Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security
by Jan-Ulrich Holtgrave and
Kay Friedrich and
Fabian Fischer and
Nicolas Huaman and
Niklas Busch and
Jan H. Klemmer and
Marcel Fourné and
Oliver Wiese and
Dominik Wermke and
Sascha Fahl