{"id":"https://openalex.org/W4398186389","doi":"https://doi.org/10.1145/3605098.3635927","title":"SBOM Generation Tools Under Microscope: A Focus on The npm Ecosystem","display_name":"SBOM Generation Tools Under Microscope: A Focus on The npm Ecosystem","publication_year":2024,"publication_date":"2024-04-08","ids":{"openalex":"https://openalex.org/W4398186389","doi":"https://doi.org/10.1145/3605098.3635927"},"language":"en","primary_location":{"id":"doi:10.1145/3605098.3635927","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3605098.3635927","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098737785","display_name":"Md Fazle Rabbi","orcid":"https://orcid.org/0000-0002-3815-8925"},"institutions":[{"id":"https://openalex.org/I106969075","display_name":"Idaho State University","ror":"https://ror.org/0162z8b04","country_code":"US","type":"education","lineage":["https://openalex.org/I106969075"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Md Fazle Rabbi","raw_affiliation_strings":["Idaho State University, Pocatello, United States"],"raw_orcid":"https://orcid.org/0000-0002-3815-8925","affiliations":[{"raw_affiliation_string":"Idaho State University, Pocatello, United States","institution_ids":["https://openalex.org/I106969075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063766551","display_name":"Arifa Islam Champa","orcid":"https://orcid.org/0009-0004-2126-6251"},"institutions":[{"id":"https://openalex.org/I106969075","display_name":"Idaho State University","ror":"https://ror.org/0162z8b04","country_code":"US","type":"education","lineage":["https://openalex.org/I106969075"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Arifa Islam Champa","raw_affiliation_strings":["Idaho State University, Pocatello, United States"],"raw_orcid":"https://orcid.org/0009-0004-2126-6251","affiliations":[{"raw_affiliation_string":"Idaho State University, Pocatello, United States","institution_ids":["https://openalex.org/I106969075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053392929","display_name":"Costain Nachuma","orcid":"https://orcid.org/0009-0005-4133-6920"},"institutions":[{"id":"https://openalex.org/I106969075","display_name":"Idaho State University","ror":"https://ror.org/0162z8b04","country_code":"US","type":"education","lineage":["https://openalex.org/I106969075"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Costain Nachuma","raw_affiliation_strings":["Idaho State University, Pocatello, United States"],"raw_orcid":"https://orcid.org/0009-0005-4133-6920","affiliations":[{"raw_affiliation_string":"Idaho State University, Pocatello, United States","institution_ids":["https://openalex.org/I106969075"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087091309","display_name":"Minhaz F. Zibran","orcid":"https://orcid.org/0009-0004-5353-5030"},"institutions":[{"id":"https://openalex.org/I106969075","display_name":"Idaho State University","ror":"https://ror.org/0162z8b04","country_code":"US","type":"education","lineage":["https://openalex.org/I106969075"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Minhaz Fahim Zibran","raw_affiliation_strings":["Idaho State University, Pocatello, United States"],"raw_orcid":"https://orcid.org/0009-0004-5353-5030","affiliations":[{"raw_affiliation_string":"Idaho State University, Pocatello, United States","institution_ids":["https://openalex.org/I106969075"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5098737785"],"corresponding_institution_ids":["https://openalex.org/I106969075"],"apc_list":null,"apc_paid":null,"fwci":15.7389,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.98981196,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1233","last_page":"1241"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9562000036239624,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.6640475392341614},{"id":"https://openalex.org/keywords/ecosystem","display_name":"Ecosystem","score":0.5412885546684265},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5312896370887756},{"id":"https://openalex.org/keywords/microscope","display_name":"Microscope","score":0.5125917792320251},{"id":"https://openalex.org/keywords/microscopy","display_name":"Microscopy","score":0.4471474289894104},{"id":"https://openalex.org/keywords/optics","display_name":"Optics","score":0.24665310978889465},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.17414650321006775},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.15417370200157166},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.11090096831321716}],"concepts":[{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6640475392341614},{"id":"https://openalex.org/C110872660","wikidata":"https://www.wikidata.org/wiki/Q37813","display_name":"Ecosystem","level":2,"score":0.5412885546684265},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5312896370887756},{"id":"https://openalex.org/C67649825","wikidata":"https://www.wikidata.org/wiki/Q196538","display_name":"Microscope","level":2,"score":0.5125917792320251},{"id":"https://openalex.org/C147080431","wikidata":"https://www.wikidata.org/wiki/Q1074953","display_name":"Microscopy","level":2,"score":0.4471474289894104},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.24665310978889465},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.17414650321006775},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.15417370200157166},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.11090096831321716}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3605098.3635927","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3605098.3635927","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2120801660","https://openalex.org/W2498120566","https://openalex.org/W2522793447","https://openalex.org/W2775287434","https://openalex.org/W3120741778","https://openalex.org/W4312823691","https://openalex.org/W4365505517","https://openalex.org/W4384345766","https://openalex.org/W4385690669","https://openalex.org/W4388964164"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Generating":[0],"accurate":[1],"Software":[2],"Bill":[3],"of":[4,32,37,61,76,115,125,132,141],"Materials":[5],"(SBOM)":[6],"is":[7,26,46],"challenging":[8],"due":[9],"to":[10,73,105],"the":[11,15,23,35,62,83,121,138,142],"complex":[12],"dependencies":[13],"in":[14,19,110,120,129,137,146],"diverse":[16],"components":[17],"used":[18],"software":[20,25,42,147],"and":[21,52,58,123,135,144],"also":[22],"way":[24],"built":[27],"into":[28],"executables.":[29],"A":[30],"handful":[31],"tools":[33,65,89],"claim":[34,72],"capability":[36],"automatic":[38],"SBOM":[39,78,126],"generation":[40],"from":[41,79],"distributions":[43],"while":[44],"little":[45],"known":[47],"about":[48],"their":[49,103],"applicability,":[50],"strengths,":[51],"limitations.":[53],"Our":[54],"study":[55,117],"makes":[56],"quantitative":[57],"qualitative":[59],"comparisons":[60],"four":[63,88],"such":[64,133],"(i.e.,":[66],"ORT,":[67],"cnn,":[68],"syft,":[69],"cdxgen)":[70],"that":[71],"be":[74],"capable":[75],"generating":[77],"JavaScript":[80,93],"projects.":[81,95],"For":[82],"comparison,":[84],"we":[85],"operate":[86],"these":[87],"on":[90],"50":[91],"open-source":[92],"npm":[94],"We":[96],"find":[97],"significant":[98],"performance":[99],"variations":[100],"when":[101],"evaluating":[102],"ability":[104],"extract":[106],"component":[107],"details,":[108],"especially":[109],"detecting":[111],"dependencies.":[112],"The":[113],"findings":[114],"this":[116],"are":[118],"useful":[119],"design":[122],"development":[124],"generator":[127],"tools,":[128,134],"end-users'":[130],"selections":[131],"thus":[136],"overall":[139],"improvement":[140],"security":[143],"transparency":[145],"supply":[148],"chain.":[149]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-20T08:49:12.498775","created_date":"2025-10-10T00:00:00"}