kirancodes.me
To Proof Maintenance & Beyond!
ASE 2022

Towards Understanding Third-party Library Dependency in C/C++ Ecosystem

Wei Tang, Zhengzi Xu, Chengwei Liu, Jiahui Wu, Shouguo Yang, Yi Li, Ping Luo, Yang Liu

PDFDOI 10.1145/3551349.3560432dblp

Abstract

Third-party libraries (TPLs) are frequently reused in software to reduce development cost and the time to market. However, external library dependencies may introduce vulnerabilities into host applications. The issue of library dependency has received considerable critical attention. Many package managers, such as Maven, Pip, and NPM, are proposed to manage TPLs. Moreover, a significant amount of effort has been put into studying dependencies in language ecosystems like Java, Python, and JavaScript except C/C++. Due to the lack of a unified package manager for C/C++, existing research has only few understanding of TPL dependencies in the C/C++ ecosystem, especially at large scale.

BibTeX
@inproceedings{Tang-al:ASE22,
  author    = {Wei Tang and
               Zhengzi Xu and
               Chengwei Liu and
               Jiahui Wu and
               Shouguo Yang and
               Yi Li and
               Ping Luo and
               Yang Liu},
  title     = {Towards Understanding Third-party Library Dependency in {C/C++} Ecosystem},
  booktitle = {ASE},
  pages     = {106:1--106:12},
  publisher = {{ACM}},
  year      = {2022},
}

Related papers