Advanced Software Tools for JavaScript Developers

Informacje na temat projektu

PAWTOOLS

Identyfikator umowy o grant: 101062180

DOI

10.3030/101062180

Projekt został zamknięty

Data podpisania przez KE 24 Marca 2022

Data rozpoczęcia 1 Maja 2022

Data zakończenia 31 Października 2023

Finansowanie w ramach

• European Research Council (ERC)

Koszt całkowity

Brak danych

Wkład UE

€ 150 000,00

Koordynowany przez

AARHUS UNIVERSITET
Denmark

Periodic Reporting for period 1 - PAWTOOLS (Advanced Software Tools for JavaScript Developers)

Okres sprawozdawczy: 2022-05-01 do 2023-10-31

Podsumowanie kontekstu i ogólnych celów projektu

Typical modern Node.js application consists of hundreds of JavaScript files, with more than 90% of the code coming from such third-party libraries. Reuse of high-quality libraries is thus an important factor in software development. Most libraries, especially the most popular ones, are continuously improved, and new versions are released frequently. However, dependence on other people’s libraries opens the door to security vulnerabilities and programming errors that may exist deeply inside the libraries and have severe consequences to the applications and end users, and breaking changes in new versions often cause problems for the application developers.
The objectives of this project are to further explore the scientific results achieved in the ERC CoG project “Automated Program Analysis for Advanced Web Applications” (PAW) and bring them closer to practical use.

Prace wykonane od początku projektu do końca okresu sprawozdawczego oraz najważniejsze dotychczasowe rezultaty

In the PAWTOOLS project, we have continued the development of the program analyses from PAW, focusing on automated techniques for discovering how breaking changes and vulnerabilities in third-party libraries can affect application code, and we have performed an initial market analysis to explore the innovative aspects towards commercialization.

Innowacyjność oraz oczekiwany potencjalny wpływ (w tym dotychczasowe znaczenie społeczno-gospodarcze i szersze implikacje społeczne projektu)

The main results of the project are: (1) We have performed a large experiment to investigate the potential of the JSFIX analysis tool in supporting breaking changes in widely used npm packages, which has led to improvements of the analysis technique and confirmed that the expressiveness is appropriate for practical use. (2) We have developed a new program analysis tool based on the experiences from the JSFIX and JAM research tools. The new analysis tool is Open Source and now forms the backbone of a commercial product. (3) The initial market analysis has provided insights into the commercial potential of the research results and has led to the creation of a startup company.