2 papers
cs.CR2026
How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics
Ben Swierzy, Timo Pohl, Marc Ohm +1
Quantitative metrics derived from software repositories and package ecosystems are widely used to assess the impact, popularity, maintenance, and criticality of free and open sourc…
cs.SE2025
SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
Timo Pohl, Pavel Novák, Marc Ohm +1
The disconnect between distributed software artifacts and their supposed source code enables attackers to leverage the build process for inserting malicious functionality. Past res…