DI-UMONS : Dépôt institutionnel de l’université de Mons

Recherche transversale
(titres de publication, de périodique et noms de colloque inclus)
2018-09-23 - Colloque/Article dans les actes avec comité de lecture - Anglais - 11 page(s)

Decan Alexandre , Mens Tom , Constantinou Eleni , "On the evolution of technical lag in the npm package dependency network" in IEEE International Conference on Software Maintenance and Evolution, Madrid, Spain, 2018

  • Codes CREF : Informatique appliquée logiciel (DI2570), Informatique mathématique (DI1160), Informatique générale (DI1162)
  • Unités de recherche UMONS : Génie Logiciel (S852)
  • Instituts UMONS : Institut de Recherche sur les Systèmes Complexes (Complexys)

Abstract(s) :

(Anglais) Software packages developed and distributed through package managers extensively depend on other packages. These dependencies are regularly updated, for example to add new features, resolve bugs or fix security issues. In order to take full advantage of the benefits of this type of reuse, developers should keep their dependencies up to date by relying on the latest releases. In practice, however, this is not always possible, and packages lag behind with respect to the latest version of their dependencies. This phenomenon is described as technical lag in the literature. In this paper, we perform an empirical study of technical lag in the npm dependency network by investigating its evolution for over 1.4M releases of 120K packages and 8M dependencies between these releases. We explore how technical lag increases over time, taking into account the release type and the use of package dependency constraints. We also discuss how technical lag can be reduced by relying on the semantic versioning policy.