Evidence-backed facts
- Google Open Source Insights documents package systems, packages, versions, projects, dependencies, advisories, licenses, and attestations. informative
- Public reads do not grant package, project, advisory, repository, dependency, or Google ownership or editing authority. informative
- Clients must bind system, package name, version, project key, dependency graph, page token, API version, and returned relation type. informative
- Aggregated dependency, license, score, and advisory data can be incomplete, delayed, inferred, or ecosystem-specific and does not prove safety, legal compliance, or reachability. informative