Exposure Registry
Open-source packages that hand work to language models. For each package the registry records the first release that declares an LLM SDK, agent framework or MCP dependency, the authority its dependencies grant (shell, files, browser, network, code execution), and which other packages reach an LLM component through their dependencies.
Source: each package's own registry metadata (PyPI, npm, crates.io and the Go module proxy), read release by release. How this is measured ยท Updated 2026-10-10
- Packages tracked
- 3,985
- Declare an LLM dependency
- 617
- Reach one through a dependency
- 92
- LLM packages with host authority
- 291
Packages first declaring an LLM dependency, by month
| Month | Items |
|---|---|
| Nov 2023 | 12 |
| Dec 2023 | 23 |
| Jan 2024 | 22 |
| Feb 2024 | 39 |
| Mar 2024 | 14 |
| Apr 2024 | 21 |
| May 2024 | 19 |
| Jun 2024 | 11 |
| Jul 2024 | 10 |
| Aug 2024 | 15 |
| Sep 2024 | 8 |
| Oct 2024 | 7 |
| Nov 2024 | 22 |
| Dec 2024 | 14 |
| Jan 2025 | 15 |
| Feb 2025 | 12 |
| Mar 2025 | 13 |
| Apr 2025 | 8 |
| May 2025 | 8 |
| Jun 2025 | 16 |
| Jul 2025 | 5 |
| Aug 2025 | 2 |
| Sep 2025 | 9 |
| Oct 2025 | 9 |
| Nov 2025 | 10 |
| Dec 2025 | 7 |
| Jan 2026 | 27 |
| Feb 2026 | 6 |
| Mar 2026 | 8 |
| Apr 2026 | 10 |
| May 2026 | 8 |
| Jun 2026 | 13 |
| Jul 2026 | 24 |
| Aug 2026 | 6 |
| Sep 2026 | 5 |
| Oct 2026 | 1 |
Most declared
Packages that declare each component directly.
Authority granted
LLM-integrated packages whose dependencies grant each capability.
236 packages
| Package | Exposure | Integrated since | Declares | Authority | Advisories |
|---|---|---|---|---|---|
| qdrant-clientPyPI | Direct | 2021-02-090.1.0 | Qdrant | Outbound HTTP | 1 |
| coherePyPI | Direct | 2021-01-200.0.1 | Cohere SDK | Outbound HTTP | |
| pinecone-clientPyPI | Direct | 2020-12-310.7.5 | Pinecone | Outbound HTTP | |
| huggingface-hubPyPI | Direct | 2020-12-230.0.1 | Hugging Face Hub / Transformers | Outbound HTTP, MCP tools | |
| google-cloud-aiplatformPyPI | Direct | 2020-11-090.3.0 | Google Vertex AI SDK | Code execution, Outbound HTTP | 2 |
| fastaiPyPI | Direct | 2020-09-142.0.11 | Hugging Face Hub / Transformers | Outbound HTTP | |
| datasetsPyPI | Direct | 2020-09-101.0.0 | FAISS, Hugging Face Hub / Transformers | Outbound HTTP | |
| txtaiPyPI | Direct | 2020-08-111.0.0 | FAISS, Hugging Face Hub / Transformers, LiteLLM, llama.cpp bindings, Model Context Protocol SDK, pgvector, smolagents | Outbound HTTP, MCP tools | |
| trlPyPI | Direct | 2020-03-300.0.1 | Hugging Face Hub / Transformers | Outbound HTTP | |
| openaiPyPI | Direct | 2020-02-180.0.2 | OpenAI SDK | Outbound HTTP | |
| bert-scorePyPI | Direct | 2019-11-300.2.2 | Hugging Face Hub / Transformers | Outbound HTTP | |
| farm-haystackPyPI | Direct | 2019-11-280.1.0.post2 | Haystack | Browser control, Outbound HTTP | 1 |
| weaviate-clientPyPI | Direct | 2019-11-040.1.0 | Weaviate | Outbound HTTP | |
| autogenPyPI | Direct | 2019-10-190.0.4 | AutoGen / AG2 | Browser control, Code execution, File system, Outbound HTTP, MCP tools | |
| pymilvusPyPI | Direct | 2019-06-160.1.0 | Milvus | Outbound HTTP | |
| arize-phoenix-clientPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| aviary-hotpotqaPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| bigframesPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| catalystPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| checkpoint-enginePyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| comet-mlPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| dagsterPyPI | 1 hop away | Not recorded | None declared | Code execution, File system, Outbound HTTP | |
| harbor-langsmithPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| lfx-nextplaidPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| lfx-paddlePyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| lfx-vllmPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| mlflow-jfrog-pluginPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| ocifsPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| paddlepaddlePyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| prefectPyPI | 3 hops away | Not recorded | None declared | Code execution, File system, Outbound HTTP | |
| prefect-azurePyPI | 4 hops away | Not recorded | None declared | Outbound HTTP | |
| prefect-slackPyPI | 4 hops away | Not recorded | None declared | Outbound HTTP | |
| promptflow-devkitPyPI | 2 hops away | Not recorded | None declared | Outbound HTTP | |
| py-key-value-aioPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP | |
| quartodocPyPI | 2 hops away | Not recorded | None declared | File system, Outbound HTTP | |
| traceloop-sdkPyPI | 1 hop away | Not recorded | None declared | Outbound HTTP |
A package counts as integrated when a release declares one of the dependencies in the published catalog as a runtime or optional (extra) dependency. The integration date is the first such release, found by searching the release history on the assumption that a dependency, once added, is kept. Data: JSON, and the registry tables in each dataset release.