Package equivalence in complex software network

02/11/2016
by   Tomislav Slijepčević, et al.
0

The public package registry npm is one of the biggest software registry. With its 216 911 software packages, it forms a big network of software dependencies. In this paper we evaluate various methods for finding similar packages in the npm network, using only the structure of the graph. Namely, we want to find a way of categorizing similar packages, which would be useful for recommendation systems. This size enables us to compute meaningful results, as it softened the particularities of the graph. Npm is also quite famous as it is the default package repository of Node.js. We believe that it will make our results interesting for more people than a less used package repository. This makes it a good subject of analysis of software networks.

READ FULL TEXT
research
03/08/2021

Containing Malicious Package Updates in npm with a Lightweight Permission System

The large amount of third-party packages available in fast-moving softwa...
research
11/26/2018

Refactoring Software Packages via Community Detection from Stability Point of View

As the complexity and size of software projects increases in real-world ...
research
05/10/2023

Speranza: Usable, privacy-friendly software signing

Software repositories, used for wide-scale open software distribution, a...
research
02/06/2022

"I Shake The Package To Check If It's Mine": A Study of Package Fetching Practices and Challenges of Blind and Low Vision People in China

With about 230 million packages delivered per day in 2020, fetching pack...
research
09/20/2019

Equivalence Checking of Non-deterministic Operations

Checking the semantic equivalence of operations is an important task in ...
research
01/05/2021

A practical approach for updating an integrity-enforced operating system

Trusted computing defines how to securely measure, store, and verify the...
research
11/22/2011

Evolution of a Modular Software Network

"Evolution behaves like a tinkerer" (Francois Jacob, Science, 1977). Sof...

Please sign up or login with your details

Forgot password? Click here to reset