75
%
What share of the most-downloaded packages have no build-provenance attestation tying the artifact to its source?
attested 25.25%
signed_only 74.75%
Quiet Failures
.
n=400 · CC BY 4.0