1. How the Apache community upgrades dependencies: an evolutionary study
2. Lags in the release, adoption, and propagation of npm vulnerability fixes;Chinthanet Bodin;Empirical Software Engineering (ESME),2021
3. Surviving Software Dependencies
4. On the impact of security vulnerabilities in the npm package dependency network
5. Andre Hora , Romain Robbes , Nicolas Anquetil , Anne Etien , Stephane Ducasse , and Marco Tulio Valente . 2015 . How Do Developers React to API Evolution? The Pharo Ecosystem Case. In IEEE International Conference on Software Maintenance and Evolution (ICSME). 251–260 . Andre Hora, Romain Robbes, Nicolas Anquetil, Anne Etien, Stephane Ducasse, and Marco Tulio Valente. 2015. How Do Developers React to API Evolution? The Pharo Ecosystem Case. In IEEE International Conference on Software Maintenance and Evolution (ICSME). 251–260.