A comprehensive study of bloated dependencies in the maven ecosystem

C Soto-Valero, N Harrand, M Monperrus… - Empirical Software …, 2021‏ - Springer
Build automation tools and package managers have a profound influence on software
development. They facilitate the reuse of third-party libraries, support a clear separation …

Breaking bad? semantic versioning and impact of breaking changes in maven central: An external and differentiated replication study

L Ochoa, T Degueule, JR Falleri, J Vinju - Empirical Software Engineering, 2022‏ - Springer
Just like any software, libraries evolve to incorporate new features, bug fixes, security
patches, and refactorings. However, when a library evolves, it may break the contract …

Mitigating persistence of open-source vulnerabilities in maven ecosystem

L Zhang, C Liu, S Chen, Z Xu, L Fan… - 2023 38th IEEE/ACM …, 2023‏ - ieeexplore.ieee.org
Vulnerabilities from third-party libraries (TPLs) have been unveiled to threaten the Maven
ecosystem in the long term. Despite patches being released promptly after vulnerabilities …

Analyzing the direct and transitive impact of vulnerabilities onto different artifact repositories

J Düsing, B Hermann - Digital Threats: Research and Practice, 2022‏ - dl.acm.org
In modern-day software development, a vast amount of public software libraries enable the
reuse of existing implementations for reoccurring tasks and common problems. While this …

DeepMig: A transformer-based approach to support coupled library and code migrations

J Di Rocco, PT Nguyen, C Di Sipio, R Rubei… - Information and …, 2025‏ - Elsevier
Context: While working on software projects, developers often replace third-party libraries
(TPLs) with different ones offering similar functionalities. However, choosing a suitable TPL …

Goblin: A framework for enriching and querying the maven central dependency graph

D Jaime, JE Haddad, P Poizat - … of the 21st International Conference on …, 2024‏ - dl.acm.org
Dependency graphs support software maintenance and software ecosystem analysis.
Several metrics can be used on top of these graph models but the set of such metrics is to …

Aroma: Automatic reproduction of maven artifacts

M Keshani, TG Velican, G Bot, S Proksch - Proceedings of the ACM on …, 2024‏ - dl.acm.org
Modern software engineering establishes software supply chains and relies on tools and
libraries to improve productivity. However, reusing external software in a project presents a …

Fitting missing API puzzles with machine translation techniques

PT Nguyen, C Di Sipio, J Di Rocco, D Di Ruscio… - Expert Systems with …, 2023‏ - Elsevier
While implementing software projects, developers do not reinvent the wheel but try to reuse
existing API calls and source code. In recent years, the problems related to recommending …

The emergence of software diversity in maven central

C Soto-Valero, A Benelallam, N Harrand… - 2019 IEEE/ACM 16th …, 2019‏ - ieeexplore.ieee.org
Maven artifacts are immutable: an artifact that is uploaded on Maven Central cannot be
removed nor modified. The only way for developers to upgrade their library is to release a …

[HTML][HTML] On the relation of method popularity to breaking changes in the Maven ecosystem

M Keshani, S Vos, S Proksch - Journal of Systems and Software, 2023‏ - Elsevier
Software reuse is a common practice in modern software engineering to save time and
energy while accelerating software delivery. Dependency managers like MAVEN offer a …