LastPyMile: identifying the discrepancy between sources and packages-Reference-Cited by-同舟云学术

LastPyMile: identifying the discrepancy between sources and packages

Published:2021-08-18 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering
language:
Short-container-title:

Author:

Vu Duc-Ly¹^ORCID,Massacci Fabio²,Pashchenko Ivan¹,Plate Henrik³,Sabetta Antonino³

Affiliation:

1. University of Trento, Italy

2. University of Trento, Italy / Vrije Universiteit Amsterdam, Netherlands

3. SAP Security Research, France

Funder

European H2020 AssureMoss

European H2020 SPARTA

European H2020 CyberSec4Europe

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3468264.3468592

Reference39 articles.

1. William Bengtson. 2020. Python Typosquatting for Fun not Profit. https://medium.com/@williambengtson/python-typosquatting-for-fun-not-profit-99869579c35d Accessed: 2020-08-17. William Bengtson. 2020. Python Typosquatting for Fun not Profit. https://medium.com/@williambengtson/python-typosquatting-for-fun-not-profit-99869579c35d Accessed: 2020-08-17.

Cited by 25 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. OSSIntegrity: Collaborative open-source code integrity verification;Computers & Security;2024-09

2. Software supply chain security: a systematic literature review;International Journal of Computers and Applications;2024-08-19

3. PyRadar: Towards Automatically Retrieving and Validating Source Code Repository Information for PyPI Packages;Proceedings of the ACM on Software Engineering;2024-07-12

4. Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

5. Characterizing Deep Learning Package Supply Chains in PyPI: Domains, Clusters, and Disengagement;ACM Transactions on Software Engineering and Methodology;2024-04-18