research
∙
10/20/2022
PREPRINT: Do OpenSSF Scorecard Practices Contribute to Fewer Vulnerabilities?
Due to the ever-increasing security breaches, practitioners are motivate...
share
research
∙
08/06/2022
PREPRINT: Can the OpenSSF Scorecard be used to measure the security posture of npm and PyPI?
The OpenSSF Scorecard project is an automated tool to monitor the securi...
research
∙
08/02/2022
Do I really need all this work to find vulnerabilities? An empirical case study comparing vulnerability detection techniques on a Java application
CONTEXT: Applying vulnerability detection techniques is one of many task...
research
∙
12/19/2021
What are Weak Links in the npm Supply Chain?
Modern software development frequently uses third-party packages, raisin...
research
∙
03/08/2021