An Analysis of Library Rollbacks: A Case Study of Java Libraries

Suwa, Hirohiko; Ihara, Akinori; Kula, Raula Gaikovina; Fujibayashi, Daiki; Matsumoto, Kenichi

doi:10.1109/apsecw.2017.25

Cited by 2 publications

(3 citation statements)

References 23 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…They were obtained from GitHub, online websites and students' submissions. Several researchers including Shi et al (2016) and Suwa et al (2017) used this online website as their source of codes. A total of five code samples that contained at least one non-deterministic characteristic were randomly-picked from GitHub.…”

Section: Methodsmentioning

confidence: 99%

nCODET: A Tool For Novice Developer To Detect Untestable Code

et.al¹

2021

TURCOMAT

View full text Add to dashboard Cite

Uncontrollability is troublesome for unit testing. It causes a non-deterministic behavior where the same input can produce different results based on different executions. The non-deterministic characteristic makes it impossible to test the internal logic of a method because it suffers from tight coupling, a single responsibility principle violation, being an untestable code, being non-reusable or hard to maintain. This paper describes a tool, namely the non-deterministic Code Detection Tool (nCODET) that aims to assist novice developers to write testable codes by avoiding the non-deterministic characteristic in their codes. Our research focuses on the unit testability of classes; particularly the effort involvedin constructing unit test cases.

show abstract

Section: Methodsmentioning

confidence: 99%

nCODET: A Tool For Novice Developer To Detect Untestable Code

et.al¹

2021

TURCOMAT

View full text Add to dashboard Cite

show abstract

“…In Figure 1, we can see that a 2 < t a 3 and a 3 < v a 2 . Note, this is a common practice adopted by very popular libraries such as Apache CXF 3 , and Mule 4 [11]. Definition 2.…”

Section: A the Maven Dependency Graphmentioning

confidence: 99%

“…c) Security and vulnerability risks: Researchers have investigated and compared dependency issues across many packaging ecosystems. Suwa et al [11] investigate the occurrence of rollbacks during the update of libraries in Java projects. Their results confirm previous studies that show that library migrations have no clear patterns and in many cases, the latest available version of a library is not always the most used [36], [37].…”

Section: Related Workmentioning

confidence: 99%

The Emergence of Software Diversity in Maven Central

Soto-Valero¹,

Benelallam²,

Harrand³

et al. 2019

2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR)

View full text Add to dashboard Cite

Maven artifacts are immutable: an artifact that is uploaded on Maven Central cannot be removed nor modified. The only way for developers to upgrade their library is to release a new version. Consequently, Maven Central accumulates all the versions of all the libraries that are published there, and applications that declare a dependency towards a library can pick any version. In this work, we hypothesize that the immutability of Maven artifacts and the ability to choose any version naturally support the emergence of software diversity within Maven Central. We analyze 1,487,956 artifacts that represent all the versions of 73,653 libraries. We observe that more than 30% of libraries have multiple versions that are actively used by latest artifacts. In the case of popular libraries, more than 50% of their versions are used. We also observe that more than 17% of libraries have several versions that are significantly more used than the other versions. Our results indicate that the immutability of artifacts in Maven Central does support a sustained level of diversity among versions of libraries in the repository.

show abstract

An Analysis of Library Rollbacks: A Case Study of Java Libraries

Cited by 2 publications

References 23 publications

nCODET: A Tool For Novice Developer To Detect Untestable Code

nCODET: A Tool For Novice Developer To Detect Untestable Code

The Emergence of Software Diversity in Maven Central

Contact Info

Product

Resources

About