research
∙
09/18/2021
SōjiTantei: Function-Call Reachability Detection of Vulnerable Code for npm Packages
It has become common practice for software projects to adopt third-party...
share
research
∙
04/04/2021
Code Reviews with Divergent Review Scores: An Empirical Study of the OpenStack and Qt Communities
Code review is a broadly adopted software quality practice where develop...
research
∙
05/22/2020
DevReplay: Automatic Repair with Editable Fix Pattern
Static analysis tools, or linters, detect violation of source code conve...
research
∙
07/08/2019
On The Lag of Library Vulnerability Updates: An Investigation into the Repackage and Delivery of Security Fixes Within The npm JavaScript Ecosystem
Vulnerabilities in third-party libraries is a growing concern for the so...
research
∙
06/27/2018
The Impact of Human Factors on the Participation Decision of Reviewers in Modern Code Review
Modern Code Review (MCR) plays a key role in software quality practices....
research
∙
06/20/2018
The Impact of IR-based Classifier Configuration on the Performance and the Effort of Method-Level Bug Localization
Context: IR-based bug localization is a classifier that assists develope...
research
∙
02/23/2018
