AROMA+: A Study of Factors Affecting Reproducible Builds in the Maven Ecosystem
Modern software engineering establishes software supply chains and relies on tools and libraries to improve productivity. However, reusing external software in a project presents a security risk when the source of the component is unknown or the consistency of a component cannot be verified. Reproducible builds present...