Lessons from the long tail: Analysing unsafe dependency updates across software ecosystems

• Main Authors: WATTANAKRIENGKRAI, Supatsara, KULA, Raula, TREUDE, Christoph, MATSUMOTO, Kenichi
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2023
• Subjects: Supply Chain; Libraries; Software Ecosystems; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/8903; https://ink.library.smu.edu.sg/context/sis_research/article/9906/viewcontent/tail.pdf
• Institution: Singapore Management University

A risk in adopting third-party dependencies into an application is their potential to serve as a doorway for malicious code to be injected (most often unknowingly). While many initiatives from both industry and research communities focus on the most critical dependencies (i.e., those most depended u...