SourceBroken: A large-scale analysis on the (un)reliability of SourceRank in the PyPI ecosystem
SourceBroken: 对PyPI生态系统中SourceRank可靠性的大规模分析
专题命中 代码评测 :repository(abstract);分类 cs.SE
AI总结 SourceBroken研究发现SourceRank在PyPI生态系统中存在可靠性问题,其未能及时反映软件包删除,导致恶意与良性软件包评分重叠,URL混淆攻击显著增加。
Comments Accpted for the 41st ACM/SIGAPP Symposium on Applied Computing (SAC '26), March 23--27, 2026, Thessaloniki, Greece