From the 1 of 6 linked papers with an AI index.
6 papers
Software Supply Chains are Dead: Use-Case-Oriented Regeneration
Tanmay Singla, James C. Davis
The paper proposes a use‑case‑oriented regeneration approach that uses generative AI to synthesize only the needed functionality of a dependency, reducing reliance on external soft…
Cheap Code, Costly Judgment: A Case Study on Governable Agentic Software Engineering
James C. Davis, Paschal C. Amusuo, Tanmay Singla +2
Generative AI is shifting software engineering from a practice organized around scarce implementation effort toward one organized around abundant, low-cost code production. This sh…
Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore
Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla +3
Software signing is the most robust method for ensuring the integrity and authenticity of components in a software supply chain. Legacy key-managed signing tools (e.g., OpenPGP) bu…
AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents
Erik Pautsch, Tanmay Singla, Parv Kumar +6
LLM-based agents are rapidly proliferating, yet the infrastructure for discovering, evaluating, and governing them remains fragmented compared to mature ecosystems like software pa…
Towards a Benchmark for Dependency Decision-Making
Tanmay Singla, Berk Ãakar, Paschal C. Amusuo +1
AI coding agents increasingly modify real software repositories and make dependency decisions, including adding, removing, or updating third-party packages. These choices can mater…
ZTD: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies
Paschal C. Amusuo, Kyle A. Robinson, Tanmay Singla +5
Third-party libraries like Log4j accelerate software application development but introduce substantial risk. Vulnerabilities in these libraries have led to Software Supply Chain (S…