Post #4193009
2026-07-27 19:24 UTC
Zięba-Kozarzewski 2026: "No Edges, No Verdict: A Large-Scale Empirical Study of Declared Dependency Graphs in 78K SBOMs in the Wild" https://arxiv.org/abs/2607.22140 "52.9% of SBOMs declare no edges at all, 8.8% declare a dependency block yet leave the majority of components isolated, and 38.3% form well-connected graphs."
Replies (1)
-
@andrewnez@mastodon.social 2026-07-27 20:24
@gvwilson@mastodon.social I’m amazed they managed to find that many in the wild, no-one in oss uses them