Fine-Grained Analysis of Software Ecosystems as Networks

Informations projet

FASTEN

N° de convention de subvention: 825328

DOI

10.3030/825328

Projet clôturé

Date de signature de la CE 14 Novembre 2018

Date de début 1 Janvier 2019

Date de fin 30 Juin 2022

Financé au titre de

• INDUSTRIAL LEADERSHIP - Leadership in enabling and industrial technologies - Information and Communication Technologies (ICT)

Coût total

€ 4 016 581,43

Contribution de l’UE

€ 3 488 536,00

Coordonné par

TECHNISCHE UNIVERSITEIT DELFT
Netherlands

CORDIS fournit des liens vers les livrables publics et les publications des projets HORIZON.

Les liens vers les livrables et les publications des projets du 7e PC, ainsi que les liens vers certains types de résultats spécifiques tels que les jeux de données et les logiciels, sont récupérés dynamiquement sur OpenAIRE .

Livrables

Open Research Data Pilot (1)

Open Research Data Pilot - Data Management Plan - Final

Open Research Data Pilot Data Management Plan Final version

Demonstrators, pilots, prototypes (9)

Implementation of application-specific Java, C and Python build graphs - V1

Implementation of application-specific Java, C and Python build graphs – intermediate version

Detection of license obligations and metadata and application to the call graphs - Final

Detection of license obligations and metadata and application to the call graphs.

Ranked search engine for reachability and impact queries - Final

Ranked search engine for reachability and impact queries.

Detection of license obligations and metadata and application to the call graphs - V1

Detection of license obligations and metadata and application to the call graphs – intermediate version

Implementation of a extensible framework of rules-based compatibility and compliance checks and reporting

Implementation of a extensible framework ofrules-based compatibility and compliance checksand reporting

Ranked search engine for reachability and impact queries - V1

Ranked search engine for reachability and impact queries – intermediate version

Implementation of application-specific Java, C and Python build graphs- Final

Implementation of application-specific Java, C and Python build graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs - V1

Implementation of a license compliance and compatibility solver operating on the call graphs (intermediate version).

Implementation of a license compliance and compatibility solver operating on the call graphs - Final

Implementation of a license compliance and compatibility solver operating on the call graphs – Final version

Documents, reports (31)

Integrating centrality measures
Dissemination, Communication and Standardisation Plan

Dissemination Communication and Standardisation Plan

Validation report number three

Evaluate and report on the work done and the progress of the FASTEN project after three years according to the procedures defined in D61 and KPIs provided by D62

Requirements and KPIs with baseline values for use case stakeholders - Final

Requirements and KPIs with baseline values for use case stakeholders Final version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - Final

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems Final version

Static call graph for C code, Java code and Python code - V1

Static call graph for C code, Java code and Python code - intermediate version

Service/integration that provides the outcomes of quality and risk propagation of software ecosystems - V1

Serviceintegration that provides the outcomes of quality and risk propagation of software ecosystems

Validation report number one

Evaluate and report on the work done and the progress of the FASTEN project after 18 months according to the procedures defined in D6.1 and KPIs provided by D6.2.

Procedures and practices for validation
Specifications and documentation for REST API endpoints

Specifications and documentation for REST APIendpoints

Specifications for the call graph storage format - Final

Specifications for the call graph storage format - Final version

Specifications for the FASTEN service plug-ins - Final

Specifications for the FASTEN service plugin Final

The FASTEN Knowledge Base
Comparative studies of algorithms and heuristics for reachability on the call graphs
Static call graph for C code, Java code and Python code - Final

Static call graph for C code Java code and Python code final version

Report on application of the propagation model to quality metrics
Industrialization, Exploitation and Market Takeup Report

Industrialization Exploitation and Market Takeup Report

Validation report number four (final)

Evaluate and report on the final results and achievements of the FASTEN project and ensure it fulfil the objectives of the industrial stakeholders as well as the global objectives laid out in the Grant Agreement

Specifications for the call graph storage format
Specifications for the FASTEN service plug-ins - V1

Specifications for the FASTEN service plug-ins.

Proposed model for quality and risk propagation & aggregation - Final

Proposed model for quality and risk propagation aggregation Final version

FASTEN project handbook
A survey of property propagation and aggregation approaches

A survey of property propagation and aggregation approaches

Industrialization, Exploitation and Market Takeup Plan

Industrialization Exploitation and Market Takeup Plan

Validation report number two

Evaluate and report on the work done and the progress of the FASTEN project after two years according to the procedures defined in D61 and KPIs provided by D62

Graph schema and its representation
Report on application of the propagation model to security vulnerabilities

Report on application of the propagation modelto security vulnerabilities

Code sourcing process
Proposed model for quality and risk propagation & aggregation

Proposed model for quality and risk propagation & aggregation

Requirements and KPIs with baseline values for use case stakeholders - V1

Requirements and KPIs with baseline values foruse case stakeholdersProvide exhaustive KPIs along with baseline values in order to allow for tracking of the evolution of the project

Dissemination, Communication and Standardisation Report

Dissemination Communication and Standardisation Report

Other (10)

Integrated call graph
FASTEN PyPI plug-in - Final

FASTEN PyPI plug-in

FASTEN Maven plug-in
The FASTEN Analyzer
FASTEN Maven plug-in - V1

FASTEN Maven plug-in - intermediate version

Dynamic call graph for diverse application stacks - Final

Dynamic call graph for diverse application stacks - final version

Computation of query-independent centrality measures on the call graphs
Dynamic call graph for diverse application stacks - V1

Dynamic call graph for diverse application stacks

FASTEN PyPI plug-in - V1

FASTEN PyPI plug-in - intermediate version

Computation of query-dependent centrality measures for change-impact analysis

Computation of query-dependent centrality measuresfor change-impact analysis

Websites, patent fillings, videos etc. (2)

Project Website
Project Collateral

Publications

Conference proceedings (15)

Selecting third-party libraries: The practitioners' perspective.

Auteurs: Larios Vargas, E., Aniche, M., Treude, C., Bruntink, M., & Gousios, G.
Publié dans: ACM (Association for Computing Machinery) Conference Proceedings: Engineering Conference and Symposium on the Foundations of Software Engineering(ESEC/FSE’20),November8–13,2020,VirtualEvent,USA.ACM,New York,NY,USA,12pages, 2020
Éditeur: ACM
DOI: 10.1145/3368089.3409711

PyCG: Practical Call Graph Generation in Python

Auteurs: Vitalis Salis; Thodoris Sotiropoulos; Panos Louridas; Diomidis Spinellis; Dimitris Mitropoulos
Publié dans: ICSE, Numéro 10, 2021, ISBN 978-1-6654-0296-5
Éditeur: IEEE
DOI: 10.1109/icse43902.2021.00146

A Dataset of Enterprise-Driven Open Source Software

Auteurs: Diomidis Spinellis; Zoe Kotti; Konstantinos Kravvaritis; Georgios Theodorou; Panos Louridas
Publié dans: MSR, Numéro 20, 2020
Éditeur: ACM
DOI: 10.1145/3379597.3387495

A Model for Detecting Faults in Build Specifications

Auteurs: Sotiropoulos, Thodoris; Chaliasos, Stefanos; Mitropoulos, Dimitris; Spinellis, Diomidis
Publié dans: PACMPL Numéro OOPSLA 2020, Numéro 2, 2020
Éditeur: PACMPL
DOI: 10.5281/zenodo.4064035

How Network Analysis Can Improve the Reliability of Modern Software Ecosystems

Auteurs: Paolo Boldi
Publié dans: 2019 IEEE First International Conference on Cognitive Machine Intelligence (CogMI), 2019, Page(s) 168-172, ISBN 978-1-7281-6737-4
Éditeur: IEEE
DOI: 10.1109/cogmi48466.2019.00032

ManyTypes4Py: A Benchmark Python Dataset for Machine Learning-based Type Inference

Auteurs: Amir M. Mir, Evaldas Latoškinas, Georgios Gousios
Publié dans: IEEE/ACM 18th International Conference on Mining Software Repositories (MSR), 2021
Éditeur: IEEE Computer Society
DOI: 10.48550/arxiv.2104.04706

Measuring the impact of library dependency on maintenance

Auteurs: Núria Bruch Tàrrega, Miroslav Živković, Ana Oprescu
Publié dans: Proceedings of the 13th Seminar Series on Advanced Techniques & Tools for Software Evolution (SATToSE 2020), Numéro Vol 2754, 2020, ISSN 1613-0073
Éditeur: CEUR Workshop Proceedings CEUR-WS.org

Ultra-Large-Scale Repository Analysis via Graph Compression

Auteurs: P. Boldi, A. Pietri, S. Vigna and S. Zacchiroli
Publié dans: IEEE 27th International Conference on Software Analysis, Evolution and Reengineering (SANER), 2020, Page(s) 184-194, ISSN 1534-5351
Éditeur: IEEE
DOI: 10.1109/saner48275.2020.9054827

A Dataset for GitHub Repository Deduplication

Auteurs: Diomidis Spinellis, Zoe Kotti, Audris Mockus
Publié dans: Proceedings of the 17th International Conference on Mining Software Repositories, 2020, Page(s) 523-527, ISBN 9781450375177
Éditeur: ACM
DOI: 10.1145/3379597.3387496

A Dataset for GitHub Repository Deduplication: Extended Description

Auteurs: Spinellis, Diomidis; Kotti, Zoe; Mockus, Audris
Publié dans: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Numéro 21, 2020
Éditeur: ACM
DOI: 10.5281/zenodo.3740594

The Software Heritage Graph Dataset: Public Software Development Under One Roof

Auteurs: Antoine Pietri, Diomidis Spinellis, Stefano Zacchiroli
Publié dans: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Page(s) 138-142, ISBN 978-1-7281-3412-3
Éditeur: IEEE
DOI: 10.1109/msr.2019.00030

Time Present and Time Past: Analyzing the Evolution of JavaScript Code in the Wild

Auteurs: Dimitris Mitropoulos, Panos Louridas, Vitalis Salis, Diomidis Spinellis
Publié dans: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Page(s) 126-137, ISBN 978-1-7281-3412-3
Éditeur: IEEE
DOI: 10.1109/msr.2019.00029

Standing on Shoulders or Feet? The Usage of the MSR Data Papers

Auteurs: Zoe Kotti, Diomidis Spinellis
Publié dans: 2019 IEEE/ACM 16th International Conference on Mining Software Repositories (MSR), 2019, Page(s) 565-576, ISBN 978-1-7281-3412-3
Éditeur: IEEE
DOI: 10.1109/msr.2019.00085

A Dataset of Enterprise-Driven Open Source Software: Extended Description

Auteurs: Spinellis, Diomidis; Kotti, Zoe; Kravvaritis, Konstantinos; Theodorou, Georgios; Louridas, Panos
Publié dans: MSR '20: Proceedings of the 17th International Conference on Mining Software Repositories, Numéro 18, 2020
Éditeur: Association for Computing Machinery
DOI: 10.5281/zenodo.3742854

Type4Py: Practical Deep Similarity Learning-Based Type Inference for Python

Auteurs: Mir, Amir M.; Latoskinas, Evaldas; Proksch, Sebastian; Gousios, Georgios
Publié dans: ICSE '22: Proceedings of the 44th International Conference on Software Engineering, Numéro 16, 2022
Éditeur: Association for Computing Machinery
DOI: 10.48550/arxiv.2101.04470

Peer reviewed articles (4)

Can we trust tests to automate dependency updates? A case study ofJava Projects

Auteurs: Joseph Hejderup, Georgios Gousios
Publié dans: Journal of Systems and Software, 2022, ISSN 0164-1212
Éditeur: Elsevier BV
DOI: 10.1016/j.jss.2021.111097

PDGuard: an architecture for the control and secure processing of personal data

Auteurs: Dimitris Mitropoulos, Thodoris Sotiropoulos, Nikos Koutsovasilis, Diomidis Spinellis
Publié dans: International Journal of Information Security, Numéro 19/4, 2020, Page(s) 479-498, ISSN 1615-5262
Éditeur: Springer Verlag
DOI: 10.1007/s10207-019-00468-5

Präzi: From Package-based to Call-based Dependency Networks

Auteurs: Joseph Hejderup, Moritz Beller, Konstantinos Triantafyllou, Georgios Gousios
Publié dans: Empirical Software Engineering, 2022, ISSN 1382-3256
Éditeur: Kluwer Academic Publishers
DOI: 10.1007/s10664-021-10071-9

Fine-Grained Network Analysis for Modern Software Ecosystems

Auteurs: Paolo Boldi; Georgios Gousios
Publié dans: Transactions on Internet Technology, Numéro 14, 2020, ISSN 1533-5399
Éditeur: Association for Computing Machinary, Inc.
DOI: 10.1145/3418209

Book chapters (1)

Mime Artist: Bypassing Whitelisting for the Web with JavaScript Mimicry Attacks

Auteurs: Stefanos Chaliasos, George Metaxopoulos, George Argyros, Dimitris Mitropoulos
Publié dans: Computer Security – ESORICS 2019 - 24th European Symposium on Research in Computer Security, Luxembourg, September 23–27, 2019, Proceedings, Part II, Numéro 11736, 2019, Page(s) 565-585, ISBN 978-3-030-29961-3
Éditeur: Springer International Publishing
DOI: 10.1007/978-3-030-29962-0_27