CHAINS research project at KTH Royal Institute of Technology

Force AI agents to use the latest version of dependency

Lockfiles for Maven. Pin your dependencies. Build with integrity.

Long term storage of software bills of materials (sbom) https://arxiv.org/pdf/2303.11102.pdf

Hook suite for securing coding agents against software supply chain attacks

The source for the website of the SSF CHAINS project https://chains.proj.kth.se/

Checksums for GitHub Actions.

SBOM groundtruth

longitudinal study of package registry growth