Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks | Paper Citation Record

Observation 5f84f608-cc15-4c68-bb1a-1c7149e95fa4 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.705065Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 55d628c7-4f85-425e-86c5-367c777e5efc · outbound

This paper cites https://doi.org/10.1109/MSR52588.2021.00037 Chris Bogart, Christian Kästner, James D.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1109/MSR52588.2021.00037 Chris Bogart, Christian Kästner, James D

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.671718Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3f55bf83-a250-441c-a6dc-4c461e550d10 · outbound

This paper cites ACM Trans.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks ACM Trans

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.675555Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation be6d0158-7632-489d-a79d-3d4ea5062697 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.693288Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d38489d8-b673-45ec-be7c-7a8ab7e27332 · outbound

This paper cites In 37th IEEE/ACM International Conference on Software Engineering, ICSE 2015, Florence, Italy, May 16-24, 2015, Volume.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 37th IEEE/ACM International Conference on Software Engineering, ICSE 2015, Florence, Italy, May 16-24, 2015, Volume

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.701377Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1d4088a3-9085-4811-84b1-4d4df995aad5 · outbound

This paper cites Retrieved December 11, 2023 from https://crashoverride.com/blog/dependency-pinning-only-works-if-you-actually-review-the-updates Erik DeBill.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 11, 2023 from https://crashoverride.com/blog/dependency-pinning-only-works-if-you-actually-review-the-updates Erik DeBill

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.717307Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ca4f89e5-abf4-4bae-9e7c-d01634f72327 · outbound

This paper cites Retrieved May 23, 2024 from http://www.modulecounts.com/ Alexandre Decan and Tom Mens.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved May 23, 2024 from http://www.modulecounts.com/ Alexandre Decan and Tom Mens

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.721413Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5a0b1e96-2899-40ba-b9dd-87876e89c03d · outbound

This paper cites Software Eng.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Software Eng

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.725218Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8886afe1-ca8c-4a12-b49f-c13b75b2ceec · outbound

This paper cites In Proceedings of the 16th International Conference on Mining Software Repositories, MSR 2019, 26-27 May 2019, Montreal, Canada.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 16th International Conference on Mining Software Repositories, MSR 2019, 26-27 May 2019, Montreal, Canada

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.736391Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d4740adb-f240-475b-aa79-eb308dd75106 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.743507Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 90d803f0-1fb4-4af3-82f8-b54f6c4297d5 · outbound

This paper cites In ISSTA ’20: 29th ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual Event, USA, July 18-22, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In ISSTA ’20: 29th ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual Event, USA, July 18-22, 2020

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.747476Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c18c0203-fe6d-48e2-8d19-1adaeefd572d · outbound

This paper cites login Usenix Mag.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks login Usenix Mag

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.312726Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 196a584a-3d4c-442a-9188-923f0c89fa13 · outbound

This paper cites Retrieved April 21, 2024 from https://github.com/advisories Google.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved April 21, 2024 from https://github.com/advisories Google

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.284091Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 21394ee7-e446-4ed2-a3dc-170633eedc49 · outbound

This paper cites Retrieved September 8, 2024 from https://cloud.google.com/security/products/ assured-open-source-software Hacker News.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved September 8, 2024 from https://cloud.google.com/security/products/ assured-open-source-software Hacker News

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.273547Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 07e1a75b-021d-4357-b1f3-cfdc16269a80 · outbound

This paper cites Retrieved December 11, 2023 from https://news.ycombinator.com/item?id=14759329 Hacker News.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 11, 2023 from https://news.ycombinator.com/item?id=14759329 Hacker News

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.263235Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation a12fe0da-f2a9-4506-9a1d-98e4a4cd87df · outbound

This paper cites Retrieved December 13, 2023 from https://news.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 13, 2023 from https://news

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.252350Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 23f0729c-c62d-41ad-bd51-c0a71007498e · outbound

This paper cites In ESEC/FSE ’21: 29th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, Athens, Greece, August 23-28, 2021.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In ESEC/FSE ’21: 29th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, Athens, Greece, August 23-28, 2021

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.776362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 859f7a2f-2f94-4a38-a0c7-6cac63199fdd · outbound

This paper cites IEEE Trans.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks IEEE Trans

Reference 32

Resolution: metadata mismatch; raw_fallback, observed 2026-08-08T14:47:46.422456Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 4bbed8ab-84c7-45bf-9311-3569e21fa9ac · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 33

Resolution: unresolved; raw_fallback, observed 2026-08-08T14:47:47.241865Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation d40569ff-8708-4d37-9959-ce9f79e86575 · outbound

This paper cites Exploit Prediction Scoring System (EPSS).

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Exploit Prediction Scoring System (EPSS)

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.788915Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2cde4814-9ecd-4f22-8988-4c61d25b96bb · outbound

This paper cites IEEE Trans.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks IEEE Trans

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.793741Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1e407a8d-532f-428c-91a6-8fc5d1deff36 · outbound

This paper cites ACM Trans.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks ACM Trans

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.797776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 36f372f6-1cf3-4141-a2c2-d23b27ea625e · outbound

This paper cites In Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2023, Seattle, W A, USA, July 17-21,.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis, ISSTA 2023, Seattle, W A, USA, July 17-21,

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.231391Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 8606aeba-2443-41f4-88f2-12029d620fa9 · outbound

This paper cites https://doi.org/10.1145/3597926.3598147 Dezhen Kong, Jiakun Liu, Lingfeng Bao, and David Lo.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1145/3597926.3598147 Dezhen Kong, Jiakun Liu, Lingfeng Bao, and David Lo

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.805408Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation caa19653-54b7-40e7-80d8-901a6ac86d1c · outbound

This paper cites Towards Better Comprehension of Breaking Changes in the NPM Ecosystem.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Towards Better Comprehension of Breaking Changes in the NPM Ecosystem

Reference 39

Resolution: metadata mismatch; local_arxiv, observed 2026-08-08T14:47:46.074635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 58708245-d033-487b-96b0-c6e96a4c5c0e · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 40

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.813093Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3288c5b4-5f2e-40c0-beef-d31e937ac696 · outbound

This paper cites In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, Proc.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 44th IEEE Symposium on Security and Privacy, SP 2023, San Francisco, CA, USA, May 21-25, Proc

Reference 41

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.220238Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation da2ca4b8-bbaf-4cb0-a585-50f8d65726b9 · outbound

This paper cites https://doi.org/10.1109/SP46215.2023.10179304 Jasmine Latendresse, Suhaib Mujahid, Diego Elias Costa, and Emad Shihab.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1109/SP46215.2023.10179304 Jasmine Latendresse, Suhaib Mujahid, Diego Elias Costa, and Emad Shihab

Reference 42

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.820581Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b5b388c5-d80c-4f26-a69f-c8afa02a6f5e · outbound

This paper cites In 37th IEEE/ACM International Conference on Automated Software Engineering, ASE 2022, Rochester, MI, USA, October 10-14, 2022.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 37th IEEE/ACM International Conference on Automated Software Engineering, ASE 2022, Rochester, MI, USA, October 10-14, 2022

Reference 43

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.824112Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 74cb0e93-17af-4511-8730-b6950e180821 · outbound

This paper cites Retrieved December 13, 2023 from https://maxleiter.com/blog/pin- dependencies Chengwei Liu, Sen Chen, Lingling Fan, Bihuan Chen, Yang Liu, and Xin Peng.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 13, 2023 from https://maxleiter.com/blog/pin- dependencies Chengwei Liu, Sen Chen, Lingling Fan, Bihuan Chen, Yang Liu, and Xin Peng

Reference 44

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.208559Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 96a9deb6-ff0a-4d6c-91b0-68f850c2e864 · outbound

This paper cites Retrieved December 13, 2023 from https://www.lucidchart.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 13, 2023 from https://www.lucidchart

Reference 46

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.198191Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation c907139a-29f1-49b1-b184-630a1581e8a4 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 47

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.697394Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 69bb8ab5-42dc-4b7a-9ba6-030af1ae7b47 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 48

Resolution: unresolved; raw_fallback, observed 2026-08-08T14:47:47.187689Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 555e8f4a-a668-4504-b513-71db4ecc4775 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 49

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.842093Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 113264e6-ecb4-4094-8986-328e730f92ba · outbound

This paper cites International Journal of Safety and Security Engineering 11, 5 (2021), 537–545.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks International Journal of Safety and Security Engineering 11, 5 (2021), 537–545

Reference 50

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.850372Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation daf771f2-f24b-4c4a-b2aa-dcec87e0fc94 · outbound

This paper cites In 32nd European Conference on Object-Oriented Programming, ECOOP 2018, July 16-21, 2018, Amsterdam, The Netherlands (LIPIcs, Vol.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 32nd European Conference on Object-Oriented Programming, ECOOP 2018, July 16-21, 2018, Amsterdam, The Netherlands (LIPIcs, Vol

Reference 51

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.178309Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 61252c29-4b2f-46e8-b8bc-0aa2b99bb989 · outbound

This paper cites We Feel Like We’re Winging It:.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks We Feel Like We’re Winging It:

Reference 53

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.753573Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 75f81c12-26fe-4307-909d-2b67786e6b70 · outbound

This paper cites In Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering, ASE 2017, Urbana, IL, USA, October 30 - November 03, 2017.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 32nd IEEE/ACM International Conference on Automated Software Engineering, ASE 2017, Urbana, IL, USA, October 30 - November 03, 2017

Reference 54

Resolution: malformed identifier; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.587920Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 325435aa-1c4b-4b0c-ba1b-c2e3ef29f8ed · outbound

This paper cites In ISSTA ’21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual Event, Denmark, July 11-17, 2021 , Cristian Cadar and Xiangyu Zhang (Eds.).

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In ISSTA ’21: 30th ACM SIGSOFT International Symposium on Software Testing and Analysis, Virtual Event, Denmark, July 11-17, 2021 , Cristian Cadar and Xiangyu Zhang (Eds.)

Reference 55

Resolution: verified exact; doi, observed 2026-08-08T14:47:42.073955Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 669127a9-de72-4b2b-a311-987f038a8c48 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 56

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.873156Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9898a980-c6e1-4934-8c21-eb4727e76cdc · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 57

Resolution: unresolved; raw_fallback, observed 2026-08-08T14:47:47.167322Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 923349d3-172d-4a1d-8d4a-b999efd98b25 · outbound

This paper cites In Proceedings of the 12th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, ESEM 2018, Oulu, Finland, October 11-12, 2018.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 12th ACM/IEEE International Symposium on Empirical Software Engineering and Measurement, ESEM 2018, Oulu, Finland, October 11-12, 2018

Reference 58

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.422060Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 8826fc05-7e7d-41aa-b5e4-046980d2f60b · outbound

This paper cites In CCS ’20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13,.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In CCS ’20: 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13,

Reference 59

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.156245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 0d8f9953-892e-4bfa-8758-099729bfaa01 · outbound

This paper cites https://doi.org/10.1145/3372297.3417232 Donald Pinckney, Federico Cassano, Arjun Guha, and Jonathan Bell.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1145/3372297.3417232 Donald Pinckney, Federico Cassano, Arjun Guha, and Jonathan Bell

Reference 60

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.222879Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 14b8984a-7949-414c-981a-87ecede5d540 · outbound

This paper cites https://doi.org/10.1109/MSR59073.2023.00073 Donald Pinckney, Federico Cassano, Arjun Guha, and Jonathan Bell.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1109/MSR59073.2023.00073 Donald Pinckney, Federico Cassano, Arjun Guha, and Jonathan Bell

Reference 61

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.069011Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation de6731d7-3824-4875-bf93-bfe35d9aac93 · outbound

This paper cites Retrieved December 11, 2023 from https://semver.org/ Maciej Radzikowski.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 11, 2023 from https://semver.org/ Maciej Radzikowski

Reference 62

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.144434Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation c5cecf67-c56e-4f01-9735-a0782dcf24f2 · outbound

This paper cites Retrieved December 13, 2023 from https://betterdev.blog/pin- exact-dependency-versions/ Steven Raemaekers, Arie van Deursen, and Joost Visser.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved December 13, 2023 from https://betterdev.blog/pin- exact-dependency-versions/ Steven Raemaekers, Arie van Deursen, and Joost Visser

Reference 63

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.132947Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation b94949b1-86c4-4e7f-ad3b-f5e4a874b206 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 64

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.901246Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a44aae65-f132-4eba-8017-5a36187904bd · outbound

This paper cites Retrieved May 23, 2024 from https://developer.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved May 23, 2024 from https://developer

Reference 65

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.121257Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 61fddeae-0179-4f1c-9adc-296108ac51ae · outbound

This paper cites com/dependency-pinning Edgar H Schein.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks com/dependency-pinning Edgar H Schein

Reference 66

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.107889Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation d20b2bee-4f50-4e44-a811-f8424d69064a · outbound

This paper cites Collective Intelligence 3, 1 (2024), 26339137241231912.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Collective Intelligence 3, 1 (2024), 26339137241231912

Reference 67

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.096327Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 27561123-e884-4fea-be27-ae277cb98e5f · outbound

This paper cites In 44th IEEE/ACM 44th International Conference on Software Engineering, ICSE 2022, Pittsburgh, PA, USA, May 25-27, 2022.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 44th IEEE/ACM 44th International Conference on Software Engineering, ICSE 2022, Pittsburgh, PA, USA, May 25-27, 2022

Reference 68

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:45.912089Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation d732046b-45e9-42cb-be0c-b72111ce1b6f · outbound

This paper cites Retrieved Augest 22, 2023 from https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/ Sonatype.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved Augest 22, 2023 from https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-package-vulnerability/ Sonatype

Reference 72

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.060566Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 5de800df-8ac0-472e-a123-f2d9800980d4 · outbound

This paper cites Retrieved May 24, 2024 from https://www.sonatype.com/ blog/software-supply-chain-a-definition-and-introductory-guide Sonatype.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved May 24, 2024 from https://www.sonatype.com/ blog/software-supply-chain-a-definition-and-introductory-guide Sonatype

Reference 73

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.032182Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 7a4568b7-82fa-4c1f-a105-e1375cafeda0 · outbound

This paper cites com/questions/28509481/should-i-pin-my-python-dependencies-versions Alois Stutzer and Bruno S Frey.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks com/questions/28509481/should-i-pin-my-python-dependencies-versions Alois Stutzer and Bruno S Frey

Reference 75

Resolution: verified exact; raw_fallback, observed 2026-08-08T14:47:44.544941Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 0aefaed7-686c-449b-9b6f-8affe7bb9b1f · outbound

This paper cites https://doi.org/doi.org/10.1016/j.socec.2005.11.043 TechTarget.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/doi.org/10.1016/j.socec.2005.11.043 TechTarget

Reference 76

Resolution: verified exact; doi, observed 2026-08-08T14:47:42.048466Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation a8ac293a-e596-46a3-b3fb-06101f627c64 · outbound

This paper cites Retrieved May 22, 2024 from https://www.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved May 22, 2024 from https://www

Reference 77

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.017759Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation a6bcc374-f37c-467a-a6d3-56f72e5a4aa6 · outbound

This paper cites Retrieved August 27, 2024 from https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the- nations-cybersecurity/ David A.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved August 27, 2024 from https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the- nations-cybersecurity/ David A

Reference 78

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.004958Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 12026f34-d8d6-4466-bc96-8de8bfa49a1e · outbound

This paper cites In Proceedings of the 41st International Conference on Software Engineering, ICSE 2019, Montreal, QC, Canada, May Proc.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 41st International Conference on Software Engineering, ICSE 2019, Montreal, QC, Canada, May Proc

Reference 79

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:46.990076Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 7625dc85-0b40-4930-98b1-aadec5531b1a · outbound

This paper cites https://doi.org/10.1109/ICSE.2019.00048 Marat Valiev, Bogdan Vasilescu, and James D.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1109/ICSE.2019.00048 Marat Valiev, Bogdan Vasilescu, and James D

Reference 80

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:44.430073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 114013b8-e260-4fc8-b358-562f8b51c935 · outbound

This paper cites In ESEC/FSE ’20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, Virtual Event, USA, November 8-13, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In ESEC/FSE ’20: 28th ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering, Virtual Event, USA, November 8-13, 2020

Reference 82

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:44.084477Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 0b461f4e-83ef-47a7-967e-f84d35bbfd39 · outbound

This paper cites In IEEE European Symposium on Security and Privacy Workshops, EuroS&P Workshops 2020, Genoa, Italy, September 7-11, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In IEEE European Symposium on Security and Privacy Workshops, EuroS&P Workshops 2020, Genoa, Italy, September 7-11, 2020

Reference 83

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:43.898709Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation bf12e4f3-80f7-409d-afb9-a7405b56cd2d · outbound

This paper cites In MSR ’20: 17th International Conference on Mining Software Repositories, Seoul, Republic of Korea, 29-30 June, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In MSR ’20: 17th International Conference on Mining Software Repositories, Seoul, Republic of Korea, 29-30 June, 2020

Reference 84

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:44.735239Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation e11501fe-1609-43ed-b9b8-c59a29e2d30a · outbound

This paper cites IEEE Trans.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks IEEE Trans

Reference 85

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:43.656697Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation a2ff3e98-a8bd-42cb-81c0-7e5640567a1e · outbound

This paper cites In ICSE ’20: 42nd International Conference on Software Engineering, Seoul, South Korea, 27 June - 19 July, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In ICSE ’20: 42nd International Conference on Software Engineering, Seoul, South Korea, 27 June - 19 July, 2020

Reference 86

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:43.478468Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation b6217755-a72f-4165-93aa-b93b17558a9a · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 87

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:44.257906Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 0bbbf1d8-6a27-4014-b48b-1d1d7542547c · outbound

This paper cites Retrieved May 23, 2024 from https://www.hyrumslaw.com/ Jiadong Xie, Fan Zhang, Kai Wang, Xuemin Lin, and Wenjie Zhang.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved May 23, 2024 from https://www.hyrumslaw.com/ Jiadong Xie, Fan Zhang, Kai Wang, Xuemin Lin, and Wenjie Zhang

Reference 88

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:46.975874Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation d5427762-551f-425c-992d-b31e3c146387 · outbound

This paper cites In 39th IEEE International Conference on Data Engineering, ICDE 2023, Anaheim, CA, USA, April 3-7, 2023.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 39th IEEE International Conference on Data Engineering, ICDE 2023, Anaheim, CA, USA, April 3-7, 2023

Reference 89

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:43.315430Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation df452be6-2c84-4205-9291-1dc05896eed5 · outbound

This paper cites In 38th IEEE/ACM International Conference on Automated Software Engineering, ASE 2023, Luxembourg, September 11-15, 2023.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 38th IEEE/ACM International Conference on Automated Software Engineering, ASE 2023, Luxembourg, September 11-15, 2023

Reference 90

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:43.157126Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation b9117aa3-3e2a-4f98-a114-0cf8430d0427 · outbound

This paper cites In Proceedings of the Sixth ACM on Conference on Data and Application Security and Privacy, CODASPY 2016, New Orleans, LA, USA, March 9-11, 2016.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the Sixth ACM on Conference on Data and Application Security and Privacy, CODASPY 2016, New Orleans, LA, USA, March 9-11, 2016

Reference 91

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:42.941204Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 056bbb45-f0e1-450c-9399-e4b0d788acf1 · outbound

This paper cites Leveraging Large Language Models to Detect npm Malicious Packages.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Leveraging Large Language Models to Detect npm Malicious Packages

Reference 92

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.992065Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 05e9111e-1a26-4492-97f5-b78a56c245c6 · outbound

This paper cites https://doi.org/10.1109/ICSE-SEIP58684.2023.00032 Lyuye Zhang, Chengwei Liu, Zhengzi Xu, Sen Chen, Lingling Fan, Bihuan Chen, and Yang Liu.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https://doi.org/10.1109/ICSE-SEIP58684.2023.00032 Lyuye Zhang, Chengwei Liu, Zhengzi Xu, Sen Chen, Lingling Fan, Bihuan Chen, and Yang Liu

Reference 93

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:42.697912Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation b814acef-2772-4a1c-a439-1eb01d565b3d · outbound

This paper cites In 37th IEEE/ACM International Conference on Automated Software Engineering, ASE 2022, Rochester, MI, USA, October 10-14, 2022.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 37th IEEE/ACM International Conference on Automated Software Engineering, ASE 2022, Rochester, MI, USA, October 10-14, 2022

Reference 94

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:42.478014Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation c08318a9-3ab5-4d4c-9ec0-b98ddc92ec42 · outbound

This paper cites In 28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 28th USENIX Security Symposium, USENIX Security 2019, Santa Clara, CA, USA, August 14-16, 2019

Reference 95

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:46.963815Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 558903fa-0957-42cf-ac35-873077824b37 · outbound

This paper cites https: //doi.org/10.4230/LIPICS.ECOOP.2018.7 Courtney Miller, Christian Kästner, and Bogdan Vasilescu.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks https: //doi.org/10.4230/LIPICS.ECOOP.2018.7 Courtney Miller, Christian Kästner, and Bogdan Vasilescu

Reference 109

Resolution: verified exact; doi, observed 2026-08-08T14:47:42.085638Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 252a3ad4-1c5c-4f3c-8cdb-a8e58ec46650 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 477

Resolution: verified exact; doi, observed 2026-08-08T14:47:42.172227Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 586df582-df71-4d6b-91ed-2fb959958ab8 · outbound

This paper cites Science 236, 4799 (1987), 280–285.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Science 236, 4799 (1987), 280–285

Reference 1987

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.072012Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation bbe84ed5-f4c3-42a5-9a0d-de0b5a215c32 · outbound

This paper cites Archives of Internal Medicine 159, 17 (1999), 2070–2076.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Archives of Internal Medicine 159, 17 (1999), 2070–2076

Reference 1999

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.713137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 63c8971e-d38b-402e-b86f-d26698db6e37 · outbound

This paper cites In 21st IEEE/ACM International Conference on Automated Software Engineering (ASE 2006), 18-22 September 2006, Tokyo, Japan.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 21st IEEE/ACM International Conference on Automated Software Engineering (ASE 2006), 18-22 September 2006, Tokyo, Japan

Reference 2006

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.846000Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cda830f3-f9b2-49a0-82fa-6febecbc2b77 · outbound

This paper cites Psychology and Aging 25, 2 (2010),.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Psychology and Aging 25, 2 (2010),

Reference 2010

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.298202Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation 7dae9ad3-694c-407f-bf9b-5cc036491e74 · outbound

This paper cites Frontiers in Psychology 3 (2012),.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Frontiers in Psychology 3 (2012),

Reference 2012

Resolution: verified fuzzy; raw_fallback, observed 2026-08-08T14:47:47.084212Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation de336b92-c7d1-476c-8e19-4ef4f2c0c64a · outbound

This paper cites In 36th International Conference on Software Engineering, ICSE ’14, Hyderabad, India - May 31 - June 07, 2014.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 36th International Conference on Software Engineering, ICSE ’14, Hyderabad, India - May 31 - June 07, 2014

Reference 2014

Resolution: verified exact; arxiv_id_nonexistent, observed 2026-08-08T14:47:44.892694Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.

Observation c34ad358-91e1-4bd9-a589-512c8547face · outbound

This paper cites The Sage Handbook of Regression Analysis and Causal Inference 327 (2015),.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks The Sage Handbook of Regression Analysis and Causal Inference 327 (2015),

Reference 2015

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.685197Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e42569f0-f8db-46fb-8da1-c74d39b2ddf2 · outbound

This paper cites The Unseen Labor Behind our Digital Infrastructure (2016).

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks The Unseen Labor Behind our Digital Infrastructure (2016)

Reference 2016

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.740220Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e7f58e59-cc9c-4948-8db3-2e69aa13db85 · outbound

This paper cites In Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, ESEC/FSE 2017, Paderborn, Germany, September 4-8, 2017.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 2017 11th Joint Meeting on Foundations of Software Engineering, ESEC/FSE 2017, Paderborn, Germany, September 4-8, 2017

Reference 2017

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.661302Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5d6d20eb-f887-4f55-8b34-b721f2052300 · outbound

This paper cites In Proceedings of the 15th International Conference on Mining Software Repositories, MSR 2018, Gothenburg, Sweden, May 28-29, 2018.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In Proceedings of the 15th International Conference on Mining Software Repositories, MSR 2018, Gothenburg, Sweden, May 28-29, 2018

Reference 2018

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.729021Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 303557ed-a2e3-4dec-b975-a8b1323319c1 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 2019

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.732395Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6143d244-fde8-4851-a8de-f1eb1744d77d · outbound

This paper cites In 27th IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2020, London, ON, Canada, February 18-21, 2020.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 27th IEEE International Conference on Software Analysis, Evolution and Reengineering, SANER 2020, London, ON, Canada, February 18-21, 2020

Reference 2020

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.656241Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ea7ebf12-fe2b-4eb4-be2b-5db539f10c4f · outbound

This paper cites In 18th IEEE/ACM International Conference on Mining Software Repositories, MSR 2021, Madrid, Spain, May 17-19,.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks In 18th IEEE/ACM International Conference on Mining Software Repositories, MSR 2021, Madrid, Spain, May 17-19,

Reference 2021

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.667102Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9af679c5-9316-4702-8a64-3b5ad268296b · outbound

This paper cites Feelings.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Feelings

Reference 2022

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.680448Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fafbb455-9c60-4d5a-8bb5-a6ec13b7bf51 · outbound

This paper cites an unresolved cited work.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Unresolved cited work

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.689531Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 38a58db0-2da1-4156-bd8e-17f2044f81f5 · outbound

This paper cites Retrieved April 28, 2024 from https://cran.r- project.org/web/packages/plm John R Crouse, Timothy Morgan, James G Terry, Julie Ellis, Mara Vitolins, and Gregory L Burke.

Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks Retrieved April 28, 2024 from https://cran.r- project.org/web/packages/plm John R Crouse, Timothy Morgan, James G Terry, Julie Ellis, Mara Vitolins, and Gregory L Burke

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-08T14:47:41.709273Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Coverage vector

Reference resolution

Outbound references

Pith citing papers