Surviving Software Dependencies-Reference-Cited by-同舟云学术

Surviving Software Dependencies

Published:2019-04 Issue:2 Volume:17 Page:24-47
ISSN:1542-7730
Container-title:Queue
language:en
Short-container-title:Queue

Author:

Cox Russ¹

Affiliation:

1. Google

Abstract

Software reuse is finally here, and its benefits should not be understated, but we’ve accepted this transformation without completely thinking through the potential consequences. The Copay and Equifax attacks are clear warnings of real problems in the way software dependencies are consumed today. There’s a lot of good software out there. Let’s work together to find out how to reuse it safely.

Publisher

Association for Computing Machinery (ACM)

Subject

General Computer Science

Link

https://dl.acm.org/doi/pdf/10.1145/3329781.3344149

Reference23 articles.

1. Cox R. 2018. Go & Versioning; https://research.swtch.com/vgo. Cox R. 2018. Go & Versioning; https://research.swtch.com/vgo.

2. Cox R. 2018. The principles of versioning in Go. GopherCon Singapore (May); https://www.youtube.com/watch?v=F8nrpe0XWRg. Cox R. 2018. The principles of versioning in Go. GopherCon Singapore (May); https://www.youtube.com/watch?v=F8nrpe0XWRg.

3. Cox R. 2012. Regular expression matching with a trigram index or how Google Code Search worked. Swtch.com (January); https://swtch.com/~rsc/regexp/regexp4.html. Cox R. 2012. Regular expression matching with a trigram index or how Google Code Search worked. Swtch.com (January); https://swtch.com/~rsc/regexp/regexp4.html.

Cited by 5 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. See to Believe: Using Visualization to Motivate Updating Third-Party Dependencies;2024 21st International Joint Conference on Computer Science and Software Engineering (JCSSE);2024-06-19

2. Dataset: Copy-based Reuse in Open Source Software;Proceedings of the 21st International Conference on Mining Software Repositories;2024-04-15

3. Software Reuse Approach Based on Review and Analysis of Reuse Risks from Projects Uploaded to GitHub;Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering;2023

4. V-Achilles: An Interactive Visualization of Transitive Security Vulnerabilities;Proceedings of the 37th IEEE/ACM International Conference on Automated Software Engineering;2022-10-10

5. LastPyMile: identifying the discrepancy between sources and packages;Proceedings of the 29th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering;2021-08-18