6 papers
A First Look at Coding Agents' Compliance with AI Contribution Rules in Open-Source Communities
Wenhao Yang, Runzhi He, Minghui Zhou
Open source communities have been flooded with AI-generated contributions. In defense, they have written contribution rules to regulate coding agents' behavior, spanning from a tot…
From Collaboration to Regulation: Characterizing Governance Practice in Three Deep Learning Open Source Communities
Ruiqiao Qiu, Wenhao Yang, Minghui Zhou
Collaboration in Open Source Software (OSS) projects creates substantial coordination and quality-control challenges across diverse contributor bases. Projects address these challe…
File-Level Copying Is an Implicit Dependency in Open Source
Runzhi He, Audris Mockus, Wenhao Yang +1
File-level copying is a widespread but ungoverned form of software reuse. Copying files across repositories reduces supply-chain visibility: it removes the four observable signals…
To Ban or not to Ban? How Open Source Projects Govern GenAI Contributions
Wenhao Yang, Runzhi He, Minghui Zhou
Generative AI (GenAI) is playing an increasingly important role in open source software (OSS). Beyond completing code and documentation, GenAI is increasingly involved in issues, p…
Internal Vulnerabilities, External Threats: A Grounded Framework for Enterprise Open Source Risk Governance
Wenhao Yang, Minghui Zhou, Daniel Izquierdo Cortázar +1
Enterprise engagement with open source has evolved from tactical adoption to strategic deep integration, exposing them to a complex risk landscape far beyond mere code. However, tr…
PyRadar: Towards Automatically Retrieving and Validating Source Code Repository Information for PyPI Packages
Kai Gao, Weiwei Xu, Wenhao Yang +1
A package's source code repository records the development history of the package, providing indispensable information for the use and risk monitoring of the package. However, a pa…