215 citations · 525 across the 24 of their papers we have counts for
10 papers · 1 filter
What are Weak Links in the npm Supply Chain?
Nusrat Zahan, Thomas Zimmermann, Patrice Godefroid +3
Modern software development frequently uses third-party packages, raising the concern of supply chain security attacks. Many attackers target popular package managers, like npm, an…
How Developers and Managers Define and Trade Productivity for Quality
Margaret-Anne Storey, Brian Houck, Thomas Zimmermann
In this paper, we present the findings from a survey study to investigate how developers and managers define and trade-off developer productivity and software quality (two related…
Nalanda: A Socio-Technical Graph for Building Software Analytics Tools at Enterprise Scale
Chandra Maddila, Suhas Shanbhogue, Apoorva Agrawal +6
Software development is information-dense knowledge work that requires collaboration with other developers and awareness of artifacts such as work items, pull requests, and files.…
Developers Who Vlog: Dismantling Stereotypes through Community and Identity
Souti Chattopadhyay, Denae Ford, Thomas Zimmermann
Developers are more than "nerds behind computers all day", they lead a normal life, and not all take the traditional path to learn programming. However, the public still sees softw…
Automating the Removal of Obsolete TODO Comments
Zhipeng Gao, Xin Xia, David Lo +2
TODO comments are very widely used by software developers to describe their pending tasks during software development. However, after performing the task developers sometimes negle…
Reel Life vs. Real Life: How Software Developers Share Their Daily Life through Vlogs
Souti Chattopadhyay, Thomas Zimmermann, Denae Ford
Software developers are turning to vlogs (video blogs) to share what a day is like to walk in their shoes. Through these vlogs developers share a rich perspective of their technica…
Leaving My Fingerprints: Motivations and Challenges of Contributing to OSS for Social Good
Yu Huang, Denae Ford, Thomas Zimmermann
When inspiring software developers to contribute to open source software, the act is often referenced as an opportunity to build tools to support the developer community. However,…
Accessibility in Software Practice: A Practitioner's Perspective
Tingting Bi, Xin Xia, David Lo +3
Being able to access software in daily life is vital for everyone, and thus accessibility is a fundamental challenge for software development. However, given the number of accessib…
Anomalicious: Automated Detection of Anomalous and Potentially Malicious Commits on GitHub
Danielle Gonzalez, Thomas Zimmermann, Patrice Godefroid +1
Security is critical to the adoption of open source software (OSS), yet few automated solutions currently exist to help detect and prevent malicious contributions from infecting op…
"How Was Your Weekend?" Software Development Teams Working From Home During COVID-19
Courtney Miller, Paige Rodeghero, Margaret-Anne Storey +2
The mass shift to working at home during the COVID-19 pandemic radically changed the way many software development teams collaborate and communicate. To investigate how team cultur…