82
%
What share of packages on npm have no build-provenance attestation tying the artifact to its source?
build attested 18.46%
signed, not attested 81.54%
Quiet Failures
.
n=677 · CC BY 4.0