Evidence
Security source coverage
Every source Publicus has discussed is shown here with its real state: globally monitored, checked during package/CVE lookup, visible but not ingested, blocked by licensing, or waiting on an adapter.
The platform must not confuse “listed” with “ingested.” Use this page as the source-of-truth for what data is active and what still needs work.
Source contract fields still apply to every row: source ID, publisher, license, fetch method, cadence, signature posture, provenance URL, schema version, confidence tier, and coverage state.
—
Tracked sources
—
Globally monitored
—
Scan / lookup sources
—
Visible blockers
Security source truth table
Click the primary-source link when you want the publisher’s page. Sources marked scan/lookup run when a package, version, CVE, repository, model, or artifact is supplied.