Zahan, N. ., Zimmermann, T. ., Godefroid, P. ., Murphy, B. ., Maddila, C. ., & Williams, L. . (2022). What are Weak Links in the npm Supply Chain?. In ICSE-SEIP ’22: Proceedings of the 44th International Conference on Software Engineering: Software Engineering in Practice.