FSE 2025
Mon 23 - Fri 27 June 2025 Trondheim, Norway
co-located with ISSTA 2025
Wed 25 Jun 2025 14:20 - 14:30 at Vega - Dependency Chair(s): Alexandre Bartel

Managing software dependencies is increasingly challenging due to the complexity of modern development, often resulting in “dependency hell” with version conflicts, build failures, and runtime errors. To address these issues, we present AutoPyDep, a recommendation system for Python library dependency management. AutoPyDep features dependency analysis, relationship mapping, and predictive modeling for release categories and dates. By transforming release notes from 23 Python libraries into a graph network, we leverage NLP techniques and a community-based deepWalk algorithm to generate embeddings for tasks such as release category prediction and release date forecasting. Key contributions include a voting classifier achieving a robust F1 score of 0.8 and an ARIMA model with a Mean Absolute Error (MAE) of 1.8 months. AutoPyDep enhances dependency management accuracy, offering actionable insights for developers and supporting improved decision-making in software development. A demonstration of our tool is shared

Wed 25 Jun

Displayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

14:00 - 15:30
DependencyResearch Papers / Journal First / Demonstrations at Vega
Chair(s): Alexandre Bartel Umeå University
14:00
20m
Talk
Automatically fixing dependency breaking changes
Research Papers
Lukas Fruntke University College London, Jens Krinke University College London
DOI
14:20
10m
Talk
AutoPyDep: A Recommendation System for Python Dependency Management Utilizing Graph-Based Analytics
Demonstrations
Dibyendu Brinto Bose Virginia Tech, USA , Travis Chan Virginia Tech, Matthew Trimble Virginia Tech, Chris Brown Virginia Tech
14:30
20m
Talk
Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend Against Supply Chain Attacks
Research Papers
Hao He Carnegie Mellon University, Bogdan Vasilescu Carnegie Mellon University, Christian Kästner Carnegie Mellon University
DOI
14:50
20m
Talk
Towards Better Comprehension of Breaking Changes in the NPM Ecosystem
Journal First
Dezhen Kong Zhejiang University, Jiakun Liu Singapore Management University, Lingfeng Bao Zhejiang University, David Lo Singapore Management University
15:10
20m
Talk
On the Characteristics and Impacts of Protestware Libraries
Research Papers
Tanner Finken University of Arizona, Jesse Chen University of Arizona, Sazzadur Rahaman University of Arizona, Tucson, Arizona, USA
DOI

Information for Participants
Wed 25 Jun 2025 14:00 - 15:30 at Vega - Dependency Chair(s): Alexandre Bartel
Info for room Vega:

Vega is close to the registration desk.

Facing the registration desk, its entrance is on the left, close to the hotel side entrance.

:
:
:
: