EASE 2025
Tue 17 - Fri 20 June 2025 Istanbul, Turkey
Fri 20 Jun 2025 13:45 - 13:55 at Senate Hall - API Chair(s): Vesna Nowack

Software systems extensively rely on open source software (OSS) libraries, which offer numerous benefits but also pose significant risks. These risks arise when vulnerabilities or attacks emerge, and the OSS community fails to address them promptly due to inactivity or lack of resources. Recent research highlights the strong connec- tion between OSS maintenance activities and financial support. To support the sustainability of the OSS ecosystem, it is crucial for library maintainers to register on donation platforms and link these profiles on the library’s project page accordingly. This allows end users and industry initiatives to provide financial support, ensuring maintainers have access to funding streams. However, a compre- hensive investigation on the actual usage of donation platforms in OSS ecosystems is currently missing. This descriptive study an- alyzes the usage of the most common donation platforms in the PyPI ecosystem. For every available PyPI library, we retrieve its assigned URLs, direct dependencies, and, when available, the owner type and additional donation platform links from its GitHub repos- itory. Using the PageRank algorithm, we analyze the ecosystem for different subsets of libraries looking at both the library and dependency chain perspective. Our study provides several empiri- cal insights regarding the adoption of donation platforms within the PyPI ecosystem. We observe that donation platform links are largely omitted from PyPI project pages, with a strong preference for listing such links exclusively on GitHub repositories. Addition- ally, GitHub Sponsors emerges as the dominant donation platform, though a notable portion of listed links on PyPI are outdated, high- lighting the need for automated link verification. Our findings also reveal significant variations in donation platform adoption across individual libraries and dependency chains. While the analysis of individual PyPI libraries exhibit relatively low adoption rates, li- braries used as direct and transitive dependencies show a much higher usage of donation platforms. This widespread adoption of donation platforms among dependencies is a positive sign for devel- opers using PyPI libraries, as these libraries actively seek financial support to sustain ongoing maintenance.

Fri 20 Jun

Displayed time zone: Athens change

13:30 - 15:00
13:30
15m
Talk
Version-level Third-Party Library Detection in Android Applications via Class Structural Similarity
Research Papers
Bolin Zhou Institute of Software, Chinese Academy of Sciences; University of Chinese Academy of Sciences, Jingzheng Wu Institute of Software, Chinese Academy of Sciences, Xiang Ling Institute of Software, Chinese Academy of Sciences, Tianyue Luo Institute of Software, Chinese Academy of Sciences, Jingkun Zhang Institute of Software, Chinese Academy of Sciences; University of Chinese Academy of Sciences
Pre-print
13:45
10m
Short-paper
Analyzing the Usage of Donation Platforms for PyPI Libraries
Short Papers, Emerging Results
Link to publication Pre-print
13:55
10m
Talk
Bake Two Cakes with One Oven: RL for Defusing Popularity Bias and Cold-start in Third-Party Library Recommendations
Short Papers, Emerging Results
Hoang Minh Vuong Hanoi University of Science and Technology, Anh M. T. Bui Hanoi University of Science and Technology, Phuong T. Nguyen University of L’Aquila, Davide Di Ruscio University of L'Aquila
Pre-print
14:05
10m
Talk
Identifying Critical Dependencies in Large-Scale Continuous Software Engineering
Short Papers, Emerging Results
Anastasiia Tkalich SINTEF, Eriks Klotins Blekinge Institute of Technology, Nils Brede Moe Sintef
Pre-print
14:15
15m
Talk
Large Language Models for API Classification: An Explorative Study
AI Models / Data
Gabriel Morais UQAR, Edwin Lemelin Université du Québec à Rimouski (UQAR) - Université Laval, Mehdi Adda Université du Québec à Rimouski (UQAR), Dominik Bork TU Wien, Vienna, Austria
Pre-print
14:30
15m
Talk
Understanding API Usage and Testing: An Empirical Study of C Libraries
Research Papers
Ahmed Zaki Imperial College London, Cristian Cadar Imperial College London