RubyGems.org
Trusted publishing adoption among the top 1,000 gems by total downloads. Attestation presence is a lower bound: a gem can be pushed by a trusted publisher without attestations.
Adoption over time
One completed refresh observation per UTC day.
| Date (UTC) | Packages with provenance | Adoption |
|---|---|---|
| Sep 8, 2026 | 99 / 1,000 | 9.9% |
| Sep 7, 2026 | 99 / 1,000 | 9.9% |
| Aug 10, 2026 | 96 / 1,000 | 9.6% |
Recently adopted
Ordered by first release with provenance.
| Package | Rank | Since |
|---|---|---|
| domain_name | #67 | Aug 30, 2026 |
| amq-protocol | #744 | Aug 27, 2026 |
| net-protocol | #183 | Aug 25, 2026 |
| security | #396 | Aug 15, 2026 |
| elasticsearch | #249 | Aug 4, 2026 |
| elasticsearch-api | #248 | Aug 4, 2026 |
| rack-proxy | #305 | Jul 23, 2026 |
| nori | #407 | Jul 4, 2026 |
| language_server-protocol | #186 | Jul 3, 2026 |
| nkf | #485 | Jun 10, 2026 |
Most downloaded
The head of the tracked set.
| Package | Rank | Status |
|---|---|---|
| bundler | #1 | Not yet |
| aws-sdk-core | #2 | Not yet |
| aws-sigv4 | #3 | Not yet |
| aws-partitions | #4 | Not yet |
| jmespath | #5 | Not yet |
| i18n | #6 | Not yet |
| activesupport | #7 | With provenance |
| rake | #8 | With provenance |
| json | #9 | Not yet |
| concurrent-ruby | #10 | Not yet |
