Zenodo.org will be unavailable for 2 hours on September 29th from 06:00-08:00 UTC. See announcement.

Thesis Open Access

Measuring the degree of library dependency

Nuria Bruch Tarrega

DataCite XML Export

<?xml version='1.0' encoding='utf-8'?>
<resource xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://datacite.org/schema/kernel-4" xsi:schemaLocation="http://datacite.org/schema/kernel-4 http://schema.datacite.org/meta/kernel-4.1/metadata.xsd">
  <identifier identifierType="DOI">10.5281/zenodo.4280883</identifier>
      <creatorName>Nuria Bruch Tarrega</creatorName>
      <affiliation>University of Amsterdam</affiliation>
    <title>Measuring the degree of library dependency</title>
    <subject>model dependency degree, transitive dependency, maven</subject>
    <contributor contributorType="Supervisor">
      <contributorName>Ana-Maria Oprescu</contributorName>
      <nameIdentifier nameIdentifierScheme="ORCID" schemeURI="http://orcid.org/">0000-0001-6376-0750</nameIdentifier>
      <affiliation>University of Amsterdam</affiliation>
    <contributor contributorType="Supervisor">
      <contributorName>Lodewijk Bergmans</contributorName>
      <affiliation>Software Improvement Group</affiliation>
    <contributor contributorType="Supervisor">
      <contributorName>Miroslav Zivkovic</contributorName>
      <affiliation>Software Improvement Group</affiliation>
    <date dateType="Issued">2020-11-06</date>
  <resourceType resourceTypeGeneral="Text">Thesis</resourceType>
    <alternateIdentifier alternateIdentifierType="url">https://zenodo.org/record/4280883</alternateIdentifier>
    <relatedIdentifier relatedIdentifierType="DOI" relationType="IsVersionOf">10.5281/zenodo.4280882</relatedIdentifier>
    <rights rightsURI="https://creativecommons.org/licenses/by/4.0/legalcode">Creative Commons Attribution 4.0 International</rights>
    <rights rightsURI="info:eu-repo/semantics/openAccess">Open Access</rights>
    <description descriptionType="Abstract">&lt;p&gt;The usage of libraries, both commercial and open-source, provides the implementation of certain functionalities and is a widespread practice among developers. The usage of these libraries allows developers to avoid duplicating code by reusing it instead. However, when a developer uses a library in a software product, this creates a dependency. This dependency may result in transitive dependencies when the library depends on other libraries. The dependencies created when reusing a library can also carry problems &amp;mdash; if a library has a security issue, it can be propagated to the software product, which depends on it, directly or indirectly. To deal with dependencies, developers can use package managers, which allow them to install and update the libraries they use. However, these package managers generally do a simple evaluation of the dependencies: either there is a dependency or not. Hence, a detailed evaluation of the dependencies is missing, which could help developers deal with vulnerabilities, breaking changes, and deprecated dependencies. In this thesis, we propose a model for software dependencies, which can help to provide a fine-grained evaluation of them. The model includes three types of metrics: coupling, coverage, and usage per class. For each metric in the model, we provide a formal definition and a theoretical validation by proving the metrics&amp;rsquo; properties. We additionally implemented a proof-of-concept tool that, given a library from the Maven Central Repository, calculates the metrics of the model for each of the dependencies using bytecode analysis. Moreover, the proof-of-concept includes a visualization of the dependency tree, including the calculated metrics. Finally, we conducted experiments to validate the model, the implementation of the proof-of-concept, and the visualization. The experiments include interviews with 15 professional developers who evaluated the clarity and actionability of the model&amp;rsquo;s metrics and the proposed visualizations.&lt;/p&gt;</description>
All versions This version
Views 177177
Downloads 132132
Data volume 287.1 MB287.1 MB
Unique views 175175
Unique downloads 124124


Cite as