activity
20182021
most citedLags in the Release, Adoption, and Propagation of npm Vulnerability Fixes

60 citations · 115 across the 7 of their papers we have counts for

collaborators

7 papers

cs.SE2021★ 1 cited

SōjiTantei: Function-Call Reachability Detection of Vulnerable Code for npm Packages

Bodin Chinthanet, Raula Gaikovina Kula, Rodrigo Eliza Zapata +3

It has become common practice for software projects to adopt third-party dependencies. Developers are encouraged to update any outdated dependency to remain safe from potential thr…

cs.SE2021★ 19 cited

Code Reviews with Divergent Review Scores: An Empirical Study of the OpenStack and Qt Communities

Toshiki Hirao, Shane McIntosh, Akinori Ihara +1

Code review is a broadly adopted software quality practice where developers critique each others' patches. In addition to providing constructive feedback, reviewers may provide a s…

cs.SE2020★ 3 cited

DevReplay: Automatic Repair with Editable Fix Pattern

Yuki Ueda, Takashi Ishio, Akinori Ihara +1

Static analysis tools, or linters, detect violation of source code conventions to maintain project readability. Those tools automatically fix specific violations while developers e…

cs.SE2019★ 60 cited

Lags in the Release, Adoption, and Propagation of npm Vulnerability Fixes

Bodin Chinthanet, Raula Gaikovina Kula, Shane McIntosh +3

Security vulnerability in third-party dependencies is a growing concern not only for developers of the affected software, but for the risks it poses to an entire software ecosystem…

cs.SE2018

The Impact of Human Factors on the Participation Decision of Reviewers in Modern Code Review

Shade Ruangwan, Patanamon Thongtanunam, Akinori Ihara +1

Modern Code Review (MCR) plays a key role in software quality practices. In MCR process, a new patch (i.e., a set of code changes) is encouraged to be examined by reviewers in orde…

cs.SE2018★ 32 cited

The Impact of IR-based Classifier Configuration on the Performance and the Effort of Method-Level Bug Localization

Chakkrit Tantithamthavorn, Surafel Lemma Abebe, Ahmed E. Hassan +2

Context: IR-based bug localization is a classifier that assists developers in locating buggy source code entities (e.g., files and methods) based on the content of a bug report. Su…

cs.SE2018

An Empirical Study on README contents for JavaScript Packages

Shohei Ikeda, Akinori Ihara, Raula Gaikovina Kula +1

Contemporary software projects often utilize a README.md to share crucial information such as installation and usage examples related to their software. Furthermore, these files se…