TY - RPRT TI - Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management AU - Larissa Schmid AU - Diogo Gaspar AU - Raphina Liu AU - Sofia Bobadilla AU - Benoit Baudry AU - Martin Monperrus PY - 2026 UR - https://arxiv.org/abs/2603.24282 ID - 2603.24282 ER -