Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors

Taylor R Schorlemmer, Kelechi G Kalu, Luke Chigges +5

Many software applications incorporate open-source third-party packages distributed by public package registries. Guaranteeing authorship along this supply chain is a challenge. Pa…