8 papers · 1 filter
A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities
Wenhao Yang, Runzhi He, Minghui Zhou
Open source communities have been flooded with AI-generated contributions. In defense, they have written contribution rules to regulate coding agents' behavior, spanning from a tot…
From Collaboration to Regulation: Characterizing Governance Practice in Three Deep Learning Open Source Communities
Ruiqiao Qiu, Wenhao Yang, Minghui Zhou
Collaboration in Open Source Software (OSS) projects creates substantial coordination and quality-control challenges across diverse contributor bases. Projects address these challe…
File-Level Copying Is an Implicit Dependency in Open Source
Runzhi He, Audris Mockus, Wenhao Yang +1
File-level copying is a widespread but ungoverned form of software reuse. Copying files across repositories reduces supply-chain visibility: it removes the four observable signals…
Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains
Changguo Jia, Tianqi Zhao, Runzhi He +1
Agent skills package reusable operational knowledge for Large Language Model (LLM) agents, yet as they grow in scope, they become dependency-bearing artifacts whose identities, ver…
Package Dashboard: A Cross-Ecosystem Framework for Dual-Perspective Analysis of Software Packages
Ziheng Liu, Runzhi He, Minghui Zhou
Recent software supply chain attacks have revealed a critical socio-technical gap in current Software Composition Analysis (SCA) implementations -- isolation among package manageme…
Predicting Abandonment of Open Source Software Projects with An Integrated Feature Framework
Yiming Xu, Runzhi He, Hengzhi Ye +2
Open Source Software (OSS) is a cornerstone of contemporary software development, yet the increasing prevalence of OSS project abandonment threatens global software supply chains.…
Code Clone Detection via an AlphaFold-Inspired Framework
Changguo Jia, Yi Zhan, Tianqi Zhao +2
Code clone detection plays a critical role in software maintenance and vulnerability analysis. Substantial methods have been proposed to detect code clones. However, they struggle…
Small Changes, Big Trouble: Demystifying and Parsing License Variants for Incompatibility Detection in the PyPI Ecosystem
Weiwei Xu, Hengzhi Ye, Kai Gao +1
Open-source licenses establish the legal foundation for software reuse, yet license variants, including both modified standard licenses and custom-created alternatives, introduce s…