Hidden Amplifiers: Cross-Level Risk in Software Supply Chains

Rakesh Podder, Rafael Fabian Gonzalez Arellano, Indrajit Ray

Modern software supply chains comprise hundreds of transitive dependencies, yet existing analysis tools operate at either the ecosystem level (dependency graphs) or the code level…