Fine-Grained Analysis of Software Ecosystems as Networks

Projektinformationen

FASTEN

ID Finanzhilfevereinbarung: 825328

DOI

10.3030/825328

Projekt abgeschlossen

EK-Unterschriftsdatum 14 November 2018

Startdatum 1 Januar 2019

Enddatum 30 Juni 2022

Finanziert unter

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Gesamtkosten

€ 4 016 581,43

EU-Beitrag

€ 3 488 536,00

Koordiniert durch

TECHNISCHE UNIVERSITEIT DELFT
Netherlands

CORDIS bietet Links zu öffentlichen Ergebnissen und Veröffentlichungen von HORIZONT-Projekten.

Links zu Ergebnissen und Veröffentlichungen von RP7-Projekten sowie Links zu einigen Typen spezifischer Ergebnisse wie Datensätzen und Software werden dynamisch von OpenAIRE abgerufen.

Leistungen

Open Research Data Pilot (1)

Open Research Data Pilot - Data Management Plan - Final

Open Research Data Pilot Data Management Plan Final version

Demonstrators, pilots, prototypes (9)

Implementation of application-specific Java, C and Python build graphs - V1

Implementation of application-specific Java, C and Python build graphs – intermediate version

Detection of license obligations and metadata and application to the call graphs - Final

Detection of license obligations and metadata and application to the call graphs.

Ranked search engine for reachability and impact queries - Final

Ranked search engine for reachability and impact queries.

Detection of license obligations and metadata and application to the call graphs - V1

Detection of license obligations and metadata and application to the call graphs – intermediate version

Implementation of a extensible framework of rules-based compatibility and compliance checks and reporting

Implementation of a extensible framework ofrules-based compatibility and compliance checksand reporting

Ranked search engine for reachability and impact queries - V1

Ranked search engine for reachability and impact queries – intermediate version

Implementation of application-specific Java, C and Python build graphs- Final

Implementation of application-specific Java, C and Python build graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs - V1

Implementation of a license compliance and compatibility solver operating on the call graphs (intermediate version).

Implementation of a license compliance and compatibility solver operating on the call graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs – Final version

Documents, reports (31)

Integrating centrality measures
Dissemination, Communication and Standardisation Plan

Dissemination Communication and Standardisation Plan

Validation report number three

Evaluate and report on the work done and the progress of the FASTEN project after three years according to the procedures defined in D61 and KPIs provided by D62

Requirements and KPIs with baseline values for use case stakeholders - Final

Requirements and KPIs with baseline values for use case stakeholders Final version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - Final

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems Final version

Static call graph for C code, Java code and Python code - V1

Static call graph for C code, Java code and Python code - intermediate version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - V1

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems

Validation report number one

Evaluate and report on the work done and the progress of the FASTEN project after 18 months according to the procedures defined in D6.1 and KPIs provided by D6.2.

Procedures and practices for validation
Specifications and documentation for REST API endpoints

Specifications and documentation for REST APIendpoints

Specifications for the call graph storage format - Final

Specifications for the call graph storage format - Final version

Specifications for the FASTEN service plug-ins - Final

Specifications for the FASTEN service plugin Final

The FASTEN Knowledge Base
Comparative studies of algorithms and heuristics for reachability on the call graphs
Static call graph for C code, Java code and Python code - Final

Static call graph for C code Java code and Python code final version

Report on application of the propagation model to quality metrics
Industrialization, Exploitation and Market Takeup Report

Industrialization Exploitation and Market Takeup Report

Validation report number four (final)

Evaluate and report on the final results and achievements of the FASTEN project and ensure it fulfil the objectives of the industrial stakeholders as well as the global objectives laid out in the Grant Agreement

Specifications for the call graph storage format
Specifications for the FASTEN service plug-ins - V1

Specifications for the FASTEN service plug-ins.

Proposed model for quality and risk propagation & aggregation - Final

Proposed model for quality and risk propagation aggregation Final version

FASTEN project handbook
A survey of property propagation and aggregation approaches

A survey of property propagation and aggregation approaches

Industrialization, Exploitation and Market Takeup Plan

Industrialization Exploitation and Market Takeup Plan

Validation report number two

Evaluate and report on the work done and the progress of the FASTEN project after two years according to the procedures defined in D61 and KPIs provided by D62

Graph schema and its representation
Report on application of the propagation model to security vulnerabilities

Report on application of the propagation modelto security vulnerabilities

Code sourcing process
Proposed model for quality and risk propagation & aggregation

Proposed model for quality and risk propagation & aggregation

Requirements and KPIs with baseline values for use case stakeholders - V1

Requirements and KPIs with baseline values foruse case stakeholdersProvide exhaustive KPIs along with baseline values in order to allow for tracking of the evolution of the project

Dissemination, Communication and Standardisation Report

Dissemination Communication and Standardisation Report

Other (10)

Integrated call graph
FASTEN PyPI plug-in - Final

FASTEN PyPI plug-in

FASTEN Maven plug-in
The FASTEN Analyzer
FASTEN Maven plug-in - V1

FASTEN Maven plug-in - intermediate version

Dynamic call graph for diverse application stacks - Final

Dynamic call graph for diverse application stacks - final version

Computation of query-independent centrality measures on the call graphs
Dynamic call graph for diverse application stacks - V1

Dynamic call graph for diverse application stacks

FASTEN PyPI plug-in - V1

FASTEN PyPI plug-in - intermediate version

Computation of query-dependent centrality measures for change-impact analysis

Computation of query-dependent centrality measuresfor change-impact analysis

Websites, patent fillings, videos etc. (2)

Project Website
Project Collateral

Veröffentlichungen

Conference proceedings (15)

Selecting third-party libraries: The practitioners' perspective.

Autoren: Larios Vargas, E., Aniche, M., Treude, C., Bruntink, M., & Gousios, G.
Veröffentlicht in: ACM (Association for Computing Machinery) Conference Proceedings: Engineering Conference and Symposium on the Foundations of Software Engineering(ESEC/FSE’20),November8–13,2020,VirtualEvent,USA.ACM,New York,NY,USA,12pages, 2020
Herausgeber: ACM
DOI: 10.1145/3368089.3409711

PyCG: Practical Call Graph Generation in Python

Autoren: Vitalis Salis; Thodoris Sotiropoulos; Panos Louridas; Diomidis Spinellis; Dimitris Mitropoulos
Veröffentlicht in: ICSE, Ausgabe 10, 2021, ISBN 978-1-6654-0296-5
Herausgeber: IEEE
DOI: 10.1109/icse43902.2021.00146

A Dataset of Enterprise-Driven Open Source Software

Autoren: Diomidis Spinellis; Zoe Kotti; Konstantinos Kravvaritis; Georgios Theodorou; Panos Louridas
Veröffentlicht in: MSR, Ausgabe 20, 2020
Herausgeber: ACM
DOI: 10.1145/3379597.3387495

A Model for Detecting Faults in Build Specifications

Autoren: Sotiropoulos, Thodoris; Chaliasos, Stefanos; Mitropoulos, Dimitris; Spinellis, Diomidis
Veröffentlicht in: PACMPL Ausgabe OOPSLA 2020, Ausgabe 2, 2020
Herausgeber: PACMPL
DOI: 10.5281/zenodo.4064035

How Network Analysis Can Improve the Reliability of Modern Software Ecosystems

Autoren: Paolo Boldi
Veröffentlicht in: 2019 IEEE First International Conference on Cognitive Machine Intelligence (CogMI), 2019, Seite(n) 168-172, ISBN 978-1-7281-6737-4
Herausgeber: IEEE
DOI: 10.1109/cogmi48466.2019.00032

ManyTypes4Py: A Benchmark Python Dataset for Machine Learning-based Type Inference

Autoren: Amir M. Mir, Evaldas Latoškinas, Georgios Gousios
Veröffentlicht in: IEEE/ACM 18th International Conference on Mining Software Repositories (MSR), 2021
Herausgeber: IEEE Computer Society
DOI: 10.48550/arxiv.2104.04706

Measuring the impact of library dependency on maintenance

Autoren: Núria Bruch Tàrrega, Miroslav Živković, Ana Oprescu
Veröffentlicht in: Proceedings of the 13th Seminar Series on Advanced Techniques & Tools for Software Evolution (SATToSE 2020), Ausgabe Vol 2754, 2020, ISSN 1613-0073
Herausgeber: CEUR Workshop Proceedings CEUR-WS.org

Ultra-Large-Scale Repository Analysis via Graph Compression

Autoren: P. Boldi, A. Pietri, S. Vigna and S. Zacchiroli
Veröffentlicht in: IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), 2020, Seite(n) 184-194, ISSN 1534-5351
Herausgeber: IEEE
DOI: 10.1109/saner48275.2020.9054827

A Dataset for GitHub Repository Deduplication

Autoren: Diomidis Spinellis, Zoe Kotti, Audris Mockus
Veröffentlicht in: Proceedings of the 17th International Conference on Mining Software Repositories, 2020, Seite(n) 523-527, ISBN 9781450375177
Herausgeber: ACM
DOI: 10.1145/3379597.3387496

A Dataset for GitHub Repository Deduplication: Extended Description

Autoren: Spinellis, Diomidis; Kotti, Zoe; Mockus, Audris
Veröffentlicht in: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Ausgabe 21, 2020
Herausgeber: ACM
DOI: 10.5281/zenodo.3740594

The Software Heritage Graph Dataset: Public Software Development Under One Roof

Autoren: Antoine Pietri, Diomidis Spinellis, Stefano Zacchiroli
Veröffentlicht in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Seite(n) 138-142, ISBN 978-1-7281-3412-3
Herausgeber: IEEE
DOI: 10.1109/msr.2019.00030

Time Present and Time Past: Analyzing the Evolution of JavaScript Code in the Wild

Autoren: Dimitris Mitropoulos, Panos Louridas, Vitalis Salis, Diomidis Spinellis
Veröffentlicht in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Seite(n) 126-137, ISBN 978-1-7281-3412-3
Herausgeber: IEEE
DOI: 10.1109/msr.2019.00029

Standing on Shoulders or Feet? The Usage of the MSR Data Papers

Autoren: Zoe Kotti, Diomidis Spinellis
Veröffentlicht in: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Seite(n) 565-576, ISBN 978-1-7281-3412-3
Herausgeber: IEEE
DOI: 10.1109/msr.2019.00085

A Dataset of Enterprise-Driven Open Source Software: Extended Description

Autoren: Spinellis, Diomidis; Kotti, Zoe; Kravvaritis, Konstantinos; Theodorou, Georgios; Louridas, Panos
Veröffentlicht in: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Ausgabe 18, 2020
Herausgeber: Association for Computing Machinery
DOI: 10.5281/zenodo.3742854

Type4Py: Practical Deep Similarity Learning-Based Type Inference for Python

Autoren: Mir, Amir M.; Latoskinas, Evaldas; Proksch, Sebastian; Gousios, Georgios
Veröffentlicht in: ICSE '22: Proceedings of the 44th International Conference on Software Engineering, Ausgabe 16, 2022
Herausgeber: Association for Computing Machinery
DOI: 10.48550/arxiv.2101.04470

Peer reviewed articles (4)

Can we trust tests to automate dependency updates? A case study ofJava Projects

Autoren: Joseph Hejderup, Georgios Gousios
Veröffentlicht in: Journal of Systems and Software, 2022, ISSN 0164-1212
Herausgeber: Elsevier BV
DOI: 10.1016/j.jss.2021.111097

PDGuard: an architecture for the control and secure processing of personal data

Autoren: Dimitris Mitropoulos, Thodoris Sotiropoulos, Nikos Koutsovasilis, Diomidis Spinellis
Veröffentlicht in: International Journal of Information Security, Ausgabe 19/4, 2020, Seite(n) 479-498, ISSN 1615-5262
Herausgeber: Springer Verlag
DOI: 10.1007/s10207-019-00468-5

Präzi: From Package-based to Call-based Dependency Networks

Autoren: Joseph Hejderup, Moritz Beller, Konstantinos Triantafyllou, Georgios Gousios
Veröffentlicht in: Empirical Software Engineering, 2022, ISSN 1382-3256
Herausgeber: Kluwer Academic Publishers
DOI: 10.1007/s10664-021-10071-9

Fine-Grained Network Analysis for Modern Software Ecosystems

Autoren: Paolo Boldi; Georgios Gousios
Veröffentlicht in: Transactions on Internet Technology, Ausgabe 14, 2020, ISSN 1533-5399
Herausgeber: Association for Computing Machinary, Inc.
DOI: 10.1145/3418209

Book chapters (1)

Mime Artist: Bypassing Whitelisting for the Web with JavaScript Mimicry Attacks

Autoren: Stefanos Chaliasos, George Metaxopoulos, George Argyros, Dimitris Mitropoulos
Veröffentlicht in: Computer Security – ESORICS 2019 - 24th European Symposium on Research in Computer Security, Luxembourg, September 23–27, 2019, Proceedings, Part II, Ausgabe 11736, 2019, Seite(n) 565-585, ISBN 978-3-030-29961-3
Herausgeber: Springer International Publishing
DOI: 10.1007/978-3-030-29962-0_27