Reproduce “A Survey on Mapping Digital Systems with Bill of Materials: Development, Practices, and Challenges” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Shuai Zhang, Minzhao Lyu, Hassan Habibi Gharakheili
The authors survey BOM standards and research across software, hardware, AI models and datasets, cryptographic assets, and software-as-a-service. They trace how BOM data are generated, evaluated, shared, and used. A reviewed study found that only 7% of SBOM files from 186 GitHub projects contained all mandatory NTIA fields; this is a synthesis, not a new experiment.
Key insights
- Digital BOMs have evolved through distinct stages (pre-development, initial, accelerated), expanding from traditional manufacturing HBOMs to specialized frameworks addressing software, AI, cryptographic, and cloud service components.
- Despite growing adoption and regulatory mandates, BOM development efforts across different digital domains have remained fragmented, lacking a unified understanding of their interrelationships and complementary nature.
- Current BOM generation tools and practices face significant limitations in terms of correctness, completeness, consistency, and cryptographic protection, particularly for emerging ecosystems and complex, transitive dependencies.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.