A reusable unit of code distributed through a registry — the building block of modern software.
A package is a versioned, installable unit of code — lodash on npm, requests on PyPI, serde on crates.io — that developers pull into projects instead of rewriting solved problems. A single application commonly depends on hundreds of packages once transitive dependencies are counted.
Each package in the Gold directory carries its security status: known vulnerabilities mapped to affected versions, license, provenance, and whether it currently meets the Gold zero-known-vulnerabilities bar.