* ICSE 2018 *
Sun 27 May - Sun 3 June 2018 Gothenburg, Sweden
Fri 1 Jun 2018 14:15 - 14:30 at R2 - Software Engineering in Other Domains Chair(s): Liliana Pasquale

A popular form of software reuse is the use of open source software libraries hosted on centralized code repositories, such as Maven or npm. Developers only need to declare dependencies to external libraries, and automated tools make them available to the workspace of the project. Recent incidents, such as the Equifax data breach and the leftpad package removal, demonstrate the difficulty in assessing the severity, impact and spread of bugs in dependency networks. While dependency checkers are being adapted as a counter measure, they only provide indicative information. To remedy this situation, we propose a fine-grained dependency network that goes beyond packages and into call graphs. The result is a versioned ecosystem-level call graph. In this paper, we outline the process to construct the proposed graph and present a preliminary evaluation of a security issue from a core package to an affected client application.

Fri 1 Jun

icse-2018-New-Ideas-and-Emerging-Results
14:00 - 15:00: NIER - New Ideas and Emerging Results - Software Engineering in Other Domains at R2
Chair(s): Liliana PasqualeUniversity College Dublin & Lero, Ireland
icse-2018-New-Ideas-and-Emerging-Results14:00 - 14:15
Talk
icse-2018-New-Ideas-and-Emerging-Results14:15 - 14:30
Talk
Joseph HejderupDelft University of Technology, Netherlands, Arie van DeursenDelft University of Technology, Georgios Gousios
DOI Pre-print
icse-2018-New-Ideas-and-Emerging-Results14:30 - 14:45
Talk
icse-2018-New-Ideas-and-Emerging-Results14:45 - 15:00
Talk
Jane Cleland-HuangUniversity of Notre Dame, Michael VierhauserUniversity of Notre Dame, Sean Bayley