{"id":"https://openalex.org/W2808651716","doi":"https://doi.org/10.1145/3183399.3183417","title":"Software ecosystem call graph for dependency management","display_name":"Software ecosystem call graph for dependency management","publication_year":2018,"publication_date":"2018-05-27","ids":{"openalex":"https://openalex.org/W2808651716","doi":"https://doi.org/10.1145/3183399.3183417","mag":"2808651716"},"language":"en","primary_location":{"id":"doi:10.1145/3183399.3183417","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183399.3183417","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079590222","display_name":"Joseph Hejderup","orcid":"https://orcid.org/0000-0002-3334-2133"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Joseph Hejderup","raw_affiliation_strings":["Delft University of Technology, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, The Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090401584","display_name":"Arie van Deursen","orcid":"https://orcid.org/0000-0003-4850-3312"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Arie van Deursen","raw_affiliation_strings":["Delft University of Technology, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, The Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043864604","display_name":"Georgios Gousios","orcid":"https://orcid.org/0000-0002-8495-7939"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Georgios Gousios","raw_affiliation_strings":["Delft University of Technology, The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, The Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"101","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dependency-graph","display_name":"Dependency graph","score":0.8370978236198425},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8218132257461548},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.7138716578483582},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.6878724694252014},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5296551585197449},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.519487738609314},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.49733975529670715},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.4373432993888855},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.42594707012176514},{"id":"https://openalex.org/keywords/workspace","display_name":"Workspace","score":0.42220473289489746},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4146444499492645},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3416631519794464},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2487255334854126},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24243450164794922},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.1985708773136139},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.14266303181648254}],"concepts":[{"id":"https://openalex.org/C16311509","wikidata":"https://www.wikidata.org/wiki/Q4148050","display_name":"Dependency graph","level":3,"score":0.8370978236198425},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8218132257461548},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.7138716578483582},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.6878724694252014},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5296551585197449},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.519487738609314},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.49733975529670715},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.4373432993888855},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.42594707012176514},{"id":"https://openalex.org/C58581272","wikidata":"https://www.wikidata.org/wiki/Q12741163","display_name":"Workspace","level":3,"score":0.42220473289489746},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4146444499492645},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3416631519794464},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2487255334854126},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24243450164794922},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.1985708773136139},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.14266303181648254},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C90509273","wikidata":"https://www.wikidata.org/wiki/Q11012","display_name":"Robot","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3183399.3183417","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183399.3183417","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: New Ideas and Emerging Results","raw_type":"proceedings-article"},{"id":"pmh:oai:tudelft.nl:uuid:6f088b70-bccb-476e-b092-395078dec39b","is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:6f088b70-bccb-476e-b092-395078dec39b","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.49000000953674316}],"awards":[{"id":"https://openalex.org/G6418145062","display_name":null,"funder_award_id":"628.008.001","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"}],"funders":[{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W587329788","https://openalex.org/W2400282174","https://openalex.org/W2548749170","https://openalex.org/W2603712331","https://openalex.org/W2703757306","https://openalex.org/W2733373979","https://openalex.org/W2962971223"],"related_works":["https://openalex.org/W2093568763","https://openalex.org/W2327631927","https://openalex.org/W1593182640","https://openalex.org/W1985166372","https://openalex.org/W2003096546","https://openalex.org/W4289354592","https://openalex.org/W2430210575","https://openalex.org/W4221145571","https://openalex.org/W2165069859","https://openalex.org/W2099112646"],"abstract_inverted_index":{"A":[0],"popular":[1],"form":[2],"of":[3,9,42,68,131],"software":[4,12],"reuse":[5],"is":[6,108],"the":[7,40,43,49,54,59,63,119,123],"use":[8],"open":[10],"source":[11],"libraries":[13],"hosted":[14],"on":[15],"centralized":[16],"code":[17],"repositories,":[18],"such":[19,47],"as":[20,48,79],"Maven":[21],"or":[22],"npm.":[23],"Developers":[24],"only":[25,84],"need":[26],"to":[27,30,39,121,139],"declare":[28],"dependencies":[29],"external":[31],"libraries,":[32],"and":[33,53,66,102,126],"automated":[34],"tools":[35],"make":[36],"them":[37],"available":[38],"workspace":[41],"project.":[44],"Recent":[45],"incidents,":[46],"Equifax":[50],"data":[51],"breach":[52],"leftpad":[55],"package":[56,138],"removal,":[57],"demonstrate":[58],"difficulty":[60],"in":[61,70],"assessing":[62],"severity,":[64],"impact":[65],"spread":[67],"bugs":[69],"dependency":[71,74,96],"networks.":[72],"While":[73],"checkers":[75],"are":[76],"being":[77],"adapted":[78],"a":[80,94,109,128,132,136],"counter":[81],"measure,":[82],"they":[83],"provide":[85],"indicative":[86],"information.":[87],"To":[88],"remedy":[89],"this":[90,115],"situation,":[91],"we":[92,117],"propose":[93],"fine-grained":[95],"network":[97],"that":[98],"goes":[99],"beyond":[100],"packages":[101],"into":[103],"call":[104,112],"graphs.":[105],"The":[106],"result":[107],"versioned":[110],"ecosystem-level":[111],"graph.":[113],"In":[114],"paper,":[116],"outline":[118],"process":[120],"construct":[122],"proposed":[124],"graph":[125],"present":[127],"preliminary":[129],"evaluation":[130],"security":[133],"issue":[134],"from":[135],"core":[137],"an":[140],"affected":[141],"client":[142],"application.":[143]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}