Research

Catch the Butterfly: Peeking into the Terms and Conflicts among SPDX Licenses

How can we effectively detect and resolve license conflicts in open-source software to ensure compliance and reduce legal risks?

Mitigating Persistence of Open-Source Vulnerabilities in Maven Ecosystem

How can we effectively detect and address persistent vulnerabilities in the Maven ecosystem to improve software security and resilience?

ModuleGuard: Understanding and Detecting Module Conflicts in Python Ecosystem

How can we effectively detect and resolve module conflicts in Python's growing ecosystem to improve software reliability and development efficiency?

LiDetector: License Incompatibility Detection for Open Source Software

How can we effectively detect and resolve license incompatibilities in open-source software to mitigate legal risks and ensure compliance?

Demystifying the Vulnerability Propagation and Its Evolution via Dependency Trees in the NPM Ecosystem

How can we effectively detect and mitigate known vulnerabilities in the NPM ecosystem to enhance the security and reliability of JavaScript applications?

Software Architecture Recovery with Information Fusion

How can we efficiently recover accurate software architecture in evolving C/C++ and Java codebases to improve system maintainability?