Our paper Security Assessment of Private Package Repositories: An Experience on Acc-Py at CERN, by Michele Lizzit, Francesco Pinzauti, Marino Miculan and Vincenzo Riccio, has been published (open access) in the Journal of Software: Evolution and Process (Wiley), vol. 38, no. 8. [pdf]

The paper reports on a security assessment of Acc-Py, the private Python package repository used at CERN, and is a joint work of our Cybersecurity and Testing research areas.