17 citations · 63 across the 23 of their papers we have counts for
11 papers · 1 filter
Dirty-Waters: Detecting Software Supply Chain Smells
Raphina Liu, Sofia Bobadilla, Benoit Baudry +1
Using open-source dependencies is essential in modern software development. However, this practice implies significant trust in third-party code, while there is little support for…
Breaking-Good: Explaining Breaking Dependency Updates with Build Analysis
Frank Reyes, Benoit Baudry, Martin Monperrus
Dependency updates often cause compilation errors when new dependency versions introduce changes that are incompatible with existing client code. Fixing breaking dependency updates…
Galapagos: Automated N-Version Programming with LLMs
Javier Ron, Diogo Gaspar, Javier Cabrera-Arteaga +2
N-Version Programming is a well-known methodology for developing fault-tolerant systems. It achieves fault detection and correction at runtime by adding diverse redundancy into pro…
Maven-Hijack: Software Supply Chain Attack Exploiting Packaging Order
Frank Reyes, Federico Bono, Aman Sharma +2
Java projects frequently rely on package managers such as Maven to manage complex webs of external dependencies. While these tools streamline development, they also introduce subtl…
PROZE: Generating Parameterized Unit Tests Informed by Runtime Data
Deepika Tiwari, Yogya Gamage, Martin Monperrus +1
Typically, a conventional unit test (CUT) verifies the expected behavior of the unit under test through one specific input / output pair. In contrast, a parameterized unit test (PU…
SBOM.EXE: Countering Dynamic Code Injection based on Software Bill of Materials in Java
Aman Sharma, Martin Wittlinger, Benoit Baudry +1
Software supply chain attacks have become a significant threat as software development increasingly relies on contributions from multiple, often unverified sources. The code from u…
Detecting and removing bloated dependencies in CommonJS packages
Yuxin Liu, Deepika Tiwari, Cristian Bogdan +1
JavaScript packages are notoriously prone to bloat, a factor that significantly impacts the performance and maintainability of web applications. While web bundlers and tree-shaking…
Serializing Java Objects in Plain Code
Julian Wachter, Deepika Tiwari, Martin Monperrus +1
In managed languages, serialization of objects is typically done in bespoke binary formats such as Protobuf, or markup languages such as XML or JSON. The major limitation of these…
BUMP: A Benchmark of Reproducible Breaking Dependency Updates
Frank Reyes, Yogya Gamage, Gabriel Skoglund +2
Third-party dependency updates can cause a build to fail if the new dependency version introduces a change that is incompatible with the usage: this is called a breaking dependency…
With Great Humor Comes Great Developer Engagement
Deepika Tiwari, Tim Toady, Martin Monperrus +1
The worldwide collaborative effort for the creation of software is technically and socially demanding. The more engaged developers are, the more value they impart to the software t…
Generative AI to Generate Test Data Generators
Benoit Baudry, Khashayar Etemadi, Sen Fang +7
Generating fake data is an essential dimension of modern software testing, as demonstrated by the number and significance of data faking libraries. Yet, developers of faking librar…