Uncovering Hidden Inclusions of Vulnerable Dependencies in Real-World Java Projects

Stefan Schott, Serena Elisa Ponta, Wolfram Fischer +2

Open-source software (OSS) dependencies are a dominant component of modern software code bases. Using proven and well-tested OSS components lets developers reduce development time…