Decomposing and Measuring Trust in Open-Source Software Supply Chains. - Lina Boughton; Courtney Miller; Yasemin Acar; Dominik Wermke; Christian Kästner (NIER@ICSE, 2024)