View in EDS PDF Full Text

Measuring Dependency Freshness in Software Systems.

Saved in:
Bibliographic Details
Title: Measuring Dependency Freshness in Software Systems.
Authors: Cox, Jöel1 joel@joelcox.nl, Bouwers, Eric2 e.bouwers@sig.eu, van Eekelen, Marko1,3 marko.vaneekelen@ou.nl, Visser, Joost1,2 j.visser@cs.ru.nl
Source: ICSE: International Conference on Software Engineering. 2015, p109-118. 10p.
Subjects: Computer software research, System analysis software, Software measurement, Computer files, Computer systems
Abstract: Modern software systems often make use of thirdparty components to speed-up development and reduce maintenance costs. In return, developers need to update to new releases of these dependencies to avoid, for example, security and compatibility risks. In practice, prioritizing these updates is difficult because the use of outdated dependencies is often opaque. In this paper we aim to make this concept more transparent by introducing metrics to quantify the use of recent versions of dependencies, i.e. the system's "dependency freshness". We propose and investigate a system-level metric based on an industry benchmark. We validate the usefulness of the metric using interviews, analyze the variance of the metric through time, and investigate the relationship between outdated dependencies and security vulnerabilities. The results show that the measurements are considered useful, and that systems using outdated dependencies four times as likely to have [ABSTRACT FROM AUTHOR]
Copyright of ICSE: International Conference on Software Engineering is the property of Association for Computing Machinery and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Links:
  – Type: pdflink
Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 111749918
AccessLevel: 6
PubType: Conference
PubTypeId: conference
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Measuring Dependency Freshness in Software Systems.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Cox%2C+Jöel%22">Cox, Jöel</searchLink><relatesTo>1</relatesTo><i> joel@joelcox.nl</i><br /><searchLink fieldCode="AR" term="%22Bouwers%2C+Eric%22">Bouwers, Eric</searchLink><relatesTo>2</relatesTo><i> e.bouwers@sig.eu</i><br /><searchLink fieldCode="AR" term="%22van+Eekelen%2C+Marko%22">van Eekelen, Marko</searchLink><relatesTo>1,3</relatesTo><i> marko.vaneekelen@ou.nl</i><br /><searchLink fieldCode="AR" term="%22Visser%2C+Joost%22">Visser, Joost</searchLink><relatesTo>1,2</relatesTo><i> j.visser@cs.ru.nl</i>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22ICSE%3A+International+Conference+on+Software+Engineering%22">ICSE: International Conference on Software Engineering</searchLink>. 2015, p109-118. 10p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Computer+software+research%22">Computer software research</searchLink><br /><searchLink fieldCode="DE" term="%22System+analysis+software%22">System analysis software</searchLink><br /><searchLink fieldCode="DE" term="%22Software+measurement%22">Software measurement</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+files%22">Computer files</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+systems%22">Computer systems</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: Modern software systems often make use of thirdparty components to speed-up development and reduce maintenance costs. In return, developers need to update to new releases of these dependencies to avoid, for example, security and compatibility risks. In practice, prioritizing these updates is difficult because the use of outdated dependencies is often opaque. In this paper we aim to make this concept more transparent by introducing metrics to quantify the use of recent versions of dependencies, i.e. the system's "dependency freshness". We propose and investigate a system-level metric based on an industry benchmark. We validate the usefulness of the metric using interviews, analyze the variance of the metric through time, and investigate the relationship between outdated dependencies and security vulnerabilities. The results show that the measurements are considered useful, and that systems using outdated dependencies four times as likely to have [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of ICSE: International Conference on Software Engineering is the property of Association for Computing Machinery and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=111749918
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1109/ICSE.2015.140
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 10
        StartPage: 109
    Subjects:
      – SubjectFull: Computer software research
        Type: general
      – SubjectFull: System analysis software
        Type: general
      – SubjectFull: Software measurement
        Type: general
      – SubjectFull: Computer files
        Type: general
      – SubjectFull: Computer systems
        Type: general
    Titles:
      – TitleFull: Measuring Dependency Freshness in Software Systems.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Cox, Jöel
      – PersonEntity:
          Name:
            NameFull: Bouwers, Eric
      – PersonEntity:
          Name:
            NameFull: van Eekelen, Marko
      – PersonEntity:
          Name:
            NameFull: Visser, Joost
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 01
              Text: 2015
              Type: published
              Y: 2015
          Titles:
            – TitleFull: ICSE: International Conference on Software Engineering
              Type: main
ResultId 1