Title: Analyzing Maintenance Activities of Software Libraries Show Chinese title

Title: 分析软件库的维护活动

Abstract: Industrial applications heavily integrate open-source software libraries nowadays. Beyond the benefits that libraries bring, they can also impose a real threat in case a library is affected by a vulnerability but its community is not active in creating a fixing release. Therefore, I want to introduce an automatic monitoring approach for industrial applications to identify open-source dependencies that show negative signs regarding their current or future maintenance activities. Since most research in this field is limited due to lack of features, labels, and transitive links, and thus is not applicable in industry, my approach aims to close this gap by capturing the impact of direct and transitive dependencies in terms of their maintenance activities. Automatically monitoring the maintenance activities of dependencies reduces the manual effort of application maintainers and supports application security by continuously having well-maintained dependencies. Show Chinese abstract

Abstract: 如今，工业应用大量集成了开源软件库。除了这些库带来的好处外，如果某个库受到漏洞影响而其社区没有积极发布修复版本，则它们也可能带来真正的威胁。因此，我想要介绍一种自动监控方法，用于识别工业应用中的开源依赖项，这些依赖项在当前或未来的维护活动中显示出负面迹象。由于该领域的大多数研究受限于缺乏特征、标签和传递链接，因此在工业上不适用，我的方法旨在通过捕捉直接和传递依赖项的维护活动影响来弥补这一差距。自动监控依赖项的维护活动减少了应用程序维护者的手动工作，并通过持续拥有维护良好的依赖项来支持应用程序的安全性。