The Software Supply Chain as a Market for Lemons: A Multivocal Review of Trust Signal Collapse
To aid software practitioners in understanding the reliability of dependency adoption trust signals, a multivocal review of 252 Google Search sources and 870 Reddit threads finds that cheap trust signals collapse under three simultaneous forces: adversarial manipulation, gaming techniques indistinguishable from legitim...