Lighthouse

Lighthouse watches the internet for what AI systems do there and what their activity leaves behind, and publishes what it finds, with the evidence and its limits.

Studies LH005

Can any public record connect a software release to its installation?

The answer so far. Partly, and only as far as the download. PyPI's public download record, read through ClickHouse's copy of it, connects a release to the files fetched from PyPI by version, day, installer and a self-reported CI flag. For mcp 1.27.0 it shows the release taken almost at once: 22.3 per cent of all mcp downloads on its release day, 1,639,539 of 7,351,271, in the nine hours after publication; 48.1 per cent the next day; between 45 and 71 per cent of every day's downloads from then to the window's end; 95,672,297 of the window's 219,899,536 mcp downloads in all (observation and derived measurement). By the time the first of LH002's dependents was seen pinning it, six days after publication, the release had been about half of all downloads for five days. What carried it to the downloaders was install-time resolution of open version ranges, mostly by uv (78.6 per cent of the window's downloads), not the dependents' pins (interpretation).

Study, version 0.2, 26 September 2026 studies/LH005/LH005.md

From studies/LH005/ in the repository, last changed 9 November 2026.