Private testing
ArtifactMark is coming soon.
The product is still under test. The public catalog contains no assessments, and maintainer accounts and billing are turned off.
What we are building
Evidence for one exact artifact version.
ArtifactMark will publish signed records for a specific artifact digest. Each record will show which checks ran, what they found, what could not be checked, and when the result expires.
An ArtifactMark assessment will describe observed risk. It will not guarantee that software is safe.