Out of sight, out of mind? How vulnerable dependencies affect open-source projects

• Main Authors: PRANA, Gede Artha Azriadi, SHARMA, Abhishek, SHAR, Lwin Khin, FOO, Darius, SANTOSA, Andrew E., SHARMA, Asankhaya, LO, David
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2021
• Subjects: Empirical Study; Security; Software Composition Analysis; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/6048; https://ink.library.smu.edu.sg/context/sis_research/article/7053/viewcontent/sourceclear___journal_2020_11_29.pdf
• Institution: Singapore Management University

Context: Software developers often use open-source libraries in their project to improve development speed. However, such libraries may contain security vulnerabilities, and this has resulted in several high-profile incidents in re- cent years. As usage of open-source libraries grows, understanding...