CHAINS research project at KTH Royal Institute of Technology

empirical study of AI coding-agent commits (master thesis Xianqing)

Force AI agents to use the latest version of dependency

Lockfiles for Maven. Pin your dependencies. Build with integrity.

reproducible build study of javascript bundling (thesis E. Vitell)

Long term storage of software bills of materials (sbom) https://arxiv.org/pdf/2303.11102.pdf

Checksums for GitHub Actions.

calls the police if a prohibited class is loaded by the JVM http://arxiv.org/pdf/2407.00246

software supply chain art