To address the widespread issues of inaccuracy, non-compliance, and incompleteness in the SBOMs generated by existing mainstream tools, we design and implement an automated SBOM generation tool based on incremental construction.

Weiwei’s study on license variants in the PyPI ecosystem and Yiliang’s study on the CVE ecosystem have been accepted by ICSE 2026!

Fabs and Runzhi’s study on release note generation has been accepted by FSE 2025! Congratulations!