A language's package universe — npm for JavaScript, PyPI for Python, crates.io for Rust.
Each programming language grew its own package ecosystem: registry, package manager, versioning conventions, and culture. JavaScript has npm, Python has PyPI, Rust has crates.io, Go has its module proxy, Java has Maven Central — each with distinct security characteristics and failure modes.
Safeguard Gold indexes components across all major ecosystems and lets you filter both the package directory and the vulnerability database by ecosystem, because a team's risk surface is defined by the ecosystems it builds on.