17 citations · 63 across the 23 of their papers we have counts for
7 papers · 1 filter
DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits
Qiaolin Qin, Wanpeng Li, Benoit Baudry +3
Pre-trained models (PTMs) are widely distributed as serialized binaries, but their reuse often exposes software supply chains to deserialization attacks. Despite the emergence of s…
BreakGuard: Towards Detecting Dependency Breaking Changes with LLM-Generated Tests
Rachna Raj, Benoit Baudry, Diego Elias Costa
Open-source libraries play an important role in software development by providing reusable features that expedite the development process. As libraries evolve, they release new ver…
Art in Humanity's Code
Benoit Baudry, Yogya Gamage, Nadia Gonzalez Fernandez +4
Artist-led open-source libraries such as Processing or openFrameworks have had a major impact on artists and designers who use code as a creative medium. In this work, we conduct t…
Agentic Generation of AST Transformation Rules for Fixing Breaking Updates
Frank Reyes, Benoit Baudry, Martin Monperrus
Modern software projects depend on third-party libraries that evolve continuously, introducing breaking API changes that prevent client code from compiling after a dependency updat…
N-Version Programming with Coding Agents
Javier Ron, Benoit Baudry, Martin Monperrus
This paper revisits the classical concept on N-version programming in the setting of contemporary AI coding agents. Revisiting the seminal Knight-Leveson experiment, we study wheth…
FIKA: Expanding Dependency Reachability with Executability Guarantees
Yogya Gamage, Meriem Ben Chaaben, Martin Monperrus +1
Automated third-party library analysis tools help developers by addressing key dependency management challenges, such as automating version updates, detecting vulnerabilities, and…
Software Supply Chain Smells: Lightweight Analysis for Secure Dependency Management
Larissa Schmid, Diogo Gaspar, Raphina Liu +3
Modern software systems heavily rely on third-party dependencies, making software supply chain security a critical concern. We introduce the concept of software supply chain smells…