On the public citation graph

Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories

https://doi.org/10.1145/3472811
0 signed · 50 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/978-1-4419-6967-5_6openalex-snapshot
Modeling the Security Ecosystem - The Dynamics of (In)Security
inferredcites →https://doi.org/10.1007/978-3-030-22888-0_13openalex-snapshot
A Double-Edged Sword? Software Reuse and Potential Security Vulnerabilities
inferredcites →https://doi.org/10.1007/978-3-642-21347-2_16openalex-snapshot
On the Extent and Nature of Software Reuse in Open Source Java Projects
inferredcites →https://doi.org/10.1007/s10664-014-9325-9openalex-snapshot
How the Apache community upgrades dependencies: an evolutionary study
inferredcites →https://doi.org/10.1007/s10664-017-9521-5openalex-snapshot
Do developers update their library dependencies?
inferredcites →https://doi.org/10.1007/s10664-017-9589-yopenalex-snapshot
An empirical comparison of dependency network evolution in seven software packaging ecosystems
inferredcites →https://doi.org/10.1007/s10664-019-09792-9openalex-snapshot
On the impact of using trivial packages: an empirical case study on npm and PyPI
inferredcites →https://doi.org/10.1007/s10664-020-09830-xopenalex-snapshot
Detection, assessment and mitigation of vulnerabilities in open source dependencies
inferredcites →https://doi.org/10.1007/s11623-006-0164-8openalex-snapshot
Open Web Application Security Project
inferredcites →https://doi.org/10.1016/j.scico.2016.01.005openalex-snapshot
Tracing known security vulnerabilities in software repositories – A Semantic Web enabled modeling approach
inferredcites →https://doi.org/10.1109/2.789755openalex-snapshot
Managing software productivity and reuse
inferredcites →https://doi.org/10.1109/52.311048openalex-snapshot
Effects of reuse on quality, productivity, and economics
inferredcites →https://doi.org/10.1109/tse.2020.3025443openalex-snapshot
Vuln4Real: A Methodology for Counting Actually Vulnerable Dependencies
inferredcites →https://doi.org/10.1145/3196398.3196401openalex-snapshot
On the impact of security vulnerabilities in the npm package dependency network
inferredcites →https://doi.org/10.1145/3382494openalex-snapshot
Proceedings of the 14th ACM / IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)
inferredcites →https://doi.org/10.1145/3418209openalex-snapshot
Fine-Grained Network Analysis for Modern Software Ecosystems
inferredcites →https://doi.org/10.5555/2337223.2337314openalex-snapshot
A large scale exploratory analysis of software vulnerability life cycles

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1007/978-3-031-36060-2_8openalex-snapshot
The GitHub Development Workflow Automation Ecosystems
inferred← citeshttps://doi.org/10.1007/978-3-032-04288-0_22openalex-snapshot
Cybersecurity Vulnerabilities Management for Small and Medium Enterprises
inferred← citeshttps://doi.org/10.1007/978-3-032-08649-5_9openalex-snapshot
Structural and Connectivity Patterns in the Maven Central Software Dependency Network
inferred← citeshttps://doi.org/10.1007/s10664-024-10448-6openalex-snapshot
VulNet: Towards improving vulnerability management in the Maven ecosystem
inferred← citeshttps://doi.org/10.1007/s10664-024-10563-4openalex-snapshot
An extended study of syntactic breaking changes in the wild
inferred← citeshttps://doi.org/10.1007/s10664-025-10648-8openalex-snapshot
Opportunities and security risks of technical leverage: A replication study on the NPM ecosystem
inferred← citeshttps://doi.org/10.1016/j.knosys.2026.115336openalex-snapshot
CLMDA:Cross language vulnerability detection based on multimodal learning and domain adaptation
inferred← citeshttps://doi.org/10.1109/aqtr70159.2026.11577868openalex-snapshot
Human-Certified Module Repositories for the AI Age
inferred← citeshttps://doi.org/10.1109/icecet63943.2025.11472027openalex-snapshot
Defending Against Distributed Denial of Service (DDoS) Attacks: A Case Study of CrowdStrike’s Role in Modern Cyber Warfare
inferred← citeshttps://doi.org/10.1109/icse48619.2023.00031openalex-snapshot
UPCY: Safely Updating Outdated Dependencies
inferred← citeshttps://doi.org/10.1109/icsme55016.2022.00029openalex-snapshot
On the Use of GitHub Actions in Software Development Repositories
inferred← citeshttps://doi.org/10.1109/icsme55016.2022.00083openalex-snapshot
Quality Analysis of iOS Applications with Focus on Maintainability and Security
inferred← citeshttps://doi.org/10.1109/icsme58944.2024.00016openalex-snapshot
Maven Unzipped: Exploring the Impact of Library Packaging on the Ecosystem
inferred← citeshttps://doi.org/10.1109/mobilsoft59058.2023.00015openalex-snapshot
Vulnerability Propagation in Package Managers Used in iOS Development
inferred← citeshttps://doi.org/10.1109/msr59073.2023.00028openalex-snapshot
DGMF: Fast Generation of Comparable, Updatable Dependency Graphs for Software Repositories
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00051openalex-snapshot
Insights into Vulnerability Trends in Maven Artifacts: Recurrence, Popularity, and User Behavior
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00060openalex-snapshot
Out of Sight, Still at Risk: The Lifecycle of Transitive Vulnerabilities in Maven
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00063openalex-snapshot
The Ripple Effect of Vulnerabilities in Maven Central: Prevalence, Propagation, and Mitigation Challenges
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00064openalex-snapshot
Tracing Vulnerabilities in Maven: A Study of CVE lifecycles and Dependency Networks
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00093openalex-snapshot
MARIN: A Research-Centric Interface for Querying Software Artifacts on Maven Repositories
inferred← citeshttps://doi.org/10.1145/3597503.3639583openalex-snapshot
Exploiting Library Vulnerability via Migration Based Automating Test Generation
inferred← citeshttps://doi.org/10.1145/3617555.3617872openalex-snapshot
Large Scale Study of Orphan Vulnerabilities in the Software Supply Chain
inferred← citeshttps://doi.org/10.1145/3643764openalex-snapshot
AROMA: Automatic Reproduction of Maven Artifacts
inferred← citeshttps://doi.org/10.1145/3658644.3691553openalex-snapshot
FEAST'24: Sixth Workshop on Forming an Ecosystem Around Software Transformation
inferred← citeshttps://doi.org/10.1145/3661167.3661231openalex-snapshot
Analyzing the Accessibility of GitHub Repositories for PyPI and NPM Libraries
inferred← citeshttps://doi.org/10.1145/3689937.3695792openalex-snapshot
SoK: Software Debloating Landscape and Future Directions
inferred← citeshttps://doi.org/10.1145/3793302.3793309openalex-snapshot
InEx-Bug: A Human Annotated Dataset of Intrinsic and Extrinsic Bugs in the NPM Ecosystem
inferred← citeshttps://doi.org/10.1145/3832274openalex-snapshot
avaCGs: Version-Aware Call Graphs for Efficient Version-Range Queries
inferred← citeshttps://doi.org/10.1145/3832783.3837552openalex-snapshot
Implicit, Yet Impactful: Understanding Hidden Dependencies in Java Projects
inferred← citeshttps://doi.org/10.36227/techrxiv.20088539openalex-snapshot
Analysis of Dependency Networks of Package Managers Used in iOS Development
inferred← citeshttps://doi.org/10.36227/techrxiv.20088539.v1openalex-snapshot
Analysis of Dependency Networks of Package Managers Used in iOS Development
inferred← citeshttps://doi.org/10.62154/ajastr.2026.023.01019openalex-snapshot
AI-Driven Software Supply Chain Security and Risk Assessment
inferred← citeshttps://doi.org/10.7717/peerj-cs.2617openalex-snapshot
The impact of new package managers on the library dependency ecosystem
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.