{"id":"https://openalex.org/W4319459165","doi":"https://doi.org/10.1109/tse.2023.3243262","title":"Plumber: Boosting the Propagation of Vulnerability Fixes in the <i>npm</i> Ecosystem","display_name":"Plumber: Boosting the Propagation of Vulnerability Fixes in the <i>npm</i> Ecosystem","publication_year":2023,"publication_date":"2023-02-08","ids":{"openalex":"https://openalex.org/W4319459165","doi":"https://doi.org/10.1109/tse.2023.3243262"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2023.3243262","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2023.3243262","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100347016","display_name":"Ying Wang","orcid":"https://orcid.org/0000-0001-8645-4326"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]},{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]},{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN","HK","US"],"is_corresponding":false,"raw_author_name":"Ying Wang","raw_affiliation_strings":["Software College, Northeasthern University, Boston, MA, USA","Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, Hong Kong","State Key Lab for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0001-8645-4326","affiliations":[{"raw_affiliation_string":"Software College, Northeasthern University, Boston, MA, USA","institution_ids":["https://openalex.org/I12912129"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, The Hong Kong University of Science and Technology, Hong Kong","institution_ids":["https://openalex.org/I200769079"]},{"raw_affiliation_string":"State Key Lab for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100614092","display_name":"Peng Sun","orcid":"https://orcid.org/0000-0002-1894-8655"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Sun","raw_affiliation_strings":["Software College, Northeasthern University, Shenyang, China"],"raw_orcid":"https://orcid.org/0000-0002-1894-8655","affiliations":[{"raw_affiliation_string":"Software College, Northeasthern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100439441","display_name":"Lin Pei","orcid":"https://orcid.org/0000-0002-1737-619X"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Pei","raw_affiliation_strings":["Software College, Northeasthern University, Shenyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeasthern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100397991","display_name":"Yue Yu","orcid":"https://orcid.org/0000-0002-9865-2212"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yue Yu","raw_affiliation_strings":["National Laboratory for Parallel and Distributed Processing and College of Computer, National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0002-9865-2212","affiliations":[{"raw_affiliation_string":"National Laboratory for Parallel and Distributed Processing and College of Computer, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052203980","display_name":"Chang Xu","orcid":"https://orcid.org/0000-0002-6299-4704"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chang Xu","raw_affiliation_strings":["Department of Computer Science and Technology, State Key Lab for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0002-6299-4704","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, State Key Lab for Novel Software Technology, Nanjing University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034057959","display_name":"Shing-Chi Cheung","orcid":"https://orcid.org/0000-0002-3508-7172"},"institutions":[{"id":"https://openalex.org/I200769079","display_name":"Hong Kong University of Science and Technology","ror":"https://ror.org/00q4vv597","country_code":"HK","type":"education","lineage":["https://openalex.org/I200769079"]},{"id":"https://openalex.org/I4210159029","display_name":"Guangzhou HKUST Fok Ying Tung Research Institute","ror":"https://ror.org/05cvbj479","country_code":"CN","type":"facility","lineage":["https://openalex.org/I200769079","https://openalex.org/I4210159029"]},{"id":"https://openalex.org/I889458895","display_name":"University of Hong Kong","ror":"https://ror.org/02zhqgq86","country_code":"HK","type":"education","lineage":["https://openalex.org/I889458895"]}],"countries":["CN","HK"],"is_corresponding":false,"raw_author_name":"Shing-Chi Cheung","raw_affiliation_strings":["Guangzhou HKUST Fok Ying Tung Research Institute, Hong Kong University of Science and Technology, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3508-7172","affiliations":[{"raw_affiliation_string":"Guangzhou HKUST Fok Ying Tung Research Institute, Hong Kong University of Science and Technology, Guangzhou, China","institution_ids":["https://openalex.org/I200769079","https://openalex.org/I4210159029","https://openalex.org/I889458895"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080895253","display_name":"Hai Yu","orcid":"https://orcid.org/0000-0002-8024-1781"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Yu","raw_affiliation_strings":["Software College, Northeasthern University, Shenyang, China"],"raw_orcid":"https://orcid.org/0000-0002-8024-1781","affiliations":[{"raw_affiliation_string":"Software College, Northeasthern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040140553","display_name":"Zhiliang Zhu","orcid":"https://orcid.org/0000-0003-3450-1711"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiliang Zhu","raw_affiliation_strings":["National Frontiers Science Center for Industrial Intelligence and Systems Optimization, Key Laboratory of Data Analytics and Optimization for Smart Industry, and Software College, Northeastern University, Shenyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Frontiers Science Center for Industrial Intelligence and Systems Optimization, Key Laboratory of Data Analytics and Optimization for Smart Industry, and Software College, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4022,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.89301069,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"49","issue":"5","first_page":"3155","last_page":"3181"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.742879331111908},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.692614734172821},{"id":"https://openalex.org/keywords/publication","display_name":"Publication","score":0.5722288489341736},{"id":"https://openalex.org/keywords/ecosystem","display_name":"Ecosystem","score":0.5617945194244385},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.34876275062561035},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3122164011001587},{"id":"https://openalex.org/keywords/ecology","display_name":"Ecology","score":0.16080284118652344},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.10993441939353943},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09614193439483643}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.742879331111908},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.692614734172821},{"id":"https://openalex.org/C41458344","wikidata":"https://www.wikidata.org/wiki/Q732577","display_name":"Publication","level":2,"score":0.5722288489341736},{"id":"https://openalex.org/C110872660","wikidata":"https://www.wikidata.org/wiki/Q37813","display_name":"Ecosystem","level":2,"score":0.5617945194244385},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.34876275062561035},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3122164011001587},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.16080284118652344},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.10993441939353943},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09614193439483643},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2023.3243262","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2023.3243262","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-124539","is_oa":false,"landing_page_url":"https://repository.hkust.edu.hk/ir/Record/1783.1-124539","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15"}],"awards":[{"id":"https://openalex.org/G1716284841","display_name":null,"funder_award_id":"62141210","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1888249465","display_name":"\u81ea\u6210\u957f\u590d\u6742\u8f6f\u4ef6\u7cfb\u7edf\u6784\u5efa\u65b9\u6cd5\u4e0e\u8fd0\u884c\u652f\u6491\u7814\u7a76","funder_award_id":"61932021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2311391187","display_name":null,"funder_award_id":"B16009","funder_id":"https://openalex.org/F4320327912","funder_display_name":"Higher Education Discipline Innovation Project"},{"id":"https://openalex.org/G5057767252","display_name":null,"funder_award_id":"61902056","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6207416481","display_name":null,"funder_award_id":"BK20202001","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G6227118049","display_name":null,"funder_award_id":"KFKT2021B01","funder_id":"https://openalex.org/F4320324852","funder_display_name":"Nanjing University"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324852","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760"},{"id":"https://openalex.org/F4320327912","display_name":"Higher Education Discipline Innovation Project","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W1792587773","https://openalex.org/W1986711365","https://openalex.org/W1989385531","https://openalex.org/W2060337373","https://openalex.org/W2101502756","https://openalex.org/W2121376435","https://openalex.org/W2138110817","https://openalex.org/W2144827892","https://openalex.org/W2172287543","https://openalex.org/W2290452149","https://openalex.org/W2337042987","https://openalex.org/W2400282174","https://openalex.org/W2548749170","https://openalex.org/W2603712331","https://openalex.org/W2634106992","https://openalex.org/W2740279154","https://openalex.org/W2756234923","https://openalex.org/W2762481683","https://openalex.org/W2765843494","https://openalex.org/W2766078311","https://openalex.org/W2767231363","https://openalex.org/W2789570312","https://openalex.org/W2889097348","https://openalex.org/W2898651898","https://openalex.org/W2901560623","https://openalex.org/W2915997584","https://openalex.org/W2921999452","https://openalex.org/W2951913189","https://openalex.org/W2953482240","https://openalex.org/W2963321189","https://openalex.org/W2963748706","https://openalex.org/W2964080672","https://openalex.org/W3036270494","https://openalex.org/W3088691441","https://openalex.org/W3090643686","https://openalex.org/W3090756767","https://openalex.org/W3094949573","https://openalex.org/W3100925971","https://openalex.org/W3105258596","https://openalex.org/W3121596715","https://openalex.org/W3150814957","https://openalex.org/W3172155837","https://openalex.org/W3176300782","https://openalex.org/W3183946528","https://openalex.org/W3184420437","https://openalex.org/W3194352458","https://openalex.org/W3195348753","https://openalex.org/W3196126762","https://openalex.org/W3198133389","https://openalex.org/W3201454943","https://openalex.org/W4221145571","https://openalex.org/W4243740681","https://openalex.org/W4243862372","https://openalex.org/W4294214983","https://openalex.org/W4308906295","https://openalex.org/W6713166798","https://openalex.org/W6744493230","https://openalex.org/W6756801215","https://openalex.org/W6759246942","https://openalex.org/W6799568833"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2381249057","https://openalex.org/W4234751669","https://openalex.org/W3046170769","https://openalex.org/W2160789981","https://openalex.org/W2361660160","https://openalex.org/W2903847719","https://openalex.org/W4327498252","https://openalex.org/W2166090092","https://openalex.org/W3126467163"],"abstract_inverted_index":{"Vulnerabilities":[0],"are":[1,46],"known":[2],"reported":[3],"security":[4,22],"threats":[5],"that":[6,76,135,149,186,237,258],"affect":[7],"a":[8,101,157,167,184,322],"large":[9],"amount":[10],"of":[11,53,67,78,121,163,183,216,235,241,290,298,324,421,447],"packages":[12,30,39,93,236,427],"in":[13,50,56,124,223,244],"the":[14,24,51,57,64,90,111,139,153,161,164,175,188,214,233,239,245,255,264,288,296,306,325,330,343,372,419,445],"<italic":[15,70,310,396],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[16,71,278,303,311,346,364,397,403,407,412],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">npm</i>":[17,72,312,398],"ecosystem.":[18,58,126,176],"To":[19,177,293],"mitigate":[20,118],"these":[21],"threats,":[23],"open-source":[25],"community":[26],"strongly":[27],"suggests":[28],"vulnerable":[29,92,140],"to":[31,40,117,132,195,207,212,231,286,356,366,376],"timely":[32],"publish":[33],"vulnerability":[34,54,122,165,217,242,291,307,353,422],"fixes":[35,55,123,243,423],"and":[36,143,160,181,197,247,309,315,329,410],"recommends":[37],"affected":[38],"update":[41],"their":[42,249,318],"dependencies.":[43],"However,":[44,199],"there":[45],"still":[47,81,202],"serious":[48],"lags":[49,120,134],"propagation":[52,119,172,182,215,240,266,289,300,333,420],"In":[59,342],"our":[60,269,387],"preliminary":[61],"study":[62,104,230],"on":[63,115,170,262,382],"latest":[65],"versions":[66,98],"356,283":[68],"active":[69],"packages,":[73,375],"we":[74,226,253,272],"found":[75,148],"20.0%":[77],"them":[79],"can":[80],"introduce":[82],"vulnerabilities":[83],"via":[84],"direct":[85],"or":[86],"transitive":[87],"dependencies":[88],"although":[89],"involved":[91],"have":[94,259,417],"already":[95],"published":[96],"fix":[97,158,265,299,332],"for":[99,113,281,339,371],"over":[100],"year.":[102],"Prior":[103],"by":[105,220,444],"(Chinthanet":[106],"et":[107],"al.":[108],"2021)":[109],"lays":[110],"groundwork":[112],"research":[114],"how":[116,206],"an":[125,129,203,209,228,274],"They":[127,147],"conducted":[128,227],"empirical":[130,229,270],"investigation":[131],"identify":[133],"might":[136],"occur":[137],"between":[138],"package":[141,358,436],"release":[142,185],"its":[144,171,378],"fixing":[145],"release.":[146],"factors":[150],"such":[151,400],"as":[152,401],"branch":[154],"upon":[155],"which":[156],"landed":[159],"severity":[162],"had":[166],"small":[168],"effect":[169],"trajectory":[173],"throughout":[174],"ensure":[178],"quick":[179],"adoption":[180],"contains":[187],"fix,":[189],"they":[190],"gave":[191],"several":[192],"actionable":[193],"advice":[194],"developers":[196],"researchers.":[198],"it":[200,335],"is":[201,438],"open":[204],"question":[205],"design":[208],"effective":[210],"technique":[211],"accelerate":[213],"fixes.":[218,292],"Motivated":[219],"this":[221,224,448],"problem,":[222],"paper,":[225],"learn":[232],"scale":[234],"block":[238],"ecosystem":[246],"investigate":[248],"evolution":[250],"characteristics.":[251],"Furthermore,":[252],"distilled":[254],"remediation":[256,284,337,350,369,379,388],"strategies":[257,285],"better":[260],"effects":[261],"mitigating":[263],"lags.":[267],"Leveraging":[268],"findings,":[271],"propose":[273],"ecosystem-level":[275,326],"technique,":[276],"<sc":[277,302,345,363],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Plumber</small>":[279,304,347,365],",":[280,405,409],"deriving":[282],"feasible":[283],"boost":[287],"precisely":[294],"diagnose":[295],"causes":[297],"blocking,":[301],"models":[305],"metadata,":[308],"dependency":[313,327,430],"metadata":[314],"continuously":[316],"monitors":[317],"evolution.":[319],"By":[320],"analyzing":[321],"full-picture":[323],"graph":[328],"corresponding":[331],"statuses,":[334],"derives":[336],"schemes":[338],"pivotal":[340,374],"packages.":[341],"schemes,":[344],"provides":[348],"customized":[349],"suggestions":[351],"with":[352],"impact":[354],"analysis":[355],"arouse":[357],"developers\u2019":[359,383],"awareness.":[360],"We":[361],"applied":[362],"generating":[367],"268":[368],"reports":[370,389,416],"identified":[373],"evaluate":[377],"effectiveness":[380],"based":[381],"feedback.":[384],"Encouragingly,":[385],"47.4%":[386],"received":[390],"positive":[391],"feedback":[392],"from":[393],"many":[394],"well-known":[395],"projects,":[399],"<monospace":[402,406,411],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Tensorflow/tfjs</monospace>":[404],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">Ethers.js</monospace>":[408],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">GoogleChrome/workbox</monospace>":[413],".":[414],"Our":[415],"boosted":[418],"into":[424],"16,403":[425],"root":[426],"through":[428],"92,469":[429],"paths.":[431],"On":[432],"average,":[433],"each":[434],"remediated":[435],"version":[437],"receiving":[439],"72,678":[440],"downloads":[441],"per":[442],"week":[443],"time":[446],"work.":[449]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2025-10-10T00:00:00"}