1 citations · 1 across the 6 of their papers we have counts for
7 papers
Software Supply Chains are Dead: Use-Case-Oriented Regeneration
Tanmay Singla, James C. Davis
Modern software development relies on an increasingly doubtful premise: that the up-front implementation savings from adopting a dependency outweighs the maintenance costs. Two cha…
Cheap Code, Costly Judgment: A Case Study on Governable Agentic Software Engineering
James C. Davis, Paschal C. Amusuo, Tanmay Singla +2
Generative AI is shifting software engineering from a practice organized around scarce implementation effort toward one organized around abundant, low-cost code production. This sh…
Towards a Benchmark for Dependency Decision-Making
Tanmay Singla, Berk Çakar, Paschal C. Amusuo +1
AI coding agents increasingly modify real software repositories and make dependency decisions, including adding, removing, or updating third-party packages. These choices can mater…
AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents
Erik Pautsch, Tanmay Singla, Parv Kumar +6
LLM-based agents are rapidly proliferating, yet the infrastructure for discovering, evaluating, and governing them remains fragmented compared to mature ecosystems like software pa…
Why Johnny Adopts Identity-Based Software Signing: A Usability Case Study of Sigstore
Kelechi G. Kalu, Sofia Okorafor, Tanmay Singla +3
Software signing is the most robust method for ensuring the integrity and authenticity of components in a software supply chain. Legacy key-managed signing tools (e.g., OpenPGP) bu…
ZTD: Mitigating Software Supply Chain Vulnerabilities via Zero-Trust Dependencies
Paschal C. Amusuo, Kyle A. Robinson, Tanmay Singla +5
Third-party libraries like Log4j accelerate software application development but introduce substantial risk. Vulnerabilities in these libraries have led to Software Supply Chain (S…
An Empirical Study on Using Large Language Models to Analyze Software Supply Chain Security Failures
Tanmay Singla, Dharun Anandayuvaraj, Kelechi G. Kalu +2
As we increasingly depend on software systems, the consequences of breaches in the software supply chain become more severe. High-profile cyber attacks like those on SolarWinds and…