Demystifying the vulnerability propagation and its evolution via dependency trees in the npm ecosystem

C Liu, S Chen, L Fan, B Chen, Y Liu… - Proceedings of the 44th …, 2022 - dl.acm.org
Third-party libraries with rich functionalities facilitate the fast development of JavaScript
software, leading to the explosive growth of the NPM ecosystem. However, it also brings …

smartpip: A smart approach to resolving python dependency conflict issues

C Wang, R Wu, H Song, J Shu, G Li - Proceedings of the 37th IEEE/ACM …, 2022 - dl.acm.org
As one of the representative software ecosystems, PyPI, together with the Python package
management tool pip, greatly facilitates Python developers to automatically manage the …

Understanding and Remediating Open-Source License Incompatibilities in the PyPI Ecosystem

W Xu, H He, K Gao, M Zhou - 2023 38th IEEE/ACM …, 2023 - ieeexplore.ieee.org
The reuse and distribution of open-source software must be in compliance with its
accompanying open-source license. In modern packaging ecosystems, maintaining such …

Conflict-aware inference of python compatible runtime environments with domain knowledge graph

W Cheng, X Zhu, W Hu - … of the 44th International Conference on …, 2022 - dl.acm.org
Code sharing and reuse is a widespread use practice in software engineering. Although a
vast amount of open-source Python code is accessible on many online platforms …

Fine-grained network analysis for modern software ecosystems

P Boldi, G Gousios - ACM Transactions on Internet Technology (TOIT), 2020 - dl.acm.org
Modern software development is increasingly dependent on components, libraries, and
frameworks coming from third-party vendors or open-source suppliers and made available …

Nufix: Escape from NuGet dependency maze

Z Li, Y Wang, Z Lin, SC Cheung, JG Lou - Proceedings of the 44th …, 2022 - dl.acm.org
Developers usually suffer from d ependency m aze (DM) issues, ie, package dependency
constraints are violated when a project's platform or dependencies are changed. This …

Using answer set programming for HPC dependency solving

T Gamblin, M Culpo, G Becker… - … Conference for High …, 2022 - ieeexplore.ieee.org
Modern scientific software stacks have become extremely complex, using many
programming models and libraries to exploit a growing variety of GPUs and accelerators …

Flexible and optimal dependency management via max-smt

D Pinckney, F Cassano, A Guha, J Bell… - 2023 IEEE/ACM 45th …, 2023 - ieeexplore.ieee.org
Package managers such as NPM have become essential for software development. The
NPM repository hosts over 2 million packages and serves over 43 billion downloads every …

Demystifying Compiler Unstable Feature Usage and Impacts in the Rust Ecosystem

C Li, Y Wu, W Shen, Z Zhao, R Chang, C Liu… - Proceedings of the 46th …, 2024 - dl.acm.org
Rust programming language is gaining popularity rapidly in building reliable and secure
systems due to its security guarantees and outstanding performance. To provide extra …

Automatically resolving dependency-conflict building failures via behavior-consistent loosening of library version constraints

H Wang, S Liu, L Zhang, C Xu - Proceedings of the 31st ACM Joint …, 2023 - dl.acm.org
Python projects grow quickly by code reuse and building automation based on third-party
libraries. However, the version constraints associated with these libraries are prone to mal …