{"version":"1.0","type":"rich","provider_name":"Quiet Failures","provider_url":"https://quietfailures.com","title":"What share of packages in long-tail have no build-provenance attestation tying the artifact to its source?","width":380,"height":210,"html":"<iframe src=\"https://quietfailures.com/embed/pkg-provenance/download_tier-long-tail\" width=\"380\" height=\"210\" style=\"border:0;max-width:100%\" loading=\"lazy\" title=\"What share of packages in long-tail have no build-provenance attestation tying the artifact to its source?\"></iframe>"}