1. Surviving software dependencies
2. P. Ladisa , H. Plate , M. Martinez , and O. Barais , " SoK: Taxonomy of Attacks on Open-Source Software Supply Chains," in Proceedings of the IEEE Symposium on Security and Privacy (SP), may 2023 . P. Ladisa, H. Plate, M. Martinez, and O. Barais, "SoK: Taxonomy of Attacks on Open-Source Software Supply Chains," in Proceedings of the IEEE Symposium on Security and Privacy (SP), may 2023.
3. Challenges of Producing Software Bill of Materials for Java;Balliu M.;IEEE Security & Privacy,2023
4. A comprehensive study of bloated dependencies in the Maven ecosystem