{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,10]],"date-time":"2026-03-10T02:44:56Z","timestamp":1773110696673,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":22,"publisher":"ACM","license":[{"start":{"date-parts":[[2025,6,11]],"date-time":"2025-06-11T00:00:00Z","timestamp":1749600000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Strategic Priority Research Program of the Chinese Academy of Sciences","award":["XDA0320102"],"award-info":[{"award-number":["XDA0320102"]}]},{"DOI":"10.13039\/501100004739","name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["2023121"],"award-info":[{"award-number":["2023121"]}],"id":[{"id":"10.13039\/501100004739","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Basic Research Program of ISCAS","award":["ISCAS-JCZD-202306"],"award-info":[{"award-number":["ISCAS-JCZD-202306"]}]},{"name":"Major Project of ISCAS","award":["ISCAS-ZD-202302"],"award-info":[{"award-number":["ISCAS-ZD-202302"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,6,25]]},"DOI":"10.1145\/3713081.3731738","type":"proceedings-article","created":{"date-parts":[[2025,6,6]],"date-time":"2025-06-06T17:20:36Z","timestamp":1749230436000},"page":"56-60","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":2,"title":["LiPSBOMaker: A Prototype of Multi-Stage Linux Distribution Package SBOM Generator"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-0455-2314","authenticated-orcid":false,"given":"Tong","family":"Qiu","sequence":"first","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Nanjing, Nanjing, China"},{"name":"Nanjing Institute of Software Technology, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0905-2355","authenticated-orcid":false,"given":"Jiaxin","family":"Zhu","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Nanjing, Nanjing, China"},{"name":"Nanjing Institute of Software Technology, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2819-329X","authenticated-orcid":false,"given":"Wei","family":"Chen","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Nanjing, Nanjing, China"},{"name":"Nanjing Institute of Software Technology, Nanjing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8561-2481","authenticated-orcid":false,"given":"Jun","family":"Wei","sequence":"additional","affiliation":[{"name":"Institute of Software, Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Beijing, China"},{"name":"University of Chinese Academy of Sciences, Nanjing, Nanjing, China"},{"name":"Nanjing Institute of Software Technology, Nanjing, China"}]}],"member":"320","published-online":{"date-parts":[[2025,6,11]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2011.36"},{"key":"e_1_3_2_1_2_1","unstructured":"Anchore. [n. d.]. Syft. https:\/\/github.com\/anchore\/syft. Accessed: 2025-02-20."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2023.3302956"},{"key":"e_1_3_2_1_4_1","volume-title":"SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis. arXiv preprint arXiv:2409.01214","author":"Cofano Serena","year":"2024","unstructured":"Serena Cofano, Giacomo Benedetti, and Matteo Dell'Amico. 2024. SBOM Generation Tools in the Python Ecosystem: an In-Detail Analysis. arXiv preprint arXiv:2409.01214 (2024)."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3347446"},{"key":"e_1_3_2_1_6_1","unstructured":"Debian. [n. d.]. Debian Policy Manual: Relationships - Virtual Packages and Provides. https:\/\/www.debian.org\/doc\/debian-policy\/ch-relationships.html#virtual-packages-provides"},{"key":"e_1_3_2_1_7_1","unstructured":"Debian. 2025. Debian. https:\/\/www.debian.org\/"},{"key":"e_1_3_2_1_8_1","unstructured":"Fedora. 2025. Fedora Project. https:\/\/fedoraproject.org\/"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2020.110653"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597926.3598143"},{"key":"e_1_3_2_1_11_1","volume-title":"SPDX Specification Version 2.3","author":"Linux Foundation","unstructured":"Linux Foundation 2022. SPDX Specification Version 2.3. Linux Foundation. [S]."},{"key":"e_1_3_2_1_12_1","volume-title":"A landscape study of open source and proprietary tools for software bill of materials (sbom). arXiv preprint arXiv:2402.11151","author":"Mirakhorli Mehdi","year":"2024","unstructured":"Mehdi Mirakhorli, Derek Garcia, Schuyler Dillon, Kevin Laporte, Matthew Morrison, Henry Lu, Viktoria Koscinski, and Christopher Enoch. 2024. A landscape study of open source and proprietary tools for software bill of materials (sbom). arXiv preprint arXiv:2402.11151 (2024)."},{"key":"e_1_3_2_1_13_1","unstructured":"NTIA. 2019. Framing Software Component Transparency: Establishing a Common Software Bill of Material (SBOM). https:\/\/www.ntia.gov\/files\/ntia\/publications\/framingsbom_20191112.pdf"},{"key":"e_1_3_2_1_15_1","unstructured":"NVD. [n. d.]. National Vulnerability Database. https:\/\/nvd.nist.gov\/"},{"key":"e_1_3_2_1_16_1","unstructured":"OpenEuler. 2024. Security data SBOM for RPMs (OpenEuler-24.03-LTS-SP1 x86_64). https:\/\/repo.openeuler.org\/security\/data\/sbom\/RPMs\/spdx2.2\/openEuler-24.03-LTS-SP1\/x86_64\/"},{"key":"e_1_3_2_1_17_1","unstructured":"openEuler. 2025. openEuler. https:\/\/www.openeuler.org\/"},{"key":"e_1_3_2_1_18_1","unstructured":"OWASP 2024. CycloneDX Specification Version 1.6. OWASP. [S]."},{"key":"e_1_3_2_1_19_1","unstructured":"RPM. [n. d.]. RPM Manual: Dependencies. https:\/\/rpm-software-management.github.io\/rpm\/manual\/dependencies.html"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/3597503.3623347"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/3551349.3560432"},{"key":"e_1_3_2_1_22_1","unstructured":"The Linux Foundation. 2022. The State of Software Bill of Materials (SBOM) and Cybersecurity Readiness. https:\/\/www.linuxfoundation.org\/tools\/the-state-of-software-bill-of-materials-sbom-and-cybersecurity-readiness\/"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00219"}],"event":{"name":"ISSTA Companion '25: 34th ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Clarion Hotel Trondheim Trondheim Norway","acronym":"ISSTA Companion '25","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering"]},"container-title":["Proceedings of the 34th ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3713081.3731738","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:18:09Z","timestamp":1750295889000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3713081.3731738"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,11]]},"references-count":22,"alternative-id":["10.1145\/3713081.3731738","10.1145\/3713081"],"URL":"https:\/\/doi.org\/10.1145\/3713081.3731738","relation":{},"subject":[],"published":{"date-parts":[[2025,6,11]]},"assertion":[{"value":"2025-06-11","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}