Third-party libraries (TPLs) are frequently reused in software to reduce development cost
and the time to market. However, external library dependencies may introduce …

Managing cross-project dependencies is tricky in modern software development. A primary
way to manage dependencies is using dependency configuration files, which brings …

Modern software systems are increasingly relying on dependencies from the ecosystem. A
recent estimation shows that around 35% of an open-source project's code come from its …

As one of the representative software ecosystems, PyPI, together with the Python package
management tool pip, greatly facilitates Python developers to automatically manage the …

Software composition analysis (SCA) tools are proposed to detect potential vulnerabilities
introduced by open-source software (OSS) imported as third-party libraries (TPL). With the …

Libraries play a significant role in software development as they provide reusable
functionality, which helps expedite the development process. As libraries evolve, they …

Deep learning (DL) applications, built upon a heterogeneous and complex DL stack (eg,
Nvidia GPU, Linux, CUDA driver, Python runtime, and TensorFlow), are subject to software …

Besides third-party packages, the Python interpreter and system libraries are also critical
dependencies of a Python program. In our empirical study, 34% programs are only …

Large-scale code reuse significantly reduces both development costs and time. However,
the massive share of third-party code in software projects poses new challenges, especially …

Modern software systems are complex, and they heavily rely on external libraries developed
by different teams and organizations. Such systems suffer from higher instability due to …