Technical leverage analysis in the Python ecosystem

Präzi: from package-based to call-based dependency networks

(2022) Joseph Hejderup et al.   EMPIRICAL SOFTWARE ENGINEERING

“Free” as in Freedom to Protest?

(2022) Fabio Massacci et al.   IEEE SECURITY & PRIVACY

A comprehensive study of bloated dependencies in the Maven ecosystem

(2021) César Soto-Valero et al.   EMPIRICAL SOFTWARE ENGINEERING

Out of sight, out of mind? How vulnerable dependencies affect open-source projects

(2021) Gede Artha Azriadi Prana et al.   EMPIRICAL SOFTWARE ENGINEERING

The Work‐Averse Cyberattacker Model: Theory and Evidence from Two Million Attack Signatures

(2021) Luca Allodi et al.   RISK ANALYSIS

Software reuse cuts both ways: An empirical analysis of its relationship with security vulnerabilities

(2020) Antonios Gkortzis et al.   JOURNAL OF SYSTEMS AND SOFTWARE

Technical Debt and Firm Performance

(2020) Rajiv Banker et al.   MANAGEMENT SCIENCE

Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies

(2020) Ivan Pashchenko et al.   IEEE TRANSACTIONS ON SOFTWARE ENGINEERING

An empirical comparison of dependency network evolution in seven software packaging ecosystems

(2018) Alexandre Decan et al.   EMPIRICAL SOFTWARE ENGINEERING

Managing technical debt

(2012) Eric Allman   COMMUNICATIONS OF THE ACM

An Attack Surface Metric

(2010) Pratyusa K. Manadhata et al.   IEEE TRANSACTIONS ON SOFTWARE ENGINEERING