nordisk/holger

holger-world-connector — crate card

Reverse-engineered (from source — verify, don't trust the name)

• One-line pitch: Agent connector for the public "world" — crates.io and PyPI — as a ConnectorTrait source.
• Does: WorldConnector (a reqwest::Client) implements ConnectorTrait to download from crates.io, with an allowlist of hosts it may fetch bytes from and read_capped download-size bounding (MAX_DOWNLOAD_BYTES = 8 GiB, M6). The pip module adds a Python/PyPI path: PypiIndex/PypiJsonClient, lockfile + requirements.txt + uv.lock parsing (parse_requirements_txt, parse_uv_lockfile, resolve_with_index) and pip_packages_to_assets.
• Key deps: traits, async-trait, reqwest (rustls-tls), serde/serde_json, toml (lockfile parse); optional gated nornir-testmatrix.
• Shape: lib, 2 files (lib.rs, pip.rs).
• Observed role in the workspace: Re-exported by holger-agent-lib (the World source) and pulled by holger-server-ui demo mode to pull real crates.io packages into a dev store.

Fill in (one line each — only the human knows these)

• Primary consumer(s):
• Why it exists (vs the obvious alternative):
• Hard constraint (airgap / no-C-deps / no-FFI / pure-Rust / etc.):
• Release cadence & independence (rides a parent? own repo someday?):
• Status (production / prototype / experimental / stubbed):
• Must-NOT-change invariant:
• Biggest known gap or TODO:
• Anything a newcomer would get wrong about it: