3 papers
cs.CR2026
How Reliable Are FOSS Popularity Metrics? Analyzing the Effort Required for Spoofing Common Software Popularity Metrics
Ben Swierzy, Timo Pohl, Marc Ohm +1
Quantitative metrics derived from software repositories and package ecosystems are widely used to assess the impact, popularity, maintenance, and criticality of free and open sourc…
cs.SE2026
Insecure Ingredients? Exploring Dependency Update Patterns of Bundled JavaScript Packages on the Web
Ben Swierzy, Marc Ohm, Michael Meier
Reusable software components, typically distributed as packages, are a central paradigm of modern software development. The JavaScript ecosystem serves as a prime example, offering…
cs.SE2025
SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
Timo Pohl, Pavel Novák, Marc Ohm +1
The disconnect between distributed software artifacts and their supposed source code enables attackers to leverage the build process for inserting malicious functionality. Past res…