{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,23]],"date-time":"2025-03-23T04:40:15Z","timestamp":1742704815164,"version":"3.40.2"},"publisher-location":"Cham","reference-count":17,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031858482","type":"print"},{"value":"9783031858499","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-85849-9_29","type":"book-chapter","created":{"date-parts":[[2025,3,23]],"date-time":"2025-03-23T04:24:27Z","timestamp":1742703867000},"page":"366-381","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["npmSECO: A Tool for Integrating Trust into the Software Ecosystem"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8042-3278","authenticated-orcid":false,"given":"Fang","family":"Hou","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Angel","family":"Temelko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Martijn","family":"Voordouw","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,3,23]]},"reference":[{"key":"29_CR1","doi-asserted-by":"crossref","unstructured":"Arteca, E., Turcotte, A.: Npm-filter: automating the mining of dynamic information from npm packages. In: Proceedings of the 19th International Conference on Mining Software Repositories, pp. 304\u2013308. MSR \u201922, Association for Computing Machinery, New York, NY, USA (2022)","DOI":"10.1145\/3524842.3528501"},{"key":"29_CR2","doi-asserted-by":"crossref","unstructured":"Duan, R., Alrawi, O., Kasturi, R.P., Elder, R.S., Saltaformaggio, B., Lee, W.: Towards measuring supply chain attacks on package managers for interpreted languages. Network and Distributed Systems Security (NDSS) Symposium 2021 (2021)","DOI":"10.14722\/ndss.2021.23055"},{"issue":"1","key":"29_CR3","doi-asserted-by":"publisher","first-page":"117","DOI":"10.1017\/S1464793105006949","volume":"81","author":"RM Ewers","year":"2006","unstructured":"Ewers, R.M., Didham, R.K.: Confounding factors in the detection of species responses to habitat fragmentation. Biol. Rev. 81(1), 117\u2013142 (2006)","journal-title":"Biol. Rev."},{"key":"29_CR4","doi-asserted-by":"crossref","unstructured":"Garrett, K., Ferreira, G., Jia, L., Sunshine, J., K\u00e4stner, C.: Detecting suspicious package updates. In: 2019 IEEE\/ACM 41st International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER), pp. 13\u201316 (2019)","DOI":"10.1109\/ICSE-NIER.2019.00012"},{"key":"29_CR5","doi-asserted-by":"crossref","unstructured":"Hou, F., Farshidi, S., Jansen, S.: Trustseco: a distributed infrastructure for providing trust in the software ecosystem. In: International Conference on Advanced Information Systems Engineering, pp. 121\u2013133. Springer (2021)","DOI":"10.1007\/978-3-030-79022-6_11"},{"key":"29_CR6","doi-asserted-by":"crossref","unstructured":"Hou, F., Jansen, F., De\u00a0Vries, A., Jansen, S.: The role of software trust in selection of open-source and closed software. In: 2023 IEEE\/ACM 11th International Workshop on Software Engineering for Systems-of-Systems and Software Ecosystems (SESoS), pp. 30\u201337. IEEE (2023)","DOI":"10.1109\/SESoS59159.2023.00010"},{"issue":"1","key":"29_CR7","doi-asserted-by":"publisher","first-page":"8","DOI":"10.1007\/s10664-022-10238-y","volume":"28","author":"F Hou","year":"2023","unstructured":"Hou, F., Jansen, S.: A systematic literature review on trust in the software ecosystem. Empir. Softw. Eng. 28(1), 8 (2023)","journal-title":"Empir. Softw. Eng."},{"key":"29_CR8","unstructured":"Jansen, F., Jansen, S., Hou, F.: TrustSECO: an interview survey into software trust. arXiv preprint arXiv:2101.06138 (2021)"},{"key":"29_CR9","doi-asserted-by":"crossref","unstructured":"Jansen, S., Cusumano, M.A., Brinkkemper, S.: Software Ecosystems: Analyzing and Managing Business Networks in the Software Industry. Edward Elgar (2013)","DOI":"10.4337\/9781781955635"},{"issue":"12","key":"29_CR10","doi-asserted-by":"publisher","first-page":"2954","DOI":"10.1111\/jan.13031","volume":"72","author":"H Kallio","year":"2016","unstructured":"Kallio, H., Pietil\u00e4, A.M., Johnson, M., Kangasniemi, M.: Systematic methodological review: developing a framework for a qualitative semi-structured interview guide. J. Adv. Nurs. 72(12), 2954\u20132965 (2016)","journal-title":"J. Adv. Nurs."},{"key":"29_CR11","doi-asserted-by":"crossref","unstructured":"Miller, C., K\u00e4stner, C., Vasilescu, B.: We feel like we\u2019re winging it: a study on navigating open-source dependency abandonment. In: Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp. 1281\u20131293 (2023)","DOI":"10.1145\/3611643.3616293"},{"key":"29_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2022.111588","volume":"198","author":"S Mujahid","year":"2023","unstructured":"Mujahid, S., Abdalkareem, R., Shihab, E.: What are the characteristics of highly-selected packages? A case study on the npm ecosystem. J. Syst. Softw. 198, 111588 (2023)","journal-title":"J. Syst. Softw."},{"key":"29_CR13","doi-asserted-by":"crossref","unstructured":"Ohm, M., Stuke, C.: SOK: practical detection of software supply chain attacks. In: Proceedings of the 18th International Conference on Availability, Reliability and Security, pp. 1\u201311 (2023)","DOI":"10.1145\/3600160.3600162"},{"key":"29_CR14","doi-asserted-by":"crossref","unstructured":"Samoaa, H.P., Longa, A., Mohamad, M., Chehreghani, M.H., Leitner, P.: TEP-GNN: accurate execution time prediction of functional tests using graph neural networks. In: International Conference on Product-Focused Software Process Improvement, pp. 464\u2013479. Springer (2022)","DOI":"10.1007\/978-3-031-21388-5_32"},{"key":"29_CR15","unstructured":"Temelko, A., Hou, F., Farshidi, S., Jansen, S.: Systematic literature review of the trust reinforcement mechanisms exist in package ecosystems. arXiv preprint arXiv:2407.02522 (2024)"},{"key":"29_CR16","doi-asserted-by":"crossref","unstructured":"Vu, D.L., Pashchenko, I., Massacci, F., Plate, H., Sabetta, A.: Towards using source code repositories to identify software supply chain attacks. In: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, pp. 2093\u20132095. CCS \u201920, Association for Computing Machinery, New York, NY, USA (2020)","DOI":"10.1145\/3372297.3420015"},{"key":"29_CR17","unstructured":"Zahan, N., Kanakiya, P., Hambleton, B., Shohan, S., Williams, L.: Preprint: can the openssf scorecard be used to measure the security posture of npm and pypi? arXiv preprint arXiv:2208.03412 (2022)"}],"container-title":["Lecture Notes in Business Information Processing","Software Business"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-85849-9_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,23]],"date-time":"2025-03-23T04:24:33Z","timestamp":1742703873000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-85849-9_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031858482","9783031858499"],"references-count":17,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-85849-9_29","relation":{},"ISSN":["1865-1348","1865-1356"],"issn-type":[{"value":"1865-1348","type":"print"},{"value":"1865-1356","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"23 March 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICSOB","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Software Business","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Utrecht","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"The Netherlands","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 November 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icsob2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icsob2024.github.io\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}