Only 0.56% of popular GitHub repositories contain policy-driven SBOMs, and the dependencies they list include 2,202 unique known vulnerabilities with 22% of SBOMs lacking license information.
A systematic analysis of the event- stream incident
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.SE 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
Policy-driven Software Bill of Materials on GitHub: An Empirical Study
Only 0.56% of popular GitHub repositories contain policy-driven SBOMs, and the dependencies they list include 2,202 unique known vulnerabilities with 22% of SBOMs lacking license information.