238 citations · 245 across the 9 of their papers we have counts for
9 papers
Internal Vulnerabilities, External Threats: A Grounded Framework for Enterprise Open Source Risk Governance
Wenhao Yang, Minghui Zhou, Daniel Izquierdo Cortázar +1
Enterprise engagement with open source has evolved from tactical adoption to strategic deep integration, exposing them to a complex risk landscape far beyond mere code. However, tr…
How Early Participation Determines Long-Term Sustained Activity in GitHub Projects?
Wenxin Xiao, Hao He, Weiwei Xu +2
Although the open source model bears many advantages in software development, open source projects are always hard to sustain. Previous research on open source sustainability mainl…
Personalized First Issue Recommender for Newcomers in Open Source Projects
Wenxin Xiao, Jingyue Li, Hao He +2
Many open source projects provide good first issues (GFIs) to attract and retain newcomers. Although several automated GFI recommenders have been proposed, existing recommenders ar…
Understanding and Remediating Open-Source License Incompatibilities in the PyPI Ecosystem
Weiwei Xu, Hao He, Kai Gao +1
The reuse and distribution of open-source software must be in compliance with its accompanying open-source license. In modern packaging ecosystems, maintaining such compliance is c…
Characterizing Deep Learning Package Supply Chains in PyPI: Domains, Clusters, and Disengagement
Kai Gao, Runzhi He, Bing Xie +1
Deep learning (DL) package supply chains (SCs) are critical for DL frameworks to remain competitive. However, vital knowledge on the nature of DL package SCs is still lacking. In t…
Is It Enough to Recommend Tasks to Newcomers? Understanding Mentoring on Good First Issues
Xin Tan, Yiran Chen, Haohua Wu +2
Newcomers are critical for the success and continuity of open source software (OSS) projects. To attract newcomers and facilitate their onboarding, many OSS projects recommend task…
Automating Dependency Updates in Practice: An Exploratory Study on GitHub Dependabot
Runzhi He, Hao He, Yuxia Zhang +1
Dependency management bots automatically open pull requests to update software dependencies on behalf of developers. Early research shows that developers are suspicious of updates…
Demystifying Software Release Note Issues on GitHub
Jianyu Wu, Hao He, Wenxin Xiao +2
Release notes (RNs) summarize main changes between two consecutive software versions and serve as a central source of information when users upgrade software. While producing high…
Pandemic Programming: How COVID-19 affects software developers and how their organizations can help
Paul Ralph, Sebastian Baltes, Gianisa Adisaputri +14
Context. As a novel coronavirus swept the world in early 2020, thousands of software developers began working from home. Many did so on short notice, under difficult and stressful…