Trust & signals
Trust signal
A trust signal is a sourced, dated heuristic that helps you judge a tool - a decision input, not a certification or safety guarantee.
A trust signal is an evidence-based hint about a project's health or origin: how actively it is maintained, where it came from, whether a dependency scan found known issues. Each signal names its source and the date it was computed.
The framing matters: signals are inputs to your own judgement, not verdicts. A signal never claims a tool is "safe" or "production-ready".
In GraphCanon
GraphCanon surfaces trust signals per tool and explains exactly how each is computed - and what it never claims - on the trust methodology page. There is no black-box composite score.
See also
Related terms
Last reviewed 2026-07-09