5 papers
Towards Sustainable and Secure Reuse in Dependency Supply Chains: Initial Analysis of NPM packages at the End of the Chain
Brittany Anne Reid, Raula Gaikovina Kula
Much of the success of modern software development can be attributed to code reuse. The ability to reuse existing functionality via third-party dependencies has enabled massive gai…
Uncovering Intention through LLM-Driven Code Snippet Description Generation
Yusuf Sulistyo Nugroho, Farah Danisha Salam, Brittany Reid +3
Documenting code snippets is essential to pinpoint key areas where both developers and users should pay attention. Examples include usage examples and other Application Programming…
Using LLMs for Security Advisory Investigations: How Far Are We?
Bayu Fedra Abdullah, Yusuf Sulistyo Nugroho, Brittany Reid +3
Large Language Models (LLMs) are increasingly used in software security, but their trustworthiness in generating accurate vulnerability advisories remains uncertain. This study inv…
On Categorizing Open Source Software Security Vulnerability Reporting Mechanisms on GitHub
Sushawapak Kancharoendee, Thanat Phichitphanphong, Chanikarn Jongyingyos +5
Open-source projects are essential to software development, but publicly disclosing vulnerabilities without fixes increases the risk of exploitation. The Open Source Security Found…
A Preliminary Study on Self-Contained Libraries in the NPM Ecosystem
Pongchai Jaisri, Brittany Reid, Raula Gaikovina Kula
The widespread of libraries within modern software ecosystems creates complex networks of dependencies. These dependencies are fragile to breakage, outdated, or redundancy, potenti…