activity
20242026
most citedAn Industry Interview Study of Software Signing for Supply Chain Security

1 citations · 1 across the 11 of their papers we have counts for

collaborators
Showing 2026Show all

5 papers · 1 filter

cs.SE2026

AgOSS: A Dataset and Multi-Layer Characterization of Open-Source Agricultural Software

Vatsal Dudhaiya, Mikhail Golovenchits, Aryan Banerjee +1

Much of agriculture depends on open-source software spanning farm management platforms, cloud services, edge gateways, embedded systems, and field-deployed sensors, forming a domai…

cs.SE2026

Reproducibility is Not Enough: Artifact Verifiability in Decentralized-Build Package Ecosystems

Oreofe Solarin, Kelechi Kalu, James C. Davis +1

Reproducible and verifiable builds increase trust in distributed software artifacts by enabling independent parties to detect artifacts produced by compromised build or release pip…

cs.SE2026

Measuring Delivery Consistency in Practice: A DORA Extension from a Multi-Platform Release Setting

Luiz Parente, James C. Davis

The DevOps Research and Assessment (DORA) framework is the most widely adopted measurement system for performance measurement across engineering teams. However, every DORA metric i…

cs.SE2026

Identity-Based Signing Shifts, Not Solves, Usability: Evidence from Five Identity-Based Signing Ecosystems

Kelechi G. Kalu, Hieu Tran, Santiago Torres-Arias +2

Identity-based software signing tools aim to make software artifact provenance verifiable while reducing the burden of long-lived key management. These tools are becoming critical…

cs.SE2026

Operationalizing Research Software for Supply Chain Security

Kelechi G. Kalu, Soham Rattan, Taylor R. Schorlemmer +3

Empirical studies of research software are hard to compare because the literature operationalizes ``research software'' inconsistently. Motivated by the research software supply ch…