1 citations · 2 across the 5 of their papers we have counts for
Showing 2026Show all
3 papers · 1 filter
cs.SE2026
No Snake Oil: Verifying Python Package Builds
Jens Dietrich, Spencer Sun, Tim W. White +1
Python has become the default language for interacting with AI, with packages being distributed through registries like the Python Package Index (PyPI). This creates a need to anal…
cs.SE2026★ 1 cited
Hidden Dependencies and Component Variants in SBOM-Based Software Composition Analysis
Shawn Rasheed, Max McPhee, Lisa Patterson +2
Software Bills of Material (SBOMs) have emerged as an important technology for vulnerability management amid rising supply-chain attacks. They represent component relationships wit…
cs.SE2026
On the Variability of Source Code in Maven Package Rebuilds
Jens Dietrich, Behnaz Hassanshahi
Rebuilding packages from open source is a common practice to improve the security of software supply chains, and is now done at an industrial scale. The basic principle is to acqui…