@misc{indiciae85cd7843212d, title = {What are Weak Links in the npm Supply Chain?}, author = {Nusrat Zahan and Thomas Zimmermann and Patrice Godefroid and Brendan Murphy and Chandra Maddila and Laurie Williams}, year = {2022}, doi = {10.1145/3510457.3513044}, url = {https://arxiv.org/abs/2112.10165}, note = {Source identifier: 2112.10165} }