REVIEW 1 cited by
Challenges of Producing Software Bill Of Materials for Java
Not yet reviewed by Pith; the record is open.
This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.
SPECIMEN: schema-true, not a live event
T0 review · schema-true
One-sentence machine reading of the paper's core claim.
pith:XXXXXXXX · record.json · timestamp
Signed reviews
read the original abstract
Software bills of materials (SBOM) promise to become the backbone of software supply chain hardening. We deep-dive into 6 tools and the accuracy of the SBOMs they produce for complex open-source Java projects. Our novel insights reveal some hard challenges for the accurate production and usage of SBOMs.
Forward citations
Cited by 1 Pith paper
-
The State of the SBOM Tool Ecosystems: A Comparative Analysis of SPDX and CycloneDX
CycloneDX tools and projects using them show higher GitHub activity metrics, while SPDX has a larger and older tool ecosystem.
Discussion (0). Continue with ORCID to comment.