
+                    await this.fetchPage(this.page + 1, true, token);
+                    await new Promise(resolve => setTimeout(resolve, 0));
+                }
+                if (token === this._prefetchToken && !this.hasMore) {
+                    this.allLoaded = true;
+                }
+            } finally {
+                if (token === this._prefetchToken) {
+                    this.prefetching = false;
+                }
+            }
+        },
+        async fetchPage(page, append, token) {
+            if (token !== this._prefetchToken) return;
+            this.fetching = true;
+            this.apiError = null;
+            try {
+                const params = new URLSearchParams({
+                    page: String(page),
+                    size: String(this.pageSize)
+                });
+                const q = this.searchQuery.trim();
+                if (q) params.set('q', q);
+                const r = await fetch('/api/settings/license-policy?' + params.toString());
+                if (token !== this._prefetchToken) return;
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _licensePolicyI18n.loadFailed); return; }
+                const data = await r.json();
+                this.page = data.page;
+                this.total = data.total;
+                this.hasMore = data.hasMore;
+                const items = (data.items || []).map(it => ({ ...it, _savedStatus: it.status }));
+                this.entries = append ? this.entries.concat(items) : items;
+                if (!this.hasMore && !q) {
+                    this.allLoaded = true;
+                }
+            } catch (e) {
+                if (token === this._prefetchToken) {
+                    this.apiError = _licensePolicyI18n.loadFailed;
+                }
+            } finally {
+                if (token === this._prefetchToken) {
+                    this.fetching = false;
+                }
+            }
+        },
+        async save(entry) {
+            const dirtyRevision = window.OswlDirty?.revision('license-policy');
+            const savedStatus = entry.status;
+            this.apiError = null;
+            try {
+                const encoded = encodeURIComponent(entry.spdxId);
+                const r = await fetch('/api/settings/license-policy/' + encoded, {
+                    method: 'PUT', headers: this.headers(), body: JSON.stringify({ status: savedStatus })
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _licensePolicyI18n.saveFailed); return; }
+                entry._savedStatus = savedStatus;
+                // Rows save individually — keep the warning while other rows still differ.
+                if (window.OswlDirty && !this.entries.some(e => e.status !== e._savedStatus)) {
+                    window.OswlDirty.clear('license-policy', dirtyRevision);
+                }
+                this.showToast(_licensePolicyI18n.saved);
+            } catch (e) {
+                this.apiError = _licensePolicyI18n.saveFailed;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/policy.js b/src/main/resources/static/js/settings/policy.js
new file mode 100644
index 00000000..313b88f7
--- /dev/null
+++ b/src/main/resources/static/js/settings/policy.js
@@ -0,0 +1,366 @@
+function policyTab() {
+    return {
+        subTab: initialSettingsSection('policies', ['policies', 'waivers', 'sync']),
+        apiError: null,
+        retryTarget: null,
+        toastVisible: false, toastMsg: '',
+
+        scopeOptions: { organization: null, teams: [], projects: [] },
+        scopeOptionsLoading: false,
+        scopeOptionsLoaded: false,
+        scopeOptionsFailed: false,
+        policies: [],
+        policiesLoading: false,
+        formOpen: false,
+        editingId: null,
+        form: { scopeType: 'PROJECT', scopeId: '', name: '', description: '', locked: false, enabled: true,
+                 failOnSeverity: '', failOnKev: '', failOnEpss: '', failOnLicenseViolation: '', onlyNew: '', onlyReachable: '', failOnSecrets: '' },
+
+        waiverProjectId: '',
+        exceptions: [],
+        exceptionsLoading: false,
+        waiverFormOpen: false,
+        waiverForm: { reason: '', expiry: '', targetType: 'ALL', targetId: '', componentCoordinate: '' },
+
+        importText: '',
+        importing: false,
+        importResult: null,
+        exportingAll: false,
+        gitops: { projectId: '', repositoryUrl: '', accessToken: '', branch: '' },
+        gitopsSyncing: false,
+        gitopsResult: null,
+        gitopsOk: true,
+        effectiveProjectId: '',
+        effective: null,
+        effectiveLoading: false,
+
+        headers() { return oswlJsonHeaders(); },
+        showToast(msg) { this.toastMsg = msg; this.toastVisible = true; setTimeout(() => { this.toastVisible = false; }, 2500); },
+        formatTime(iso) {
+            if (!iso) return '-';
+            const d = new Date(iso);
+            return d.toLocaleString(undefined, { year: 'numeric', month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' });
+        },
+
+        init() {
+            onSettingsSectionPopstate(() => {
+                const section = initialSettingsSection('policies', ['policies', 'waivers', 'sync']);
+                if (this.subTab !== section) this.subTab = section;
+            });
+            this.loadScopeOptions();
+            this.loadPolicies();
+        },
+        selectSubTab(key) {
+            this.subTab = key;
+            syncSettingsSection(key);
+        },
+
+        retry() {
+            if (this.retryTarget === 'scope') return this.loadScopeOptions();
+            if (this.retryTarget === 'exceptions') return this.loadExceptions(false);
+            if (this.retryTarget === 'effective') return this.loadEffective();
+            return this.loadPolicies();
+        },
+
+        async loadScopeOptions() {
+            if (this.scopeOptionsLoading) return;
+            this.scopeOptionsLoading = true;
+            this.scopeOptionsFailed = false;
+            try {
+                const r = await fetch('/api/policies/scope-options');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) throw new Error('scope options failed');
+                this.scopeOptions = await r.json();
+                this.scopeOptionsLoaded = true;
+                if (this.retryTarget === 'scope') {
+                    this.apiError = null;
+                    this.retryTarget = null;
+                }
+            } catch (e) {
+                this.scopeOptionsFailed = true;
+                this.apiError = _policyI18n.scopeLoadFailed;
+                this.retryTarget = 'scope';
+            } finally {
+                this.scopeOptionsLoading = false;
+            }
+        },
+
+        async loadPolicies() {
+            this.policiesLoading = true;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.loadFailed); this.retryTarget = 'policies'; return; }
+                this.policies = await r.json();
+                if (this.retryTarget === 'policies') this.retryTarget = null;
+            } catch (e) {
+                this.apiError = _policyI18n.loadFailed;
+                this.retryTarget = 'policies';
+            } finally {
+                this.policiesLoading = false;
+            }
+        },
+
+        scopeOptionsFor(scopeType) {
+            if (scopeType === 'TEAM') return this.scopeOptions.teams || [];
+            if (scopeType === 'PROJECT') return this.scopeOptions.projects || [];
+            return [];
+        },
+
+        emptyForm() {
+            return { scopeType: 'PROJECT', scopeId: '', name: '', description: '', locked: false, enabled: true,
+                     failOnSeverity: '', failOnKev: '', failOnEpss: '', failOnLicenseViolation: '', onlyNew: '', onlyReachable: '', failOnSecrets: '' };
+        },
+        openNewPolicy() {
+            this.editingId = null;
+            this.form = this.emptyForm();
+            this.formOpen = true;
+        },
+        openEditPolicy(p) {
+            this.editingId = p.id;
+            this.form = {
+                scopeType: p.scope, scopeId: p.scopeId != null ? String(p.scopeId) : '',
+                name: p.name, description: p.description || '',
+                locked: p.locked, enabled: p.enabled,
+                failOnSeverity: p.failOnSeverity || '',
+                failOnKev: p.failOnKev === null || p.failOnKev === undefined ? '' : String(p.failOnKev),
+                failOnEpss: p.failOnEpss === null || p.failOnEpss === undefined ? '' : String(p.failOnEpss),
+                failOnLicenseViolation: p.failOnLicenseViolation === null || p.failOnLicenseViolation === undefined ? '' : String(p.failOnLicenseViolation),
+                onlyNew: p.onlyNew === null || p.onlyNew === undefined ? '' : String(p.onlyNew),
+                onlyReachable: p.onlyReachable === null || p.onlyReachable === undefined ? '' : String(p.onlyReachable),
+                failOnSecrets: p.failOnSecrets === null || p.failOnSecrets === undefined ? '' : String(p.failOnSecrets)
+            };
+            this.formOpen = true;
+        },
+        closeForm() {
+            this.formOpen = false;
+            // Cancel discards the edits, so the leave-warning must go with them.
+            if (window.OswlDirty) window.OswlDirty.clear('policy');
+        },
+        triBool(v) { return v === '' ? null : v === 'true'; },
+
+        async savePolicy() {
+            this.apiError = null;
+            if (!this.form.name || !this.form.name.trim()) { this.apiError = _policyI18n.nameRequired; return; }
+            const scopeId = this.form.scopeType === 'ORGANIZATION'
+                ? (this.scopeOptions.organization ? this.scopeOptions.organization.id : null)
+                : (this.form.scopeId ? Number(this.form.scopeId) : null);
+            if (!scopeId) { this.apiError = _policyI18n.scopeRequired; return; }
+            const body = {
+                scopeType: this.form.scopeType,
+                scopeId: scopeId,
+                name: this.form.name,
+                description: this.form.description,
+                locked: this.form.locked,
+                enabled: this.form.enabled,
+                failOnSeverity: this.form.failOnSeverity || null,
+                failOnKev: this.triBool(this.form.failOnKev),
+                failOnEpss: this.form.failOnEpss === '' ? null : Number(this.form.failOnEpss),
+                failOnLicenseViolation: this.triBool(this.form.failOnLicenseViolation),
+                onlyNew: this.triBool(this.form.onlyNew),
+                onlyReachable: this.triBool(this.form.onlyReachable),
+                failOnSecrets: this.triBool(this.form.failOnSecrets)
+            };
+            const dirtyRevision = window.OswlDirty?.revision('policy');
+            try {
+                const url = this.editingId ? ('/api/policies/' + this.editingId) : '/api/policies';
+                const method = this.editingId ? 'PUT' : 'POST';
+                const r = await fetch(url, { method, headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.saveFailed); return; }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('policy', dirtyRevision);
+                if (savedCurrentRevision) this.formOpen = false;
+                await this.loadPolicies();
+                this.showToast(_policyI18n.saved);
+            } catch (e) {
+                this.apiError = _policyI18n.saveFailed;
+            }
+        },
+
+        async deletePolicy(p) {
+            if (!confirm(_policyI18n.confirmDelete)) return;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/' + p.id, { method: 'DELETE', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.deleteFailed); return; }
+                await this.loadPolicies();
+                this.showToast(_policyI18n.deleted);
+            } catch (e) {
+                this.apiError = _policyI18n.deleteFailed;
+            }
+        },
+
+        gateSummary(p) {
+            const parts = [];
+            if (p.failOnSeverity) parts.push(p.failOnSeverity);
+            if (p.failOnKev === true) parts.push('KEV');
+            if (p.failOnEpss !== null && p.failOnEpss !== undefined) parts.push('EPSS≥' + p.failOnEpss);
+            if (p.failOnLicenseViolation === true) parts.push('License');
+            if (p.onlyNew === true) parts.push('New-only');
+            if (p.onlyReachable === true) parts.push('Reachable-only');
+            if (p.failOnSecrets === true) parts.push('Secrets');
+            return parts.length ? parts.join(' · ') : _policyI18n.noOverrides;
+        },
+
+        openNewWaiver() {
+            this.waiverForm = { reason: '', expiry: '', targetType: 'ALL', targetId: '', componentCoordinate: '' };
+            this.waiverFormOpen = true;
+        },
+        async loadExceptions(discardDraft = true) {
+            // Switching projects discards the half-filled waiver form.
+            if (discardDraft) {
+                this.waiverFormOpen = false;
+                if (window.OswlDirty) window.OswlDirty.clear('policy-waiver');
+            }
+            if (!this.waiverProjectId) { this.exceptions = []; return; }
+            this.exceptionsLoading = true;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/exceptions/' + this.waiverProjectId);
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.waiverLoadFailed); this.retryTarget = 'exceptions'; return; }
+                this.exceptions = await r.json();
+                if (this.retryTarget === 'exceptions') this.retryTarget = null;
+            } catch (e) {
+                this.apiError = _policyI18n.waiverLoadFailed;
+                this.retryTarget = 'exceptions';
+            } finally {
+                this.exceptionsLoading = false;
+            }
+        },
+        async submitWaiver() {
+            if (!this.waiverProjectId) return;
+            const dirtyRevision = window.OswlDirty?.revision('policy-waiver');
+            this.apiError = null;
+            try {
+                const body = {
+                    projectId: Number(this.waiverProjectId),
+                    reason: this.waiverForm.reason,
+                    expiry: this.waiverForm.expiry ? (this.waiverForm.expiry + 'T23:59:59') : null,
+                    targetType: this.waiverForm.targetType,
+                    targetId: this.waiverForm.targetId || null,
+                    componentCoordinate: this.waiverForm.componentCoordinate || null
+                };
+                const r = await fetch('/api/policies/exceptions', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.waiverRequestFailed); return; }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('policy-waiver', dirtyRevision);
+                this.waiverFormOpen = !savedCurrentRevision;
+                await this.loadExceptions(false);
+                this.showToast(_policyI18n.waiverRequested);
+            } catch (e) {
+                this.apiError = _policyI18n.waiverRequestFailed;
+            }
+        },
+        async approveWaiver(ex) {
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/exceptions/' + ex.id + '/approve', { method: 'POST', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.waiverActionFailed); return; }
+                await this.loadExceptions();
+                this.showToast(_policyI18n.waiverApproved);
+            } catch (e) { this.apiError = _policyI18n.waiverActionFailed; }
+        },
+        async revokeWaiver(ex) {
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/exceptions/' + ex.id + '/revoke', { method: 'POST', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.waiverActionFailed); return; }
+                await this.loadExceptions();
+                this.showToast(_policyI18n.waiverRevoked);
+            } catch (e) { this.apiError = _policyI18n.waiverActionFailed; }
+        },
+
+        async exportAll() {
+            this.exportingAll = true;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/export');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.exportFailed); return; }
+                const text = await r.text();
+                const blob = new Blob([text], { type: 'application/x-yaml' });
+                const url = URL.createObjectURL(blob);
+                const a = document.createElement('a');
+                a.href = url;
+                a.download = 'oswl-policies-' + new Date().toISOString().slice(0, 10) + '.yaml';
+                a.click();
+                URL.revokeObjectURL(url);
+            } catch (e) {
+                this.apiError = _policyI18n.exportFailed;
+            } finally {
+                this.exportingAll = false;
+            }
+        },
+        async importYaml() {
+            if (!this.importText.trim()) return;
+            const dirtyRevision = window.OswlDirty?.revision('policy-import');
+            this.importing = true;
+            this.apiError = null;
+            this.importResult = null;
+            try {
+                const r = await fetch('/api/policies/import', {
+                    method: 'POST', headers: this.headers(), body: JSON.stringify({ yaml: this.importText })
+                });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.importFailed); return; }
+                const data = await r.json();
+                this.importResult = _policyI18n.importResult.replace('{0}', String(data.length));
+                if (window.OswlDirty) window.OswlDirty.clear('policy-import', dirtyRevision);
+                await this.loadPolicies();
+            } catch (e) {
+                this.apiError = _policyI18n.importFailed;
+            } finally {
+                this.importing = false;
+            }
+        },
+        async gitopsSync() {
+            if (!this.gitops.projectId || !this.gitops.repositoryUrl) return;
+            this.gitopsSyncing = true;
+            this.apiError = null;
+            this.gitopsResult = null;
+            try {
+                const body = {
+                    projectId: Number(this.gitops.projectId),
+                    repositoryUrl: this.gitops.repositoryUrl,
+                    accessToken: this.gitops.accessToken || null,
+                    branch: this.gitops.branch || null
+                };
+                const r = await fetch('/api/policies/gitops-sync', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.gitopsOk = false; this.gitopsResult = _fetchErr(r, _policyI18n.gitopsFailed); return; }
+                this.gitopsOk = true;
+                this.gitopsResult = _policyI18n.gitopsSuccess;
+                await this.loadPolicies();
+            } catch (e) {
+                this.gitopsOk = false;
+                this.gitopsResult = _policyI18n.gitopsFailed;
+            } finally {
+                this.gitopsSyncing = false;
+            }
+        },
+        async loadEffective() {
+            if (!this.effectiveProjectId) return;
+            this.effectiveLoading = true;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/policies/effective/' + this.effectiveProjectId);
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _policyI18n.effectiveLoadFailed); this.retryTarget = 'effective'; return; }
+                this.effective = await r.json();
+                if (this.retryTarget === 'effective') this.retryTarget = null;
+            } catch (e) {
+                this.apiError = _policyI18n.effectiveLoadFailed;
+                this.retryTarget = 'effective';
+            } finally {
+                this.effectiveLoading = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/reports.js b/src/main/resources/static/js/settings/reports.js
new file mode 100644
index 00000000..c1ad1698
--- /dev/null
+++ b/src/main/resources/static/js/settings/reports.js
@@ -0,0 +1,85 @@
+function reportsTab() {
+return {
+    form: {
+        companyName: '',
+        logoDataUri: '',
+        headerText: '',
+        showCoverPage: false
+    },
+    loaded: false, loading: false,
+    saving: false,
+    apiError: null,
+    loadError: false,
+    toastVisible: false,
+    toastMsg: '',
+
+    init() {
+        this.load();
+    },
+
+    showToast(msg) {
+        this.toastMsg = msg;
+        this.toastVisible = true;
+        setTimeout(() => { this.toastVisible = false; }, 3000);
+    },
+
+    async load() {
+        if (this.loading) return;
+        this.loading = true; this.loaded = false; this.apiError = null;
+        try {
+            const r = await fetch('/api/settings/report-branding', { headers: oswlJsonHeaders() });
+            if (!r.ok) { this.apiError = _fetchErr(r, _reportsI18n.backendError); this.loadError = true; return; }
+            const d = await r.json();
+            this.form.companyName = d.companyName || '';
+            this.form.logoDataUri = d.logoDataUri || '';
+            this.form.headerText = d.headerText || '';
+            this.form.showCoverPage = !!d.showCoverPage;
+            this.loadError = false; this.loaded = true;
+        } catch (e) { this.apiError = _reportsI18n.backendError; this.loadError = true; }
+        finally { this.loading = false; }
+    },
+
+    onLogoSelected(event) {
+        const file = event.target.files && event.target.files[0];
+        event.target.value = '';
+        if (!file) return;
+        if (!/^image\/(png|jpeg|svg\+xml)$/.test(file.type)) {
+            this.apiError = _reportsI18n.logoInvalid;
+            return;
+        }
+        if (file.size > 350 * 1024) {
+            this.apiError = _reportsI18n.logoTooLarge;
+            return;
+        }
+        const reader = new FileReader();
+        reader.onload = () => { this.apiError = null; this.form.logoDataUri = reader.result; };
+        reader.onerror = () => { this.apiError = _reportsI18n.backendError; };
+        reader.readAsDataURL(file);
+    },
+
+    async save() {
+        if (!this.loaded || this.loading || this.saving) return;
+        const dirtyRevision = window.OswlDirty?.revision('reports');
+        this.saving = true;
+        this.apiError = null;
+        try {
+            const r = await fetch('/api/settings/report-branding', {
+                method: 'PUT',
+                headers: oswlJsonHeaders(),
+                body: JSON.stringify(this.form)
+            });
+            if (r.ok) {
+                if (window.OswlDirty) window.OswlDirty.clear('reports', dirtyRevision);
+                this.showToast(_reportsI18n.saved);
+            } else {
+                const body = await r.json().catch(() => ({}));
+                this.apiError = body.error || _fetchErr(r, _reportsI18n.backendError);
+            }
+        } catch (e) {
+            this.apiError = _reportsI18n.backendError;
+        } finally {
+            this.saving = false;
+        }
+    }
+};
+}
diff --git a/src/main/resources/static/js/settings/security.js b/src/main/resources/static/js/settings/security.js
new file mode 100644
index 00000000..1339db3f
--- /dev/null
+++ b/src/main/resources/static/js/settings/security.js
@@ -0,0 +1,147 @@
+function securityTab() {
+    return {
+        // ── Mail Server ──
+        mailMode: 'DISABLED',
+        mailForm: {
+            host: '',
+            port: 587,
+            encryption: 'STARTTLS',
+            username: '',
+            password: '',
+            senderName: 'OsWL',
+            senderAddress: ''
+        },
+        mailTesting: false,
+        mailSaving: false,
+        mailTestStatus: null,   // null | 'ok' | 'error'
+        mailTestMessage: '',
+
+        // ── Two-Factor Auth ──
+        twoFaMode: 'DISABLED',
+        twoFaSaving: false,
+
+        // ── Common ──
+        apiError: null,
+        loaded: false,
+        loading: false,
+        toastVisible: false,
+        toastMsg: '',
+
+        init() {
+            this.load();
+        },
+
+        async load() {
+            if (this.loading) return;
+            this.loaded = false;
+            this.loading = true;
+            this.apiError = null;
+            try {
+                const d = await OswlHttp.json('/api/settings/security');
+                if (!['DISABLED', 'SMTP'].includes(d.mailMode) || !['DISABLED', 'EMAIL_OTP'].includes(d.twoFaMode))
+                    throw new OswlHttp.HttpError('server', 0);
+                if (d.mailMode)  this.mailMode  = d.mailMode;
+                if (d.twoFaMode) this.twoFaMode = d.twoFaMode;
+                if (d.mail) {
+                    if (d.mail.host          != null) this.mailForm.host          = d.mail.host;
+                    if (d.mail.port          != null) this.mailForm.port          = d.mail.port;
+                    if (d.mail.encryption    != null) this.mailForm.encryption    = d.mail.encryption;
+                    if (d.mail.username      != null) this.mailForm.username      = d.mail.username;
+                    if (d.mail.senderName    != null) this.mailForm.senderName    = d.mail.senderName;
+                    if (d.mail.senderAddress != null) this.mailForm.senderAddress = d.mail.senderAddress;
+                }
+                this.loaded = true;
+            } catch (e) { this.apiError = _securityI18n[e.kind] || _securityI18n.backendNotConnected; }
+            finally { this.loading = false; }
+        },
+
+        showToast(msg) {
+            this.toastMsg = msg;
+            this.toastVisible = true;
+            setTimeout(() => { this.toastVisible = false; }, 3000);
+        },
+
+        applyEncryptionDefaults(enc) {
+            if (enc === 'STARTTLS') this.mailForm.port = 587;
+            else if (enc === 'SSL_TLS') this.mailForm.port = 465;
+            else if (enc === 'NONE') this.mailForm.port = 25;
+        },
+
+        async testMail() {
+            if (!this.loaded || this.loading) return;
+            this.mailTesting = true;
+            this.mailTestStatus = null;
+            this.mailTestMessage = '';
+            try {
+                const r = await OswlHttp.request('/api/settings/security/mail/test', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ ...this.mailForm })
+                });
+                if (r.ok) {
+                    this.mailTestStatus = 'ok';
+                    this.mailTestMessage = _securityI18n.testOk;
+                } else {
+                    const body = await r.json().catch(() => ({}));
+                    this.mailTestStatus = 'error';
+                    this.mailTestMessage = body.message || _securityI18n.mailTestFailed.replace('{0}', r.status);
+                }
+            } catch (e) {
+                this.mailTestStatus = 'error';
+                this.mailTestMessage = _securityI18n[e.kind] || _securityI18n.backendNotConnected;
+            } finally {
+                this.mailTesting = false;
+            }
+        },
+
+        async saveMail() {
+            if (!this.loaded || this.loading || this.mailSaving) return;
+            const dirtyRevision = window.OswlDirty?.revision('security-mail');
+            this.mailSaving = true;
+            this.apiError = null;
+            try {
+                const r = await OswlHttp.request('/api/settings/security', {
+                    method: 'PUT',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ mailMode: this.mailMode, mail: this.mailForm })
+                });
+                if (r.ok) {
+                    if (window.OswlDirty) window.OswlDirty.clear('security-mail', dirtyRevision);
+                    this.showToast(_securityI18n.saved);
+                } else {
+                    const body = await r.json().catch(() => ({}));
+                    this.apiError = body.message || _securityI18n.backendNotConnected;
+                }
+            } catch (e) {
+                this.apiError = _securityI18n[e.kind] || _securityI18n.backendNotConnected;
+            } finally {
+                this.mailSaving = false;
+            }
+        },
+
+        async saveTwoFa() {
+            if (!this.loaded || this.loading || this.twoFaSaving) return;
+            const dirtyRevision = window.OswlDirty?.revision('security-2fa');
+            this.twoFaSaving = true;
+            this.apiError = null;
+            try {
+                const r = await OswlHttp.request('/api/settings/security', {
+                    method: 'PUT',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ twoFaMode: this.twoFaMode })
+                });
+                if (r.ok) {
+                    if (window.OswlDirty) window.OswlDirty.clear('security-2fa', dirtyRevision);
+                    this.showToast(_securityI18n.saved);
+                } else {
+                    const body = await r.json().catch(() => ({}));
+                    this.apiError = body.message || _securityI18n.backendNotConnected;
+                }
+            } catch (e) {
+                this.apiError = _securityI18n[e.kind] || _securityI18n.backendNotConnected;
+            } finally {
+                this.twoFaSaving = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/settings-dirty.js b/src/main/resources/static/js/settings/settings-dirty.js
new file mode 100644
index 00000000..bd22cb1b
--- /dev/null
+++ b/src/main/resources/static/js/settings/settings-dirty.js
@@ -0,0 +1,84 @@
+/**
+ * Unsaved-changes guard for the settings page.
+ *
+ * Tab navigation on /settings is a full page load, so a single beforeunload handler covers
+ * both tab switches and closing the browser — no custom confirm modal is needed.
+ *
+ * Markup contract:
+ *   data-dirty-scope="name"  on a container — edits inside it mark that scope dirty.
+ *   data-dirty-mark          on a button — clicks mark the enclosing scope dirty, for the
+ *                            custom radios/dropdowns/pills that fire no input/change event.
+ *   data-dirty-ignore        on an element — excluded (search/filter boxes that save nothing).
+ *
+ * Before sending a save, tabs capture window.OswlDirty.revision(scope), then pass that
+ * revision to clear(scope, revision) after success. Edits made while the request is in
+ * flight advance the revision and therefore remain dirty. A failed save never clears.
+ *
+ * This guard is event/revision based rather than value based: changing a value and then
+ * restoring it still counts as unsaved activity until a save succeeds or the owning UI
+ * explicitly discards the edit with clear(scope).
+ */
+(function () {
+    const dirtyScopes = new Set();
+    const revisions = new Map();
+
+    function scopeOf(el) {
+        const container = el.closest('[data-dirty-scope]');
+        return container ? container.getAttribute('data-dirty-scope') : null;
+    }
+
+    function notify() {
+        document.dispatchEvent(new CustomEvent('oswl:dirty-change', {
+            detail: { scopes: Array.from(dirtyScopes), count: dirtyScopes.size }
+        }));
+    }
+
+    window.OswlDirty = {
+        mark(scope) {
+            if (!scope) return;
+            revisions.set(scope, (revisions.get(scope) || 0) + 1);
+            dirtyScopes.add(scope);
+            notify();
+        },
+        revision(scope) { return revisions.get(scope) || 0; },
+        clear(scope, savedRevision) {
+            if (savedRevision !== undefined && savedRevision !== (revisions.get(scope) || 0)) {
+                return false;
+            }
+            dirtyScopes.delete(scope);
+            notify();
+            return true;
+        },
+        clearAll() { dirtyScopes.clear(); notify(); },
+        scopes() { return Array.from(dirtyScopes); },
+        isDirty() { return dirtyScopes.size > 0; }
+    };
+
+    // Native inputs/textareas/selects (including sr-only ones behind custom styling).
+    ['input', 'change'].forEach((type) => {
+        document.addEventListener(type, (e) => {
+            // Alpine dispatches synthetic change events while initializing x-model.
+            if (!e.isTrusted) return;
+            const t = e.target;
+            if (!(t instanceof Element)) return;
+            if (t.closest('[data-dirty-ignore]')) return;
+            window.OswlDirty.mark(scopeOf(t));
+        });
+    });
+
+    // Custom click-based controls (radio images, listbox options, toggle pills).
+    document.addEventListener('click', (e) => {
+        if (!e.isTrusted) return;
+        const t = e.target;
+        if (!(t instanceof Element)) return;
+        const trigger = t.closest('[data-dirty-mark]');
+        if (!trigger || trigger.closest('[data-dirty-ignore]')) return;
+        window.OswlDirty.mark(scopeOf(trigger));
+    });
+
+    window.addEventListener('beforeunload', (e) => {
+        if (dirtyScopes.size === 0) return;
+        e.preventDefault();
+        e.returnValue = ''; // legacy browsers
+    });
+})();
diff --git a/src/main/resources/static/js/settings/settings-subtabs.js b/src/main/resources/static/js/settings/settings-subtabs.js
new file mode 100644
index 00000000..f02f6b60
--- /dev/null
+++ b/src/main/resources/static/js/settings/settings-subtabs.js
@@ -0,0 +1,25 @@
+/**
+ * Shared helpers for settings tabs with their own sub-tab navigation (admin, ai), so a
+ * documentation link like /settings?tab=ai§ion=prompts opens directly on that sub-tab
+ * instead of always landing on the default one.
+ */
+function initialSettingsSection(defaultKey, allowedKeys) {
+    const params = new URLSearchParams(window.location.search);
+    const requested = params.get('section');
+    return requested && (!allowedKeys || allowedKeys.includes(requested)) ? requested : defaultKey;
+}
+
+function syncSettingsSection(key) {
+    const url = new URL(window.location);
+    url.searchParams.set('section', key);
+    if (window.location.href !== url.href) {
+        history.pushState({ section: key }, '', url);
+    }
+    window.dispatchEvent(new CustomEvent('oswl:settings-section', { detail: key }));
+}
+
+function onSettingsSectionPopstate(callback) {
+    const handler = () => callback();
+    window.addEventListener('popstate', handler);
+    return () => window.removeEventListener('popstate', handler);
+}
diff --git a/src/main/resources/static/js/settings/vcs.js b/src/main/resources/static/js/settings/vcs.js
new file mode 100644
index 00000000..88d6fe8c
--- /dev/null
+++ b/src/main/resources/static/js/settings/vcs.js
@@ -0,0 +1,239 @@
+function vcsTab() {
+    return {
+        subTab: initialSettingsSection('github', ['github', 'gitlab', 'atlassian']),
+        connections: [],
+        loading: true,
+        slideout: false,
+        providerDropdownOpen: false,
+        creating: false,
+        confirmingDisconnect: null,
+        apiError: null,
+        toastVisible: false,
+        toastMsg: '',
+        githubMode: 'cloud',
+        githubServerUrl: '',
+        githubAccessToken: '',
+        gitlabMode: 'cloud',
+        gitlabServerUrl: '',
+        gitlabAccessToken: '',
+        bitbucketMode: 'cloud',
+        bitbucketServerUrl: '',
+        bitbucketUsername: '',
+        bitbucketEmail: '',
+        bitbucketAccessToken: '',
+        form: { provider: '', serverUrl: '', vcsUsername: '', accessToken: '' },
+        headers() {
+            return Object.assign(
+                { 'Accept': 'application/json' },
+                oswlJsonHeaders()
+            );
+        },
+        formatDate(s) { return s ? s.replace('T', ' ').slice(0, 16) : '—'; },
+        providerLabel(p) {
+            return p === 'GITHUB' ? _vcsI18n.providerGithub
+                : p === 'GITLAB' ? _vcsI18n.providerGitlab
+                : p === 'BITBUCKET' ? _vcsI18n.providerAtlassian
+                : p;
+        },
+        showToast(msg) {
+            this.toastMsg = msg;
+            this.toastVisible = true;
+            setTimeout(() => { this.toastVisible = false; }, 3000);
+        },
+        selectSubTab(key) {
+            this.subTab = key;
+            syncSettingsSection(key);
+        },
+
+        async init() {
+            onSettingsSectionPopstate(() => {
+                const section = initialSettingsSection('github', ['github', 'gitlab', 'atlassian']);
+                if (this.subTab !== section) this.subTab = section;
+            });
+            await this.loadConnections();
+        },
+        async loadConnections() {
+            this.loading = true;
+            try {
+                const r = await fetch('/api/settings/vcs');
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _fetchErr(r, _vcsFmt(_vcsI18n.loadConnectionsStatus, r.status)); return; }
+                this.connections = await r.json();
+            } catch (e) {
+                this.apiError = _vcsI18n.loadFailed;
+            } finally {
+                this.loading = false;
+            }
+        },
+        openCreate() {
+            this.form = { provider: '', serverUrl: '', vcsUsername: '', accessToken: '' };
+            this.providerDropdownOpen = false;
+            this.slideout = true;
+            this.$nextTick(() => oswlTrapFocus(this.$refs.createPanel));
+        },
+        closeCreate() {
+            this.providerDropdownOpen = false;
+            this.slideout = false;
+            oswlReleaseFocus();
+        },
+        async addConnection() {
+            if (!this.form.provider || !this.form.accessToken.trim()) return;
+            this.creating = true;
+            this.apiError = null;
+            const providerName = this.providerLabel(this.form.provider);
+            try {
+                const body = {
+                    provider: this.form.provider,
+                    serverUrl: this.form.serverUrl.trim() || null,
+                    vcsUsername: this.form.vcsUsername.trim() || null,
+                    accessToken: this.form.accessToken
+                };
+                const r = await fetch('/api/settings/vcs', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) {
+                    const errBody = await r.json().catch(() => ({}));
+                    this.apiError = errBody.error || (_vcsI18n.connectFailed + ' (' + r.status + ')');
+                    return;
+                }
+                this.closeCreate();
+                await this.loadConnections();
+                this.showToast(providerName + ' ' + _vcsI18n.connectedSuffix);
+            } catch (e) {
+                this.apiError = _vcsI18n.networkError;
+            } finally {
+                this.creating = false;
+            }
+        },
+        disconnect(c) {
+            this.confirmingDisconnect = c;
+        },
+        async doDisconnect() {
+            const c = this.confirmingDisconnect;
+            this.confirmingDisconnect = null;
+            this.apiError = null;
+            try {
+                const r = await fetch('/api/settings/vcs/' + c.id, { method: 'DELETE', headers: this.headers() });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) { this.apiError = _vcsI18n.disconnectFailed; return; }
+                await this.loadConnections();
+                this.showToast(this.providerLabel(c.provider) + ' ' + _vcsI18n.disconnectedSuffix);
+            } catch (e) {
+                this.apiError = _vcsI18n.networkError;
+            }
+        },
+        async connectGitlab() {
+            if (!this.gitlabAccessToken.trim()) return;
+            if (this.gitlabMode === 'selfhosted' && !this.gitlabServerUrl.trim()) return;
+            const dirtyRevision = window.OswlDirty?.revision('vcs-gitlab');
+            this.creating = true;
+            this.apiError = null;
+            try {
+                const body = {
+                    provider: 'GITLAB',
+                    serverUrl: this.gitlabMode === 'selfhosted' ? this.gitlabServerUrl.trim() : null,
+                    vcsUsername: null,
+                    accessToken: this.gitlabAccessToken
+                };
+                const r = await fetch('/api/settings/vcs', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) {
+                    const errBody = await r.json().catch(() => ({}));
+                    this.apiError = errBody.error || (_vcsI18n.connectFailed + ' (' + r.status + ')');
+                    return;
+                }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('vcs-gitlab', dirtyRevision);
+                if (savedCurrentRevision) {
+                    this.gitlabMode = 'cloud';
+                    this.gitlabServerUrl = '';
+                    this.gitlabAccessToken = '';
+                }
+                await this.loadConnections();
+                this.showToast(_vcsI18n.providerGitlab + ' ' + _vcsI18n.connectedSuffix);
+            } catch (e) {
+                this.apiError = _vcsI18n.networkError;
+            } finally {
+                this.creating = false;
+            }
+        },
+        async connectGithub() {
+            if (!this.githubAccessToken.trim()) return;
+            if (this.githubMode === 'enterprise' && !this.githubServerUrl.trim()) return;
+            const dirtyRevision = window.OswlDirty?.revision('vcs-github');
+            this.creating = true;
+            this.apiError = null;
+            try {
+                const body = {
+                    provider: 'GITHUB',
+                    serverUrl: this.githubMode === 'enterprise' ? this.githubServerUrl.trim() : null,
+                    vcsUsername: null,
+                    accessToken: this.githubAccessToken
+                };
+                const r = await fetch('/api/settings/vcs', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) {
+                    const errBody = await r.json().catch(() => ({}));
+                    this.apiError = errBody.error || (_vcsI18n.connectFailed + ' (' + r.status + ')');
+                    return;
+                }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('vcs-github', dirtyRevision);
+                if (savedCurrentRevision) {
+                    this.githubMode = 'cloud';
+                    this.githubServerUrl = '';
+                    this.githubAccessToken = '';
+                }
+                await this.loadConnections();
+                this.showToast(_vcsI18n.providerGithub + ' ' + _vcsI18n.connectedSuffix);
+            } catch (e) {
+                this.apiError = _vcsI18n.networkError;
+            } finally {
+                this.creating = false;
+            }
+        },
+        async connectBitbucket() {
+            if (!this.bitbucketAccessToken.trim()) return;
+            if (this.bitbucketMode === 'server' && !this.bitbucketServerUrl.trim()) return;
+            if (this.bitbucketMode === 'cloud' && !this.bitbucketUsername.trim()) return;
+            const dirtyRevision = window.OswlDirty?.revision('vcs-bitbucket');
+            this.creating = true;
+            this.apiError = null;
+            try {
+                const isServer = this.bitbucketMode === 'server';
+                const email = this.bitbucketEmail.trim();
+                const slug = this.bitbucketUsername.trim();
+                const vcsUsername = isServer
+                        ? null
+                        : (email ? email + '|' + slug : slug);
+                const body = {
+                    provider: 'BITBUCKET',
+                    serverUrl: isServer ? this.bitbucketServerUrl.trim() : null,
+                    vcsUsername,
+                    accessToken: this.bitbucketAccessToken
+                };
+                const r = await fetch('/api/settings/vcs', { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+                if (r.status === 401) { location.href = '/login'; return; }
+                if (!r.ok) {
+                    const errBody = await r.json().catch(() => ({}));
+                    this.apiError = errBody.error || (_vcsI18n.connectFailed + ' (' + r.status + ')');
+                    return;
+                }
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('vcs-bitbucket', dirtyRevision);
+                if (savedCurrentRevision) {
+                    this.bitbucketMode = 'cloud';
+                    this.bitbucketServerUrl = '';
+                    this.bitbucketUsername = '';
+                    this.bitbucketEmail = '';
+                    this.bitbucketAccessToken = '';
+                }
+                await this.loadConnections();
+                this.showToast(_vcsI18n.providerBitbucket + ' ' + _vcsI18n.connectedSuffix);
+            } catch (e) {
+                this.apiError = _vcsI18n.networkError;
+            } finally {
+                this.creating = false;
+            }
+        }
+    };
+}
diff --git a/src/main/resources/static/js/settings/webhooks.js b/src/main/resources/static/js/settings/webhooks.js
new file mode 100644
index 00000000..5b333721
--- /dev/null
+++ b/src/main/resources/static/js/settings/webhooks.js
@@ -0,0 +1,145 @@
+function webhooksTab() {
+return {
+    form: {
+        provider: 'SLACK',
+        url: '',
+        enabled: false,
+        notifyNewCve: true,
+        notifyGateFailure: true,
+        notifyScanFailure: true,
+        notifyWaiverExpiry: true
+    },
+    loaded: false, loading: false,
+    saving: false,
+    testing: false,
+    testStatus: null,
+    testMessage: '',
+    apiError: null,
+    toastVisible: false,
+    toastMsg: '',
+    history: [],
+    historyLoading: false,
+    historyError: false,
+    historyFilter: { status: '', eventType: '' },
+
+    init() {
+        this.load();
+        this.loadHistory();
+    },
+
+    showToast(msg) {
+        this.toastMsg = msg;
+        this.toastVisible = true;
+        setTimeout(() => { this.toastVisible = false; }, 3000);
+    },
+
+    async load() {
+        if (this.loading) return;
+        this.loading = true; this.loaded = false; this.apiError = null;
+        try {
+            const r = await fetch('/api/settings/webhooks');
+            if (!r.ok) { this.apiError = _fetchErr(r, _webhooksI18n.backendError); return; }
+            const d = await r.json();
+            if (d.provider)            this.form.provider           = d.provider;
+            if (d.enabled != null)     this.form.enabled            = d.enabled;
+            if (d.notifyNewCve != null)        this.form.notifyNewCve        = d.notifyNewCve;
+            if (d.notifyGateFailure != null)   this.form.notifyGateFailure   = d.notifyGateFailure;
+            if (d.notifyScanFailure != null)   this.form.notifyScanFailure   = d.notifyScanFailure;
+            if (d.notifyWaiverExpiry != null)  this.form.notifyWaiverExpiry  = d.notifyWaiverExpiry;
+            this.loaded = true;
+            // URL is never returned; keep the input empty so the user can change it.
+        } catch (e) { this.apiError = _webhooksI18n.backendError; }
+        finally { this.loading = false; }
+    },
+
+    async save() {
+        if (!this.loaded || this.loading || this.saving) return;
+        const dirtyRevision = window.OswlDirty?.revision('webhooks');
+        this.saving = true;
+        this.apiError = null;
+        this.testStatus = null;
+        try {
+            const r = await fetch('/api/settings/webhooks', {
+                method: 'PUT',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(this.form)
+            });
+            if (r.ok) {
+                const savedCurrentRevision = !window.OswlDirty
+                    || window.OswlDirty.clear('webhooks', dirtyRevision);
+                this.showToast(_webhooksI18n.saved);
+                if (savedCurrentRevision) this.form.url = '';
+                this.loadHistory();
+            } else {
+                const body = await r.json().catch(() => ({}));
+                this.apiError = body.message || _webhooksI18n.backendError;
+            }
+        } catch (e) {
+            this.apiError = _webhooksI18n.backendError;
+        } finally {
+            this.saving = false;
+        }
+    },
+
+    async testWebhook() {
+        if (!this.form.url || !this.form.url.trim()) {
+            this.apiError = _webhooksI18n.urlRequired;
+            return;
+        }
+        this.testing = true;
+        this.testStatus = null;
+        this.apiError = null;
+        try {
+            const r = await fetch('/api/settings/webhooks/test', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ url: this.form.url.trim() })
+            });
+            const body = await r.json().catch(() => ({}));
+            if (r.ok && body.success) {
+                this.testStatus = 'ok';
+                this.testMessage = _webhooksI18n.testOk;
+            } else {
+                this.testStatus = 'error';
+                this.testMessage = body.error || _webhooksI18n.testFailed;
+            }
+        } catch (e) {
+            this.testStatus = 'error';
+            this.testMessage = _webhooksI18n.backendError;
+        } finally {
+            this.testing = false;
+        }
+    },
+
+    async loadHistory() {
+        this.historyLoading = true;
+        this.historyError = false;
+        try {
+            const params = new URLSearchParams();
+            params.set('limit', '50');
+            if (this.historyFilter.status)    params.set('status',    this.historyFilter.status);
+            if (this.historyFilter.eventType) params.set('eventType', this.historyFilter.eventType);
+            const r = await fetch('/api/settings/webhooks/deliveries?' + params.toString());
+            if (r.ok) {
+                this.history = await r.json();
+            } else {
+                this.historyError = true;
+                this.history = [];
+            }
+        } catch (e) {
+            this.historyError = true;
+            this.history = [];
+        }
+        this.historyLoading = false;
+    },
+
+    formatTime(iso) {
+        if (!iso) return '-';
+        const d = new Date(iso);
+        return d.toLocaleString(undefined, {
+            year: 'numeric', month: 'short', day: 'numeric',
+            hour: '2-digit', minute: '2-digit'
+        });
+    }
+};
+}
diff --git a/src/main/resources/static/js/web-push-preferences.js b/src/main/resources/static/js/web-push-preferences.js
new file mode 100644
index 00000000..2e2520b6
--- /dev/null
+++ b/src/main/resources/static/js/web-push-preferences.js
@@ -0,0 +1,67 @@
+function webPushPreferences() {
+    return {
+        supported: window.isSecureContext && 'serviceWorker' in navigator && 'PushManager' in window && 'Notification' in window,
+        configured: false, loaded: false, busy: false, error: '', active: false, id: null, publicKey: '', newHighRisk: true, gateFailure: true,
+        async init() { await this.load(); },
+        async load() {
+            if (this.busy) return;
+            this.busy = true;
+            this.loaded = false; this.error = ''; this.active = false; this.id = null;
+            try {
+                const response = await fetch('/api/my/web-push');
+                if (!response.ok) throw new Error();
+                const status = await response.json();
+                this.configured = status.enabled; this.publicKey = status.publicKey;
+                if (this.supported) {
+                    const registration = await navigator.serviceWorker.getRegistration('/');
+                    const subscription = registration && await registration.pushManager.getSubscription();
+                    if (subscription) {
+                        const bytes = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(subscription.endpoint));
+                        const hash = Array.from(new Uint8Array(bytes), b => b.toString(16).padStart(2, '0')).join('');
+                        const owned = status.subscriptions.find(s => s.endpointHash === hash);
+                        if (owned) { this.id = owned.id; this.active = owned.active; this.newHighRisk = owned.newHighRisk; this.gateFailure = owned.gateFailure; }
+                    }
+                }
+                this.loaded = true;
+            } catch (_) { this.error = _pushI18n.failed; }
+            finally { this.busy = false; }
+        },
+        async enable() {
+            if (this.busy || !this.loaded || !this.configured || !this.supported) return;
+            this.busy = true; this.error = '';
+            try {
+                if (await Notification.requestPermission() !== 'granted') { this.error = _pushI18n.denied; return; }
+                const registration = await navigator.serviceWorker.register('/oswl-push-sw.js', {scope: '/'});
+                await navigator.serviceWorker.ready;
+                let subscription = await registration.pushManager.getSubscription();
+                if (!subscription) {
+                    const raw = atob(this.publicKey.replace(/-/g, '+').replace(/_/g, '/'));
+                    subscription = await registration.pushManager.subscribe({userVisibleOnly: true, applicationServerKey: Uint8Array.from(raw, c => c.charCodeAt(0))});
+                }
+                const json = subscription.toJSON();
+                const response = await fetch('/api/my/web-push', {method: 'POST', headers: oswlJsonHeaders(), body: JSON.stringify({
+                    endpoint: json.endpoint, p256dh: json.keys.p256dh, auth: json.keys.auth,
+                    newHighRisk: this.newHighRisk, gateFailure: this.gateFailure, locale: ['en','ko','ja'].includes(document.documentElement.lang) ? document.documentElement.lang : 'en'
+                })});
+                if (!response.ok) throw new Error();
+                this.id = await response.json(); this.active = true;
+            } catch (_) { this.error = _pushI18n.failed; }
+            finally { this.busy = false; }
+        },
+        async disable() {
+            if (this.busy || !this.loaded || !this.supported) return;
+            this.busy = true; this.error = '';
+            try {
+                if (this.id !== null) {
+                    const response = await fetch('/api/my/web-push/' + this.id, {method: 'DELETE', headers: oswlJsonHeaders()});
+                    if (!response.ok) throw new Error();
+                    this.id = null; this.active = false;
+                }
+                const registration = await navigator.serviceWorker.getRegistration('/');
+                const subscription = registration && await registration.pushManager.getSubscription();
+                if (subscription && !await subscription.unsubscribe()) throw new Error();
+            } catch (_) { this.error = _pushI18n.failed; }
+            finally { this.busy = false; }
+        }
+    };
+}
diff --git a/src/main/resources/static/oswl-push-sw.js b/src/main/resources/static/oswl-push-sw.js
new file mode 100644
index 00000000..d034c6c1
--- /dev/null
+++ b/src/main/resources/static/oswl-push-sw.js
@@ -0,0 +1,16 @@
+self.addEventListener('push', event => {
+    let data;
+    try { data = event.data.json(); } catch (_) { return; }
+    const path = /^\/projects\/\d+\/security-center$/.test(data.url) ? data.url : '/projects';
+    event.waitUntil(self.registration.showNotification('OsWL', {
+        body: typeof data.body === 'string' ? data.body.slice(0, 300) : '',
+        tag: typeof data.tag === 'string' ? data.tag.slice(0, 100) : 'oswl-security',
+        data: {path}, icon: '/graphic/symbol_w.svg'
+    }));
+});
+self.addEventListener('notificationclick', event => {
+    event.notification.close();
+    const path = event.notification.data && event.notification.data.path;
+    const destination = new URL(/^\/projects\/\d+\/security-center$/.test(path) ? path : '/projects', self.location.origin).href;
+    event.waitUntil(clients.openWindow(destination));
+});
diff --git a/src/main/resources/static/scripts/manifest-rules.json b/src/main/resources/static/scripts/manifest-rules.json
index 5cd50243..be239838 100644
--- a/src/main/resources/static/scripts/manifest-rules.json
+++ b/src/main/resources/static/scripts/manifest-rules.json
@@ -1,7 +1,7 @@
 {
   "version" : 1,
   "skipDirs" : [ ".cargo", ".dart_tool", ".git", ".gradle", ".idea", ".tox", ".venv", "__pycache__", "bin", "bower_components", "build", "dist", "generated", "node_modules", "obj", "out", "target", "vendor", "venv" ],
-  "exactFileNames" : [ "Cargo.lock", "Cargo.toml", "Directory.Packages.props", "Gemfile.lock", "Pipfile.lock", "build.gradle", "build.gradle.kts", "composer.lock", "conan.lock", "global.json", "go.mod", "go.sum", "gradle.properties", "gradlew", "gradlew.bat", "mvnw", "mvnw.cmd", "nuget.config", "package-lock.json", "package.json", "packages.config", "packages.lock.json", "pnpm-lock.yaml", "poetry.lock", "pom.xml", "pyproject.toml", "requirements.txt", "settings.gradle", "settings.gradle.kts", "uv.lock", "yarn.lock" ],
+  "exactFileNames" : [ ".gitmodules", "CMakeLists.txt", "Cargo.lock", "Cargo.toml", "Directory.Packages.props", "Dockerfile", "Gemfile.lock", "Pipfile.lock", "Podfile.lock", "build.gradle", "build.gradle.kts", "composer.lock", "conan.lock", "conda-lock.yml", "global.json", "go.mod", "go.sum", "gradle.properties", "gradlew", "gradlew.bat", "mvnw", "mvnw.cmd", "nuget.config", "package-lock.json", "package.json", "packages.config", "packages.lock.json", "pixi.lock", "pnpm-lock.yaml", "poetry.lock", "pom.xml", "pyproject.toml", "requirements.txt", "settings.gradle", "settings.gradle.kts", "uv.lock", "vcpkg-configuration.json", "vcpkg.json", "yarn.lock" ],
   "fileSuffixes" : [ ".csproj", ".props", ".sln", ".versions.toml" ],
   "pathPrefixes" : [ ".mvn/wrapper/", "gradle/wrapper/" ],
   "buildSrcSuffixes" : [ ".java", ".kt" ]
diff --git a/src/main/resources/supply-chain/popular-packages.txt b/src/main/resources/supply-chain/popular-packages.txt
index 91bfc156..1df97a4d 100644
--- a/src/main/resources/supply-chain/popular-packages.txt
+++ b/src/main/resources/supply-chain/popular-packages.txt
@@ -1,5 +1,5 @@
 # Compact top-N popular package list per ecosystem, used by SupplyChainHeuristicsService
-# for typosquat similarity checks (roadmap #16).
+# for typosquat similarity checks.
 #
 # Format: one entry per line — :
 #   - ECOSYSTEM matches Library.ecosystem: NPM | PYPI | MAVEN
diff --git a/src/main/resources/templates/auth/login.html b/src/main/resources/templates/auth/login.html
index faa2d65a..184bd475 100644
--- a/src/main/resources/templates/auth/login.html
+++ b/src/main/resources/templates/auth/login.html
@@ -27,7 +27,7 @@ 
    
             
-            
    OsWL
    
+            
    OsWL
    
             
    Open Source Watch List
    
         
 
@@ -56,7 +56,7 @@ 
    
+                                  placeholder:text-[var(--grayscale-60)] tracking-[-0.13px] leading-[1.3]"/>
                 
             
 
@@ -70,7 +70,7 @@ 
    
+                                  placeholder:text-[var(--grayscale-60)] tracking-[-0.13px] leading-[1.3]"/>
                     
         
 
-        
+        
         
    
             
    
                 
-                or
+                or
                 
             
    
             
+
+
+
+
+
    
+
+
+
+
    
+    
    
+
+        
+        
    
+            
+        
    
+        
    
+             / 
+        
    
+
+        
+        
    
+            
    
+                
    SSO & team access
    
+                
+                    Done
+                
+            
    
+            
    Connect OIDC/SAML single sign-on, or invite teammates directly. You can always change this later in Settings.
    
+            
    
+                Configure SSO →
+                Invite users →
+            
    
+        
    
+
+        
    
+            
    Add a teammate
    
+            
    Create access with a temporary password. Share it securely; the user must change it on first login.
    
+            
+            
    Account created.
    
+            
+            
    
+                
+                
+                
+                
+                
+                
+                
+                
+                
+            
    
+        
+
+        
+        
    
+            
    
+                
    Connect a repository
    
+                
+                    Done
+                
+            
    
+            
    Link GitHub, GitLab, or Bitbucket so OsWL can pull in a project to scan. Quick Import works with a repository URL alone if you'd rather skip this for now.
    
+
+            
+            
    
+                
    
+                    
+                    
+                
    
+                
    
+                    
+                    
+                
    
+                
    
+                    
+                    
+                
    
+                
    
+                    
+                    
    
+                
    
+            
    
+
+            
    
+                Connect a VCS provider →
+                Quick Import a project →
+            
    
+        
    
+
+        
+        
    
+            
    Policy defaults
    
+            
    Review the license policy (which licenses block a scan) and the security gate's default thresholds. Org/team/project-level overrides are available via the Policy API.
    
+            
    
+                Review license policy →
+            
    
+        
    
+
+        
+        
    
+            
    
+                
    Notifications
    
+                
+                    Done
+                
+            
    
+            
    Add a Slack or Teams webhook so new CVEs and gate failures reach the channel your team actually watches, instead of only email.
    
+
+            
+            
    
+                
    
+                    
+                    
+                
    
+                
    
+                    
+                    
+                
    
+                
    
+                    
+                    
    
+                
    
+            
    
+
+            
    
+                Set up webhooks →
+            
    
+        
    
+
+        
+        
    
+            
    
+                
+                
+            
+            
    
+                
+                
+                
    
+                    
+                    
+                
+            
    
+        
    
+    
    
+
    
+
+
    
+
+
+
+
diff --git a/src/main/resources/templates/component-detail/fragments/detail-content.html b/src/main/resources/templates/component-detail/fragments/detail-content.html
index 19c184af..f3896a9b 100644
--- a/src/main/resources/templates/component-detail/fragments/detail-content.html
+++ b/src/main/resources/templates/component-detail/fragments/detail-content.html
@@ -1,4 +1,4 @@
-
    
@@ -42,7 +42,7 @@
                 
    Android Arch-Common
    
                 
    v 2.2.0-beta01
    
+                   th:text="${componentVersion != null and !#strings.isEmpty(componentVersion)} ? ${'v ' + componentVersion} : #{componentDetail.version.unresolved}">v 2.2.0-beta01
    
             
    
             
@@ -286,7 +297,7 @@ 
    
+                            class="bg-[var(--text-accent)] hover:bg-[var(--primary-80)] flex flex-1 items-center justify-center gap-[6px] px-[16px] py-[12px] rounded-[8px] text-white font-bold text-[14px] tracking-[-0.14px] transition-colors">
                         
                         Apply Patch (Create PR)
                     
@@ -299,13 +310,13 @@ 
    Apply Patch (Create PR)
                     
                     
                 
    
                 
    
+                   class="text-[11px] text-[var(--grayscale-60)] tracking-[-0.11px] text-center" th:text="#{componentDetail.vuln.noPrSupport}">
                     CLI import projects do not support automatic PR creation.
                 
    
             
@@ -320,7 +331,7 @@ 
    
                 
@@ -333,7 +344,7 @@ 
    
                 
                     Upgrade to version
-                    ...
+                    ...
                     to resolve known CVEs.
                 
                 
@@ -341,7 +352,7 @@ 
    
+               class="text-[12px] text-[var(--grayscale-60)] tracking-[-0.12px] leading-[1.5] m-0">
                 Latest release:
                 v2.0.0
                 — may not address the known CVEs.
@@ -369,7 +380,7 @@ 
    
+                            class="bg-[var(--text-accent)] hover:bg-[var(--primary-80)] flex flex-1 items-center justify-center gap-[6px] px-[16px] py-[12px] rounded-[8px] text-white font-bold text-[14px] tracking-[-0.14px] transition-colors">
                         
                         Apply Patch (Create PR)
                     
@@ -382,27 +393,52 @@ 
    Apply Patch (Create PR)
                     
                     
                 
                 
    
+                   class="text-[11px] text-[var(--grayscale-60)] tracking-[-0.11px] text-center" th:text="#{componentDetail.vuln.prLatestHint}">
                     PR will upgrade to the latest release (may not resolve all CVEs).
                 
    
                 
    
+                   class="text-[11px] text-[var(--grayscale-60)] tracking-[-0.11px] text-center" th:text="#{componentDetail.vuln.noPatchNow}">
                     No patch version available at this time.
                 
    
                 
    
+                   class="text-[11px] text-[var(--grayscale-60)] tracking-[-0.11px] text-center">
                     CLI import projects do not support automatic PR creation.
                 
    
             
         
     
 
+    
+    
    
+    
    
+        
    
+        
    
+        
    
+    
    
+    
    
+        
    
+            
+            
    Why reachable?
    
+        
    
+        
    
+            Your code references the vulnerable library through these classes:
+        
    
+        
      
+            
    • com.example.MyService -> org.apache.commons.collections.MapUtils
      • 
+        
    
+    
    
+
     
     
    
         
    
@@ -411,14 +447,22 @@ 
    
-            
    No security vulnerabilities detected for this component.
    
+            
    
+                
    Latest lookup status
    
+                
    
+                
+                    
    
+                    
    
+                    
+            
    
+            
    No security vulnerabilities detected for this component.
    
+            
    Vulnerability analysis is unavailable.
    
             
    
 
-                
+                
+                    
+                
+                
+                
    
 
                 
    
@@ -492,7 +546,7 @@ 
    Fix:
-                            2.2.1-alpha01
                         
                         
@@ -500,12 +554,18 @@ 
    GHSA-xxxx
+                               class="text-[var(--text-accent)] hover:underline">GHSA-xxxx
                         
                         
                             CVSS Vector:
                             AV:N/AC:L/...
                         
+                        
+                            Environmental Score:
+                            8.5
+                        
                     
    
                 
    
             
@@ -587,7 +647,7 @@ 
    
         
    
-            
    
                      
                     
+                          class="inline-flex items-center gap-[5px] px-[10px] py-[3px] rounded-[20px] bg-[rgba(0,160,147,0.08)] border border-[rgba(0,160,147,0.2)] text-[11px] font-semibold text-[var(--text-accent)] tracking-[-0.11px]">
                         
                         Direct
                     
@@ -617,7 +677,7 @@ 
    
                         Transitive
                     
-                      
                         Direct dependency (depth 1)
@@ -693,7 +753,7 @@ 
    v1.0.0
                                 
+                                      class="shrink-0 bg-[rgba(0,160,147,0.08)] border border-[rgba(0,160,147,0.2)] px-[8px] py-[2px] rounded-[40px] text-[10px] font-semibold text-[var(--text-accent)] tracking-[-0.1px]" th:text="#{componentDetail.badge.yourProject}">
                                     Your project
                                 
                                 
                 
                 
    project-name
    
-                
    (our project)
    
+                
    (our project)
    
             
    
             
    
                 
@@ -725,7 +785,7 @@ 
    component-name
    
                 v1.0.0
+                      th:text="${componentVersion != null and !#strings.isEmpty(componentVersion)} ? ${'v' + componentVersion} : #{componentDetail.version.unresolved}">v1.0.0
                 Direct Dep.
                 Problem Lib
                 
             
    
-            
    
+            
    
                 Full path tree not available — rescan with an updated CLI version to see the complete dependency tree.
             
    
         
@@ -743,7 +803,7 @@ 
    
         
    
-            
    
                 
+                   class="flex items-center gap-[5px] text-[var(--text-accent)] hover:underline">
                     
@@ -774,7 +834,7 @@ 
    
+                   class="flex items-center gap-[5px] text-[var(--text-accent)] hover:underline">
                     
    
-        
    
+        
    
             Copyright (c) 2026 OsWL, Licensed under the MIT License.
             
    
                 Open Source Notices
                 
                 
diff --git a/src/main/resources/templates/fragments/head.html b/src/main/resources/templates/fragments/head.html
index 9ab40f68..8d8028b1 100644
--- a/src/main/resources/templates/fragments/head.html
+++ b/src/main/resources/templates/fragments/head.html
@@ -10,18 +10,30 @@
     
     
 
+    
+    
+    
+
+    
     
-    
+    
     
     
     
     
 
-    
+    
     
-    
+    
+    
+    
+    
     
 
     
     
    
+         x-data="topbarAccountMenu()" @click.outside="open = false" @keydown.escape.stop="open = false" class="relative">
         
         
         
         
         
         
         
    
+            
+            
    
             
-            
    
+            
    
                 
                 
@@ -234,7 +249,7 @@ 
    -
                                     
                                     
    
+            
+            
    
             
-            
    
+            
    
                 
                 
+        
 
         
         
 
@@ -349,24 +369,29 @@ 
    
     
    
+            class="bg-[var(--background-dark)] flex items-center min-h-[64px] flex-wrap gap-x-[24px] gap-y-[12px] px-[24px] xl:px-[40px] py-[16px] w-full shrink-0">
+        
+        
         
             
             
    OsWL
    
             
         
    
-            Projects
+            Projects
             
             Project
             
             Version Diff
         
    
         
    
+        
+        
    
         
-        
    
+        
    
             
             
    
+                    
    No templates.
    No templates.
    
                         
                 
    
             
         
         
         
    
-             total
-            
    
+             total
+            
    
                 
                 
    
                     
                 
    
             
    
             
    
                 
    
-                    
-                    
+                    
+                    
                 
    
                 
    
-                    
+                    
                 
    
                 
    
-                    
-                    
+                    
+                    
                 
    
             
    
         
    
             
             
-                            
                         
    
@@ -653,9 +667,9 @@
                             
                             
    
                                 
    
-                                    Permissions (/)
+                                    Permissions (/)
                                     
                                 
    
                                 
    
@@ -664,7 +678,7 @@
                                             
    
                                                 
                                                 
                                             
    
                                             
    
@@ -699,7 +713,7 @@
                 
             
    
         
    
-        
    
+        
    
             Built-in templates cannot be deleted.
         
    
     
    
@@ -709,8 +723,9 @@
         
    
             
    
                 
-                
    
+                
    
                     
                     
                 
    
                 
-                
    
+                
    
                     
                     
                 
    
 
                 
-                
    
+