RubyGems.org

Trusted publishing adoption among the top 1,000 gems by total downloads. Attestation presence is a lower bound: a gem can be pushed by a trusted publisher without attestations.

Adopted packages104Gems with at least one release carrying provenance
Versions with provenance7550.7% of 105,686 tracked versions

Adoption over time

One completed refresh observation per UTC day.

9 points
Historical publishing-provenance adoption snapshots
Date (UTC)Packages with provenanceAdoptionVersions with provenance
Sep 29, 2026104 / 1,000
10.4%
755
Sep 26, 2026103 / 1,000
10.3%
753
Sep 22, 2026103 / 1,000
10.3%
719
Sep 21, 2026103 / 1,000
10.3%
719
Sep 15, 2026100 / 1,000
10%
709
Sep 14, 202699 / 1,000
9.9%
706
Sep 8, 202699 / 1,000
9.9%
694
Sep 7, 202699 / 1,000
9.9%
694
Aug 10, 202696 / 1,000
9.6%
666

Recently adopted

Ordered by first release with provenance.

Packages most recently observed publishing with provenance
PackageRankSince
gems#942Sep 26, 2026
wasabi#514Sep 18, 2026
akami#526Sep 16, 2026
faraday-http-cache#371Sep 15, 2026
domain_name#67Aug 30, 2026
amq-protocol#744Aug 27, 2026
net-protocol#177Aug 25, 2026
security#393Aug 15, 2026
elasticsearch#249Aug 4, 2026
elasticsearch-api#248Aug 4, 2026

Most downloaded

The head of the tracked set.

browse all →
Most-downloaded tracked packages and provenance status
PackageRankStatus
bundler#1Not yet
aws-sdk-core#2Not yet
aws-sigv4#3Not yet
aws-partitions#4Not yet
jmespath#5Not yet
i18n#6Not yet
activesupport#7With provenance
rake#8With provenance
json#9Not yet
concurrent-ruby#10Not yet