@andrewnez this reminds me of your comment about GH stars as a manipulated market.
https://arxiv.org/abs/2608.20678
arxiv.org/abs/2608.20678
Replying to @adamshostack@infosec.exchange
@adamshostack yeah this is good, they missed out the whole dependency graph as trust network aspect though
Replying to @andrewnez@mastodon.social
@andrewnez Good catch! Also, related work https://arxiv.org/html/2608.20675
arxiv.org/html/2608.20675Replying to @adamshostack@infosec.exchange
@adamshostack i feel a nerd snipe coming on