[Git][reproducible-builds/reproducible-website][master] 5 commits: flake: add `pandoc` dependency
Chris Lamb (@lamby)
gitlab at salsa.debian.org
Fri Mar 29 12:24:24 UTC 2024
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
2720ce78 by Pol Dellaiera at 2024-03-29T13:12:33+01:00
flake: add `pandoc` dependency
- - - - -
64354808 by Pol Dellaiera at 2024-03-29T13:12:33+01:00
chore: add required files to build publications
- - - - -
64b91a93 by Pol Dellaiera at 2024-03-29T13:12:33+01:00
feat: add `bibliography.bib` file
- - - - -
f93c131d by Pol Dellaiera at 2024-03-29T13:12:33+01:00
feat: update `Academic Publications` page
- - - - -
236d662f by Pol Dellaiera at 2024-03-29T13:12:33+01:00
flake.lock: Update
Flake lock file updates:
• Updated input 'flake-parts':
'github:hercules-ci/flake-parts/c9afaba3dfa4085dbd2ccb38dfade5141e33d9d4' (2023-10-03)
→ 'github:hercules-ci/flake-parts/f7b3c975cf067e56e7cda6cb098ebe3fb4d74ca2' (2024-03-01)
• Updated input 'flake-parts/nixpkgs-lib':
'github:NixOS/nixpkgs/f5892ddac112a1e9b3612c39af1b72987ee5783a?dir=lib' (2023-09-29)
→ 'github:NixOS/nixpkgs/1536926ef5621b09bba54035ae2bb6d806d72ac8?dir=lib' (2024-02-29)
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/01441e14af5e29c9d27ace398e6dd0b293e25a54' (2023-10-11)
→ 'github:NixOS/nixpkgs/64c81edb4b97a51c5bbc54c191763ac71a6517ee' (2024-03-28)
- - - - -
8 changed files:
- .gitignore
- _docs/publications.md
- + bibliography.bib
- flake.lock
- flake.nix
- + resources/publications/Makefile
- + resources/publications/apa-cv.csl
- + resources/publications/publications.template.md
Changes:
=====================================
.gitignore
=====================================
@@ -26,3 +26,5 @@ _docs/[a-z][a-z]_[A-Z]*/*.md
# po4a generates these as part of its process
po/*.en.po
+
+/resources/publications/publications.md
=====================================
_docs/publications.md
=====================================
@@ -6,56 +6,110 @@ permalink: /docs/publications/
### Citing reproducible-builds.org
-The [CITATION.cff](https://salsa.debian.org/reproducible-builds/reproducible-website/-/blob/master/CITATION.cff) file is available at the root of the repository. It can be used to generate citations in various formats using [`cffconvert`](https://github.com/citation-file-format/cffconvert).
+The
+[CITATION.cff](https://salsa.debian.org/reproducible-builds/reproducible-website/-/blob/master/CITATION.cff)
+file is available at the root of the repository. It can be used to
+generate citations in various formats using
+[`cffconvert`](https://github.com/citation-file-format/cffconvert).
-If you are preparing a paper or article and wish to reference the [reproducible-builds.org](https://reproducible-builds.org) project, the following BibTeX entry is recommended:
+If you are preparing a paper or article and wish to reference the
+[reproducible-builds.org](https://reproducible-builds.org) project, the
+following BibTeX entry is recommended:
{% raw %}
-```bibtex
- at misc{ReproducibleBuildsOrg,
- author = {{Reproducible Builds}},
- title = {Reproducible Builds Website},
- url = {https://reproducible-builds.org/}
-}
-```
-{% endraw %}
-
-### Academic publications
-
-* *Trusting Trust - Reflections on Trusting Trust* (1984) — Ken Thompson. ([PDF](https://www.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf))
-
-* *Fully Countering Trusting Trust through Diverse Double-Compiling* (2005/2009) — David A. Wheeler ([PDF](https://dwheeler.com/trusting-trust/dissertation/wheeler-trusting-trust-ddc.pdf), [...](https://dwheeler.com/trusting-trust/))
-
-* *Functional Package Management with Guix* (2013) — Ludovic Courtès. [[...](https://hal.inria.fr/hal-00824004/en)]
-
-* *Reproducible and User-Controlled Software Environments in HPC with Guix* (2015) — Ludovic Courtès, Ricardo Wurmus [[...](https://hal.inria.fr/hal-01161771/en)]
-
-* *Automated Localization for Unreproducible Builds* (2018) — Zhilei Ren, He Jiang, Jifeng Xuan, Zijiang Yang. ([PDF](https://arxiv.org/pdf/1803.06766.pdf))
-
-* *Transparent, Provenance-assured, and Secure Software-as-a-Service* (2019) - Nachiket Tapas, Francesco Longo, Giovanni Merlino and Antonio Puliafito. ([Link](https://ieeexplore.ieee.org/document/8935014))
-
-* *in-toto: Providing farm-to-table guarantees for bits and bytes* (2019) — Santiago Torres-Arias, New York University; Hammad Afzali, New Jersey Institute of Technology; Trishank Karthik Kuppusamy, Datadog; Reza Curtmola, New Jersey Institute of Technology; Justin Cappos, New York University. ([PDF](https://www.usenix.org/system/files/sec19-torres-arias.pdf))
-* *Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks* (2020) — Marc Ohm, Henrik Plate, Arnold Sykosch, Michael Meier. ([PDF](https://arxiv.org/pdf/2005.09535.pdf))
+ @misc{ReproducibleBuildsOrg,
+ author = {{Reproducible Builds}},
+ title = {Reproducible Builds Website},
+ url = {https://reproducible-builds.org/}
+ }
-* *Reproducible Containers* (2020) — Navarro Leija, Omar S. and Shiptoski, Kelly and Scott, Ryan G. and Wang, Baojun and Renner, Nicholas and Newton, Ryan R. and Devietti, Joseph. ([...](https://dl.acm.org/doi/10.1145/3373376.3378519))
-
-* *Towards detection of software supply chain attacks by forensic artifacts* (2020) — Marc Ohm, Arnold Sykosch, Michael Meier. ([Link](https://dl.acm.org/doi/10.1145/3407023.3409183))
-
-* *Reproducible builds: Increasing the integrity of software supply chains.* (2021) — Chris Lamb & Stefano Zacchiroli. ([Link](https://ieeexplore.ieee.org/document/9403390/))
-
-* *An Experience Report on Producing Verifiable Builds for Large-Scale Commercial Systems* (2021) - Yong Shi, Mingzhi Wen, Filipe Roseiro Cogo, Boyuan Chen and Zhen Ming Jiang. ([Link](https://ieeexplore.ieee.org/document/9465650))
-
-* *Automated Patching for Unreproducible Builds* (2022) - Zhilei Ren, Shiwei Sun, Jifeng Xuan, Xiaochen Li, and Jiang Hi. ([Link](https://dl.acm.org/doi/10.1145/3510003.3510102))
-
-* *On business adoption and use of reproducible builds for open and closed source software* (2022) — Simon Butler, Jonas Gamalielsson, Björn Lundell, Christoffer Brax, Anders Mattsson, Tomas Gustavsson, Jonas Feist, Bengt Kvarnström & Erik Lönroth. ([Link](https://link.springer.com/article/10.1007/s11219-022-09607-z))
-
-* *Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations* (2022) William Enck and Laurie Williams. ([Link](https://ieeexplore.ieee.org/document/9740718))
-
-* *It’s like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security* (2023) Marcel Fourné, Dominik Wermke, William Enck, Sascha Fahl, Yasemin Acar. ([PDF](https://marcelfourne.de/fourne-reproducible-builds-2023.pdf), [link](https://doi.ieeecomputersociety.org/10.1109/SP46215.2023.10179320))
-
-* *Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors* (2024) — Taylor R. Schorlemmer, Kelechi G. Kalu, Luke Chigges, Kyung Myung Ko, Eman Abdul-Muhd, Abu Ishgair, Saurabh Bagchi, Santiago Torres-Arias and James C. Davis. ([PDF](https://arxiv.org/pdf/2401.14635.pdf), [link](https://arxiv.org/abs/2401.14635))
+{% endraw %}
-* *Reproducibility of Build Environments through Space and Time* (2024) — Julien Malka, Stefano Zacchiroli and Théo Zimmermann. ([PDF](https://arxiv.org/pdf/2402.00424.pdf), [link](https://arxiv.org/abs/2402.00424))
+### Academic publications
-* *Options Matter: Documenting and Fixing Non-Reproducible Builds in Highly-Configurable Systems* (2024) — Georges Aaron Randrianaina, Djamel Eddine Khelladi, Olivier Zendra and Mathieu Acher. ([PDF](https://inria.hal.science/hal-04441579/file/msr24.pdf), [link](https://inria.hal.science/hal-04441579v2))
+In addition to the resources mentioned, our repository also includes a
+[bibliography.bib](https://salsa.debian.org/reproducible-builds/reproducible-website/-/blob/master/bibliography.bib)
+file, which contains BibTeX entries for all the academic publications listed
+here. This file is continuously updated to reflect the most recent scholarly
+works related to reproducible builds. It serves as a comprehensive source for
+researchers and practitioners looking to cite relevant literature in their work.
+The file can be found within the repository, making it easy for anyone to access
+and utilize in their own scholarly writings.
+
+- Thompson, K. (1984). Reflections on trusting trust. _Commun. ACM_,
+ _27_(8), 761–763. <https://doi.org/10.1145/358198.358210>
+- Wheeler, D. A. (2010). _Fully countering trusting trust through
+ diverse double-compiling_. <https://arxiv.org/abs/1004.5534>
+- Courtès, L. (2013). _Functional package management with guix_.
+ <https://arxiv.org/abs/1305.4584>
+- Courtès, L., & Wurmus, R. (2015, August).
+ <span class="nocase">Reproducible and User-Controlled Software
+ Environments in HPC with Guix</span>. _<span class="nocase">2nd
+ International Workshop on Reproducibility in Parallel Computing
+ (RepPar)</span>_. <https://inria.hal.science/hal-01161771>
+- Ren, Z., Jiang, H., Xuan, J., & Yang, Z. (2018, May). Automated
+ localization for unreproducible builds. _Proceedings of the 40th
+ International Conference on Software Engineering_.
+ <https://doi.org/10.1145/3180155.3180224>
+- Tapas, N., Longo, F., Merlino, G., & Puliafito, A. (2019).
+ Transparent, provenance-assured, and secure software-as-a-service.
+ _2019 IEEE 18th International Symposium on Network Computing and
+ Applications (NCA)_, 1–8. <https://doi.org/10.1109/NCA.2019.8935014>
+- Torres-Arias, S., Afzali, H., Kuppusamy, T. K., Curtmola, R., &
+ Cappos, J. (2019). In-toto: Providing farm-to-table guarantees for
+ bits and bytes. _Proceedings of the 28th USENIX Conference on
+ Security Symposium_, 1393–1410.
+- Ohm, M., Plate, H., Sykosch, A., & Meier, M. (2020). Backstabber’s
+ knife collection: A review of open source software supply chain
+ attacks. In _Lecture notes in computer science_ (pp. 23–43).
+ Springer International Publishing.
+ <https://doi.org/10.1007/978-3-030-52683-2_2>
+- Navarro Leija, O. S., Shiptoski, K., Scott, R. G., Wang, B., Renner,
+ N., Newton, R. R., & Devietti, J. (2020). Reproducible containers.
+ _Proceedings of the Twenty-Fifth International Conference on
+ Architectural Support for Programming Languages and Operating
+ Systems_, 167–182. <https://doi.org/10.1145/3373376.3378519>
+- Ohm, M., Sykosch, A., & Meier, M. (2020). Towards detection of
+ software supply chain attacks by forensic artifacts. _Proceedings of
+ the 15th International Conference on Availability, Reliability and
+ Security_. <https://doi.org/10.1145/3407023.3409183>
+- Lamb, C., & Zacchiroli, S. (2022). Reproducible builds: Increasing
+ the integrity of software supply chains. _IEEE Software_, _39_(2),
+ 62–70. <https://doi.org/10.1109/MS.2021.3073045>
+- Shi, Y., Wen, M., Cogo, F. R., Chen, B., & Jiang, Z. M. (2022). An
+ experience report on producing verifiable builds for large-scale
+ commercial systems. _IEEE Transactions on Software Engineering_,
+ _48_(9), 3361–3377. <https://doi.org/10.1109/TSE.2021.3092692>
+- Ren, Z., Sun, S., Xuan, J., Li, X., Zhou, Z., & Jiang, H. (2022).
+ Automated patching for unreproducible builds. _Proceedings of the
+ 44th International Conference on Software Engineering_, 200–211.
+ <https://doi.org/10.1145/3510003.3510102>
+- Enck, W., & Williams, L. (2022). Top five challenges in software
+ supply chain security: Observations from 30 industry and government
+ organizations. _IEEE Security & Privacy_, _20_(2), 96–100.
+ <https://doi.org/10.1109/MSEC.2022.3142338>
+- Butler, S., Gamalielsson, J., Lundell, B., Brax, C., Mattsson, A.,
+ Gustavsson, T., Feist, J., Kvarnström, B., & Lönroth, E. (2023). On
+ business adoption and use of reproducible builds for open and closed
+ source software. _Software Quality Journal_, _31_(3), 687–719.
+ <https://doi.org/10.1007/s11219-022-09607-z>
+- Fourne, M., Wermke, D., Enck, W., Fahl, S., & Acar, Y. (2023). It’s
+ like flossing your teeth: On the importance and challenges of
+ reproducible builds for software supply chain security. _2023 IEEE
+ Symposium on Security and Privacy (SP)_, 1527–1544.
+ <https://doi.org/10.1109/SP46215.2023.10179320>
+- Schorlemmer, T. R., Kalu, K. G., Chigges, L., Ko, K. M., Isghair, E.
+ A.-M. A., Baghi, S., Torres-Arias, S., & Davis, J. C. (2024).
+ _Signing in four public software package registries: Quantity,
+ quality, and influencing factors_.
+ <https://arxiv.org/abs/2401.14635>
+- Malka, J., Zacchiroli, S., & Zimmermann, T. (2024). _Reproducibility
+ of build environments through space and time_.
+ <https://arxiv.org/abs/2402.00424>
+- Randrianaina, G. A., Khelladi, D. E., Zendra, O., & Acher, M.
+ (2024). <span class="nocase">Options Matter: Documenting and Fixing
+ Non-Reproducible Builds in Highly-Configurable Systems</span>.
+ _<span class="nocase">MSR 2024 - 21th International Conference on
+ Mining Software Repository</span>_, 1–11.
+ <https://inria.hal.science/hal-04441579>
=====================================
bibliography.bib
=====================================
@@ -0,0 +1,255 @@
+ at article{Thompson84,
+ author = {Ken Thompson},
+ title = {Reflections on Trusting Trust},
+ journal = {Commun. {ACM}},
+ volume = {27},
+ number = {8},
+ pages = {761--763},
+ year = {1984},
+ url = {https://doi.org/10.1145/358198.358210},
+ doi = {10.1145/358198.358210},
+ timestamp = {Wed, 14 Nov 2018 10:22:35 +0100},
+ biburl = {https://dblp.org/rec/journals/cacm/Thompson84.bib},
+ bibsource = {dblp computer science bibliography, https://dblp.org}
+}
+
+ at misc{wheeler2010fully,
+ title = {Fully Countering Trusting Trust through Diverse Double-Compiling},
+ author = {David A. Wheeler},
+ year = {2010},
+ eprint = {1004.5534},
+ archiveprefix = {arXiv},
+ primaryclass = {cs.CR}
+}
+
+ at misc{courts2013functional,
+ title = {Functional Package Management with Guix},
+ author = {Ludovic Courtès},
+ year = {2013},
+ eprint = {1305.4584},
+ archiveprefix = {arXiv},
+ primaryclass = {cs.PL}
+}
+
+ at inproceedings{courtes:hal-01161771,
+ title = {{Reproducible and User-Controlled Software Environments in HPC with Guix}},
+ author = {Courtès, Ludovic and Wurmus, Ricardo},
+ url = {https://inria.hal.science/hal-01161771},
+ booktitle = {{2nd International Workshop on Reproducibility in Parallel Computing (RepPar)}},
+ address = {Vienne, Austria},
+ year = {2015},
+ month = Aug,
+ keywords = {hpc ; reproducible research ; package management ; gestion de paquets ; r{\'e}p{\'e}tabilit{\'e} ; calcul intensif},
+ pdf = {https://inria.hal.science/hal-01161771v2/file/reproducible-hpc.pdf},
+ hal_id = {hal-01161771},
+ hal_version = {v2}
+}
+
+ at inproceedings{Ren_2018,
+ series = {ICSE ’18},
+ title = {Automated localization for unreproducible builds},
+ url = {http://dx.doi.org/10.1145/3180155.3180224},
+ doi = {10.1145/3180155.3180224},
+ booktitle = {Proceedings of the 40th International Conference on Software Engineering},
+ publisher = {ACM},
+ author = {Ren, Zhilei and Jiang, He and Xuan, Jifeng and Yang, Zijiang},
+ year = {2018},
+ month = may,
+ collection = {ICSE ’18}
+}
+
+ at inproceedings{8935014,
+ author = {Tapas, Nachiket and Longo, Francesco and Merlino, Giovanni and Puliafito, Antonio},
+ booktitle = {2019 IEEE 18th International Symposium on Network Computing and Applications (NCA)},
+ title = {Transparent, Provenance-assured, and Secure Software-as-a-Service},
+ year = {2019},
+ volume = {},
+ number = {},
+ pages = {1-8},
+ keywords = {Cloud computing;Software as a service;Blockchain;Proposals;Cryptography;Software-as-a-Service;OpenStack;Heat;service orchestration;blockchain;Ethereum;Tendermint;Trillian},
+ doi = {10.1109/NCA.2019.8935014}
+}
+
+ at inproceedings{10.5555/3361338.3361435,
+ author = {Torres-Arias, Santiago and Afzali, Hammad and Kuppusamy, Trishank Karthik and Curtmola, Reza and Cappos, Justin},
+ title = {In-toto: providing farm-to-table guarantees for bits and bytes},
+ year = {2019},
+ isbn = {9781939133069},
+ publisher = {USENIX Association},
+ address = {USA},
+ abstract = {The software development process is quite complex and involves a number of independent actors. Developers check source code into a version control system, the code is compiled into software at a build farm, and CI/CD systems run multiple tests to ensure the software's quality among a myriad of other operations. Finally, the software is packaged for distribution into a delivered product, to be consumed by end users. An attacker that is able to compromise any single step in the process can maliciously modify the software and harm any of the software's users.To address these issues, we designed in-toto, a framework that cryptographically ensures the integrity of the software supply chain. in-toto grants the end user the ability to verify the software's supply chain from the project's inception to its deployment. We demonstrate in-toto's effectiveness on 30 software supply chain compromises that affected hundreds of million of users and showcase in-toto's usage over cloud-native, hybrid-cloud and cloud-agnostic applications. in-toto is integrated into products and open source projects that are used by millions of people daily. The project website is available at: https://in-toto:io.},
+ booktitle = {Proceedings of the 28th USENIX Conference on Security Symposium},
+ pages = {1393–1410},
+ numpages = {18},
+ location = {Santa Clara, CA, USA},
+ series = {SEC'19}
+}
+
+ at inbook{Ohm_2020,
+ title = {Backstabber’s Knife Collection: A Review of Open Source Software Supply Chain Attacks},
+ isbn = {9783030526832},
+ issn = {1611-3349},
+ url = {http://dx.doi.org/10.1007/978-3-030-52683-2_2},
+ doi = {10.1007/978-3-030-52683-2_2},
+ booktitle = {Lecture Notes in Computer Science},
+ publisher = {Springer International Publishing},
+ author = {Ohm, Marc and Plate, Henrik and Sykosch, Arnold and Meier, Michael},
+ year = {2020},
+ pages = {23–43}
+}
+
+ at inproceedings{10.1145/3373376.3378519,
+ author = {Navarro Leija, Omar S. and Shiptoski, Kelly and Scott, Ryan G. and Wang, Baojun and Renner, Nicholas and Newton, Ryan R. and Devietti, Joseph},
+ title = {Reproducible Containers},
+ year = {2020},
+ isbn = {9781450371025},
+ publisher = {Association for Computing Machinery},
+ address = {New York, NY, USA},
+ url = {https://doi.org/10.1145/3373376.3378519},
+ doi = {10.1145/3373376.3378519},
+ abstract = {We describe the design and implementation of DetTrace, a reproducible container abstraction for Linux implemented in user space. All computation that occurs inside a DetTrace container is a pure function of the initial filesystem state of the container. Reproducible containers can be used for a variety of purposes, including replication for fault-tolerance, reproducible software builds and reproducible data analytics. We use DetTrace to achieve, in an automatic fashion, reproducibility for 12,130 Debian package builds, containing over 800 million lines of code, as well as bioinformatics and machine learning workflows. We show that, while software in each of these domains is initially irreproducible, DetTrace brings reproducibility without requiring any hardware, OS or application changes. DetTrace's performance is dictated by the frequency of system calls: IO-intensive software builds have an average overhead of 3.49x, while a compute-bound bioinformatics workflow is under 2\%.},
+ booktitle = {Proceedings of the Twenty-Fifth International Conference on Architectural Support for Programming Languages and Operating Systems},
+ pages = {167–182},
+ numpages = {16},
+ keywords = {software containers, reproducibility, linux, determinism},
+ location = {Lausanne, Switzerland},
+ series = {ASPLOS '20}
+}
+
+ at inproceedings{10.1145/3407023.3409183,
+ author = {Ohm, Marc and Sykosch, Arnold and Meier, Michael},
+ title = {Towards detection of software supply chain attacks by forensic artifacts},
+ year = {2020},
+ isbn = {9781450388337},
+ publisher = {Association for Computing Machinery},
+ address = {New York, NY, USA},
+ url = {https://doi.org/10.1145/3407023.3409183},
+ doi = {10.1145/3407023.3409183},
+ abstract = {Third-party dependencies may introduce security risks to the software supply chain and hence yield harm to their dependent software. There are many known cases of malicious open source packages posing risks to developers and end users. However, while efforts are made to detect vulnerable open source packages, malicious packages are not yet considered explicitly. In order to tackle this problem we perform an exploratory case study on previously occurred attacks on the software supply chain with respect to observable artifacts created. Based on gained insights, we propose Buildwatch, a framework for dynamic analysis of software and its third-party dependencies. We noticed that malicious packages introduce a significant amount of new artifacts during installation when compared to benign versions of the same package. The paper presents a first analysis of observable artifacts of malicious packages as well as a possible mitigation strategy that might lead to more insight in long term.},
+ booktitle = {Proceedings of the 15th International Conference on Availability, Reliability and Security},
+ articleno = {65},
+ numpages = {6},
+ keywords = {DevSecOps, application security, malware, supply chain attack},
+ location = {Virtual Event, Ireland},
+ series = {ARES '20}
+}
+
+ at article{9403390,
+ author = {Lamb, Chris and Zacchiroli, Stefano},
+ journal = {IEEE Software},
+ title = {Reproducible Builds: Increasing the Integrity of Software Supply Chains},
+ year = {2022},
+ volume = {39},
+ number = {2},
+ pages = {62-70},
+ keywords = {Software;Linux;Supply chains;Reproducibility of results;Metadata;Buildings;Tools},
+ doi = {10.1109/MS.2021.3073045}
+}
+
+ at article{9465650,
+ author = {Shi, Yong and Wen, Mingzhi and Cogo, Filipe R. and Chen, Boyuan and Jiang, Zhen Ming},
+ journal = {IEEE Transactions on Software Engineering},
+ title = {An Experience Report on Producing Verifiable Builds for Large-Scale Commercial Systems},
+ year = {2022},
+ volume = {48},
+ number = {9},
+ pages = {3361-3377},
+ keywords = {Security;Software;Tools;Process control;System implementation;Software engineering;Safety;Verifiable build;large scale commercial system;build system;security;trustworthiness;software engineering},
+ doi = {10.1109/TSE.2021.3092692}
+}
+
+ at inproceedings{10.1145/3510003.3510102,
+ author = {Ren, Zhilei and Sun, Shiwei and Xuan, Jifeng and Li, Xiaochen and Zhou, Zhide and Jiang, He},
+ title = {Automated patching for unreproducible builds},
+ year = {2022},
+ isbn = {9781450392211},
+ publisher = {Association for Computing Machinery},
+ address = {New York, NY, USA},
+ url = {https://doi.org/10.1145/3510003.3510102},
+ doi = {10.1145/3510003.3510102},
+ abstract = {Software reproducibility plays an essential role in establishing trust between source code and the built artifacts, by comparing compilation outputs acquired from independent users. Although the testing for unreproducible builds could be automated, fixing unreproducible build issues poses a set of challenges within the reproducible builds practice, among which we consider the localization granularity and the historical knowledge utilization as the most significant ones. To tackle these challenges, we propose a novel approach RepFix that combines tracing-based fine-grained localization with history-based patch generation mechanisms.On the one hand, to tackle the localization granularity challenge, we adopt system-level dynamic tracing to capture both the system call traces and user-space function call information. By integrating the kernel probes and user-space probes, we could determine the location of each executed build command more accurately. On the other hand, to tackle the historical knowledge utilization challenge, we design a similarity based relevant patch retrieving mechanism, and generate patches by applying the edit operations of the existing patches. With the abundant patches accumulated by the reproducible builds practice, we could generate patches to fix the unreproducible builds automatically.To evaluate the usefulness of RepFix, extensive experiments are conducted over a dataset with 116 real-world packages. Based on RepFix, we successfully fix the unreproducible build issues for 64 packages. Moreover, we apply RepFix to the Arch Linux packages, and successfully fix four packages. Two patches have been accepted by the repository, and there is one package for which the patch is pushed and accepted by its upstream repository, so that the fixing could be helpful for other downstream repositories.},
+ booktitle = {Proceedings of the 44th International Conference on Software Engineering},
+ pages = {200–211},
+ numpages = {12},
+ keywords = {automated patch generation, dynamic tracing, reproducible builds},
+ location = {Pittsburgh, Pennsylvania},
+ series = {ICSE '22}
+}
+
+ at article{9740718,
+ author = {Enck, William and Williams, Laurie},
+ journal = {IEEE Security & Privacy},
+ title = {Top Five Challenges in Software Supply Chain Security: Observations From 30 Industry and Government Organizations},
+ year = {2022},
+ volume = {20},
+ number = {2},
+ pages = {96-100},
+ keywords = {Industries;Privacy;Codes;Supply chains;Government;Ecosystems;Software development management},
+ doi = {10.1109/MSEC.2022.3142338}
+}
+
+ at article{Butler2023,
+ author = {Butler, Simon and Gamalielsson, Jonas and Lundell, Bj{\"o}rn and Brax, Christoffer and Mattsson, Anders and Gustavsson, Tomas and Feist, Jonas and Kvarnstr{\"o}m, Bengt and L{\"o}nroth, Erik},
+ title = {On business adoption and use of reproducible builds for open and closed source software},
+ journal = {Software Quality Journal},
+ year = {2023},
+ month = {Sep},
+ day = {01},
+ volume = {31},
+ number = {3},
+ pages = {687-719},
+ abstract = {Reproducible builds (R-Bs) are software engineering practices that reliably create bit-for-bit identical binary executable files from specified source code. R-Bs are applied in some open source software (OSS) projects and distributions to allow verification that the distributed binary has been built from the released source code. The use of R-Bs has been advocated in software maintenance and R-Bs are applied in the development of some OSS security applications. Nonetheless, industry application of R-Bs appears limited, and we seek to understand whether awareness is low or if significant technical and business reasons prevent wider adoption. Through interviews with software practitioners and business managers, this study explores the utility of applying R-Bs in businesses in the primary and secondary software sectors and the business and technical reasons supporting their adoption. We find businesses use R-Bs in the safety-critical and security domains, and R-Bs are valuable for traceability and support collaborative software development. We also found that R-Bs are valued as engineering processes and are seen as a badge of software quality, but without a tangible value proposition. There are good engineering reasons to use R-Bs in industrial software development, and the principle of establishing correspondence between source code and binary offers opportunities for the development of further applications.},
+ issn = {1573-1367},
+ doi = {10.1007/s11219-022-09607-z},
+ url = {https://doi.org/10.1007/s11219-022-09607-z}
+}
+
+ at inproceedings{10179320,
+ author = {M. Fourne and D. Wermke and W. Enck and S. Fahl and Y. Acar},
+ booktitle = {2023 IEEE Symposium on Security and Privacy (SP)},
+ title = {It’s like flossing your teeth: On the Importance and Challenges of Reproducible Builds for Software Supply Chain Security},
+ year = {2023},
+ volume = {},
+ issn = {},
+ pages = {1527-1544},
+ abstract = {The 2020 Solarwinds attack was a tipping point that caused a heightened awareness about the security of the software supply chain and in particular the large amount of trust placed in build systems. Reproducible Builds (R-Bs) provide a strong foundation to build defenses for arbitrary attacks against build systems by ensuring that given the same source code, build environment, and build instructions, bitwise-identical artifacts are created. Unfortunately, much of the software industry believes R-Bs are too far out of reach for most projects. The goal of this paper is to help identify a path for R-Bs to become a commonplace property.To this end, we conducted a series of 24 semi-structured expert interviews with participants from the Reproducible-Builds.org project, finding that self-effective work by highly motivated developers and collaborative communication with upstream projects are key contributors to R-Bs. We identified a range of motivations that can encourage open source developers to strive for R-Bs, including indicators of quality, security benefits, and more efficient caching of artifacts. We also identify experiences that help and hinder adoption, which often revolves around communication with upstream projects. We conclude with recommendations on how to better integrate R-Bs with the efforts of the open source and free software community.},
+ keywords = {industries;privacy;source coding;supply chains;collaboration;software;time measurement},
+ doi = {10.1109/SP46215.2023.10179320},
+ url = {https://doi.ieeecomputersociety.org/10.1109/SP46215.2023.10179320},
+ publisher = {IEEE Computer Society},
+ address = {Los Alamitos, CA, USA},
+ month = {may}
+}
+
+ at misc{schorlemmer2024signing,
+ title = {Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factors},
+ author = {Taylor R Schorlemmer and Kelechi G Kalu and Luke Chigges and Kyung Myung Ko and Eman Abdul-Muhd Abu Isghair and Saurabh Baghi and Santiago Torres-Arias and James C Davis},
+ year = {2024},
+ eprint = {2401.14635},
+ archiveprefix = {arXiv},
+ primaryclass = {cs.CR}
+}
+
+ at misc{malka2024reproducibility,
+ title = {Reproducibility of Build Environments through Space and Time},
+ author = {Julien Malka and Stefano Zacchiroli and Théo Zimmermann},
+ year = {2024},
+ eprint = {2402.00424},
+ archiveprefix = {arXiv},
+ primaryclass = {cs.SE}
+}
+
+ at inproceedings{randrianaina:hal-04441579,
+ title = {{Options Matter: Documenting and Fixing Non-Reproducible Builds in Highly-Configurable Systems}},
+ author = {Randrianaina, Georges Aaron and Khelladi, Djamel Eddine and Zendra, Olivier and Acher, Mathieu},
+ url = {https://inria.hal.science/hal-04441579},
+ booktitle = {{MSR 2024 - 21th International Conference on Mining Software Repository}},
+ address = {Lisbon, Portugal},
+ pages = {1-11},
+ year = {2024},
+ month = Apr,
+ keywords = {Reproducible Builds ; Build System ; Highly-configurable System},
+ pdf = {https://inria.hal.science/hal-04441579v2/file/msr24.pdf},
+ hal_id = {hal-04441579},
+ hal_version = {v2}
+}
=====================================
flake.lock
=====================================
@@ -5,11 +5,11 @@
"nixpkgs-lib": "nixpkgs-lib"
},
"locked": {
- "lastModified": 1696343447,
- "narHash": "sha256-B2xAZKLkkeRFG5XcHHSXXcP7To9Xzr59KXeZiRf4vdQ=",
+ "lastModified": 1709336216,
+ "narHash": "sha256-Dt/wOWeW6Sqm11Yh+2+t0dfEWxoMxGBvv3JpIocFl9E=",
"owner": "hercules-ci",
"repo": "flake-parts",
- "rev": "c9afaba3dfa4085dbd2ccb38dfade5141e33d9d4",
+ "rev": "f7b3c975cf067e56e7cda6cb098ebe3fb4d74ca2",
"type": "github"
},
"original": {
@@ -19,11 +19,11 @@
},
"nixpkgs": {
"locked": {
- "lastModified": 1697009197,
- "narHash": "sha256-viVRhBTFT8fPJTb1N3brQIpFZnttmwo3JVKNuWRVc3s=",
+ "lastModified": 1711655175,
+ "narHash": "sha256-1xiaYhC3ul4y+i3eicYxeERk8ZkrNjLkrFSb/UW36Zw=",
"owner": "NixOS",
"repo": "nixpkgs",
- "rev": "01441e14af5e29c9d27ace398e6dd0b293e25a54",
+ "rev": "64c81edb4b97a51c5bbc54c191763ac71a6517ee",
"type": "github"
},
"original": {
@@ -36,11 +36,11 @@
"nixpkgs-lib": {
"locked": {
"dir": "lib",
- "lastModified": 1696019113,
- "narHash": "sha256-X3+DKYWJm93DRSdC5M6K5hLqzSya9BjibtBsuARoPco=",
+ "lastModified": 1709237383,
+ "narHash": "sha256-cy6ArO4k5qTx+l5o+0mL9f5fa86tYUX3ozE1S+Txlds=",
"owner": "NixOS",
"repo": "nixpkgs",
- "rev": "f5892ddac112a1e9b3612c39af1b72987ee5783a",
+ "rev": "1536926ef5621b09bba54035ae2bb6d806d72ac8",
"type": "github"
},
"original": {
=====================================
flake.nix
=====================================
@@ -99,6 +99,7 @@
default = pkgs.stdenvNoCC.mkDerivation {
name = "devshell";
buildInputs = [
+ pkgs.pandoc
pkgs.gnumake
pkgs.perl536Packages.Po4a
pkgs.which
=====================================
resources/publications/Makefile
=====================================
@@ -0,0 +1,2 @@
+all:
+ pandoc -t markdown_strict --citeproc publications.template.md -o publications.md
=====================================
resources/publications/apa-cv.csl
=====================================
@@ -0,0 +1,1559 @@
+<?xml version="1.0" encoding="utf-8"?>
+<style xmlns="http://purl.org/net/xbiblio/csl" class="in-text" version="1.0" demote-non-dropping-particle="never" page-range-format="expanded">
+ <info>
+ <title>American Psychological Association 7th edition (curriculum vitae, sorted by descending date)</title>
+ <title-short>APA (CV)</title-short>
+ <id>http://www.zotero.org/styles/apa-cv</id>
+ <link href="http://www.zotero.org/styles/apa-cv" rel="self"/>
+ <link href="http://www.zotero.org/styles/apa" rel="template"/>
+ <link href="https://apastyle.apa.org/style-grammar-guidelines/references/examples" rel="documentation"/>
+ <author>
+ <name>Brenton M. Wiernik</name>
+ <email>zotero at wiernik.org</email>
+ </author>
+ <category citation-format="author-date"/>
+ <category field="psychology"/>
+ <category field="generic-base"/>
+ <updated>2024-02-13T03:12:55+00:00</updated>
+ <rights license="http://creativecommons.org/licenses/by-sa/3.0/">This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 License</rights>
+ </info>
+ <locale xml:lang="en">
+ <terms>
+ <term name="editortranslator" form="short">
+ <single>ed. & trans.</single>
+ <multiple>eds. & trans.</multiple>
+ </term>
+ <term name="translator" form="short">trans.</term>
+ <term name="interviewer" form="short">
+ <single>interviewer</single>
+ <multiple>interviewers</multiple>
+ </term>
+ <term name="collection-editor" form="short">
+ <single>ed.</single>
+ <multiple>eds.</multiple>
+ </term>
+ <term name="circa" form="short">ca.</term>
+ <term name="bc"> B.C.E.</term>
+ <term name="ad"> C.E.</term>
+ <term name="issue" form="long">
+ <single>issue</single>
+ <multiple>issues</multiple>
+ </term>
+ <term name="software">computer software</term>
+ <term name="at" form="long">before the</term>
+ <term name="hearing" form="verb">testimony of</term>
+ </terms>
+ </locale>
+ <locale xml:lang="da">
+ <terms>
+ <term name="et-al">et al.</term>
+ </terms>
+ </locale>
+ <locale xml:lang="de">
+ <terms>
+ <term name="et-al">et al.</term>
+ </terms>
+ </locale>
+ <locale xml:lang="es">
+ <terms>
+ <term name="from">de</term>
+ </terms>
+ </locale>
+ <locale xml:lang="fr">
+ <terms>
+ <term name="editor" form="short">
+ <single>éd.</single>
+ <multiple>éds.</multiple>
+ </term>
+ </terms>
+ </locale>
+ <locale xml:lang="nb">
+ <terms>
+ <term name="et-al">et al.</term>
+ </terms>
+ </locale>
+ <locale xml:lang="nl">
+ <terms>
+ <term name="et-al">et al.</term>
+ </terms>
+ </locale>
+ <locale xml:lang="nn">
+ <terms>
+ <term name="et-al">et al.</term>
+ </terms>
+ </locale>
+ <!-- General categories of item types:
+ Periodical: article-journal article-magazine article-newspaper post-weblog review review-book
+ Periodical or Booklike: paper-conference
+ Booklike: article book broadcast chapter classic collection dataset document
+ entry entry-dictionary entry-encyclopedia event figure
+ graphic interview manuscript map motion_picture musical_score pamphlet patent
+ performance periodical personal_communication post report
+ software song speech standard thesis webpage
+ Legal: bill hearing legal_case legislation regulation treaty
+ -->
+ <!-- APA references contain four parts: author, date, title, source -->
+ <macro name="author-bib">
+ <names variable="composer" delimiter=", ">
+ <name name-as-sort-order="all" and="symbol" sort-separator=", " initialize-with=". " delimiter=", " delimiter-precedes-last="always"/>
+ <substitute>
+ <names variable="author"/>
+ <names variable="illustrator"/>
+ <names variable="director">
+ <name name-as-sort-order="all" and="symbol" sort-separator=", " initialize-with=". " delimiter=", " delimiter-precedes-last="always"/>
+ <label form="long" prefix=" (" suffix=")" text-case="title"/>
+ </names>
+ <choose>
+ <if variable="container-title">
+ <choose>
+ <if type="book entry entry-dictionary entry-encyclopedia" match="any">
+ <choose>
+ <if variable="title">
+ <group delimiter=" ">
+ <text macro="title"/>
+ <text macro="parenthetical"/>
+ </group>
+ </if>
+ <else>
+ <text macro="title-and-descriptions"/>
+ </else>
+ </choose>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ <!-- Test for editortranslator and put that first as that becomes available -->
+ <names variable="editor" delimiter=", ">
+ <name name-as-sort-order="all" and="symbol" sort-separator=", " initialize-with=". " delimiter=", " delimiter-precedes-last="always"/>
+ <label form="short" prefix=" (" suffix=")" text-case="title"/>
+ </names>
+ <names variable="editorial-director">
+ <name name-as-sort-order="all" and="symbol" sort-separator=", " initialize-with=". " delimiter=", " delimiter-precedes-last="always"/>
+ <label form="short" prefix=" (" suffix=")" text-case="title"/>
+ </names>
+ <names variable="collection-editor">
+ <name name-as-sort-order="all" and="symbol" sort-separator=", " initialize-with=". " delimiter=", " delimiter-precedes-last="always"/>
+ <label form="short" prefix=" (" suffix=")" text-case="title"/>
+ </names>
+ <choose>
+ <if variable="title">
+ <group delimiter=" ">
+ <text macro="title"/>
+ <text macro="parenthetical"/>
+ </group>
+ </if>
+ <else>
+ <text macro="title-and-descriptions"/>
+ </else>
+ </choose>
+ </substitute>
+ </names>
+ </macro>
+ <macro name="author-sort">
+ <choose>
+ <if type="bill hearing legal_case legislation regulation treaty" match="any">
+ <text macro="title-legal"/>
+ </if>
+ <else>
+ <text macro="author-bib"/>
+ </else>
+ </choose>
+ </macro>
+ <macro name="date-bib">
+ <!-- TODO: Add new item types -->
+ <group delimiter=" " prefix="(" suffix=")">
+ <choose>
+ <if is-uncertain-date="issued">
+ <text term="circa" form="short"/>
+ </if>
+ </choose>
+ <group>
+ <choose>
+ <if variable="issued">
+ <group delimiter=", ">
+ <group>
+ <date variable="issued" date-parts="year" form="numeric"/>
+ <text variable="year-suffix"/>
+ </group>
+ <choose>
+ <if type="article-magazine article-newspaper broadcast interview motion_picture pamphlet personal_communication post post-weblog song speech webpage" match="any">
+ <!-- Many video and audio examples in manual give full dates. Err on the side of too much information. -->
+ <date variable="issued">
+ <date-part name="month"/>
+ <date-part name="day" prefix=" "/>
+ </date>
+ </if>
+ <else-if type="paper-conference">
+ <!-- Capture 'speech' stored as 'paper-conference' -->
+ <choose>
+ <if variable="collection-editor editor editorial-director issue page volume" match="none">
+ <date variable="issued">
+ <date-part name="month"/>
+ <date-part name="day" prefix=" "/>
+ </date>
+ </if>
+ </choose>
+ </else-if>
+ <!-- Only year: article article-journal book chapter entry entry-dictionary entry-encyclopedia dataset figure graphic
+ manuscript map musical_score paper-conference[published] patent report review review-book thesis -->
+ </choose>
+ </group>
+ </if>
+ <else-if variable="status">
+ <group>
+ <!-- TODO: Should I print status as-is, or should I print the in-press term? -->
+ <text variable="status" text-case="lowercase"/>
+ <text variable="year-suffix" prefix="-"/>
+ </group>
+ </else-if>
+ <else>
+ <text term="no date" form="short"/>
+ <text variable="year-suffix" prefix="-"/>
+ </else>
+ </choose>
+ </group>
+ </group>
+ </macro>
+ <macro name="date-year">
+ <date variable="issued" date-parts="year" form="numeric"/>
+ </macro>
+ <macro name="date-sort">
+ <choose>
+ <if type="article article-journal book chapter entry entry-dictionary entry-encyclopedia dataset figure graphic manuscript map musical_score patent report review review-book thesis" match="any">
+ <date variable="issued" date-parts="year" form="numeric"/>
+ <!-- <text value="0000"/> -->
+ </if>
+ <else-if type="paper-conference">
+ <!-- Capture 'speech' stored as 'paper-conference' -->
+ <choose>
+ <if variable="collection-editor editor editorial-director issue page volume" match="any">
+ <date variable="issued" date-parts="year" form="numeric"/>
+ <!-- <text value="0000"/> -->
+ </if>
+ <else>
+ <date variable="issued">
+ <date-part name="year" form="long"/>
+ <date-part name="month" form="numeric-leading-zeros"/>
+ <date-part name="day" form="numeric-leading-zeros"/>
+ </date>
+ </else>
+ </choose>
+ </else-if>
+ <else>
+ <date variable="issued">
+ <date-part name="year" form="long"/>
+ <date-part name="month" form="numeric-leading-zeros"/>
+ <date-part name="day" form="numeric-leading-zeros"/>
+ </date>
+ </else>
+ </choose>
+ </macro>
+ <macro name="date-sort-group">
+ <choose>
+ <if variable="issued">
+ <text value="1"/>
+ </if>
+ <else-if variable="status">
+ <text value="2"/>
+ </else-if>
+ <else>
+ <text value="3"/>
+ </else>
+ </choose>
+ </macro>
+ <!-- APA has two description elements following the title:
+ title (parenthetical) [bracketed] -->
+ <macro name="title-and-descriptions">
+ <choose>
+ <if variable="title">
+ <group delimiter=" ">
+ <text macro="title"/>
+ <text macro="parenthetical"/>
+ <text macro="bracketed"/>
+ </group>
+ </if>
+ <else>
+ <choose>
+ <if type="bill report" match="any">
+ <!-- Bills, resolutions, and congressional reports are not italicized and substitute bill number if no title. -->
+ <!-- Can't distinguish congressional reports from other reports,
+ but giving the genre and number seems fine for other reports too. -->
+ <text macro="number"/>
+ <text macro="bracketed"/>
+ <text macro="parenthetical"/>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <text macro="bracketed"/>
+ <text macro="parenthetical"/>
+ </group>
+ </else>
+ </choose>
+ </else>
+ </choose>
+ </macro>
+ <macro name="title">
+ <choose>
+ <if type="post webpage" match="any">
+ <!-- Webpages are always italicized -->
+ <text variable="title" font-style="italic"/>
+ </if>
+ <else-if variable="container-title" match="any">
+ <!-- Other types are italicized based on presence of container-title.
+ Assume that review and review-book are published in periodicals/blogs,
+ not just on a web page (ex. 69) -->
+ <text variable="title"/>
+ </else-if>
+ <else>
+ <choose>
+ <if type="article-journal article-magazine article-newspaper post-weblog review review-book" match="any">
+ <text variable="title" font-style="italic"/>
+ </if>
+ <else-if type="paper-conference">
+ <choose>
+ <if variable="collection-editor editor editorial-director" match="any">
+ <group delimiter=": " font-style="italic">
+ <text variable="title"/>
+ <!-- Replace with volume-title as that becomes available -->
+ <choose>
+ <if is-numeric="volume" match="none">
+ <group delimiter=" ">
+ <label variable="volume" form="short" text-case="capitalize-first"/>
+ <text variable="volume"/>
+ </group>
+ </if>
+ </choose>
+ </group>
+ </if>
+ <else>
+ <text variable="title" font-style="italic"/>
+ </else>
+ </choose>
+ </else-if>
+ <else>
+ <group delimiter=": " font-style="italic">
+ <text variable="title"/>
+ <!-- Replace with volume-title as that becomes available -->
+ <choose>
+ <if is-numeric="volume" match="none">
+ <group delimiter=" ">
+ <label variable="volume" form="short" text-case="capitalize-first"/>
+ <text variable="volume"/>
+ </group>
+ </if>
+ </choose>
+ </group>
+ </else>
+ </choose>
+ </else>
+ </choose>
+ </macro>
+ <macro name="parenthetical">
+ <!-- (Secondary contributors; Database location; Genre no. 123; Report Series 123, Version, Edition, Volume, Page) -->
+ <group prefix="(" suffix=")">
+ <choose>
+ <if type="patent">
+ <!-- authority: U.S. ; genre: patent ; number: 123,445 -->
+ <group delimiter=" ">
+ <text variable="authority" form="short"/>
+ <choose>
+ <if variable="genre">
+ <text variable="genre" text-case="capitalize-first"/>
+ </if>
+ <else>
+ <text term="patent" text-case="capitalize-first"/>
+ </else>
+ </choose>
+ <group delimiter=" ">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </group>
+ </if>
+ <else-if type="post webpage" match="any">
+ <!-- For post webpage, container-title is treated as publisher -->
+ <group delimiter="; ">
+ <text macro="secondary-contributors"/>
+ <text macro="database-location"/>
+ <text macro="number"/>
+ <text macro="locators-booklike"/>
+ </group>
+ </else-if>
+ <else-if type="report" match="any">
+ <choose>
+ <if variable="title" match="none">
+ <!-- If there is no title, then genre and number are already printed as the title. -->
+ <group delimiter="; ">
+ <text macro="secondary-contributors"/>
+ <text macro="database-location"/>
+ <text macro="locators-booklike"/>
+ </group>
+ </if>
+ <!-- If the report is a chapter in a larger report, then most parenthetical information is printed after the container. -->
+ <else-if variable="container-title">
+ <text macro="secondary-contributors"/>
+ </else-if>
+ <else>
+ <group delimiter="; ">
+ <text macro="secondary-contributors"/>
+ <text macro="database-location"/>
+ <text macro="number"/>
+ <text macro="locators-booklike"/>
+ </group>
+ </else>
+ </choose>
+ </else-if>
+ <else-if variable="container-title">
+ <group delimiter="; ">
+ <text macro="secondary-contributors"/>
+ <choose>
+ <if type="broadcast graphic map motion_picture song" match="any">
+ <!-- For audiovisual media, number information comes after title, not container-title -->
+ <text macro="number"/>
+ </if>
+ </choose>
+ </group>
+ </else-if>
+ <else>
+ <group delimiter="; ">
+ <text macro="secondary-contributors"/>
+ <text macro="database-location"/>
+ <text macro="number"/>
+ <text macro="locators-booklike"/>
+ </group>
+ </else>
+ </choose>
+ </group>
+ </macro>
+ <macro name="parenthetical-container">
+ <choose>
+ <if variable="container-title" match="any">
+ <group prefix="(" suffix=")">
+ <group delimiter="; ">
+ <text macro="database-location"/>
+ <choose>
+ <if type="broadcast graphic map motion_picture song" match="none">
+ <!-- For audiovisual media, number information comes after title, not container-title -->
+ <text macro="number"/>
+ </if>
+ </choose>
+ <text macro="locators-booklike"/>
+ </group>
+ </group>
+ </if>
+ </choose>
+ </macro>
+ <macro name="bracketed">
+ <!-- [Descriptive information] -->
+ <!-- If there is a number, genre is already printed in macro="number" -->
+ <group prefix="[" suffix="]">
+ <choose>
+ <if variable="reviewed-author reviewed-title" type="review review-book" match="any">
+ <!-- Reviewed item -->
+ <group delimiter="; ">
+ <group delimiter=", ">
+ <group delimiter=" ">
+ <!-- Assume that genre is entered as 'Review of the book' or similar -->
+ <choose>
+ <if variable="number" match="none">
+ <choose>
+ <if variable="genre">
+ <text variable="genre" text-case="capitalize-first"/>
+ </if>
+ <else-if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ </else-if>
+ <else>
+ <!-- Replace with term="review" as that becomes available -->
+ <text value="Review of"/>
+ </else>
+ </choose>
+ </if>
+ <else>
+ <choose>
+ <if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ </if>
+ <else>
+ <!-- Replace with term="review" as that becomes available -->
+ <text value="Review of"/>
+ </else>
+ </choose>
+ </else>
+ </choose>
+ <text macro="reviewed-title"/>
+ </group>
+ <names variable="reviewed-author">
+ <label form="verb-short" suffix=" "/>
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </group>
+ <choose>
+ <if variable="genre" match="any">
+ <choose>
+ <if variable="number" match="none">
+ <text variable="medium" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </group>
+ </if>
+ <else-if type="thesis">
+ <!-- Thesis type and institution -->
+ <group delimiter="; ">
+ <choose>
+ <if variable="number" match="none">
+ <group delimiter=", ">
+ <text variable="genre" text-case="capitalize-first"/>
+ <choose>
+ <if variable="archive DOI URL" match="any">
+ <!-- Include the university in brackets if thesis is published -->
+ <text variable="publisher"/>
+ </if>
+ </choose>
+ </group>
+ </if>
+ </choose>
+ <text variable="medium" text-case="capitalize-first"/>
+ </group>
+ </else-if>
+ <else-if variable="interviewer" type="interview" match="any">
+ <!-- Interview information -->
+ <choose>
+ <if variable="title">
+ <text macro="format"/>
+ </if>
+ <else-if variable="genre">
+ <group delimiter="; ">
+ <group delimiter=" ">
+ <text variable="genre" text-case="capitalize-first"/>
+ <group delimiter=" ">
+ <text term="author" form="verb"/>
+ <names variable="interviewer">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </group>
+ </group>
+ </group>
+ </else-if>
+ <else-if variable="interviewer">
+ <group delimiter="; ">
+ <names variable="interviewer">
+ <label form="verb" suffix=" " text-case="capitalize-first"/>
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ <text variable="medium" text-case="capitalize-first"/>
+ </group>
+ </else-if>
+ <else>
+ <text macro="format"/>
+ </else>
+ </choose>
+ </else-if>
+ <else-if type="personal_communication">
+ <!-- Letter information -->
+ <choose>
+ <if variable="recipient">
+ <group delimiter="; ">
+ <group delimiter=" ">
+ <choose>
+ <if variable="number" match="none">
+ <choose>
+ <if variable="genre">
+ <text variable="genre" text-case="capitalize-first"/>
+ </if>
+ <else-if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ </else-if>
+ <else>
+ <text term="letter" text-case="capitalize-first"/>
+ </else>
+ </choose>
+ </if>
+ <else>
+ <choose>
+ <if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ </if>
+ <else>
+ <text term="letter" text-case="capitalize-first"/>
+ </else>
+ </choose>
+ </else>
+ </choose>
+ <names variable="recipient" delimiter=", ">
+ <label form="verb" suffix=" "/>
+ <name and="symbol" delimiter=", "/>
+ </names>
+ </group>
+ <choose>
+ <if variable="genre" match="any">
+ <choose>
+ <if variable="number" match="none">
+ <text variable="medium" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </group>
+ </if>
+ <else>
+ <text macro="format"/>
+ </else>
+ </choose>
+ </else-if>
+ <else-if variable="composer" type="song" match="all">
+ <!-- Performer of classical music works -->
+ <group delimiter="; ">
+ <choose>
+ <if variable="number" match="none">
+ <group delimiter=" ">
+ <choose>
+ <if variable="genre">
+ <text variable="genre" text-case="capitalize-first"/>
+ <!-- Replace prefix with performer label as that becomes available -->
+ <names variable="author" prefix="recorded by ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </if>
+ <else-if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ <!-- Replace prefix with performer label as that becomes available -->
+ <names variable="author" prefix="recorded by ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </else-if>
+ <else>
+ <!-- Replace prefix with performer label as that becomes available -->
+ <names variable="author" prefix="Recorded by ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </else>
+ </choose>
+ </group>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <choose>
+ <if variable="medium">
+ <text variable="medium" text-case="capitalize-first"/>
+ <!-- Replace prefix with performer label as that becomes available -->
+ <names variable="author" prefix="recorded by ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </if>
+ <else>
+ <!-- Replace prefix with performer label as that becomes available -->
+ <names variable="author" prefix="Recorded by ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ </else>
+ </choose>
+ </group>
+ </else>
+ </choose>
+ <choose>
+ <if variable="genre" match="any">
+ <choose>
+ <if variable="number" match="none">
+ <text variable="medium" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </group>
+ </else-if>
+ <else-if variable="container-title" match="none">
+ <!-- Other description -->
+ <text macro="format"/>
+ </else-if>
+ <else>
+ <!-- For conference presentations, chapters in reports, software, place bracketed after the container title -->
+ <choose>
+ <if type="paper-conference speech" match="any">
+ <choose>
+ <if variable="collection-editor editor editorial-director issue page volume" match="any">
+ <text macro="format"/>
+ </if>
+ </choose>
+ </if>
+ <else-if type="report software" match="none">
+ <text macro="format"/>
+ </else-if>
+ </choose>
+ </else>
+ </choose>
+ </group>
+ </macro>
+ <macro name="bracketed-container">
+ <group prefix="[" suffix="]">
+ <choose>
+ <if type="paper-conference speech" match="any">
+ <!-- Conference presentations should describe the session [container] in bracketed unless published in a proceedings -->
+ <choose>
+ <if variable="collection-editor editor editorial-director issue page volume" match="none">
+ <text macro="format"/>
+ </if>
+ </choose>
+ </if>
+ <else-if type="software" match="all">
+ <!-- For entries in mobile app reference works, place bracketed after the container-title -->
+ <text macro="format"/>
+ </else-if>
+ <else-if type="report">
+ <!-- For chapters in reports, place bracketed after the container title -->
+ <text macro="format"/>
+ </else-if>
+ </choose>
+ </group>
+ </macro>
+ <macro name="secondary-contributors">
+ <choose>
+ <if type="article-journal article-magazine article-newspaper post-weblog review review-book" match="any">
+ <text macro="secondary-contributors-periodical"/>
+ </if>
+ <else-if type="paper-conference">
+ <choose>
+ <if variable="collection-editor editor editorial-director" match="any">
+ <text macro="secondary-contributors-booklike"/>
+ </if>
+ <else>
+ <text macro="secondary-contributors-periodical"/>
+ </else>
+ </choose>
+ </else-if>
+ <else>
+ <text macro="secondary-contributors-booklike"/>
+ </else>
+ </choose>
+ </macro>
+ <macro name="secondary-contributors-periodical">
+ <group delimiter="; ">
+ <choose>
+ <if variable="title">
+ <names variable="interviewer" delimiter="; ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" prefix=", " text-case="title"/>
+ </names>
+ </if>
+ </choose>
+ <names variable="translator" delimiter="; ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" prefix=", " text-case="title"/>
+ </names>
+ </group>
+ </macro>
+ <macro name="secondary-contributors-booklike">
+ <group delimiter="; ">
+ <choose>
+ <if variable="title">
+ <names variable="interviewer">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" prefix=", " text-case="title"/>
+ </names>
+ </if>
+ </choose>
+ <!-- When editortranslator becomes available, add a test: variable="editortranslator" match="none"; then print translator -->
+ <choose>
+ <if type="post webpage" match="none">
+ <!-- Webpages treat container-title like publisher -->
+ <choose>
+ <if variable="container-title" match="none">
+ <group delimiter="; ">
+ <names variable="container-author">
+ <label form="verb-short" suffix=" " text-case="title"/>
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ <names variable="editor translator" delimiter="; ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" prefix=", " text-case="title"/>
+ </names>
+ </group>
+ </if>
+ </choose>
+ </if>
+ <else>
+ <group delimiter="; ">
+ <names variable="container-author">
+ <label form="verb-short" suffix=" " text-case="title"/>
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ </names>
+ <names variable="editor translator" delimiter="; ">
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" prefix=", " text-case="title"/>
+ </names>
+ </group>
+ </else>
+ </choose>
+ </group>
+ </macro>
+ <macro name="database-location">
+ <choose>
+ <if variable="archive-place" match="none">
+ <!-- With `archive-place`: physical archives. Without: online archives. -->
+ <!-- Add archive_collection as that becomes available -->
+ <text variable="archive_location"/>
+ </if>
+ </choose>
+ </macro>
+ <macro name="number">
+ <choose>
+ <if variable="number">
+ <group delimiter=", ">
+ <group delimiter=" ">
+ <text variable="genre" text-case="title"/>
+ <group delimiter=" ">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </group>
+ <choose>
+ <if type="thesis">
+ <choose>
+ <!-- Include the university in brackets if thesis is published -->
+ <if variable="archive DOI URL" match="any">
+ <text variable="publisher"/>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </group>
+ </if>
+ </choose>
+ </macro>
+ <macro name="locators-booklike">
+ <choose>
+ <if type="article-journal article-magazine article-newspaper broadcast interview patent post post-weblog review review-book speech webpage" match="any"/>
+ <else-if type="paper-conference">
+ <choose>
+ <if variable="collection-editor editor editorial-director" match="any">
+ <group delimiter=", ">
+ <text macro="version"/>
+ <text macro="edition"/>
+ <text macro="volume-booklike"/>
+ </group>
+ </if>
+ </choose>
+ </else-if>
+ <else>
+ <group delimiter=", ">
+ <text macro="version"/>
+ <text macro="edition"/>
+ <text macro="volume-booklike"/>
+ </group>
+ </else>
+ </choose>
+ </macro>
+ <macro name="version">
+ <choose>
+ <if is-numeric="version">
+ <group delimiter=" ">
+ <label variable="version" text-case="capitalize-first"/>
+ <text variable="version"/>
+ </group>
+ </if>
+ <else>
+ <text variable="version"/>
+ </else>
+ </choose>
+ </macro>
+ <macro name="edition">
+ <choose>
+ <if is-numeric="edition">
+ <group delimiter=" ">
+ <number variable="edition" form="ordinal"/>
+ <label variable="edition" form="short"/>
+ </group>
+ </if>
+ <else>
+ <text variable="edition"/>
+ </else>
+ </choose>
+ </macro>
+ <macro name="volume-booklike">
+ <group delimiter=", ">
+ <!-- Report series [ex. 52] -->
+ <choose>
+ <if type="report">
+ <group delimiter=" ">
+ <text variable="collection-title" text-case="title"/>
+ <text variable="collection-number"/>
+ </group>
+ </if>
+ </choose>
+ <choose>
+ <if variable="volume" match="any">
+ <choose>
+ <!-- Non-numeric volumes are already printed as part of the book title -->
+ <if is-numeric="volume" match="none"/>
+ <else>
+ <group delimiter=" ">
+ <label variable="volume" form="short" text-case="capitalize-first"/>
+ <number variable="volume" form="numeric"/>
+ </group>
+ </else>
+ </choose>
+ </if>
+ <else>
+ <group>
+ <label variable="number-of-volumes" form="short" text-case="capitalize-first" suffix=" "/>
+ <text term="page-range-delimiter" prefix="1"/>
+ <number variable="number-of-volumes" form="numeric"/>
+ </group>
+ </else>
+ </choose>
+ <group delimiter=" ">
+ <label variable="issue" text-case="capitalize-first"/>
+ <text variable="issue"/>
+ </group>
+ <group delimiter=" ">
+ <label variable="page" form="short" suffix=" "/>
+ <text variable="page"/>
+ </group>
+ </group>
+ </macro>
+ <macro name="reviewed-title">
+ <choose>
+ <if variable="reviewed-title">
+ <!-- Not possible to distinguish TV series episode from other reviewed
+ works [Ex. 69] -->
+ <text variable="reviewed-title" font-style="italic"/>
+ </if>
+ <else>
+ <!-- Assume title is title of reviewed work -->
+ <text variable="title" font-style="italic"/>
+ </else>
+ </choose>
+ </macro>
+ <macro name="format">
+ <choose>
+ <if variable="genre medium" match="any">
+ <group delimiter="; ">
+ <choose>
+ <if variable="number" match="none">
+ <text variable="genre" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ <text variable="medium" text-case="capitalize-first"/>
+ </group>
+ </if>
+ <!-- Generic labels for specific types -->
+ <else-if type="dataset">
+ <text term="dataset"/>
+ </else-if>
+ <else-if type="software">
+ <text term="software" text-case="capitalize-first"/>
+ </else-if>
+ <else-if type="interview personal_communication" match="any">
+ <choose>
+ <if variable="archive container-title DOI publisher URL" match="none">
+ <text term="personal-communication" text-case="capitalize-first"/>
+ </if>
+ <else-if type="interview">
+ <text term="interview" text-case="capitalize-first"/>
+ </else-if>
+ </choose>
+ </else-if>
+ <else-if type="map">
+ <text term="map" text-case="capitalize-first"/>
+ </else-if>
+ </choose>
+ </macro>
+ <!-- APA 'source' element contains four parts:
+ container, event, publisher, access -->
+ <macro name="container">
+ <choose>
+ <if type="article-journal article-magazine article-newspaper post-weblog review review-book" match="any">
+ <!-- Periodical items -->
+ <text macro="container-periodical"/>
+ </if>
+ <else-if type="paper-conference">
+ <!-- Determine if paper-conference is a periodical or booklike -->
+ <choose>
+ <if variable="editor editorial-director collection-editor container-author" match="any">
+ <text macro="container-booklike"/>
+ </if>
+ <else>
+ <text macro="container-periodical"/>
+ </else>
+ </choose>
+ </else-if>
+ <else-if type="post webpage" match="none">
+ <!-- post and webpage treat container-title like publisher -->
+ <text macro="container-booklike"/>
+ </else-if>
+ </choose>
+ </macro>
+ <macro name="container-periodical">
+ <group delimiter=". ">
+ <group delimiter=", ">
+ <text variable="container-title" font-style="italic" text-case="title"/>
+ <choose>
+ <if variable="volume">
+ <group>
+ <text variable="volume" font-style="italic"/>
+ <text variable="issue" prefix="(" suffix=")"/>
+ </group>
+ </if>
+ <else>
+ <text variable="issue" font-style="italic"/>
+ </else>
+ </choose>
+ <choose>
+ <if variable="number">
+ <!-- Ex. 6: Journal article with article number or eLocator -->
+ <!-- This should be localized -->
+ <group delimiter=" ">
+ <text term="article-locator" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </if>
+ <else>
+ <text variable="page"/>
+ </else>
+ </choose>
+ </group>
+ <choose>
+ <if variable="issued">
+ <choose>
+ <if variable="issue page volume" match="none">
+ <text variable="status" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </group>
+ </macro>
+ <macro name="container-booklike">
+ <choose>
+ <if variable="container-title" match="any">
+ <group delimiter=" ">
+ <text term="in" text-case="capitalize-first"/>
+ <group delimiter=", ">
+ <names variable="editor translator" delimiter=", & ">
+ <!-- Change to editortranslator and move editor to substitute as that becomes available -->
+ <name and="symbol" initialize-with=". " delimiter=", "/>
+ <label form="short" text-case="title" prefix=" (" suffix=")"/>
+ <substitute>
+ <names variable="editorial-director"/>
+ <names variable="collection-editor"/>
+ <names variable="container-author"/>
+ </substitute>
+ </names>
+ <group delimiter=": " font-style="italic">
+ <text variable="container-title"/>
+ <!-- Replace with volume-title as that becomes available -->
+ <choose>
+ <if is-numeric="volume" match="none">
+ <group delimiter=" ">
+ <label variable="volume" form="short" text-case="capitalize-first"/>
+ <text variable="volume"/>
+ </group>
+ </if>
+ </choose>
+ </group>
+ </group>
+ <text macro="parenthetical-container"/>
+ <text macro="bracketed-container"/>
+ </group>
+ </if>
+ </choose>
+ </macro>
+ <macro name="publisher">
+ <group delimiter="; ">
+ <choose>
+ <if type="thesis">
+ <choose>
+ <if variable="archive DOI URL" match="none">
+ <text variable="publisher"/>
+ </if>
+ </choose>
+ </if>
+ <else-if type="post webpage" match="any">
+ <!-- For websites, treat container title like publisher -->
+ <group delimiter="; ">
+ <text variable="container-title" text-case="title"/>
+ <text variable="publisher"/>
+ </group>
+ </else-if>
+ <else-if type="paper-conference">
+ <!-- For paper-conference, don't print publisher if in a journal-like proceedings -->
+ <choose>
+ <if variable="collection-editor editor editorial-director" match="any">
+ <text variable="publisher"/>
+ </if>
+ </choose>
+ </else-if>
+ <else-if type="article-journal article-magazine article-newspaper post-weblog" match="none">
+ <text variable="publisher"/>
+ </else-if>
+ </choose>
+ <group delimiter=", ">
+ <choose>
+ <if variable="archive-place">
+ <!-- With `archive-place`: physical archives. Without: online archives. -->
+ <!-- For physical archives, print the location before the archive name.
+ For electronic archives, these are printed in macro="description". -->
+ <!-- Split "archive_location" into "archive_collection" and "archive_location" as that becomes available -->
+ <!-- Must test for archive_collection:
+ With collection: archive_collection (archive_location), archive, archive-place
+ No collection: archive (archive_location), archive-place
+ -->
+ <text variable="archive_location"/>
+ </if>
+ </choose>
+ <text variable="archive"/>
+ <text variable="archive-place"/>
+ </group>
+ </group>
+ </macro>
+ <macro name="access">
+ <choose>
+ <if variable="DOI" match="any">
+ <text variable="DOI" prefix="https://doi.org/"/>
+ </if>
+ <else-if variable="URL">
+ <group delimiter=" ">
+ <choose>
+ <if variable="issued status" match="none">
+ <group delimiter=" ">
+ <text term="retrieved" text-case="capitalize-first"/>
+ <date variable="accessed" form="text" suffix=","/>
+ <text term="from"/>
+ </group>
+ </if>
+ </choose>
+ <text variable="URL"/>
+ </group>
+ </else-if>
+ </choose>
+ </macro>
+ <macro name="event">
+ <choose>
+ <if variable="event event-title" match="any">
+ <!-- To prevent Zotero from printing event-place due to its double-mapping of all 'place' to
+ both publisher-place and event-place. Remove this 'choose' when that is changed. -->
+ <choose>
+ <if variable="collection-editor editor editorial-director issue page volume" match="none">
+ <!-- Don't print event info if published in a proceedings -->
+ <group delimiter=", ">
+ <text macro="event-title"/>
+ <text variable="event-place"/>
+ </group>
+ </if>
+ </choose>
+ </if>
+ </choose>
+ </macro>
+ <macro name="event-title">
+ <choose>
+ <!-- TODO: We expect "event-title" to be used,
+ but processors and applications may not be updated yet.
+ This macro ensures that either "event" or "event-title" can be accpeted.
+ Remove if procesor logic and application adoption can handle this. -->
+ <if variable="event-title">
+ <text variable="event-title"/>
+ </if>
+ <else>
+ <text variable="event"/>
+ </else>
+ </choose>
+ </macro>
+ <!-- After 'source', APA also prints publication history (original publication, reprint info, retraction info) -->
+ <macro name="publication-history">
+ <choose>
+ <if type="patent" match="none">
+ <group prefix="(" suffix=")">
+ <choose>
+ <if variable="references">
+ <!-- This provides the option for more elaborate description
+ of publication history, such as full "reprinted" references
+ (examples 11, 43, 44) or retracted references -->
+ <text variable="references"/>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <text term="original-work-published" text-case="capitalize-first"/>
+ <choose>
+ <if is-uncertain-date="original-date">
+ <text term="circa" form="short"/>
+ </if>
+ </choose>
+ <date variable="original-date">
+ <date-part name="year"/>
+ </date>
+ </group>
+ </else>
+ </choose>
+ </group>
+ </if>
+ <else>
+ <text variable="references" prefix="(" suffix=")"/>
+ </else>
+ </choose>
+ </macro>
+ <!-- Legal citations have their own rules -->
+ <macro name="legal-cites">
+ <!-- `treaty`: for treaties -->
+ <!-- `legal_case`: for all legal and court cases -->
+ <!-- `bill`: for bills, resolutions, federal reports -->
+ <!-- `hearing`: TODO for hearings and testimony -->
+ <!-- `legislation`: for statutes, constitutional items, and charters -->
+ <!-- `regulation`: TODO codified regulations, uncodified regulations, executive orders -->
+ <group delimiter=" ">
+ <choose>
+ <if type="treaty">
+ <group delimiter=", " suffix=".">
+ <!-- APA generally defers to Bluebook for legal citations, but diverges without
+ explanation for treaty items. We follow the Bluebook format that was used
+ in APA 6th ed. -->
+ <!-- APA manual omits treaty parties/authors, but per Bluebook
+ they should be included at least for bilateral treaties. -->
+ <names variable="author">
+ <name initialize-with="." form="short" delimiter="-"/>
+ </names>
+ <text macro="date-legal"/>
+ <!-- APA manual omits treaty source/report called for by Bluebook in favor of just URL.
+ Both are included here, following the APA style used for all other item types
+ to end the reference with a period, then give the URL afterward. -->
+ <text macro="container-legal"/>
+ </group>
+ </if>
+ <else>
+ <group delimiter=" " suffix=".">
+ <group delimiter=", ">
+ <text macro="title-legal"/>
+ <text macro="container-legal"/>
+ </group>
+ <text macro="date-legal"/>
+ <text macro="parenthetical-legal"/>
+ </group>
+ </else>
+ </choose>
+ <text variable="references"/>
+ <text macro="access"/>
+ </group>
+ </macro>
+ <macro name="title-legal">
+ <choose>
+ <if type="bill legal_case legislation regulation treaty" match="any">
+ <text variable="title" text-case="title"/>
+ </if>
+ <else-if type="hearing">
+ <!-- APA uses a comma delimiter and omits "hearing before the" for hearings with testimony,
+ but follows Bluebook rules (colon delimiter, prefix before the committee name) for
+ references to the whole hearing. We simply follow the Bluebook rules for both, but
+ use APA style capitalization (not capitalizing "Before" or the title of the hearing). -->
+ <group delimiter=": " font-style="italic">
+ <text variable="title" text-case="capitalize-first"/>
+ <group delimiter=" ">
+ <text term="hearing" form="long" text-case="capitalize-first"/>
+ <group delimiter=" ">
+ <group delimiter=" ">
+ <!-- APA manual omits the bill number, but it should be included per Bluebook if relevant -->
+ <text term="on"/>
+ <text variable="number"/>
+ </group>
+ <group delimiter=" ">
+ <!-- Use the `at` term to hold "before the" -->
+ <text term="at" form="long"/>
+ <text variable="section"/>
+ </group>
+ </group>
+ </group>
+ </group>
+ </else-if>
+ </choose>
+ </macro>
+ <macro name="date-legal">
+ <choose>
+ <if type="treaty">
+ <date variable="issued" form="text"/>
+ </if>
+ <else-if type="legal_case">
+ <group prefix="(" suffix=")" delimiter=" ">
+ <text variable="authority"/>
+ <choose>
+ <if variable="container-title" match="any">
+ <!-- Print only year for cases published in reporters-->
+ <date variable="issued" form="numeric" date-parts="year"/>
+ </if>
+ <else>
+ <!-- APA manual doesn't include examples of cases not yet
+ published in a reporter, but this is Bluebook style. -->
+ <date variable="issued" form="text"/>
+ </else>
+ </choose>
+ </group>
+ </else-if>
+ <else-if type="bill hearing legislation regulation" match="any">
+ <group prefix="(" suffix=")" delimiter=" ">
+ <group delimiter=" ">
+ <date variable="original-date">
+ <date-part name="year"/>
+ </date>
+ <text term="and" form="symbol"/>
+ </group>
+ <choose>
+ <if variable="issued">
+ <!-- APA manual includes "rev." before the revision year,
+ but this isn't part of the Bluebook rules. -->
+ <date variable="issued">
+ <date-part name="year"/>
+ </date>
+ </if>
+ <else>
+ <!-- Show proposal date for uncodified regualtions.
+ Assume date is entered literally ala "proposed May 23, 2016".
+ TODO: Add 'proposed' term here if that becomes available -->
+ <date variable="submitted" form="text"/>
+ </else>
+ </choose>
+ </group>
+ </else-if>
+ </choose>
+ </macro>
+ <macro name="container-legal">
+ <!-- Expect legal item container-titles to be stored in short form -->
+ <choose>
+ <if type="treaty">
+ <group delimiter=" ">
+ <number variable="volume"/>
+ <text variable="container-title"/>
+ <choose>
+ <if variable="page page-first" match="any">
+ <text variable="page-first"/>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </else>
+ </choose>
+ </group>
+ </if>
+ <else-if type="legal_case">
+ <group delimiter=" ">
+ <choose>
+ <if variable="container-title">
+ <group delimiter=" ">
+ <text variable="volume"/>
+ <text variable="container-title"/>
+ <group delimiter=" ">
+ <label variable="section" form="symbol"/>
+ <text variable="section"/>
+ </group>
+ <choose>
+ <if variable="page page-first" match="any">
+ <text variable="page-first"/>
+ </if>
+ <else>
+ <text value="___"/>
+ </else>
+ </choose>
+ </group>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </else>
+ </choose>
+ </group>
+ </else-if>
+ <else-if type="bill">
+ <group delimiter=", ">
+ <group delimiter=" ">
+ <text variable="genre"/>
+ <group delimiter=" ">
+ <choose>
+ <!-- TODO: What was the logic for this? Do we still need this? -->
+ <!-- If there is no session number or code/record title, print number.
+ Is that trying to capture congressional reports/documents? -->
+ <if variable="chapter-number container-title" match="none">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ </if>
+ </choose>
+ <text variable="number"/>
+ </group>
+ </group>
+ <group delimiter=" ">
+ <text variable="authority"/>
+ <!-- 'session' is `chapter-number` -->
+ <text variable="chapter-number"/>
+ </group>
+ <group delimiter=" ">
+ <text variable="volume"/>
+ <text variable="container-title"/>
+ <text variable="page-first"/>
+ </group>
+ </group>
+ </else-if>
+ <else-if type="hearing">
+ <group delimiter=" ">
+ <text variable="authority"/>
+ <!-- 'session' is `chapter-number` -->
+ <text variable="chapter-number"/>
+ </group>
+ </else-if>
+ <else-if type="legislation">
+ <choose>
+ <if variable="number">
+ <!-- There's a public law number. -->
+ <group delimiter=", ">
+ <text variable="number" prefix="Pub. L. No. "/>
+ <group delimiter=" ">
+ <text variable="volume"/>
+ <text variable="container-title"/>
+ <text variable="page-first"/>
+ </group>
+ </group>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <text variable="volume"/>
+ <text variable="container-title"/>
+ <choose>
+ <if variable="section">
+ <group delimiter=" ">
+ <label variable="section" form="symbol"/>
+ <text variable="section"/>
+ </group>
+ </if>
+ <else>
+ <text variable="page-first"/>
+ </else>
+ </choose>
+ </group>
+ </else>
+ </choose>
+ </else-if>
+ <else-if type="regulation">
+ <group delimiter=", ">
+ <group delimiter=" ">
+ <text variable="genre"/>
+ <group delimiter=" ">
+ <label variable="number" form="short" text-case="capitalize-first"/>
+ <text variable="number"/>
+ </group>
+ </group>
+ <group delimiter=" ">
+ <text variable="volume"/>
+ <text variable="container-title"/>
+ <choose>
+ <if variable="section">
+ <group delimiter=" ">
+ <label variable="section" form="symbol"/>
+ <text variable="section"/>
+ </group>
+ </if>
+ <else>
+ <text variable="page-first"/>
+ </else>
+ </choose>
+ </group>
+ </group>
+ </else-if>
+ </choose>
+ </macro>
+ <macro name="parenthetical-legal">
+ <choose>
+ <if type="hearing">
+ <group prefix="(" suffix=")" delimiter=" ">
+ <!-- Use the 'verb' form of the hearing term to hold 'testimony of' -->
+ <text term="hearing" form="verb"/>
+ <names variable="author">
+ <name and="symbol" delimiter=", "/>
+ </names>
+ </group>
+ </if>
+ <else-if type="bill legislation regulation" match="any">
+ <!-- For uncodified regulations, assume future code section is in `status`. -->
+ <text variable="status" prefix="(" suffix=")"/>
+ </else-if>
+ </choose>
+ </macro>
+ <citation et-al-min="21" et-al-use-first="19" et-al-use-last="true">
+ <sort>
+ <key macro="date-sort-group" sort="descending"/>
+ <key macro="date-year" sort="descending"/>
+ <key macro="date-sort" sort="ascending"/>
+ <key variable="status"/>
+ <key macro="author-sort"/>
+ <key macro="title"/>
+ </sort>
+ <layout delimiter="
">
+ <choose>
+ <if type="bill legal_case legislation treaty" match="any">
+ <!-- Legal items have different orders and delimiters -->
+ <choose>
+ <if variable="DOI URL" match="any">
+ <text macro="legal-cites"/>
+ </if>
+ <else>
+ <text macro="legal-cites" suffix="."/>
+ </else>
+ </choose>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <group delimiter=". " suffix=".">
+ <text macro="author-bib"/>
+ <text macro="date-bib"/>
+ <text macro="title-and-descriptions"/>
+ <text macro="container"/>
+ <text macro="event"/>
+ <text macro="publisher"/>
+ </group>
+ <text macro="access"/>
+ <text macro="publication-history"/>
+ </group>
+ </else>
+ </choose>
+ <text variable="annote" display="block"/>
+ </layout>
+ </citation>
+ <bibliography hanging-indent="true" et-al-min="21" et-al-use-first="19" et-al-use-last="true" entry-spacing="0" line-spacing="2">
+ <sort>
+ <key macro="date-sort-group" sort="descending"/>
+ <key macro="date-year" sort="descending"/>
+ <key macro="date-sort" sort="ascending"/>
+ <key variable="status"/>
+ <key macro="author-sort"/>
+ <key macro="title"/>
+ </sort>
+ <layout>
+ <choose>
+ <if type="bill hearing legal_case legislation regulation treaty" match="any">
+ <!-- Legal items have different orders and delimiters -->
+ <choose>
+ <if variable="DOI URL" match="any">
+ <text macro="legal-cites"/>
+ </if>
+ <else>
+ <text macro="legal-cites" suffix="."/>
+ </else>
+ </choose>
+ </if>
+ <else>
+ <group delimiter=" ">
+ <group delimiter=". " suffix=".">
+ <text macro="author-bib"/>
+ <text macro="date-bib"/>
+ <text macro="title-and-descriptions"/>
+ <text macro="container"/>
+ <text macro="event"/>
+ <text macro="publisher"/>
+ </group>
+ <text macro="access"/>
+ <text macro="publication-history"/>
+ </group>
+ </else>
+ </choose>
+ <text variable="annote" display="block"/>
+ </layout>
+ </bibliography>
+</style>
=====================================
resources/publications/publications.template.md
=====================================
@@ -0,0 +1,58 @@
+---
+bibliography: ../../bibliography.bib
+nocite: '@*'
+csl: apa-cv.csl
+---
+
+### Citing reproducible-builds.org
+
+The
+[CITATION.cff](https://salsa.debian.org/reproducible-builds/reproducible-website/-/blob/master/CITATION.cff)
+file is available at the root of the repository. It can be used to
+generate citations in various formats using
+[`cffconvert`](https://github.com/citation-file-format/cffconvert).
+
+If you are preparing a paper or article and wish to reference the
+[reproducible-builds.org](https://reproducible-builds.org) project, the
+following BibTeX entry is recommended:
+
+{% raw %}
+
+ @misc{ReproducibleBuildsOrg,
+ author = {{Reproducible Builds}},
+ title = {Reproducible Builds Website},
+ url = {https://reproducible-builds.org/}
+ }
+
+{% endraw %}
+
+### Academic publications
+
+In addition to the resources mentioned, our repository also includes a
+[bibliography.bib](https://salsa.debian.org/reproducible-builds/reproducible-website/-/blob/master/bibliography.bib)
+file, which contains BibTeX entries for all the academic publications listed
+here. This file is continuously updated to reflect the most recent scholarly
+works related to reproducible builds. It serves as a comprehensive source for
+researchers and practitioners looking to cite relevant literature in their work.
+The file can be found within the repository, making it easy for anyone to access
+and utilize in their own scholarly writings.
+
+- [@Thompson84]
+- [@wheeler2010fully]
+- [@courts2013functional]
+- [@courtes:hal-01161771]
+- [@Ren_2018]
+- [@8935014]
+- [@10.5555/3361338.3361435]
+- [@Ohm_2020]
+- [@10.1145/3373376.3378519]
+- [@10.1145/3407023.3409183]
+- [@9403390]
+- [@9465650]
+- [@10.1145/3510003.3510102]
+- [@9740718]
+- [@Butler2023]
+- [@10179320]
+- [@schorlemmer2024signing]
+- [@malka2024reproducibility]
+- [@randrianaina:hal-04441579]
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/8de3f5e3c6e1c4419e6ce387305aea9b7d7fe763...236d662fbb06df8da328cf676753b4fa04deb86d
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/8de3f5e3c6e1c4419e6ce387305aea9b7d7fe763...236d662fbb06df8da328cf676753b4fa04deb86d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20240329/357e6605/attachment.htm>
More information about the rb-commits
mailing list