DCI: Dependency Confidence Index for Assessing Open-Source Dependency Trustworthiness

Clemens Albrecht, Stefan Reitmann

Selecting trustworthy open source software dependencies remains a major challenge in software supply chain security. We present the Dependency Confidence Index (DCI), a composite f…