{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:08:40Z","timestamp":1750219720849,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":6,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,26]],"date-time":"2023-11-26T00:00:00Z","timestamp":1700956800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,30]]},"DOI":"10.1145\/3605770.3625209","type":"proceedings-article","created":{"date-parts":[[2023,11,23]],"date-time":"2023-11-23T11:46:12Z","timestamp":1700739972000},"page":"27-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["What Does it Look Like to Code-sign for an Entire Packaging Ecosystem?"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8328-5627","authenticated-orcid":false,"given":"William","family":"Woodruff","sequence":"first","affiliation":[{"name":"Trail of Bits, New York, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,11,26]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"https:\/\/www.sigstore.dev\/. Online","author":"The Sigstore Authors","year":"2023","unstructured":"The Sigstore Authors. 2023. Sigstore. https:\/\/www.sigstore.dev\/. Online; accessed 2023-09--20."},{"key":"e_1_3_2_1_2_1","volume-title":"The Update Framework. Online","author":"The TUF","year":"2023","unstructured":"The TUF Authors. 2023. The Update Framework. Online; accessed 2023-09--20."},{"key":"e_1_3_2_1_3_1","volume-title":"in-toto. Online","author":"The","year":"2023","unstructured":"The in-toto Authors. 2023. in-toto. Online; accessed 2023-09--20."},{"key":"e_1_3_2_1_4_1","unstructured":"The Crates.io Maintainers. 2023. Crates.io. Online; accessed 2023-09--20."},{"key":"e_1_3_2_1_5_1","volume-title":"The Python Package Index. Online","author":"The Py PI","year":"2023","unstructured":"The PyPI Maintainers. 2023. The Python Package Index. Online; accessed 2023-09--20."},{"key":"e_1_3_2_1_6_1","unstructured":"The RubyGems Maintainers. 2023. RubyGems. Online; accessed 2023-09--20."}],"event":{"name":"CCS '23: ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Copenhagen Denmark","acronym":"CCS '23"},"container-title":["Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3605770.3625209","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3605770.3625209","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:36:18Z","timestamp":1750178178000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3605770.3625209"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,26]]},"references-count":6,"alternative-id":["10.1145\/3605770.3625209","10.1145\/3605770"],"URL":"https:\/\/doi.org\/10.1145\/3605770.3625209","relation":{},"subject":[],"published":{"date-parts":[[2023,11,26]]},"assertion":[{"value":"2023-11-26","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}