Trusting code in the wild: Exploring contributor reputation measures to review dependencies in the Rust ecosystem

Sivana Hamer, Nasif Imtiaz, Mahzabin Tamanna +2

Developers rely on open-source packages and must review dependencies to safeguard against vulnerable or malicious upstream code. A careful review of all dependencies changes often…