Systematic literature review of the trust reinforcement mechanisms exist in package ecosystems
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866913415673413632 |
|---|---|
| author | Temelko, Angel Hou, Fang Farshidi, Siamak Jansen, Slinger |
| author_facet | Temelko, Angel Hou, Fang Farshidi, Siamak Jansen, Slinger |
| contents | We conducted a thorough SLR to better grasp the challenges and possible solutions associated with existing npm security tools. Our goal was to delve into documented experiences and findings. Specifically, we were keen to learn about the motivations behind choosing third-party packages, software engineers' responses to warning messages, and their overall understanding of security issues. The main aim of this review was to pinpoint prevailing trends, methods, and concerns in trust tools for the present npm environment. Furthermore, we sought to understand the complexities of integrating SECO into platforms such as npm. By analyzing earlier studies, our intention was to spot any overlooked areas and steer our research to address them. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2407_02522 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Systematic literature review of the trust reinforcement mechanisms exist in package ecosystems Temelko, Angel Hou, Fang Farshidi, Siamak Jansen, Slinger Software Engineering We conducted a thorough SLR to better grasp the challenges and possible solutions associated with existing npm security tools. Our goal was to delve into documented experiences and findings. Specifically, we were keen to learn about the motivations behind choosing third-party packages, software engineers' responses to warning messages, and their overall understanding of security issues. The main aim of this review was to pinpoint prevailing trends, methods, and concerns in trust tools for the present npm environment. Furthermore, we sought to understand the complexities of integrating SECO into platforms such as npm. By analyzing earlier studies, our intention was to spot any overlooked areas and steer our research to address them. |
| title | Systematic literature review of the trust reinforcement mechanisms exist in package ecosystems |
| topic | Software Engineering |
| url | https://arxiv.org/abs/2407.02522 |