4 papers
A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities
Wenhao Yang, Runzhi He, Minghui Zhou
Open source communities have been flooded with AI-generated contributions. In defense, they have written contribution rules to regulate coding agents' behavior, spanning from a tot…
From Collaboration to Regulation: Characterizing Governance Practice in Three Deep Learning Open Source Communities
Ruiqiao Qiu, Wenhao Yang, Minghui Zhou
Collaboration in Open Source Software (OSS) projects creates substantial coordination and quality-control challenges across diverse contributor bases. Projects address these challe…
File-Level Copying Is an Implicit Dependency in Open Source
Runzhi He, Audris Mockus, Wenhao Yang +1
File-level copying is a widespread but ungoverned form of software reuse. Copying files across repositories reduces supply-chain visibility: it removes the four observable signals…
Internal Vulnerabilities, External Threats: A Grounded Framework for Enterprise Open Source Risk Governance
Wenhao Yang, Minghui Zhou, Daniel Izquierdo Cortázar +1
Enterprise engagement with open source has evolved from tactical adoption to strategic deep integration, exposing them to a complex risk landscape far beyond mere code. However, tr…