On the use of github actions in software development repositories
GitHub Actions was introduced in 2019 and constitutes an integrated alternative to CI/CD
services for GitHub repositories. The deep integration with GitHub allows repositories to …
services for GitHub repositories. The deep integration with GitHub allows repositories to …
When and how to make breaking changes: Policies and practices in 18 open source software ecosystems
Open source software projects often rely on package management systems that help
projects discover, incorporate, and maintain dependencies on other packages, maintained …
projects discover, incorporate, and maintain dependencies on other packages, maintained …
Containing malicious package updates in npm with a lightweight permission system
The large amount of third-party packages available in fast-moving software ecosystems,
such as Node. js/npm, enables attackers to compromise applications by pushing malicious …
such as Node. js/npm, enables attackers to compromise applications by pushing malicious …
Dependency smells in javascript projects
Dependency management in modern software development poses many challenges for
developers who wish to stay up to date with the latest features and fixes whilst ensuring …
developers who wish to stay up to date with the latest features and fixes whilst ensuring …
Towards understanding third-party library dependency in c/c++ ecosystem
Third-party libraries (TPLs) are frequently reused in software to reduce development cost
and the time to market. However, external library dependencies may introduce …
and the time to market. However, external library dependencies may introduce …
Towards better dependency management: A first look at dependency smells in python projects
Managing cross-project dependencies is tricky in modern software development. A primary
way to manage dependencies is using dependency configuration files, which brings …
way to manage dependencies is using dependency configuration files, which brings …
An Overview and Catalogue of Dependency Challenges in Open Source Software Package Registries
While open-source software has enabled significant levels of reuse to speed up software
development, it has also given rise to the dreadful dependency hell that all software …
development, it has also given rise to the dreadful dependency hell that all software …
Dependency-Induced Waste in Continuous Integration: An Empirical Study of Unused Dependencies in the npm Ecosystem
Modern software systems are increasingly dependent upon code from external packages
(ie, dependencies). Building upon external packages allows software reuse to span across …
(ie, dependencies). Building upon external packages allows software reuse to span across …
[HTML][HTML] Can we trust tests to automate dependency updates? a case study of java projects
Developers are increasingly using services such as Dependabot to automate dependency
updates. However, recent research has shown that developers perceive such services as …
updates. However, recent research has shown that developers perceive such services as …
Mitigating persistence of open-source vulnerabilities in maven ecosystem
Vulnerabilities from third-party libraries (TPLs) have been unveiled to threaten the Maven
ecosystem in the long term. Despite patches being released promptly after vulnerabilities …
ecosystem in the long term. Despite patches being released promptly after vulnerabilities …