SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems

Timo Pohl, Pavel Novák, Marc Ohm +1

The disconnect between distributed software artifacts and their supposed source code enables attackers to leverage the build process for inserting malicious functionality. Past res…