{"schema":"marketnow-certification/1.0","generated_at":"2026-09-10T01:25:30Z","level":1,"level_name":"index-certified","catalog_total":40718,"methodology":{"model":"Two-level risk model (documented in changelog 5.2.0): risk_level = INSTALL mechanics; trust_score_100 = source evidence heuristic. Levels: L1 index-certified (all entries), L2 sentinel-scanned (29-rule code scan of shipped artifact), L3 trust-chain (ATC/OCSP/CRL).","risk_model":{"red":"npx/uvx/pip/pipx — registry code executed on every run (arbitrary code execution surface)","yellow":"git clone / cargo / go install / docker / remote http — reviewable, sandboxed or network-only","green":"verified trust chain (MarketNow own packages: audited, 0 vulnerabilities, published from source)"},"repair_passes":["P0 unique ids","P1 unique slugs","P2 risk reclassification by install mechanic","P3 required fields","P4 scoring bounds"],"reproducibility":"python3 scripts/certify_index.py over public/api/skills_index.json; report served at /api/certification"},"checks":[{"id":"C1","desc":"unique id across catalog","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C2","desc":"unique slug (badge + /s/ pages)","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C3","desc":"required fields present","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C4","desc":"provenance URL resolvable","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C5","desc":"risk_level in model {red,yellow,green}","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C6","desc":"trust_score_100 within [0,100]","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C7","desc":"sentinel_score within [0,10]","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C8","desc":"indexed_at recorded","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C9","desc":"install command non-empty","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]},{"id":"C10","desc":"price/free consistency","total":40718,"pass":40718,"fail":0,"fail_rate":0,"examples":[]}],"index_certification":{"coverage":"366462/366462","all_checks_pass":true,"checks_passed":10,"checks_total":10},"distributions":{"sources":{"github":11197,"curated":1,"community-submitted":18,"npm":5269,"pypi":14311,"smithery":262,"official-registry":9076,"crates":584},"risk":{"red":28717,"yellow":12001}},"repairs_applied":{},"deep_scan":{"targets":361,"scanned":358,"scan_errors":3,"completion":99.2,"clean":147,"flagged_warning":83,"flagged_error":128,"own_packages":10,"weekly_download_volume_covered":1873894,"selection":"top npm packages by weekly downloads from the MarketNow catalog + all @marketnow own packages","report":"/api/certification-scans.json"},"catalog":{"total_all":96930,"core_certified":33128,"community_indexed":7590,"aggregate_tracked":56212,"sources":{"github":11197,"curated":1,"community-submitted":18,"npm":5269,"pypi":14311,"smithery":262,"official-registry":9076,"crates":584}},"levels":{"L1":"index-certified — every catalog entry passes the 10 documented checks (unique id/slug, provenance, risk model, scoring bounds). Report: /api/certification (this endpoint).","L2":"sentinel-scanned — the shipped registry artifact (tarball, shasum-verified) is scanned with the 29 MarketNow rules in tarball mode. Results: /api/certification-scans.json. Per package: ?package=<name>.","L3":"trust-chain — ATC/OCSP/CRL/TFP verification for the MarketNow ecosystem. See /api/trust, /api/ocsp, /api/crl, /api/atc."},"growth_loop":"Owners: your badge (/api/badge/<slug>.svg) reflects your trust score. Scanned packages show their verdict at /api/certification?package=<name>."}