The interplay and constraints of asynchronous evolution in open-source software libraries, along with build environment restrictions and complex dependency configurations, result in five common dependency issues. These include compatibility problems arising from API breaking changes, violations of open-source license agreements, conflicts due to multiple library versions, bloated dependencies with excessive or redundant components, and the propagation of vulnerable dependencies through outdated dependencies. Figure 3.1 depicts the causal relationship between evolutionary behaviors and these dependency issues. Extensive research has been conducted to understand and address these issues, emphasizing the importance of careful dependency management, resolving conflicts, and actively updating dependencies to ensure software functionality, compliance, performance, and security.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Common Types of Dependency Issues

  • Ying Wang,
  • Shing-Chi Cheung,
  • Hai Yu,
  • Zhiliang Zhu

摘要

The interplay and constraints of asynchronous evolution in open-source software libraries, along with build environment restrictions and complex dependency configurations, result in five common dependency issues. These include compatibility problems arising from API breaking changes, violations of open-source license agreements, conflicts due to multiple library versions, bloated dependencies with excessive or redundant components, and the propagation of vulnerable dependencies through outdated dependencies. Figure 3.1 depicts the causal relationship between evolutionary behaviors and these dependency issues. Extensive research has been conducted to understand and address these issues, emphasizing the importance of careful dependency management, resolving conflicts, and actively updating dependencies to ensure software functionality, compliance, performance, and security.