TY  - RPRT
TI  - Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks
AU  - Hao He
AU  - Bogdan Vasilescu
AU  - Christian Kästner
PY  - 2025
DO  - 10.1145/3715728
UR  - https://arxiv.org/abs/2502.06662
ID  - 2502.06662
ER  -