What's in a Package? Getting Visibility Into Dependencies Using Security-Sensitive API Calls

Imranur Rahman, Ranidya Paramitha, Henrik Plate +2

Knowing what sensitive resources a dependency could potentially access would help developers assess the risk of a dependency before selection. One way to get an understanding of th…