Do developers update their library dependencies? An empirical study on the impact of security advisories on library migration

RG Kula, DM German, A Ouni, T Ishio… - Empirical Software …, 2018 - Springer
Third-party library reuse has become common practice in contemporary software
development, as it includes several benefits for developers. Library dependencies are …

An empirical study of usages, updates and risks of third-party libraries in java projects

Y Wang, B Chen, K Huang, B Shi, C Xu… - 2020 IEEE …, 2020 - ieeexplore.ieee.org
Third-party libraries play a key role in software development as they can relieve developers
of the heavy burden of re-implementing common functionalities. However, third-party …

Understanding software-2.0: A study of machine learning library usage and evolution

M Dilhara, A Ketkar, D Dig - ACM Transactions on Software Engineering …, 2021 - dl.acm.org
Enabled by a rich ecosystem of Machine Learning (ML) libraries, programming using
learned models, ie, Software-2.0, has gained substantial adoption. However, we do not …

“We Feel Like We're Winging It:” A Study on Navigating Open-Source Dependency Abandonment

C Miller, C Kästner, B Vasilescu - Proceedings of the 31st ACM Joint …, 2023 - dl.acm.org
While lots of research has explored how to prevent maintainers from abandoning the open-
source projects that serve as our digital infras-tructure, there are very few insights on …

Semantic versioning and impact of breaking changes in the Maven repository

S Raemaekers, A van Deursen, J Visser - Journal of Systems and Software, 2017 - Elsevier
Abstract Systems that depend on third-party libraries may have to be updated when updates
to these libraries become available in order to benefit from new functionality, security …

Logging library migrations: A case study for the apache software foundation projects

S Kabinna, CP Bezemer, W Shang… - Proceedings of the 13th …, 2016 - dl.acm.org
Developers leverage logs for debugging, performance monitoring and load testing. The
increased dependence on logs has lead to the development of numerous logging libraries …

A longitudinal analysis of bloated java dependencies

C Soto-Valero, T Durieux, B Baudry - Proceedings of the 29th ACM Joint …, 2021 - dl.acm.org
We study the evolution and impact of bloated dependencies in a single software ecosystem:
Java/Maven. Bloated dependencies are third-party libraries that are packaged in the …

Discovering repetitive code changes in python ml systems

M Dilhara, A Ketkar, N Sannidhi, D Dig - Proceedings of the 44th …, 2022 - dl.acm.org
Over the years, researchers capitalized on the repetitiveness of software changes to
automate many software evolution tasks. Despite the extraordinary rise in popularity of …

Characterizing usages, updates and risks of third-party libraries in Java projects

K Huang, B Chen, C Xu, Y Wang, B Shi, X Peng… - Empirical Software …, 2022 - Springer
Third-party libraries are a key building block in software development as they allow
developers to reuse common functionalities instead of reinventing the wheel. However, third …

How does library migration impact software quality and comprehension? an empirical study

H Alrubaye, D Alshoaibi, E Alomar… - … Conference on Software …, 2020 - Springer
The process of migration between different third-party software libraries, while being an
typical library reuse practice, is complex, time consuming and error-prone. Typically, during …