SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2025
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866913986052620288 |
|---|---|
| author | Pohl, Timo Novák, Pavel Ohm, Marc Meier, Michael |
| author_facet | Pohl, Timo Novák, Pavel Ohm, Marc Meier, Michael |
| contents | The disconnect between distributed software artifacts and their supposed source code enables attackers to leverage the build process for inserting malicious functionality. Past research in this field focuses on compiled language ecosystems, mostly analysing Linux distribution packages. However, the popular scripting language ecosystems potentially face unique issues given the systematic difference in distributed artifacts. This SoK provides an overview of existing research, aiming to highlight future directions, as well as chances to transfer existing knowledge from compiled language ecosystems. To that end, we work out key aspects in current research, systematize identified challenges for software reproducibility, and map them between the ecosystems. We find that the literature is sparse, focusing on few individual problems and ecosystems. This allows us to effectively identify next steps to improve reproducibility in this field. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2503_21705 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems Pohl, Timo Novák, Pavel Ohm, Marc Meier, Michael Software Engineering Cryptography and Security The disconnect between distributed software artifacts and their supposed source code enables attackers to leverage the build process for inserting malicious functionality. Past research in this field focuses on compiled language ecosystems, mostly analysing Linux distribution packages. However, the popular scripting language ecosystems potentially face unique issues given the systematic difference in distributed artifacts. This SoK provides an overview of existing research, aiming to highlight future directions, as well as chances to transfer existing knowledge from compiled language ecosystems. To that end, we work out key aspects in current research, systematize identified challenges for software reproducibility, and map them between the ecosystems. We find that the literature is sparse, focusing on few individual problems and ecosystems. This allows us to effectively identify next steps to improve reproducibility in this field. |
| title | SoK: Towards Reproducibility for Software Packages in Scripting Language Ecosystems |
| topic | Software Engineering Cryptography and Security |
| url | https://arxiv.org/abs/2503.21705 |