3 citations · 6 across the 11 of their papers we have counts for
12 papers
Update from Hell: Can Coding Agents Survive Hidden Breakage in Dependency Upgrades?
Zijian Luo, Runzhi He, Pengfei Gao +6
Modern software systems rely heavily on third-party dependencies, but upgrading those dependencies remains a costly maintenance activity. Dependency upgrades do not always preserve…
A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities
Wenhao Yang, Runzhi He, Minghui Zhou
Open source communities have been flooded with AI-generated contributions. In defense, they have written contribution rules to regulate coding agents' behavior, spanning from a tot…
File-Level Copying Is an Implicit Dependency in Open Source
Runzhi He, Audris Mockus, Wenhao Yang +1
File-level copying is a widespread but ungoverned form of software reuse. Copying files across repositories reduces supply-chain visibility: it removes the four observable signals…
Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains
Changguo Jia, Tianqi Zhao, Runzhi He +1
Agent skills package reusable operational knowledge for Large Language Model (LLM) agents, yet as they grow in scope, they become dependency-bearing artifacts whose identities, ver…
To Ban or not to Ban? How Open Source Projects Govern GenAI Contributions
Wenhao Yang, Runzhi He, Minghui Zhou
Generative AI (GenAI) is playing an increasingly important role in open source software (OSS). Beyond completing code and documentation, GenAI is increasingly involved in issues, p…
Package Dashboard: A Cross-Ecosystem Framework for Dual-Perspective Analysis of Software Packages
Ziheng Liu, Runzhi He, Minghui Zhou
Recent software supply chain attacks have revealed a critical socio-technical gap in current Software Composition Analysis (SCA) implementations -- isolation among package manageme…
Predicting Abandonment of Open Source Software Projects with An Integrated Feature Framework
Yiming Xu, Runzhi He, Hengzhi Ye +2
Open Source Software (OSS) is a cornerstone of contemporary software development, yet the increasing prevalence of OSS project abandonment threatens global software supply chains.…
SmartNote: An LLM-Powered, Personalised Release Note Generator That Just Works
Farbod Daneshyan, Runzhi He, Jianyu Wu +1
The release note is a crucial document outlining changes in new software versions. Yet, many developers view the process of writing software release notes as a tedious and dreadful…
Characterising Open Source Co-opetition in Company-hosted Open Source Software Projects: The Cases of PyTorch, TensorFlow, and Transformers
Cailean Osborne, Farbod Daneshyan, Runzhi He +3
Companies, including market rivals, have long collaborated on the development of open source software (OSS), resulting in a tangle of co-operation and competition known as "open so…
Revealing the value of Repository Centrality in lifespan prediction of Open Source Software Projects
Runzhi He, Hengzhi Ye, Minghui Zhou
Background: Open Source Software is the building block of modern software. However, the prevalence of project deprecation in the open source world weakens the integrity of the down…
Characterizing Deep Learning Package Supply Chains in PyPI: Domains, Clusters, and Disengagement
Kai Gao, Runzhi He, Bing Xie +1
Deep learning (DL) package supply chains (SCs) are critical for DL frameworks to remain competitive. However, vital knowledge on the nature of DL package SCs is still lacking. In t…
Automating Dependency Updates in Practice: An Exploratory Study on GitHub Dependabot
Runzhi He, Hao He, Yuxia Zhang +1
Dependency management bots automatically open pull requests to update software dependencies on behalf of developers. Early research shows that developers are suspicious of updates…