Concepedia

Open Source Dependency Analysis

Open Source Dependency Analysis is a software analysis method that identifies, evaluates, and manages third-party open source components within a software system to assess their origins, licenses, vulnerabilities, and potential risks, distinguishing it from broader dependency management by focusing exclusively on open source artifacts and their compliance and security implications.

29

Publications

1.4K

Citations

95

Authors

42

Institutions

Publications per year

2017–2026

17

Parents

Publications

29

Structure and Evolution of Package Dependency Networks

Riivo Kikas, Georgios Gousios, Marlon Dumas et al. · 2017 · 161 citations · Full text

, , +15

Detection, assessment and mitigation of vulnerabilities in open source dependencies

Serena Elisa Ponta, Henrik Plate, Antonino Sabetta · Empirical Software Engineering · 2020 · 135 citations · Full text

, , +15

An empirical comparison of dependency issues in OSS packaging ecosystems

Alexandre Decan, Tom Mens, Maëlick Claes · 2017 · 120 citations · Full text

, , +14

Vulnerable open source dependencies

Ivan Pashchenko, Henrik Plate, Serena Elisa Ponta et al. · 2018 · 99 citations · Full text

, , +15

World of Code: An Infrastructure for Mining the Universe of Open Source VCS Data

Yuxing Ma, Christopher Bogart, Sadika Amreen et al. · 2019 · 92 citations

, , +17

1–5 of 29

Authors

95

  1. SE
    Serena Elisa Ponta

    University of Trento, Italy

    4 publications · 307 citations

    4

    h-index

  2. HP
    Henrik Plate

    University of Trento, Italy

    4 publications · 307 citations

    4

    h-index

  3. AS
    Antonino Sabetta

    University of Trento, Italy

    4 publications · 307 citations

    4

    h-index

  4. IP
    Ivan Pashchenko

    University of Trento, Italy

    3 publications · 172 citations

    3

    h-index

  5. FM
    Fabio Massacci

    University of Trento, Italy

    3 publications · 172 citations

    3

    h-index

1–5 of 95

Institutions

42

  1. University of Trento

    Trento, Italy

    3 h-index

    5 publications

    283 citations

  2. Delft University of Technology

    Delft, The Netherlands

    3 h-index

    3 publications

    226 citations

  3. Polytechnique Montréal

    Montreal, Canada

    2 h-index

    7 publications

    213 citations

  4. Queen's University

    Kingston, Canada

    2 h-index

    2 publications

    54 citations

  5. U.S. National Science Foundation

    Alexandria, United States

    2 h-index

    2 publications

    23 citations

  6. Technical University of Munich

    Munich, Germany

    2 h-index

    4 publications

    128 citations

  7. Pennsylvania State University

    State College, United States

    2 h-index

    2 publications

    23 citations

  8. Huawei Technologies (Canada)

    Markham, Canada

    1 h-index

    1 publications

    22 citations

1–8 of 42

Venues

  1. arXiv (Cornell University)

    Repository · 2 publications · 29 citations

    2

    h-index

  2. IEEE Transactions on Software Engineering

    TSE · 2 publications · 83 citations

    2

    h-index

  3. Research Repository (Delft University of Technology)

    Repository · 1 publications · 33 citations

    1

    h-index

  4. Arrow@dit (Dublin Institute of Technology)

    Repository · 1 publications · 21 citations

    1

    h-index

  5. 1

    h-index

1–5