8 citations · 19 across the 17 of their papers we have counts for
18 papers
CodeGraph: Open-Taxonomy Knowledge Graph for Source Code with Wikidata Grounding
Federico Pennino, Andrea Gurioli, Stefano Zacchiroli +2
Public software repositories, like GitHub and Software Heritage Archive, store billions of files, yet extracting their implicit engineering knowledge ---i.e., the algorithms they i…
"We Permit the Use of AI, but [...]": The Landscape of AI Policies in Popular Open Source Projects
Andre Hora, Romain Robbes, Stefano Zacchiroli
Open source communities are converging on a new governance artifact: the AI contribution policy. These policies barely existed a few months ago and are now being written and adopte…
Art in Humanity's Code
Benoit Baudry, Yogya Gamage, Nadia Gonzalez Fernandez +4
Artist-led open-source libraries such as Processing or openFrameworks have had a major impact on artists and designers who use code as a creative medium. In this work, we conduct t…
Not In My Git Yard: Catching Backdoors at Commit and Release Time
Dimitri Kokkonis, Michaël Marcozzi, Stefano Zacchiroli
Code-level backdoors-stealthy code changes that grant hidden privileges via secret triggers-pose a persistent threat to opensource software. Known attempts to inject such backdoors…
Efficient and Scalable Provenance Tracking for LLM-Generated Code Snippets
Andrea Gurioli, Davide D'Ascenzo, Federico Pennino +2
Large language models (LLMs) for code completion and generation are increasingly used in software development, yet they may reproduce training examples verbatim and without authors…
DRAGON: Robust Classification for Very Large Collections of Software Repositories
Stefano Balla, Stefano Zacchiroli, Thomas Degueule +2
The ability to automatically classify source code repositories with ''topics'' that reflect their content and purpose is very useful, especially when navigating or searching throug…
Promises, Perils, and (Timely) Heuristics for Mining Coding Agent Activity
Romain Robbes, Théo Matricon, Thomas Degueule +2
In 2025, coding agents have seen a very rapid adoption. Coding agents leverage Large Language Models (LLMs) in ways that are markedly different from LLM-based code completion, maki…
Docker Does Not Guarantee Reproducibility
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
The reproducibility of software environments is a critical concern in modern software engineering, with ramifications ranging from the effectiveness of collaboration workflows to s…
Agentic Much? Adoption of Coding Agents on GitHub
Romain Robbes, Théo Matricon, Thomas Degueule +2
In the first half of 2025, coding agents have emerged as a category of development tools that have very quickly transitioned to the practice. Unlike ''traditional'' code completion…
University Rents Enabling Corporate Innovation: Mapping Academic Researcher Coding and Discursive Labour in the R Language Ecosystem
Xiaolan Cai, Mathieu O'Neil, Stefano Zacchiroli
This article explores the role of unrecognised labour in corporate innovation systems via an analysis of researcher coding and discursive contributions to R, one of the largest sta…
Finding Software Supply Chain Attack Paths with Logical Attack Graphs
Luıs Soeiro, Thomas Robert, Stefano Zacchiroli
Cyberattacks are becoming increasingly frequent and sophisticated, often exploiting the software supply chain (SSC) as an attack vector. Attack graphs provide a detailed representa…
ROSA: Finding Backdoors with Fuzzing
Dimitri Kokkonis, Michaël Marcozzi, Emilien Decoux +1
A code-level backdoor is a hidden access, programmed and concealed within the code of a program. For instance, hard-coded credentials planted in the code of a file server applicati…
Wild SBOMs: a Large-scale Dataset of Software Bills of Materials from Public Code
Luıs Soeiro, Thomas Robert, Stefano Zacchiroli
Developers gain productivity by reusing readily available Free and Open Source Software (FOSS) components. Such practices also bring some difficulties, such as managing licensing,…
Does Functional Package Management Enable Reproducible Builds at Scale? Yes
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
Reproducible Builds (R-B) guarantee that rebuilding a software package from source leads to bitwise identical artifacts. R-B is a promising approach to increase the integrity of th…
Is This You, LLM? Recognizing AI-written Programs with Multilingual Code Stylometry
Andrea Gurioli, Maurizio Gabbrielli, Stefano Zacchiroli
With the increasing popularity of LLM-based code completers, like GitHub Copilot, the interest in automatically detecting AI-generated code is also increasing-in particular in cont…
Source Code Archiving to the Rescue of Reproducible Deployment
Ludovic Courtès, Timothy Sample, Simon Tournier +1
The ability to verify research results and to experiment with methodologies are core tenets of science. As research results are increasingly the outcome of computational processes,…
Reproducibility of Build Environments through Space and Time
Julien Malka, Stefano Zacchiroli, Théo Zimmermann
Modern software engineering builds up on the composability of software components, that rely on more and more direct and transitive dependencies to build their functionalities. Thi…
Assessing the Threat Level of Software Supply Chains with the Log Model
Luıs Soeiro, Thomas Robert, Stefano Zacchiroli
The use of free and open source software (FOSS) components in all software systems is estimated to be above 90%. With such high usage and because of the heterogeneity of FOSS tools…