6 citations · 9 across the 6 of their papers we have counts for
Showing cs.SEShow all
2 papers · 1 filter
cs.SE2025★ 6 cited
Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks
Hao He, Bogdan Vasilescu, Christian Kästner
Recent high-profile incidents in open-source software have greatly raised practitioner attention on software supply chain attacks. To guard against potential malicious package upda…
cs.SE2022
Demystifying Software Release Note Issues on GitHub
Jianyu Wu, Hao He, Wenxin Xiao +2
Release notes (RNs) summarize main changes between two consecutive software versions and serve as a central source of information when users upgrade software. While producing high…