Concepedia

Package Security

Package Security is a scholarly construct in software engineering that systematically addresses vulnerabilities, integrity, and trustworthiness in software packages throughout their lifecycle within package management ecosystems.

21

Publications

818

Citations

73

Authors

29

Institutions

Publications per year

2017–2026

16

Parents

Publications

21

Towards Measuring Supply Chain Attacks on Package Managers for Interpreted Languages

Ruian Duan, Omar Alrawi, Ranjita Pai Kasturi et al. · 2021 · 98 citations · Full text

, , +16

Small World with High Risks: A Study of Security Threats in the npm Ecosystem

Markus Zimmermann, Cristian-Alexandru Staicu, Cam Tenny et al. · arXiv (Cornell University) · 2019 · 89 citations · Full text

, , +13

What are weak links in the npm supply chain?

Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid et al. · 2022 · 73 citations · Full text

, , +17

Empirical analysis of security vulnerabilities in Python packages

Mahmoud Alfadel, Diego Elias Costa, Emad Shihab · Empirical Software Engineering · 2023 · 72 citations

, , +16

Empirical Analysis of Security Vulnerabilities in Python Packages

Mahmoud Alfadel, Diego Elias Costa, Emad Shihab · 2021 · 69 citations

, , +16

1–5 of 21

Authors

73

  1. DE
    Diego Elias Costa

    Concordia University, Canada

    2 publications · 141 citations

    2

    h-index

  2. CS
    Cristian-Alexandru Staicu

    Technische Universität Darmstadt, Germany

    2 publications · 123 citations

    2

    h-index

  3. MA
    Mahmoud Alfadel

    Concordia University, Canada

    2 publications · 141 citations

    2

    h-index

  4. ES
    Emad Shihab

    Concordia University, Canada

    2 publications · 141 citations

    2

    h-index

  5. TB
    Thomas Brendan Murphy

    University College Dublin, Ireland

    2 publications · 90 citations

    2

    h-index

1–5 of 73

Institutions

29

  1. Technische Universität Darmstadt

    Darmstadt, Germany

    2 h-index

    6 publications

    369 citations

  2. Concordia University

    Montreal, Canada

    2 h-index

    5 publications

    351 citations

  3. North Carolina State University

    Raleigh, United States

    2 h-index

    4 publications

    180 citations

  4. Guangzhou HKUST Fok Ying Tung Research Institute

    Guangzhou, China

    1 h-index

    1 publications

    16 citations

  5. University of Turku

    Turku, Finland

    1 h-index

    3 publications

    102 citations

  6. Microsoft Research (United Kingdom)

    Cambridge, United Kingdom

    1 h-index

    4 publications

    292 citations

  7. Laboratoire d'Informatique, du Traitement de l'Information et des Systèmes

    Saint-Étienne-du-Rouvray, France

    1 h-index

    1 publications

    15 citations

  8. Cranfield University

    Cranfield, United Kingdom

    1 h-index

    3 publications

    36 citations

1–8 of 29

Venues

  1. arXiv (Cornell University)

    Repository · 2 publications · 101 citations

    2

    h-index

  2. Empirical Software Engineering

    2 publications · 105 citations

    2

    h-index

  3. IEEE Security & Privacy

    1 publications · 31 citations

    1

    h-index

  4. CISPA Helmholtz Center

    Repository · 1 publications · 34 citations

    1

    h-index

  5. Information and Software Technology

    1 publications · 15 citations

    1

    h-index

1–5