CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages
This program is tentative and subject to change.
Dependency resolution at a specified point in time in the past can provide insight into software evolution in software ecosystems and facilitate the design of dynamic metrics (e.g., dependency freshness, dependency update rhythm). However, dependency resolution at specified points in time is not possible in major software ecosystems due to a lack of support from package management tools. The goal of this paper is to aid practitioners and researchers in analyzing the state of the ecosystem dependency graph at release points using an enriched dataset with dependency resolution at release points for npm, PyPI, and creates.io packages. In this paper, we present a methodology to construct dependency resolution at release points of packages in software ecosystems, which we enrich with vulnerability data from OSV. We apply our methodology to construct CHRONO-RESOLUTION, a dataset of dependency resolution at release points for npm, PyPI, and crates.io packages, and release it for future research.
This program is tentative and subject to change.
Wed 16 SepDisplayed time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change
16:00 - 17:30 | Session 9 - Trustworthy Intelligence: Secure AI EngineeringReplication and Negative Results / Tool Demonstration and Data Showcase Track / Research Papers Track / Visions and Emerging Results Track / Industry Track at Auditorium Theme: Security & Reliability | ||
16:00 20mPaper | Do Size Estimates Predict Delivery? An Empirical Analysis of Task Estimation in Industrial DevOps Industry Track Samah Kansab Software Engineering Departement, Ecole de Technologie Supérieure (ETS) - Québec University, Damien Desvent Software engineering Departemnet, Ecole de TechnologieSuperieure (ETS), University of Quebec, Francis Bordeleau École de Technologie Supérieure (ETS), Ali Tizghadam TELUS | ||
16:20 20mPaper | When LLM Architectures Meet Smart Contract Vulnerability Detection: a Replication Study Replication and Negative Results Gerardo Iuliano University of Salerno, Gabriele De Vito Università di Salerno, Dario Di Nucci Software Engineering (SeSa) Lab, University of Salerno, Italy | ||
16:40 20mPaper | Cost-Effective Maintenance of Requirements-Test Alignment via Quantized LLMs Research Papers Track Erik Lindstrand University of Gothenburg, Michal Spano University of Gothenburg, Mariia Zabolotnia University of Gothenburg, Francisco Gomes de Oliveira Neto Chalmers University of Technology and the University of Gothenburg | ||
17:00 10mShort-paper | CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages Tool Demonstration and Data Showcase Track Imranur Rahman North Carolina State University, Jill Marley North Carolina State University, Ranindya Paramitha North Carolina State University, Laurie Williams North Carolina State University Pre-print Media Attached | ||
17:10 10mShort-paper | sbom-unifier: Integration Framework for Heterogeneous SBOMs Tool Demonstration and Data Showcase Track Yusuke Moriwaki Ritsumeikan University, Tetsuya Kanda Notre Dame Seishin University, Yuki Manabe The University of Fukuchiyama, Shi Qiu Toshiba, Shiyu Yang Ritsumeikan University, Erina Makihara Ritsumeikan University, Norihiro Yoshida Ritsumeikan University, Katsuro Inoue Ritsumeikan University Media Attached | ||
17:20 10mShort-paper | Toward Localizing and Repairing Bias in Transformer Attention Heads Visions and Emerging Results Track Sigma Jahan Dalhousie University | ||