Demystifying the vulnerability propagation and its evolution via dependency trees in the npm ecosystem
Third-party libraries with rich functionalities facilitate the fast development of JavaScript
software, leading to the explosive growth of the NPM ecosystem. However, it also brings …
software, leading to the explosive growth of the NPM ecosystem. However, it also brings …
smartpip: A smart approach to resolving python dependency conflict issues
As one of the representative software ecosystems, PyPI, together with the Python package
management tool pip, greatly facilitates Python developers to automatically manage the …
management tool pip, greatly facilitates Python developers to automatically manage the …
Understanding and Remediating Open-Source License Incompatibilities in the PyPI Ecosystem
The reuse and distribution of open-source software must be in compliance with its
accompanying open-source license. In modern packaging ecosystems, maintaining such …
accompanying open-source license. In modern packaging ecosystems, maintaining such …
Conflict-aware inference of python compatible runtime environments with domain knowledge graph
Code sharing and reuse is a widespread use practice in software engineering. Although a
vast amount of open-source Python code is accessible on many online platforms …
vast amount of open-source Python code is accessible on many online platforms …
Fine-grained network analysis for modern software ecosystems
Modern software development is increasingly dependent on components, libraries, and
frameworks coming from third-party vendors or open-source suppliers and made available …
frameworks coming from third-party vendors or open-source suppliers and made available …
Nufix: Escape from NuGet dependency maze
Developers usually suffer from d ependency m aze (DM) issues, ie, package dependency
constraints are violated when a project's platform or dependencies are changed. This …
constraints are violated when a project's platform or dependencies are changed. This …
Using answer set programming for HPC dependency solving
T Gamblin, M Culpo, G Becker… - … Conference for High …, 2022 - ieeexplore.ieee.org
Modern scientific software stacks have become extremely complex, using many
programming models and libraries to exploit a growing variety of GPUs and accelerators …
programming models and libraries to exploit a growing variety of GPUs and accelerators …
Flexible and optimal dependency management via max-smt
Package managers such as NPM have become essential for software development. The
NPM repository hosts over 2 million packages and serves over 43 billion downloads every …
NPM repository hosts over 2 million packages and serves over 43 billion downloads every …
Demystifying Compiler Unstable Feature Usage and Impacts in the Rust Ecosystem
Rust programming language is gaining popularity rapidly in building reliable and secure
systems due to its security guarantees and outstanding performance. To provide extra …
systems due to its security guarantees and outstanding performance. To provide extra …
Automatically resolving dependency-conflict building failures via behavior-consistent loosening of library version constraints
Python projects grow quickly by code reuse and building automation based on third-party
libraries. However, the version constraints associated with these libraries are prone to mal …
libraries. However, the version constraints associated with these libraries are prone to mal …