{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T00:08:35Z","timestamp":1784246915027,"version":"3.55.0"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2025,5,31]],"date-time":"2025-05-31T00:00:00Z","timestamp":1748649600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,5,31]],"date-time":"2025-05-31T00:00:00Z","timestamp":1748649600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Empir Software Eng"],"published-print":{"date-parts":[[2025,9]]},"DOI":"10.1007\/s10664-025-10678-2","type":"journal-article","created":{"date-parts":[[2025,5,31]],"date-time":"2025-05-31T07:20:19Z","timestamp":1748676019000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["PVAC: package version activity categorizer, leveraging semantic versioning in a heterogeneous system"],"prefix":"10.1007","volume":"30","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-1852-3655","authenticated-orcid":false,"given":"Shane K.","family":"Panter","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-8949-9342","authenticated-orcid":false,"given":"Lucas S.","family":"Hindman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5228-4664","authenticated-orcid":false,"given":"Nasir U.","family":"Eisty","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,5,31]]},"reference":[{"key":"10678_CR1","doi-asserted-by":"publisher","unstructured":"Avelino G, Constantinou E, Valente MT, Serebrenik A (2019) On the abandonment and survival of open source projects: an empirical investigation. In: 2019 ACM\/IEEE international symposium on empirical software engineering and measurement (ESEM), IEEE, Porto de Galinhas, Recife, Brazil, pp 1\u201312. https:\/\/doi.org\/10.1109\/ESEM.2019.8870181","DOI":"10.1109\/ESEM.2019.8870181"},{"key":"10678_CR2","doi-asserted-by":"publisher","unstructured":"Cox J, Bouwers E, Eekelen MV, Visser J (2015) Measuring dependency freshness in software systems. In: 2015 IEEE\/ACM 37th IEEE international conference on software engineering, IEEE, Florence, Italy, pp 109\u2013118. https:\/\/doi.org\/10.1109\/ICSE.2015.140","DOI":"10.1109\/ICSE.2015.140"},{"key":"10678_CR3","doi-asserted-by":"publisher","unstructured":"Dann A, Hermann B, Bodden E (2023) UPCY: safely updating outdated dependencies. In: 2023 IEEE\/ACM 45th international conference on software engineering (ICSE), pp 233\u2013244. https:\/\/doi.org\/10.1109\/ICSE48619.2023.00031","DOI":"10.1109\/ICSE48619.2023.00031"},{"key":"10678_CR4","doi-asserted-by":"publisher","unstructured":"Davies J, Zhang H, Nussbaum L, German DM (2010) Perspectives on bugs in the Debian bug tracking system. In: 2010 7th IEEE working conference on mining software repositories (MSR 2010), pp 86\u201389. https:\/\/doi.org\/10.1109\/MSR.2010.5463288","DOI":"10.1109\/MSR.2010.5463288"},{"issue":"6","key":"10678_CR5","doi-asserted-by":"publisher","first-page":"1226","DOI":"10.1109\/TSE.2019.2918315","volume":"47","author":"A Decan","year":"2021","unstructured":"Decan A, Mens T (2021) What do package dependencies tell us about semantic versioning? IEEE Trans Software Eng 47(6):1226\u20131240. https:\/\/doi.org\/10.1109\/TSE.2019.2918315","journal-title":"IEEE Trans Software Eng"},{"key":"10678_CR6","doi-asserted-by":"crossref","unstructured":"Decan A, Mens T, Constantinou E (2018) On the evolution of technical lag in the npm package dependency network. In: 2018 IEEE international conference on software maintenance and evolution (ICSME), IEEE, pp 404\u2013414","DOI":"10.1109\/ICSME.2018.00050"},{"key":"10678_CR7","doi-asserted-by":"publisher","unstructured":"Dietrich J, Pearce D, Stringer J, Tahir A, Blincoe K (2019) Dependency versioning in the wild. In: 2019 IEEE\/ACM 16th international conference on mining software repositories (MSR), pp 349\u2013359. https:\/\/doi.org\/10.1109\/MSR.2019.00061","DOI":"10.1109\/MSR.2019.00061"},{"key":"10678_CR8","doi-asserted-by":"publisher","unstructured":"Dijkers J, Sincic R, Wasankhasit N, Jansen S (2018) Exploring the effect of software ecosystem health on the financial performance of the open source companies. In: Proceedings of the 1st international workshop on software health, association for computing machinery, New York, NY, USA, SoHeal \u201918, pp 48\u201355. https:\/\/doi.org\/10.1145\/3194124.3194126","DOI":"10.1145\/3194124.3194126"},{"key":"10678_CR9","unstructured":"GNU\/Linux D (2014) CVE-2014-6271 GNU Bourne-Again Shell (Bash) \u2018Shellshock\u2019 Vulnerability. https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2014-6271"},{"key":"10678_CR10","doi-asserted-by":"publisher","unstructured":"Goggins S, Lumbard K, Germonprez M (2021) Open source community health: analytical metrics and their corresponding narratives. In: 2021 IEEE\/ACM 4th international workshop on software health in projects, ecosystems and communities (SoHeal), pp 25\u201333. https:\/\/doi.org\/10.1109\/SoHeal52568.2021.00010","DOI":"10.1109\/SoHeal52568.2021.00010"},{"key":"10678_CR11","doi-asserted-by":"publisher","unstructured":"Gonzalez-Barahona JM (2020) Characterizing outdateness with technical lag: an exploratory study. In: Proceedings of the IEEE\/ACM 42nd international conference on software engineering workshops, association for computing machinery, New York, NY, USA, ICSEW\u201920, pp 735\u2013741. https:\/\/doi.org\/10.1145\/3387940.3392202","DOI":"10.1145\/3387940.3392202"},{"key":"10678_CR12","doi-asserted-by":"publisher","unstructured":"Gonzalez-Barahona JM, Sherwood P, Robles G, Izquierdo D (2017) Technical lag in software compilations: measuring how outdated a software deployment is. In: Balaguer F, Di\u00a0Cosmo R, Garrido A, Kon F, Robles G, Zacchiroli S (eds) Open source systems: towards robust practices, vol 496. Springer International Publishing, Cham, pp 182\u2013192. https:\/\/doi.org\/10.1007\/978-3-319-57735-7_17","DOI":"10.1007\/978-3-319-57735-7_17"},{"key":"10678_CR13","doi-asserted-by":"publisher","unstructured":"Guizani M, Castro-Guzman AA, Sarma A, Steinmacher I (2023) Rules of engagement: why and how companies participate in OSS. In: Proceedings of the 45th international conference on software engineering, IEEE Press, Melbourne, Victoria, Australia, ICSE \u201923, pp 2617\u20132629. https:\/\/doi.org\/10.1109\/ICSE48619.2023.00218","DOI":"10.1109\/ICSE48619.2023.00218"},{"key":"10678_CR14","unstructured":"Hertzog R, Mas R (2012) The Debian administrator\u2019s handbook. Freexian"},{"key":"10678_CR15","unstructured":"Jackson I, Schwarz C (2024) Debian policy manual. https:\/\/www.debian.org\/doc\/debian-policy\/ch-controlfields.html#version"},{"issue":"2","key":"10678_CR16","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1007\/s10664-024-10563-4","volume":"30","author":"D Jayasuriya","year":"2025","unstructured":"Jayasuriya D, Ou S, Hegde S, Terragni V, Dietrich J, Blincoe K (2025) An extended study of syntactic breaking changes in the wild. Empir Softw Eng 30(2):4. https:\/\/doi.org\/10.1007\/s10664-024-10563-4","journal-title":"Empir Softw Eng"},{"key":"10678_CR17","doi-asserted-by":"publisher","unstructured":"Jayasuriya D, Terragni V, Dietrich J, Ou S, Blincoe K (2023) Understanding breaking changes in the wild. In: Proceedings of the 32nd ACM SIGSOFT international symposium on software testing and analysis, association for computing machinery, New York, NY, USA, ISSTA 2023, pp 1433\u20131444. https:\/\/doi.org\/10.1145\/3597926.3598147","DOI":"10.1145\/3597926.3598147"},{"key":"10678_CR18","doi-asserted-by":"publisher","DOI":"10.1145\/3702991","author":"D Kong","year":"2024","unstructured":"Kong D, Liu J, Bao L, Lo D (2024) Towards Better Comprehension of Breaking Changes in the NPM Ecosystem. ACM Trans Softw Eng Methodol. https:\/\/doi.org\/10.1145\/3702991","journal-title":"ACM Trans Softw Eng Methodol"},{"key":"10678_CR19","doi-asserted-by":"publisher","unstructured":"Lam P, Dietrich J, Pearce DJ (2020) Putting the semantics into semantic versioning. In: Proceedings of the 2020 ACM SIGPLAN international symposium on new ideas, new paradigms, and reflections on programming and software, association for computing machinery, New York, NY, USA, Onward! 2020, pp 157\u2013179. https:\/\/doi.org\/10.1145\/3426428.3426922","DOI":"10.1145\/3426428.3426922"},{"key":"10678_CR20","doi-asserted-by":"publisher","unstructured":"Legay D, Decan A, Mens T (2020) On package freshness in linux distributions. In: 2020 IEEE international conference on software maintenance and evolution (ICSME), pp 682\u2013686. https:\/\/doi.org\/10.1109\/ICSME46990.2020.00072","DOI":"10.1109\/ICSME46990.2020.00072"},{"key":"10678_CR21","doi-asserted-by":"publisher","unstructured":"Legay D, Decan A, Mens T (2021) A quantitative assessment of package freshness in linux distributions. In: 2021 IEEE\/ACM 4th international workshop on software health in projects, ecosystems and communities (SoHeal), pp 9\u201316. https:\/\/doi.org\/10.1109\/SoHeal52568.2021.00008","DOI":"10.1109\/SoHeal52568.2021.00008"},{"issue":"4","key":"10678_CR22","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1109\/MS.2022.3163011","volume":"39","author":"X Li","year":"2022","unstructured":"Li X, Moreschini S, Pecorelli F, Taibi D (2022) OSSARA: abandonment risk assessment for embedded open source components. IEEE Softw 39(4):48\u20135. https:\/\/doi.org\/10.1109\/MS.2022.3163011","journal-title":"IEEE Softw"},{"key":"10678_CR23","doi-asserted-by":"publisher","unstructured":"Lin\u00e5ker J, Papatheocharous E, Olsson T (2022) How to characterize the health of an Open Source Software project? A snowball literature review of an emerging practice. In: Proceedings of the 18th international symposium on open collaboration, association for computing machinery, New York, NY, USA, OpenSym \u201922, pp 1\u201312. https:\/\/doi.org\/10.1145\/3555051.3555067","DOI":"10.1145\/3555051.3555067"},{"key":"10678_CR24","doi-asserted-by":"publisher","unstructured":"Miller C, K\u00e4stner C, Vasilescu B (2023) \u201cWe Feel Like We\u2019re Winging It:\u201d a study on navigating open-source dependency abandonment. In: Proceedings of the 31st ACM joint european software engineering conference and symposium on the foundations of software engineering, association for computing machinery, New York, NY, USA, ESEC\/FSE 2023, pp 1281\u20131293. https:\/\/doi.org\/10.1145\/3611643.3616293","DOI":"10.1145\/3611643.3616293"},{"key":"10678_CR25","unstructured":"Nguyen R, Holt R (2012) Life and death of software packages: an evolutionary study of Debian. In: Proceedings of the 2012 conference of the center for advanced studies on collaborative research, IBM Corp., USA, CASCON \u201912, pp 192\u2013204"},{"key":"10678_CR26","doi-asserted-by":"publisher","unstructured":"Nussbaum L, Zacchiroli S (2010) The ultimate debian database: consolidating bazaar metadata for quality assurance and data mining. In: 2010 7th IEEE working conference on mining software repositories (MSR 2010), pp 52\u201361. https:\/\/doi.org\/10.1109\/MSR.2010.5463277","DOI":"10.1109\/MSR.2010.5463277"},{"key":"10678_CR27","doi-asserted-by":"publisher","unstructured":"Pinckney D, Cassano F, Guha A, Bell J (2023) A large scale analysis of semantic versioning in NPM. In: 2023 IEEE\/ACM 20th international conference on mining software repositories (MSR), pp 485\u2013497. https:\/\/doi.org\/10.1109\/MSR59073.2023.00073","DOI":"10.1109\/MSR59073.2023.00073"},{"key":"10678_CR28","unstructured":"Preston-Werner T (2024) Semantic Versioning 2.0.0. https:\/\/semver.org\/"},{"key":"10678_CR29","unstructured":"RedHat (2014) CVE-2014-0160 OpenSSL \u2019Heartbleed\u2019 vulnerability. https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2014-0160"},{"key":"10678_CR30","unstructured":"RedHat (2024) CVE-2023-6246 glibc: heap-based buffer overflow. https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2023-6246"},{"key":"10678_CR31","doi-asserted-by":"publisher","unstructured":"Stringer J, Tahir A, Blincoe K, Dietrich J (2020) Technical lag of dependencies in major package managers. In: 2020 27th Asia-pacific software engineering conference (APSEC), pp 228\u2013237. https:\/\/doi.org\/10.1109\/APSEC51365.2020.00031","DOI":"10.1109\/APSEC51365.2020.00031"},{"key":"10678_CR32","doi-asserted-by":"publisher","unstructured":"Tan X, Zhou M (2019) How to communicate when submitting patches: an empirical study of the linux kernel. Proc ACM Hum-Comput Interact 3(CSCW):108:1\u2013108:26. https:\/\/doi.org\/10.1145\/3359210","DOI":"10.1145\/3359210"},{"issue":"8","key":"10678_CR33","doi-asserted-by":"publisher","first-page":"e2157","DOI":"10.1002\/smr.2157","volume":"31","author":"A Zerouali","year":"2019","unstructured":"Zerouali A, Mens T, Gonzalez-Barahona J, Decan A, Constantinou E, Robles G (2019) A formal framework for measuring technical lag in component repositories \u2014 and its application to npm. J Softw Evol Process 31(8):e2157. https:\/\/doi.org\/10.1002\/smr.2157","journal-title":"J Softw Evol Process"},{"issue":"2","key":"10678_CR34","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1007\/s10664-020-09908-6","volume":"26","author":"A Zerouali","year":"2021","unstructured":"Zerouali A, Mens T, Decan A, Gonzalez-Barahona J, Robles G (2021) A multi-dimensional analysis of technical lag in Debian-based Docker images. Empir Softw Eng 26(2):19. https:\/\/doi.org\/10.1007\/s10664-020-09908-6","journal-title":"Empir Softw Eng"},{"key":"10678_CR35","doi-asserted-by":"publisher","unstructured":"Zerouali A, Constantinou E, Mens T, Robles G, Gonz\u00e1lez-Barahona J (2018) An empirical analysis of technical lag in npm package dependencies. In: Capilla R, Gallina B, Cetina C (eds) New opportunities for software reuse, vol 10826. Springer International Publishing, Cham, pp 95\u2013110. https:\/\/doi.org\/10.1007\/978-3-319-90421-4_6","DOI":"10.1007\/978-3-319-90421-4_6"}],"container-title":["Empirical Software Engineering"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10678-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10664-025-10678-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10664-025-10678-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,9,13]],"date-time":"2025-09-13T08:53:48Z","timestamp":1757753628000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10664-025-10678-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,5,31]]},"references-count":35,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2025,9]]}},"alternative-id":["10678"],"URL":"https:\/\/doi.org\/10.1007\/s10664-025-10678-2","relation":{},"ISSN":["1382-3256","1573-7616"],"issn-type":[{"value":"1382-3256","type":"print"},{"value":"1573-7616","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,5,31]]},"assertion":[{"value":"20 May 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 May 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that this paper was not written by any AI or machine learning models.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"AI Usage"}},{"value":"None","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}},{"value":"Not Applicable","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"Not Applicable","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed consent"}},{"value":"Not Applicable","order":6,"name":"Ethics","group":{"name":"EthicsHeading","label":"Clinical trial number"}}],"article-number":"118"}}