{"id":"https://openalex.org/W2967660330","doi":"https://doi.org/10.1145/3338906.3342813","title":"Insights from open source software supply chains (keynote)","display_name":"Insights from open source software supply chains (keynote)","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2967660330","doi":"https://doi.org/10.1145/3338906.3342813","mag":"2967660330"},"language":"en","primary_location":{"id":"doi:10.1145/3338906.3342813","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3338906.3342813","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3338906.3342813","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3338906.3342813","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067199285","display_name":"Audris Mockus","orcid":"https://orcid.org/0000-0002-7987-7598"},"institutions":[{"id":"https://openalex.org/I75027704","display_name":"University of Tennessee at Knoxville","ror":"https://ror.org/020f3ap87","country_code":"US","type":"education","lineage":["https://openalex.org/I75027704"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Audris Mockus","raw_affiliation_strings":["University of Tennessee, USA"],"affiliations":[{"raw_affiliation_string":"University of Tennessee, USA","institution_ids":["https://openalex.org/I75027704"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5067199285"],"corresponding_institution_ids":["https://openalex.org/I75027704"],"apc_list":null,"apc_paid":null,"fwci":0.6783,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.779414,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"3"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6709046363830566},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5798707008361816},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.5776456594467163},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5746322870254517},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5601619482040405},{"id":"https://openalex.org/keywords/open-source-software","display_name":"Open source software","score":0.5291987657546997},{"id":"https://openalex.org/keywords/user-space","display_name":"User space","score":0.5263786911964417},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.5240264534950256},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.47297871112823486},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.4463827610015869},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4237661063671112},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3391232490539551},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.25936684012413025},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.12968489527702332}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6709046363830566},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5798707008361816},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.5776456594467163},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5746322870254517},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5601619482040405},{"id":"https://openalex.org/C2988343187","wikidata":"https://www.wikidata.org/wiki/Q1130645","display_name":"Open source software","level":3,"score":0.5291987657546997},{"id":"https://openalex.org/C2775877400","wikidata":"https://www.wikidata.org/wiki/Q1142183","display_name":"User space","level":2,"score":0.5263786911964417},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.5240264534950256},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.47297871112823486},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.4463827610015869},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4237661063671112},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3391232490539551},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.25936684012413025},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.12968489527702332},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3338906.3342813","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3338906.3342813","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3338906.3342813","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3338906.3342813","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3338906.3342813","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3338906.3342813","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6600000262260437}],"awards":[{"id":"https://openalex.org/G7138596754","display_name":null,"funder_award_id":"1633437","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2967660330.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2367644348","https://openalex.org/W2614013133","https://openalex.org/W2358779924","https://openalex.org/W2113128227","https://openalex.org/W840375602","https://openalex.org/W4229725477","https://openalex.org/W2537983160","https://openalex.org/W632256878","https://openalex.org/W2491403535","https://openalex.org/W115639647"],"abstract_inverted_index":{"Open":[0],"Source":[1],"Software":[2],"(OSS)":[3],"forms":[4],"an":[5],"infrastructure":[6],"on":[7,102,195],"which":[8],"numerous":[9],"(often":[10],"critical)":[11],"software":[12,183],"applications":[13],"are":[14,154],"based.":[15],"Substantial":[16],"research":[17,189],"was":[18],"done":[19],"to":[20,56,85,107,143,156],"investigate":[21,108],"central":[22,209],"projects":[23,211],"such":[24],"as":[25,213],"Linux":[26],"kernel":[27],"but":[28],"we":[29],"have":[30],"only":[31],"a":[32,63,214],"limited":[33],"understanding":[34],"of":[35,39,70,89,113,122,130,161,172,221],"how":[36,196],"the":[37,40,83,103,114,151,158,164,176,187,197,208,222],"periphery":[38,199],"larger":[41],"OSS":[42,162,201,210],"ecosystem":[43],"is":[44,120,205],"interconnected":[45],"through":[46],"technical":[47],"dependencies,":[48],"code":[49,153],"sharing,":[50],"and":[51,66,81,94,110,136,147,163,204,219],"knowledge":[52],"flows.":[53],"We":[54,185],"aim":[55],"close":[57],"this":[58],"gap":[59],"by":[60,78,97,207],"a)":[61],"creating":[62,98],"nearly":[64],"complete":[65],"rapidly":[67],"updateable":[68],"collection":[69],"version":[71],"control":[72],"data":[73,84,146],"for":[74],"FLOSS":[75],"projects;":[76,95],"b)":[77],"cleaning,":[79],"correcting,":[80],"augmenting":[82],"measure":[86],"several":[87],"types":[88],"dependencies":[90,149],"among":[91],"code,":[92],"developers,":[93],"c)":[96],"models":[99,171],"that":[100],"rely":[101],"resulting":[104,188],"supply":[105],"chains":[106],"structural":[109],"dynamic":[111],"properties":[112],"entire":[115],"OSS.":[116,223],"The":[117],"current":[118,159],"implementation":[119],"capable":[121],"being":[123],"updated":[124],"each":[125],"month,":[126],"occupies":[127],"over":[128],"300Tb":[129],"disk":[131],"space":[132],"with":[133],"1.5B":[134],"commits":[135],"12B":[137],"git":[138],"objects.":[139],"Highly":[140],"accurate":[141],"algorithms":[142],"correct":[144],"identity":[145],"extract":[148],"from":[150],"source":[152],"used":[155],"characterize":[157],"structure":[160],"way":[165],"it":[166],"has":[167],"evolved.":[168],"In":[169],"particular,":[170],"technology":[173],"spread":[174],"demonstrate":[175],"implicit":[177],"factors":[178],"developers":[179],"use":[180],"when":[181],"choosing":[182],"components.":[184],"expect":[186],"platform":[190],"will":[191,216],"both":[192,202],"spur":[193],"investigations":[194],"huge":[198],"in":[200],"sustains":[203],"sustained":[206],"and,":[212],"result,":[215],"increase":[217],"resiliency":[218],"effectiveness":[220]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2026-01-15T23:16:33.117629","created_date":"2025-10-10T00:00:00"}