A Difference Without a Distinction: A Measurement Study of Release Trust Evidence in Package Registries

arXiv:2606.22593 · cs.SE, cs.CR · Submitted 2026-06-21 · Read on arXiv

cs.SE, cs.CR

Submitted: 2026-06-21

Updated: 2026-10-24

Terminology

• Provenance — 2× in this paper · explained in 5 episodes
• Core — 1× in this paper · explained in 2 episodes

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• For Coding Agents, the Repository Matters
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation