82
%
What share of packages worldwide have no build-provenance attestation tying the artifact to its source?
build attested 18.46%
signed, not attested 81.54%
Quiet Failures
.
n=677 · CC BY 4.0