An empirical comparison of dependency issues in OSS packaging ecosystems

Nearly every popular programming language comes with one or more open source software packaging ecosystem(s), containing a large collection of interdependent software packages developed in that programming language. Such packaging ecosystems are extremely useful for their respective software develop...

Full description

Saved in:
Bibliographic Details
Published in2017 IEEE 24th International Conference on Software Analysis, Evolution and Reengineering (SANER) pp. 2 - 12
Main Authors Decan, Alexandre, Mens, Tom, Claes, Maelick
Format Conference Proceeding
LanguageEnglish
Published IEEE 01.02.2017
Subjects
Online AccessGet full text

Cover

Loading…
More Information
Summary:Nearly every popular programming language comes with one or more open source software packaging ecosystem(s), containing a large collection of interdependent software packages developed in that programming language. Such packaging ecosystems are extremely useful for their respective software development community. We present an empirical analysis of how the dependency graphs of three large packaging ecosystems (npm, CRAN and RubyGems) evolve over time. We study how the existing package dependencies impact the resilience of the three ecosystems over time and to which extent these ecosystems suffer from issues related to package dependency updates. We analyse specific solutions that each ecosystem has put into place and argue that none of these solutions is perfect, motivating the need for better tools to deal with package dependency update problems.
DOI:10.1109/SANER.2017.7884604