As software usage continues to expand, package managers automatically resolve dependencies to construct a dependency graph based on user-specified requirements. These explicitly declared dependencies, known as direct dependencies, receive significant attention in terms of maintainability and security. However, implicit...
Lyuye Zhang, Chengwei Liu, Fang-Yuan Zhang et al.· 0 citations
The results show that multi-SP vulnerabilities are both prevalent and systematically underreported, motivating stronger patch-completeness awareness, improved vulnerability database curation, and relation-aware security tooling.
Fang-Yuan Zhang, Lyuye Zhang, Lingling Fan et al.· 0 citations
SemRef, a framework that combines LLMs with dependency analysis to automatically refine architectures recovered by existing architecture recovery tools, is introduced, which improves accuracy across various metrics and enhances both the accuracy and the comprehension of recovered architectures.
Yi-Ran Zhang, Chengwei Liu, Yu-Qiang Sun et al.· Proceedings of the 2026 IEEE...· 1 citation
This work presents Porting Benchmark, a curated dataset of 1,234 security patch backporting cases spanning cross-version, cross-branch, and cross-repository scenarios, paired with a common evaluation framework and identifies four root-cause categories (missing target API awareness, cross-version semantic mismatch, non-...
Jin-Cheng Yang, Yu-Long Fu, Cheng-Wei Liu et al.· Proceedings of the 41st IEEE...· 1 citation
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
