most citedWhich Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?

1 citations · 1 across the 3 of their papers we have counts for

collaborators
Showing cs.SEShow all

2 papers · 1 filter

cs.SE2026

CHRONO-RESOLUTION: A Dependency Resolution Dataset at Release Points for npm, PyPI, and crates.io Packages

Imranur Rahman, Jill Marley, Ranindya Paramitha +1

Dependency resolution at a specified point in time in the past can provide insight into software evolution in software ecosystems and facilitate the design of dynamic metrics (e.g.…

cs.SE2026★ 1 cited

Which Is Better For Reducing Outdated and Vulnerable Dependencies: Pinning or Floating?

Imranur Rahman, Jill Marley, William Enck +1

Developers consistently use version constraints to specify acceptable versions of the dependencies for their project. Pinning dependencies can reduce the likelihood of breaking cha…