{"id":"https://openalex.org/W4398766352","doi":"https://doi.org/10.1145/3639476.3639775","title":"Decomposing and Measuring Trust in Open-Source Software Supply Chains","display_name":"Decomposing and Measuring Trust in Open-Source Software Supply Chains","publication_year":2024,"publication_date":"2024-04-14","ids":{"openalex":"https://openalex.org/W4398766352","doi":"https://doi.org/10.1145/3639476.3639775"},"language":"en","primary_location":{"id":"doi:10.1145/3639476.3639775","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639476.3639775","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639476.3639775","source":null,"license":"cc-by-nd","license_id":"https://openalex.org/licenses/cc-by-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM/IEEE 44th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3639476.3639775","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098810046","display_name":"Lina Boughton","orcid":"https://orcid.org/0009-0009-7157-0426"},"institutions":[{"id":"https://openalex.org/I118746106","display_name":"College of Wooster","ror":"https://ror.org/029zqs055","country_code":"US","type":"education","lineage":["https://openalex.org/I118746106"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Lina Boughton","raw_affiliation_strings":["The College of Wooster, Wooster, Ohio, USA"],"affiliations":[{"raw_affiliation_string":"The College of Wooster, Wooster, Ohio, USA","institution_ids":["https://openalex.org/I118746106"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052644156","display_name":"Courtney Miller","orcid":"https://orcid.org/0000-0002-5297-4523"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Courtney Miller","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, Pennsylvania, USA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, Pennsylvania, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074668699","display_name":"Yasemin Acar","orcid":"https://orcid.org/0000-0001-7167-7383"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Yasemin Acar","raw_affiliation_strings":["University of Paderborn, Paderborn, Germany"],"affiliations":[{"raw_affiliation_string":"University of Paderborn, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004650891","display_name":"Dominik Wermke","orcid":"https://orcid.org/0009-0008-2921-1254"},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dominik Wermke","raw_affiliation_strings":["North Carolina State University, Raleigh, USA"],"affiliations":[{"raw_affiliation_string":"North Carolina State University, Raleigh, USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067467896","display_name":"Christian K\u00e4stner","orcid":"https://orcid.org/0000-0002-4450-4572"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christian K\u00e4stner","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, United States of America"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, United States of America","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5098810046"],"corresponding_institution_ids":["https://openalex.org/I118746106"],"apc_list":null,"apc_paid":null,"fwci":1.9311,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.87072592,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"57","last_page":"61"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.979200005531311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.979200005531311,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9715999960899353,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/open-source-software","display_name":"Open source software","score":0.6489644646644592},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.6299028992652893},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5965869426727295},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.5673364996910095},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5548228621482849},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3687335252761841},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.29811590909957886},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18400049209594727},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.06629675626754761}],"concepts":[{"id":"https://openalex.org/C2988343187","wikidata":"https://www.wikidata.org/wiki/Q1130645","display_name":"Open source software","level":3,"score":0.6489644646644592},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.6299028992652893},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5965869426727295},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.5673364996910095},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5548228621482849},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3687335252761841},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.29811590909957886},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18400049209594727},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.06629675626754761}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3639476.3639775","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639476.3639775","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639476.3639775","source":null,"license":"cc-by-nd","license_id":"https://openalex.org/licenses/cc-by-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM/IEEE 44th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3639476.3639775","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639476.3639775","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639476.3639775","source":null,"license":"cc-by-nd","license_id":"https://openalex.org/licenses/cc-by-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM/IEEE 44th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4398766352.pdf"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W1512819087","https://openalex.org/W1590398854","https://openalex.org/W2053153894","https://openalex.org/W2128200145","https://openalex.org/W2133721238","https://openalex.org/W2143074722","https://openalex.org/W2144816256","https://openalex.org/W2168248828","https://openalex.org/W3134111219","https://openalex.org/W4239628796","https://openalex.org/W4248588746","https://openalex.org/W4288057810","https://openalex.org/W4293153805","https://openalex.org/W4385208592","https://openalex.org/W6892417951"],"related_works":["https://openalex.org/W4376877853","https://openalex.org/W1493891899","https://openalex.org/W4250928611","https://openalex.org/W166480398","https://openalex.org/W1612808768","https://openalex.org/W167327709","https://openalex.org/W1977393088","https://openalex.org/W4387839566","https://openalex.org/W4210922265","https://openalex.org/W2491403535"],"abstract_inverted_index":{"Trust":[0],"is":[1],"integral":[2],"for":[3,80,98,114,119,129,133],"the":[4,18,37,74,84,89,115,134],"successful":[5],"and":[6,20,31,45,49,123],"secure":[7],"functioning":[8],"of":[9,22,39,76,86,117,137],"software":[10],"supply":[11,32,71],"chains,":[12],"making":[13],"it":[14],"important":[15],"to":[16,65],"measure":[17,66],"state":[19],"evolution":[21],"trust":[23,40,67,81,100,108,118,138],"in":[24,68,88,101,124,139],"open":[25,69],"source":[26,70],"communities.":[27],"However,":[28],"existing":[29],"security":[30],"chain":[33],"research":[34],"often":[35],"studies":[36],"concept":[38],"without":[41,56],"a":[42,96,102,120],"clear":[43],"definition":[44],"relies":[46],"on":[47,83],"obvious":[48],"easily":[50],"available":[51],"signals":[52],"like":[53],"GitHub":[54],"stars":[55],"deeper":[57],"grounding.":[58],"In":[59],"this":[60,92],"paper,":[61],"we":[62,94],"explore":[63],"how":[64],"chains":[72],"with":[73],"goal":[75],"developing":[77],"robust":[78],"measures":[79],"based":[82],"behaviors":[85],"developers":[87],"community.":[90],"To":[91],"end,":[93],"contribute":[95],"process":[97],"decomposing":[99],"complex":[103],"large-scale":[104],"system":[105],"into":[106],"key":[107],"relationships,":[109],"systematically":[110],"identifying":[111],"behavior-based":[112],"indicators":[113],"components":[116],"given":[121],"relationship,":[122],"turn":[125],"operationalizing":[126],"data-driven":[127],"metrics":[128],"those":[130],"indicators,":[131],"allowing":[132],"wide-scale":[135],"measurement":[136],"practice.":[140]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}