1 citations · 1 across the 19 of their papers we have counts for
11 papers · 1 filter
Agentic Generation of AST Transformation Rules for Fixing Breaking Updates
Frank Reyes, Benoit Baudry, Martin Monperrus
Modern software projects depend on third-party libraries that evolve continuously, introducing breaking API changes that prevent client code from compiling after a dependency updat…
N-Version Programming with Coding Agents
Javier Ron, Benoit Baudry, Martin Monperrus
This paper revisits the classical concept on N-version programming in the setting of contemporary AI coding agents. Revisiting the seminal Knight-Leveson experiment, we study wheth…
FIKA: Expanding Dependency Reachability with Executability Guarantees
Yogya Gamage, Meriem Ben Chaaben, Martin Monperrus +1
Automated third-party library analysis tools help developers by addressing key dependency management challenges, such as automating version updates, detecting vulnerabilities, and…
Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
Larissa Schmid, Diogo Gaspar, Raphina Liu +3
Modern software systems heavily rely on third-party dependencies, making software supply chain security a critical concern. We introduce the concept of software supply chain smells…
Verifiable Provenance of Software Artifacts with Zero-Knowledge Compilation
Javier Ron, Martin Monperrus
Verifying that a compiled binary originates from its claimed source code is a fundamental security requirement, called source code provenance. Achieving verifiable source code prov…
Maven-Lockfile: High Integrity Rebuild of Past Java Releases
Larissa Schmid, Elias Lundell, Yogya Gamage +2
Modern software projects depend on many third-party libraries, complicating reproducible and secure builds. Several package managers address this with the generation of a lockfile…