Defending the Core: A Centrality-Based Protection Strategy for Supply Chain Security in npm Dependency Network

Zixin Wang

The modern software supply chain, taking Node Package Manager (npm) dependency network for example, relies heavily on shared open-source dependencies. While this promotes rapid dev…