2018 · 99 citations · 15 references
ComputingComputer ScienceSecure Software DevelopmentSoftware EngineeringVulnerability AnalysisDependency ManagementSoftware MaintenanceSoftware Vulnerability DiscoveryStatic Vulnerability AnalysisVulnerability ManagementDependency Vulnerability AnalysisDependency Vulnerability DetectionOpen Source Dependency AnalysisOpen Source Risk ManagementOpen Source Software SecurityOpen-source Software DevelopmentProject DependenciesSoftware Libraries
Background: Vulnerable dependencies are a known problem in today's open-source software ecosystems because OSS libraries are highly interconnected and developers do not always update their dependencies.
15
Do developers update their library dependencies?
Raula Gaikovina Kula, Daniel M. Germán, Ali Ouni et al. · Empirical Software Engineering · 2017 · 335 citations · Full text
Structure and Evolution of Package Dependency Networks
Riivo Kikas, Georgios Gousios, Marlon Dumas et al. · 2017 · 161 citations · Full text