Operationalizing Research Software for Supply Chain Security
arXiv:2601.20980v1 Announce Type: new Abstract: Empirical studies of research software are hard to compare because the literature operationalizes “research software” inconsistently. Motivated by the research software supply chain (RSSC) and its security risks, we introduce an RSSC-oriented taxonomy that makes scope and operational boundaries explicit for empirical research software security studies. We conduct a targeted scoping review of recent repository mining and dataset construction studies, extracting each work’s definition, inclusion criteria, unit of analysis, and identification heuristics. We […]