Benchmarking supply-chain trust across popular free software installations.
One grade per image, one publisher to trust per project, one digest that matches on every machine.
Every number on this site decomposes to arithmetic you can audit — the raw grype JSON is
a click away on every scanned image.
The site has four doors. Each is one honest view of the same data.
The daily index
Every Community-Edition image we track, with Security and Pulse grades you can filter, sort, and audit.
Browse →What agents reach for
Pulls, upvotes, and fresh releases, picked up as they happen. The signal, not the catalog.
See →Who signs the images
The ranked leaderboard of namespaces that ship Community-Edition images. One grade per publisher × project, 60-day window; v2 formula by default, v3 Wilson-corrected preview under ?variant=v3.
Rank →Everything, machine-readable
Public endpoints for projects, images, grades, and the raw SBOM of any scan. Build it into your pipeline.
Docs →
Agents are fast at git clone. What they hand you a few minutes later is a build nobody else
has seen: produced on one machine, from whatever the registries served that minute, with choices nobody
wrote down. An image settles the six steps between source and running once, in the open.
pull by digest is one step that either matches or doesn't.
Building from source is dozens of steps that can each go differently on a different day,
with a different toolchain, a different lockfile resolution, a different maintainer upstream.
Signatures verified against a declared identity, SBOMs you can download, build provenance where the publisher ships it, and a dated grade whose arithmetic is on the page. Evidence your security team can inspect, not a vibe.
Every grade is a formula with the ingredients listed: CVE count by severity, how fresh the image is, whether it declares a healthcheck, whether its signature verifies. The methodology page has the full changelog.
Two grades per image. Each one is arithmetic.
Top of the quality-first ranking today. Operator-run accounts are unranked and labelled separately; the rest are compared on A/B product counts over 60 days.
157 Community-Edition projects, graded today. Filter, sort, and search the catalog on the Images page.