On the public citation graph
Dependency-Induced Waste in Continuous Integration: An Empirical Study of Unused Dependencies in the npm Ecosystem
0 signed · 79 inferred · view as graph
Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.
Is this your work? Sign in with ORCID and put your name on the
claims that are yours.
Reference health. See whether every reference in this work resolves to a
known work and none has been retracted — and get a dated CiteStamped
badge you can embed.
What this work says
Outgoing claims: the papers this work cites, builds on, or argues with.
inferredcites →https://doi.org/10.1002/smr.2157openalex-snapshot
A formal framework for measuring technical lag in component repositories — and its application to npm
inferredcites →https://doi.org/10.1007/978-3-030-22888-0_13openalex-snapshot
A Double-Edged Sword? Software Reuse and Potential Security Vulnerabilities
inferredcites →https://doi.org/10.1007/s10664-014-9325-9openalex-snapshot
How the Apache community upgrades dependencies: an evolutionary study
inferredcites →https://doi.org/10.1007/s10664-017-9512-6openalex-snapshot
Curating GitHub for engineered software projects
inferredcites →https://doi.org/10.1007/s10664-017-9521-5openalex-snapshot
Do developers update their library dependencies?
inferredcites →https://doi.org/10.1007/s10664-017-9589-yopenalex-snapshot
An empirical comparison of dependency network evolution in seven software packaging ecosystems
inferredcites →https://doi.org/10.1007/s10664-019-09695-9openalex-snapshot
An empirical study of the long duration of continuous integration builds
inferredcites →https://doi.org/10.1007/s10664-020-09914-8openalex-snapshot
A comprehensive study of bloated dependencies in the Maven ecosystem
inferredcites →https://doi.org/10.1007/s10664-022-10278-4openalex-snapshot
Empirical analysis of security vulnerabilities in Python packages
inferredcites →https://doi.org/10.1016/j.infsof.2020.106392openalex-snapshot
Predicting continuous integration build failures using evolutionary search
inferredcites →https://doi.org/10.1016/j.jss.2021.111097openalex-snapshot
Can we trust tests to automate dependency updates? A case study of Java Projects
inferredcites →https://doi.org/10.1016/j.jss.2022.111292openalex-snapshot
Which builds are really safe to skip? Maximizing failure observation for build selection in continuous integration
inferredcites →https://doi.org/10.1016/j.jss.2023.111827openalex-snapshot
On the outdatedness of workflows in the GitHub Actions ecosystem
inferredcites →https://doi.org/10.1109/ase.2017.8115621openalex-snapshot
Can automated pull requests encourage software developers to upgrade out-of-date dependencies?
inferredcites →https://doi.org/10.1109/ase56229.2023.00030openalex-snapshot
Repeated Builds During Code Review: An Empirical Study of the OpenStack Community
inferredcites →https://doi.org/10.1109/asew.2015.21openalex-snapshot
When It Breaks, It Breaks: How Ecosystem Developers Reason about the Stability of Dependencies
inferredcites →https://doi.org/10.1109/esem.2017.23openalex-snapshot
Change-Aware Build Prediction Model for Stall Avoidance in Continuous Integration
inferredcites →https://doi.org/10.1109/esem.2019.8870152openalex-snapshot
Continuous Integration Theater
inferredcites →https://doi.org/10.1109/icse.2009.5070503openalex-snapshot
Predicting build failures using social network analysis on developer communication
inferredcites →https://doi.org/10.1109/icse.2015.34openalex-snapshot
Automated Decomposition of Build Targets
inferredcites →https://doi.org/10.1109/icse43902.2021.00121openalex-snapshot
Containing Malicious Package Updates in npm with a Lightweight Permission System
inferredcites →https://doi.org/10.1109/icsme.2018.00050openalex-snapshot
On the Evolution of Technical Lag in the npm Package Dependency Network
inferredcites →https://doi.org/10.1109/icsme52107.2021.00056openalex-snapshot
The Used, the Bloated, and the Vulnerable: Reducing the Attack Surface of an Industrial Application
inferredcites →https://doi.org/10.1109/icst.2019.00055openalex-snapshot
Efficient Automated Decomposition of Build Targets at Large-Scale
inferredcites →https://doi.org/10.1109/ms.2023.3243858openalex-snapshot
On the Usage of New JavaScript Features Through Transpilers: The Babel Case
inferredcites →https://doi.org/10.1109/msr.2015.77openalex-snapshot
A Data Set for Social Diversity Studies of GitHub Teams
inferredcites →https://doi.org/10.1109/msr.2019.00059openalex-snapshot
The Emergence of Software Diversity in Maven Central
inferredcites →https://doi.org/10.1109/msr.2019.00061openalex-snapshot
Dependency Versioning in the Wild
inferredcites →https://doi.org/10.1109/msr52588.2021.00037openalex-snapshot
On the Use of Dependabot Security Pull Requests
inferredcites →https://doi.org/10.1109/msr52588.2021.00074openalex-snapshot
Sampling Projects in GitHub for MSR Studies
inferredcites →https://doi.org/10.1109/msr59073.2023.00042openalex-snapshot
Investigating the Resolution of Vulnerable Dependencies with Dependabot Security Updates
inferredcites →https://doi.org/10.1109/mtd.2012.6225994openalex-snapshot
Searching for build debt: Experiences managing technical debt at Google
inferredcites →https://doi.org/10.1109/mtd.2013.6608678openalex-snapshot
Generating precise dependencies for large software
inferredcites →https://doi.org/10.1109/saner53432.2022.00084openalex-snapshot
On the rise and fall of CI services in GitHub
inferredcites →https://doi.org/10.1109/scam55253.2022.00017openalex-snapshot
Removing dependencies from large software projects: are you really sure?
inferredcites →https://doi.org/10.1109/secdev53368.2022.00027openalex-snapshot
How Do Developers Follow Security-Relevant Best Practices When Using NPM Packages?
inferredcites →https://doi.org/10.1109/tse.2019.2897300openalex-snapshot
Which Commits Can Be CI Skipped?
inferredcites →https://doi.org/10.1109/tse.2019.2941880openalex-snapshot
Studying the Impact of Noises in Build Breakage Data
inferredcites →https://doi.org/10.1109/tse.2019.2952130openalex-snapshot
An Empirical Study of Dependency Downgrades in the npm Ecosystem
inferredcites →https://doi.org/10.1109/tse.2020.2967380openalex-snapshot
A Machine Learning Approach to Improve the Detection of CI Skip Commits
inferredcites →https://doi.org/10.1109/tse.2020.3048335openalex-snapshot
Accelerating Continuous Integration by Caching Environments and Inferring Dependencies
inferredcites →https://doi.org/10.1109/tse.2021.3106247openalex-snapshot
Dependency Smells in JavaScript Projects
inferredcites →https://doi.org/10.1109/tse.2023.3278129openalex-snapshot
Automating Dependency Updates in Practice: An Exploratory Study on GitHub Dependabot
inferredcites →https://doi.org/10.1109/tse.2024.3387840openalex-snapshot
Characterizing Timeout Builds in Continuous Integration
inferredcites →https://doi.org/10.1145/236156.236184openalex-snapshot
How reuse influences productivity in object-oriented systems
inferredcites →https://doi.org/10.1145/2597073.2597074openalex-snapshot
The promises and perils of mining GitHub
inferredcites →https://doi.org/10.1145/2786805.2786850openalex-snapshot
Quality and productivity outcomes relating to continuous integration in GitHub
inferredcites →https://doi.org/10.1145/2970276.2970358openalex-snapshot
Usage, costs, and benefits of continuous integration in open-source projects
inferredcites →https://doi.org/10.1145/3106237.3106270openalex-snapshot
Trade-offs in continuous integration: assurance, security, and flexibility
inferredcites →https://doi.org/10.1145/3196398.3196401openalex-snapshot
On the impact of security vulnerabilities in the npm package dependency network
inferredcites →https://doi.org/10.1145/3238147.3238171openalex-snapshot
Noise and heterogeneity in historical build data: an empirical study of Travis CI
inferredcites →https://doi.org/10.1145/3239235.3268920openalex-snapshot
Vulnerable open source dependencies
inferredcites →https://doi.org/10.1145/3338906.3338922openalex-snapshot
A conceptual replication of continuous integration pain points in the context of Travis CI
inferredcites →https://doi.org/10.1145/3338906.3338925openalex-snapshot
iFixFlakies: a framework for automatically fixing order-dependent flaky tests
inferredcites →https://doi.org/10.1145/3372297.3417232openalex-snapshot
A Qualitative Study of Dependency Management and Its Security Implications
inferredcites →https://doi.org/10.1145/3377811.3380437openalex-snapshot
A cost-efficient approach to building in continuous integration
inferredcites →https://doi.org/10.1145/3379597.3387460openalex-snapshot
Empirical Study of Restarted and Flaky Builds on Travis CI
inferredcites →https://doi.org/10.1145/3379597.3387478openalex-snapshot
Detecting and Characterizing Bots that Commit Code
inferredcites →https://doi.org/10.1145/3447245openalex-snapshot
When and How to Make Breaking Changes
inferredcites →https://doi.org/10.1145/3468264.3468589openalex-snapshot
A longitudinal analysis of bloated Java dependencies
inferredcites →https://doi.org/10.1145/3510003.3510211openalex-snapshot
Lessons from eight years of operational data from a continuous integration service
inferredcites →https://doi.org/10.1145/3551349.3556896openalex-snapshot
Not All Dependencies are Equal: An Empirical Study on Production Dependencies in NPM
inferredcites →https://doi.org/10.1145/3571848openalex-snapshot
On the Discoverability of npm Vulnerabilities in Node.js Projects
inferredcites →https://doi.org/10.1145/3576038openalex-snapshot
HybridCISave : A Combined Build and Test Selection Approach in Continuous Integration
inferredcites →https://doi.org/10.48550/arxiv.2009.09019openalex-snapshot
On the Threat of npm Vulnerable Dependencies in Node.js Applications
inferredcites →https://doi.org/10.48550/arxiv.2205.15086openalex-snapshot
Retrieving and Ranking Relevant JavaScript Technologies from Web Repositories
What points at this work
Incoming claims: where this work appears in other papers’ reference lists and arguments.
inferred← citeshttps://doi.org/10.1016/j.jss.2025.112509openalex-snapshot
Detecting and removing bloated dependencies in CommonJS packages
inferred← citeshttps://doi.org/10.1109/icse-companion66252.2025.00034openalex-snapshot
Mitigating Waste That Tacitly Accrues in Continuous Integration Pipelines
inferred← citeshttps://doi.org/10.1109/msr66628.2025.00059openalex-snapshot
On the Evolution of Unused Dependencies in Java Project Releases: An Empirical Study
inferred← citeshttps://doi.org/10.1145/3691620.3695533openalex-snapshot
Developer-Applied Accelerations in Continuous Integration: A Detection Approach and Catalog of Patterns
inferred← citeshttps://doi.org/10.1145/3757912openalex-snapshot
Build Optimization: A Systematic Literature Review
inferred← citeshttps://doi.org/10.1145/3774748.3787654openalex-snapshot
Trustworthiness of Continuous Integration Practices
inferred← citeshttps://doi.org/10.1145/3793302.3793313openalex-snapshot
OSSGameBench: A Large-Scale Dataset of Development Activities in Open-Source Video Games
inferred← citeshttps://doi.org/10.1145/3795771openalex-snapshot
On the Reruns of GitHub Actions Workflows
inferred← citeshttps://doi.org/10.1145/3832123openalex-snapshot
Guarding the Lifeline: A First Look and Automated Defect Diagnosis for ROS Central Index
inferred← citeshttps://doi.org/10.1145/3832191openalex-snapshot
Automated Dependency Optimization for Artifact-Based Build Systems
inferred← citeshttps://doi.org/10.1145/3832783.3837533openalex-snapshot
Beyond Syntactic Differencing: Semantic-Aware Scheduling for Cross-Configuration Incremental Builds
Editorial review for independent work. ICSAC — the Institute for Complexity
Science and Advanced Computing — runs a structured editorial panel for researchers
publishing outside journals, and publishes on CiteStamp rails. Submission is free
and goes through ORCID: icsacinstitute.org/submit.