The reuse and distribution of open-source software must be in compliance with its
accompanying open-source license. In modern packaging ecosystems, maintaining such …

While open-source software has enabled significant levels of reuse to speed up software
development, it has also given rise to the dreadful dependency hell that all software …

The NPM package repository contains over two million packages and serves tens of billions
of downloads per-week. Nearly every single JavaScript application uses the NPM package …

We conducted a thorough SLR to better grasp the challenges and possible solutions
associated with existing npm security tools. Our goal was to delve into documented …

Reusing components is a well-established practice in modern software engineering and
brings many advantages, such as a reduction of development costs and time. However …

Software developers typically rely upon a large network of dependencies to build their
applications. For instance, the NPM package repository contains over 3 million packages …

Recent high-profile incidents in open-source software have greatly raised practitioner
attention on software supply chain attacks. To guard against potential malicious package …

MAVEN is a popular dependency management tool and ecosystem used by millions of
developers. However, the over-whelming amount of available open-source software and the …

Dependency management is a key part of the software development lifecycle. Choices
made when managing dependencies impact both the efficiency of software development …

Software supply chains include the development, management, and delivery of software
products. Software ecosystems are essential components of these supply chains and …