@inproceedings{holtgrave2025contributions, author = {Jan-Ulrich Holtgrave and Kay Friedrich and Fabian Fischer and Nicolas Huaman and Niklas Busch and Jan H. Klemmer and Marcel Fourné and Oliver Wiese and Dominik Wermke and Sascha Fahl}, booktitle = {Network and Distributed System Security (NDSS) Symposium 2025, February 24-28, 2025}, month = {February}, publisher = {Internet Society}, title = {Attributing Open-Source Contributions is Critical but Difficult: A Systematic Analysis of GitHub Practices and Their Impact on Software Supply Chain Security}, year = {2025} }