Motivation: Society's dependence on Open Source Software (OSS) and the communities that
maintain the OSS is ever-growing. So are the potential risks of, eg, vulnerabilities being …

The software product is a source of cyber-attacks that target organizations by using their
software supply chain as a distribution vector. As the reliance of software projects on open …

Open source software ecosystems consist of thousands of interdependent libraries, which
users can combine to great effect. Recent work has pointed out two kinds of risks in these …

In 2022, generative model based coding assistants became widely available with the public
release of GitHub Copilot. Approaches to generative coding are often critiqued within the …

Abstract Context Free and Open Source Software (FOSS) communities' ability to stay viable
and productive over time is pivotal for society as they maintain the building blocks that digital …

While open-source software has enabled significant levels of reuse to speed up software
development, it has also given rise to the dreadful dependency hell that all software …

Governments are increasingly employing funding for open source software (OSS)
development as a policy lever to support the security of software supply chains, digital …

Static analysis is a classical technique for improving software security and software quality in
general. Fairly recently, a new static analyzer was implemented in the GNU Compiler …

Peer produced goods, such as online knowledge bases and free/libre open source software
rely on contributors who often choose their tasks regardless of consumer needs. These …

Organizing complex peer production projects and advancing scientific knowledge of open
collaboration each depend on the ability to measure quality. Wikipedia community members …