{"id":"https://openalex.org/W2808861319","doi":"https://doi.org/10.1145/3183440.3183454","title":"Constructing supply chains in open source software","display_name":"Constructing supply chains in open source software","publication_year":2018,"publication_date":"2018-05-27","ids":{"openalex":"https://openalex.org/W2808861319","doi":"https://doi.org/10.1145/3183440.3183454","mag":"2808861319"},"language":"en","primary_location":{"id":"doi:10.1145/3183440.3183454","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183440.3183454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: Companion Proceeedings","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051051934","display_name":"Yuxing Ma","orcid":"https://orcid.org/0000-0002-3642-8012"},"institutions":[{"id":"https://openalex.org/I75027704","display_name":"University of Tennessee at Knoxville","ror":"https://ror.org/020f3ap87","country_code":"US","type":"education","lineage":["https://openalex.org/I75027704"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Yuxing Ma","raw_affiliation_strings":["The University of Tennessee, Knoxville"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Tennessee, Knoxville","institution_ids":["https://openalex.org/I75027704"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5051051934"],"corresponding_institution_ids":["https://openalex.org/I75027704"],"apc_list":null,"apc_paid":null,"fwci":0.6226,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.68151605,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"458","last_page":"459"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7261850237846375},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.5998814105987549},{"id":"https://openalex.org/keywords/reuse","display_name":"Reuse","score":0.5861027836799622},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5761777758598328},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.564409613609314},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.4904062747955322},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4894494116306305},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.4752773344516754},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.422944039106369},{"id":"https://openalex.org/keywords/package-development-process","display_name":"Package development process","score":0.41750386357307434},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.41353291273117065},{"id":"https://openalex.org/keywords/product","display_name":"Product (mathematics)","score":0.4123799502849579},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.33807307481765747},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3296715319156647},{"id":"https://openalex.org/keywords/software-development","display_name":"Software development","score":0.3206671476364136},{"id":"https://openalex.org/keywords/software-construction","display_name":"Software construction","score":0.2937886118888855},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.21084371209144592},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.13291198015213013},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11546558141708374},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08525314927101135}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7261850237846375},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.5998814105987549},{"id":"https://openalex.org/C206588197","wikidata":"https://www.wikidata.org/wiki/Q846574","display_name":"Reuse","level":2,"score":0.5861027836799622},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5761777758598328},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.564409613609314},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.4904062747955322},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4894494116306305},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.4752773344516754},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.422944039106369},{"id":"https://openalex.org/C123551368","wikidata":"https://www.wikidata.org/wiki/Q7122888","display_name":"Package development process","level":5,"score":0.41750386357307434},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.41353291273117065},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.4123799502849579},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.33807307481765747},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3296715319156647},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.3206671476364136},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.2937886118888855},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.21084371209144592},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.13291198015213013},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11546558141708374},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08525314927101135},{"id":"https://openalex.org/C548081761","wikidata":"https://www.wikidata.org/wiki/Q180388","display_name":"Waste management","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3183440.3183454","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3183440.3183454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 40th International Conference on Software Engineering: Companion Proceeedings","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G7138596754","display_name":"BIGDATA: Collaborative Research: IA: OSCAR - Open Source Supply Chains and Avoidance of Risk: An Evidence Based Approach to Improve FLOSS Supply Chains","funder_award_id":"1633437","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W93788733","https://openalex.org/W2061659496","https://openalex.org/W2116484544","https://openalex.org/W2622540447","https://openalex.org/W4249659278"],"related_works":["https://openalex.org/W3081698076","https://openalex.org/W2152400319","https://openalex.org/W4214835859","https://openalex.org/W4312927049","https://openalex.org/W2361414024","https://openalex.org/W9284821","https://openalex.org/W1838996694","https://openalex.org/W3027720973","https://openalex.org/W792924284","https://openalex.org/W3130837735"],"abstract_inverted_index":{"The":[0],"supply":[1,43,56],"chain":[2],"is":[3],"an":[4],"extremely":[5],"successful":[6],"way":[7],"to":[8,39,49,68,103,118,133,137,161,169],"cope":[9],"with":[10,165],"the":[11,45,120,124],"risk":[12,139],"posed":[13],"by":[14,72,90],"distributed":[15,29],"decision":[16,30],"making":[17,31],"in":[18,41,54,81,150],"product":[19],"sourcing":[20],"and":[21,32,35,51,77,94,105,112,132,141,147,167],"distribution.":[22],"While":[23],"open":[24,82,151],"source":[25,83],"software":[26,55],"has":[27],"similarly":[28],"involves":[33],"code":[34,75],"information":[36],"flows":[37],"similar":[38],"those":[40],"ordinary":[42],"chains,":[44],"actual":[46],"networks":[47,80,108,122],"necessary":[48],"quantify":[50],"communicate":[52],"risks":[53],"chains":[57],"have":[58,86],"not":[59],"been":[60],"constructed":[61],"on":[62,98],"large":[63],"scale.":[64],"This":[65],"work":[66,89],"proposes":[67],"close":[69],"this":[70,157],"gap":[71],"measuring":[73],"dependency,":[74],"reuse,":[76],"knowledge":[78],"flow":[79],"software.":[84,153],"We":[85,115,154],"done":[87],"preliminary":[88],"developing":[91],"suitable":[92],"tools":[93,143],"methods":[95],"that":[96,156],"rely":[97],"public":[99,127,135],"version":[100],"control":[101],"data":[102],"measure":[104],"comparing":[106],"these":[107],"for":[109,123,144],"R":[110],"language":[111],"emberjs":[113],"packages.":[114],"propose":[116],"ways":[117],"calculate":[119],"three":[121],"entirety":[125],"of":[126],"software,":[128],"evaluate":[129],"their":[130],"accuracy,":[131],"provide":[134],"infrastructure":[136,158],"build":[138],"assessment":[140],"mitigation":[142],"various":[145],"individual":[146],"organizational":[148],"participants":[149],"sources":[152],"hope":[155],"will":[159],"contribute":[160],"more":[162],"predictable":[163],"experience":[164],"OSS":[166],"lead":[168],"its":[170],"even":[171],"wider":[172],"adoption.":[173]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}