99
%
What share of packages in long-tail have no build-provenance attestation tying the artifact to its source?
attested 1.08%
signed_only 98.92%
Quiet Failures
.
n=278 · CC BY 4.0