Trust but Verify: Uncovering the Hidden Risks of Inaccurate SBOMs with JBomAuditYue XiaoJiyong Janget al.2025OSSNA 2025