activity
20222026
most citedTowards Understanding Third-party Library Dependency in C/C++ Ecosystem

70 citations · 70 across the 7 of their papers we have counts for

collaborators
Showing cs.SEShow all

8 papers · 1 filter

cs.SE2026

ATLAS: Agentic Taxonomy of Large-Scale Software Ecosystems

Junyi Lu, Mengyao Lyu, Jiahui Wu +6

The open-source ecosystem on GitHub lacks a systematic hierarchical taxonomy of software repositories. GitHub Topics, the dominant organizational mechanism, is flat, inconsistent,…

cs.SE2025

JC-Finder: Detecting Java Clone-based Third-Party Library by Class-level Tree Analysis

Lida Zhao, Chaofan Li, Yueming Wu +10

While reusing third-party libraries (TPL) facilitates software development, its chaotic management has brought great threats to software maintenance and the unauthorized use of sou…

cs.SE2025

VFArchē: A Dual-Mode Framework for Locating Vulnerable Functions in Open-Source Software

Lyuye Zhang, Jian Zhang, Kaixuan Li +6

Software Composition Analysis (SCA) has become pivotal in addressing vulnerabilities inherent in software project dependencies. In particular, reachability analysis is increasingly…

cs.SE2025

Fixing Outside the Box: Uncovering Tactics for Open-Source Security Issue Management

Lyuye Zhang, Jiahui Wu, Chengwei Liu +5

In the rapidly evolving landscape of software development, addressing security vulnerabilities in open-source software (OSS) has become critically important. However, existing rese…

cs.SE2025

Drop the Golden Apples: Identifying Third-Party Reuse by DB-Less Software Composition Analysis

Lyuye Zhang, Chengwei Liu, Jiahui Wu +5

The prevalent use of third-party libraries (TPLs) in modern software development introduces significant security and compliance risks, necessitating the implementation of Software…

cs.SE2025

Detecting Essence Code Clones via Information Theoretic Analysis

Lida Zhao, Shihan Dou, Yutao Hu +8

Code cloning, a widespread practice in software development, involves replicating code fragments to save time but often at the expense of software maintainability and quality. In t…