Document detail
ID
oai:arXiv.org:2407.02522
Topic
Computer Science - Software Engine...Author
Temelko, Angel Hou, Fang Farshidi, Siamak Jansen, SlingerCategory
Computer Science
Year
2024
listing date
7/10/2024
Abstract
We conducted a thorough SLR to better grasp the challenges and possible solutions associated with existing npm security tools.
Our goal was to delve into documented experiences and findings.
Specifically, we were keen to learn about the motivations behind choosing third-party packages, software engineers' responses to warning messages, and their overall understanding of security issues.
The main aim of this review was to pinpoint prevailing trends, methods, and concerns in trust tools for the present npm environment.
Furthermore, we sought to understand the complexities of integrating SECO into platforms such as npm.
By analyzing earlier studies, our intention was to spot any overlooked areas and steer our research to address them.
Temelko, Angel,Hou, Fang,Farshidi, Siamak,Jansen, Slinger, 2024, Systematic literature review of the trust reinforcement mechanisms exist in package ecosystems
