Our paper Security Assessment of Private Package Repositories: An Experience on Acc-Py at CERN, by M. Lizzit, F. Pinzauti, M. Miculan and V. Riccio, has been published (open access) in the Journal of Software: Evolution and Process (Wiley), vol. 38, no. 8. [pdf]