RubyGems.org

Trusted publishing adoption among the top 1,000 gems by total downloads. Attestation presence is a lower bound: a gem can be pushed by a trusted publisher without attestations.

Adopted packages109Gems with at least one release carrying provenance
Versions with provenance8020.8% of 106,900 tracked versions

Adoption over time

One completed refresh observation per UTC day.

13 points
Historical publishing-provenance adoption snapshots
Date (UTC)Packages with provenanceAdoptionVersions with provenance
Oct 27, 2026109 / 1,000
10.9%
802
Oct 20, 2026109 / 1,000
10.9%
788
Oct 13, 2026109 / 1,000
10.9%
774
Oct 6, 2026107 / 1,000
10.7%
760
Sep 29, 2026104 / 1,000
10.4%
755
Sep 26, 2026103 / 1,000
10.3%
753
Sep 22, 2026103 / 1,000
10.3%
719
Sep 21, 2026103 / 1,000
10.3%
719
Sep 15, 2026100 / 1,000
10%
709
Sep 14, 202699 / 1,000
9.9%
706
Sep 8, 202699 / 1,000
9.9%
694
Sep 7, 202699 / 1,000
9.9%
694
Aug 10, 202696 / 1,000
9.6%
666

Recently adopted

Ordered by first release with provenance.

Packages most recently observed publishing with provenance
PackageRankSince
net-ldap#666Oct 11, 2026
fastlane#253Oct 10, 2026
bundler#1Sep 30, 2026
rubygems-update#76Sep 30, 2026
net-smtp#160Sep 30, 2026
gems#942Sep 26, 2026
wasabi#513Sep 18, 2026
akami#524Sep 16, 2026
faraday-http-cache#372Sep 15, 2026
domain_name#67Aug 30, 2026

Most downloaded

The head of the tracked set.

browse all →
Most-downloaded tracked packages and provenance status
PackageRankStatus
bundler#1With provenance
aws-sdk-core#2Not yet
aws-sigv4#3Not yet
aws-partitions#4Not yet
i18n#5Not yet
activesupport#6With provenance
jmespath#7Not yet
rake#8With provenance
json#9Not yet
concurrent-ruby#10Not yet